DNSSEC Debugger - www.autokeys-r-us.co.uk

Domain Name:

Time: 2024-09-28 17:26:30 UTC

Analyzing DNSSEC problems for www.autokeys-r-us.co.uk

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to d.root-servers.net for ./DNSKEY
	Received 1139 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 1139 octets ;; HEADER SECTION ;; id = 40707 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAdSiy6sslYrcZSGcuMEK4DtE8DZZY1A08kAsviAD49tocYO5m37AvIOyzeiKBWuPuJ4m9u5H onCM/ntxklZKYFyMftv8XoRwbiXdpSjfdpNHiMYTTV2oDUNMjdLFnF6HYSY48xrPbevQOYbAFGHp xqcXAQT0+BaBiAx3Ls6lXBQ3/hSVOprvDWJCQiI2OT+9+saKLddSIX6DwTVy0S5T4YY4EGg5R3c/ eKUb2/8XgKWUzlOIZsVAZZUSTKW0tX54ccAALO7Grvsx/NW62jc1xv6wWAXocOEVgB7+4Lzb7q9p 5o30+sYoGpOsKgFvMSy4oCZTQMQx2Sjd/NG2bMMw6nM= ) ; Key ID = 20038 . 172800 IN DNSKEY ( 256 3 8 AwEAAc0SunbHdS0KFEyZbYII/+tzsrNzIwurKxmJA+0fhAYlTPA/5LrMGkGEqvvufzM0w/CaVtdm 5eWkZYQcsoSKT5bycx0C4jxnLEb3ZiZUQSqu1rWcKGF1fj/GyDWLkOu7a5h3el+gPmglj/4l4V31 ugNYfqYq84vCB+3D6Sodrd+85KyonnzWJ8cS7aZ57x0d0sGqsAKA+6tRnIXjVNVe7Ro5xJuz8IR7 rOxdzfuRLriN+Z00EL3U5E7s9SISU/hDh7Q7N70W1mLMc1o2+tCRGjEWrw4wmCWMzc1kegbLES/d UOWFvPjJz0+AEeWDhd2GqtXk02BzAhdfeIAEIv68FTs= ) ; Key ID = 61050 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20241010000000 20240919000000 20326 . a9nlgBllKW93EmoBhIbqkuXFLRElIUw51JFslF6VpL+5SROks4IkDYb1MvushJUV1KRarnqzxtFj igN8oGRluO9Rvxo3/XpyGgsuepmQtFvlyr5bVcd0rCZTASou5FuQQwVeSVj4o4Y42ylEZTO/FzbI wMM8+MsOtwEDzlZs6wKCK2o77oFHdgOyVk3/eIJV73vTH5HIXlwEw8Z5YlwYUxdBtCKvx6Wtaj7w mp+rbFqick8iHCafKOeeocunUz8kZxCvoWeju3zGczKV/1plUSJrRPfxLGw3G1dtW+WMbFLH/lQG rCsVHEb8nrDy15ePvy6/6bSS6yzgG9xXSA2pPA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdSiy6sslYrcZSGcuMEK4DtE8DZZY1A08kAsviAD49tocYO5m37AvIOyzeiKBWuPuJ4m9u5H onCM/ntxklZKYFyMftv8XoRwbiXdpSjfdpNHiMYTTV2oDUNMjdLFnF6HYSY48xrPbevQOYbAFGHp xqcXAQT0+BaBiAx3Ls6lXBQ3/hSVOprvDWJCQiI2OT+9+saKLddSIX6DwTVy0S5T4YY4EGg5R3c/ eKUb2/8XgKWUzlOIZsVAZZUSTKW0tX54ccAALO7Grvsx/NW62jc1xv6wWAXocOEVgB7+4Lzb7q9p 5o30+sYoGpOsKgFvMSy4oCZTQMQx2Sjd/NG2bMMw6nM= ) ; Key ID = 20038`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAc0SunbHdS0KFEyZbYII/+tzsrNzIwurKxmJA+0fhAYlTPA/5LrMGkGEqvvufzM0w/CaVtdm 5eWkZYQcsoSKT5bycx0C4jxnLEb3ZiZUQSqu1rWcKGF1fj/GyDWLkOu7a5h3el+gPmglj/4l4V31 ugNYfqYq84vCB+3D6Sodrd+85KyonnzWJ8cS7aZ57x0d0sGqsAKA+6tRnIXjVNVe7Ro5xJuz8IR7 rOxdzfuRLriN+Z00EL3U5E7s9SISU/hDh7Q7N70W1mLMc1o2+tCRGjEWrw4wmCWMzc1kegbLES/d UOWFvPjJz0+AEeWDhd2GqtXk02BzAhdfeIAEIv68FTs= ) ; Key ID = 61050`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20241010000000 20240919000000 20326 . a9nlgBllKW93EmoBhIbqkuXFLRElIUw51JFslF6VpL+5SROks4IkDYb1MvushJUV1KRarnqzxtFj igN8oGRluO9Rvxo3/XpyGgsuepmQtFvlyr5bVcd0rCZTASou5FuQQwVeSVj4o4Y42ylEZTO/FzbI wMM8+MsOtwEDzlZs6wKCK2o77oFHdgOyVk3/eIJV73vTH5HIXlwEw8Z5YlwYUxdBtCKvx6Wtaj7w mp+rbFqick8iHCafKOeeocunUz8kZxCvoWeju3zGczKV/1plUSJrRPfxLGw3G1dtW+WMbFLH/lQG rCsVHEb8nrDy15ePvy6/6bSS6yzgG9xXSA2pPA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=20038 is now in the chain-of-trust
	DNSKEY=61050 is now in the chain-of-trust
	Query to m.root-servers.net for www.autokeys-r-us.co.uk/A
	Received 895 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 895 octets ;; HEADER SECTION ;; id = 17097 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 10 arcount = 17 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.autokeys-r-us.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) uk. 172800 IN NS dns4.nic.uk. uk. 172800 IN NS nsc.nic.uk. uk. 172800 IN NS dns2.nic.uk. uk. 172800 IN NS dns1.nic.uk. uk. 172800 IN NS nsa.nic.uk. uk. 172800 IN NS nsb.nic.uk. uk. 172800 IN NS nsd.nic.uk. uk. 172800 IN NS dns3.nic.uk. uk. 86400 IN DS ( 43876 8 2 a107ed2ac1bd14d924173bc7e827a1153582072394f9272ba37e2353bc659603 ) uk. 86400 IN RRSIG ( DS 8 1 86400 20241011050000 20240928040000 20038 . LwsFMQvH6KUSUwdDQIXMCfS2LyKH1GqmlvvTTOvNai//ETrbHAIl+6uqEyjZGKq/q/zENDwvjh8J bZkWk+Z7uAbPQBKVNF4rCWbicHD4BOltdNYJzuOvFBTlmyvDUU72xU+89lXI0B2nbXgDx0g0T8LN 6b+BC5gEpj1Oe33zWiVj+r3eFTwzd68qaSW8Vx9hahoCN42sewtlTVheoiyuNTPOUh/Rpx1ZyCAv Ag6W0VBeMD6OpcqaWWbyYuhCD/4HO2t91OS/qdiql9bSgY7gRIRL1xd26wgEKZH4nqIOwA8pWGl3 ubmBqAhhc5h1pkay85Xyd2JDvCJOZ+gl92zaew== ) ;; ADDITIONAL SECTION (17 records) dns4.nic.uk. 172800 IN A 43.230.48.1 dns3.nic.uk. 172800 IN A 213.248.220.1 dns2.nic.uk. 172800 IN A 103.49.80.1 dns1.nic.uk. 172800 IN A 213.248.216.1 nsd.nic.uk. 172800 IN A 156.154.103.3 nsc.nic.uk. 172800 IN A 156.154.102.3 nsb.nic.uk. 172800 IN A 156.154.101.3 nsa.nic.uk. 172800 IN A 156.154.100.3 dns4.nic.uk. 172800 IN AAAA 2401:fd80:404::1 dns3.nic.uk. 172800 IN AAAA 2a01:618:404::1 dns2.nic.uk. 172800 IN AAAA 2401:fd80:400::1 dns1.nic.uk. 172800 IN AAAA 2a01:618:400::1 nsd.nic.uk. 172800 IN AAAA 2610:a1:1010::3 nsc.nic.uk. 172800 IN AAAA 2610:a1:1009::3 nsb.nic.uk. 172800 IN AAAA 2001:502:2eda::3 nsa.nic.uk. 172800 IN AAAA 2001:502:ad09::3 ;; { "EDNS-VERSION": 0 }
	Query to f.root-servers.net for uk/DNSKEY
	Received 870 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 870 octets ;; HEADER SECTION ;; id = 16210 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 10 arcount = 17 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) uk. 172800 IN NS nsa.nic.uk. uk. 172800 IN NS nsb.nic.uk. uk. 172800 IN NS nsc.nic.uk. uk. 172800 IN NS nsd.nic.uk. uk. 172800 IN NS dns1.nic.uk. uk. 172800 IN NS dns2.nic.uk. uk. 172800 IN NS dns3.nic.uk. uk. 172800 IN NS dns4.nic.uk. uk. 86400 IN DS ( 43876 8 2 a107ed2ac1bd14d924173bc7e827a1153582072394f9272ba37e2353bc659603 ) uk. 86400 IN RRSIG ( DS 8 1 86400 20241011050000 20240928040000 20038 . LwsFMQvH6KUSUwdDQIXMCfS2LyKH1GqmlvvTTOvNai//ETrbHAIl+6uqEyjZGKq/q/zENDwvjh8J bZkWk+Z7uAbPQBKVNF4rCWbicHD4BOltdNYJzuOvFBTlmyvDUU72xU+89lXI0B2nbXgDx0g0T8LN 6b+BC5gEpj1Oe33zWiVj+r3eFTwzd68qaSW8Vx9hahoCN42sewtlTVheoiyuNTPOUh/Rpx1ZyCAv Ag6W0VBeMD6OpcqaWWbyYuhCD/4HO2t91OS/qdiql9bSgY7gRIRL1xd26wgEKZH4nqIOwA8pWGl3 ubmBqAhhc5h1pkay85Xyd2JDvCJOZ+gl92zaew== ) ;; ADDITIONAL SECTION (17 records) nsa.nic.uk. 172800 IN A 156.154.100.3 nsa.nic.uk. 172800 IN AAAA 2001:502:ad09::3 nsb.nic.uk. 172800 IN A 156.154.101.3 nsb.nic.uk. 172800 IN AAAA 2001:502:2eda::3 nsc.nic.uk. 172800 IN A 156.154.102.3 nsc.nic.uk. 172800 IN AAAA 2610:a1:1009::3 nsd.nic.uk. 172800 IN A 156.154.103.3 nsd.nic.uk. 172800 IN AAAA 2610:a1:1010::3 dns1.nic.uk. 172800 IN A 213.248.216.1 dns1.nic.uk. 172800 IN AAAA 2a01:618:400::1 dns2.nic.uk. 172800 IN A 103.49.80.1 dns2.nic.uk. 172800 IN AAAA 2401:fd80:400::1 dns3.nic.uk. 172800 IN A 213.248.220.1 dns3.nic.uk. 172800 IN AAAA 2a01:618:404::1 dns4.nic.uk. 172800 IN A 43.230.48.1 dns4.nic.uk. 172800 IN AAAA 2401:fd80:404::1 ;; { "EDNS-VERSION": 0 }
	Found child zone uk

	Checking DS between . and uk
	Query to k.root-servers.net for uk/DS
	Received 366 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 366 octets ;; HEADER SECTION ;; id = 12077 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uk. IN DS ;; ANSWER SECTION (2 records) uk. 86400 IN DS ( 43876 8 2 a107ed2ac1bd14d924173bc7e827a1153582072394f9272ba37e2353bc659603 ) uk. 86400 IN RRSIG ( DS 8 1 86400 20241011050000 20240928040000 20038 . LwsFMQvH6KUSUwdDQIXMCfS2LyKH1GqmlvvTTOvNai//ETrbHAIl+6uqEyjZGKq/q/zENDwvjh8J bZkWk+Z7uAbPQBKVNF4rCWbicHD4BOltdNYJzuOvFBTlmyvDUU72xU+89lXI0B2nbXgDx0g0T8LN 6b+BC5gEpj1Oe33zWiVj+r3eFTwzd68qaSW8Vx9hahoCN42sewtlTVheoiyuNTPOUh/Rpx1ZyCAv Ag6W0VBeMD6OpcqaWWbyYuhCD/4HO2t91OS/qdiql9bSgY7gRIRL1xd26wgEKZH4nqIOwA8pWGl3 ubmBqAhhc5h1pkay85Xyd2JDvCJOZ+gl92zaew== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for uk in the . zone
	DS=43876/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`uk. 86400 IN RRSIG ( DS 8 1 86400 20241011050000 20240928040000 20038 . LwsFMQvH6KUSUwdDQIXMCfS2LyKH1GqmlvvTTOvNai//ETrbHAIl+6uqEyjZGKq/q/zENDwvjh8J bZkWk+Z7uAbPQBKVNF4rCWbicHD4BOltdNYJzuOvFBTlmyvDUU72xU+89lXI0B2nbXgDx0g0T8LN 6b+BC5gEpj1Oe33zWiVj+r3eFTwzd68qaSW8Vx9hahoCN42sewtlTVheoiyuNTPOUh/Rpx1ZyCAv Ag6W0VBeMD6OpcqaWWbyYuhCD/4HO2t91OS/qdiql9bSgY7gRIRL1xd26wgEKZH4nqIOwA8pWGl3 ubmBqAhhc5h1pkay85Xyd2JDvCJOZ+gl92zaew== )`
	RRSIG=20038 and DNSKEY=20038 verifies the DS RRset
	DS=43876/SHA-256 is now in the chain-of-trust
	`uk. 86400 IN DS ( 43876 8 2 a107ed2ac1bd14d924173bc7e827a1153582072394f9272ba37e2353bc659603 )`
	Query to nsd.nic.uk for uk/DNSKEY
	Received 745 bytes from 156.154.103.3
	;; Response received from [156.154.103.3] 745 octets ;; HEADER SECTION ;; id = 64385 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uk. IN DNSKEY ;; ANSWER SECTION (3 records) uk. 3600 IN DNSKEY ( 256 3 8 AwEAAeGOYY7fiJwowB47qBZS9G67Bas0rIb23LgGVw1du1K3Is6H2LxfWvtEYyrZ5BE5ddSwLsgz 7F8v/kIBXFhjltAkaU8o+AYSIqDDPlz4+0L1e/ofv42uJ6pcygi74WAWhJOE/QooRUeO8zwTIru7 EgmtjxFXZunQJJmCygY1l5OZ ) ; Key ID = 43056 uk. 3600 IN DNSKEY ( 257 3 8 AwEAAbOOWSsuXCZ8x/DBsz2tC/58YYi/qul9Mk8sJm5HyNYgQ0oyg6KIxaPvmqcHfyiwma9p+f8S jFZa/51zYQQzWK1flMFyNMl2YMHS/E+7NNa+f1DND23FyBu2VGrXf50c72KVG1s1qnlEusPbkBzh 2zdYRJtiVan+P4OrPmwRfxwfsl7blNWJQkHg2Gy+WeAmAY7PFFlHeDqfYQCJ5bqXJzcvTbh1dPzW uBPeynjXFXCbC5msJQbLcm1KJx2cMNdJJxW9raXj75MJFtotwAGYi7UL285qqia1e6MWfbZKbSmB xkrliGJNSfopBeesJ6LjWHaj+5W/rJdjyhjv3AWNMHE= ) ; Key ID = 43876 uk. 3600 IN RRSIG ( DNSKEY 8 1 3600 20241029131514 20240924131412 43876 uk. FdRw0AWeWrzXzUQGJLd4iWhZOtMv4Z/XKAhuQFEehZrX6g0VThspVNk/Vv5Q9G7T8bCFcUY5NlDe OLCD7MMfcL/sJTi8SZrrU3JCbsdmwnDyQoKTTbd9OYgeb8RkZaWznk/8G+Nt1nwFA+cEhQCkOueh 0/2tRo7QwxWYaiwGkM/l8NyGUWs3y8QoNn8OtopH+YThbDf78l7PFpeQliVixqh55P9J1O3+Mlrv ZsfJIla1wLecOG0pkYuzFXVI4jDrwbA87blZHHSITQ8IIclIOXENbCl1in6V0pXkNcEI7/NFdGz+ etaOsuGobkODbPbn0YWU8Z7hpUX4/tzB3o33ww== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for uk
	`uk. 3600 IN DNSKEY ( 256 3 8 AwEAAeGOYY7fiJwowB47qBZS9G67Bas0rIb23LgGVw1du1K3Is6H2LxfWvtEYyrZ5BE5ddSwLsgz 7F8v/kIBXFhjltAkaU8o+AYSIqDDPlz4+0L1e/ofv42uJ6pcygi74WAWhJOE/QooRUeO8zwTIru7 EgmtjxFXZunQJJmCygY1l5OZ ) ; Key ID = 43056`
	`uk. 3600 IN DNSKEY ( 257 3 8 AwEAAbOOWSsuXCZ8x/DBsz2tC/58YYi/qul9Mk8sJm5HyNYgQ0oyg6KIxaPvmqcHfyiwma9p+f8S jFZa/51zYQQzWK1flMFyNMl2YMHS/E+7NNa+f1DND23FyBu2VGrXf50c72KVG1s1qnlEusPbkBzh 2zdYRJtiVan+P4OrPmwRfxwfsl7blNWJQkHg2Gy+WeAmAY7PFFlHeDqfYQCJ5bqXJzcvTbh1dPzW uBPeynjXFXCbC5msJQbLcm1KJx2cMNdJJxW9raXj75MJFtotwAGYi7UL285qqia1e6MWfbZKbSmB xkrliGJNSfopBeesJ6LjWHaj+5W/rJdjyhjv3AWNMHE= ) ; Key ID = 43876`
	DNSKEY=43876/SEP is now in the chain-of-trust
	DS=43876/SHA-256 verifies DNSKEY=43876/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`uk. 3600 IN RRSIG ( DNSKEY 8 1 3600 20241029131514 20240924131412 43876 uk. FdRw0AWeWrzXzUQGJLd4iWhZOtMv4Z/XKAhuQFEehZrX6g0VThspVNk/Vv5Q9G7T8bCFcUY5NlDe OLCD7MMfcL/sJTi8SZrrU3JCbsdmwnDyQoKTTbd9OYgeb8RkZaWznk/8G+Nt1nwFA+cEhQCkOueh 0/2tRo7QwxWYaiwGkM/l8NyGUWs3y8QoNn8OtopH+YThbDf78l7PFpeQliVixqh55P9J1O3+Mlrv ZsfJIla1wLecOG0pkYuzFXVI4jDrwbA87blZHHSITQ8IIclIOXENbCl1in6V0pXkNcEI7/NFdGz+ etaOsuGobkODbPbn0YWU8Z7hpUX4/tzB3o33ww== )`
	RRSIG=43876 and DNSKEY=43876/SEP verifies the DNSKEY RRset
	DNSKEY=43056 is now in the chain-of-trust
	Query to nsd.nic.uk for www.autokeys-r-us.co.uk/A
	Received 628 bytes from 156.154.103.3
	;; Response received from [156.154.103.3] 628 octets ;; HEADER SECTION ;; id = 11991 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.autokeys-r-us.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) autokeys-r-us.co.uk. 172800 IN NS ns2.bingloft.com. autokeys-r-us.co.uk. 172800 IN NS ns1.bingloft.com. G9F1KIIHM8M9VHJK7LRVETBQCEOGJIQP.co.uk. 10800 IN NSEC3 ( 1 1 0 - g9f3nq74ntit1d6qsrkccs86r4t7h1md NS SOA RRSIG DNSKEY NSEC3PARAM TYPE65534 ) G9F1KIIHM8M9VHJK7LRVETBQCEOGJIQP.co.uk. 10800 IN RRSIG ( NSEC3 8 3 10800 20241030160128 20240925152924 33621 co.uk. SP2N0QJrnk3/+jufsDeUQ8FJD43MlQwQT+L/YVJnfzMuYdAS8oiaaWKN4baH+ZDROdK5A1gSuf6S cdwqA32kvto9TSpFqERpBl5vDYymE4bl7KguNd64Lem4+0Xe+9lxzgCk7IKN9qmWq7ucsOBrl8k0 C91AlyA1CO/lF++LtOI= ) 5IAM72CT7I83GK1UMTR0VEHUMD2CM04N.co.uk. 10800 IN NSEC3 ( 1 1 0 - 5iar1cmfnmkgc27qko4904ll0lniimd7 NS DS RRSIG ) 5IAM72CT7I83GK1UMTR0VEHUMD2CM04N.co.uk. 10800 IN RRSIG ( NSEC3 8 3 10800 20241031135127 20240926125619 33621 co.uk. CFEMeYNFlLwFDKhFL1lTIs9N1M8aIj9DeRHyJ5RVvmaftIWgOA3A1fL52NsPfZQcXB3yzUFqWXia zaaPDsbUYwB7XM9fD+BESf0aQzQYe/rHVhPKtQLINre98CXiegar6iUnQV7vIID8btluHS6F5CQL z9SJcNmEvN/Ale4s+vk= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to nsa.nic.uk for co.uk/DNSKEY
	Received 347 bytes from 156.154.100.3
	;; Response received from [156.154.100.3] 347 octets ;; HEADER SECTION ;; id = 32008 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.uk. IN DNSKEY ;; ANSWER SECTION (2 records) co.uk. 300 IN DNSKEY ( 256 3 8 AwEAAcf+56ydE3WHB5vn1UxYBXJJXBlJfHlS/MWEVn+8KVJyED0iNLvSEvSr47VeBnp7e53TbVQS 1pLMGaL/Upq4Hb70kY8LrlPOG9b7Guhbm7jRaosC6PETNPQ1aoNrZtAagRJQX3Jzh3o+xjQwTcUx LsQ97j/hB3zZtFuZOw6+8uLL ) ; Key ID = 33621 co.uk. 300 IN RRSIG ( DNSKEY 8 2 300 20241029190237 20240924180241 33621 co.uk. T8LFCyIE2cDRHI3U0f2opOPvLinodkYRMlsjFe9irnrGfC/B2t0rL6DEC+eUSuwIk0TKpo8zIlln LGl6UOwyD7frzplX2bB7xf9TRD5ndLoweDzJ94ELtvnWWcQ+SZ/j+gtBkFjOr3C67Karqp0N8KdY CImDA/r2gFC+erKj6Ow= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone co.uk
	Attempting to learn nameservers for co.uk
	Query to nsa.nic.uk for co.uk/NS
	Received 353 bytes from 156.154.100.3
	;; Response received from [156.154.100.3] 353 octets ;; HEADER SECTION ;; id = 33314 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 9 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.uk. IN NS ;; ANSWER SECTION (9 records) co.uk. 172800 IN NS nsd.nic.uk. co.uk. 172800 IN NS dns4.nic.uk. co.uk. 172800 IN NS nsa.nic.uk. co.uk. 172800 IN NS nsb.nic.uk. co.uk. 172800 IN NS nsc.nic.uk. co.uk. 172800 IN NS dns3.nic.uk. co.uk. 172800 IN NS dns1.nic.uk. co.uk. 172800 IN NS dns2.nic.uk. co.uk. 172800 IN RRSIG ( NS 8 2 172800 20241028233714 20240923233415 33621 co.uk. lEz2LYdDpQPaGP+V/Og9pRRjjR7k3D2QcH80YleAn4O2TS9qi3I2q1pchmcBSsAyGvy+3rUNuezn Y82q4aX/LHTQx7XpuTfLXO2QJhvnNBZu2UbFLfGSeYQCug0b/8tPh7xGQ1OdbBrl3ZEh6Uos+cTP 69QoQ4b/Zixlsihu7ZY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found co.uk nameservers: nsd.nic.uk, dns4.nic.uk, nsa.nic.uk, nsb.nic.uk, nsc.nic.uk, dns3.nic.uk, dns1.nic.uk, dns2.nic.uk

co.uk

	Checking DS between uk and co.uk
	Query to dns4.nic.uk for co.uk/DS
	Received 244 bytes from 43.230.48.1
	;; Response received from [43.230.48.1] 244 octets ;; HEADER SECTION ;; id = 8977 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.uk. IN DS ;; ANSWER SECTION (2 records) co.uk. 300 IN DS ( 33621 8 2 b9199d8b7fca7107d78c418d1d1bc9e9fe9d9b9b187bd13c96dc4b6582425cd8 ) co.uk. 300 IN RRSIG ( DS 8 2 300 20241027033539 20240922025518 43056 uk. Y7s2u3TXvK1+s7703VZBtnki5OMhGRm5sI6E6maE3P3qIiHURVHN5JEqODonDoahNgM4MM2IA2Yo zo2Llti9p8+w3N0ahiYKXzJ0aqBPhWNdqzFPW3DP/rpcNpmAsAunsXQBgvs3RxDtkTzgG6G5+Jup aAYKckwGINKGnu+Y4+U= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for co.uk in the uk zone
	DS=33621/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`co.uk. 300 IN RRSIG ( DS 8 2 300 20241027033539 20240922025518 43056 uk. Y7s2u3TXvK1+s7703VZBtnki5OMhGRm5sI6E6maE3P3qIiHURVHN5JEqODonDoahNgM4MM2IA2Yo zo2Llti9p8+w3N0ahiYKXzJ0aqBPhWNdqzFPW3DP/rpcNpmAsAunsXQBgvs3RxDtkTzgG6G5+Jup aAYKckwGINKGnu+Y4+U= )`
	RRSIG=43056 and DNSKEY=43056 verifies the DS RRset
	DS=33621/SHA-256 is now in the chain-of-trust
	`co.uk. 300 IN DS ( 33621 8 2 b9199d8b7fca7107d78c418d1d1bc9e9fe9d9b9b187bd13c96dc4b6582425cd8 )`
	Query to nsb.nic.uk for co.uk/DNSKEY
	Received 347 bytes from 156.154.101.3
	;; Response received from [156.154.101.3] 347 octets ;; HEADER SECTION ;; id = 42127 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.uk. IN DNSKEY ;; ANSWER SECTION (2 records) co.uk. 300 IN DNSKEY ( 256 3 8 AwEAAcf+56ydE3WHB5vn1UxYBXJJXBlJfHlS/MWEVn+8KVJyED0iNLvSEvSr47VeBnp7e53TbVQS 1pLMGaL/Upq4Hb70kY8LrlPOG9b7Guhbm7jRaosC6PETNPQ1aoNrZtAagRJQX3Jzh3o+xjQwTcUx LsQ97j/hB3zZtFuZOw6+8uLL ) ; Key ID = 33621 co.uk. 300 IN RRSIG ( DNSKEY 8 2 300 20241029190237 20240924180241 33621 co.uk. T8LFCyIE2cDRHI3U0f2opOPvLinodkYRMlsjFe9irnrGfC/B2t0rL6DEC+eUSuwIk0TKpo8zIlln LGl6UOwyD7frzplX2bB7xf9TRD5ndLoweDzJ94ELtvnWWcQ+SZ/j+gtBkFjOr3C67Karqp0N8KdY CImDA/r2gFC+erKj6Ow= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DNSKEY records for co.uk
	`co.uk. 300 IN DNSKEY ( 256 3 8 AwEAAcf+56ydE3WHB5vn1UxYBXJJXBlJfHlS/MWEVn+8KVJyED0iNLvSEvSr47VeBnp7e53TbVQS 1pLMGaL/Upq4Hb70kY8LrlPOG9b7Guhbm7jRaosC6PETNPQ1aoNrZtAagRJQX3Jzh3o+xjQwTcUx LsQ97j/hB3zZtFuZOw6+8uLL ) ; Key ID = 33621`
	DNSKEY=33621 is now in the chain-of-trust
	DS=33621/SHA-256 verifies DNSKEY=33621
	Found 1 RRSIGs over DNSKEY RRset
	`co.uk. 300 IN RRSIG ( DNSKEY 8 2 300 20241029190237 20240924180241 33621 co.uk. T8LFCyIE2cDRHI3U0f2opOPvLinodkYRMlsjFe9irnrGfC/B2t0rL6DEC+eUSuwIk0TKpo8zIlln LGl6UOwyD7frzplX2bB7xf9TRD5ndLoweDzJ94ELtvnWWcQ+SZ/j+gtBkFjOr3C67Karqp0N8KdY CImDA/r2gFC+erKj6Ow= )`
	RRSIG=33621 and DNSKEY=33621 verifies the DNSKEY RRset
	Query to nsa.nic.uk for www.autokeys-r-us.co.uk/A
	Received 628 bytes from 156.154.100.3
	;; Response received from [156.154.100.3] 628 octets ;; HEADER SECTION ;; id = 12900 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.autokeys-r-us.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) autokeys-r-us.co.uk. 172800 IN NS ns1.bingloft.com. autokeys-r-us.co.uk. 172800 IN NS ns2.bingloft.com. G9F1KIIHM8M9VHJK7LRVETBQCEOGJIQP.co.uk. 10800 IN NSEC3 ( 1 1 0 - g9f3nq74ntit1d6qsrkccs86r4t7h1md NS SOA RRSIG DNSKEY NSEC3PARAM TYPE65534 ) G9F1KIIHM8M9VHJK7LRVETBQCEOGJIQP.co.uk. 10800 IN RRSIG ( NSEC3 8 3 10800 20241030160128 20240925152924 33621 co.uk. SP2N0QJrnk3/+jufsDeUQ8FJD43MlQwQT+L/YVJnfzMuYdAS8oiaaWKN4baH+ZDROdK5A1gSuf6S cdwqA32kvto9TSpFqERpBl5vDYymE4bl7KguNd64Lem4+0Xe+9lxzgCk7IKN9qmWq7ucsOBrl8k0 C91AlyA1CO/lF++LtOI= ) 5IAM72CT7I83GK1UMTR0VEHUMD2CM04N.co.uk. 10800 IN NSEC3 ( 1 1 0 - 5iar1cmfnmkgc27qko4904ll0lniimd7 NS DS RRSIG ) 5IAM72CT7I83GK1UMTR0VEHUMD2CM04N.co.uk. 10800 IN RRSIG ( NSEC3 8 3 10800 20241031135127 20240926125619 33621 co.uk. CFEMeYNFlLwFDKhFL1lTIs9N1M8aIj9DeRHyJ5RVvmaftIWgOA3A1fL52NsPfZQcXB3yzUFqWXia zaaPDsbUYwB7XM9fD+BESf0aQzQYe/rHVhPKtQLINre98CXiegar6iUnQV7vIID8btluHS6F5CQL z9SJcNmEvN/Ale4s+vk= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to nsa.nic.uk for autokeys-r-us.co.uk/DNSKEY
	Received 619 bytes from 156.154.100.3
	;; Response received from [156.154.100.3] 619 octets ;; HEADER SECTION ;; id = 4266 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; autokeys-r-us.co.uk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) autokeys-r-us.co.uk. 172800 IN NS ns2.bingloft.com. autokeys-r-us.co.uk. 172800 IN NS ns1.bingloft.com. G9F1KIIHM8M9VHJK7LRVETBQCEOGJIQP.co.uk. 10800 IN NSEC3 ( 1 1 0 - g9f3nq74ntit1d6qsrkccs86r4t7h1md NS SOA RRSIG DNSKEY NSEC3PARAM TYPE65534 ) G9F1KIIHM8M9VHJK7LRVETBQCEOGJIQP.co.uk. 10800 IN RRSIG ( NSEC3 8 3 10800 20241030160128 20240925152924 33621 co.uk. SP2N0QJrnk3/+jufsDeUQ8FJD43MlQwQT+L/YVJnfzMuYdAS8oiaaWKN4baH+ZDROdK5A1gSuf6S cdwqA32kvto9TSpFqERpBl5vDYymE4bl7KguNd64Lem4+0Xe+9lxzgCk7IKN9qmWq7ucsOBrl8k0 C91AlyA1CO/lF++LtOI= ) 5IAM72CT7I83GK1UMTR0VEHUMD2CM04N.co.uk. 10800 IN NSEC3 ( 1 1 0 - 5iar1cmfnmkgc27qko4904ll0lniimd7 NS DS RRSIG ) 5IAM72CT7I83GK1UMTR0VEHUMD2CM04N.co.uk. 10800 IN RRSIG ( NSEC3 8 3 10800 20241031135127 20240926125619 33621 co.uk. CFEMeYNFlLwFDKhFL1lTIs9N1M8aIj9DeRHyJ5RVvmaftIWgOA3A1fL52NsPfZQcXB3yzUFqWXia zaaPDsbUYwB7XM9fD+BESf0aQzQYe/rHVhPKtQLINre98CXiegar6iUnQV7vIID8btluHS6F5CQL z9SJcNmEvN/Ale4s+vk= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone autokeys-r-us.co.uk

autokeys-r-us.co.uk

	Checking DS between co.uk and autokeys-r-us.co.uk
	Query to nsa.nic.uk for autokeys-r-us.co.uk/DS
	Received 808 bytes from 156.154.100.3
	;; Response received from [156.154.100.3] 808 octets ;; HEADER SECTION ;; id = 9723 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; autokeys-r-us.co.uk. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) G9F1KIIHM8M9VHJK7LRVETBQCEOGJIQP.co.uk. 10800 IN NSEC3 ( 1 1 0 - g9f3nq74ntit1d6qsrkccs86r4t7h1md NS SOA RRSIG DNSKEY NSEC3PARAM TYPE65534 ) G9F1KIIHM8M9VHJK7LRVETBQCEOGJIQP.co.uk. 10800 IN RRSIG ( NSEC3 8 3 10800 20241030160128 20240925152924 33621 co.uk. SP2N0QJrnk3/+jufsDeUQ8FJD43MlQwQT+L/YVJnfzMuYdAS8oiaaWKN4baH+ZDROdK5A1gSuf6S cdwqA32kvto9TSpFqERpBl5vDYymE4bl7KguNd64Lem4+0Xe+9lxzgCk7IKN9qmWq7ucsOBrl8k0 C91AlyA1CO/lF++LtOI= ) co.uk. 10800 IN SOA ( dns1.nic.uk. hostmaster.nominet.org.uk. 1727544374 ;serial 900 ;refresh 300 ;retry 2419200 ;expire 10800 ;minimum ) co.uk. 10800 IN RRSIG ( SOA 8 2 172800 20241102172613 20240928162613 33621 co.uk. DYalhu+aBNgTr+u10YoLr/sjzDOpikagWakm+u2ipy1usJ/+/K1Mdke1WAwvj3pZnCn+BdnH/Dbe Hf/IN692LGeqjPuluuZeVpz1yuD4FSKN+jKMEFAHLDxT/upHJZuvS1ahywpqC2D6UtD3dLwKBUi9 DvD5nH8smUqcyXFA4Qk= ) 5IAM72CT7I83GK1UMTR0VEHUMD2CM04N.co.uk. 10800 IN NSEC3 ( 1 1 0 - 5iar1cmfnmkgc27qko4904ll0lniimd7 NS DS RRSIG ) 5IAM72CT7I83GK1UMTR0VEHUMD2CM04N.co.uk. 10800 IN RRSIG ( NSEC3 8 3 10800 20241031135127 20240926125619 33621 co.uk. CFEMeYNFlLwFDKhFL1lTIs9N1M8aIj9DeRHyJ5RVvmaftIWgOA3A1fL52NsPfZQcXB3yzUFqWXia zaaPDsbUYwB7XM9fD+BESf0aQzQYe/rHVhPKtQLINre98CXiegar6iUnQV7vIID8btluHS6F5CQL z9SJcNmEvN/Ale4s+vk= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for autokeys-r-us.co.uk in the co.uk zone
	Query to ns1.bingloft.com for autokeys-r-us.co.uk/DNSKEY
	ns1.bingloft.com returns REFUSED for autokeys-r-us.co.uk/DNSKEY
	Query to ns2.bingloft.com for autokeys-r-us.co.uk/DNSKEY
	ns2.bingloft.com returns REFUSED for autokeys-r-us.co.uk/DNSKEY
	Failed to get DNSKEY RR set for zone autokeys-r-us.co.uk
	Query to ns1.bingloft.com for www.autokeys-r-us.co.uk/A
	ns1.bingloft.com returns REFUSED for www.autokeys-r-us.co.uk/A
	Query to ns2.bingloft.com for www.autokeys-r-us.co.uk/A
	ns2.bingloft.com returns REFUSED for www.autokeys-r-us.co.uk/A
	No response from autokeys-r-us.co.uk nameservers

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test www.autokeys-r-us.co.uk at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: