DNSSEC Analyzer

Domain Name:

Time: 2022-11-28 18:30:23 UTC, NTP stratum 16

Analyzing DNSSEC problems for zash.se

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.33.4.12
	;; Response received from 192.33.4.12 (865 octets) ;; HEADER SECTION ;; id = 61641 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeB54o2xvW6vY4qQZ0krDsEZCe6MsRWCqsXd4+cNJZMePnlV/xwDrIbbeH1SJzv742rOHzgA KM1/3SQHHSkoEIPx8XQdHAZBxfhaXl3e8c5WrE3aGXS5AeTWAkt85ccqWgKyitxjFmJEOol0BqS2 xueltaDwgWcC10nPUY+y5l/kTOYyptYQS4gg1uJNXIob/R1XIEJ10ZCurkYqZxgqyHc7tZv09N23 o9rnGdjnYiArH7FjlXD8Rvjde8YWkmfdbCEWnchrnxDK8KV2/ZvBpG/WYnRKXYPUceGCw59OJdJ5 M7utkm547RB3eEd8CVVhbXopZlsKq3GCrBwaIVe9ci0= ) ; Key ID = 18733 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20221211000000 20221120000000 20326 . Y8Or1olHbjYMKfZxcKA8mP9+GWhl66Cu6Mrjh9NzLuBZ+14JZodwSJ5JaXzJxRzgHxTd/TWvnI4b AM/DQ8NYyRX/QezQdGU4ZE5RcrZLanxuX/FQR/qIMlLttCsoPtlM677HA3CecqLljbrcayIDSKMg hh5iKV1iOoW1BP1KZwgH4Y87fiWbevk+AmN5xbJCPk1iCis+kMulacxTFC+g0jyLv1V0C2hneqZ5 8os/QvW7XNBWLd9OC1LbMVVkfgUsVYqfwLjcieQ5YVRshfy2Iazv2sLo87sGvBnLmSUx8F4hiotE K6UjTNNun1tKe0VTBVkXQyaIzfUOkPgoMoWojg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeB54o2xvW6vY4qQZ0krDsEZCe6MsRWCqsXd4+cNJZMePnlV/xwDrIbbeH1SJzv742rOHzgA KM1/3SQHHSkoEIPx8XQdHAZBxfhaXl3e8c5WrE3aGXS5AeTWAkt85ccqWgKyitxjFmJEOol0BqS2 xueltaDwgWcC10nPUY+y5l/kTOYyptYQS4gg1uJNXIob/R1XIEJ10ZCurkYqZxgqyHc7tZv09N23 o9rnGdjnYiArH7FjlXD8Rvjde8YWkmfdbCEWnchrnxDK8KV2/ZvBpG/WYnRKXYPUceGCw59OJdJ5 M7utkm547RB3eEd8CVVhbXopZlsKq3GCrBwaIVe9ci0= ) ; Key ID = 18733`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20221211000000 20221120000000 20326 . Y8Or1olHbjYMKfZxcKA8mP9+GWhl66Cu6Mrjh9NzLuBZ+14JZodwSJ5JaXzJxRzgHxTd/TWvnI4b AM/DQ8NYyRX/QezQdGU4ZE5RcrZLanxuX/FQR/qIMlLttCsoPtlM677HA3CecqLljbrcayIDSKMg hh5iKV1iOoW1BP1KZwgH4Y87fiWbevk+AmN5xbJCPk1iCis+kMulacxTFC+g0jyLv1V0C2hneqZ5 8os/QvW7XNBWLd9OC1LbMVVkfgUsVYqfwLjcieQ5YVRshfy2Iazv2sLo87sGvBnLmSUx8F4hiotE K6UjTNNun1tKe0VTBVkXQyaIzfUOkPgoMoWojg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=18733 is now in the chain-of-trust
	Query to d.root-servers.net for zash.se/A
	Received 974 bytes from 199.7.91.13
	;; Response received from 199.7.91.13 (974 octets) ;; HEADER SECTION ;; id = 6635 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 12 arcount = 21 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; zash.se. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (12 records) se. 172800 IN NS a.ns.se. se. 172800 IN NS b.ns.se. se. 172800 IN NS c.ns.se. se. 172800 IN NS f.ns.se. se. 172800 IN NS g.ns.se. se. 172800 IN NS i.ns.se. se. 172800 IN NS m.ns.se. se. 172800 IN NS x.ns.se. se. 172800 IN NS y.ns.se. se. 172800 IN NS z.ns.se. se. 86400 IN DS ( 59407 8 2 67a8e06fcefdd9397f77f26c41ade4ec142f299bcfa1827f0ef8fd87f2f63022 ) se. 86400 IN RRSIG ( DS 8 1 86400 20221211050000 20221128040000 18733 . dgpebuOTR6J8m65ZItqpJwEs5LvRZ/cig5r2FANKhlBNfZazBn7lIVcR239F4Kz3V7OFmMZe/6SY bV8ry3hU/WvYKJAGOzddco4K5GkqVzwv8vioopBXzZf3i8l09H4Tgmv2RYoc+c9ZpwXQ/gXGL4nf NLTZcr/3marmY2O5jYDRVPEBDjhF6ItVJ83CfsApjUfwndRGqtERJT70EylRK1Xm7p6rEyDhhOQu TfgG315na7bS3jYTfVkOh2blR0tqmXO/UjylzSzN7MXBKCPMG7yYnUOy682/e6YPR50uKCnATysG Ayd7MDsB7yRJ4eAloT5eoI48sfaCtOkQEkjlaA== ) ;; ADDITIONAL SECTION (21 records) a.ns.se. 172800 IN A 192.36.144.107 b.ns.se. 172800 IN A 192.36.133.107 c.ns.se. 172800 IN A 192.36.135.107 f.ns.se. 172800 IN A 192.71.53.53 g.ns.se. 172800 IN A 130.239.5.114 i.ns.se. 172800 IN A 194.146.106.22 m.ns.se. 172800 IN A 194.0.11.112 x.ns.se. 172800 IN A 213.108.25.4 y.ns.se. 172800 IN A 185.159.197.150 z.ns.se. 172800 IN A 185.159.198.150 a.ns.se. 172800 IN AAAA 2a01:3f0:0:301::53 b.ns.se. 172800 IN AAAA 2001:67c:254c:301::53 c.ns.se. 172800 IN AAAA 2001:67c:2554:301::53 f.ns.se. 172800 IN AAAA 2a01:3f0:0:305::53 g.ns.se. 172800 IN AAAA 2001:6b0:e:3::1 i.ns.se. 172800 IN AAAA 2001:67c:1010:5::53 m.ns.se. 172800 IN AAAA 2001:678:e:112::53 x.ns.se. 172800 IN AAAA 2001:67c:124c:e000::4 y.ns.se. 172800 IN AAAA 2620:10a:80aa::150 z.ns.se. 172800 IN AAAA 2620:10a:80ab::150 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Query to b.root-servers.net for se/DNSKEY
	Received 969 bytes from 199.9.14.201
	;; Response received from 199.9.14.201 (969 octets) ;; HEADER SECTION ;; id = 35270 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 12 arcount = 21 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; se. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (12 records) se. 172800 IN NS a.ns.se. se. 172800 IN NS b.ns.se. se. 172800 IN NS c.ns.se. se. 172800 IN NS f.ns.se. se. 172800 IN NS g.ns.se. se. 172800 IN NS i.ns.se. se. 172800 IN NS m.ns.se. se. 172800 IN NS x.ns.se. se. 172800 IN NS y.ns.se. se. 172800 IN NS z.ns.se. se. 86400 IN DS ( 59407 8 2 67a8e06fcefdd9397f77f26c41ade4ec142f299bcfa1827f0ef8fd87f2f63022 ) se. 86400 IN RRSIG ( DS 8 1 86400 20221211050000 20221128040000 18733 . dgpebuOTR6J8m65ZItqpJwEs5LvRZ/cig5r2FANKhlBNfZazBn7lIVcR239F4Kz3V7OFmMZe/6SY bV8ry3hU/WvYKJAGOzddco4K5GkqVzwv8vioopBXzZf3i8l09H4Tgmv2RYoc+c9ZpwXQ/gXGL4nf NLTZcr/3marmY2O5jYDRVPEBDjhF6ItVJ83CfsApjUfwndRGqtERJT70EylRK1Xm7p6rEyDhhOQu TfgG315na7bS3jYTfVkOh2blR0tqmXO/UjylzSzN7MXBKCPMG7yYnUOy682/e6YPR50uKCnATysG Ayd7MDsB7yRJ4eAloT5eoI48sfaCtOkQEkjlaA== ) ;; ADDITIONAL SECTION (21 records) a.ns.se. 172800 IN A 192.36.144.107 a.ns.se. 172800 IN AAAA 2a01:3f0:0:301::53 b.ns.se. 172800 IN A 192.36.133.107 b.ns.se. 172800 IN AAAA 2001:67c:254c:301::53 c.ns.se. 172800 IN A 192.36.135.107 c.ns.se. 172800 IN AAAA 2001:67c:2554:301::53 f.ns.se. 172800 IN A 192.71.53.53 f.ns.se. 172800 IN AAAA 2a01:3f0:0:305::53 g.ns.se. 172800 IN A 130.239.5.114 g.ns.se. 172800 IN AAAA 2001:6b0:e:3::1 i.ns.se. 172800 IN A 194.146.106.22 i.ns.se. 172800 IN AAAA 2001:67c:1010:5::53 m.ns.se. 172800 IN A 194.0.11.112 m.ns.se. 172800 IN AAAA 2001:678:e:112::53 x.ns.se. 172800 IN A 213.108.25.4 x.ns.se. 172800 IN AAAA 2001:67c:124c:e000::4 y.ns.se. 172800 IN A 185.159.197.150 y.ns.se. 172800 IN AAAA 2620:10a:80aa::150 z.ns.se. 172800 IN A 185.159.198.150 z.ns.se. 172800 IN AAAA 2620:10a:80ab::150 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone se

	Checking DS between . and se
	Query to b.root-servers.net for se/DS
	Received 366 bytes from 199.9.14.201
	;; Response received from 199.9.14.201 (366 octets) ;; HEADER SECTION ;; id = 57573 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; se. IN DS ;; ANSWER SECTION (2 records) se. 86400 IN DS ( 59407 8 2 67a8e06fcefdd9397f77f26c41ade4ec142f299bcfa1827f0ef8fd87f2f63022 ) se. 86400 IN RRSIG ( DS 8 1 86400 20221211050000 20221128040000 18733 . dgpebuOTR6J8m65ZItqpJwEs5LvRZ/cig5r2FANKhlBNfZazBn7lIVcR239F4Kz3V7OFmMZe/6SY bV8ry3hU/WvYKJAGOzddco4K5GkqVzwv8vioopBXzZf3i8l09H4Tgmv2RYoc+c9ZpwXQ/gXGL4nf NLTZcr/3marmY2O5jYDRVPEBDjhF6ItVJ83CfsApjUfwndRGqtERJT70EylRK1Xm7p6rEyDhhOQu TfgG315na7bS3jYTfVkOh2blR0tqmXO/UjylzSzN7MXBKCPMG7yYnUOy682/e6YPR50uKCnATysG Ayd7MDsB7yRJ4eAloT5eoI48sfaCtOkQEkjlaA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for se in the . zone
	DS=59407/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`se. 86400 IN RRSIG ( DS 8 1 86400 20221211050000 20221128040000 18733 . dgpebuOTR6J8m65ZItqpJwEs5LvRZ/cig5r2FANKhlBNfZazBn7lIVcR239F4Kz3V7OFmMZe/6SY bV8ry3hU/WvYKJAGOzddco4K5GkqVzwv8vioopBXzZf3i8l09H4Tgmv2RYoc+c9ZpwXQ/gXGL4nf NLTZcr/3marmY2O5jYDRVPEBDjhF6ItVJ83CfsApjUfwndRGqtERJT70EylRK1Xm7p6rEyDhhOQu TfgG315na7bS3jYTfVkOh2blR0tqmXO/UjylzSzN7MXBKCPMG7yYnUOy682/e6YPR50uKCnATysG Ayd7MDsB7yRJ4eAloT5eoI48sfaCtOkQEkjlaA== )`
	RRSIG=18733 and DNSKEY=18733 verifies the DS RRset
	DS=59407/SHA-256 is now in the chain-of-trust
	`se. 86400 IN DS ( 59407 8 2 67a8e06fcefdd9397f77f26c41ade4ec142f299bcfa1827f0ef8fd87f2f63022 )`
	Query to g.ns.se for se/DNSKEY
	Received 873 bytes from 130.239.5.114
	;; Response received from 130.239.5.114 (873 octets) ;; HEADER SECTION ;; id = 32789 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; se. IN DNSKEY ;; ANSWER SECTION (3 records) se. 3600 IN DNSKEY ( 256 3 8 AwEAAaGr6G2E6igbB0gbxcOG+GzNOb0SPlmi3jmerJJGVuI8APpPLdQ01AnOPH6F3J6rqXtkVWGb uSrsNr3lwScau/xrPSvOBETCMcly8jpvWborl53XfvDaI7ToYR1b9kUcDOaJagv6svdh48U+dg9S K4Xhs33jrGU9kHRvczHAYXBrRLlVHYSsSbenR3EoHKkhmKNwA00mMxrTr+0pAl89aqS2X3t0bzHy MIWQf0bwOyjk4TmHzHr5EE/ykRKlU7DOHH6AKp7S1naGeKL0v92iItGidRI+2hZEwliYVKj1baaO N/2dfUl8sbVPJXGjnTfEhcEsa/XUbf5167ncS7W5T2s= ) ; Key ID = 12175 se. 3600 IN DNSKEY ( 257 3 8 AwEAAccqQMsh1rhvB3IWXmWZpCrug9MEGCKGteLIvwppyHeHgeBBm3M0p5FV9ImquvxFCnBd6Eey 3Vf8SzoTodZ3YrGF9WFve7bmie2MIBhFDoCep16v9lon0ZsKrOvoCkPbTT0iFCdrbdyikYcCfvvh 303anvQeTCf3jy+bHOTleaqVaNRJiGv5NBsPKpfnnqBpqqKyZymSpwQXHtTeyv7iWwGl3cfP3U6s p711WvKkXy7Y2DJnC5T5owHWUy1ZPl4s+9DtuC2A9AWhOpDicguHYRfmyscjCbPOB8/tO5j+uECo 67i7JjsiLjQTRyHuigUUBRag3Z3FaTXZBg/myaoUL0U= ) ; Key ID = 59407 se. 3600 IN RRSIG ( DNSKEY 8 1 3600 20221210233320 20221127171059 59407 se. L2hdZDYR3Te6tKNyrbN5gGWgWAHEv5EREHYlMxK3n3BS4vDsscdJHI6rsxIPiK9gkrEOBqbOeX42 wahd2ICfI6vX+tQV29zBDVjws/jTcOmhfkdDPCUhkmO911DHRIr22nPuAzUIHPbgwuRucPtXsw1h bBFpiTx5muMlEo/5jtT9u7Yv/KgxJglyRdWxhGWwl0u0n9475srW2MrfA4MbkQ6vXavTFcqctfq6 EMuB8CPHRvG25dClxaX2XHUaFs004j7JjhxGC23dAOph6+VD6VOC6jrsIkmjQD+Zz1IecR2scDRs ++aSw63JLRX4KdPuJn6fR2SeRjVMCMrIZw52Rg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for se
	`se. 3600 IN DNSKEY ( 256 3 8 AwEAAaGr6G2E6igbB0gbxcOG+GzNOb0SPlmi3jmerJJGVuI8APpPLdQ01AnOPH6F3J6rqXtkVWGb uSrsNr3lwScau/xrPSvOBETCMcly8jpvWborl53XfvDaI7ToYR1b9kUcDOaJagv6svdh48U+dg9S K4Xhs33jrGU9kHRvczHAYXBrRLlVHYSsSbenR3EoHKkhmKNwA00mMxrTr+0pAl89aqS2X3t0bzHy MIWQf0bwOyjk4TmHzHr5EE/ykRKlU7DOHH6AKp7S1naGeKL0v92iItGidRI+2hZEwliYVKj1baaO N/2dfUl8sbVPJXGjnTfEhcEsa/XUbf5167ncS7W5T2s= ) ; Key ID = 12175`
	`se. 3600 IN DNSKEY ( 257 3 8 AwEAAccqQMsh1rhvB3IWXmWZpCrug9MEGCKGteLIvwppyHeHgeBBm3M0p5FV9ImquvxFCnBd6Eey 3Vf8SzoTodZ3YrGF9WFve7bmie2MIBhFDoCep16v9lon0ZsKrOvoCkPbTT0iFCdrbdyikYcCfvvh 303anvQeTCf3jy+bHOTleaqVaNRJiGv5NBsPKpfnnqBpqqKyZymSpwQXHtTeyv7iWwGl3cfP3U6s p711WvKkXy7Y2DJnC5T5owHWUy1ZPl4s+9DtuC2A9AWhOpDicguHYRfmyscjCbPOB8/tO5j+uECo 67i7JjsiLjQTRyHuigUUBRag3Z3FaTXZBg/myaoUL0U= ) ; Key ID = 59407`
	DNSKEY=59407/SEP is now in the chain-of-trust
	DS=59407/SHA-256 verifies DNSKEY=59407/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`se. 3600 IN RRSIG ( DNSKEY 8 1 3600 20221210233320 20221127171059 59407 se. L2hdZDYR3Te6tKNyrbN5gGWgWAHEv5EREHYlMxK3n3BS4vDsscdJHI6rsxIPiK9gkrEOBqbOeX42 wahd2ICfI6vX+tQV29zBDVjws/jTcOmhfkdDPCUhkmO911DHRIr22nPuAzUIHPbgwuRucPtXsw1h bBFpiTx5muMlEo/5jtT9u7Yv/KgxJglyRdWxhGWwl0u0n9475srW2MrfA4MbkQ6vXavTFcqctfq6 EMuB8CPHRvG25dClxaX2XHUaFs004j7JjhxGC23dAOph6+VD6VOC6jrsIkmjQD+Zz1IecR2scDRs ++aSw63JLRX4KdPuJn6fR2SeRjVMCMrIZw52Rg== )`
	RRSIG=59407 and DNSKEY=59407/SEP verifies the DNSKEY RRset
	DNSKEY=12175 is now in the chain-of-trust
	Query to c.ns.se for zash.se/A
	Received 489 bytes from 192.36.135.107
	;; Response received from 192.36.135.107 (489 octets) ;; HEADER SECTION ;; id = 12622 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; zash.se. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) zash.se. 86400 IN NS ns0.sotecware.net. zash.se. 86400 IN NS ns2.sotecware.net. zash.se. 86400 IN NS cerdale.zash.se. zash.se. 3600 IN DS ( 45778 13 2 5a5302e31ee4e83933016ce97b5dbbd335c5fa2c7d9662c39384f96c38c9771d ) zash.se. 3600 IN RRSIG ( DS 8 2 3600 20221210094923 20221126151107 12175 se. mlrOcP4Oz4RiIbRvs68P9UdK8+uKlg+KvpnCMobZ1vJwOiSp2Ya9dP2xvEtNzAKsnOEWezOY+13O S1tzInxT32sbdXr7+MkIUlUyADEVQ3UNTzwrvLbIkuv4YwPiilyGDxujbklJM95WS/4RNakOuivI py/rFtYOwN8ExqtwKtCY+g0ysxSXArK2bbZ73DI7qthT+fuHs/0EUFYKpoOSOGQWNZYdmEJ3PcTs JauQATO9Cfj6bKpeZ3jpif5Jg0klh9WGZkTV7+VcTozD7fQ/VNxs5nqB0W6JX57Hvs6v680NuF0D COGIjY4c57yFOJ4CqbD3S9UrwdwvhK7/AbTmyw== ) ;; ADDITIONAL SECTION (3 records) cerdale.zash.se. 86400 IN A 81.170.128.148 cerdale.zash.se. 86400 IN AAAA 2a00:66c0:7:1::cd1e ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to b.ns.se for zash.se/DNSKEY
	Received 489 bytes from 192.36.133.107
	;; Response received from 192.36.133.107 (489 octets) ;; HEADER SECTION ;; id = 58484 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; zash.se. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) zash.se. 86400 IN NS ns0.sotecware.net. zash.se. 86400 IN NS ns2.sotecware.net. zash.se. 86400 IN NS cerdale.zash.se. zash.se. 3600 IN DS ( 45778 13 2 5a5302e31ee4e83933016ce97b5dbbd335c5fa2c7d9662c39384f96c38c9771d ) zash.se. 3600 IN RRSIG ( DS 8 2 3600 20221210094923 20221126151107 12175 se. mlrOcP4Oz4RiIbRvs68P9UdK8+uKlg+KvpnCMobZ1vJwOiSp2Ya9dP2xvEtNzAKsnOEWezOY+13O S1tzInxT32sbdXr7+MkIUlUyADEVQ3UNTzwrvLbIkuv4YwPiilyGDxujbklJM95WS/4RNakOuivI py/rFtYOwN8ExqtwKtCY+g0ysxSXArK2bbZ73DI7qthT+fuHs/0EUFYKpoOSOGQWNZYdmEJ3PcTs JauQATO9Cfj6bKpeZ3jpif5Jg0klh9WGZkTV7+VcTozD7fQ/VNxs5nqB0W6JX57Hvs6v680NuF0D COGIjY4c57yFOJ4CqbD3S9UrwdwvhK7/AbTmyw== ) ;; ADDITIONAL SECTION (3 records) cerdale.zash.se. 86400 IN A 81.170.128.148 cerdale.zash.se. 86400 IN AAAA 2a00:66c0:7:1::cd1e ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone zash.se

zash.se

	Checking DS between se and zash.se
	Query to m.ns.se for zash.se/DS
	Received 374 bytes from 194.0.11.112
	;; Response received from 194.0.11.112 (374 octets) ;; HEADER SECTION ;; id = 35075 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1452 ;; option: ;; QUESTION SECTION (1 record) ;; zash.se. IN DS ;; ANSWER SECTION (2 records) zash.se. 3600 IN DS ( 45778 13 2 5a5302e31ee4e83933016ce97b5dbbd335c5fa2c7d9662c39384f96c38c9771d ) zash.se. 3600 IN RRSIG ( DS 8 2 3600 20221210094923 20221126151107 12175 se. mlrOcP4Oz4RiIbRvs68P9UdK8+uKlg+KvpnCMobZ1vJwOiSp2Ya9dP2xvEtNzAKsnOEWezOY+13O S1tzInxT32sbdXr7+MkIUlUyADEVQ3UNTzwrvLbIkuv4YwPiilyGDxujbklJM95WS/4RNakOuivI py/rFtYOwN8ExqtwKtCY+g0ysxSXArK2bbZ73DI7qthT+fuHs/0EUFYKpoOSOGQWNZYdmEJ3PcTs JauQATO9Cfj6bKpeZ3jpif5Jg0klh9WGZkTV7+VcTozD7fQ/VNxs5nqB0W6JX57Hvs6v680NuF0D COGIjY4c57yFOJ4CqbD3S9UrwdwvhK7/AbTmyw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1452 ;; option:
	Found 1 DS records for zash.se in the se zone
	DS=45778/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`zash.se. 3600 IN RRSIG ( DS 8 2 3600 20221210094923 20221126151107 12175 se. mlrOcP4Oz4RiIbRvs68P9UdK8+uKlg+KvpnCMobZ1vJwOiSp2Ya9dP2xvEtNzAKsnOEWezOY+13O S1tzInxT32sbdXr7+MkIUlUyADEVQ3UNTzwrvLbIkuv4YwPiilyGDxujbklJM95WS/4RNakOuivI py/rFtYOwN8ExqtwKtCY+g0ysxSXArK2bbZ73DI7qthT+fuHs/0EUFYKpoOSOGQWNZYdmEJ3PcTs JauQATO9Cfj6bKpeZ3jpif5Jg0klh9WGZkTV7+VcTozD7fQ/VNxs5nqB0W6JX57Hvs6v680NuF0D COGIjY4c57yFOJ4CqbD3S9UrwdwvhK7/AbTmyw== )`
	RRSIG=12175 and DNSKEY=12175 verifies the DS RRset
	DS=45778/SHA-256 is now in the chain-of-trust
	`zash.se. 3600 IN DS ( 45778 13 2 5a5302e31ee4e83933016ce97b5dbbd335c5fa2c7d9662c39384f96c38c9771d )`
	Query to ns0.sotecware.net for zash.se/DNSKEY
	Received 219 bytes from 95.217.50.22
	;; Response received from 95.217.50.22 (219 octets) ;; HEADER SECTION ;; id = 32854 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; zash.se. IN DNSKEY ;; ANSWER SECTION (2 records) zash.se. 3600 IN RRSIG ( DNSKEY 13 2 3600 20221208000000 20221117000000 45778 zash.se. vNbmxfqshckzafgvLpnbCrzyy8LwStBC6oyqdknGNOsUGoJeeXD2QopMwVvkVAudvJ1wIy2u7UlP zWHDny93Ug== ) zash.se. 3600 IN DNSKEY ( 257 3 13 M194fwgemDkjsHauOFLRIK4lb5qMGIu+Re2tJU+GR6wzI64sur912gFxvgy4SQODUxTOfsAR+8rG FvyWsskexA== ) ; Key ID = 45778 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DNSKEY records for zash.se
	`zash.se. 3600 IN DNSKEY ( 257 3 13 M194fwgemDkjsHauOFLRIK4lb5qMGIu+Re2tJU+GR6wzI64sur912gFxvgy4SQODUxTOfsAR+8rG FvyWsskexA== ) ; Key ID = 45778`
	DNSKEY=45778/SEP is now in the chain-of-trust
	DS=45778/SHA-256 verifies DNSKEY=45778/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`zash.se. 3600 IN RRSIG ( DNSKEY 13 2 3600 20221208000000 20221117000000 45778 zash.se. vNbmxfqshckzafgvLpnbCrzyy8LwStBC6oyqdknGNOsUGoJeeXD2QopMwVvkVAudvJ1wIy2u7UlP zWHDny93Ug== )`
	RRSIG=45778 and DNSKEY=45778/SEP verifies the DNSKEY RRset
	Query to ns0.sotecware.net for zash.se/A
	Received 155 bytes from 95.217.50.22
	;; Response received from 95.217.50.22 (155 octets) ;; HEADER SECTION ;; id = 42067 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; zash.se. IN A ;; ANSWER SECTION (2 records) zash.se. 3600 IN RRSIG ( A 13 2 3600 20221208000000 20221117000000 45778 zash.se. j7fnAzY4LAvEIbRauQn/ShFmEV+5ZxmR+jf86I4rTSnu5wwfYfuSCmJN/ViPhR5FtFp5C3Amv7L+ 3cVAdxJdyA== ) zash.se. 3600 IN A 185.97.32.56 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns0.sotecware.net is authoritative for zash.se
	Found RRSIG signed by zash.se zone
	Query to cerdale.zash.se for zash.se/SOA
	Received 194 bytes from 81.170.128.148
	;; Response received from 81.170.128.148 (194 octets) ;; HEADER SECTION ;; id = 28206 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; zash.se. IN SOA ;; ANSWER SECTION (2 records) zash.se. 86400 IN RRSIG ( SOA 13 2 86400 20221208000000 20221117000000 45778 zash.se. AAyQIQ6JpOuRu+v5Tkjcl5sQWKYLzQAAHYGnEsy92SjcCqym5T5g9GBaNPlNEitbWz93kCcNQLJY 9OHIDhK4qg== ) zash.se. 86400 IN SOA ( cerdale.zash.se. hostmaster.zash.se. 2022112401 ;serial 86400 ;refresh 7200 ;retry 604800 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns2.sotecware.net for zash.se/SOA
	Received 194 bytes from 217.196.147.170
	;; Response received from 217.196.147.170 (194 octets) ;; HEADER SECTION ;; id = 19390 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; zash.se. IN SOA ;; ANSWER SECTION (2 records) zash.se. 86400 IN RRSIG ( SOA 13 2 86400 20221208000000 20221117000000 45778 zash.se. LwLMHskBD9RiXLqh63cW7wRvczESwDAVjOAHqLWawzJ4JfsqJ5KIgDoEKojufB4cuvhXEBqDxnKs TjAdY31mAQ== ) zash.se. 86400 IN SOA ( cerdale.zash.se. hostmaster.zash.se. 2022112401 ;serial 86400 ;refresh 7200 ;retry 604800 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns0.sotecware.net for zash.se/A
	Received 155 bytes from 95.217.50.22
	;; Response received from 95.217.50.22 (155 octets) ;; HEADER SECTION ;; id = 13563 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; zash.se. IN A ;; ANSWER SECTION (2 records) zash.se. 3600 IN RRSIG ( A 13 2 3600 20221208000000 20221117000000 45778 zash.se. j7fnAzY4LAvEIbRauQn/ShFmEV+5ZxmR+jf86I4rTSnu5wwfYfuSCmJN/ViPhR5FtFp5C3Amv7L+ 3cVAdxJdyA== ) zash.se. 3600 IN A 185.97.32.56 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	zash.se A RR has value 185.97.32.56
	Found 1 RRSIGs over A RRset
	`zash.se. 3600 IN RRSIG ( A 13 2 3600 20221208000000 20221117000000 45778 zash.se. j7fnAzY4LAvEIbRauQn/ShFmEV+5ZxmR+jf86I4rTSnu5wwfYfuSCmJN/ViPhR5FtFp5C3Amv7L+ 3cVAdxJdyA== )`
	RRSIG=45778 and DNSKEY=45778/SEP verifies the A RRset

zash.se

	Query to ns2.sotecware.net for zash.se/A
	Received 155 bytes from 217.196.147.170
	;; Response received from 217.196.147.170 (155 octets) ;; HEADER SECTION ;; id = 15257 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; zash.se. IN A ;; ANSWER SECTION (2 records) zash.se. 3600 IN RRSIG ( A 13 2 3600 20221208000000 20221117000000 45778 zash.se. JuzL7lkm0/WYmtIt6FwGbYcCSTOi5SiXRNWKKII+Q8I4pe2RNGBqM+11fptmvJ2j8gxFxNk3ecc2 WnG+IiTL4A== ) zash.se. 3600 IN A 185.97.32.56 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns2.sotecware.net is authoritative for zash.se
	Found RRSIG signed by zash.se zone
	Query to ns2.sotecware.net for zash.se/A
	Received 155 bytes from 217.196.147.170
	;; Response received from 217.196.147.170 (155 octets) ;; HEADER SECTION ;; id = 28599 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; zash.se. IN A ;; ANSWER SECTION (2 records) zash.se. 3600 IN RRSIG ( A 13 2 3600 20221208000000 20221117000000 45778 zash.se. JuzL7lkm0/WYmtIt6FwGbYcCSTOi5SiXRNWKKII+Q8I4pe2RNGBqM+11fptmvJ2j8gxFxNk3ecc2 WnG+IiTL4A== ) zash.se. 3600 IN A 185.97.32.56 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	zash.se A RR has value 185.97.32.56
	Found 1 RRSIGs over A RRset
	`zash.se. 3600 IN RRSIG ( A 13 2 3600 20221208000000 20221117000000 45778 zash.se. JuzL7lkm0/WYmtIt6FwGbYcCSTOi5SiXRNWKKII+Q8I4pe2RNGBqM+11fptmvJ2j8gxFxNk3ecc2 WnG+IiTL4A== )`
	RRSIG=45778 and DNSKEY=45778/SEP verifies the A RRset

zash.se

	Query to cerdale.zash.se for zash.se/A
	Received 155 bytes from 81.170.128.148
	;; Response received from 81.170.128.148 (155 octets) ;; HEADER SECTION ;; id = 8422 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; zash.se. IN A ;; ANSWER SECTION (2 records) zash.se. 3600 IN RRSIG ( A 13 2 3600 20221208000000 20221117000000 45778 zash.se. j7fnAzY4LAvEIbRauQn/ShFmEV+5ZxmR+jf86I4rTSnu5wwfYfuSCmJN/ViPhR5FtFp5C3Amv7L+ 3cVAdxJdyA== ) zash.se. 3600 IN A 185.97.32.56 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	cerdale.zash.se is authoritative for zash.se
	Found RRSIG signed by zash.se zone
	Query to cerdale.zash.se for zash.se/A
	Received 155 bytes from 81.170.128.148
	;; Response received from 81.170.128.148 (155 octets) ;; HEADER SECTION ;; id = 4690 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; zash.se. IN A ;; ANSWER SECTION (2 records) zash.se. 3600 IN RRSIG ( A 13 2 3600 20221208000000 20221117000000 45778 zash.se. j7fnAzY4LAvEIbRauQn/ShFmEV+5ZxmR+jf86I4rTSnu5wwfYfuSCmJN/ViPhR5FtFp5C3Amv7L+ 3cVAdxJdyA== ) zash.se. 3600 IN A 185.97.32.56 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	zash.se A RR has value 185.97.32.56
	Found 1 RRSIGs over A RRset
	`zash.se. 3600 IN RRSIG ( A 13 2 3600 20221208000000 20221117000000 45778 zash.se. j7fnAzY4LAvEIbRauQn/ShFmEV+5ZxmR+jf86I4rTSnu5wwfYfuSCmJN/ViPhR5FtFp5C3Amv7L+ 3cVAdxJdyA== )`
	RRSIG=45778 and DNSKEY=45778/SEP verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test zash.se at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: