DNSSEC Debugger - capital.gov

Domain Name:

Time: 2024-05-18 07:05:47 UTC

Analyzing DNSSEC problems for capital.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to b.root-servers.net for ./DNSKEY
	Received 864 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 864 octets ;; HEADER SECTION ;; id = 39717 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to e.root-servers.net for capital.gov/A
	Received 618 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 618 octets ;; HEADER SECTION ;; id = 1069 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; capital.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS d.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240531050000 20240518040000 5613 . QTciWaVih2CPxxicfKXmgSLAMXabblA0KKaazL5SPLtCEWBVl2bMznOMAvVAReQyFhmh323ve5wL qJieU/3OhK/yPnM9dZgZFBNUQXghBjVgJ77esOp4sfvrIvGFXLqKIcIqH5K/5shPGVjJLG55kHwD bMUufP8kL+TqzkG8C5hoq8y/3kpWa6oDc/TW3VY3vOzAVx/Nh2o9zYnF98QY03bMLoI+CJATLqJA R+aeFeBxouEqYE3UYZXRC5vir8lSP/DtXrUsAfL75M5dTJia/DLGhwLfmKQXwyK+qlZdiM/rtyfF kiOgKAPnEYkDrtrkFGOFgb5lPZQegV9Xm8+xvg== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Query to e.root-servers.net for gov/DNSKEY
	Received 610 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 610 octets ;; HEADER SECTION ;; id = 4511 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS d.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240531050000 20240518040000 5613 . QTciWaVih2CPxxicfKXmgSLAMXabblA0KKaazL5SPLtCEWBVl2bMznOMAvVAReQyFhmh323ve5wL qJieU/3OhK/yPnM9dZgZFBNUQXghBjVgJ77esOp4sfvrIvGFXLqKIcIqH5K/5shPGVjJLG55kHwD bMUufP8kL+TqzkG8C5hoq8y/3kpWa6oDc/TW3VY3vOzAVx/Nh2o9zYnF98QY03bMLoI+CJATLqJA R+aeFeBxouEqYE3UYZXRC5vir8lSP/DtXrUsAfL75M5dTJia/DLGhwLfmKQXwyK+qlZdiM/rtyfF kiOgKAPnEYkDrtrkFGOFgb5lPZQegV9Xm8+xvg== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to h.root-servers.net for gov/DS
	Received 367 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 367 octets ;; HEADER SECTION ;; id = 14994 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240531050000 20240518040000 5613 . QTciWaVih2CPxxicfKXmgSLAMXabblA0KKaazL5SPLtCEWBVl2bMznOMAvVAReQyFhmh323ve5wL qJieU/3OhK/yPnM9dZgZFBNUQXghBjVgJ77esOp4sfvrIvGFXLqKIcIqH5K/5shPGVjJLG55kHwD bMUufP8kL+TqzkG8C5hoq8y/3kpWa6oDc/TW3VY3vOzAVx/Nh2o9zYnF98QY03bMLoI+CJATLqJA R+aeFeBxouEqYE3UYZXRC5vir8lSP/DtXrUsAfL75M5dTJia/DLGhwLfmKQXwyK+qlZdiM/rtyfF kiOgKAPnEYkDrtrkFGOFgb5lPZQegV9Xm8+xvg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=64280/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20240531050000 20240518040000 5613 . QTciWaVih2CPxxicfKXmgSLAMXabblA0KKaazL5SPLtCEWBVl2bMznOMAvVAReQyFhmh323ve5wL qJieU/3OhK/yPnM9dZgZFBNUQXghBjVgJ77esOp4sfvrIvGFXLqKIcIqH5K/5shPGVjJLG55kHwD bMUufP8kL+TqzkG8C5hoq8y/3kpWa6oDc/TW3VY3vOzAVx/Nh2o9zYnF98QY03bMLoI+CJATLqJA R+aeFeBxouEqYE3UYZXRC5vir8lSP/DtXrUsAfL75M5dTJia/DLGhwLfmKQXwyK+qlZdiM/rtyfF kiOgKAPnEYkDrtrkFGOFgb5lPZQegV9Xm8+xvg== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=64280/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 )`
	Query to a.ns.gov for gov/DNSKEY
	Received 779 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 779 octets ;; HEADER SECTION ;; id = 60818 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 8 AwEAAZp0vliR0TOBCJXmdagY36BI5ZveSPE3OSrcXKDs8IZa86x1+gwbheJcfLB6Fw6cWYUXaNgA mFcbxqIqWc5VJSyPS9yCPdEOLEIiegwCmcWnNsEyc0snKTyypXnvJ5JNhoznpFILDqlksAqP/aiq 1/l0w8TMkRbRrViLrJ1ayaScZ0nn/ge5wNpX09T9RI+gF1OIMJDdgH1vi0a+t6smSy4pUrerFTsu y8JAL+PP85MZiOssT9yoERfWSjFKde6PrQX5vj090AxT+hztb+q2EFXnF1a2L73/3UarB19k5NR3 MT1uM7ddag64Q0lg3aTy3MglDCzP7/StUxdeyL5qIX8= ) ; Key ID = 64280 gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcbYvlY667qXEzHsDTkft9cgKy5F0S9CAP+aFK9+sJumGqvpMaOyOzsilJ+OSVFhopJ1aRFp CUpLVIcVJ3E3YATGpzB45M0D5c4oJ0RjEIUakBwcPghmSW8K1GPqj/eUs4fbVPytXwtwvUll9Lxf gUvi5DA6xD6d2ckwDyRxfcMhXYydr2hIsgfrBLmRDMi4BkxMvA23eShPd/tPvnR0gJk= ) ; Key ID = 10104 gov. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240623141047 20240423141047 64280 gov. GGsGHy8XGH2PGTeyVpY5iEmleVzWCH/eitEUBXIgG0ivqrcC6Pzhenn+3E9uz+C2ehYImK95B9PK juJuu0jPFw09gKBO8Xo9x+wpWM/Zdh3NxhzGmfQOxRyj/5e1g27XxQB1pqhRegDfa5/mg+8zAoFY YneUx2tnvdtycsZg49d2iq75YlRBRj9ZSl6PJJ/nzacwKPjQFCbFiuEfnn6Vn432vWr2T0AUuaDV bJCSg2c32qiMCHE18PaaUn82oWYF2/FjWhU9i/UpGd0PS8Wtvicuho7/CYbMv+UvithHF+NE7QFV VDQtgjise03ZFQWMfrZcrZE8W4/KKDeyfDAkFA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 8 AwEAAZp0vliR0TOBCJXmdagY36BI5ZveSPE3OSrcXKDs8IZa86x1+gwbheJcfLB6Fw6cWYUXaNgA mFcbxqIqWc5VJSyPS9yCPdEOLEIiegwCmcWnNsEyc0snKTyypXnvJ5JNhoznpFILDqlksAqP/aiq 1/l0w8TMkRbRrViLrJ1ayaScZ0nn/ge5wNpX09T9RI+gF1OIMJDdgH1vi0a+t6smSy4pUrerFTsu y8JAL+PP85MZiOssT9yoERfWSjFKde6PrQX5vj090AxT+hztb+q2EFXnF1a2L73/3UarB19k5NR3 MT1uM7ddag64Q0lg3aTy3MglDCzP7/StUxdeyL5qIX8= ) ; Key ID = 64280`
	`gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcbYvlY667qXEzHsDTkft9cgKy5F0S9CAP+aFK9+sJumGqvpMaOyOzsilJ+OSVFhopJ1aRFp CUpLVIcVJ3E3YATGpzB45M0D5c4oJ0RjEIUakBwcPghmSW8K1GPqj/eUs4fbVPytXwtwvUll9Lxf gUvi5DA6xD6d2ckwDyRxfcMhXYydr2hIsgfrBLmRDMi4BkxMvA23eShPd/tPvnR0gJk= ) ; Key ID = 10104`
	DNSKEY=64280/SEP is now in the chain-of-trust
	DS=64280/SHA-256 verifies DNSKEY=64280/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240623141047 20240423141047 64280 gov. GGsGHy8XGH2PGTeyVpY5iEmleVzWCH/eitEUBXIgG0ivqrcC6Pzhenn+3E9uz+C2ehYImK95B9PK juJuu0jPFw09gKBO8Xo9x+wpWM/Zdh3NxhzGmfQOxRyj/5e1g27XxQB1pqhRegDfa5/mg+8zAoFY YneUx2tnvdtycsZg49d2iq75YlRBRj9ZSl6PJJ/nzacwKPjQFCbFiuEfnn6Vn432vWr2T0AUuaDV bJCSg2c32qiMCHE18PaaUn82oWYF2/FjWhU9i/UpGd0PS8Wtvicuho7/CYbMv+UvithHF+NE7QFV VDQtgjise03ZFQWMfrZcrZE8W4/KKDeyfDAkFA== )`
	RRSIG=64280 and DNSKEY=64280/SEP verifies the DNSKEY RRset
	DNSKEY=10104 is now in the chain-of-trust
	Query to c.ns.gov for capital.gov/A
	Received 548 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 548 octets ;; HEADER SECTION ;; id = 8936 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 10 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; capital.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) capital.gov. 10800 IN NS auth111.ns.uu.net. capital.gov. 10800 IN NS auth120.ns.uu.net. capital.gov. 10800 IN NS authns1.centurylink.net. capital.gov. 10800 IN NS authns2.centurylink.net. capital.gov. 10800 IN NS ns1.aoc.gov. capital.gov. 10800 IN NS ns2.aoc.gov. capital.gov. 3600 IN DS ( 54389 8 2 b2c2ebd4fc576e2edb44e239f11715d047e2a886d954e21b5e0a2b4b04bea277 ) capital.gov. 3600 IN DS 63964 8 1 c55ff933b59498a446581cbaa5b57b6f840c34b2 capital.gov. 3600 IN DS ( 63964 8 2 c625dafdce26c808963e75275595b6aa74283432cfc16b5e0c87d4aeade35a20 ) capital.gov. 3600 IN RRSIG ( DS 8 2 3600 20240519080547 20240517060547 10104 gov. tTctG2FDZuv9y8LKieR1u0t6IRPItJQDtRSkRcY3kxLLV9IFb4gV5Q15Uvid4teCAvsFNQr3V8AC 5r3HkZEJr/KIwZWNZ/B1cOvn7VzKsZ7HpSS3MyAxwFdV0xwasqVXg8t5SWC19MzMdn3DWU0iE8Cp /5SiCKOPmlroDbhmRdIM8KacRrWEuDqLwI5jRH9vcwU1fW4eHkEJ1+TNIPZxCQ== ) ;; ADDITIONAL SECTION (3 records) ns1.aoc.gov. 3600 IN A 161.197.102.14 ns2.aoc.gov. 3600 IN A 161.197.100.14 ;; { "EDNS-VERSION": 0 }
	Query to c.ns.gov for capital.gov/DNSKEY
	Received 548 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 548 octets ;; HEADER SECTION ;; id = 8185 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 10 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; capital.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) capital.gov. 10800 IN NS auth111.ns.uu.net. capital.gov. 10800 IN NS auth120.ns.uu.net. capital.gov. 10800 IN NS authns1.centurylink.net. capital.gov. 10800 IN NS authns2.centurylink.net. capital.gov. 10800 IN NS ns1.aoc.gov. capital.gov. 10800 IN NS ns2.aoc.gov. capital.gov. 3600 IN DS ( 54389 8 2 b2c2ebd4fc576e2edb44e239f11715d047e2a886d954e21b5e0a2b4b04bea277 ) capital.gov. 3600 IN DS 63964 8 1 c55ff933b59498a446581cbaa5b57b6f840c34b2 capital.gov. 3600 IN DS ( 63964 8 2 c625dafdce26c808963e75275595b6aa74283432cfc16b5e0c87d4aeade35a20 ) capital.gov. 3600 IN RRSIG ( DS 8 2 3600 20240519080547 20240517060547 10104 gov. tTctG2FDZuv9y8LKieR1u0t6IRPItJQDtRSkRcY3kxLLV9IFb4gV5Q15Uvid4teCAvsFNQr3V8AC 5r3HkZEJr/KIwZWNZ/B1cOvn7VzKsZ7HpSS3MyAxwFdV0xwasqVXg8t5SWC19MzMdn3DWU0iE8Cp /5SiCKOPmlroDbhmRdIM8KacRrWEuDqLwI5jRH9vcwU1fW4eHkEJ1+TNIPZxCQ== ) ;; ADDITIONAL SECTION (3 records) ns1.aoc.gov. 3600 IN A 161.197.102.14 ns2.aoc.gov. 3600 IN A 161.197.100.14 ;; { "EDNS-VERSION": 0 }
	Found child zone capital.gov

capital.gov

	Checking DS between gov and capital.gov
	Query to c.ns.gov for capital.gov/DS
	Received 367 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 367 octets ;; HEADER SECTION ;; id = 44921 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; capital.gov. IN DS ;; ANSWER SECTION (4 records) capital.gov. 3600 IN DS ( 54389 8 2 b2c2ebd4fc576e2edb44e239f11715d047e2a886d954e21b5e0a2b4b04bea277 ) capital.gov. 3600 IN DS 63964 8 1 c55ff933b59498a446581cbaa5b57b6f840c34b2 capital.gov. 3600 IN DS ( 63964 8 2 c625dafdce26c808963e75275595b6aa74283432cfc16b5e0c87d4aeade35a20 ) capital.gov. 3600 IN RRSIG ( DS 8 2 3600 20240519080547 20240517060547 10104 gov. tTctG2FDZuv9y8LKieR1u0t6IRPItJQDtRSkRcY3kxLLV9IFb4gV5Q15Uvid4teCAvsFNQr3V8AC 5r3HkZEJr/KIwZWNZ/B1cOvn7VzKsZ7HpSS3MyAxwFdV0xwasqVXg8t5SWC19MzMdn3DWU0iE8Cp /5SiCKOPmlroDbhmRdIM8KacRrWEuDqLwI5jRH9vcwU1fW4eHkEJ1+TNIPZxCQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DS records for capital.gov in the gov zone
	DS=63964/SHA-1 uses a deprecated digest algorithm
	DS=54389/SHA-256 has algorithm RSASHA256
	DS=63964/SHA-1 has algorithm RSASHA256
	DS=63964/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`capital.gov. 3600 IN RRSIG ( DS 8 2 3600 20240519080547 20240517060547 10104 gov. tTctG2FDZuv9y8LKieR1u0t6IRPItJQDtRSkRcY3kxLLV9IFb4gV5Q15Uvid4teCAvsFNQr3V8AC 5r3HkZEJr/KIwZWNZ/B1cOvn7VzKsZ7HpSS3MyAxwFdV0xwasqVXg8t5SWC19MzMdn3DWU0iE8Cp /5SiCKOPmlroDbhmRdIM8KacRrWEuDqLwI5jRH9vcwU1fW4eHkEJ1+TNIPZxCQ== )`
	RRSIG=10104 and DNSKEY=10104 verifies the DS RRset
	DS=54389/SHA-256 is now in the chain-of-trust
	DS=63964/SHA-1 is now in the chain-of-trust
	`capital.gov. 3600 IN DS ( 54389 8 2 b2c2ebd4fc576e2edb44e239f11715d047e2a886d954e21b5e0a2b4b04bea277 )`
	`capital.gov. 3600 IN DS 63964 8 1 c55ff933b59498a446581cbaa5b57b6f840c34b2`
	`capital.gov. 3600 IN DS ( 63964 8 2 c625dafdce26c808963e75275595b6aa74283432cfc16b5e0c87d4aeade35a20 )`
	Query to ns2.aoc.gov for capital.gov/DNSKEY
	Received 1657 bytes from 161.197.100.14
	;; Response received from [161.197.100.14] 1657 octets ;; HEADER SECTION ;; id = 34570 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 7 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; capital.gov. IN DNSKEY ;; ANSWER SECTION (7 records) capital.gov. 172800 IN DNSKEY ( 256 3 8 AwEAAb/MVxi24TOtepVDh6TpxelFaRE+O2aO9xfZgWGOPcGtTVr9XgQMiPv/FpjvgYWLjqJtxMj8 4C32YCwsr14ugQWOSzoPAvADK2GyfBPpjEnMyvYA9pcES9APhGxpgL5JfQkRzPw/6cyuhfP5OWQs 6bJcHn0CTZoKhUC/apf+72Ot ) ; Key ID = 31224 capital.gov. 172800 IN DNSKEY ( 256 3 8 AwEAAditQPhHilvCpL9npvu3WCP1lrtRj7LZ/cKEDkN7uhgaqbinSqEEB3H46KYdUmtiJy6JnDTI OkgMTVTBkVBCMgeYqE/m9t9LPSZb0TEnWXIQaLn6yytT5L76QM3eSfbKMLYV9NeUdMgNXtouC6kk ucl0c8/XhjmCnV3s5e6kVb7N ) ; Key ID = 21408 capital.gov. 172800 IN DNSKEY ( 257 3 8 AwEAAcfUxSietMDTR5LebeEYY6geR/QO5p3yPEGzA8k+sC6AVoe17/4/zOYmSDBy68L9OVJPMQwv IaBn/p7e7zu/Eiz7YlyKvyTv3S9Sjc4w1tEaUFvXrgmi3VgteDhXpMiycNatisBs+XHte2LMHAfc To3C/zktTGcEXjBuZ3WjaNQ0Tjkt9ZV4KFkkvRCz3a4hOS6BSqSQdvMG8FP3vWLC35PHfdT3hn1u QD3G5WYcTaupWj7Hi4tMCsWNLtOb882CHgBUyBv81aXgdjhlLmWjQD8WhGKavYfh7cDuuBxAE0AE t9dsEnf29qOFbdDShI5KYA2UV3SOsCm5F/SbTXtJ06s= ) ; Key ID = 54389 capital.gov. 172800 IN DNSKEY ( 257 3 8 AwEAAan9CmmW+07n7JNwdaB5aT2mWJqbfjaJ0IfKe43fu1XoOtTVYdwUC1jcZVLtGZp/n77PhQ4I DaODZwQekhkVeZJSjxVW8TV2T+GQGszNfsQooMkL3aFAPlx0k5i8Qv6/UAOQ8gZqOTEDnB1np/Hr zLMhd5TQqzdQHKGLatGj36+XtpGePIeetTPiV8Ltl+0WJkaY8p8o5VUGy4sz8AAMKRNL30RI0bDx Gydb94N6HFhACwcWlpKHaXrXmqW1NIq78RZ3PZgyDIaKYBEfsDfvCu2IKSb6qrF5zc20RAbAs91t s72IO4Als0ksYCJv4cRsdEJVBWk8OWCZ3jUaUSXFU5M= ) ; Key ID = 63964 capital.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20240522005130 20240518001934 21408 capital.gov. IjJvU7mcXZkBiAnqDdjIyvIRYupr56VQMvGr7+xgCiQawIEQhsE/SduPfho2QFdNC7kPsK3ZlgAs BfZVl6cwrjXxLuFHZjCXRnHRnWOHqPKo6A2UdiOACVUVFBbRyQLbHjz7UsZUassqrFteFsof/+a9 lR8yRwv2to/TXuq5+mk= ) capital.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20240522005130 20240518001934 54389 capital.gov. UNQsFlGuUWILce+S4VxRUsSf+BLEwDUfdvFTbXJ7az/mYstu/Wi2ifLsB3JmpM/YSTN2FrNZMsZh 3utkdFW8X0z9pF2IUoVYdM7EMqmUrKEF/i1PH/5s/BZ4uRSIBiMeVB9seh83iLT7LtyrHqwQRUrH 4Iw0vYaMcJJ57yBbBmqPFIUWzQ+R5FtDmUHQdibsQJ+sgHHvcJlneVq3wqWaoSNxkv5+m8tfHSAB 3+1iXysUUn93HxoRd9rjeo/cqjuSCO9CACNyVmKv9lWPTrekOFa4noaAjHpj4zaiq0eQk0vRerxP uc9CwhlhFamJ6ZmlV5slXNGHgKmTIOKYTmC1JQ== ) capital.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20240522005130 20240518001934 63964 capital.gov. Ii6OGxUW2BiX0mWp6c6CuBFyIUiDtHlwjb0hZrNtzAJMNgMSqSnB6NEiMUiqoDfaeMXD8IIkgkb1 RP0AkrKM+A+AjOfifLPdzGzIhl4gtetjuf9n1B6Rc2rIOOLokHOM9v2pwfKj7dTTkFJ/0hdE8hxs 1DBsAQgm0BY9YAEvdv9EGGEXJwdwLjusRqws5CYB1sclcYbmt736yR2GrD0ucNnuBK+nYWEueyKs elOihIZWjf9S+/LiF5xv6c2ca62BoiO5ZVODTtgdyA7CV5hKwdzSCyqFYTm9cCxPpbVvh1xwsIgm LmPQafapb32EVWrVSYQNYv1yxe5j4YMx/2aS9g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for capital.gov
	`capital.gov. 172800 IN DNSKEY ( 256 3 8 AwEAAb/MVxi24TOtepVDh6TpxelFaRE+O2aO9xfZgWGOPcGtTVr9XgQMiPv/FpjvgYWLjqJtxMj8 4C32YCwsr14ugQWOSzoPAvADK2GyfBPpjEnMyvYA9pcES9APhGxpgL5JfQkRzPw/6cyuhfP5OWQs 6bJcHn0CTZoKhUC/apf+72Ot ) ; Key ID = 31224`
	`capital.gov. 172800 IN DNSKEY ( 256 3 8 AwEAAditQPhHilvCpL9npvu3WCP1lrtRj7LZ/cKEDkN7uhgaqbinSqEEB3H46KYdUmtiJy6JnDTI OkgMTVTBkVBCMgeYqE/m9t9LPSZb0TEnWXIQaLn6yytT5L76QM3eSfbKMLYV9NeUdMgNXtouC6kk ucl0c8/XhjmCnV3s5e6kVb7N ) ; Key ID = 21408`
	`capital.gov. 172800 IN DNSKEY ( 257 3 8 AwEAAcfUxSietMDTR5LebeEYY6geR/QO5p3yPEGzA8k+sC6AVoe17/4/zOYmSDBy68L9OVJPMQwv IaBn/p7e7zu/Eiz7YlyKvyTv3S9Sjc4w1tEaUFvXrgmi3VgteDhXpMiycNatisBs+XHte2LMHAfc To3C/zktTGcEXjBuZ3WjaNQ0Tjkt9ZV4KFkkvRCz3a4hOS6BSqSQdvMG8FP3vWLC35PHfdT3hn1u QD3G5WYcTaupWj7Hi4tMCsWNLtOb882CHgBUyBv81aXgdjhlLmWjQD8WhGKavYfh7cDuuBxAE0AE t9dsEnf29qOFbdDShI5KYA2UV3SOsCm5F/SbTXtJ06s= ) ; Key ID = 54389`
	`capital.gov. 172800 IN DNSKEY ( 257 3 8 AwEAAan9CmmW+07n7JNwdaB5aT2mWJqbfjaJ0IfKe43fu1XoOtTVYdwUC1jcZVLtGZp/n77PhQ4I DaODZwQekhkVeZJSjxVW8TV2T+GQGszNfsQooMkL3aFAPlx0k5i8Qv6/UAOQ8gZqOTEDnB1np/Hr zLMhd5TQqzdQHKGLatGj36+XtpGePIeetTPiV8Ltl+0WJkaY8p8o5VUGy4sz8AAMKRNL30RI0bDx Gydb94N6HFhACwcWlpKHaXrXmqW1NIq78RZ3PZgyDIaKYBEfsDfvCu2IKSb6qrF5zc20RAbAs91t s72IO4Als0ksYCJv4cRsdEJVBWk8OWCZ3jUaUSXFU5M= ) ; Key ID = 63964`
	DNSKEY=54389/SEP is now in the chain-of-trust
	DS=54389/SHA-256 verifies DNSKEY=54389/SEP
	DNSKEY=63964/SEP is now in the chain-of-trust
	DS=63964/SHA-1 verifies DNSKEY=63964/SEP
	DS=63964/SHA-256 verifies DNSKEY=63964/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`capital.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20240522005130 20240518001934 21408 capital.gov. IjJvU7mcXZkBiAnqDdjIyvIRYupr56VQMvGr7+xgCiQawIEQhsE/SduPfho2QFdNC7kPsK3ZlgAs BfZVl6cwrjXxLuFHZjCXRnHRnWOHqPKo6A2UdiOACVUVFBbRyQLbHjz7UsZUassqrFteFsof/+a9 lR8yRwv2to/TXuq5+mk= )`
	`capital.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20240522005130 20240518001934 54389 capital.gov. UNQsFlGuUWILce+S4VxRUsSf+BLEwDUfdvFTbXJ7az/mYstu/Wi2ifLsB3JmpM/YSTN2FrNZMsZh 3utkdFW8X0z9pF2IUoVYdM7EMqmUrKEF/i1PH/5s/BZ4uRSIBiMeVB9seh83iLT7LtyrHqwQRUrH 4Iw0vYaMcJJ57yBbBmqPFIUWzQ+R5FtDmUHQdibsQJ+sgHHvcJlneVq3wqWaoSNxkv5+m8tfHSAB 3+1iXysUUn93HxoRd9rjeo/cqjuSCO9CACNyVmKv9lWPTrekOFa4noaAjHpj4zaiq0eQk0vRerxP uc9CwhlhFamJ6ZmlV5slXNGHgKmTIOKYTmC1JQ== )`
	`capital.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20240522005130 20240518001934 63964 capital.gov. Ii6OGxUW2BiX0mWp6c6CuBFyIUiDtHlwjb0hZrNtzAJMNgMSqSnB6NEiMUiqoDfaeMXD8IIkgkb1 RP0AkrKM+A+AjOfifLPdzGzIhl4gtetjuf9n1B6Rc2rIOOLokHOM9v2pwfKj7dTTkFJ/0hdE8hxs 1DBsAQgm0BY9YAEvdv9EGGEXJwdwLjusRqws5CYB1sclcYbmt736yR2GrD0ucNnuBK+nYWEueyKs elOihIZWjf9S+/LiF5xv6c2ca62BoiO5ZVODTtgdyA7CV5hKwdzSCyqFYTm9cCxPpbVvh1xwsIgm LmPQafapb32EVWrVSYQNYv1yxe5j4YMx/2aS9g== )`
	RRSIG=21408 and DNSKEY=21408 verifies the DNSKEY RRset
	RRSIG=54389 and DNSKEY=54389/SEP verifies the DNSKEY RRset
	RRSIG=63964 and DNSKEY=63964/SEP verifies the DNSKEY RRset
	DNSKEY=31224 is now in the chain-of-trust
	DNSKEY=21408 is now in the chain-of-trust
	Query to authns2.centurylink.net for capital.gov/A
	Received 1001 bytes from 208.44.130.120
	;; Response received from [208.44.130.120] 1001 octets ;; HEADER SECTION ;; id = 52034 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; capital.gov. IN A ;; ANSWER SECTION (2 records) capital.gov. 60 IN A 54.172.139.108 capital.gov. 60 IN RRSIG ( A 8 2 60 20240521143907 20240517134729 21408 capital.gov. U9cEn5e4s+DfCArATEHQs03Zyb7eRt2l9mwQVZ6Fn7zPvwBIilezxxmjaQ6iS6TbRpwvKP/8IYuT ov+b6OS3QpzU+mKNYSPhnjxIx1r3cC2ViSaWITpXOylIeFnFe6ATIbZ9cjb9pcFs7qNhW60Pqd/o 9dzDET6kZMM4BWa1qVI= ) ;; AUTHORITY SECTION (7 records) capital.gov. 3600 IN NS ns1.aoc.gov. capital.gov. 3600 IN NS authns1.centurylink.net. capital.gov. 3600 IN NS ns2.aoc.gov. capital.gov. 3600 IN NS auth120.ns.uu.net. capital.gov. 3600 IN NS auth111.ns.uu.net. capital.gov. 3600 IN NS authns2.centurylink.net. capital.gov. 3600 IN RRSIG ( NS 8 2 3600 20240521143907 20240517134729 21408 capital.gov. D9WVUj87JrdPyjhYL5LS8aTPv7ZYz39syd/0TyzI/cO9wmWz1wVWqP+FbGtqqSX5UmlPpbvnWQd1 dVaWX+HsXb7436A3ASiKAWTN4XH73+P9QJejNBSSV2xsZoDuxV8yjEd37AoonhiJw5kBmyz2Jywd OzrK9MlnNYmTc/EDz4Q= ) ;; ADDITIONAL SECTION (9 records) ns1.aoc.gov. 3600 IN A 161.197.102.14 ns2.aoc.gov. 3600 IN A 161.197.100.14 authns1.centurylink.net. 600 IN A 63.150.72.4 authns2.centurylink.net. 600 IN A 208.44.130.120 authns1.centurylink.net. 300 IN AAAA 2001:428::5 authns2.centurylink.net. 300 IN AAAA 2001:428::6 ns1.aoc.gov. 3600 IN RRSIG ( A 8 3 3600 20240521112853 20240517110503 48595 aoc.gov. C75GNnpd5T1SjnGs68qjETpSwr0dZxUqWd4TgvugMtx6XZ26Zj9HV3dKLiZlKZ2rtFhFouB84u+P 2BbRwPlUk96d5q5AdM9RYAyogUrt/kL64ndJlL2EfGxwZrZlOXeYainyV+6Pnoi/SZin8MeUAsnE crDkYAm0J3+lJYcwgBE= ) ns2.aoc.gov. 3600 IN RRSIG ( A 8 3 3600 20240521130600 20240517122057 48595 aoc.gov. nCIdpfvMAJHPHlX8Vbm0Ph/qep/4CM1hoUR1yJrSAaG/oUOxS3jjsspKl5B5becbZDLhU8SBvEST HFx0QgV4kxtwWv6khRe+BbWPI7zusLGbpzNz+41JOx45dzh69FJH7c7oidqn8Ljr9RhDrtr289ti F2/70m3sASIvvzNGflg= ) ;; { "EDNS-VERSION": 0 }
	authns2.centurylink.net is authoritative for capital.gov
	Found RRSIG signed by capital.gov zone
	Query to ns1.aoc.gov for capital.gov/SOA
	Received 269 bytes from 161.197.102.14
	;; Response received from [161.197.102.14] 269 octets ;; HEADER SECTION ;; id = 19848 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; capital.gov. IN SOA ;; ANSWER SECTION (2 records) capital.gov. 3600 IN SOA ( ns1.aoc.gov. hostmaster.aoc.gov. 4863 ;serial 10800 ;refresh 1080 ;retry 604800 ;expire 60 ;minimum ) capital.gov. 3600 IN RRSIG ( SOA 8 2 3600 20240522011934 20240518001934 21408 capital.gov. Ol7KVpWDpMD2azYEfihk7e5MbVlrVpxWcrqYGBzf3VJDqJD2TJrb+1JJq8Ya/souK04sqmao20uV MCh7dDvHdoaY8VRa/Z8vJK5e64OQuxsD1puNuUTk4FXEQIL7wKbRPFUdguff00P5l6c6skTC8Mmv K73ZBp02jw67lc/lYfw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to authns1.centurylink.net for capital.gov/SOA
	Received 1032 bytes from 63.150.72.4
	;; Response received from [63.150.72.4] 1032 octets ;; HEADER SECTION ;; id = 43058 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; capital.gov. IN SOA ;; ANSWER SECTION (2 records) capital.gov. 3600 IN SOA ( ns1.aoc.gov. hostmaster.aoc.gov. 4863 ;serial 10800 ;refresh 1080 ;retry 604800 ;expire 60 ;minimum ) capital.gov. 3600 IN RRSIG ( SOA 8 2 3600 20240522011934 20240518001934 21408 capital.gov. Ol7KVpWDpMD2azYEfihk7e5MbVlrVpxWcrqYGBzf3VJDqJD2TJrb+1JJq8Ya/souK04sqmao20uV MCh7dDvHdoaY8VRa/Z8vJK5e64OQuxsD1puNuUTk4FXEQIL7wKbRPFUdguff00P5l6c6skTC8Mmv K73ZBp02jw67lc/lYfw= ) ;; AUTHORITY SECTION (7 records) capital.gov. 3600 IN NS auth120.ns.uu.net. capital.gov. 3600 IN NS ns1.aoc.gov. capital.gov. 3600 IN NS authns2.centurylink.net. capital.gov. 3600 IN NS auth111.ns.uu.net. capital.gov. 3600 IN NS authns1.centurylink.net. capital.gov. 3600 IN NS ns2.aoc.gov. capital.gov. 3600 IN RRSIG ( NS 8 2 3600 20240521143907 20240517134729 21408 capital.gov. D9WVUj87JrdPyjhYL5LS8aTPv7ZYz39syd/0TyzI/cO9wmWz1wVWqP+FbGtqqSX5UmlPpbvnWQd1 dVaWX+HsXb7436A3ASiKAWTN4XH73+P9QJejNBSSV2xsZoDuxV8yjEd37AoonhiJw5kBmyz2Jywd OzrK9MlnNYmTc/EDz4Q= ) ;; ADDITIONAL SECTION (9 records) ns1.aoc.gov. 3600 IN A 161.197.102.14 ns2.aoc.gov. 3600 IN A 161.197.100.14 authns1.centurylink.net. 600 IN A 63.150.72.4 authns2.centurylink.net. 600 IN A 208.44.130.120 authns1.centurylink.net. 300 IN AAAA 2001:428::5 authns2.centurylink.net. 300 IN AAAA 2001:428::6 ns1.aoc.gov. 3600 IN RRSIG ( A 8 3 3600 20240521112853 20240517110503 48595 aoc.gov. C75GNnpd5T1SjnGs68qjETpSwr0dZxUqWd4TgvugMtx6XZ26Zj9HV3dKLiZlKZ2rtFhFouB84u+P 2BbRwPlUk96d5q5AdM9RYAyogUrt/kL64ndJlL2EfGxwZrZlOXeYainyV+6Pnoi/SZin8MeUAsnE crDkYAm0J3+lJYcwgBE= ) ns2.aoc.gov. 3600 IN RRSIG ( A 8 3 3600 20240521130600 20240517122057 48595 aoc.gov. nCIdpfvMAJHPHlX8Vbm0Ph/qep/4CM1hoUR1yJrSAaG/oUOxS3jjsspKl5B5becbZDLhU8SBvEST HFx0QgV4kxtwWv6khRe+BbWPI7zusLGbpzNz+41JOx45dzh69FJH7c7oidqn8Ljr9RhDrtr289ti F2/70m3sASIvvzNGflg= ) ;; { "EDNS-VERSION": 0 }
	Query to ns2.aoc.gov for capital.gov/SOA
	Received 269 bytes from 161.197.100.14
	;; Response received from [161.197.100.14] 269 octets ;; HEADER SECTION ;; id = 54219 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; capital.gov. IN SOA ;; ANSWER SECTION (2 records) capital.gov. 3600 IN SOA ( ns1.aoc.gov. hostmaster.aoc.gov. 4863 ;serial 10800 ;refresh 1080 ;retry 604800 ;expire 60 ;minimum ) capital.gov. 3600 IN RRSIG ( SOA 8 2 3600 20240522011934 20240518001934 21408 capital.gov. Ol7KVpWDpMD2azYEfihk7e5MbVlrVpxWcrqYGBzf3VJDqJD2TJrb+1JJq8Ya/souK04sqmao20uV MCh7dDvHdoaY8VRa/Z8vJK5e64OQuxsD1puNuUTk4FXEQIL7wKbRPFUdguff00P5l6c6skTC8Mmv K73ZBp02jw67lc/lYfw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to auth111.ns.uu.net for capital.gov/SOA
	Received 269 bytes from 198.6.1.115
	;; Response received from [198.6.1.115] 269 octets ;; HEADER SECTION ;; id = 53308 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; capital.gov. IN SOA ;; ANSWER SECTION (2 records) capital.gov. 3600 IN SOA ( ns1.aoc.gov. hostmaster.aoc.gov. 4863 ;serial 10800 ;refresh 1080 ;retry 604800 ;expire 60 ;minimum ) capital.gov. 3600 IN RRSIG ( SOA 8 2 3600 20240522011934 20240518001934 21408 capital.gov. Ol7KVpWDpMD2azYEfihk7e5MbVlrVpxWcrqYGBzf3VJDqJD2TJrb+1JJq8Ya/souK04sqmao20uV MCh7dDvHdoaY8VRa/Z8vJK5e64OQuxsD1puNuUTk4FXEQIL7wKbRPFUdguff00P5l6c6skTC8Mmv K73ZBp02jw67lc/lYfw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to auth120.ns.uu.net for capital.gov/SOA
	Received 269 bytes from 198.6.1.154
	;; Response received from [198.6.1.154] 269 octets ;; HEADER SECTION ;; id = 7359 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; capital.gov. IN SOA ;; ANSWER SECTION (2 records) capital.gov. 3600 IN SOA ( ns1.aoc.gov. hostmaster.aoc.gov. 4863 ;serial 10800 ;refresh 1080 ;retry 604800 ;expire 60 ;minimum ) capital.gov. 3600 IN RRSIG ( SOA 8 2 3600 20240522011934 20240518001934 21408 capital.gov. Ol7KVpWDpMD2azYEfihk7e5MbVlrVpxWcrqYGBzf3VJDqJD2TJrb+1JJq8Ya/souK04sqmao20uV MCh7dDvHdoaY8VRa/Z8vJK5e64OQuxsD1puNuUTk4FXEQIL7wKbRPFUdguff00P5l6c6skTC8Mmv K73ZBp02jw67lc/lYfw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to authns2.centurylink.net for capital.gov/A
	Received 1001 bytes from 208.44.130.120
	;; Response received from [208.44.130.120] 1001 octets ;; HEADER SECTION ;; id = 64596 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; capital.gov. IN A ;; ANSWER SECTION (2 records) capital.gov. 60 IN A 54.172.139.108 capital.gov. 60 IN RRSIG ( A 8 2 60 20240521143907 20240517134729 21408 capital.gov. U9cEn5e4s+DfCArATEHQs03Zyb7eRt2l9mwQVZ6Fn7zPvwBIilezxxmjaQ6iS6TbRpwvKP/8IYuT ov+b6OS3QpzU+mKNYSPhnjxIx1r3cC2ViSaWITpXOylIeFnFe6ATIbZ9cjb9pcFs7qNhW60Pqd/o 9dzDET6kZMM4BWa1qVI= ) ;; AUTHORITY SECTION (7 records) capital.gov. 3600 IN NS auth120.ns.uu.net. capital.gov. 3600 IN NS authns1.centurylink.net. capital.gov. 3600 IN NS ns1.aoc.gov. capital.gov. 3600 IN NS auth111.ns.uu.net. capital.gov. 3600 IN NS ns2.aoc.gov. capital.gov. 3600 IN NS authns2.centurylink.net. capital.gov. 3600 IN RRSIG ( NS 8 2 3600 20240521143907 20240517134729 21408 capital.gov. D9WVUj87JrdPyjhYL5LS8aTPv7ZYz39syd/0TyzI/cO9wmWz1wVWqP+FbGtqqSX5UmlPpbvnWQd1 dVaWX+HsXb7436A3ASiKAWTN4XH73+P9QJejNBSSV2xsZoDuxV8yjEd37AoonhiJw5kBmyz2Jywd OzrK9MlnNYmTc/EDz4Q= ) ;; ADDITIONAL SECTION (9 records) ns1.aoc.gov. 3600 IN A 161.197.102.14 ns2.aoc.gov. 3600 IN A 161.197.100.14 authns1.centurylink.net. 600 IN A 63.150.72.4 authns2.centurylink.net. 600 IN A 208.44.130.120 authns1.centurylink.net. 300 IN AAAA 2001:428::5 authns2.centurylink.net. 300 IN AAAA 2001:428::6 ns1.aoc.gov. 3600 IN RRSIG ( A 8 3 3600 20240521112853 20240517110503 48595 aoc.gov. C75GNnpd5T1SjnGs68qjETpSwr0dZxUqWd4TgvugMtx6XZ26Zj9HV3dKLiZlKZ2rtFhFouB84u+P 2BbRwPlUk96d5q5AdM9RYAyogUrt/kL64ndJlL2EfGxwZrZlOXeYainyV+6Pnoi/SZin8MeUAsnE crDkYAm0J3+lJYcwgBE= ) ns2.aoc.gov. 3600 IN RRSIG ( A 8 3 3600 20240521130600 20240517122057 48595 aoc.gov. nCIdpfvMAJHPHlX8Vbm0Ph/qep/4CM1hoUR1yJrSAaG/oUOxS3jjsspKl5B5becbZDLhU8SBvEST HFx0QgV4kxtwWv6khRe+BbWPI7zusLGbpzNz+41JOx45dzh69FJH7c7oidqn8Ljr9RhDrtr289ti F2/70m3sASIvvzNGflg= ) ;; { "EDNS-VERSION": 0 }
	capital.gov A RR has value 54.172.139.108
	Found 1 RRSIGs over A RRset
	`capital.gov. 60 IN RRSIG ( A 8 2 60 20240521143907 20240517134729 21408 capital.gov. U9cEn5e4s+DfCArATEHQs03Zyb7eRt2l9mwQVZ6Fn7zPvwBIilezxxmjaQ6iS6TbRpwvKP/8IYuT ov+b6OS3QpzU+mKNYSPhnjxIx1r3cC2ViSaWITpXOylIeFnFe6ATIbZ9cjb9pcFs7qNhW60Pqd/o 9dzDET6kZMM4BWa1qVI= )`
	RRSIG=21408 and DNSKEY=21408 verifies the A RRset

capital.gov

	Query to ns2.aoc.gov for capital.gov/A
	Received 227 bytes from 161.197.100.14
	;; Response received from [161.197.100.14] 227 octets ;; HEADER SECTION ;; id = 13445 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; capital.gov. IN A ;; ANSWER SECTION (2 records) capital.gov. 60 IN A 54.172.139.108 capital.gov. 60 IN RRSIG ( A 8 2 60 20240521143907 20240517134729 21408 capital.gov. U9cEn5e4s+DfCArATEHQs03Zyb7eRt2l9mwQVZ6Fn7zPvwBIilezxxmjaQ6iS6TbRpwvKP/8IYuT ov+b6OS3QpzU+mKNYSPhnjxIx1r3cC2ViSaWITpXOylIeFnFe6ATIbZ9cjb9pcFs7qNhW60Pqd/o 9dzDET6kZMM4BWa1qVI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.aoc.gov is authoritative for capital.gov
	Found RRSIG signed by capital.gov zone
	Query to ns2.aoc.gov for capital.gov/A
	Received 227 bytes from 161.197.100.14
	;; Response received from [161.197.100.14] 227 octets ;; HEADER SECTION ;; id = 11512 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; capital.gov. IN A ;; ANSWER SECTION (2 records) capital.gov. 60 IN A 54.172.139.108 capital.gov. 60 IN RRSIG ( A 8 2 60 20240521143907 20240517134729 21408 capital.gov. U9cEn5e4s+DfCArATEHQs03Zyb7eRt2l9mwQVZ6Fn7zPvwBIilezxxmjaQ6iS6TbRpwvKP/8IYuT ov+b6OS3QpzU+mKNYSPhnjxIx1r3cC2ViSaWITpXOylIeFnFe6ATIbZ9cjb9pcFs7qNhW60Pqd/o 9dzDET6kZMM4BWa1qVI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	capital.gov A RR has value 54.172.139.108
	Found 1 RRSIGs over A RRset
	`capital.gov. 60 IN RRSIG ( A 8 2 60 20240521143907 20240517134729 21408 capital.gov. U9cEn5e4s+DfCArATEHQs03Zyb7eRt2l9mwQVZ6Fn7zPvwBIilezxxmjaQ6iS6TbRpwvKP/8IYuT ov+b6OS3QpzU+mKNYSPhnjxIx1r3cC2ViSaWITpXOylIeFnFe6ATIbZ9cjb9pcFs7qNhW60Pqd/o 9dzDET6kZMM4BWa1qVI= )`
	RRSIG=21408 and DNSKEY=21408 verifies the A RRset

capital.gov

	Query to authns1.centurylink.net for capital.gov/A
	Received 1001 bytes from 63.150.72.4
	;; Response received from [63.150.72.4] 1001 octets ;; HEADER SECTION ;; id = 44864 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; capital.gov. IN A ;; ANSWER SECTION (2 records) capital.gov. 60 IN A 54.172.139.108 capital.gov. 60 IN RRSIG ( A 8 2 60 20240521143907 20240517134729 21408 capital.gov. U9cEn5e4s+DfCArATEHQs03Zyb7eRt2l9mwQVZ6Fn7zPvwBIilezxxmjaQ6iS6TbRpwvKP/8IYuT ov+b6OS3QpzU+mKNYSPhnjxIx1r3cC2ViSaWITpXOylIeFnFe6ATIbZ9cjb9pcFs7qNhW60Pqd/o 9dzDET6kZMM4BWa1qVI= ) ;; AUTHORITY SECTION (7 records) capital.gov. 3600 IN NS auth111.ns.uu.net. capital.gov. 3600 IN NS ns1.aoc.gov. capital.gov. 3600 IN NS authns2.centurylink.net. capital.gov. 3600 IN NS authns1.centurylink.net. capital.gov. 3600 IN NS ns2.aoc.gov. capital.gov. 3600 IN NS auth120.ns.uu.net. capital.gov. 3600 IN RRSIG ( NS 8 2 3600 20240521143907 20240517134729 21408 capital.gov. D9WVUj87JrdPyjhYL5LS8aTPv7ZYz39syd/0TyzI/cO9wmWz1wVWqP+FbGtqqSX5UmlPpbvnWQd1 dVaWX+HsXb7436A3ASiKAWTN4XH73+P9QJejNBSSV2xsZoDuxV8yjEd37AoonhiJw5kBmyz2Jywd OzrK9MlnNYmTc/EDz4Q= ) ;; ADDITIONAL SECTION (9 records) ns1.aoc.gov. 3600 IN A 161.197.102.14 ns2.aoc.gov. 3600 IN A 161.197.100.14 authns1.centurylink.net. 600 IN A 63.150.72.4 authns2.centurylink.net. 600 IN A 208.44.130.120 authns1.centurylink.net. 300 IN AAAA 2001:428::5 authns2.centurylink.net. 300 IN AAAA 2001:428::6 ns1.aoc.gov. 3600 IN RRSIG ( A 8 3 3600 20240521112853 20240517110503 48595 aoc.gov. C75GNnpd5T1SjnGs68qjETpSwr0dZxUqWd4TgvugMtx6XZ26Zj9HV3dKLiZlKZ2rtFhFouB84u+P 2BbRwPlUk96d5q5AdM9RYAyogUrt/kL64ndJlL2EfGxwZrZlOXeYainyV+6Pnoi/SZin8MeUAsnE crDkYAm0J3+lJYcwgBE= ) ns2.aoc.gov. 3600 IN RRSIG ( A 8 3 3600 20240521130600 20240517122057 48595 aoc.gov. nCIdpfvMAJHPHlX8Vbm0Ph/qep/4CM1hoUR1yJrSAaG/oUOxS3jjsspKl5B5becbZDLhU8SBvEST HFx0QgV4kxtwWv6khRe+BbWPI7zusLGbpzNz+41JOx45dzh69FJH7c7oidqn8Ljr9RhDrtr289ti F2/70m3sASIvvzNGflg= ) ;; { "EDNS-VERSION": 0 }
	authns1.centurylink.net is authoritative for capital.gov
	Found RRSIG signed by capital.gov zone
	Query to authns1.centurylink.net for capital.gov/A
	Received 1001 bytes from 63.150.72.4
	;; Response received from [63.150.72.4] 1001 octets ;; HEADER SECTION ;; id = 44247 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; capital.gov. IN A ;; ANSWER SECTION (2 records) capital.gov. 60 IN A 54.172.139.108 capital.gov. 60 IN RRSIG ( A 8 2 60 20240521143907 20240517134729 21408 capital.gov. U9cEn5e4s+DfCArATEHQs03Zyb7eRt2l9mwQVZ6Fn7zPvwBIilezxxmjaQ6iS6TbRpwvKP/8IYuT ov+b6OS3QpzU+mKNYSPhnjxIx1r3cC2ViSaWITpXOylIeFnFe6ATIbZ9cjb9pcFs7qNhW60Pqd/o 9dzDET6kZMM4BWa1qVI= ) ;; AUTHORITY SECTION (7 records) capital.gov. 3600 IN NS ns2.aoc.gov. capital.gov. 3600 IN NS authns2.centurylink.net. capital.gov. 3600 IN NS authns1.centurylink.net. capital.gov. 3600 IN NS ns1.aoc.gov. capital.gov. 3600 IN NS auth120.ns.uu.net. capital.gov. 3600 IN NS auth111.ns.uu.net. capital.gov. 3600 IN RRSIG ( NS 8 2 3600 20240521143907 20240517134729 21408 capital.gov. D9WVUj87JrdPyjhYL5LS8aTPv7ZYz39syd/0TyzI/cO9wmWz1wVWqP+FbGtqqSX5UmlPpbvnWQd1 dVaWX+HsXb7436A3ASiKAWTN4XH73+P9QJejNBSSV2xsZoDuxV8yjEd37AoonhiJw5kBmyz2Jywd OzrK9MlnNYmTc/EDz4Q= ) ;; ADDITIONAL SECTION (9 records) ns1.aoc.gov. 3600 IN A 161.197.102.14 ns2.aoc.gov. 3600 IN A 161.197.100.14 authns1.centurylink.net. 600 IN A 63.150.72.4 authns2.centurylink.net. 600 IN A 208.44.130.120 authns1.centurylink.net. 300 IN AAAA 2001:428::5 authns2.centurylink.net. 300 IN AAAA 2001:428::6 ns1.aoc.gov. 3600 IN RRSIG ( A 8 3 3600 20240521112853 20240517110503 48595 aoc.gov. C75GNnpd5T1SjnGs68qjETpSwr0dZxUqWd4TgvugMtx6XZ26Zj9HV3dKLiZlKZ2rtFhFouB84u+P 2BbRwPlUk96d5q5AdM9RYAyogUrt/kL64ndJlL2EfGxwZrZlOXeYainyV+6Pnoi/SZin8MeUAsnE crDkYAm0J3+lJYcwgBE= ) ns2.aoc.gov. 3600 IN RRSIG ( A 8 3 3600 20240521130600 20240517122057 48595 aoc.gov. nCIdpfvMAJHPHlX8Vbm0Ph/qep/4CM1hoUR1yJrSAaG/oUOxS3jjsspKl5B5becbZDLhU8SBvEST HFx0QgV4kxtwWv6khRe+BbWPI7zusLGbpzNz+41JOx45dzh69FJH7c7oidqn8Ljr9RhDrtr289ti F2/70m3sASIvvzNGflg= ) ;; { "EDNS-VERSION": 0 }
	capital.gov A RR has value 54.172.139.108
	Found 1 RRSIGs over A RRset
	`capital.gov. 60 IN RRSIG ( A 8 2 60 20240521143907 20240517134729 21408 capital.gov. U9cEn5e4s+DfCArATEHQs03Zyb7eRt2l9mwQVZ6Fn7zPvwBIilezxxmjaQ6iS6TbRpwvKP/8IYuT ov+b6OS3QpzU+mKNYSPhnjxIx1r3cC2ViSaWITpXOylIeFnFe6ATIbZ9cjb9pcFs7qNhW60Pqd/o 9dzDET6kZMM4BWa1qVI= )`
	RRSIG=21408 and DNSKEY=21408 verifies the A RRset

capital.gov

	Query to ns1.aoc.gov for capital.gov/A
	Received 227 bytes from 161.197.102.14
	;; Response received from [161.197.102.14] 227 octets ;; HEADER SECTION ;; id = 38449 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; capital.gov. IN A ;; ANSWER SECTION (2 records) capital.gov. 60 IN A 54.172.139.108 capital.gov. 60 IN RRSIG ( A 8 2 60 20240521143907 20240517134729 21408 capital.gov. U9cEn5e4s+DfCArATEHQs03Zyb7eRt2l9mwQVZ6Fn7zPvwBIilezxxmjaQ6iS6TbRpwvKP/8IYuT ov+b6OS3QpzU+mKNYSPhnjxIx1r3cC2ViSaWITpXOylIeFnFe6ATIbZ9cjb9pcFs7qNhW60Pqd/o 9dzDET6kZMM4BWa1qVI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.aoc.gov is authoritative for capital.gov
	Found RRSIG signed by capital.gov zone
	Query to ns1.aoc.gov for capital.gov/A
	Received 227 bytes from 161.197.102.14
	;; Response received from [161.197.102.14] 227 octets ;; HEADER SECTION ;; id = 32052 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; capital.gov. IN A ;; ANSWER SECTION (2 records) capital.gov. 60 IN A 54.172.139.108 capital.gov. 60 IN RRSIG ( A 8 2 60 20240521143907 20240517134729 21408 capital.gov. U9cEn5e4s+DfCArATEHQs03Zyb7eRt2l9mwQVZ6Fn7zPvwBIilezxxmjaQ6iS6TbRpwvKP/8IYuT ov+b6OS3QpzU+mKNYSPhnjxIx1r3cC2ViSaWITpXOylIeFnFe6ATIbZ9cjb9pcFs7qNhW60Pqd/o 9dzDET6kZMM4BWa1qVI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	capital.gov A RR has value 54.172.139.108
	Found 1 RRSIGs over A RRset
	`capital.gov. 60 IN RRSIG ( A 8 2 60 20240521143907 20240517134729 21408 capital.gov. U9cEn5e4s+DfCArATEHQs03Zyb7eRt2l9mwQVZ6Fn7zPvwBIilezxxmjaQ6iS6TbRpwvKP/8IYuT ov+b6OS3QpzU+mKNYSPhnjxIx1r3cC2ViSaWITpXOylIeFnFe6ATIbZ9cjb9pcFs7qNhW60Pqd/o 9dzDET6kZMM4BWa1qVI= )`
	RRSIG=21408 and DNSKEY=21408 verifies the A RRset

capital.gov

	Query to auth120.ns.uu.net for capital.gov/A
	Received 227 bytes from 198.6.1.154
	;; Response received from [198.6.1.154] 227 octets ;; HEADER SECTION ;; id = 6749 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; capital.gov. IN A ;; ANSWER SECTION (2 records) capital.gov. 60 IN A 54.172.139.108 capital.gov. 60 IN RRSIG ( A 8 2 60 20240521143907 20240517134729 21408 capital.gov. U9cEn5e4s+DfCArATEHQs03Zyb7eRt2l9mwQVZ6Fn7zPvwBIilezxxmjaQ6iS6TbRpwvKP/8IYuT ov+b6OS3QpzU+mKNYSPhnjxIx1r3cC2ViSaWITpXOylIeFnFe6ATIbZ9cjb9pcFs7qNhW60Pqd/o 9dzDET6kZMM4BWa1qVI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	auth120.ns.uu.net is authoritative for capital.gov
	Found RRSIG signed by capital.gov zone
	Query to auth120.ns.uu.net for capital.gov/A
	Received 227 bytes from 198.6.1.154
	;; Response received from [198.6.1.154] 227 octets ;; HEADER SECTION ;; id = 44113 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; capital.gov. IN A ;; ANSWER SECTION (2 records) capital.gov. 60 IN A 54.172.139.108 capital.gov. 60 IN RRSIG ( A 8 2 60 20240521143907 20240517134729 21408 capital.gov. U9cEn5e4s+DfCArATEHQs03Zyb7eRt2l9mwQVZ6Fn7zPvwBIilezxxmjaQ6iS6TbRpwvKP/8IYuT ov+b6OS3QpzU+mKNYSPhnjxIx1r3cC2ViSaWITpXOylIeFnFe6ATIbZ9cjb9pcFs7qNhW60Pqd/o 9dzDET6kZMM4BWa1qVI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	capital.gov A RR has value 54.172.139.108
	Found 1 RRSIGs over A RRset
	`capital.gov. 60 IN RRSIG ( A 8 2 60 20240521143907 20240517134729 21408 capital.gov. U9cEn5e4s+DfCArATEHQs03Zyb7eRt2l9mwQVZ6Fn7zPvwBIilezxxmjaQ6iS6TbRpwvKP/8IYuT ov+b6OS3QpzU+mKNYSPhnjxIx1r3cC2ViSaWITpXOylIeFnFe6ATIbZ9cjb9pcFs7qNhW60Pqd/o 9dzDET6kZMM4BWa1qVI= )`
	RRSIG=21408 and DNSKEY=21408 verifies the A RRset

capital.gov

	Query to auth111.ns.uu.net for capital.gov/A
	Received 227 bytes from 198.6.1.115
	;; Response received from [198.6.1.115] 227 octets ;; HEADER SECTION ;; id = 10300 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; capital.gov. IN A ;; ANSWER SECTION (2 records) capital.gov. 60 IN A 54.172.139.108 capital.gov. 60 IN RRSIG ( A 8 2 60 20240521143907 20240517134729 21408 capital.gov. U9cEn5e4s+DfCArATEHQs03Zyb7eRt2l9mwQVZ6Fn7zPvwBIilezxxmjaQ6iS6TbRpwvKP/8IYuT ov+b6OS3QpzU+mKNYSPhnjxIx1r3cC2ViSaWITpXOylIeFnFe6ATIbZ9cjb9pcFs7qNhW60Pqd/o 9dzDET6kZMM4BWa1qVI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	auth111.ns.uu.net is authoritative for capital.gov
	Found RRSIG signed by capital.gov zone
	Query to auth111.ns.uu.net for capital.gov/A
	Received 227 bytes from 198.6.1.115
	;; Response received from [198.6.1.115] 227 octets ;; HEADER SECTION ;; id = 16180 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; capital.gov. IN A ;; ANSWER SECTION (2 records) capital.gov. 60 IN A 54.172.139.108 capital.gov. 60 IN RRSIG ( A 8 2 60 20240521143907 20240517134729 21408 capital.gov. U9cEn5e4s+DfCArATEHQs03Zyb7eRt2l9mwQVZ6Fn7zPvwBIilezxxmjaQ6iS6TbRpwvKP/8IYuT ov+b6OS3QpzU+mKNYSPhnjxIx1r3cC2ViSaWITpXOylIeFnFe6ATIbZ9cjb9pcFs7qNhW60Pqd/o 9dzDET6kZMM4BWa1qVI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	capital.gov A RR has value 54.172.139.108
	Found 1 RRSIGs over A RRset
	`capital.gov. 60 IN RRSIG ( A 8 2 60 20240521143907 20240517134729 21408 capital.gov. U9cEn5e4s+DfCArATEHQs03Zyb7eRt2l9mwQVZ6Fn7zPvwBIilezxxmjaQ6iS6TbRpwvKP/8IYuT ov+b6OS3QpzU+mKNYSPhnjxIx1r3cC2ViSaWITpXOylIeFnFe6ATIbZ9cjb9pcFs7qNhW60Pqd/o 9dzDET6kZMM4BWa1qVI= )`
	RRSIG=21408 and DNSKEY=21408 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test capital.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: