DNSSEC Debugger - univ-lyon1.fr

Domain Name:

Time: 2025-10-15 17:41:24 UTC

Analyzing DNSSEC problems for univ-lyon1.fr

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to l.root-servers.net for ./DNSKEY
	Received 1139 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 1139 octets ;; HEADER SECTION ;; id = 327 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20251101000000 20251011000000 20326 . HBzw8cFD6K0/BBO1rLi2ifcFatkMvobiLzZgaMOb9hMqRuMKM0jVSVif5LpAb0OOTQOcSzZMOF17 Ps7BkxWqTGOAQQH5wrS0aLJ/Hn4UAIC/ZK+JbeGo9c1ZhcA8LUyvv32ACT0in2oY7RyTG1+MLpUo rMdUNUII2PAaYuU+Svu8/1HJhuONGl9IqokaWK6yFCm9rz+azS04kq2GPMGHXqJVX7jbZO4tq4fg VKYvW5wJpRM9VE4VOGmHzQUe0OJsDGViys65RNtzzR8MefC9jZGGKO8s8G0n24VmT9Kg2/4y4Qen knUytutLNIMFFmiUsJjx8gcakkkiIvwGed+/cg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20251101000000 20251011000000 20326 . HBzw8cFD6K0/BBO1rLi2ifcFatkMvobiLzZgaMOb9hMqRuMKM0jVSVif5LpAb0OOTQOcSzZMOF17 Ps7BkxWqTGOAQQH5wrS0aLJ/Hn4UAIC/ZK+JbeGo9c1ZhcA8LUyvv32ACT0in2oY7RyTG1+MLpUo rMdUNUII2PAaYuU+Svu8/1HJhuONGl9IqokaWK6yFCm9rz+azS04kq2GPMGHXqJVX7jbZO4tq4fg VKYvW5wJpRM9VE4VOGmHzQUe0OJsDGViys65RNtzzR8MefC9jZGGKO8s8G0n24VmT9Kg2/4y4Qen knUytutLNIMFFmiUsJjx8gcakkkiIvwGed+/cg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=61809 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to d.root-servers.net for univ-lyon1.fr/A
	Received 565 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 565 octets ;; HEADER SECTION ;; id = 3825 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; univ-lyon1.fr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) fr. 172800 IN NS d.nic.fr. fr. 172800 IN NS f.ext.nic.fr. fr. 172800 IN NS g.ext.nic.fr. fr. 86400 IN DS ( 65381 13 2 8163abf45792942cf4ee38cca31f6a6832fcdc6d402338fc687827690c4132f6 ) fr. 86400 IN RRSIG ( DS 8 1 86400 20251028050000 20251015040000 61809 . lY5d3kqYvP1tTeFTJxeCqag85tV/cR0ZTICp4Z/ryVPiykNDk0MOvPdvqCiL+91GE/5zB6CvmLoG fSgZoK90hIuNF2XVsaBeST2HAxIKn4ZjvgsIT67nDMInhpclmXUivLAL2nw22AUrID3ZS3figzzy rBfjmvvI6hwTHZjactQk1APPgYje+N5KMx7wRCfvKcfQkDU9ytdnOlNGn4EvQNTxHeaJWXEGojMW y9t6bYSH8t+wWJZIunDoCYU/28N2L+sQ8nnTlVLTZduT+5E7LYNBsvZ1uExlM/GwjqWE0YAoU50y iWmJ5F6SQ0x6//ke16vp1p2qGWvMlf2urJ+P/Q== ) ;; ADDITIONAL SECTION (7 records) d.nic.fr. 172800 IN A 194.0.9.1 f.ext.nic.fr. 172800 IN A 194.146.106.46 g.ext.nic.fr. 172800 IN A 194.0.36.1 d.nic.fr. 172800 IN AAAA 2001:678:c::1 f.ext.nic.fr. 172800 IN AAAA 2001:67c:1010:11::53 g.ext.nic.fr. 172800 IN AAAA 2001:678:4c::1 ;; { "EDNS-VERSION": 0 }
	Query to j.root-servers.net for fr/DNSKEY
	Received 554 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 554 octets ;; HEADER SECTION ;; id = 63491 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fr. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) fr. 172800 IN NS d.nic.fr. fr. 172800 IN NS f.ext.nic.fr. fr. 172800 IN NS g.ext.nic.fr. fr. 86400 IN DS ( 65381 13 2 8163abf45792942cf4ee38cca31f6a6832fcdc6d402338fc687827690c4132f6 ) fr. 86400 IN RRSIG ( DS 8 1 86400 20251028050000 20251015040000 61809 . lY5d3kqYvP1tTeFTJxeCqag85tV/cR0ZTICp4Z/ryVPiykNDk0MOvPdvqCiL+91GE/5zB6CvmLoG fSgZoK90hIuNF2XVsaBeST2HAxIKn4ZjvgsIT67nDMInhpclmXUivLAL2nw22AUrID3ZS3figzzy rBfjmvvI6hwTHZjactQk1APPgYje+N5KMx7wRCfvKcfQkDU9ytdnOlNGn4EvQNTxHeaJWXEGojMW y9t6bYSH8t+wWJZIunDoCYU/28N2L+sQ8nnTlVLTZduT+5E7LYNBsvZ1uExlM/GwjqWE0YAoU50y iWmJ5F6SQ0x6//ke16vp1p2qGWvMlf2urJ+P/Q== ) ;; ADDITIONAL SECTION (7 records) d.nic.fr. 172800 IN A 194.0.9.1 f.ext.nic.fr. 172800 IN A 194.146.106.46 g.ext.nic.fr. 172800 IN A 194.0.36.1 d.nic.fr. 172800 IN AAAA 2001:678:c::1 f.ext.nic.fr. 172800 IN AAAA 2001:67c:1010:11::53 g.ext.nic.fr. 172800 IN AAAA 2001:678:4c::1 ;; { "EDNS-VERSION": 0 }
	Found child zone fr

	Checking DS between . and fr
	Query to k.root-servers.net for fr/DS
	Received 366 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 366 octets ;; HEADER SECTION ;; id = 11163 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fr. IN DS ;; ANSWER SECTION (2 records) fr. 86400 IN DS ( 65381 13 2 8163abf45792942cf4ee38cca31f6a6832fcdc6d402338fc687827690c4132f6 ) fr. 86400 IN RRSIG ( DS 8 1 86400 20251028050000 20251015040000 61809 . lY5d3kqYvP1tTeFTJxeCqag85tV/cR0ZTICp4Z/ryVPiykNDk0MOvPdvqCiL+91GE/5zB6CvmLoG fSgZoK90hIuNF2XVsaBeST2HAxIKn4ZjvgsIT67nDMInhpclmXUivLAL2nw22AUrID3ZS3figzzy rBfjmvvI6hwTHZjactQk1APPgYje+N5KMx7wRCfvKcfQkDU9ytdnOlNGn4EvQNTxHeaJWXEGojMW y9t6bYSH8t+wWJZIunDoCYU/28N2L+sQ8nnTlVLTZduT+5E7LYNBsvZ1uExlM/GwjqWE0YAoU50y iWmJ5F6SQ0x6//ke16vp1p2qGWvMlf2urJ+P/Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for fr in the . zone
	DS=65381/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`fr. 86400 IN RRSIG ( DS 8 1 86400 20251028050000 20251015040000 61809 . lY5d3kqYvP1tTeFTJxeCqag85tV/cR0ZTICp4Z/ryVPiykNDk0MOvPdvqCiL+91GE/5zB6CvmLoG fSgZoK90hIuNF2XVsaBeST2HAxIKn4ZjvgsIT67nDMInhpclmXUivLAL2nw22AUrID3ZS3figzzy rBfjmvvI6hwTHZjactQk1APPgYje+N5KMx7wRCfvKcfQkDU9ytdnOlNGn4EvQNTxHeaJWXEGojMW y9t6bYSH8t+wWJZIunDoCYU/28N2L+sQ8nnTlVLTZduT+5E7LYNBsvZ1uExlM/GwjqWE0YAoU50y iWmJ5F6SQ0x6//ke16vp1p2qGWvMlf2urJ+P/Q== )`
	RRSIG=61809 and DNSKEY=61809 verifies the DS RRset
	DS=65381/SHA-256 is now in the chain-of-trust
	`fr. 86400 IN DS ( 65381 13 2 8163abf45792942cf4ee38cca31f6a6832fcdc6d402338fc687827690c4132f6 )`
	Query to f.ext.nic.fr for fr/DNSKEY
	Received 289 bytes from 194.146.106.46
	;; Response received from [194.146.106.46] 289 octets ;; HEADER SECTION ;; id = 47526 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fr. IN DNSKEY ;; ANSWER SECTION (3 records) fr. 3600 IN DNSKEY ( 257 3 13 C8Q2nWGQPY99Cmln1/zSz7+peZNyxbCHDgisQqSnLXJ6rrfAGXYQdKMJ3SRY3zmBSqtW5+F0Esu3 6NTNXRaxIQ== ) ; keytag 65381 fr. 3600 IN DNSKEY ( 256 3 13 9DNnMB7z1CA0iC0MKr32PxMospmjobb2mXawZCg8Hyla4MgBNJ0UEQwj78YII3iP5L1iodEY7z17 FqFBEAywrg== ) ; keytag 21415 fr. 3600 IN RRSIG ( DNSKEY 13 1 3600 20251102233434 20251011081219 65381 fr. Wv+izF8OUNU4PDXTYsqonlQL8xVCWnG7NN1GPQg3yo0zXaHuu/RpMbBaUs4yEHPajlik7SmYPyW+ LWCnvePMcg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for fr
	`fr. 3600 IN DNSKEY ( 257 3 13 C8Q2nWGQPY99Cmln1/zSz7+peZNyxbCHDgisQqSnLXJ6rrfAGXYQdKMJ3SRY3zmBSqtW5+F0Esu3 6NTNXRaxIQ== ) ; keytag 65381`
	`fr. 3600 IN DNSKEY ( 256 3 13 9DNnMB7z1CA0iC0MKr32PxMospmjobb2mXawZCg8Hyla4MgBNJ0UEQwj78YII3iP5L1iodEY7z17 FqFBEAywrg== ) ; keytag 21415`
	DNSKEY=65381/SEP is now in the chain-of-trust
	DS=65381/SHA-256 verifies DNSKEY=65381/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`fr. 3600 IN RRSIG ( DNSKEY 13 1 3600 20251102233434 20251011081219 65381 fr. Wv+izF8OUNU4PDXTYsqonlQL8xVCWnG7NN1GPQg3yo0zXaHuu/RpMbBaUs4yEHPajlik7SmYPyW+ LWCnvePMcg== )`
	RRSIG=65381 and DNSKEY=65381/SEP verifies the DNSKEY RRset
	DNSKEY=21415 is now in the chain-of-trust
	Query to d.nic.fr for univ-lyon1.fr/A
	Received 603 bytes from 194.0.9.1
	;; Response received from [194.0.9.1] 603 octets ;; HEADER SECTION ;; id = 21010 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; univ-lyon1.fr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) univ-lyon1.fr. 3600 IN NS dns.univ-lyon1.fr. univ-lyon1.fr. 3600 IN NS ccpntc3.in2p3.fr. univ-lyon1.fr. 3600 IN NS ccpnvx.in2p3.fr. univ-lyon1.fr. 3600 IN NS dns2.univ-lyon1.fr. SFBLG7NFATQ81CQJGT5Q91BQS3H9V6ND.fr. 600 IN NSEC3 ( 1 1 0 - sfbn9rjnnuevsb0gner878n1gn41d23i NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) SFBLG7NFATQ81CQJGT5Q91BQS3H9V6ND.fr. 600 IN RRSIG ( NSEC3 13 2 600 20251113225852 20251014225159 21415 fr. ULJ/BNZdv8CA0BSHi/YYKE9OCcylNlW0KkRCDPEv53XExkRnSVOQlf3ZH/EGe16nqkDIlXSPzZy8 wGUdcLmVpQ== ) 4OGTAVAE7U73DCEQJ5LPDSSURD0DSBG9.fr. 600 IN NSEC3 ( 1 1 0 - 4ogud3g56vbmlu874sfi2uscmgctjfq4 NS DS RRSIG ) 4OGTAVAE7U73DCEQJ5LPDSSURD0DSBG9.fr. 600 IN RRSIG ( NSEC3 13 2 600 20251023052853 20251007114258 21415 fr. tyyJE9WAro2/vydhk0g/2XxVrca20Evo0GDUUzSeu+sHXhjl1JlJ2yxvdT9hVmghNc7S9hUmMsuz hg8Mttyw0g== ) ;; ADDITIONAL SECTION (7 records) dns.univ-lyon1.fr. 3600 IN A 134.214.100.6 dns2.univ-lyon1.fr. 3600 IN A 134.214.100.245 ccpntc3.in2p3.fr. 3600 IN A 134.158.69.191 ccpnvx.in2p3.fr. 3600 IN A 134.158.69.104 dns.univ-lyon1.fr. 3600 IN AAAA 2001:660:5001:100::6 dns2.univ-lyon1.fr. 3600 IN AAAA 2001:660:5001:100::245 ;; { "EDNS-VERSION": 0 }
	Query to d.nic.fr for univ-lyon1.fr/DNSKEY
	Received 603 bytes from 194.0.9.1
	;; Response received from [194.0.9.1] 603 octets ;; HEADER SECTION ;; id = 58958 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; univ-lyon1.fr. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) univ-lyon1.fr. 3600 IN NS dns.univ-lyon1.fr. univ-lyon1.fr. 3600 IN NS ccpnvx.in2p3.fr. univ-lyon1.fr. 3600 IN NS dns2.univ-lyon1.fr. univ-lyon1.fr. 3600 IN NS ccpntc3.in2p3.fr. SFBLG7NFATQ81CQJGT5Q91BQS3H9V6ND.fr. 600 IN NSEC3 ( 1 1 0 - sfbn9rjnnuevsb0gner878n1gn41d23i NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) SFBLG7NFATQ81CQJGT5Q91BQS3H9V6ND.fr. 600 IN RRSIG ( NSEC3 13 2 600 20251113225852 20251014225159 21415 fr. ULJ/BNZdv8CA0BSHi/YYKE9OCcylNlW0KkRCDPEv53XExkRnSVOQlf3ZH/EGe16nqkDIlXSPzZy8 wGUdcLmVpQ== ) 4OGTAVAE7U73DCEQJ5LPDSSURD0DSBG9.fr. 600 IN NSEC3 ( 1 1 0 - 4ogud3g56vbmlu874sfi2uscmgctjfq4 NS DS RRSIG ) 4OGTAVAE7U73DCEQJ5LPDSSURD0DSBG9.fr. 600 IN RRSIG ( NSEC3 13 2 600 20251023052853 20251007114258 21415 fr. tyyJE9WAro2/vydhk0g/2XxVrca20Evo0GDUUzSeu+sHXhjl1JlJ2yxvdT9hVmghNc7S9hUmMsuz hg8Mttyw0g== ) ;; ADDITIONAL SECTION (7 records) dns.univ-lyon1.fr. 3600 IN A 134.214.100.6 dns2.univ-lyon1.fr. 3600 IN A 134.214.100.245 ccpntc3.in2p3.fr. 3600 IN A 134.158.69.191 ccpnvx.in2p3.fr. 3600 IN A 134.158.69.104 dns.univ-lyon1.fr. 3600 IN AAAA 2001:660:5001:100::6 dns2.univ-lyon1.fr. 3600 IN AAAA 2001:660:5001:100::245 ;; { "EDNS-VERSION": 0 }
	Found child zone univ-lyon1.fr

univ-lyon1.fr

	Checking DS between fr and univ-lyon1.fr
	Query to g.ext.nic.fr for univ-lyon1.fr/DS
	Received 557 bytes from 194.0.36.1
	;; Response received from [194.0.36.1] 557 octets ;; HEADER SECTION ;; id = 15053 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; univ-lyon1.fr. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) SFBLG7NFATQ81CQJGT5Q91BQS3H9V6ND.fr. 600 IN NSEC3 ( 1 1 0 - sfbn9rjnnuevsb0gner878n1gn41d23i NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) SFBLG7NFATQ81CQJGT5Q91BQS3H9V6ND.fr. 600 IN RRSIG ( NSEC3 13 2 600 20251113225852 20251014225159 21415 fr. ULJ/BNZdv8CA0BSHi/YYKE9OCcylNlW0KkRCDPEv53XExkRnSVOQlf3ZH/EGe16nqkDIlXSPzZy8 wGUdcLmVpQ== ) fr. 600 IN SOA ( a.nic.fr. dnsmaster.afnic.fr. 2242941589 ;serial 3600 ;refresh 1800 ;retry 1209600 ;expire 600 ;minimum ) fr. 600 IN RRSIG ( SOA 13 1 3600 20251114173719 20251015163719 21415 fr. K++RcWlJVd+hzHKFy6KGWPeOlz0B0zl7PvRNIUsBVIztrOjoixld9MOQd+9ExhV197kTmToFseSM IqAePyYeCA== ) 4OGTAVAE7U73DCEQJ5LPDSSURD0DSBG9.fr. 600 IN NSEC3 ( 1 1 0 - 4ogud3g56vbmlu874sfi2uscmgctjfq4 NS DS RRSIG ) 4OGTAVAE7U73DCEQJ5LPDSSURD0DSBG9.fr. 600 IN RRSIG ( NSEC3 13 2 600 20251023052853 20251007114258 21415 fr. tyyJE9WAro2/vydhk0g/2XxVrca20Evo0GDUUzSeu+sHXhjl1JlJ2yxvdT9hVmghNc7S9hUmMsuz hg8Mttyw0g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for univ-lyon1.fr in the fr zone
	Query to ccpnvx.in2p3.fr for univ-lyon1.fr/DNSKEY
	Received 89 bytes from 134.158.69.104
	;; Response received from [134.158.69.104] 89 octets ;; HEADER SECTION ;; id = 8444 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; univ-lyon1.fr. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) univ-lyon1.fr. 14400 IN SOA ( dns.univ-lyon1.fr. reseau.univ-lyon1.fr. 2045304339 ;serial 21600 ;refresh 7200 ;retry 6048000 ;expire 14400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to dns.univ-lyon1.fr for univ-lyon1.fr/A
	Received 58 bytes from 134.214.100.6
	;; Response received from [134.214.100.6] 58 octets ;; HEADER SECTION ;; id = 2258 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; univ-lyon1.fr. IN A ;; ANSWER SECTION (1 record) univ-lyon1.fr. 1800 IN A 134.214.126.72 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns.univ-lyon1.fr is authoritative for univ-lyon1.fr
	Query to ccpnvx.in2p3.fr for univ-lyon1.fr/SOA
	Received 89 bytes from 134.158.69.104
	;; Response received from [134.158.69.104] 89 octets ;; HEADER SECTION ;; id = 34843 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; univ-lyon1.fr. IN SOA ;; ANSWER SECTION (1 record) univ-lyon1.fr. 432000 IN SOA ( dns.univ-lyon1.fr. reseau.univ-lyon1.fr. 2045304339 ;serial 21600 ;refresh 7200 ;retry 6048000 ;expire 14400 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ccpntc3.in2p3.fr for univ-lyon1.fr/SOA
	Received 89 bytes from 134.158.69.191
	;; Response received from [134.158.69.191] 89 octets ;; HEADER SECTION ;; id = 19712 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; univ-lyon1.fr. IN SOA ;; ANSWER SECTION (1 record) univ-lyon1.fr. 432000 IN SOA ( dns.univ-lyon1.fr. reseau.univ-lyon1.fr. 2045304339 ;serial 21600 ;refresh 7200 ;retry 6048000 ;expire 14400 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns2.univ-lyon1.fr for univ-lyon1.fr/SOA
	Received 89 bytes from 134.214.100.245
	;; Response received from [134.214.100.245] 89 octets ;; HEADER SECTION ;; id = 57597 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; univ-lyon1.fr. IN SOA ;; ANSWER SECTION (1 record) univ-lyon1.fr. 432000 IN SOA ( dns.univ-lyon1.fr. reseau.univ-lyon1.fr. 2045304338 ;serial 21600 ;refresh 7200 ;retry 6048000 ;expire 14400 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns2.univ-lyon1.fr serial (2045304338) differs from ccpnvx.in2p3.fr serial (2045304339)
	Query to dns.univ-lyon1.fr for univ-lyon1.fr/A
	Received 58 bytes from 134.214.100.6
	;; Response received from [134.214.100.6] 58 octets ;; HEADER SECTION ;; id = 56225 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; univ-lyon1.fr. IN A ;; ANSWER SECTION (1 record) univ-lyon1.fr. 1800 IN A 134.214.126.72 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	univ-lyon1.fr A RR has value 134.214.126.72
	No RRSIGs found

univ-lyon1.fr

	Query to ccpnvx.in2p3.fr for univ-lyon1.fr/A
	Received 58 bytes from 134.158.69.104
	;; Response received from [134.158.69.104] 58 octets ;; HEADER SECTION ;; id = 26066 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; univ-lyon1.fr. IN A ;; ANSWER SECTION (1 record) univ-lyon1.fr. 1800 IN A 134.214.126.72 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ccpnvx.in2p3.fr is authoritative for univ-lyon1.fr
	Query to ccpnvx.in2p3.fr for univ-lyon1.fr/A
	Received 58 bytes from 134.158.69.104
	;; Response received from [134.158.69.104] 58 octets ;; HEADER SECTION ;; id = 12980 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; univ-lyon1.fr. IN A ;; ANSWER SECTION (1 record) univ-lyon1.fr. 1800 IN A 134.214.126.72 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	univ-lyon1.fr A RR has value 134.214.126.72
	No RRSIGs found

univ-lyon1.fr

	Query to ccpntc3.in2p3.fr for univ-lyon1.fr/A
	Received 58 bytes from 134.158.69.191
	;; Response received from [134.158.69.191] 58 octets ;; HEADER SECTION ;; id = 41007 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; univ-lyon1.fr. IN A ;; ANSWER SECTION (1 record) univ-lyon1.fr. 1800 IN A 134.214.126.72 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ccpntc3.in2p3.fr is authoritative for univ-lyon1.fr
	Query to ccpntc3.in2p3.fr for univ-lyon1.fr/A
	Received 58 bytes from 134.158.69.191
	;; Response received from [134.158.69.191] 58 octets ;; HEADER SECTION ;; id = 31826 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; univ-lyon1.fr. IN A ;; ANSWER SECTION (1 record) univ-lyon1.fr. 1800 IN A 134.214.126.72 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	univ-lyon1.fr A RR has value 134.214.126.72
	No RRSIGs found

univ-lyon1.fr

	Query to dns2.univ-lyon1.fr for univ-lyon1.fr/A
	Received 58 bytes from 134.214.100.245
	;; Response received from [134.214.100.245] 58 octets ;; HEADER SECTION ;; id = 51715 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; univ-lyon1.fr. IN A ;; ANSWER SECTION (1 record) univ-lyon1.fr. 1800 IN A 134.214.126.72 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns2.univ-lyon1.fr is authoritative for univ-lyon1.fr
	Query to dns2.univ-lyon1.fr for univ-lyon1.fr/A
	Received 58 bytes from 134.214.100.245
	;; Response received from [134.214.100.245] 58 octets ;; HEADER SECTION ;; id = 40749 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; univ-lyon1.fr. IN A ;; ANSWER SECTION (1 record) univ-lyon1.fr. 1800 IN A 134.214.126.72 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	univ-lyon1.fr A RR has value 134.214.126.72
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test univ-lyon1.fr at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: