DNSSEC Debugger - defense.gov

Domain Name:

Time: 2024-05-17 15:30:27 UTC

Analyzing DNSSEC problems for defense.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 864 octets ;; HEADER SECTION ;; id = 8063 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to l.root-servers.net for defense.gov/A
	Received 618 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 618 octets ;; HEADER SECTION ;; id = 10952 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240530050000 20240517040000 5613 . dpSvrVMv4ULjsedR/owZmJgcdv+r2bNx7ajQXYRo5BhQ13cO3F79QkNOjBEn277GzUBJz8yVJwfk wJI65o3V3DK3obYWPcGOYsSxg0LfWriaJCJ6RdyNjFs8hwiL/e5xBWpZDm9VtYupfe0L9ML5sTGK xuYdIrbMlIOWHcclskcB+7kx9Llk3RJcqG18b/tIoKCdmBO0evwSNxlSY4pcr0vn7nMmz+mFGp20 tSkZfysVu832mKYt2nuaQfXmc8ioOgaCgL6fSv3sSxvXg8R7W0QRqECJ5Aha47BW056eI8x8KBH5 S5uM2Nk7k0/UG/3W3sTeXsAR+RdmaXoNA1AiFQ== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN A 199.33.231.1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN A 199.33.232.1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN A 199.33.233.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to f.root-servers.net for gov/DNSKEY
	Received 610 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 610 octets ;; HEADER SECTION ;; id = 7728 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240530050000 20240517040000 5613 . dpSvrVMv4ULjsedR/owZmJgcdv+r2bNx7ajQXYRo5BhQ13cO3F79QkNOjBEn277GzUBJz8yVJwfk wJI65o3V3DK3obYWPcGOYsSxg0LfWriaJCJ6RdyNjFs8hwiL/e5xBWpZDm9VtYupfe0L9ML5sTGK xuYdIrbMlIOWHcclskcB+7kx9Llk3RJcqG18b/tIoKCdmBO0evwSNxlSY4pcr0vn7nMmz+mFGp20 tSkZfysVu832mKYt2nuaQfXmc8ioOgaCgL6fSv3sSxvXg8R7W0QRqECJ5Aha47BW056eI8x8KBH5 S5uM2Nk7k0/UG/3W3sTeXsAR+RdmaXoNA1AiFQ== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN A 199.33.231.1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN A 199.33.232.1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN A 199.33.233.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to g.root-servers.net for gov/DS
	Received 367 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 367 octets ;; HEADER SECTION ;; id = 24777 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240530050000 20240517040000 5613 . dpSvrVMv4ULjsedR/owZmJgcdv+r2bNx7ajQXYRo5BhQ13cO3F79QkNOjBEn277GzUBJz8yVJwfk wJI65o3V3DK3obYWPcGOYsSxg0LfWriaJCJ6RdyNjFs8hwiL/e5xBWpZDm9VtYupfe0L9ML5sTGK xuYdIrbMlIOWHcclskcB+7kx9Llk3RJcqG18b/tIoKCdmBO0evwSNxlSY4pcr0vn7nMmz+mFGp20 tSkZfysVu832mKYt2nuaQfXmc8ioOgaCgL6fSv3sSxvXg8R7W0QRqECJ5Aha47BW056eI8x8KBH5 S5uM2Nk7k0/UG/3W3sTeXsAR+RdmaXoNA1AiFQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=64280/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20240530050000 20240517040000 5613 . dpSvrVMv4ULjsedR/owZmJgcdv+r2bNx7ajQXYRo5BhQ13cO3F79QkNOjBEn277GzUBJz8yVJwfk wJI65o3V3DK3obYWPcGOYsSxg0LfWriaJCJ6RdyNjFs8hwiL/e5xBWpZDm9VtYupfe0L9ML5sTGK xuYdIrbMlIOWHcclskcB+7kx9Llk3RJcqG18b/tIoKCdmBO0evwSNxlSY4pcr0vn7nMmz+mFGp20 tSkZfysVu832mKYt2nuaQfXmc8ioOgaCgL6fSv3sSxvXg8R7W0QRqECJ5Aha47BW056eI8x8KBH5 S5uM2Nk7k0/UG/3W3sTeXsAR+RdmaXoNA1AiFQ== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=64280/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 )`
	Query to b.ns.gov for gov/DNSKEY
	Received 779 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 779 octets ;; HEADER SECTION ;; id = 32912 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 8 AwEAAZp0vliR0TOBCJXmdagY36BI5ZveSPE3OSrcXKDs8IZa86x1+gwbheJcfLB6Fw6cWYUXaNgA mFcbxqIqWc5VJSyPS9yCPdEOLEIiegwCmcWnNsEyc0snKTyypXnvJ5JNhoznpFILDqlksAqP/aiq 1/l0w8TMkRbRrViLrJ1ayaScZ0nn/ge5wNpX09T9RI+gF1OIMJDdgH1vi0a+t6smSy4pUrerFTsu y8JAL+PP85MZiOssT9yoERfWSjFKde6PrQX5vj090AxT+hztb+q2EFXnF1a2L73/3UarB19k5NR3 MT1uM7ddag64Q0lg3aTy3MglDCzP7/StUxdeyL5qIX8= ) ; Key ID = 64280 gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcbYvlY667qXEzHsDTkft9cgKy5F0S9CAP+aFK9+sJumGqvpMaOyOzsilJ+OSVFhopJ1aRFp CUpLVIcVJ3E3YATGpzB45M0D5c4oJ0RjEIUakBwcPghmSW8K1GPqj/eUs4fbVPytXwtwvUll9Lxf gUvi5DA6xD6d2ckwDyRxfcMhXYydr2hIsgfrBLmRDMi4BkxMvA23eShPd/tPvnR0gJk= ) ; Key ID = 10104 gov. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240623141047 20240423141047 64280 gov. GGsGHy8XGH2PGTeyVpY5iEmleVzWCH/eitEUBXIgG0ivqrcC6Pzhenn+3E9uz+C2ehYImK95B9PK juJuu0jPFw09gKBO8Xo9x+wpWM/Zdh3NxhzGmfQOxRyj/5e1g27XxQB1pqhRegDfa5/mg+8zAoFY YneUx2tnvdtycsZg49d2iq75YlRBRj9ZSl6PJJ/nzacwKPjQFCbFiuEfnn6Vn432vWr2T0AUuaDV bJCSg2c32qiMCHE18PaaUn82oWYF2/FjWhU9i/UpGd0PS8Wtvicuho7/CYbMv+UvithHF+NE7QFV VDQtgjise03ZFQWMfrZcrZE8W4/KKDeyfDAkFA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 8 AwEAAZp0vliR0TOBCJXmdagY36BI5ZveSPE3OSrcXKDs8IZa86x1+gwbheJcfLB6Fw6cWYUXaNgA mFcbxqIqWc5VJSyPS9yCPdEOLEIiegwCmcWnNsEyc0snKTyypXnvJ5JNhoznpFILDqlksAqP/aiq 1/l0w8TMkRbRrViLrJ1ayaScZ0nn/ge5wNpX09T9RI+gF1OIMJDdgH1vi0a+t6smSy4pUrerFTsu y8JAL+PP85MZiOssT9yoERfWSjFKde6PrQX5vj090AxT+hztb+q2EFXnF1a2L73/3UarB19k5NR3 MT1uM7ddag64Q0lg3aTy3MglDCzP7/StUxdeyL5qIX8= ) ; Key ID = 64280`
	`gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcbYvlY667qXEzHsDTkft9cgKy5F0S9CAP+aFK9+sJumGqvpMaOyOzsilJ+OSVFhopJ1aRFp CUpLVIcVJ3E3YATGpzB45M0D5c4oJ0RjEIUakBwcPghmSW8K1GPqj/eUs4fbVPytXwtwvUll9Lxf gUvi5DA6xD6d2ckwDyRxfcMhXYydr2hIsgfrBLmRDMi4BkxMvA23eShPd/tPvnR0gJk= ) ; Key ID = 10104`
	DNSKEY=64280/SEP is now in the chain-of-trust
	DS=64280/SHA-256 verifies DNSKEY=64280/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240623141047 20240423141047 64280 gov. GGsGHy8XGH2PGTeyVpY5iEmleVzWCH/eitEUBXIgG0ivqrcC6Pzhenn+3E9uz+C2ehYImK95B9PK juJuu0jPFw09gKBO8Xo9x+wpWM/Zdh3NxhzGmfQOxRyj/5e1g27XxQB1pqhRegDfa5/mg+8zAoFY YneUx2tnvdtycsZg49d2iq75YlRBRj9ZSl6PJJ/nzacwKPjQFCbFiuEfnn6Vn432vWr2T0AUuaDV bJCSg2c32qiMCHE18PaaUn82oWYF2/FjWhU9i/UpGd0PS8Wtvicuho7/CYbMv+UvithHF+NE7QFV VDQtgjise03ZFQWMfrZcrZE8W4/KKDeyfDAkFA== )`
	RRSIG=64280 and DNSKEY=64280/SEP verifies the DNSKEY RRset
	DNSKEY=10104 is now in the chain-of-trust
	Query to b.ns.gov for defense.gov/A
	Received 450 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 450 octets ;; HEADER SECTION ;; id = 20071 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 10 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) defense.gov. 10800 IN NS asia2.akam.net. defense.gov. 10800 IN NS asia3.akam.net. defense.gov. 10800 IN NS eur6.akam.net. defense.gov. 10800 IN NS ns1-116.akam.net. defense.gov. 10800 IN NS ns1-95.akam.net. defense.gov. 10800 IN NS usc5.akam.net. defense.gov. 10800 IN NS use2.akam.net. defense.gov. 10800 IN NS use9.akam.net. defense.gov. 3600 IN DS ( 33055 7 2 4a1684c566aeafc8994586d0e1d263e87a7df1b712cded6e90149dba575014ec ) defense.gov. 3600 IN RRSIG ( DS 8 2 3600 20240518163027 20240516143027 10104 gov. tZ9YhY5Wu6zAvK52QWvxXcnh7j/z8tghyTnK6yJI8ctr/oOG1e2oUyok+IN5rd1u315u9885c5pA xsG2hmeTI3M/0CDhD7RZ4GdUieJqeKUqDcaUaualbYIGmoQdLVFVpfMRRRZB0UeP+T+8FMiV9D5s TpYNpMKrtPFsonv6ACdRu9RcRIUxJ6LlnA2aTcjHrXnkfR4Q6lOoZEwEK8pBAA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a.ns.gov for defense.gov/DNSKEY
	Received 450 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 450 octets ;; HEADER SECTION ;; id = 41819 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 10 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) defense.gov. 10800 IN NS asia2.akam.net. defense.gov. 10800 IN NS asia3.akam.net. defense.gov. 10800 IN NS eur6.akam.net. defense.gov. 10800 IN NS ns1-116.akam.net. defense.gov. 10800 IN NS ns1-95.akam.net. defense.gov. 10800 IN NS usc5.akam.net. defense.gov. 10800 IN NS use2.akam.net. defense.gov. 10800 IN NS use9.akam.net. defense.gov. 3600 IN DS ( 33055 7 2 4a1684c566aeafc8994586d0e1d263e87a7df1b712cded6e90149dba575014ec ) defense.gov. 3600 IN RRSIG ( DS 8 2 3600 20240518163027 20240516143027 10104 gov. tZ9YhY5Wu6zAvK52QWvxXcnh7j/z8tghyTnK6yJI8ctr/oOG1e2oUyok+IN5rd1u315u9885c5pA xsG2hmeTI3M/0CDhD7RZ4GdUieJqeKUqDcaUaualbYIGmoQdLVFVpfMRRRZB0UeP+T+8FMiV9D5s TpYNpMKrtPFsonv6ACdRu9RcRIUxJ6LlnA2aTcjHrXnkfR4Q6lOoZEwEK8pBAA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone defense.gov

defense.gov

	Checking DS between gov and defense.gov
	Query to a.ns.gov for defense.gov/DS
	Received 283 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 283 octets ;; HEADER SECTION ;; id = 6302 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN DS ;; ANSWER SECTION (2 records) defense.gov. 3600 IN DS ( 33055 7 2 4a1684c566aeafc8994586d0e1d263e87a7df1b712cded6e90149dba575014ec ) defense.gov. 3600 IN RRSIG ( DS 8 2 3600 20240518163027 20240516143027 10104 gov. tZ9YhY5Wu6zAvK52QWvxXcnh7j/z8tghyTnK6yJI8ctr/oOG1e2oUyok+IN5rd1u315u9885c5pA xsG2hmeTI3M/0CDhD7RZ4GdUieJqeKUqDcaUaualbYIGmoQdLVFVpfMRRRZB0UeP+T+8FMiV9D5s TpYNpMKrtPFsonv6ACdRu9RcRIUxJ6LlnA2aTcjHrXnkfR4Q6lOoZEwEK8pBAA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for defense.gov in the gov zone
	DS=33055/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`defense.gov. 3600 IN RRSIG ( DS 8 2 3600 20240518163027 20240516143027 10104 gov. tZ9YhY5Wu6zAvK52QWvxXcnh7j/z8tghyTnK6yJI8ctr/oOG1e2oUyok+IN5rd1u315u9885c5pA xsG2hmeTI3M/0CDhD7RZ4GdUieJqeKUqDcaUaualbYIGmoQdLVFVpfMRRRZB0UeP+T+8FMiV9D5s TpYNpMKrtPFsonv6ACdRu9RcRIUxJ6LlnA2aTcjHrXnkfR4Q6lOoZEwEK8pBAA== )`
	RRSIG=10104 and DNSKEY=10104 verifies the DS RRset
	DS=33055/SHA-256 is now in the chain-of-trust
	`defense.gov. 3600 IN DS ( 33055 7 2 4a1684c566aeafc8994586d0e1d263e87a7df1b712cded6e90149dba575014ec )`
	Query to use2.akam.net for defense.gov/DNSKEY
	Received 911 bytes from 96.7.49.64
	;; Response received from [96.7.49.64] 911 octets ;; HEADER SECTION ;; id = 26461 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN DNSKEY ;; ANSWER SECTION (4 records) defense.gov. 7200 IN DNSKEY ( 256 3 7 AwEAAcfJoUDsQlnTDlnWqJL1iE52GHtEyMWDAA8b/ihNENpCAWrmyGJZ9UAo/o9VBQ1H/XGhrdOv QB9wzFuTdJUb25VKvmUUPUkvbhfauAK5RX4quYlZBwZFmAxr8+Md9r8+/9kK7J79edf2jYGA3Kno 42JkXSIyPUPs20LKBgNECRF3 ) ; Key ID = 2888 defense.gov. 7200 IN DNSKEY ( 257 3 7 AwEAAY+rkIC7krF180El9C8sd+GYCU0VRMwzq8SNcT3BU7YMdqX57aXq4v0wTf8y824bGrYtRNhq ku0xiZ7VNK8Qm4J6TrYxCpJgCST+9u58Ehkvl0RrG/nXaCTU/eaFQrtIWZ00GJDRB6p9RykwQDo0 8Ze8TqyqTHj99sQjPdIH1MUOKUzeADE40MCrAlbqzeg8jDC43f6du4oeJGbcR5roatcxarxyIDvD AH3l8btjgjxZVj2ueZMlLs+xdLUWVRMKMgjKpKuewHFD/w9BmPyFYzbbDWCXnzN9iAp5THYL6N6p Ypcs+e6V0jhV8CYEWop9DbBfWEdtJPYZue1u6pXfGiE= ) ; Key ID = 33055 defense.gov. 7200 IN DNSKEY ( 256 3 7 AwEAAfPN/kDmlgWtbUU2nW44TDfF4Cj+E9zVo+1QHGCQiDWGz8AUMP7Uq6m7tipMmHBU+7kFrl6L UMSJOVDkW64ORB1BYoGfdyWa7hPMfBWO1y/e6VQCpZDgXq32EuKHXEgOohMNU9t+OKEv70W4VQDZ 53q2/r7/wH6I3zyVqQ9Ix0fX ) ; Key ID = 41820 defense.gov. 7200 IN RRSIG ( DNSKEY 7 2 7200 20240519182750 20240516172750 33055 defense.gov. TfBZmtpZcUu7Lzw50lIy4BCJGK2xRxEWiBPYh4fNl4Hj4cqmIlOHr8R0rZCu2elHSrBu/dnOOnFA KdIPVG7dXvbW4rQsBsBXmGV0JAuMGW1S6Vox47LuvaciObN53m0FnGMMLIqOB+xLKjFikpiLNpoZ nGMMuUiSlzMYzhxqOnRkRnSzlMCiKRaU8pdj/9BBIi7jrWJRNKuqlkFy/UBkBGAFlfXsprWgs07P DzAK7JQKp7oV5M6axM5KuAUokKOhV2mcW1h3xyKCgYqVJLEo3n9bofDcnMAFXbB9uCzx/TdtV0nq vKjg+9hdS9Ygm61xPHGmfSAyFT2G7M2jZSZumA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for defense.gov
	`defense.gov. 7200 IN DNSKEY ( 256 3 7 AwEAAcfJoUDsQlnTDlnWqJL1iE52GHtEyMWDAA8b/ihNENpCAWrmyGJZ9UAo/o9VBQ1H/XGhrdOv QB9wzFuTdJUb25VKvmUUPUkvbhfauAK5RX4quYlZBwZFmAxr8+Md9r8+/9kK7J79edf2jYGA3Kno 42JkXSIyPUPs20LKBgNECRF3 ) ; Key ID = 2888`
	`defense.gov. 7200 IN DNSKEY ( 257 3 7 AwEAAY+rkIC7krF180El9C8sd+GYCU0VRMwzq8SNcT3BU7YMdqX57aXq4v0wTf8y824bGrYtRNhq ku0xiZ7VNK8Qm4J6TrYxCpJgCST+9u58Ehkvl0RrG/nXaCTU/eaFQrtIWZ00GJDRB6p9RykwQDo0 8Ze8TqyqTHj99sQjPdIH1MUOKUzeADE40MCrAlbqzeg8jDC43f6du4oeJGbcR5roatcxarxyIDvD AH3l8btjgjxZVj2ueZMlLs+xdLUWVRMKMgjKpKuewHFD/w9BmPyFYzbbDWCXnzN9iAp5THYL6N6p Ypcs+e6V0jhV8CYEWop9DbBfWEdtJPYZue1u6pXfGiE= ) ; Key ID = 33055`
	`defense.gov. 7200 IN DNSKEY ( 256 3 7 AwEAAfPN/kDmlgWtbUU2nW44TDfF4Cj+E9zVo+1QHGCQiDWGz8AUMP7Uq6m7tipMmHBU+7kFrl6L UMSJOVDkW64ORB1BYoGfdyWa7hPMfBWO1y/e6VQCpZDgXq32EuKHXEgOohMNU9t+OKEv70W4VQDZ 53q2/r7/wH6I3zyVqQ9Ix0fX ) ; Key ID = 41820`
	DNSKEY=33055/SEP is now in the chain-of-trust
	DS=33055/SHA-256 verifies DNSKEY=33055/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`defense.gov. 7200 IN RRSIG ( DNSKEY 7 2 7200 20240519182750 20240516172750 33055 defense.gov. TfBZmtpZcUu7Lzw50lIy4BCJGK2xRxEWiBPYh4fNl4Hj4cqmIlOHr8R0rZCu2elHSrBu/dnOOnFA KdIPVG7dXvbW4rQsBsBXmGV0JAuMGW1S6Vox47LuvaciObN53m0FnGMMLIqOB+xLKjFikpiLNpoZ nGMMuUiSlzMYzhxqOnRkRnSzlMCiKRaU8pdj/9BBIi7jrWJRNKuqlkFy/UBkBGAFlfXsprWgs07P DzAK7JQKp7oV5M6axM5KuAUokKOhV2mcW1h3xyKCgYqVJLEo3n9bofDcnMAFXbB9uCzx/TdtV0nq vKjg+9hdS9Ygm61xPHGmfSAyFT2G7M2jZSZumA== )`
	RRSIG=33055 and DNSKEY=33055/SEP verifies the DNSKEY RRset
	DNSKEY=2888 is now in the chain-of-trust
	DNSKEY=41820 is now in the chain-of-trust
	Query to asia3.akam.net for defense.gov/A
	Received 227 bytes from 23.211.61.64
	;; Response received from [23.211.61.64] 227 octets ;; HEADER SECTION ;; id = 958 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 23.76.44.152 defense.gov. 20 IN RRSIG ( A 7 2 20 20240519182750 20240516172750 2888 defense.gov. ARf2yPSXWvcRDrmpiJ3bI4PIMDluSyKsiiijJKutVO9IXIfsYdLy97l3PkRdH0bzIgpPgi2hQzaF mBXHlNJ7/k0Nuc0Eb2+JNjkPn/9mcc3VaICNJP0asjcDj6byMoo3ZFM8GMD/jx9JIW4oICnZaSvv 5F3DMSQ52fjFNp4vQLw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	asia3.akam.net is authoritative for defense.gov
	Found RRSIG signed by defense.gov zone
	Query to ns1-116.akam.net for defense.gov/SOA
	Received 602 bytes from 193.108.91.116
	;; Response received from [193.108.91.116] 602 octets ;; HEADER SECTION ;; id = 55982 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 9 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN SOA ;; ANSWER SECTION (2 records) defense.gov. 300 IN SOA ( hadar.dma.mil. cop.hadar.dma.mil. 1556726339 ;serial 10800 ;refresh 3600 ;retry 12096000 ;expire 3600 ;minimum ) defense.gov. 300 IN RRSIG ( SOA 7 2 300 20240519182750 20240516172750 2888 defense.gov. eYZOrjrYv89OBIbmb/U1ztqYRbsotwwmtoOO8HZuv6Yd2kz1k7Xle2n3HIOh9Q/3rr/7aQo1jV7e GkV8Ir29q3mluQ7YW3UNeLhEwi6yX6fqC46Dmbe+8j3kivbtbb3U6R6JhLAdip3RGrBAvlefqY1D EiU8Xt7hm80PBisp/bM= ) ;; AUTHORITY SECTION (9 records) defense.gov. 300 IN NS asia2.akam.net. defense.gov. 300 IN NS use9.akam.net. defense.gov. 300 IN NS usc5.akam.net. defense.gov. 300 IN NS ns1-116.akam.net. defense.gov. 300 IN NS asia3.akam.net. defense.gov. 300 IN NS eur6.akam.net. defense.gov. 300 IN NS ns1-95.akam.net. defense.gov. 300 IN NS use2.akam.net. defense.gov. 300 IN RRSIG ( NS 7 2 300 20240519182750 20240516172750 2888 defense.gov. nCUq5gnF8n4HzG6+kIF0/XImbbBs+ThxUgifAGDmG1DvC4Y/2UkPhw4LD1m39ty17mPNTu5cDfEJ B6p0yxGOudZLvluE1tGGiaEAb2VOoa1lisBPYymIKMoWoPQiiEadtNb0J9o3F7S5gPf0tQSUH6Hb 456G+c2MDd8JH8Y89kQ= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to use2.akam.net for defense.gov/SOA
	Received 602 bytes from 96.7.49.64
	;; Response received from [96.7.49.64] 602 octets ;; HEADER SECTION ;; id = 35904 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 9 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN SOA ;; ANSWER SECTION (2 records) defense.gov. 300 IN SOA ( hadar.dma.mil. cop.hadar.dma.mil. 1556726339 ;serial 10800 ;refresh 3600 ;retry 12096000 ;expire 3600 ;minimum ) defense.gov. 300 IN RRSIG ( SOA 7 2 300 20240519182750 20240516172750 2888 defense.gov. eYZOrjrYv89OBIbmb/U1ztqYRbsotwwmtoOO8HZuv6Yd2kz1k7Xle2n3HIOh9Q/3rr/7aQo1jV7e GkV8Ir29q3mluQ7YW3UNeLhEwi6yX6fqC46Dmbe+8j3kivbtbb3U6R6JhLAdip3RGrBAvlefqY1D EiU8Xt7hm80PBisp/bM= ) ;; AUTHORITY SECTION (9 records) defense.gov. 300 IN NS use2.akam.net. defense.gov. 300 IN NS ns1-95.akam.net. defense.gov. 300 IN NS usc5.akam.net. defense.gov. 300 IN NS eur6.akam.net. defense.gov. 300 IN NS ns1-116.akam.net. defense.gov. 300 IN NS asia2.akam.net. defense.gov. 300 IN NS use9.akam.net. defense.gov. 300 IN NS asia3.akam.net. defense.gov. 300 IN RRSIG ( NS 7 2 300 20240519182750 20240516172750 2888 defense.gov. nCUq5gnF8n4HzG6+kIF0/XImbbBs+ThxUgifAGDmG1DvC4Y/2UkPhw4LD1m39ty17mPNTu5cDfEJ B6p0yxGOudZLvluE1tGGiaEAb2VOoa1lisBPYymIKMoWoPQiiEadtNb0J9o3F7S5gPf0tQSUH6Hb 456G+c2MDd8JH8Y89kQ= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1-95.akam.net for defense.gov/SOA
	Received 602 bytes from 193.108.91.95
	;; Response received from [193.108.91.95] 602 octets ;; HEADER SECTION ;; id = 45488 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 9 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN SOA ;; ANSWER SECTION (2 records) defense.gov. 300 IN SOA ( hadar.dma.mil. cop.hadar.dma.mil. 1556726339 ;serial 10800 ;refresh 3600 ;retry 12096000 ;expire 3600 ;minimum ) defense.gov. 300 IN RRSIG ( SOA 7 2 300 20240519182750 20240516172750 2888 defense.gov. eYZOrjrYv89OBIbmb/U1ztqYRbsotwwmtoOO8HZuv6Yd2kz1k7Xle2n3HIOh9Q/3rr/7aQo1jV7e GkV8Ir29q3mluQ7YW3UNeLhEwi6yX6fqC46Dmbe+8j3kivbtbb3U6R6JhLAdip3RGrBAvlefqY1D EiU8Xt7hm80PBisp/bM= ) ;; AUTHORITY SECTION (9 records) defense.gov. 300 IN NS use9.akam.net. defense.gov. 300 IN NS eur6.akam.net. defense.gov. 300 IN NS asia2.akam.net. defense.gov. 300 IN NS ns1-95.akam.net. defense.gov. 300 IN NS use2.akam.net. defense.gov. 300 IN NS ns1-116.akam.net. defense.gov. 300 IN NS asia3.akam.net. defense.gov. 300 IN NS usc5.akam.net. defense.gov. 300 IN RRSIG ( NS 7 2 300 20240519182750 20240516172750 2888 defense.gov. nCUq5gnF8n4HzG6+kIF0/XImbbBs+ThxUgifAGDmG1DvC4Y/2UkPhw4LD1m39ty17mPNTu5cDfEJ B6p0yxGOudZLvluE1tGGiaEAb2VOoa1lisBPYymIKMoWoPQiiEadtNb0J9o3F7S5gPf0tQSUH6Hb 456G+c2MDd8JH8Y89kQ= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to eur6.akam.net for defense.gov/SOA
	Received 602 bytes from 2.22.230.64
	;; Response received from [2.22.230.64] 602 octets ;; HEADER SECTION ;; id = 14714 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 9 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN SOA ;; ANSWER SECTION (2 records) defense.gov. 300 IN SOA ( hadar.dma.mil. cop.hadar.dma.mil. 1556726339 ;serial 10800 ;refresh 3600 ;retry 12096000 ;expire 3600 ;minimum ) defense.gov. 300 IN RRSIG ( SOA 7 2 300 20240519182750 20240516172750 2888 defense.gov. eYZOrjrYv89OBIbmb/U1ztqYRbsotwwmtoOO8HZuv6Yd2kz1k7Xle2n3HIOh9Q/3rr/7aQo1jV7e GkV8Ir29q3mluQ7YW3UNeLhEwi6yX6fqC46Dmbe+8j3kivbtbb3U6R6JhLAdip3RGrBAvlefqY1D EiU8Xt7hm80PBisp/bM= ) ;; AUTHORITY SECTION (9 records) defense.gov. 300 IN NS eur6.akam.net. defense.gov. 300 IN NS asia2.akam.net. defense.gov. 300 IN NS usc5.akam.net. defense.gov. 300 IN NS use9.akam.net. defense.gov. 300 IN NS ns1-95.akam.net. defense.gov. 300 IN NS asia3.akam.net. defense.gov. 300 IN NS use2.akam.net. defense.gov. 300 IN NS ns1-116.akam.net. defense.gov. 300 IN RRSIG ( NS 7 2 300 20240519182750 20240516172750 2888 defense.gov. nCUq5gnF8n4HzG6+kIF0/XImbbBs+ThxUgifAGDmG1DvC4Y/2UkPhw4LD1m39ty17mPNTu5cDfEJ B6p0yxGOudZLvluE1tGGiaEAb2VOoa1lisBPYymIKMoWoPQiiEadtNb0J9o3F7S5gPf0tQSUH6Hb 456G+c2MDd8JH8Y89kQ= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to use9.akam.net for defense.gov/SOA
	Received 602 bytes from 72.246.46.65
	;; Response received from [72.246.46.65] 602 octets ;; HEADER SECTION ;; id = 44219 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 9 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN SOA ;; ANSWER SECTION (2 records) defense.gov. 300 IN SOA ( hadar.dma.mil. cop.hadar.dma.mil. 1556726339 ;serial 10800 ;refresh 3600 ;retry 12096000 ;expire 3600 ;minimum ) defense.gov. 300 IN RRSIG ( SOA 7 2 300 20240519182750 20240516172750 2888 defense.gov. eYZOrjrYv89OBIbmb/U1ztqYRbsotwwmtoOO8HZuv6Yd2kz1k7Xle2n3HIOh9Q/3rr/7aQo1jV7e GkV8Ir29q3mluQ7YW3UNeLhEwi6yX6fqC46Dmbe+8j3kivbtbb3U6R6JhLAdip3RGrBAvlefqY1D EiU8Xt7hm80PBisp/bM= ) ;; AUTHORITY SECTION (9 records) defense.gov. 300 IN NS use9.akam.net. defense.gov. 300 IN NS asia3.akam.net. defense.gov. 300 IN NS ns1-95.akam.net. defense.gov. 300 IN NS usc5.akam.net. defense.gov. 300 IN NS asia2.akam.net. defense.gov. 300 IN NS use2.akam.net. defense.gov. 300 IN NS eur6.akam.net. defense.gov. 300 IN NS ns1-116.akam.net. defense.gov. 300 IN RRSIG ( NS 7 2 300 20240519182750 20240516172750 2888 defense.gov. nCUq5gnF8n4HzG6+kIF0/XImbbBs+ThxUgifAGDmG1DvC4Y/2UkPhw4LD1m39ty17mPNTu5cDfEJ B6p0yxGOudZLvluE1tGGiaEAb2VOoa1lisBPYymIKMoWoPQiiEadtNb0J9o3F7S5gPf0tQSUH6Hb 456G+c2MDd8JH8Y89kQ= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to usc5.akam.net for defense.gov/SOA
	Received 602 bytes from 96.7.50.65
	;; Response received from [96.7.50.65] 602 octets ;; HEADER SECTION ;; id = 30341 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 9 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN SOA ;; ANSWER SECTION (2 records) defense.gov. 300 IN SOA ( hadar.dma.mil. cop.hadar.dma.mil. 1556726339 ;serial 10800 ;refresh 3600 ;retry 12096000 ;expire 3600 ;minimum ) defense.gov. 300 IN RRSIG ( SOA 7 2 300 20240519182750 20240516172750 2888 defense.gov. eYZOrjrYv89OBIbmb/U1ztqYRbsotwwmtoOO8HZuv6Yd2kz1k7Xle2n3HIOh9Q/3rr/7aQo1jV7e GkV8Ir29q3mluQ7YW3UNeLhEwi6yX6fqC46Dmbe+8j3kivbtbb3U6R6JhLAdip3RGrBAvlefqY1D EiU8Xt7hm80PBisp/bM= ) ;; AUTHORITY SECTION (9 records) defense.gov. 300 IN NS use9.akam.net. defense.gov. 300 IN NS asia3.akam.net. defense.gov. 300 IN NS usc5.akam.net. defense.gov. 300 IN NS eur6.akam.net. defense.gov. 300 IN NS ns1-116.akam.net. defense.gov. 300 IN NS use2.akam.net. defense.gov. 300 IN NS asia2.akam.net. defense.gov. 300 IN NS ns1-95.akam.net. defense.gov. 300 IN RRSIG ( NS 7 2 300 20240519182750 20240516172750 2888 defense.gov. nCUq5gnF8n4HzG6+kIF0/XImbbBs+ThxUgifAGDmG1DvC4Y/2UkPhw4LD1m39ty17mPNTu5cDfEJ B6p0yxGOudZLvluE1tGGiaEAb2VOoa1lisBPYymIKMoWoPQiiEadtNb0J9o3F7S5gPf0tQSUH6Hb 456G+c2MDd8JH8Y89kQ= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to asia2.akam.net for defense.gov/SOA
	Received 602 bytes from 95.101.36.64
	;; Response received from [95.101.36.64] 602 octets ;; HEADER SECTION ;; id = 30494 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 9 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN SOA ;; ANSWER SECTION (2 records) defense.gov. 300 IN SOA ( hadar.dma.mil. cop.hadar.dma.mil. 1556726339 ;serial 10800 ;refresh 3600 ;retry 12096000 ;expire 3600 ;minimum ) defense.gov. 300 IN RRSIG ( SOA 7 2 300 20240519182750 20240516172750 2888 defense.gov. eYZOrjrYv89OBIbmb/U1ztqYRbsotwwmtoOO8HZuv6Yd2kz1k7Xle2n3HIOh9Q/3rr/7aQo1jV7e GkV8Ir29q3mluQ7YW3UNeLhEwi6yX6fqC46Dmbe+8j3kivbtbb3U6R6JhLAdip3RGrBAvlefqY1D EiU8Xt7hm80PBisp/bM= ) ;; AUTHORITY SECTION (9 records) defense.gov. 300 IN NS asia2.akam.net. defense.gov. 300 IN NS eur6.akam.net. defense.gov. 300 IN NS use2.akam.net. defense.gov. 300 IN NS ns1-116.akam.net. defense.gov. 300 IN NS asia3.akam.net. defense.gov. 300 IN NS ns1-95.akam.net. defense.gov. 300 IN NS use9.akam.net. defense.gov. 300 IN NS usc5.akam.net. defense.gov. 300 IN RRSIG ( NS 7 2 300 20240519182750 20240516172750 2888 defense.gov. nCUq5gnF8n4HzG6+kIF0/XImbbBs+ThxUgifAGDmG1DvC4Y/2UkPhw4LD1m39ty17mPNTu5cDfEJ B6p0yxGOudZLvluE1tGGiaEAb2VOoa1lisBPYymIKMoWoPQiiEadtNb0J9o3F7S5gPf0tQSUH6Hb 456G+c2MDd8JH8Y89kQ= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to asia3.akam.net for defense.gov/A
	Received 227 bytes from 23.211.61.64
	;; Response received from [23.211.61.64] 227 octets ;; HEADER SECTION ;; id = 51073 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 104.90.244.82 defense.gov. 20 IN RRSIG ( A 7 2 20 20240519182750 20240516172750 2888 defense.gov. JUA4W3uEpGslyvE9oX871B98OpTioKb1IVErX9+IjOU3ymSkWgeriqgjP+l4KRmIM/0Hz+0F/anu 2URMxqqc4ZFpKUVWIb56vBnnSfBRl5Cj/AMXrRfnWUx8Ba6sduJVzifYqV3n+cOqaKDvA9QxDTUC MyDXByhuwS9z4pBO+Aw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	defense.gov A RR has value 104.90.244.82
	Found 1 RRSIGs over A RRset
	`defense.gov. 20 IN RRSIG ( A 7 2 20 20240519182750 20240516172750 2888 defense.gov. JUA4W3uEpGslyvE9oX871B98OpTioKb1IVErX9+IjOU3ymSkWgeriqgjP+l4KRmIM/0Hz+0F/anu 2URMxqqc4ZFpKUVWIb56vBnnSfBRl5Cj/AMXrRfnWUx8Ba6sduJVzifYqV3n+cOqaKDvA9QxDTUC MyDXByhuwS9z4pBO+Aw= )`
	RRSIG=2888 and DNSKEY=2888 verifies the A RRset

defense.gov

	Query to ns1-95.akam.net for defense.gov/A
	Received 227 bytes from 193.108.91.95
	;; Response received from [193.108.91.95] 227 octets ;; HEADER SECTION ;; id = 22462 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 104.105.45.211 defense.gov. 20 IN RRSIG ( A 7 2 20 20240519182750 20240516172750 2888 defense.gov. YzLe1nygYhAndqZhqcwHoGebjHuK22k1aZbf0Ca3vaQ5vWamqHYmEtPWv3+WuN47CS+/5MuBQl1b XMNtPhcPqVMDSCguRm0cSZ1AwOkqQurLz00rukROfkc7hC85XLtAy2TnJHwmpYnLMLS9Klj1umuy kBb+PIAIzUl+Pcsp9H0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1-95.akam.net is authoritative for defense.gov
	Found RRSIG signed by defense.gov zone
	Query to ns1-95.akam.net for defense.gov/A
	Received 227 bytes from 193.108.91.95
	;; Response received from [193.108.91.95] 227 octets ;; HEADER SECTION ;; id = 12446 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 104.105.45.211 defense.gov. 20 IN RRSIG ( A 7 2 20 20240519182750 20240516172750 2888 defense.gov. YzLe1nygYhAndqZhqcwHoGebjHuK22k1aZbf0Ca3vaQ5vWamqHYmEtPWv3+WuN47CS+/5MuBQl1b XMNtPhcPqVMDSCguRm0cSZ1AwOkqQurLz00rukROfkc7hC85XLtAy2TnJHwmpYnLMLS9Klj1umuy kBb+PIAIzUl+Pcsp9H0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	defense.gov A RR has value 104.105.45.211
	Found 1 RRSIGs over A RRset
	`defense.gov. 20 IN RRSIG ( A 7 2 20 20240519182750 20240516172750 2888 defense.gov. YzLe1nygYhAndqZhqcwHoGebjHuK22k1aZbf0Ca3vaQ5vWamqHYmEtPWv3+WuN47CS+/5MuBQl1b XMNtPhcPqVMDSCguRm0cSZ1AwOkqQurLz00rukROfkc7hC85XLtAy2TnJHwmpYnLMLS9Klj1umuy kBb+PIAIzUl+Pcsp9H0= )`
	RRSIG=2888 and DNSKEY=2888 verifies the A RRset

defense.gov

	Query to use2.akam.net for defense.gov/A
	Received 227 bytes from 96.7.49.64
	;; Response received from [96.7.49.64] 227 octets ;; HEADER SECTION ;; id = 44614 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 184.85.76.136 defense.gov. 20 IN RRSIG ( A 7 2 20 20240519182750 20240516172750 2888 defense.gov. hIfynnU27srgQBfy9VQXzRW03wdXBF7byfMNuwqyQI60ZzKUtXmlGlvgU0JaRnIp8P9+kSGTuNcX u8CSE964Kzdc3Go5aAVv7cz78aQK28FDmlh+fVl+Pt+eSgA36kM48CVr0lH95Is52qSZQj6PW3CX 0Bn5j6q6NOmcrr/HXUM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	use2.akam.net is authoritative for defense.gov
	Found RRSIG signed by defense.gov zone
	Query to use2.akam.net for defense.gov/A
	Received 227 bytes from 96.7.49.64
	;; Response received from [96.7.49.64] 227 octets ;; HEADER SECTION ;; id = 1061 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 184.85.76.136 defense.gov. 20 IN RRSIG ( A 7 2 20 20240519182750 20240516172750 2888 defense.gov. hIfynnU27srgQBfy9VQXzRW03wdXBF7byfMNuwqyQI60ZzKUtXmlGlvgU0JaRnIp8P9+kSGTuNcX u8CSE964Kzdc3Go5aAVv7cz78aQK28FDmlh+fVl+Pt+eSgA36kM48CVr0lH95Is52qSZQj6PW3CX 0Bn5j6q6NOmcrr/HXUM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	defense.gov A RR has value 184.85.76.136
	Found 1 RRSIGs over A RRset
	`defense.gov. 20 IN RRSIG ( A 7 2 20 20240519182750 20240516172750 2888 defense.gov. hIfynnU27srgQBfy9VQXzRW03wdXBF7byfMNuwqyQI60ZzKUtXmlGlvgU0JaRnIp8P9+kSGTuNcX u8CSE964Kzdc3Go5aAVv7cz78aQK28FDmlh+fVl+Pt+eSgA36kM48CVr0lH95Is52qSZQj6PW3CX 0Bn5j6q6NOmcrr/HXUM= )`
	RRSIG=2888 and DNSKEY=2888 verifies the A RRset

defense.gov

	Query to eur6.akam.net for defense.gov/A
	Received 227 bytes from 2.22.230.64
	;; Response received from [2.22.230.64] 227 octets ;; HEADER SECTION ;; id = 5684 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 104.105.45.211 defense.gov. 20 IN RRSIG ( A 7 2 20 20240519182750 20240516172750 2888 defense.gov. YzLe1nygYhAndqZhqcwHoGebjHuK22k1aZbf0Ca3vaQ5vWamqHYmEtPWv3+WuN47CS+/5MuBQl1b XMNtPhcPqVMDSCguRm0cSZ1AwOkqQurLz00rukROfkc7hC85XLtAy2TnJHwmpYnLMLS9Klj1umuy kBb+PIAIzUl+Pcsp9H0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	eur6.akam.net is authoritative for defense.gov
	Found RRSIG signed by defense.gov zone
	Query to eur6.akam.net for defense.gov/A
	Received 227 bytes from 2.22.230.64
	;; Response received from [2.22.230.64] 227 octets ;; HEADER SECTION ;; id = 24177 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 104.105.45.211 defense.gov. 20 IN RRSIG ( A 7 2 20 20240519182750 20240516172750 2888 defense.gov. YzLe1nygYhAndqZhqcwHoGebjHuK22k1aZbf0Ca3vaQ5vWamqHYmEtPWv3+WuN47CS+/5MuBQl1b XMNtPhcPqVMDSCguRm0cSZ1AwOkqQurLz00rukROfkc7hC85XLtAy2TnJHwmpYnLMLS9Klj1umuy kBb+PIAIzUl+Pcsp9H0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	defense.gov A RR has value 104.105.45.211
	Found 1 RRSIGs over A RRset
	`defense.gov. 20 IN RRSIG ( A 7 2 20 20240519182750 20240516172750 2888 defense.gov. YzLe1nygYhAndqZhqcwHoGebjHuK22k1aZbf0Ca3vaQ5vWamqHYmEtPWv3+WuN47CS+/5MuBQl1b XMNtPhcPqVMDSCguRm0cSZ1AwOkqQurLz00rukROfkc7hC85XLtAy2TnJHwmpYnLMLS9Klj1umuy kBb+PIAIzUl+Pcsp9H0= )`
	RRSIG=2888 and DNSKEY=2888 verifies the A RRset

defense.gov

	Query to ns1-116.akam.net for defense.gov/A
	Received 227 bytes from 193.108.91.116
	;; Response received from [193.108.91.116] 227 octets ;; HEADER SECTION ;; id = 54365 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 104.105.45.211 defense.gov. 20 IN RRSIG ( A 7 2 20 20240519182750 20240516172750 2888 defense.gov. YzLe1nygYhAndqZhqcwHoGebjHuK22k1aZbf0Ca3vaQ5vWamqHYmEtPWv3+WuN47CS+/5MuBQl1b XMNtPhcPqVMDSCguRm0cSZ1AwOkqQurLz00rukROfkc7hC85XLtAy2TnJHwmpYnLMLS9Klj1umuy kBb+PIAIzUl+Pcsp9H0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1-116.akam.net is authoritative for defense.gov
	Found RRSIG signed by defense.gov zone
	Query to ns1-116.akam.net for defense.gov/A
	Received 227 bytes from 193.108.91.116
	;; Response received from [193.108.91.116] 227 octets ;; HEADER SECTION ;; id = 56910 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 104.105.45.211 defense.gov. 20 IN RRSIG ( A 7 2 20 20240519182750 20240516172750 2888 defense.gov. YzLe1nygYhAndqZhqcwHoGebjHuK22k1aZbf0Ca3vaQ5vWamqHYmEtPWv3+WuN47CS+/5MuBQl1b XMNtPhcPqVMDSCguRm0cSZ1AwOkqQurLz00rukROfkc7hC85XLtAy2TnJHwmpYnLMLS9Klj1umuy kBb+PIAIzUl+Pcsp9H0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	defense.gov A RR has value 104.105.45.211
	Found 1 RRSIGs over A RRset
	`defense.gov. 20 IN RRSIG ( A 7 2 20 20240519182750 20240516172750 2888 defense.gov. YzLe1nygYhAndqZhqcwHoGebjHuK22k1aZbf0Ca3vaQ5vWamqHYmEtPWv3+WuN47CS+/5MuBQl1b XMNtPhcPqVMDSCguRm0cSZ1AwOkqQurLz00rukROfkc7hC85XLtAy2TnJHwmpYnLMLS9Klj1umuy kBb+PIAIzUl+Pcsp9H0= )`
	RRSIG=2888 and DNSKEY=2888 verifies the A RRset

defense.gov

	Query to use9.akam.net for defense.gov/A
	Received 227 bytes from 72.246.46.65
	;; Response received from [72.246.46.65] 227 octets ;; HEADER SECTION ;; id = 37810 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 104.105.45.211 defense.gov. 20 IN RRSIG ( A 7 2 20 20240519182750 20240516172750 2888 defense.gov. YzLe1nygYhAndqZhqcwHoGebjHuK22k1aZbf0Ca3vaQ5vWamqHYmEtPWv3+WuN47CS+/5MuBQl1b XMNtPhcPqVMDSCguRm0cSZ1AwOkqQurLz00rukROfkc7hC85XLtAy2TnJHwmpYnLMLS9Klj1umuy kBb+PIAIzUl+Pcsp9H0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	use9.akam.net is authoritative for defense.gov
	Found RRSIG signed by defense.gov zone
	Query to use9.akam.net for defense.gov/A
	Received 227 bytes from 72.246.46.65
	;; Response received from [72.246.46.65] 227 octets ;; HEADER SECTION ;; id = 9709 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 104.105.45.211 defense.gov. 20 IN RRSIG ( A 7 2 20 20240519182750 20240516172750 2888 defense.gov. YzLe1nygYhAndqZhqcwHoGebjHuK22k1aZbf0Ca3vaQ5vWamqHYmEtPWv3+WuN47CS+/5MuBQl1b XMNtPhcPqVMDSCguRm0cSZ1AwOkqQurLz00rukROfkc7hC85XLtAy2TnJHwmpYnLMLS9Klj1umuy kBb+PIAIzUl+Pcsp9H0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	defense.gov A RR has value 104.105.45.211
	Found 1 RRSIGs over A RRset
	`defense.gov. 20 IN RRSIG ( A 7 2 20 20240519182750 20240516172750 2888 defense.gov. YzLe1nygYhAndqZhqcwHoGebjHuK22k1aZbf0Ca3vaQ5vWamqHYmEtPWv3+WuN47CS+/5MuBQl1b XMNtPhcPqVMDSCguRm0cSZ1AwOkqQurLz00rukROfkc7hC85XLtAy2TnJHwmpYnLMLS9Klj1umuy kBb+PIAIzUl+Pcsp9H0= )`
	RRSIG=2888 and DNSKEY=2888 verifies the A RRset

defense.gov

	Query to usc5.akam.net for defense.gov/A
	Received 227 bytes from 96.7.50.65
	;; Response received from [96.7.50.65] 227 octets ;; HEADER SECTION ;; id = 58365 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 23.76.44.152 defense.gov. 20 IN RRSIG ( A 7 2 20 20240519182750 20240516172750 2888 defense.gov. ARf2yPSXWvcRDrmpiJ3bI4PIMDluSyKsiiijJKutVO9IXIfsYdLy97l3PkRdH0bzIgpPgi2hQzaF mBXHlNJ7/k0Nuc0Eb2+JNjkPn/9mcc3VaICNJP0asjcDj6byMoo3ZFM8GMD/jx9JIW4oICnZaSvv 5F3DMSQ52fjFNp4vQLw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	usc5.akam.net is authoritative for defense.gov
	Found RRSIG signed by defense.gov zone
	Query to usc5.akam.net for defense.gov/A
	Received 227 bytes from 96.7.50.65
	;; Response received from [96.7.50.65] 227 octets ;; HEADER SECTION ;; id = 3271 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 23.76.44.152 defense.gov. 20 IN RRSIG ( A 7 2 20 20240519182750 20240516172750 2888 defense.gov. ARf2yPSXWvcRDrmpiJ3bI4PIMDluSyKsiiijJKutVO9IXIfsYdLy97l3PkRdH0bzIgpPgi2hQzaF mBXHlNJ7/k0Nuc0Eb2+JNjkPn/9mcc3VaICNJP0asjcDj6byMoo3ZFM8GMD/jx9JIW4oICnZaSvv 5F3DMSQ52fjFNp4vQLw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	defense.gov A RR has value 23.76.44.152
	Found 1 RRSIGs over A RRset
	`defense.gov. 20 IN RRSIG ( A 7 2 20 20240519182750 20240516172750 2888 defense.gov. ARf2yPSXWvcRDrmpiJ3bI4PIMDluSyKsiiijJKutVO9IXIfsYdLy97l3PkRdH0bzIgpPgi2hQzaF mBXHlNJ7/k0Nuc0Eb2+JNjkPn/9mcc3VaICNJP0asjcDj6byMoo3ZFM8GMD/jx9JIW4oICnZaSvv 5F3DMSQ52fjFNp4vQLw= )`
	RRSIG=2888 and DNSKEY=2888 verifies the A RRset

defense.gov

	Query to asia2.akam.net for defense.gov/A
	Received 227 bytes from 95.101.36.64
	;; Response received from [95.101.36.64] 227 octets ;; HEADER SECTION ;; id = 9042 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 104.102.130.108 defense.gov. 20 IN RRSIG ( A 7 2 20 20240519182750 20240516172750 2888 defense.gov. xpJzTLwAKy5oPLyb3pH2UGKNm758AIbRRbZ3zoA6zUxu/0Be9jTIIUsDKPmPPjrDeckCniQdmJ0T MCoelBBUqmtfBnbxvw+KtdD4DIFEJdjeDHQk3LkL3VMcBmfhc6KbQ+uzSTW8MsQW2z0WajGPH9Va FwyLWXTFs3dOqdSuKZY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	asia2.akam.net is authoritative for defense.gov
	Found RRSIG signed by defense.gov zone
	Query to asia2.akam.net for defense.gov/A
	Received 227 bytes from 95.101.36.64
	;; Response received from [95.101.36.64] 227 octets ;; HEADER SECTION ;; id = 61380 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; defense.gov. IN A ;; ANSWER SECTION (2 records) defense.gov. 20 IN A 104.102.130.108 defense.gov. 20 IN RRSIG ( A 7 2 20 20240519182750 20240516172750 2888 defense.gov. xpJzTLwAKy5oPLyb3pH2UGKNm758AIbRRbZ3zoA6zUxu/0Be9jTIIUsDKPmPPjrDeckCniQdmJ0T MCoelBBUqmtfBnbxvw+KtdD4DIFEJdjeDHQk3LkL3VMcBmfhc6KbQ+uzSTW8MsQW2z0WajGPH9Va FwyLWXTFs3dOqdSuKZY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	defense.gov A RR has value 104.102.130.108
	Found 1 RRSIGs over A RRset
	`defense.gov. 20 IN RRSIG ( A 7 2 20 20240519182750 20240516172750 2888 defense.gov. xpJzTLwAKy5oPLyb3pH2UGKNm758AIbRRbZ3zoA6zUxu/0Be9jTIIUsDKPmPPjrDeckCniQdmJ0T MCoelBBUqmtfBnbxvw+KtdD4DIFEJdjeDHQk3LkL3VMcBmfhc6KbQ+uzSTW8MsQW2z0WajGPH9Va FwyLWXTFs3dOqdSuKZY= )`
	RRSIG=2888 and DNSKEY=2888 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test defense.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: