DNSSEC Debugger - uniroma1.it

Domain Name:

Time: 2024-12-08 18:11:00 UTC

Analyzing DNSSEC problems for uniroma1.it

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to k.root-servers.net for ./DNSKEY
	Received 864 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 864 octets ;; HEADER SECTION ;; id = 6449 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAc0SunbHdS0KFEyZbYII/+tzsrNzIwurKxmJA+0fhAYlTPA/5LrMGkGEqvvufzM0w/CaVtdm 5eWkZYQcsoSKT5bycx0C4jxnLEb3ZiZUQSqu1rWcKGF1fj/GyDWLkOu7a5h3el+gPmglj/4l4V31 ugNYfqYq84vCB+3D6Sodrd+85KyonnzWJ8cS7aZ57x0d0sGqsAKA+6tRnIXjVNVe7Ro5xJuz8IR7 rOxdzfuRLriN+Z00EL3U5E7s9SISU/hDh7Q7N70W1mLMc1o2+tCRGjEWrw4wmCWMzc1kegbLES/d UOWFvPjJz0+AEeWDhd2GqtXk02BzAhdfeIAEIv68FTs= ) ; keytag 61050 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20241221000000 20241130000000 20326 . Afur/CKj8hp6NpFXod3vI0DPq0Mfb6dXrdNvnqjVxElNIogO2Tnj660bCYKD/39HjMAGn1JhfXN1 8A1bSvEJO/qkfErGf0VtlhgsdjPpzlOufhu/hIkA1TTanRzQNa9rYvPcwdwHgVTA3C4t13wiRMwR spG1W22Mcw9+hnkH/MAcXcbD2hxepUTxxjM7JvoZPl6om973u1rvVnk1RIEUe6wR51OhYNoLe/mj sy5BjM/uDXnHYTYLdau9gYElsvHV9Dogs0Alvgf6kK+z21LeOjjOdziP6xgF0vbNPVR8ovJbvw14 NEwAY4LOaa2XXocwqOjr8URoMrNa/zKP66Othw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAc0SunbHdS0KFEyZbYII/+tzsrNzIwurKxmJA+0fhAYlTPA/5LrMGkGEqvvufzM0w/CaVtdm 5eWkZYQcsoSKT5bycx0C4jxnLEb3ZiZUQSqu1rWcKGF1fj/GyDWLkOu7a5h3el+gPmglj/4l4V31 ugNYfqYq84vCB+3D6Sodrd+85KyonnzWJ8cS7aZ57x0d0sGqsAKA+6tRnIXjVNVe7Ro5xJuz8IR7 rOxdzfuRLriN+Z00EL3U5E7s9SISU/hDh7Q7N70W1mLMc1o2+tCRGjEWrw4wmCWMzc1kegbLES/d UOWFvPjJz0+AEeWDhd2GqtXk02BzAhdfeIAEIv68FTs= ) ; keytag 61050`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20241221000000 20241130000000 20326 . Afur/CKj8hp6NpFXod3vI0DPq0Mfb6dXrdNvnqjVxElNIogO2Tnj660bCYKD/39HjMAGn1JhfXN1 8A1bSvEJO/qkfErGf0VtlhgsdjPpzlOufhu/hIkA1TTanRzQNa9rYvPcwdwHgVTA3C4t13wiRMwR spG1W22Mcw9+hnkH/MAcXcbD2hxepUTxxjM7JvoZPl6om973u1rvVnk1RIEUe6wR51OhYNoLe/mj sy5BjM/uDXnHYTYLdau9gYElsvHV9Dogs0Alvgf6kK+z21LeOjjOdziP6xgF0vbNPVR8ovJbvw14 NEwAY4LOaa2XXocwqOjr8URoMrNa/zKP66Othw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=61050 is now in the chain-of-trust
	Query to m.root-servers.net for uniroma1.it/A
	Received 764 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 764 octets ;; HEADER SECTION ;; id = 52952 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uniroma1.it. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) it. 172800 IN NS dns.nic.it. it. 172800 IN NS nameserver.cnr.it. it. 172800 IN NS m.dns.it. it. 172800 IN NS a.dns.it. it. 172800 IN NS r.dns.it. it. 172800 IN NS d.dns.it. it. 86400 IN DS ( 41901 10 2 47f7f7ba21e48591f6172eed13e35b66b93ad9f2880fc9bada64f68ce28ebb90 ) it. 86400 IN RRSIG ( DS 8 1 86400 20241221170000 20241208160000 61050 . UkvCOAGy26zwl4Upy3c9CimmtBWk0BJ4LMd1STDTgjasXJcaA+2ZrmMLtNpVdoMthlMTOpERuM/m X7yZdAei569pyiO9AYBUMWVMHpr4dZSSQhpjBisk4AHAYvsmRkEqv9smEGiYStVd+pBlQ1WmJWzw 26JYV2VQdHHo7gw856FWhbOcarLdYg+D4ftwSJ3y5VpIcpb0F0DddLqzpertrzZnLFDQjiZAfxis MY9DN3r+XixLIvhnRJDuHYWSwEyz8+wXDSA5RQcxFdQ7mZng3aQB/hpaHBRYoVz4ddy+1SxosiWx 0RepV2RzVpxr+KIIaZU69HUdkJ4MJJsHEZxlYg== ) ;; ADDITIONAL SECTION (13 records) nameserver.cnr.it. 172800 IN A 194.119.192.34 dns.nic.it. 172800 IN A 192.12.192.5 r.dns.it. 172800 IN A 193.206.141.46 m.dns.it. 172800 IN A 217.29.76.4 d.dns.it. 172800 IN A 45.142.220.39 a.dns.it. 172800 IN A 194.0.16.215 nameserver.cnr.it. 172800 IN AAAA 2a00:1620:c0:220:194:119:192:34 dns.nic.it. 172800 IN AAAA 2a00:d40:1:1::5 r.dns.it. 172800 IN AAAA 2001:760:ffff:ffff::ca m.dns.it. 172800 IN AAAA 2001:1ac0:0:200:0:a5d1:6004:2 d.dns.it. 172800 IN AAAA 2a0e:dbc0::39 a.dns.it. 172800 IN AAAA 2001:678:12:0:194:0:16:215 ;; { "EDNS-VERSION": 0 }
	Query to f.root-servers.net for it/DNSKEY
	Received 749 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 749 octets ;; HEADER SECTION ;; id = 50870 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; it. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) it. 172800 IN NS a.dns.it. it. 172800 IN NS d.dns.it. it. 172800 IN NS m.dns.it. it. 172800 IN NS r.dns.it. it. 172800 IN NS dns.nic.it. it. 172800 IN NS nameserver.cnr.it. it. 86400 IN DS ( 41901 10 2 47f7f7ba21e48591f6172eed13e35b66b93ad9f2880fc9bada64f68ce28ebb90 ) it. 86400 IN RRSIG ( DS 8 1 86400 20241221050000 20241208040000 61050 . yEf61fsYyEixYlEVkW5StY0WpxQBxF6iu6QdbSFw5I6wj1HbBqaMEqxWuZyKLRFqQFbGguZfU/UA 1g07T1gsRPEn+mNkaDKgcPlM0l4XgiSM0INw4ljDnjbfmJlxb4tkKlbOssSIAKYB2HQTLdZzOuuv fdKwtkG8eRjEZb3RC0lEMbCtjX+dt1DjOIO8e3Qn3uPbBbaYTF7p7Vp5iLKnVkAB6J9iPz1Ay3bj POCe8apAqEvAJWlfpJF0NRnjr6Zc1uLV3zMBo5jJVMbxMbMmMj0SsvQ/15+CMa9L5qnNp9XVt3DO pOhs+b4qQhOGoG3oFgoN6JXBI0BAzUJXdmvEow== ) ;; ADDITIONAL SECTION (13 records) a.dns.it. 172800 IN A 194.0.16.215 a.dns.it. 172800 IN AAAA 2001:678:12:0:194:0:16:215 d.dns.it. 172800 IN A 45.142.220.39 d.dns.it. 172800 IN AAAA 2a0e:dbc0::39 m.dns.it. 172800 IN A 217.29.76.4 m.dns.it. 172800 IN AAAA 2001:1ac0:0:200:0:a5d1:6004:2 r.dns.it. 172800 IN A 193.206.141.46 r.dns.it. 172800 IN AAAA 2001:760:ffff:ffff::ca dns.nic.it. 172800 IN A 192.12.192.5 dns.nic.it. 172800 IN AAAA 2a00:d40:1:1::5 nameserver.cnr.it. 172800 IN A 194.119.192.34 nameserver.cnr.it. 172800 IN AAAA 2a00:1620:c0:220:194:119:192:34 ;; { "EDNS-VERSION": 0 }
	Found child zone it

	Checking DS between . and it
	Query to c.root-servers.net for it/DS
	Received 366 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 366 octets ;; HEADER SECTION ;; id = 50414 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; it. IN DS ;; ANSWER SECTION (2 records) it. 86400 IN DS ( 41901 10 2 47f7f7ba21e48591f6172eed13e35b66b93ad9f2880fc9bada64f68ce28ebb90 ) it. 86400 IN RRSIG ( DS 8 1 86400 20241221170000 20241208160000 61050 . UkvCOAGy26zwl4Upy3c9CimmtBWk0BJ4LMd1STDTgjasXJcaA+2ZrmMLtNpVdoMthlMTOpERuM/m X7yZdAei569pyiO9AYBUMWVMHpr4dZSSQhpjBisk4AHAYvsmRkEqv9smEGiYStVd+pBlQ1WmJWzw 26JYV2VQdHHo7gw856FWhbOcarLdYg+D4ftwSJ3y5VpIcpb0F0DddLqzpertrzZnLFDQjiZAfxis MY9DN3r+XixLIvhnRJDuHYWSwEyz8+wXDSA5RQcxFdQ7mZng3aQB/hpaHBRYoVz4ddy+1SxosiWx 0RepV2RzVpxr+KIIaZU69HUdkJ4MJJsHEZxlYg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for it in the . zone
	DS=41901/SHA-256 has algorithm RSASHA512
	Found 1 RRSIGs over DS RRset
	`it. 86400 IN RRSIG ( DS 8 1 86400 20241221170000 20241208160000 61050 . UkvCOAGy26zwl4Upy3c9CimmtBWk0BJ4LMd1STDTgjasXJcaA+2ZrmMLtNpVdoMthlMTOpERuM/m X7yZdAei569pyiO9AYBUMWVMHpr4dZSSQhpjBisk4AHAYvsmRkEqv9smEGiYStVd+pBlQ1WmJWzw 26JYV2VQdHHo7gw856FWhbOcarLdYg+D4ftwSJ3y5VpIcpb0F0DddLqzpertrzZnLFDQjiZAfxis MY9DN3r+XixLIvhnRJDuHYWSwEyz8+wXDSA5RQcxFdQ7mZng3aQB/hpaHBRYoVz4ddy+1SxosiWx 0RepV2RzVpxr+KIIaZU69HUdkJ4MJJsHEZxlYg== )`
	RRSIG=61050 and DNSKEY=61050 verifies the DS RRset
	DS=41901/SHA-256 is now in the chain-of-trust
	`it. 86400 IN DS ( 41901 10 2 47f7f7ba21e48591f6172eed13e35b66b93ad9f2880fc9bada64f68ce28ebb90 )`
	Query to r.dns.it for it/DNSKEY
	Received 873 bytes from 193.206.141.46
	;; Response received from [193.206.141.46] 873 octets ;; HEADER SECTION ;; id = 5645 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; it. IN DNSKEY ;; ANSWER SECTION (3 records) it. 86400 IN DNSKEY ( 257 3 10 AwEAAay8sLBy644P9n/DUS3XakNteW7zvQTBVPGwXDknOSR/ywiIeKRR5aoroib5zkEhchqGxMqY xtnuemPsAW/II9pv/coNAJEx6PYjW7nTXfKvMR+JGgjCHn2o/pK7J+MO9MUp9Vt35qRczcrtc9Ya idh5ZBM2ju/S6X4L7vdNDiWc4iia1fG6p8b+J4mvl6ewzV9sggbBAZGaE//S3ed06FGYdSD9I/fC 8PNkBRXXVsv9tR3IlxyGtw0hINGkUKn6Ku+SZ4VtkU5+bvaAeFWwfAIdG+Jaj56gm5rMuRYlCfRz lqM5Q5Yv/LGo22E8SPO8NMAulo9ULP9chxg4mfyzDNU= ) ; keytag 41901 it. 86400 IN DNSKEY ( 256 3 10 AwEAAbCBaRnTOVXDfC5ulw7mj4aT2Tr/vs1j6q97qKI+eWbyQUwpf9LVcrq7sKMSRoF6oiK9AaHD yCWogIbVADuYKAJfLU0ahJvB00sWQHiqOj5AJFMLnRtD7yylpPRNagRHmv6hFODR6uq0p67yTMzO c7MTixKTsRQQ1lyrr90uNrUaqnRVTc4TLBypvuWXfXP8SBfK4zfq5TPux6V8gU8kzJ17RoWMRetE arY2Q8T34YsT4484Bnns+IJjf8lPjEptfDL+E02+/K+zY4VGemQf/xyyHtu9rAjSLXJv74hXumTW MlUOKwUf7jz1+LMKMYS55czc47pf0BZZAraZjE3NgBk= ) ; keytag 18395 it. 86400 IN RRSIG ( DNSKEY 10 1 86400 20250107170440 20241208170440 41901 it. WyT0WV/OORrHF9T9ob/QciwN0GBSXXVvmTQdJ2oFEusO+fJ9LMYH0+qJ1XsMuvW9zAMj5Q5SvOe0 jkbdEPcGPG4Q/Ix2e8Ovrbuzyq2HI1enM9eeugoneeSvFK1hLE5QygWjV1n6kPIocUVXAisFX45j qp46/BcsdoEQMWByGrokrtkF3MNQZfZRMgVaAkY6B+OOqfeusrbFr6LoE5m93hLU0Cw55/36oRNG /4mtGFf+h+9Yo8O01wSx3W19CJPu0byRbGz/dHhCM9mYFQfjJ6D0uL+iFg7VgQT18s6wUZxM5GYj LiVxN4FEr0e0vQKknZ+pmCZ6iwSz0J+kFJ66Rg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for it
	`it. 86400 IN DNSKEY ( 257 3 10 AwEAAay8sLBy644P9n/DUS3XakNteW7zvQTBVPGwXDknOSR/ywiIeKRR5aoroib5zkEhchqGxMqY xtnuemPsAW/II9pv/coNAJEx6PYjW7nTXfKvMR+JGgjCHn2o/pK7J+MO9MUp9Vt35qRczcrtc9Ya idh5ZBM2ju/S6X4L7vdNDiWc4iia1fG6p8b+J4mvl6ewzV9sggbBAZGaE//S3ed06FGYdSD9I/fC 8PNkBRXXVsv9tR3IlxyGtw0hINGkUKn6Ku+SZ4VtkU5+bvaAeFWwfAIdG+Jaj56gm5rMuRYlCfRz lqM5Q5Yv/LGo22E8SPO8NMAulo9ULP9chxg4mfyzDNU= ) ; keytag 41901`
	`it. 86400 IN DNSKEY ( 256 3 10 AwEAAbCBaRnTOVXDfC5ulw7mj4aT2Tr/vs1j6q97qKI+eWbyQUwpf9LVcrq7sKMSRoF6oiK9AaHD yCWogIbVADuYKAJfLU0ahJvB00sWQHiqOj5AJFMLnRtD7yylpPRNagRHmv6hFODR6uq0p67yTMzO c7MTixKTsRQQ1lyrr90uNrUaqnRVTc4TLBypvuWXfXP8SBfK4zfq5TPux6V8gU8kzJ17RoWMRetE arY2Q8T34YsT4484Bnns+IJjf8lPjEptfDL+E02+/K+zY4VGemQf/xyyHtu9rAjSLXJv74hXumTW MlUOKwUf7jz1+LMKMYS55czc47pf0BZZAraZjE3NgBk= ) ; keytag 18395`
	DNSKEY=41901/SEP is now in the chain-of-trust
	DS=41901/SHA-256 verifies DNSKEY=41901/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`it. 86400 IN RRSIG ( DNSKEY 10 1 86400 20250107170440 20241208170440 41901 it. WyT0WV/OORrHF9T9ob/QciwN0GBSXXVvmTQdJ2oFEusO+fJ9LMYH0+qJ1XsMuvW9zAMj5Q5SvOe0 jkbdEPcGPG4Q/Ix2e8Ovrbuzyq2HI1enM9eeugoneeSvFK1hLE5QygWjV1n6kPIocUVXAisFX45j qp46/BcsdoEQMWByGrokrtkF3MNQZfZRMgVaAkY6B+OOqfeusrbFr6LoE5m93hLU0Cw55/36oRNG /4mtGFf+h+9Yo8O01wSx3W19CJPu0byRbGz/dHhCM9mYFQfjJ6D0uL+iFg7VgQT18s6wUZxM5GYj LiVxN4FEr0e0vQKknZ+pmCZ6iwSz0J+kFJ66Rg== )`
	RRSIG=41901 and DNSKEY=41901/SEP verifies the DNSKEY RRset
	DNSKEY=18395 is now in the chain-of-trust
	Query to a.dns.it for uniroma1.it/A
	Received 897 bytes from 194.0.16.215
	;; Response received from [194.0.16.215] 897 octets ;; HEADER SECTION ;; id = 34123 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uniroma1.it. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) uniroma1.it. 3600 IN NS risc-ns.cics.uniroma1.it. uniroma1.it. 3600 IN NS ns1.garr.net. uniroma1.it. 3600 IN NS desiree.cics.uniroma1.it. RS1N3N7M54PDEM5EUNV9NPKH3B6CGPJC.it. 3600 IN NSEC3 ( 1 1 0 - rs1pg43s35r5v1kf1v10ft5sp409iubv NS SOA RRSIG DNSKEY NSEC3PARAM ) RS1N3N7M54PDEM5EUNV9NPKH3B6CGPJC.it. 3600 IN RRSIG ( NSEC3 10 2 3600 20250107170440 20241208170440 18395 it. nEB+3s9U5qaDZL9g8tiNXtFA7HMxfhCUW87lnwVjsb9+hb4VylVv/j72pymP6EJXy9mHhC4R12Nf GzLRQP7XuMcO+TJZC88cVHzp97o+BaNT1yO0U3ixQHFuUSiR3IbVqWNip3eFqxoJ5fJAVxbIedSs nM93OsYPakao0yuiEfz4NaI9iYOuNkDwJYKQaq+/aYMJ9qNhuwf0lFQU4IvZkskomLW69Dd+XaYC Jtoa4N0CxcuOTB8+si1IfZa3FgAeVT64snJmi2jvvIh5OnQI4ihucyJ1mzYyw4ECV/0fv8rFHAX3 uYxOV8b23fRB6OP+KU2WQyBw/NSPwLQWhqOzkA== ) PFKKT0IQB6JDFSEKHS6F4MFLRN3O5DGP.it. 3600 IN NSEC3 ( 1 1 0 - pfldiqo64fnl8b87lg4185b0ujg7uqi6 NS DS RRSIG ) PFKKT0IQB6JDFSEKHS6F4MFLRN3O5DGP.it. 3600 IN RRSIG ( NSEC3 10 2 3600 20250107170440 20241208170440 18395 it. XHV0KAubR+bcciVTaPL+yZAF1hU03vhTCUaMOrBTqZW0LgDYgVGZlWeR4qSRIXZF1FHDdVzZP3QS IQs5TTsVF6MP7L6p51FeLKS3HUnHwqBMPD4RgnQIuuTiPgxR6GgxrreRtuyLVt0PMBpEuJ10d5ri yhLDpz1lvXN0WWKhxJRNatOzGmuTzsE5FLP/E4T7E95ElFE4tNlHB+ib5+TueSnFjdBHYJBOcPCY 9FhZdM6hQ4MxrCZfOsJKG+KaIDvmb5EI4UllbWIVp5BtswVVuY74Nxbb6LRLxchP934NrK8n5+yq 5ZuNxV6Il26vhGXEnQF/xfUAlky3QSr6tWRC7Q== ) ;; ADDITIONAL SECTION (3 records) risc-ns.cics.uniroma1.it. 3600 IN A 151.100.4.2 desiree.cics.uniroma1.it. 3600 IN A 151.100.4.13 ;; { "EDNS-VERSION": 0 }
	Query to m.dns.it for uniroma1.it/DNSKEY
	Received 897 bytes from 217.29.76.4
	;; Response received from [217.29.76.4] 897 octets ;; HEADER SECTION ;; id = 9745 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uniroma1.it. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) uniroma1.it. 3600 IN NS desiree.cics.uniroma1.it. uniroma1.it. 3600 IN NS risc-ns.cics.uniroma1.it. uniroma1.it. 3600 IN NS ns1.garr.net. RS1N3N7M54PDEM5EUNV9NPKH3B6CGPJC.it. 3600 IN NSEC3 ( 1 1 0 - rs1pg43s35r5v1kf1v10ft5sp409iubv NS SOA RRSIG DNSKEY NSEC3PARAM ) RS1N3N7M54PDEM5EUNV9NPKH3B6CGPJC.it. 3600 IN RRSIG ( NSEC3 10 2 3600 20250107170440 20241208170440 18395 it. nEB+3s9U5qaDZL9g8tiNXtFA7HMxfhCUW87lnwVjsb9+hb4VylVv/j72pymP6EJXy9mHhC4R12Nf GzLRQP7XuMcO+TJZC88cVHzp97o+BaNT1yO0U3ixQHFuUSiR3IbVqWNip3eFqxoJ5fJAVxbIedSs nM93OsYPakao0yuiEfz4NaI9iYOuNkDwJYKQaq+/aYMJ9qNhuwf0lFQU4IvZkskomLW69Dd+XaYC Jtoa4N0CxcuOTB8+si1IfZa3FgAeVT64snJmi2jvvIh5OnQI4ihucyJ1mzYyw4ECV/0fv8rFHAX3 uYxOV8b23fRB6OP+KU2WQyBw/NSPwLQWhqOzkA== ) PFKKT0IQB6JDFSEKHS6F4MFLRN3O5DGP.it. 3600 IN NSEC3 ( 1 1 0 - pfldiqo64fnl8b87lg4185b0ujg7uqi6 NS DS RRSIG ) PFKKT0IQB6JDFSEKHS6F4MFLRN3O5DGP.it. 3600 IN RRSIG ( NSEC3 10 2 3600 20250107170440 20241208170440 18395 it. XHV0KAubR+bcciVTaPL+yZAF1hU03vhTCUaMOrBTqZW0LgDYgVGZlWeR4qSRIXZF1FHDdVzZP3QS IQs5TTsVF6MP7L6p51FeLKS3HUnHwqBMPD4RgnQIuuTiPgxR6GgxrreRtuyLVt0PMBpEuJ10d5ri yhLDpz1lvXN0WWKhxJRNatOzGmuTzsE5FLP/E4T7E95ElFE4tNlHB+ib5+TueSnFjdBHYJBOcPCY 9FhZdM6hQ4MxrCZfOsJKG+KaIDvmb5EI4UllbWIVp5BtswVVuY74Nxbb6LRLxchP934NrK8n5+yq 5ZuNxV6Il26vhGXEnQF/xfUAlky3QSr6tWRC7Q== ) ;; ADDITIONAL SECTION (3 records) risc-ns.cics.uniroma1.it. 3600 IN A 151.100.4.2 desiree.cics.uniroma1.it. 3600 IN A 151.100.4.13 ;; { "EDNS-VERSION": 0 }
	Found child zone uniroma1.it

uniroma1.it

	Checking DS between it and uniroma1.it
	Query to d.dns.it for uniroma1.it/DS
	Received 1126 bytes from 45.142.220.39
	;; Response received from [45.142.220.39] 1126 octets ;; HEADER SECTION ;; id = 50331 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uniroma1.it. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) RS1N3N7M54PDEM5EUNV9NPKH3B6CGPJC.it. 3600 IN NSEC3 ( 1 1 0 - rs1pg43s35r5v1kf1v10ft5sp409iubv NS SOA RRSIG DNSKEY NSEC3PARAM ) RS1N3N7M54PDEM5EUNV9NPKH3B6CGPJC.it. 3600 IN RRSIG ( NSEC3 10 2 3600 20250107170440 20241208170440 18395 it. nEB+3s9U5qaDZL9g8tiNXtFA7HMxfhCUW87lnwVjsb9+hb4VylVv/j72pymP6EJXy9mHhC4R12Nf GzLRQP7XuMcO+TJZC88cVHzp97o+BaNT1yO0U3ixQHFuUSiR3IbVqWNip3eFqxoJ5fJAVxbIedSs nM93OsYPakao0yuiEfz4NaI9iYOuNkDwJYKQaq+/aYMJ9qNhuwf0lFQU4IvZkskomLW69Dd+XaYC Jtoa4N0CxcuOTB8+si1IfZa3FgAeVT64snJmi2jvvIh5OnQI4ihucyJ1mzYyw4ECV/0fv8rFHAX3 uYxOV8b23fRB6OP+KU2WQyBw/NSPwLQWhqOzkA== ) it. 3600 IN SOA ( dns.nic.it. hostmaster.nic.it. 2024120819 ;serial 10800 ;refresh 900 ;retry 604800 ;expire 3600 ;minimum ) it. 3600 IN RRSIG ( SOA 10 1 86400 20250107170440 20241208170440 18395 it. B7d6f1t8mwnCDVyxWN5wCccX3EZvpdrbp7W5q48pdK9i4z0WxFkAk/8F2QRczCuX52f54gv9nQ69 A7zLuPXLuWUH3WIwErtykn458UUhhwSGwcOiOh/by+gVo3dLKRyrYXdLjGenrShG+KQysXzGubSq qaWnTDu0hvC+4Kd4FnpqogNocxCbUivZsnhHESTA0vgNJKoij/KOBxxoNd7Oqyf/XsiSfEEYpT8a 1tPjSklrbgb38mG10rK2zSTakhj/OjNWJJo901nLLu+JwARJ700BjI7mtoEq1Ii/p0Q4QNluuSSi xzxTRRGmZcZP54RYd9+QlVh3LefG4owg4ehdsA== ) PFKKT0IQB6JDFSEKHS6F4MFLRN3O5DGP.it. 3600 IN NSEC3 ( 1 1 0 - pfldiqo64fnl8b87lg4185b0ujg7uqi6 NS DS RRSIG ) PFKKT0IQB6JDFSEKHS6F4MFLRN3O5DGP.it. 3600 IN RRSIG ( NSEC3 10 2 3600 20250107170440 20241208170440 18395 it. XHV0KAubR+bcciVTaPL+yZAF1hU03vhTCUaMOrBTqZW0LgDYgVGZlWeR4qSRIXZF1FHDdVzZP3QS IQs5TTsVF6MP7L6p51FeLKS3HUnHwqBMPD4RgnQIuuTiPgxR6GgxrreRtuyLVt0PMBpEuJ10d5ri yhLDpz1lvXN0WWKhxJRNatOzGmuTzsE5FLP/E4T7E95ElFE4tNlHB+ib5+TueSnFjdBHYJBOcPCY 9FhZdM6hQ4MxrCZfOsJKG+KaIDvmb5EI4UllbWIVp5BtswVVuY74Nxbb6LRLxchP934NrK8n5+yq 5ZuNxV6Il26vhGXEnQF/xfUAlky3QSr6tWRC7Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for uniroma1.it in the it zone
	Query to desiree.cics.uniroma1.it for uniroma1.it/DNSKEY
	Received 105 bytes from 151.100.4.13
	;; Response received from [151.100.4.13] 105 octets ;; HEADER SECTION ;; id = 1753 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uniroma1.it. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) uniroma1.it. 3600 IN SOA ( risc-ns.cics.uniroma1.it. root.risc-ns.cics.uniroma1.it. 2024120300 ;serial 7200 ;refresh 1800 ;retry 2419200 ;expire 3600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to risc-ns.cics.uniroma1.it for uniroma1.it/A
	Received 148 bytes from 151.100.4.2
	;; Response received from [151.100.4.2] 148 octets ;; HEADER SECTION ;; id = 43783 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 3 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; uniroma1.it. IN A ;; ANSWER SECTION (1 record) uniroma1.it. 300 IN A 151.100.101.140 ;; AUTHORITY SECTION (3 records) uniroma1.it. 432000 IN NS ns1.garr.net. uniroma1.it. 432000 IN NS desiree.cics.uniroma1.it. uniroma1.it. 432000 IN NS risc-ns.cics.uniroma1.it. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	risc-ns.cics.uniroma1.it is authoritative for uniroma1.it
	Query to desiree.cics.uniroma1.it for uniroma1.it/SOA
	Received 173 bytes from 151.100.4.13
	;; Response received from [151.100.4.13] 173 octets ;; HEADER SECTION ;; id = 64325 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 3 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; uniroma1.it. IN SOA ;; ANSWER SECTION (1 record) uniroma1.it. 86400 IN SOA ( risc-ns.cics.uniroma1.it. root.risc-ns.cics.uniroma1.it. 2024120300 ;serial 7200 ;refresh 1800 ;retry 2419200 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (3 records) uniroma1.it. 432000 IN NS desiree.cics.uniroma1.it. uniroma1.it. 432000 IN NS risc-ns.cics.uniroma1.it. uniroma1.it. 432000 IN NS ns1.garr.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1.garr.net for uniroma1.it/SOA
	Received 167 bytes from 193.206.141.38
	;; Response received from [193.206.141.38] 167 octets ;; HEADER SECTION ;; id = 27433 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 3 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uniroma1.it. IN SOA ;; ANSWER SECTION (1 record) uniroma1.it. 86400 IN SOA ( risc-ns.cics.uniroma1.it. root.risc-ns.cics.uniroma1.it. 2024120300 ;serial 7200 ;refresh 1800 ;retry 2419200 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (3 records) uniroma1.it. 432000 IN NS risc-ns.cics.uniroma1.it. uniroma1.it. 432000 IN NS ns1.garr.net. uniroma1.it. 432000 IN NS desiree.cics.uniroma1.it. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to risc-ns.cics.uniroma1.it for uniroma1.it/A
	Received 148 bytes from 151.100.4.2
	;; Response received from [151.100.4.2] 148 octets ;; HEADER SECTION ;; id = 34306 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 3 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; uniroma1.it. IN A ;; ANSWER SECTION (1 record) uniroma1.it. 300 IN A 151.100.101.140 ;; AUTHORITY SECTION (3 records) uniroma1.it. 432000 IN NS risc-ns.cics.uniroma1.it. uniroma1.it. 432000 IN NS ns1.garr.net. uniroma1.it. 432000 IN NS desiree.cics.uniroma1.it. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	uniroma1.it A RR has value 151.100.101.140
	No RRSIGs found

uniroma1.it

	Query to desiree.cics.uniroma1.it for uniroma1.it/A
	Received 148 bytes from 151.100.4.13
	;; Response received from [151.100.4.13] 148 octets ;; HEADER SECTION ;; id = 14812 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 3 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; uniroma1.it. IN A ;; ANSWER SECTION (1 record) uniroma1.it. 300 IN A 151.100.101.140 ;; AUTHORITY SECTION (3 records) uniroma1.it. 432000 IN NS desiree.cics.uniroma1.it. uniroma1.it. 432000 IN NS risc-ns.cics.uniroma1.it. uniroma1.it. 432000 IN NS ns1.garr.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	desiree.cics.uniroma1.it is authoritative for uniroma1.it
	Query to desiree.cics.uniroma1.it for uniroma1.it/A
	Received 148 bytes from 151.100.4.13
	;; Response received from [151.100.4.13] 148 octets ;; HEADER SECTION ;; id = 23529 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 3 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; uniroma1.it. IN A ;; ANSWER SECTION (1 record) uniroma1.it. 300 IN A 151.100.101.140 ;; AUTHORITY SECTION (3 records) uniroma1.it. 432000 IN NS desiree.cics.uniroma1.it. uniroma1.it. 432000 IN NS ns1.garr.net. uniroma1.it. 432000 IN NS risc-ns.cics.uniroma1.it. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	uniroma1.it A RR has value 151.100.101.140
	No RRSIGs found

uniroma1.it

	Query to ns1.garr.net for uniroma1.it/A
	Received 142 bytes from 193.206.141.38
	;; Response received from [193.206.141.38] 142 octets ;; HEADER SECTION ;; id = 60172 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 3 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uniroma1.it. IN A ;; ANSWER SECTION (1 record) uniroma1.it. 300 IN A 151.100.101.140 ;; AUTHORITY SECTION (3 records) uniroma1.it. 432000 IN NS risc-ns.cics.uniroma1.it. uniroma1.it. 432000 IN NS desiree.cics.uniroma1.it. uniroma1.it. 432000 IN NS ns1.garr.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.garr.net is authoritative for uniroma1.it
	Query to ns1.garr.net for uniroma1.it/A
	Received 142 bytes from 193.206.141.38
	;; Response received from [193.206.141.38] 142 octets ;; HEADER SECTION ;; id = 38816 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 3 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uniroma1.it. IN A ;; ANSWER SECTION (1 record) uniroma1.it. 300 IN A 151.100.101.140 ;; AUTHORITY SECTION (3 records) uniroma1.it. 432000 IN NS desiree.cics.uniroma1.it. uniroma1.it. 432000 IN NS ns1.garr.net. uniroma1.it. 432000 IN NS risc-ns.cics.uniroma1.it. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	uniroma1.it A RR has value 151.100.101.140
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test uniroma1.it at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: