DNSSEC Debugger - cecc.gov

Domain Name:

Time: 2024-05-13 09:50:49 UTC

Analyzing DNSSEC problems for cecc.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to m.root-servers.net for ./DNSKEY
	Received 865 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 865 octets ;; HEADER SECTION ;; id = 47849 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to i.root-servers.net for cecc.gov/A
	Received 618 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 618 octets ;; HEADER SECTION ;; id = 27293 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cecc.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240526050000 20240513040000 5613 . XE5rqigSd+1GkumiU1wV0aQObwBO5Pf6wuhfESwlDBzaN9p61jrp5b0vkR4HEa+vSYv63YujIInO QnIjgSYC2mD2uVnQszhq71FcfL/Vqb6ObGU6NFYhSSEdQr1VplF7tEYMIpQMjnVwddT1mKPoKNbC LgdX9kb0E030Bdg591wmZMMQIOiCmRdpVd30dR6DySg2ORQHfRea5XL03WTABsQkhmIRLSrc6lZo +6qy2C8ZeqA4gufiLI+KQQ1PlhGCivuturrjVlSB78PtJmSbPQV9D84t8baiof+XUMvdCQOtpvY/ puQP7aofGvqL++yb2E7ALFevIdlt3JWd2I6OQg== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Query to d.root-servers.net for gov/DNSKEY
	Received 610 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 610 octets ;; HEADER SECTION ;; id = 56924 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240526050000 20240513040000 5613 . XE5rqigSd+1GkumiU1wV0aQObwBO5Pf6wuhfESwlDBzaN9p61jrp5b0vkR4HEa+vSYv63YujIInO QnIjgSYC2mD2uVnQszhq71FcfL/Vqb6ObGU6NFYhSSEdQr1VplF7tEYMIpQMjnVwddT1mKPoKNbC LgdX9kb0E030Bdg591wmZMMQIOiCmRdpVd30dR6DySg2ORQHfRea5XL03WTABsQkhmIRLSrc6lZo +6qy2C8ZeqA4gufiLI+KQQ1PlhGCivuturrjVlSB78PtJmSbPQV9D84t8baiof+XUMvdCQOtpvY/ puQP7aofGvqL++yb2E7ALFevIdlt3JWd2I6OQg== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to b.root-servers.net for gov/DS
	Received 367 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 367 octets ;; HEADER SECTION ;; id = 51222 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240526050000 20240513040000 5613 . XE5rqigSd+1GkumiU1wV0aQObwBO5Pf6wuhfESwlDBzaN9p61jrp5b0vkR4HEa+vSYv63YujIInO QnIjgSYC2mD2uVnQszhq71FcfL/Vqb6ObGU6NFYhSSEdQr1VplF7tEYMIpQMjnVwddT1mKPoKNbC LgdX9kb0E030Bdg591wmZMMQIOiCmRdpVd30dR6DySg2ORQHfRea5XL03WTABsQkhmIRLSrc6lZo +6qy2C8ZeqA4gufiLI+KQQ1PlhGCivuturrjVlSB78PtJmSbPQV9D84t8baiof+XUMvdCQOtpvY/ puQP7aofGvqL++yb2E7ALFevIdlt3JWd2I6OQg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=64280/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20240526050000 20240513040000 5613 . XE5rqigSd+1GkumiU1wV0aQObwBO5Pf6wuhfESwlDBzaN9p61jrp5b0vkR4HEa+vSYv63YujIInO QnIjgSYC2mD2uVnQszhq71FcfL/Vqb6ObGU6NFYhSSEdQr1VplF7tEYMIpQMjnVwddT1mKPoKNbC LgdX9kb0E030Bdg591wmZMMQIOiCmRdpVd30dR6DySg2ORQHfRea5XL03WTABsQkhmIRLSrc6lZo +6qy2C8ZeqA4gufiLI+KQQ1PlhGCivuturrjVlSB78PtJmSbPQV9D84t8baiof+XUMvdCQOtpvY/ puQP7aofGvqL++yb2E7ALFevIdlt3JWd2I6OQg== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=64280/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 )`
	Query to d.ns.gov for gov/DNSKEY
	Received 779 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 779 octets ;; HEADER SECTION ;; id = 43991 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 8 AwEAAZp0vliR0TOBCJXmdagY36BI5ZveSPE3OSrcXKDs8IZa86x1+gwbheJcfLB6Fw6cWYUXaNgA mFcbxqIqWc5VJSyPS9yCPdEOLEIiegwCmcWnNsEyc0snKTyypXnvJ5JNhoznpFILDqlksAqP/aiq 1/l0w8TMkRbRrViLrJ1ayaScZ0nn/ge5wNpX09T9RI+gF1OIMJDdgH1vi0a+t6smSy4pUrerFTsu y8JAL+PP85MZiOssT9yoERfWSjFKde6PrQX5vj090AxT+hztb+q2EFXnF1a2L73/3UarB19k5NR3 MT1uM7ddag64Q0lg3aTy3MglDCzP7/StUxdeyL5qIX8= ) ; Key ID = 64280 gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcbYvlY667qXEzHsDTkft9cgKy5F0S9CAP+aFK9+sJumGqvpMaOyOzsilJ+OSVFhopJ1aRFp CUpLVIcVJ3E3YATGpzB45M0D5c4oJ0RjEIUakBwcPghmSW8K1GPqj/eUs4fbVPytXwtwvUll9Lxf gUvi5DA6xD6d2ckwDyRxfcMhXYydr2hIsgfrBLmRDMi4BkxMvA23eShPd/tPvnR0gJk= ) ; Key ID = 10104 gov. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240623141047 20240423141047 64280 gov. GGsGHy8XGH2PGTeyVpY5iEmleVzWCH/eitEUBXIgG0ivqrcC6Pzhenn+3E9uz+C2ehYImK95B9PK juJuu0jPFw09gKBO8Xo9x+wpWM/Zdh3NxhzGmfQOxRyj/5e1g27XxQB1pqhRegDfa5/mg+8zAoFY YneUx2tnvdtycsZg49d2iq75YlRBRj9ZSl6PJJ/nzacwKPjQFCbFiuEfnn6Vn432vWr2T0AUuaDV bJCSg2c32qiMCHE18PaaUn82oWYF2/FjWhU9i/UpGd0PS8Wtvicuho7/CYbMv+UvithHF+NE7QFV VDQtgjise03ZFQWMfrZcrZE8W4/KKDeyfDAkFA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 8 AwEAAZp0vliR0TOBCJXmdagY36BI5ZveSPE3OSrcXKDs8IZa86x1+gwbheJcfLB6Fw6cWYUXaNgA mFcbxqIqWc5VJSyPS9yCPdEOLEIiegwCmcWnNsEyc0snKTyypXnvJ5JNhoznpFILDqlksAqP/aiq 1/l0w8TMkRbRrViLrJ1ayaScZ0nn/ge5wNpX09T9RI+gF1OIMJDdgH1vi0a+t6smSy4pUrerFTsu y8JAL+PP85MZiOssT9yoERfWSjFKde6PrQX5vj090AxT+hztb+q2EFXnF1a2L73/3UarB19k5NR3 MT1uM7ddag64Q0lg3aTy3MglDCzP7/StUxdeyL5qIX8= ) ; Key ID = 64280`
	`gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcbYvlY667qXEzHsDTkft9cgKy5F0S9CAP+aFK9+sJumGqvpMaOyOzsilJ+OSVFhopJ1aRFp CUpLVIcVJ3E3YATGpzB45M0D5c4oJ0RjEIUakBwcPghmSW8K1GPqj/eUs4fbVPytXwtwvUll9Lxf gUvi5DA6xD6d2ckwDyRxfcMhXYydr2hIsgfrBLmRDMi4BkxMvA23eShPd/tPvnR0gJk= ) ; Key ID = 10104`
	DNSKEY=64280/SEP is now in the chain-of-trust
	DS=64280/SHA-256 verifies DNSKEY=64280/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240623141047 20240423141047 64280 gov. GGsGHy8XGH2PGTeyVpY5iEmleVzWCH/eitEUBXIgG0ivqrcC6Pzhenn+3E9uz+C2ehYImK95B9PK juJuu0jPFw09gKBO8Xo9x+wpWM/Zdh3NxhzGmfQOxRyj/5e1g27XxQB1pqhRegDfa5/mg+8zAoFY YneUx2tnvdtycsZg49d2iq75YlRBRj9ZSl6PJJ/nzacwKPjQFCbFiuEfnn6Vn432vWr2T0AUuaDV bJCSg2c32qiMCHE18PaaUn82oWYF2/FjWhU9i/UpGd0PS8Wtvicuho7/CYbMv+UvithHF+NE7QFV VDQtgjise03ZFQWMfrZcrZE8W4/KKDeyfDAkFA== )`
	RRSIG=64280 and DNSKEY=64280/SEP verifies the DNSKEY RRset
	DNSKEY=10104 is now in the chain-of-trust
	Query to c.ns.gov for cecc.gov/A
	Received 545 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 545 octets ;; HEADER SECTION ;; id = 62709 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cecc.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) cecc.gov. 10800 IN NS oxygen.house.gov. cecc.gov. 10800 IN NS oxygen2.house.gov. cecc.gov. 10800 IN NS pdns109.ultradns.biz. cecc.gov. 10800 IN NS pdns109.ultradns.com. cecc.gov. 10800 IN NS pdns109.ultradns.net. cecc.gov. 10800 IN NS pdns109.ultradns.org. cecc.gov. 3600 IN DS ( 1312 8 2 21b1165cfb4ae176ba9572a48d4807dc6133a32d1f1231d60b8eefb720a01c19 ) cecc.gov. 3600 IN DS ( 50479 8 2 c104c1dd50e0163ed517c417f9d9cf1e8dc19d08453c2ba653dfa822c04d2c41 ) cecc.gov. 3600 IN RRSIG ( DS 8 2 3600 20240514105049 20240512085049 10104 gov. duR51bU3iDsynhYiqTEn4RgwTaM+prbwtbEwWBd3AdGFp5OJtKkYnozVMlyD7wdiIenxXoqUFxlo p8GV7Vp+3S/PD0BVCsjjjB5RHA1JWLfGxIEpUwyKomuFr/cqW11LXE7y/2BWvXzunNGjPCs1Kudk 2RZGBzjhhsjwHKEoUf9EaKMQas3UqJr6rqI0YbRTR10pqGCgX2LaCXSqz9oi8A== ) ;; ADDITIONAL SECTION (3 records) oxygen.house.gov. 3600 IN A 216.218.141.197 oxygen2.house.gov. 3600 IN A 184.105.22.101 ;; { "EDNS-VERSION": 0 }
	Query to d.ns.gov for cecc.gov/DNSKEY
	Received 545 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 545 octets ;; HEADER SECTION ;; id = 19286 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cecc.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) cecc.gov. 10800 IN NS oxygen.house.gov. cecc.gov. 10800 IN NS oxygen2.house.gov. cecc.gov. 10800 IN NS pdns109.ultradns.biz. cecc.gov. 10800 IN NS pdns109.ultradns.com. cecc.gov. 10800 IN NS pdns109.ultradns.net. cecc.gov. 10800 IN NS pdns109.ultradns.org. cecc.gov. 3600 IN DS ( 1312 8 2 21b1165cfb4ae176ba9572a48d4807dc6133a32d1f1231d60b8eefb720a01c19 ) cecc.gov. 3600 IN DS ( 50479 8 2 c104c1dd50e0163ed517c417f9d9cf1e8dc19d08453c2ba653dfa822c04d2c41 ) cecc.gov. 3600 IN RRSIG ( DS 8 2 3600 20240514105049 20240512085049 10104 gov. duR51bU3iDsynhYiqTEn4RgwTaM+prbwtbEwWBd3AdGFp5OJtKkYnozVMlyD7wdiIenxXoqUFxlo p8GV7Vp+3S/PD0BVCsjjjB5RHA1JWLfGxIEpUwyKomuFr/cqW11LXE7y/2BWvXzunNGjPCs1Kudk 2RZGBzjhhsjwHKEoUf9EaKMQas3UqJr6rqI0YbRTR10pqGCgX2LaCXSqz9oi8A== ) ;; ADDITIONAL SECTION (3 records) oxygen.house.gov. 3600 IN A 216.218.141.197 oxygen2.house.gov. 3600 IN A 184.105.22.101 ;; { "EDNS-VERSION": 0 }
	Found child zone cecc.gov

cecc.gov

	Checking DS between gov and cecc.gov
	Query to b.ns.gov for cecc.gov/DS
	Received 328 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 328 octets ;; HEADER SECTION ;; id = 20077 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cecc.gov. IN DS ;; ANSWER SECTION (3 records) cecc.gov. 3600 IN DS ( 1312 8 2 21b1165cfb4ae176ba9572a48d4807dc6133a32d1f1231d60b8eefb720a01c19 ) cecc.gov. 3600 IN DS ( 50479 8 2 c104c1dd50e0163ed517c417f9d9cf1e8dc19d08453c2ba653dfa822c04d2c41 ) cecc.gov. 3600 IN RRSIG ( DS 8 2 3600 20240514105049 20240512085049 10104 gov. duR51bU3iDsynhYiqTEn4RgwTaM+prbwtbEwWBd3AdGFp5OJtKkYnozVMlyD7wdiIenxXoqUFxlo p8GV7Vp+3S/PD0BVCsjjjB5RHA1JWLfGxIEpUwyKomuFr/cqW11LXE7y/2BWvXzunNGjPCs1Kudk 2RZGBzjhhsjwHKEoUf9EaKMQas3UqJr6rqI0YbRTR10pqGCgX2LaCXSqz9oi8A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for cecc.gov in the gov zone
	DS=1312/SHA-256 has algorithm RSASHA256
	DS=50479/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`cecc.gov. 3600 IN RRSIG ( DS 8 2 3600 20240514105049 20240512085049 10104 gov. duR51bU3iDsynhYiqTEn4RgwTaM+prbwtbEwWBd3AdGFp5OJtKkYnozVMlyD7wdiIenxXoqUFxlo p8GV7Vp+3S/PD0BVCsjjjB5RHA1JWLfGxIEpUwyKomuFr/cqW11LXE7y/2BWvXzunNGjPCs1Kudk 2RZGBzjhhsjwHKEoUf9EaKMQas3UqJr6rqI0YbRTR10pqGCgX2LaCXSqz9oi8A== )`
	RRSIG=10104 and DNSKEY=10104 verifies the DS RRset
	DS=1312/SHA-256 is now in the chain-of-trust
	DS=50479/SHA-256 is now in the chain-of-trust
	`cecc.gov. 3600 IN DS ( 1312 8 2 21b1165cfb4ae176ba9572a48d4807dc6133a32d1f1231d60b8eefb720a01c19 )`
	`cecc.gov. 3600 IN DS ( 50479 8 2 c104c1dd50e0163ed517c417f9d9cf1e8dc19d08453c2ba653dfa822c04d2c41 )`
	Query to pdns109.ultradns.net for cecc.gov/DNSKEY
	Received 1645 bytes from 156.154.65.109
	;; Response received from [156.154.65.109] 1645 octets ;; HEADER SECTION ;; id = 10871 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 7 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cecc.gov. IN DNSKEY ;; ANSWER SECTION (7 records) cecc.gov. 259200 IN DNSKEY ( 256 3 8 AwEAAe0kZeEBL2L6ZGV/v5D3N/Qq7OtKLTImIc7Bg6NlMFPx6MD7mMMQre8gmWEVNDcv4uMFsr/M IqhcghNb4NtCOkpBBLOzhPT35gsC9saS3h6qtZrJpHDepPEHWLQftJiXg8LADrbbjkMuSJA4WG3O sBg9lebk61BdH915cwvc49br ) ; Key ID = 56079 cecc.gov. 259200 IN DNSKEY ( 257 3 8 AwEAAbsIj57ahz8zFiVtsPoCJOQz8m2S2y/yJyBeFJZp+ufILgiDsbxyxjt9tsbJbjGvUtG2CvFy 1W9M4GVS7EIiAu60JTyHOgIPRBEqUL7NWALbSc3RbesdugtHsz2dw3FRlhiPztd6crrby4mISwYp E9lK3V2oLHi7XovmKab5sCoj/vel49al3EtAGFIsFreXUlT9T7DFr3ghbTEI80XUXViyL0yDKoS9 /imkxzZXjOdUL2dGLbhDdYlUw/Ga0wa+6p6epkk/Slhdf8MHtx09YV0vOeRWhz/yekhfXeiCgPC0 m9hvDUfGthsj/9EIbNUfpVq40nexT4NV8V34xRjh2ZE= ) ; Key ID = 1312 cecc.gov. 259200 IN DNSKEY ( 257 3 8 AwEAAbwtYS4VuonnMMhvs2TtPu31i5OFZHIVK534c2aRjzXNh9kLAp5jjdWTa33Hb7kwH0KT8tfW ra8VjM8dcpVvIWbatHb02X0tEJ5BAQLGyR2uDzCTsa0soei4gVvQvp5IFCFewm3fb9egf7/kzCdP bviLmN5gzXw+RfiVy8YVlnGL4ZYCS4eLaFuEbiUr7wzinM/wEhl0aA58vU0N3zcpgChBbO0cbzQe n+ocU5fMP3oYZ6wX60gWLHPfsAWKrOHphgCRy9A/fYI3rq4C9KDLGeyF9oE3DLa9/ElThLxVjoSY iRTZX6ej8WQqd0PjhK6BwtAEqD9X1wsim1OXo0t77/0= ) ; Key ID = 50479 cecc.gov. 259200 IN DNSKEY ( 256 3 8 AwEAAdTuBK6/jsvw28nRCiOxz/5DZABXS8Omj1dNBZekGYGfEX5Zj0FTL3ntCh9OCz4uciexf0ks JKgJg7Zp4rxpD2ZXEJw5t7aJO9doRVOhI6Y1iMEOciPiRl/02CQJLVXebqYRDQS4E8fhZMoGQrUF 3aNbOJddF4ObfewZmUf2LtOL ) ; Key ID = 65451 cecc.gov. 259200 IN RRSIG ( DNSKEY 8 2 259200 20240519021828 20240513012507 50479 cecc.gov. iTg+kkx5iMZcS2PBDkltrDvOXDRVaMH8vrBhLweF/LUavvJCywiSHq2U0ma5BCi+22bZ5DGBmkfR 7YlM3ZRJNIrfMyVINw3Ve65bxBPKChxHVSdKiziHABOhcgOSmReJGviL+0VOMlcmVmRbLOxdhBnu U8X/q8n87S8lwlpk2PQzLd696cbfLmQ6OFveT1xmvf2Phd5bePy0rXyJkpV2PP34calmIE3Hnq9y QL1xLKWlLxmgGwGsk2v815jVhMQuzl7dMbfQCGHpV/2fVtQ9RgX2xAf/D++KDEBXH73HUUWH2W0E /uAIyyeFGjRlxDL4WZM7fEpDl1AGVFPB8RQjQQ== ) cecc.gov. 259200 IN RRSIG ( DNSKEY 8 2 259200 20240519021828 20240513012507 1312 cecc.gov. f/VxqI3go6OToi9c5Xrkj3/J2+2F7kmii0Smy0ydbhNKI8cM30pkp+10EH4jI7/mVEjan6fbx/lH pVxMhWAm/UT8pfbcRoVJS6TEjmFi83tu6P8ePGp55cxpYUP81pu0JFV7T4VjJ5qHZh5ZR2e9sWKe EAunFz+BwWv1YWLXhvLCwvneSfCJc4679thsT6l1KpVyMruiLwX9aOCEzuFdwXdyPIgFocxoGjjx TR+OM+dkxuK74a5zgu4hyy9nAcV0bSPt32s2K0vmElWtjEwBuiS/UQzMf6s2il94nbdJQ8MYxM0o lOMrwT0qlzCGYAqlVDeNJkn4L0ehxt/ylQJbKA== ) cecc.gov. 259200 IN RRSIG ( DNSKEY 8 2 259200 20240519021828 20240513012507 65451 cecc.gov. n9RoEkg0vU9wp96kIv8XfSwgaa3yqRv/dras3StdgHB3MmNlQXjxopSn/RZ9Cr1gWbBtBxi6xz6p Z8Jx0GcghMRJKd34SYqaWjqGs3WiJ1JQtZoxg1ie3JPcl4VwBFPIV4kuPCEbMVOISQmcfQJfogu/ HvvqnP4b5R+dnvdrMfc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for cecc.gov
	`cecc.gov. 259200 IN DNSKEY ( 256 3 8 AwEAAe0kZeEBL2L6ZGV/v5D3N/Qq7OtKLTImIc7Bg6NlMFPx6MD7mMMQre8gmWEVNDcv4uMFsr/M IqhcghNb4NtCOkpBBLOzhPT35gsC9saS3h6qtZrJpHDepPEHWLQftJiXg8LADrbbjkMuSJA4WG3O sBg9lebk61BdH915cwvc49br ) ; Key ID = 56079`
	`cecc.gov. 259200 IN DNSKEY ( 257 3 8 AwEAAbsIj57ahz8zFiVtsPoCJOQz8m2S2y/yJyBeFJZp+ufILgiDsbxyxjt9tsbJbjGvUtG2CvFy 1W9M4GVS7EIiAu60JTyHOgIPRBEqUL7NWALbSc3RbesdugtHsz2dw3FRlhiPztd6crrby4mISwYp E9lK3V2oLHi7XovmKab5sCoj/vel49al3EtAGFIsFreXUlT9T7DFr3ghbTEI80XUXViyL0yDKoS9 /imkxzZXjOdUL2dGLbhDdYlUw/Ga0wa+6p6epkk/Slhdf8MHtx09YV0vOeRWhz/yekhfXeiCgPC0 m9hvDUfGthsj/9EIbNUfpVq40nexT4NV8V34xRjh2ZE= ) ; Key ID = 1312`
	`cecc.gov. 259200 IN DNSKEY ( 257 3 8 AwEAAbwtYS4VuonnMMhvs2TtPu31i5OFZHIVK534c2aRjzXNh9kLAp5jjdWTa33Hb7kwH0KT8tfW ra8VjM8dcpVvIWbatHb02X0tEJ5BAQLGyR2uDzCTsa0soei4gVvQvp5IFCFewm3fb9egf7/kzCdP bviLmN5gzXw+RfiVy8YVlnGL4ZYCS4eLaFuEbiUr7wzinM/wEhl0aA58vU0N3zcpgChBbO0cbzQe n+ocU5fMP3oYZ6wX60gWLHPfsAWKrOHphgCRy9A/fYI3rq4C9KDLGeyF9oE3DLa9/ElThLxVjoSY iRTZX6ej8WQqd0PjhK6BwtAEqD9X1wsim1OXo0t77/0= ) ; Key ID = 50479`
	`cecc.gov. 259200 IN DNSKEY ( 256 3 8 AwEAAdTuBK6/jsvw28nRCiOxz/5DZABXS8Omj1dNBZekGYGfEX5Zj0FTL3ntCh9OCz4uciexf0ks JKgJg7Zp4rxpD2ZXEJw5t7aJO9doRVOhI6Y1iMEOciPiRl/02CQJLVXebqYRDQS4E8fhZMoGQrUF 3aNbOJddF4ObfewZmUf2LtOL ) ; Key ID = 65451`
	DNSKEY=1312/SEP is now in the chain-of-trust
	DS=1312/SHA-256 verifies DNSKEY=1312/SEP
	DNSKEY=50479/SEP is now in the chain-of-trust
	DS=50479/SHA-256 verifies DNSKEY=50479/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`cecc.gov. 259200 IN RRSIG ( DNSKEY 8 2 259200 20240519021828 20240513012507 50479 cecc.gov. iTg+kkx5iMZcS2PBDkltrDvOXDRVaMH8vrBhLweF/LUavvJCywiSHq2U0ma5BCi+22bZ5DGBmkfR 7YlM3ZRJNIrfMyVINw3Ve65bxBPKChxHVSdKiziHABOhcgOSmReJGviL+0VOMlcmVmRbLOxdhBnu U8X/q8n87S8lwlpk2PQzLd696cbfLmQ6OFveT1xmvf2Phd5bePy0rXyJkpV2PP34calmIE3Hnq9y QL1xLKWlLxmgGwGsk2v815jVhMQuzl7dMbfQCGHpV/2fVtQ9RgX2xAf/D++KDEBXH73HUUWH2W0E /uAIyyeFGjRlxDL4WZM7fEpDl1AGVFPB8RQjQQ== )`
	`cecc.gov. 259200 IN RRSIG ( DNSKEY 8 2 259200 20240519021828 20240513012507 1312 cecc.gov. f/VxqI3go6OToi9c5Xrkj3/J2+2F7kmii0Smy0ydbhNKI8cM30pkp+10EH4jI7/mVEjan6fbx/lH pVxMhWAm/UT8pfbcRoVJS6TEjmFi83tu6P8ePGp55cxpYUP81pu0JFV7T4VjJ5qHZh5ZR2e9sWKe EAunFz+BwWv1YWLXhvLCwvneSfCJc4679thsT6l1KpVyMruiLwX9aOCEzuFdwXdyPIgFocxoGjjx TR+OM+dkxuK74a5zgu4hyy9nAcV0bSPt32s2K0vmElWtjEwBuiS/UQzMf6s2il94nbdJQ8MYxM0o lOMrwT0qlzCGYAqlVDeNJkn4L0ehxt/ylQJbKA== )`
	`cecc.gov. 259200 IN RRSIG ( DNSKEY 8 2 259200 20240519021828 20240513012507 65451 cecc.gov. n9RoEkg0vU9wp96kIv8XfSwgaa3yqRv/dras3StdgHB3MmNlQXjxopSn/RZ9Cr1gWbBtBxi6xz6p Z8Jx0GcghMRJKd34SYqaWjqGs3WiJ1JQtZoxg1ie3JPcl4VwBFPIV4kuPCEbMVOISQmcfQJfogu/ HvvqnP4b5R+dnvdrMfc= )`
	RRSIG=50479 and DNSKEY=50479/SEP verifies the DNSKEY RRset
	RRSIG=1312 and DNSKEY=1312/SEP verifies the DNSKEY RRset
	RRSIG=65451 and DNSKEY=65451 verifies the DNSKEY RRset
	DNSKEY=56079 is now in the chain-of-trust
	DNSKEY=65451 is now in the chain-of-trust
	Query to pdns109.ultradns.biz for cecc.gov/A
	Received 590 bytes from 156.154.66.109
	;; Response received from [156.154.66.109] 590 octets ;; HEADER SECTION ;; id = 30092 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cecc.gov. IN A ;; ANSWER SECTION (3 records) cecc.gov. 28800 IN A 15.197.146.213 cecc.gov. 28800 IN A 3.33.159.71 cecc.gov. 28800 IN RRSIG ( A 8 2 28800 20240518214907 20240512212337 65451 cecc.gov. xCmsi4ILNdQei1GqlMlNezYHQR93Wq2/eHEpJhHdHFIUVfiVE62FHCHmoJJHnhElxOGb7I0XuaM/ EYRURso4mYU2L36aAAeJSpoTYTyIBEl+nj9yIRxUjyzfiLURQs4xYtUeXYle/f6yLGQFPPL/F0DV ap3BrOm09xJpFNpF/sw= ) ;; AUTHORITY SECTION (7 records) cecc.gov. 28800 IN NS oxygen.house.gov. cecc.gov. 28800 IN NS pdns109.ultradns.net. cecc.gov. 28800 IN NS pdns109.ultradns.org. cecc.gov. 28800 IN NS pdns109.ultradns.biz. cecc.gov. 28800 IN NS oxygen2.house.gov. cecc.gov. 28800 IN NS pdns109.ultradns.com. cecc.gov. 28800 IN RRSIG ( NS 8 2 28800 20240518214907 20240512212337 65451 cecc.gov. GTbTKN57QWIMr2Lp6PAARFAMOTSX4qC0LECxdbQ49/LhKuabDd05ZnCr9EQY6dr7jIitng81GypN 7sptau4L0XXGtLNxC3FfVQfNXfS+wHNPDH4SG7OqtiKwMmz2IE9e+eQZ24qLhab4v5R9tfh1kE3y TDUVeXgU2fxQox0bzQ0= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	pdns109.ultradns.biz is authoritative for cecc.gov
	Found RRSIG signed by cecc.gov zone
	Query to oxygen.house.gov for cecc.gov/SOA
	Received 264 bytes from 216.218.141.197
	;; Response received from [216.218.141.197] 264 octets ;; HEADER SECTION ;; id = 13952 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cecc.gov. IN SOA ;; ANSWER SECTION (2 records) cecc.gov. 28800 IN SOA ( oxygen.house.gov. ncc3.mail.house.gov. 8002816 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) cecc.gov. 28800 IN RRSIG ( SOA 8 2 28800 20240519022507 20240513012507 65451 cecc.gov. KYMn4eMU4AS5ExDe//sC4fBkpO3tmiWnM4+YJN7UGxAdfrLXKJdlix1VQ7FZwyDkSUiF8JSGuDp3 ZCIP8NIFK+ZT+Mr8y4xmQ+bhHdDCda2xCfcAIEfApOtAn29sGIpOrpQzs6nnygJnx+sRdqxPVGUN 58reta1lQ9xMnU5pw00= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to oxygen2.house.gov for cecc.gov/SOA
	Received 264 bytes from 184.105.22.101
	;; Response received from [184.105.22.101] 264 octets ;; HEADER SECTION ;; id = 55979 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cecc.gov. IN SOA ;; ANSWER SECTION (2 records) cecc.gov. 28800 IN SOA ( oxygen.house.gov. ncc3.mail.house.gov. 8002816 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) cecc.gov. 28800 IN RRSIG ( SOA 8 2 28800 20240519022507 20240513012507 65451 cecc.gov. KYMn4eMU4AS5ExDe//sC4fBkpO3tmiWnM4+YJN7UGxAdfrLXKJdlix1VQ7FZwyDkSUiF8JSGuDp3 ZCIP8NIFK+ZT+Mr8y4xmQ+bhHdDCda2xCfcAIEfApOtAn29sGIpOrpQzs6nnygJnx+sRdqxPVGUN 58reta1lQ9xMnU5pw00= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to pdns109.ultradns.net for cecc.gov/SOA
	Received 604 bytes from 156.154.65.109
	;; Response received from [156.154.65.109] 604 octets ;; HEADER SECTION ;; id = 10280 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cecc.gov. IN SOA ;; ANSWER SECTION (2 records) cecc.gov. 28800 IN SOA ( oxygen.house.gov. ncc3.mail.house.gov. 8002816 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) cecc.gov. 28800 IN RRSIG ( SOA 8 2 28800 20240519022507 20240513012507 65451 cecc.gov. KYMn4eMU4AS5ExDe//sC4fBkpO3tmiWnM4+YJN7UGxAdfrLXKJdlix1VQ7FZwyDkSUiF8JSGuDp3 ZCIP8NIFK+ZT+Mr8y4xmQ+bhHdDCda2xCfcAIEfApOtAn29sGIpOrpQzs6nnygJnx+sRdqxPVGUN 58reta1lQ9xMnU5pw00= ) ;; AUTHORITY SECTION (7 records) cecc.gov. 28800 IN NS oxygen.house.gov. cecc.gov. 28800 IN NS pdns109.ultradns.net. cecc.gov. 28800 IN NS pdns109.ultradns.org. cecc.gov. 28800 IN NS pdns109.ultradns.biz. cecc.gov. 28800 IN NS oxygen2.house.gov. cecc.gov. 28800 IN NS pdns109.ultradns.com. cecc.gov. 28800 IN RRSIG ( NS 8 2 28800 20240518214907 20240512212337 65451 cecc.gov. GTbTKN57QWIMr2Lp6PAARFAMOTSX4qC0LECxdbQ49/LhKuabDd05ZnCr9EQY6dr7jIitng81GypN 7sptau4L0XXGtLNxC3FfVQfNXfS+wHNPDH4SG7OqtiKwMmz2IE9e+eQZ24qLhab4v5R9tfh1kE3y TDUVeXgU2fxQox0bzQ0= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to pdns109.ultradns.com for cecc.gov/SOA
	Received 604 bytes from 156.154.64.109
	;; Response received from [156.154.64.109] 604 octets ;; HEADER SECTION ;; id = 35132 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cecc.gov. IN SOA ;; ANSWER SECTION (2 records) cecc.gov. 28800 IN SOA ( oxygen.house.gov. ncc3.mail.house.gov. 8002816 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) cecc.gov. 28800 IN RRSIG ( SOA 8 2 28800 20240519022507 20240513012507 65451 cecc.gov. KYMn4eMU4AS5ExDe//sC4fBkpO3tmiWnM4+YJN7UGxAdfrLXKJdlix1VQ7FZwyDkSUiF8JSGuDp3 ZCIP8NIFK+ZT+Mr8y4xmQ+bhHdDCda2xCfcAIEfApOtAn29sGIpOrpQzs6nnygJnx+sRdqxPVGUN 58reta1lQ9xMnU5pw00= ) ;; AUTHORITY SECTION (7 records) cecc.gov. 28800 IN NS oxygen.house.gov. cecc.gov. 28800 IN NS pdns109.ultradns.net. cecc.gov. 28800 IN NS pdns109.ultradns.org. cecc.gov. 28800 IN NS pdns109.ultradns.biz. cecc.gov. 28800 IN NS oxygen2.house.gov. cecc.gov. 28800 IN NS pdns109.ultradns.com. cecc.gov. 28800 IN RRSIG ( NS 8 2 28800 20240518214907 20240512212337 65451 cecc.gov. GTbTKN57QWIMr2Lp6PAARFAMOTSX4qC0LECxdbQ49/LhKuabDd05ZnCr9EQY6dr7jIitng81GypN 7sptau4L0XXGtLNxC3FfVQfNXfS+wHNPDH4SG7OqtiKwMmz2IE9e+eQZ24qLhab4v5R9tfh1kE3y TDUVeXgU2fxQox0bzQ0= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to pdns109.ultradns.org for cecc.gov/SOA
	Received 604 bytes from 156.154.67.109
	;; Response received from [156.154.67.109] 604 octets ;; HEADER SECTION ;; id = 20406 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cecc.gov. IN SOA ;; ANSWER SECTION (2 records) cecc.gov. 28800 IN SOA ( oxygen.house.gov. ncc3.mail.house.gov. 8002816 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) cecc.gov. 28800 IN RRSIG ( SOA 8 2 28800 20240519022507 20240513012507 65451 cecc.gov. KYMn4eMU4AS5ExDe//sC4fBkpO3tmiWnM4+YJN7UGxAdfrLXKJdlix1VQ7FZwyDkSUiF8JSGuDp3 ZCIP8NIFK+ZT+Mr8y4xmQ+bhHdDCda2xCfcAIEfApOtAn29sGIpOrpQzs6nnygJnx+sRdqxPVGUN 58reta1lQ9xMnU5pw00= ) ;; AUTHORITY SECTION (7 records) cecc.gov. 28800 IN NS oxygen.house.gov. cecc.gov. 28800 IN NS pdns109.ultradns.net. cecc.gov. 28800 IN NS pdns109.ultradns.org. cecc.gov. 28800 IN NS pdns109.ultradns.biz. cecc.gov. 28800 IN NS oxygen2.house.gov. cecc.gov. 28800 IN NS pdns109.ultradns.com. cecc.gov. 28800 IN RRSIG ( NS 8 2 28800 20240518214907 20240512212337 65451 cecc.gov. GTbTKN57QWIMr2Lp6PAARFAMOTSX4qC0LECxdbQ49/LhKuabDd05ZnCr9EQY6dr7jIitng81GypN 7sptau4L0XXGtLNxC3FfVQfNXfS+wHNPDH4SG7OqtiKwMmz2IE9e+eQZ24qLhab4v5R9tfh1kE3y TDUVeXgU2fxQox0bzQ0= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to pdns109.ultradns.biz for cecc.gov/A
	Received 590 bytes from 156.154.66.109
	;; Response received from [156.154.66.109] 590 octets ;; HEADER SECTION ;; id = 22474 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cecc.gov. IN A ;; ANSWER SECTION (3 records) cecc.gov. 28800 IN A 15.197.146.213 cecc.gov. 28800 IN A 3.33.159.71 cecc.gov. 28800 IN RRSIG ( A 8 2 28800 20240518214907 20240512212337 65451 cecc.gov. xCmsi4ILNdQei1GqlMlNezYHQR93Wq2/eHEpJhHdHFIUVfiVE62FHCHmoJJHnhElxOGb7I0XuaM/ EYRURso4mYU2L36aAAeJSpoTYTyIBEl+nj9yIRxUjyzfiLURQs4xYtUeXYle/f6yLGQFPPL/F0DV ap3BrOm09xJpFNpF/sw= ) ;; AUTHORITY SECTION (7 records) cecc.gov. 28800 IN NS oxygen.house.gov. cecc.gov. 28800 IN NS pdns109.ultradns.net. cecc.gov. 28800 IN NS pdns109.ultradns.org. cecc.gov. 28800 IN NS pdns109.ultradns.biz. cecc.gov. 28800 IN NS oxygen2.house.gov. cecc.gov. 28800 IN NS pdns109.ultradns.com. cecc.gov. 28800 IN RRSIG ( NS 8 2 28800 20240518214907 20240512212337 65451 cecc.gov. GTbTKN57QWIMr2Lp6PAARFAMOTSX4qC0LECxdbQ49/LhKuabDd05ZnCr9EQY6dr7jIitng81GypN 7sptau4L0XXGtLNxC3FfVQfNXfS+wHNPDH4SG7OqtiKwMmz2IE9e+eQZ24qLhab4v5R9tfh1kE3y TDUVeXgU2fxQox0bzQ0= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	cecc.gov A RR has value 15.197.146.213
	cecc.gov A RR has value 3.33.159.71
	Found 1 RRSIGs over A RRset
	`cecc.gov. 28800 IN RRSIG ( A 8 2 28800 20240518214907 20240512212337 65451 cecc.gov. xCmsi4ILNdQei1GqlMlNezYHQR93Wq2/eHEpJhHdHFIUVfiVE62FHCHmoJJHnhElxOGb7I0XuaM/ EYRURso4mYU2L36aAAeJSpoTYTyIBEl+nj9yIRxUjyzfiLURQs4xYtUeXYle/f6yLGQFPPL/F0DV ap3BrOm09xJpFNpF/sw= )`
	RRSIG=65451 and DNSKEY=65451 verifies the A RRset

cecc.gov

	Query to pdns109.ultradns.com for cecc.gov/A
	Received 590 bytes from 156.154.64.109
	;; Response received from [156.154.64.109] 590 octets ;; HEADER SECTION ;; id = 6885 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cecc.gov. IN A ;; ANSWER SECTION (3 records) cecc.gov. 28800 IN A 3.33.159.71 cecc.gov. 28800 IN A 15.197.146.213 cecc.gov. 28800 IN RRSIG ( A 8 2 28800 20240518214907 20240512212337 65451 cecc.gov. xCmsi4ILNdQei1GqlMlNezYHQR93Wq2/eHEpJhHdHFIUVfiVE62FHCHmoJJHnhElxOGb7I0XuaM/ EYRURso4mYU2L36aAAeJSpoTYTyIBEl+nj9yIRxUjyzfiLURQs4xYtUeXYle/f6yLGQFPPL/F0DV ap3BrOm09xJpFNpF/sw= ) ;; AUTHORITY SECTION (7 records) cecc.gov. 28800 IN NS oxygen.house.gov. cecc.gov. 28800 IN NS pdns109.ultradns.net. cecc.gov. 28800 IN NS pdns109.ultradns.org. cecc.gov. 28800 IN NS pdns109.ultradns.biz. cecc.gov. 28800 IN NS oxygen2.house.gov. cecc.gov. 28800 IN NS pdns109.ultradns.com. cecc.gov. 28800 IN RRSIG ( NS 8 2 28800 20240518214907 20240512212337 65451 cecc.gov. GTbTKN57QWIMr2Lp6PAARFAMOTSX4qC0LECxdbQ49/LhKuabDd05ZnCr9EQY6dr7jIitng81GypN 7sptau4L0XXGtLNxC3FfVQfNXfS+wHNPDH4SG7OqtiKwMmz2IE9e+eQZ24qLhab4v5R9tfh1kE3y TDUVeXgU2fxQox0bzQ0= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	pdns109.ultradns.com is authoritative for cecc.gov
	Found RRSIG signed by cecc.gov zone
	Query to pdns109.ultradns.com for cecc.gov/A
	Received 590 bytes from 156.154.64.109
	;; Response received from [156.154.64.109] 590 octets ;; HEADER SECTION ;; id = 4662 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cecc.gov. IN A ;; ANSWER SECTION (3 records) cecc.gov. 28800 IN A 15.197.146.213 cecc.gov. 28800 IN A 3.33.159.71 cecc.gov. 28800 IN RRSIG ( A 8 2 28800 20240518214907 20240512212337 65451 cecc.gov. xCmsi4ILNdQei1GqlMlNezYHQR93Wq2/eHEpJhHdHFIUVfiVE62FHCHmoJJHnhElxOGb7I0XuaM/ EYRURso4mYU2L36aAAeJSpoTYTyIBEl+nj9yIRxUjyzfiLURQs4xYtUeXYle/f6yLGQFPPL/F0DV ap3BrOm09xJpFNpF/sw= ) ;; AUTHORITY SECTION (7 records) cecc.gov. 28800 IN NS oxygen.house.gov. cecc.gov. 28800 IN NS pdns109.ultradns.net. cecc.gov. 28800 IN NS pdns109.ultradns.org. cecc.gov. 28800 IN NS pdns109.ultradns.biz. cecc.gov. 28800 IN NS oxygen2.house.gov. cecc.gov. 28800 IN NS pdns109.ultradns.com. cecc.gov. 28800 IN RRSIG ( NS 8 2 28800 20240518214907 20240512212337 65451 cecc.gov. GTbTKN57QWIMr2Lp6PAARFAMOTSX4qC0LECxdbQ49/LhKuabDd05ZnCr9EQY6dr7jIitng81GypN 7sptau4L0XXGtLNxC3FfVQfNXfS+wHNPDH4SG7OqtiKwMmz2IE9e+eQZ24qLhab4v5R9tfh1kE3y TDUVeXgU2fxQox0bzQ0= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	cecc.gov A RR has value 15.197.146.213
	cecc.gov A RR has value 3.33.159.71
	Found 1 RRSIGs over A RRset
	`cecc.gov. 28800 IN RRSIG ( A 8 2 28800 20240518214907 20240512212337 65451 cecc.gov. xCmsi4ILNdQei1GqlMlNezYHQR93Wq2/eHEpJhHdHFIUVfiVE62FHCHmoJJHnhElxOGb7I0XuaM/ EYRURso4mYU2L36aAAeJSpoTYTyIBEl+nj9yIRxUjyzfiLURQs4xYtUeXYle/f6yLGQFPPL/F0DV ap3BrOm09xJpFNpF/sw= )`
	RRSIG=65451 and DNSKEY=65451 verifies the A RRset

cecc.gov

	Query to oxygen2.house.gov for cecc.gov/A
	Received 237 bytes from 184.105.22.101
	;; Response received from [184.105.22.101] 237 octets ;; HEADER SECTION ;; id = 63918 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cecc.gov. IN A ;; ANSWER SECTION (3 records) cecc.gov. 28800 IN A 15.197.146.213 cecc.gov. 28800 IN A 3.33.159.71 cecc.gov. 28800 IN RRSIG ( A 8 2 28800 20240518214907 20240512212337 65451 cecc.gov. xCmsi4ILNdQei1GqlMlNezYHQR93Wq2/eHEpJhHdHFIUVfiVE62FHCHmoJJHnhElxOGb7I0XuaM/ EYRURso4mYU2L36aAAeJSpoTYTyIBEl+nj9yIRxUjyzfiLURQs4xYtUeXYle/f6yLGQFPPL/F0DV ap3BrOm09xJpFNpF/sw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	oxygen2.house.gov is authoritative for cecc.gov
	Found RRSIG signed by cecc.gov zone
	Query to oxygen2.house.gov for cecc.gov/A
	Received 237 bytes from 184.105.22.101
	;; Response received from [184.105.22.101] 237 octets ;; HEADER SECTION ;; id = 96 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cecc.gov. IN A ;; ANSWER SECTION (3 records) cecc.gov. 28800 IN A 3.33.159.71 cecc.gov. 28800 IN A 15.197.146.213 cecc.gov. 28800 IN RRSIG ( A 8 2 28800 20240518214907 20240512212337 65451 cecc.gov. xCmsi4ILNdQei1GqlMlNezYHQR93Wq2/eHEpJhHdHFIUVfiVE62FHCHmoJJHnhElxOGb7I0XuaM/ EYRURso4mYU2L36aAAeJSpoTYTyIBEl+nj9yIRxUjyzfiLURQs4xYtUeXYle/f6yLGQFPPL/F0DV ap3BrOm09xJpFNpF/sw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	cecc.gov A RR has value 3.33.159.71
	cecc.gov A RR has value 15.197.146.213
	Found 1 RRSIGs over A RRset
	`cecc.gov. 28800 IN RRSIG ( A 8 2 28800 20240518214907 20240512212337 65451 cecc.gov. xCmsi4ILNdQei1GqlMlNezYHQR93Wq2/eHEpJhHdHFIUVfiVE62FHCHmoJJHnhElxOGb7I0XuaM/ EYRURso4mYU2L36aAAeJSpoTYTyIBEl+nj9yIRxUjyzfiLURQs4xYtUeXYle/f6yLGQFPPL/F0DV ap3BrOm09xJpFNpF/sw= )`
	RRSIG=65451 and DNSKEY=65451 verifies the A RRset

cecc.gov

	Query to pdns109.ultradns.org for cecc.gov/A
	Received 590 bytes from 156.154.67.109
	;; Response received from [156.154.67.109] 590 octets ;; HEADER SECTION ;; id = 6151 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cecc.gov. IN A ;; ANSWER SECTION (3 records) cecc.gov. 28800 IN A 3.33.159.71 cecc.gov. 28800 IN A 15.197.146.213 cecc.gov. 28800 IN RRSIG ( A 8 2 28800 20240518214907 20240512212337 65451 cecc.gov. xCmsi4ILNdQei1GqlMlNezYHQR93Wq2/eHEpJhHdHFIUVfiVE62FHCHmoJJHnhElxOGb7I0XuaM/ EYRURso4mYU2L36aAAeJSpoTYTyIBEl+nj9yIRxUjyzfiLURQs4xYtUeXYle/f6yLGQFPPL/F0DV ap3BrOm09xJpFNpF/sw= ) ;; AUTHORITY SECTION (7 records) cecc.gov. 28800 IN NS oxygen.house.gov. cecc.gov. 28800 IN NS pdns109.ultradns.net. cecc.gov. 28800 IN NS pdns109.ultradns.org. cecc.gov. 28800 IN NS pdns109.ultradns.biz. cecc.gov. 28800 IN NS oxygen2.house.gov. cecc.gov. 28800 IN NS pdns109.ultradns.com. cecc.gov. 28800 IN RRSIG ( NS 8 2 28800 20240518214907 20240512212337 65451 cecc.gov. GTbTKN57QWIMr2Lp6PAARFAMOTSX4qC0LECxdbQ49/LhKuabDd05ZnCr9EQY6dr7jIitng81GypN 7sptau4L0XXGtLNxC3FfVQfNXfS+wHNPDH4SG7OqtiKwMmz2IE9e+eQZ24qLhab4v5R9tfh1kE3y TDUVeXgU2fxQox0bzQ0= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	pdns109.ultradns.org is authoritative for cecc.gov
	Found RRSIG signed by cecc.gov zone
	Query to pdns109.ultradns.org for cecc.gov/A
	Received 590 bytes from 156.154.67.109
	;; Response received from [156.154.67.109] 590 octets ;; HEADER SECTION ;; id = 53492 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cecc.gov. IN A ;; ANSWER SECTION (3 records) cecc.gov. 28800 IN A 3.33.159.71 cecc.gov. 28800 IN A 15.197.146.213 cecc.gov. 28800 IN RRSIG ( A 8 2 28800 20240518214907 20240512212337 65451 cecc.gov. xCmsi4ILNdQei1GqlMlNezYHQR93Wq2/eHEpJhHdHFIUVfiVE62FHCHmoJJHnhElxOGb7I0XuaM/ EYRURso4mYU2L36aAAeJSpoTYTyIBEl+nj9yIRxUjyzfiLURQs4xYtUeXYle/f6yLGQFPPL/F0DV ap3BrOm09xJpFNpF/sw= ) ;; AUTHORITY SECTION (7 records) cecc.gov. 28800 IN NS oxygen.house.gov. cecc.gov. 28800 IN NS pdns109.ultradns.net. cecc.gov. 28800 IN NS pdns109.ultradns.org. cecc.gov. 28800 IN NS pdns109.ultradns.biz. cecc.gov. 28800 IN NS oxygen2.house.gov. cecc.gov. 28800 IN NS pdns109.ultradns.com. cecc.gov. 28800 IN RRSIG ( NS 8 2 28800 20240518214907 20240512212337 65451 cecc.gov. GTbTKN57QWIMr2Lp6PAARFAMOTSX4qC0LECxdbQ49/LhKuabDd05ZnCr9EQY6dr7jIitng81GypN 7sptau4L0XXGtLNxC3FfVQfNXfS+wHNPDH4SG7OqtiKwMmz2IE9e+eQZ24qLhab4v5R9tfh1kE3y TDUVeXgU2fxQox0bzQ0= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	cecc.gov A RR has value 3.33.159.71
	cecc.gov A RR has value 15.197.146.213
	Found 1 RRSIGs over A RRset
	`cecc.gov. 28800 IN RRSIG ( A 8 2 28800 20240518214907 20240512212337 65451 cecc.gov. xCmsi4ILNdQei1GqlMlNezYHQR93Wq2/eHEpJhHdHFIUVfiVE62FHCHmoJJHnhElxOGb7I0XuaM/ EYRURso4mYU2L36aAAeJSpoTYTyIBEl+nj9yIRxUjyzfiLURQs4xYtUeXYle/f6yLGQFPPL/F0DV ap3BrOm09xJpFNpF/sw= )`
	RRSIG=65451 and DNSKEY=65451 verifies the A RRset

cecc.gov

	Query to oxygen.house.gov for cecc.gov/A
	Received 237 bytes from 216.218.141.197
	;; Response received from [216.218.141.197] 237 octets ;; HEADER SECTION ;; id = 42552 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cecc.gov. IN A ;; ANSWER SECTION (3 records) cecc.gov. 28800 IN A 3.33.159.71 cecc.gov. 28800 IN A 15.197.146.213 cecc.gov. 28800 IN RRSIG ( A 8 2 28800 20240518214907 20240512212337 65451 cecc.gov. xCmsi4ILNdQei1GqlMlNezYHQR93Wq2/eHEpJhHdHFIUVfiVE62FHCHmoJJHnhElxOGb7I0XuaM/ EYRURso4mYU2L36aAAeJSpoTYTyIBEl+nj9yIRxUjyzfiLURQs4xYtUeXYle/f6yLGQFPPL/F0DV ap3BrOm09xJpFNpF/sw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	oxygen.house.gov is authoritative for cecc.gov
	Found RRSIG signed by cecc.gov zone
	Query to oxygen.house.gov for cecc.gov/A
	Received 237 bytes from 216.218.141.197
	;; Response received from [216.218.141.197] 237 octets ;; HEADER SECTION ;; id = 56476 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cecc.gov. IN A ;; ANSWER SECTION (3 records) cecc.gov. 28800 IN A 15.197.146.213 cecc.gov. 28800 IN A 3.33.159.71 cecc.gov. 28800 IN RRSIG ( A 8 2 28800 20240518214907 20240512212337 65451 cecc.gov. xCmsi4ILNdQei1GqlMlNezYHQR93Wq2/eHEpJhHdHFIUVfiVE62FHCHmoJJHnhElxOGb7I0XuaM/ EYRURso4mYU2L36aAAeJSpoTYTyIBEl+nj9yIRxUjyzfiLURQs4xYtUeXYle/f6yLGQFPPL/F0DV ap3BrOm09xJpFNpF/sw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	cecc.gov A RR has value 15.197.146.213
	cecc.gov A RR has value 3.33.159.71
	Found 1 RRSIGs over A RRset
	`cecc.gov. 28800 IN RRSIG ( A 8 2 28800 20240518214907 20240512212337 65451 cecc.gov. xCmsi4ILNdQei1GqlMlNezYHQR93Wq2/eHEpJhHdHFIUVfiVE62FHCHmoJJHnhElxOGb7I0XuaM/ EYRURso4mYU2L36aAAeJSpoTYTyIBEl+nj9yIRxUjyzfiLURQs4xYtUeXYle/f6yLGQFPPL/F0DV ap3BrOm09xJpFNpF/sw= )`
	RRSIG=65451 and DNSKEY=65451 verifies the A RRset

cecc.gov

	Query to pdns109.ultradns.net for cecc.gov/A
	Received 590 bytes from 156.154.65.109
	;; Response received from [156.154.65.109] 590 octets ;; HEADER SECTION ;; id = 53051 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cecc.gov. IN A ;; ANSWER SECTION (3 records) cecc.gov. 28800 IN A 3.33.159.71 cecc.gov. 28800 IN A 15.197.146.213 cecc.gov. 28800 IN RRSIG ( A 8 2 28800 20240518214907 20240512212337 65451 cecc.gov. xCmsi4ILNdQei1GqlMlNezYHQR93Wq2/eHEpJhHdHFIUVfiVE62FHCHmoJJHnhElxOGb7I0XuaM/ EYRURso4mYU2L36aAAeJSpoTYTyIBEl+nj9yIRxUjyzfiLURQs4xYtUeXYle/f6yLGQFPPL/F0DV ap3BrOm09xJpFNpF/sw= ) ;; AUTHORITY SECTION (7 records) cecc.gov. 28800 IN NS oxygen.house.gov. cecc.gov. 28800 IN NS pdns109.ultradns.net. cecc.gov. 28800 IN NS pdns109.ultradns.org. cecc.gov. 28800 IN NS pdns109.ultradns.biz. cecc.gov. 28800 IN NS oxygen2.house.gov. cecc.gov. 28800 IN NS pdns109.ultradns.com. cecc.gov. 28800 IN RRSIG ( NS 8 2 28800 20240518214907 20240512212337 65451 cecc.gov. GTbTKN57QWIMr2Lp6PAARFAMOTSX4qC0LECxdbQ49/LhKuabDd05ZnCr9EQY6dr7jIitng81GypN 7sptau4L0XXGtLNxC3FfVQfNXfS+wHNPDH4SG7OqtiKwMmz2IE9e+eQZ24qLhab4v5R9tfh1kE3y TDUVeXgU2fxQox0bzQ0= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	pdns109.ultradns.net is authoritative for cecc.gov
	Found RRSIG signed by cecc.gov zone
	Query to pdns109.ultradns.net for cecc.gov/A
	Received 590 bytes from 156.154.65.109
	;; Response received from [156.154.65.109] 590 octets ;; HEADER SECTION ;; id = 25893 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cecc.gov. IN A ;; ANSWER SECTION (3 records) cecc.gov. 28800 IN A 3.33.159.71 cecc.gov. 28800 IN A 15.197.146.213 cecc.gov. 28800 IN RRSIG ( A 8 2 28800 20240518214907 20240512212337 65451 cecc.gov. xCmsi4ILNdQei1GqlMlNezYHQR93Wq2/eHEpJhHdHFIUVfiVE62FHCHmoJJHnhElxOGb7I0XuaM/ EYRURso4mYU2L36aAAeJSpoTYTyIBEl+nj9yIRxUjyzfiLURQs4xYtUeXYle/f6yLGQFPPL/F0DV ap3BrOm09xJpFNpF/sw= ) ;; AUTHORITY SECTION (7 records) cecc.gov. 28800 IN NS oxygen.house.gov. cecc.gov. 28800 IN NS pdns109.ultradns.net. cecc.gov. 28800 IN NS pdns109.ultradns.org. cecc.gov. 28800 IN NS pdns109.ultradns.biz. cecc.gov. 28800 IN NS oxygen2.house.gov. cecc.gov. 28800 IN NS pdns109.ultradns.com. cecc.gov. 28800 IN RRSIG ( NS 8 2 28800 20240518214907 20240512212337 65451 cecc.gov. GTbTKN57QWIMr2Lp6PAARFAMOTSX4qC0LECxdbQ49/LhKuabDd05ZnCr9EQY6dr7jIitng81GypN 7sptau4L0XXGtLNxC3FfVQfNXfS+wHNPDH4SG7OqtiKwMmz2IE9e+eQZ24qLhab4v5R9tfh1kE3y TDUVeXgU2fxQox0bzQ0= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	cecc.gov A RR has value 3.33.159.71
	cecc.gov A RR has value 15.197.146.213
	Found 1 RRSIGs over A RRset
	`cecc.gov. 28800 IN RRSIG ( A 8 2 28800 20240518214907 20240512212337 65451 cecc.gov. xCmsi4ILNdQei1GqlMlNezYHQR93Wq2/eHEpJhHdHFIUVfiVE62FHCHmoJJHnhElxOGb7I0XuaM/ EYRURso4mYU2L36aAAeJSpoTYTyIBEl+nj9yIRxUjyzfiLURQs4xYtUeXYle/f6yLGQFPPL/F0DV ap3BrOm09xJpFNpF/sw= )`
	RRSIG=65451 and DNSKEY=65451 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test cecc.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: