DNSSEC Analyzer - www.epidauros.be

Domain Name:

Time: 2021-01-16 00:06:06 UTC, NTP stratum 4

Analyzing DNSSEC problems for www.epidauros.be

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (864 bytes) ;; HEADER SECTION ;; id = 40287 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbKGKkqc1VAvQr48iPf9Nd39f337MitggxF0AB9kLKRNSuq9joOEPC/R6PD/4lTzUms8U9oP +aiF0rVC2rGOKSdOLxPHRLA3ameMFT2/3bmVCFsRsn03IVTdN5VUAfczjqjmA0t9NM7bbN5oVzuQ L3P1FyQb1q6HX4M1qg+htMNEd9PdlPLMFcrUg5fcYtTr2llVkO1Xo3lAdrjmmxfGeIyQnskpwPyW 88J527DEytmgPo5KzLBYLMoL2Q41PK0ul0rs7yN+g5IG4LnJOcjew1yrmHXrp/OzrpsO4FkicufY t/ygfQKkT5HYbr/yFgeZAfaF80nYyc7wgDYxOeHdiRk= ) ; Key ID = 42351 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210201000000 20210111000000 20326 . nPlFYAyI+iUNytZu71KcMwdvR1ubjVRP6Hp7E/owRaLhHhOON4gJsezf4UoBeq75yeDBkzRA2pwD 7g6XVY/qsQM9WDuzTYQJWqvSGDj0BYF5bS482kH8Y3N/Ly/jlQCSFIlCbTjAUBHTdYZji6esQDqi Wk2SzB38ZLsxgey439JkhxUzMh5520zLCiOnuZs9Iy0KLoy4ss7R/GiQjcYEIi0zScXZXcDBr3qd 2HB/BL98F2MDeshzQ/VRimxsZ3RH3ERNPS1GurmjY/mTUZxX3ITj1C57PI2bgurv1b7dyp1zLpmZ lIz/21lQwvT3wESGF44J1YmBDheYoG44GY9RVg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbKGKkqc1VAvQr48iPf9Nd39f337MitggxF0AB9kLKRNSuq9joOEPC/R6PD/4lTzUms8U9oP +aiF0rVC2rGOKSdOLxPHRLA3ameMFT2/3bmVCFsRsn03IVTdN5VUAfczjqjmA0t9NM7bbN5oVzuQ L3P1FyQb1q6HX4M1qg+htMNEd9PdlPLMFcrUg5fcYtTr2llVkO1Xo3lAdrjmmxfGeIyQnskpwPyW 88J527DEytmgPo5KzLBYLMoL2Q41PK0ul0rs7yN+g5IG4LnJOcjew1yrmHXrp/OzrpsO4FkicufY t/ygfQKkT5HYbr/yFgeZAfaF80nYyc7wgDYxOeHdiRk= ) ; Key ID = 42351`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210201000000 20210111000000 20326 . nPlFYAyI+iUNytZu71KcMwdvR1ubjVRP6Hp7E/owRaLhHhOON4gJsezf4UoBeq75yeDBkzRA2pwD 7g6XVY/qsQM9WDuzTYQJWqvSGDj0BYF5bS482kH8Y3N/Ly/jlQCSFIlCbTjAUBHTdYZji6esQDqi Wk2SzB38ZLsxgey439JkhxUzMh5520zLCiOnuZs9Iy0KLoy4ss7R/GiQjcYEIi0zScXZXcDBr3qd 2HB/BL98F2MDeshzQ/VRimxsZ3RH3ERNPS1GurmjY/mTUZxX3ITj1C57PI2bgurv1b7dyp1zLpmZ lIz/21lQwvT3wESGF44J1YmBDheYoG44GY9RVg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=42351 is now in the chain-of-trust
	Query to g.root-servers.net for www.epidauros.be/A
	Received 801 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (801 bytes) ;; HEADER SECTION ;; id = 30432 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; www.epidauros.be. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) be. 172800 IN NS b.ns.dns.be. be. 172800 IN NS d.ns.dns.be. be. 172800 IN NS c.ns.dns.be. be. 172800 IN NS a.ns.dns.be. be. 172800 IN NS y.ns.dns.be. be. 172800 IN NS z.nsset.be. be. 86400 IN DS ( 12664 8 2 75141e9b1188a95a7a855bf47e278a742a5e3f2ddeed8e995d749d48f2f0e72d ) be. 86400 IN DS ( 52756 8 2 5485ac33dd7c7ed237ea2a4bd269731c816960fe181042024484b5ceca6ecc9f ) be. 86400 IN RRSIG ( DS 8 1 86400 20210128210000 20210115200000 42351 . p7gHehdaG8rNoqB0hvyDLwuYP8uN/nm8E9WEX6Yg0mrH1dxewxxx4AaYdcmnWlgKWEdtwVWgKcvd s26w3UCqQcVlFMJi5+5UpUeljEB8hwq3iRiL9+eBe5n4hM0Bh5bXDL3025k6b9kBlk1k0b2v4Vue I4uGgUJiJ1nl2KQIKER4BSTMOnLg1lQghfEysVdZ9CdI22hudzm3xjrvBfvQOAegSmwVVN7A2q8S 763xKpKKzy6TaEoTa/l/7QA0+jlJ4RFRlne8JsUwJAQ7qGC+Lyfe1f2WDjcXT6CmogrhCM1AKOMQ huzzWQTDrfZpVSaAxTt9wbndeToYxQ9S3Qbl8Q== ) ;; ADDITIONAL SECTION (13 records) a.ns.dns.be. 172800 IN A 194.0.6.1 b.ns.dns.be. 172800 IN A 194.0.37.1 c.ns.dns.be. 172800 IN A 194.0.43.1 d.ns.dns.be. 172800 IN A 194.0.44.1 y.ns.dns.be. 172800 IN A 120.29.253.8 z.nsset.be. 172800 IN A 194.0.25.36 a.ns.dns.be. 172800 IN AAAA 2001:678:9::1 b.ns.dns.be. 172800 IN AAAA 2001:678:64::1 c.ns.dns.be. 172800 IN AAAA 2001:678:68::1 d.ns.dns.be. 172800 IN AAAA 2001:678:6c::1 y.ns.dns.be. 172800 IN AAAA 2001:dcd:7::8 z.nsset.be. 172800 IN AAAA 2001:678:20::36 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.root-servers.net for be/DNSKEY
	Received 787 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (787 bytes) ;; HEADER SECTION ;; id = 49931 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; be. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) be. 172800 IN NS a.ns.dns.be. be. 172800 IN NS b.ns.dns.be. be. 172800 IN NS c.ns.dns.be. be. 172800 IN NS d.ns.dns.be. be. 172800 IN NS y.ns.dns.be. be. 172800 IN NS z.nsset.be. be. 86400 IN DS ( 12664 8 2 75141e9b1188a95a7a855bf47e278a742a5e3f2ddeed8e995d749d48f2f0e72d ) be. 86400 IN DS ( 52756 8 2 5485ac33dd7c7ed237ea2a4bd269731c816960fe181042024484b5ceca6ecc9f ) be. 86400 IN RRSIG ( DS 8 1 86400 20210128210000 20210115200000 42351 . p7gHehdaG8rNoqB0hvyDLwuYP8uN/nm8E9WEX6Yg0mrH1dxewxxx4AaYdcmnWlgKWEdtwVWgKcvd s26w3UCqQcVlFMJi5+5UpUeljEB8hwq3iRiL9+eBe5n4hM0Bh5bXDL3025k6b9kBlk1k0b2v4Vue I4uGgUJiJ1nl2KQIKER4BSTMOnLg1lQghfEysVdZ9CdI22hudzm3xjrvBfvQOAegSmwVVN7A2q8S 763xKpKKzy6TaEoTa/l/7QA0+jlJ4RFRlne8JsUwJAQ7qGC+Lyfe1f2WDjcXT6CmogrhCM1AKOMQ huzzWQTDrfZpVSaAxTt9wbndeToYxQ9S3Qbl8Q== ) ;; ADDITIONAL SECTION (13 records) a.ns.dns.be. 172800 IN A 194.0.6.1 a.ns.dns.be. 172800 IN AAAA 2001:678:9::1 b.ns.dns.be. 172800 IN A 194.0.37.1 b.ns.dns.be. 172800 IN AAAA 2001:678:64::1 c.ns.dns.be. 172800 IN A 194.0.43.1 c.ns.dns.be. 172800 IN AAAA 2001:678:68::1 d.ns.dns.be. 172800 IN A 194.0.44.1 d.ns.dns.be. 172800 IN AAAA 2001:678:6c::1 y.ns.dns.be. 172800 IN A 120.29.253.8 y.ns.dns.be. 172800 IN AAAA 2001:dcd:7::8 z.nsset.be. 172800 IN A 194.0.25.36 z.nsset.be. 172800 IN AAAA 2001:678:20::36 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone be

	Checking DS between . and be
	Query to m.root-servers.net for be/DS
	Received 414 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (414 bytes) ;; HEADER SECTION ;; id = 2798 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; be. IN DS ;; ANSWER SECTION (3 records) be. 86400 IN DS ( 12664 8 2 75141e9b1188a95a7a855bf47e278a742a5e3f2ddeed8e995d749d48f2f0e72d ) be. 86400 IN DS ( 52756 8 2 5485ac33dd7c7ed237ea2a4bd269731c816960fe181042024484b5ceca6ecc9f ) be. 86400 IN RRSIG ( DS 8 1 86400 20210128210000 20210115200000 42351 . p7gHehdaG8rNoqB0hvyDLwuYP8uN/nm8E9WEX6Yg0mrH1dxewxxx4AaYdcmnWlgKWEdtwVWgKcvd s26w3UCqQcVlFMJi5+5UpUeljEB8hwq3iRiL9+eBe5n4hM0Bh5bXDL3025k6b9kBlk1k0b2v4Vue I4uGgUJiJ1nl2KQIKER4BSTMOnLg1lQghfEysVdZ9CdI22hudzm3xjrvBfvQOAegSmwVVN7A2q8S 763xKpKKzy6TaEoTa/l/7QA0+jlJ4RFRlne8JsUwJAQ7qGC+Lyfe1f2WDjcXT6CmogrhCM1AKOMQ huzzWQTDrfZpVSaAxTt9wbndeToYxQ9S3Qbl8Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for be in the . zone
	DS=12664/SHA-256 has algorithm RSASHA256
	DS=52756/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`be. 86400 IN RRSIG ( DS 8 1 86400 20210128210000 20210115200000 42351 . p7gHehdaG8rNoqB0hvyDLwuYP8uN/nm8E9WEX6Yg0mrH1dxewxxx4AaYdcmnWlgKWEdtwVWgKcvd s26w3UCqQcVlFMJi5+5UpUeljEB8hwq3iRiL9+eBe5n4hM0Bh5bXDL3025k6b9kBlk1k0b2v4Vue I4uGgUJiJ1nl2KQIKER4BSTMOnLg1lQghfEysVdZ9CdI22hudzm3xjrvBfvQOAegSmwVVN7A2q8S 763xKpKKzy6TaEoTa/l/7QA0+jlJ4RFRlne8JsUwJAQ7qGC+Lyfe1f2WDjcXT6CmogrhCM1AKOMQ huzzWQTDrfZpVSaAxTt9wbndeToYxQ9S3Qbl8Q== )`
	RRSIG=42351 and DNSKEY=42351 verifies the DS RRset
	DS=12664/SHA-256 is now in the chain-of-trust
	DS=52756/SHA-256 is now in the chain-of-trust
	`be. 86400 IN DS ( 12664 8 2 75141e9b1188a95a7a855bf47e278a742a5e3f2ddeed8e995d749d48f2f0e72d )`
	`be. 86400 IN DS ( 52756 8 2 5485ac33dd7c7ed237ea2a4bd269731c816960fe181042024484b5ceca6ecc9f )`
	Query to z.nsset.be for be/DNSKEY
	Received 1317 bytes from 194.0.25.36
	;; Answer received from 194.0.25.36 (1317 bytes) ;; HEADER SECTION ;; id = 30312 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option: ;; QUESTION SECTION (1 record) ;; be. IN DNSKEY ;; ANSWER SECTION (6 records) be. 86400 IN DNSKEY ( 256 3 8 AwEAAZaQBUfeRtgPV3SHJ1ZXGpV6omvHt+n44SFNTZSj/9e8nkhVsUGm5V3QwAJrowVo0FQ2FlIk fAcQlLZsvI1B3UZ2wTMllTxIaoNF5q5HCrXqwo75x4mvFq7R7B7I1Lm5kd6Y0TDehFCiW2MG9xYI SOaPp38sIvS8nmZIoe+4bnaz ) ; Key ID = 46794 be. 86400 IN DNSKEY ( 256 3 8 AwEAAdFsFKnR/bCO4L/cYN9ENbstzPIJ69dcQi1JqIVECG2BJprBkhBL5OqtFswhPC0Bbpfp0102 /L/260OXZFKrfD0JxTItWSO15ojfbaWbc0CIlIidxIgBm53KYURANjwfUuWukytm97RCxChn7sQi bz336FkEJ5Dn5TLqlIwo3A1d ) ; Key ID = 41553 be. 86400 IN DNSKEY ( 257 3 8 AwEAAdmdhm3X+vItv+zWIeobCJetLBhWVqLVMrexPU1MUfX38UpivmP6YXJl1BwenPZ4eipGPESV fAEJLiD7Bi+COMyQ9ZKoisPMk3I0qwwzk4PCsvqxO+6jIIpv3JeQGeJU1gxZDilYKsl8pLEpzPNn mGjUcm06fQKdA3cjI96sgMrRbCPrrmb1tj0kksi5qXdP9e1qLdLBpizgqqF5b/OSklYeC4SzcEcq AYr5W5R+7f1p24Yp/ihMTCIMJ0kHFDdNoI+GcEu8ciXH9Ml4gf7JC6vrQXgfrgVPHLculT+z+fSO j6PQHl5uqg3vU2YpehnfO0vQ94bGZuFqmsGs6WPzMP0= ) ; Key ID = 52756 be. 86400 IN DNSKEY ( 257 3 8 AwEAAaCP+X7/g1e8VWmvrwS3zf/9+5DPlj5D8a0bj+Vzt8/oucdtoOsdbHXWEv+Z0sY7z1G188IK ysuHjwKMrGpJz9GurbQCzmfNbjIqWyAGRnIm6CM2YM7niGxN1ji+0Vzz21pojSQJTG+Vx1VGr4SL eiB1+WuMR9kwaTh+jGKE3DE6xaEAUwEuOZrydnz7RA6urFe0POeE4aWc8NONtPafB9t2K0aLp49z ZPq3AbFZqRFRZRYQe/gtjAFFaMLMw1fEsOQVloj22poHAQAY9A38ykZVyWEcdaoBch8LRRwcBUvD SIXtlBuR05Cn+Fqi+hkupAe4H0EsOqRhDeKWEFOg+58= ) ; Key ID = 12664 be. 86400 IN DNSKEY ( 256 3 8 AwEAAehp/VQZQ3ZCVP8BrqPCYQmeHsW4uNuQO1Kw1RhcQ0a/NFqaaV3d/FrRZUFIWqa0RE4OSlBW cc+7/qSbUAdMzo6W3v7aTjJ9rtFhSMg2ifwCPXUxwFZJU1WygQGd3uvzk6WDc/rligxqt6UMZNBO pJUk6CFKO594+fhHzcCU1DaN ) ; Key ID = 59085 be. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210406023848 20201217092522 52756 be. W8qQZ8rsyfl/rkbvvnEU5hByiyEQtIHEmGJDUwTmEX7iwFXNRgtRuAt+jdADfDlgwOKXl2TU4A7N Hx9HwfdTiAssLLLwEE8XUTRB0iBoc1Tnu3lGLL/LGJtW3CnhPAnlMv9X1mB5Twjsc20nw7dRho6r O9TbwZbu8tdV6OhPSxE8CCk1kIadnM74EkzOzQLKNHPxQfnqyk6bfdQkmEiV3Bl0/KVATqGslTd6 LrRZV50GHUIUBagfZ9SJAtyxX3/mOyvsHfl3lKPuhD9H0rkMVdm/0Jpr4CmNW+yWKNSLTbtHEaMf oVrNsNRvsoKFH73/5vqbf+VWAVMMfRVJTE1O3g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option:
	Found 5 DNSKEY records for be
	`be. 86400 IN DNSKEY ( 256 3 8 AwEAAZaQBUfeRtgPV3SHJ1ZXGpV6omvHt+n44SFNTZSj/9e8nkhVsUGm5V3QwAJrowVo0FQ2FlIk fAcQlLZsvI1B3UZ2wTMllTxIaoNF5q5HCrXqwo75x4mvFq7R7B7I1Lm5kd6Y0TDehFCiW2MG9xYI SOaPp38sIvS8nmZIoe+4bnaz ) ; Key ID = 46794`
	`be. 86400 IN DNSKEY ( 256 3 8 AwEAAdFsFKnR/bCO4L/cYN9ENbstzPIJ69dcQi1JqIVECG2BJprBkhBL5OqtFswhPC0Bbpfp0102 /L/260OXZFKrfD0JxTItWSO15ojfbaWbc0CIlIidxIgBm53KYURANjwfUuWukytm97RCxChn7sQi bz336FkEJ5Dn5TLqlIwo3A1d ) ; Key ID = 41553`
	`be. 86400 IN DNSKEY ( 257 3 8 AwEAAdmdhm3X+vItv+zWIeobCJetLBhWVqLVMrexPU1MUfX38UpivmP6YXJl1BwenPZ4eipGPESV fAEJLiD7Bi+COMyQ9ZKoisPMk3I0qwwzk4PCsvqxO+6jIIpv3JeQGeJU1gxZDilYKsl8pLEpzPNn mGjUcm06fQKdA3cjI96sgMrRbCPrrmb1tj0kksi5qXdP9e1qLdLBpizgqqF5b/OSklYeC4SzcEcq AYr5W5R+7f1p24Yp/ihMTCIMJ0kHFDdNoI+GcEu8ciXH9Ml4gf7JC6vrQXgfrgVPHLculT+z+fSO j6PQHl5uqg3vU2YpehnfO0vQ94bGZuFqmsGs6WPzMP0= ) ; Key ID = 52756`
	`be. 86400 IN DNSKEY ( 257 3 8 AwEAAaCP+X7/g1e8VWmvrwS3zf/9+5DPlj5D8a0bj+Vzt8/oucdtoOsdbHXWEv+Z0sY7z1G188IK ysuHjwKMrGpJz9GurbQCzmfNbjIqWyAGRnIm6CM2YM7niGxN1ji+0Vzz21pojSQJTG+Vx1VGr4SL eiB1+WuMR9kwaTh+jGKE3DE6xaEAUwEuOZrydnz7RA6urFe0POeE4aWc8NONtPafB9t2K0aLp49z ZPq3AbFZqRFRZRYQe/gtjAFFaMLMw1fEsOQVloj22poHAQAY9A38ykZVyWEcdaoBch8LRRwcBUvD SIXtlBuR05Cn+Fqi+hkupAe4H0EsOqRhDeKWEFOg+58= ) ; Key ID = 12664`
	`be. 86400 IN DNSKEY ( 256 3 8 AwEAAehp/VQZQ3ZCVP8BrqPCYQmeHsW4uNuQO1Kw1RhcQ0a/NFqaaV3d/FrRZUFIWqa0RE4OSlBW cc+7/qSbUAdMzo6W3v7aTjJ9rtFhSMg2ifwCPXUxwFZJU1WygQGd3uvzk6WDc/rligxqt6UMZNBO pJUk6CFKO594+fhHzcCU1DaN ) ; Key ID = 59085`
	DNSKEY=52756/SEP is now in the chain-of-trust
	DS=52756/SHA-256 verifies DNSKEY=52756/SEP
	DNSKEY=12664/SEP is now in the chain-of-trust
	DS=12664/SHA-256 verifies DNSKEY=12664/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`be. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210406023848 20201217092522 52756 be. W8qQZ8rsyfl/rkbvvnEU5hByiyEQtIHEmGJDUwTmEX7iwFXNRgtRuAt+jdADfDlgwOKXl2TU4A7N Hx9HwfdTiAssLLLwEE8XUTRB0iBoc1Tnu3lGLL/LGJtW3CnhPAnlMv9X1mB5Twjsc20nw7dRho6r O9TbwZbu8tdV6OhPSxE8CCk1kIadnM74EkzOzQLKNHPxQfnqyk6bfdQkmEiV3Bl0/KVATqGslTd6 LrRZV50GHUIUBagfZ9SJAtyxX3/mOyvsHfl3lKPuhD9H0rkMVdm/0Jpr4CmNW+yWKNSLTbtHEaMf oVrNsNRvsoKFH73/5vqbf+VWAVMMfRVJTE1O3g== )`
	RRSIG=52756 and DNSKEY=52756/SEP verifies the DNSKEY RRset
	DNSKEY=46794 is now in the chain-of-trust
	DNSKEY=41553 is now in the chain-of-trust
	DNSKEY=59085 is now in the chain-of-trust
	Query to b.ns.dns.be for www.epidauros.be/A
	Received 384 bytes from 194.0.37.1
	;; Answer received from 194.0.37.1 (384 bytes) ;; HEADER SECTION ;; id = 58017 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1350 ;; option: ;; QUESTION SECTION (1 record) ;; www.epidauros.be. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) epidauros.be. 86400 IN NS ns2.ghen.be. epidauros.be. 86400 IN NS ns1.ghen.be. epidauros.be. 86400 IN DS ( 48204 13 2 6aa3d8e1695c0771978f10257055b36a2a57168fe41ebc9efb95f88b562b7a2f ) epidauros.be. 86400 IN RRSIG ( DS 8 2 86400 20210201013012 20210111060921 46794 be. K1R5C9F7QzPAW/OJ8UO4uiwOXHwl9c6bw7OXElDlL4+t4NFcE1OOvUzrgxQzwsOVmYe6JI07J5HM yHFWwOUkVWHYtupyntKhGAqIVxVZgYmz9k0CG4/3FMHGJaiQpjj3mY57vjkLMPciZLt1ZXx1VRMf xd7x2j0Bp3/tnknR1zQ= ) ;; ADDITIONAL SECTION (5 records) ns2.ghen.be. 86400 IN A 178.21.118.64 ns1.ghen.be. 86400 IN A 178.21.112.59 ns2.ghen.be. 86400 IN AAAA 2a02:2308:20::3be:0:1 ns1.ghen.be. 86400 IN AAAA 2a02:2308::3be:0:1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1350 ;; option:
	Query to d.ns.dns.be for epidauros.be/DNSKEY
	Received 380 bytes from 194.0.44.1
	;; Answer received from 194.0.44.1 (380 bytes) ;; HEADER SECTION ;; id = 38459 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1350 ;; option: ;; QUESTION SECTION (1 record) ;; epidauros.be. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) epidauros.be. 86400 IN NS ns2.ghen.be. epidauros.be. 86400 IN NS ns1.ghen.be. epidauros.be. 86400 IN DS ( 48204 13 2 6aa3d8e1695c0771978f10257055b36a2a57168fe41ebc9efb95f88b562b7a2f ) epidauros.be. 86400 IN RRSIG ( DS 8 2 86400 20210201013012 20210111060921 46794 be. K1R5C9F7QzPAW/OJ8UO4uiwOXHwl9c6bw7OXElDlL4+t4NFcE1OOvUzrgxQzwsOVmYe6JI07J5HM yHFWwOUkVWHYtupyntKhGAqIVxVZgYmz9k0CG4/3FMHGJaiQpjj3mY57vjkLMPciZLt1ZXx1VRMf xd7x2j0Bp3/tnknR1zQ= ) ;; ADDITIONAL SECTION (5 records) ns2.ghen.be. 86400 IN A 178.21.118.64 ns1.ghen.be. 86400 IN A 178.21.112.59 ns2.ghen.be. 86400 IN AAAA 2a02:2308:20::3be:0:1 ns1.ghen.be. 86400 IN AAAA 2a02:2308::3be:0:1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1350 ;; option:
	Found child zone epidauros.be

epidauros.be

	Checking DS between be and epidauros.be
	Query to c.ns.dns.be for epidauros.be/DS
	Received 251 bytes from 194.0.43.1
	;; Answer received from 194.0.43.1 (251 bytes) ;; HEADER SECTION ;; id = 9330 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1350 ;; option: ;; QUESTION SECTION (1 record) ;; epidauros.be. IN DS ;; ANSWER SECTION (2 records) epidauros.be. 86400 IN DS ( 48204 13 2 6aa3d8e1695c0771978f10257055b36a2a57168fe41ebc9efb95f88b562b7a2f ) epidauros.be. 86400 IN RRSIG ( DS 8 2 86400 20210201013012 20210111060921 46794 be. K1R5C9F7QzPAW/OJ8UO4uiwOXHwl9c6bw7OXElDlL4+t4NFcE1OOvUzrgxQzwsOVmYe6JI07J5HM yHFWwOUkVWHYtupyntKhGAqIVxVZgYmz9k0CG4/3FMHGJaiQpjj3mY57vjkLMPciZLt1ZXx1VRMf xd7x2j0Bp3/tnknR1zQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1350 ;; option:
	Found 1 DS records for epidauros.be in the be zone
	DS=48204/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`epidauros.be. 86400 IN RRSIG ( DS 8 2 86400 20210201013012 20210111060921 46794 be. K1R5C9F7QzPAW/OJ8UO4uiwOXHwl9c6bw7OXElDlL4+t4NFcE1OOvUzrgxQzwsOVmYe6JI07J5HM yHFWwOUkVWHYtupyntKhGAqIVxVZgYmz9k0CG4/3FMHGJaiQpjj3mY57vjkLMPciZLt1ZXx1VRMf xd7x2j0Bp3/tnknR1zQ= )`
	RRSIG=46794 and DNSKEY=46794 verifies the DS RRset
	DS=48204/SHA-256 is now in the chain-of-trust
	`epidauros.be. 86400 IN DS ( 48204 13 2 6aa3d8e1695c0771978f10257055b36a2a57168fe41ebc9efb95f88b562b7a2f )`
	Query to ns1.ghen.be for epidauros.be/DNSKEY
	Received 229 bytes from 178.21.112.59
	;; Answer received from 178.21.112.59 (229 bytes) ;; HEADER SECTION ;; id = 61768 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; epidauros.be. IN DNSKEY ;; ANSWER SECTION (2 records) epidauros.be. 86400 IN DNSKEY ( 257 3 13 gKVyRvy73ovzaihZafSdHSALPgQo9r9A5eb2n/Gsgufieko61fz7ygqOK1CjMM9zVj0agtf2TvKs bFXrEdHdAQ== ) ; Key ID = 48204 epidauros.be. 86400 IN RRSIG ( DNSKEY 13 2 86400 20210126053102 20210112043102 48204 epidauros.be. b8qdMuSQ3jviXcepXrMwVeSJwWIXUnM/qL1Gh+vCaiIdMUq/QXY3sWA/gpHk4zqPPYJ8Kv2RU358 vApFiSdcTw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DNSKEY records for epidauros.be
	`epidauros.be. 86400 IN DNSKEY ( 257 3 13 gKVyRvy73ovzaihZafSdHSALPgQo9r9A5eb2n/Gsgufieko61fz7ygqOK1CjMM9zVj0agtf2TvKs bFXrEdHdAQ== ) ; Key ID = 48204`
	DNSKEY=48204/SEP is now in the chain-of-trust
	DS=48204/SHA-256 verifies DNSKEY=48204/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`epidauros.be. 86400 IN RRSIG ( DNSKEY 13 2 86400 20210126053102 20210112043102 48204 epidauros.be. b8qdMuSQ3jviXcepXrMwVeSJwWIXUnM/qL1Gh+vCaiIdMUq/QXY3sWA/gpHk4zqPPYJ8Kv2RU358 vApFiSdcTw== )`
	RRSIG=48204 and DNSKEY=48204/SEP verifies the DNSKEY RRset
	Query to ns1.ghen.be for www.epidauros.be/A
	Received 318 bytes from 178.21.112.59
	;; Answer received from 178.21.112.59 (318 bytes) ;; HEADER SECTION ;; id = 44876 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; www.epidauros.be. IN A ;; ANSWER SECTION (2 records) www.epidauros.be. 86400 IN A 178.21.112.59 www.epidauros.be. 86400 IN RRSIG ( A 13 3 86400 20210126053102 20210112043102 48204 epidauros.be. ce2Sh45u4jTRzo2lSJB55/n1Z9ZFjL1bJudjIthos4Mc/FynW4mQ7TMOtGLZPSUnTvGnOwn1z+Dx nhmMOEq+xQ== ) ;; AUTHORITY SECTION (3 records) epidauros.be. 86400 IN NS ns1.ghen.be. epidauros.be. 86400 IN NS ns2.ghen.be. epidauros.be. 86400 IN RRSIG ( NS 13 2 86400 20210126053102 20210112043102 48204 epidauros.be. ZUD97PHBq+eNFjKq2fyBcjXTQkNIPOpRX6ACOmpcoI0LOE9U02DktklD0H2CSzEpBzlUp0R/+zX3 kyyJ2F8tPA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	epidauros.be is authoritative for www.epidauros.be
	Query to ns2.ghen.be for www.epidauros.be/DNSKEY
	Received 351 bytes from 178.21.118.64
	;; Answer received from 178.21.118.64 (351 bytes) ;; HEADER SECTION ;; id = 22631 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; www.epidauros.be. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) epidauros.be. 3600 IN SOA ( ns1.ghen.be. hostmaster.ghen.be. 1610429462 ;serial 86400 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) epidauros.be. 3600 IN RRSIG ( SOA 13 2 86400 20210126053102 20210112043102 48204 epidauros.be. 13URJ+0QycRqg/rvnIhP5vYapSOCa2h01eLoDhBb4p6hAuT4soYXvyU0ry5q5/rnd+tJIdiLZiGc iNuxDHuWrw== ) www.epidauros.be. 3600 IN NSEC epidauros.be. A AAAA RRSIG NSEC www.epidauros.be. 3600 IN RRSIG ( NSEC 13 3 3600 20210126053102 20210112043102 48204 epidauros.be. 7Xf2sucIaupVvEgvFVjXnZAYxbUAcsVYTv4X6lXR3OuknlDilKjrL87RgEReiERKzKEuPyXIZS/N Xe1KD8RBTQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found RRSIG signed by epidauros.be zone
	Query to ns2.ghen.be for epidauros.be/SOA
	Received 345 bytes from 178.21.118.64
	;; Answer received from 178.21.118.64 (345 bytes) ;; HEADER SECTION ;; id = 28526 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; epidauros.be. IN SOA ;; ANSWER SECTION (2 records) epidauros.be. 86400 IN SOA ( ns1.ghen.be. hostmaster.ghen.be. 1610429462 ;serial 86400 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) epidauros.be. 86400 IN RRSIG ( SOA 13 2 86400 20210126053102 20210112043102 48204 epidauros.be. 13URJ+0QycRqg/rvnIhP5vYapSOCa2h01eLoDhBb4p6hAuT4soYXvyU0ry5q5/rnd+tJIdiLZiGc iNuxDHuWrw== ) ;; AUTHORITY SECTION (3 records) epidauros.be. 86400 IN NS ns1.ghen.be. epidauros.be. 86400 IN NS ns2.ghen.be. epidauros.be. 86400 IN RRSIG ( NS 13 2 86400 20210126053102 20210112043102 48204 epidauros.be. ZUD97PHBq+eNFjKq2fyBcjXTQkNIPOpRX6ACOmpcoI0LOE9U02DktklD0H2CSzEpBzlUp0R/+zX3 kyyJ2F8tPA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns1.ghen.be for epidauros.be/SOA
	Received 345 bytes from 178.21.112.59
	;; Answer received from 178.21.112.59 (345 bytes) ;; HEADER SECTION ;; id = 39357 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; epidauros.be. IN SOA ;; ANSWER SECTION (2 records) epidauros.be. 86400 IN SOA ( ns1.ghen.be. hostmaster.ghen.be. 1610429462 ;serial 86400 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) epidauros.be. 86400 IN RRSIG ( SOA 13 2 86400 20210126053102 20210112043102 48204 epidauros.be. 13URJ+0QycRqg/rvnIhP5vYapSOCa2h01eLoDhBb4p6hAuT4soYXvyU0ry5q5/rnd+tJIdiLZiGc iNuxDHuWrw== ) ;; AUTHORITY SECTION (3 records) epidauros.be. 86400 IN NS ns1.ghen.be. epidauros.be. 86400 IN NS ns2.ghen.be. epidauros.be. 86400 IN RRSIG ( NS 13 2 86400 20210126053102 20210112043102 48204 epidauros.be. ZUD97PHBq+eNFjKq2fyBcjXTQkNIPOpRX6ACOmpcoI0LOE9U02DktklD0H2CSzEpBzlUp0R/+zX3 kyyJ2F8tPA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns1.ghen.be for www.epidauros.be/A
	Received 318 bytes from 178.21.112.59
	;; Answer received from 178.21.112.59 (318 bytes) ;; HEADER SECTION ;; id = 31620 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; www.epidauros.be. IN A ;; ANSWER SECTION (2 records) www.epidauros.be. 86400 IN A 178.21.112.59 www.epidauros.be. 86400 IN RRSIG ( A 13 3 86400 20210126053102 20210112043102 48204 epidauros.be. ce2Sh45u4jTRzo2lSJB55/n1Z9ZFjL1bJudjIthos4Mc/FynW4mQ7TMOtGLZPSUnTvGnOwn1z+Dx nhmMOEq+xQ== ) ;; AUTHORITY SECTION (3 records) epidauros.be. 86400 IN NS ns1.ghen.be. epidauros.be. 86400 IN NS ns2.ghen.be. epidauros.be. 86400 IN RRSIG ( NS 13 2 86400 20210126053102 20210112043102 48204 epidauros.be. ZUD97PHBq+eNFjKq2fyBcjXTQkNIPOpRX6ACOmpcoI0LOE9U02DktklD0H2CSzEpBzlUp0R/+zX3 kyyJ2F8tPA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	www.epidauros.be A RR has value 178.21.112.59
	Found 1 RRSIGs over A RRset
	`www.epidauros.be. 86400 IN RRSIG ( A 13 3 86400 20210126053102 20210112043102 48204 epidauros.be. ce2Sh45u4jTRzo2lSJB55/n1Z9ZFjL1bJudjIthos4Mc/FynW4mQ7TMOtGLZPSUnTvGnOwn1z+Dx nhmMOEq+xQ== )`
	RRSIG=48204 and DNSKEY=48204/SEP verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test www.epidauros.be at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: