DNSSEC Debugger

Domain Name:

Time: 2024-05-19 19:27:04 UTC

Analyzing DNSSEC problems for gov.rw

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to e.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 864 octets ;; HEADER SECTION ;; id = 52168 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to d.root-servers.net for gov.rw/A
	Received 743 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 743 octets ;; HEADER SECTION ;; id = 6407 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 11 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.rw. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) rw. 172800 IN NS ans.dnsstudy.africa. rw. 172800 IN NS ns1.ricta.org.rw. rw. 172800 IN NS ns2.ricta.org.rw. rw. 172800 IN NS ns3.ricta.org.rw. rw. 172800 IN NS pch.ricta.org.rw. rw. 172800 IN NS fork.sth.dnsnode.net. rw. 172800 IN NS ns-rw.afrinic.net. rw. 86400 IN DS ( 39755 8 2 005f7a73f0609a69ca7736158490764e1a8dc0652ab1d0e327941af0fe673111 ) rw. 86400 IN RRSIG ( DS 8 1 86400 20240601170000 20240519160000 5613 . In+tao4O1rgsAg61cqvZ8m3hK2ihJerj5F7uzhFfI8BuLqrlyTsp4X29dI3TmFCJXQkTdw5PT51x QNaeWAN2olafQx+rUc6BACVxUhsbZbblpBD+o5TqVtczN9y0X+UuI238fOt+5vw0V8UZlwAGT5rE tiuVTvtuNHEsCDhZNvSDlRbBHslkLHlCoGmQ7R7HauID0wlT4XkrdyxHSq0HJrKhVBu/dl7pTaTr 815vA3g12DGy8RF7ccnYyLziFqMyzjWrikQnJTVrOeZx+6DgJxkHyBKNZPmpyNXHP6dMO2uNV9bB b9rm/GDNigK7rS/XDLuQKlkwVYnYnEMXQ4PNyQ== ) ;; ADDITIONAL SECTION (11 records) ans.dnsstudy.africa. 172800 IN A 192.96.24.69 ns1.ricta.org.rw. 172800 IN A 196.49.7.188 ns2.ricta.org.rw. 172800 IN A 196.49.7.186 ns3.ricta.org.rw. 172800 IN A 41.138.85.98 pch.ricta.org.rw. 172800 IN A 204.61.216.91 fork.sth.dnsnode.net. 172800 IN A 77.72.229.254 ns-rw.afrinic.net. 172800 IN A 196.216.168.28 pch.ricta.org.rw. 172800 IN AAAA 2001:500:14:6091:ad::1 fork.sth.dnsnode.net. 172800 IN AAAA 2a01:3f0:0:306::53 ns-rw.afrinic.net. 172800 IN AAAA 2001:43f8:120::28 ;; { "EDNS-VERSION": 0 }
	Query to m.root-servers.net for rw/DNSKEY
	Received 744 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 744 octets ;; HEADER SECTION ;; id = 31352 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 11 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; rw. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) rw. 172800 IN NS ns-rw.afrinic.net. rw. 172800 IN NS fork.sth.dnsnode.net. rw. 172800 IN NS ns2.ricta.org.rw. rw. 172800 IN NS ns1.ricta.org.rw. rw. 172800 IN NS ns3.ricta.org.rw. rw. 172800 IN NS pch.ricta.org.rw. rw. 172800 IN NS ans.dnsstudy.africa. rw. 86400 IN DS ( 39755 8 2 005f7a73f0609a69ca7736158490764e1a8dc0652ab1d0e327941af0fe673111 ) rw. 86400 IN RRSIG ( DS 8 1 86400 20240601170000 20240519160000 5613 . In+tao4O1rgsAg61cqvZ8m3hK2ihJerj5F7uzhFfI8BuLqrlyTsp4X29dI3TmFCJXQkTdw5PT51x QNaeWAN2olafQx+rUc6BACVxUhsbZbblpBD+o5TqVtczN9y0X+UuI238fOt+5vw0V8UZlwAGT5rE tiuVTvtuNHEsCDhZNvSDlRbBHslkLHlCoGmQ7R7HauID0wlT4XkrdyxHSq0HJrKhVBu/dl7pTaTr 815vA3g12DGy8RF7ccnYyLziFqMyzjWrikQnJTVrOeZx+6DgJxkHyBKNZPmpyNXHP6dMO2uNV9bB b9rm/GDNigK7rS/XDLuQKlkwVYnYnEMXQ4PNyQ== ) ;; ADDITIONAL SECTION (11 records) ns-rw.afrinic.net. 172800 IN A 196.216.168.28 fork.sth.dnsnode.net. 172800 IN A 77.72.229.254 pch.ricta.org.rw. 172800 IN A 204.61.216.91 ns3.ricta.org.rw. 172800 IN A 41.138.85.98 ns2.ricta.org.rw. 172800 IN A 196.49.7.186 ns1.ricta.org.rw. 172800 IN A 196.49.7.188 ans.dnsstudy.africa. 172800 IN A 192.96.24.69 ns-rw.afrinic.net. 172800 IN AAAA 2001:43f8:120::28 fork.sth.dnsnode.net. 172800 IN AAAA 2a01:3f0:0:306::53 pch.ricta.org.rw. 172800 IN AAAA 2001:500:14:6091:ad::1 ;; { "EDNS-VERSION": 0 }
	Found child zone rw

	Checking DS between . and rw
	Query to m.root-servers.net for rw/DS
	Received 366 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 366 octets ;; HEADER SECTION ;; id = 47655 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; rw. IN DS ;; ANSWER SECTION (2 records) rw. 86400 IN DS ( 39755 8 2 005f7a73f0609a69ca7736158490764e1a8dc0652ab1d0e327941af0fe673111 ) rw. 86400 IN RRSIG ( DS 8 1 86400 20240601170000 20240519160000 5613 . In+tao4O1rgsAg61cqvZ8m3hK2ihJerj5F7uzhFfI8BuLqrlyTsp4X29dI3TmFCJXQkTdw5PT51x QNaeWAN2olafQx+rUc6BACVxUhsbZbblpBD+o5TqVtczN9y0X+UuI238fOt+5vw0V8UZlwAGT5rE tiuVTvtuNHEsCDhZNvSDlRbBHslkLHlCoGmQ7R7HauID0wlT4XkrdyxHSq0HJrKhVBu/dl7pTaTr 815vA3g12DGy8RF7ccnYyLziFqMyzjWrikQnJTVrOeZx+6DgJxkHyBKNZPmpyNXHP6dMO2uNV9bB b9rm/GDNigK7rS/XDLuQKlkwVYnYnEMXQ4PNyQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for rw in the . zone
	DS=39755/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`rw. 86400 IN RRSIG ( DS 8 1 86400 20240601170000 20240519160000 5613 . In+tao4O1rgsAg61cqvZ8m3hK2ihJerj5F7uzhFfI8BuLqrlyTsp4X29dI3TmFCJXQkTdw5PT51x QNaeWAN2olafQx+rUc6BACVxUhsbZbblpBD+o5TqVtczN9y0X+UuI238fOt+5vw0V8UZlwAGT5rE tiuVTvtuNHEsCDhZNvSDlRbBHslkLHlCoGmQ7R7HauID0wlT4XkrdyxHSq0HJrKhVBu/dl7pTaTr 815vA3g12DGy8RF7ccnYyLziFqMyzjWrikQnJTVrOeZx+6DgJxkHyBKNZPmpyNXHP6dMO2uNV9bB b9rm/GDNigK7rS/XDLuQKlkwVYnYnEMXQ4PNyQ== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=39755/SHA-256 is now in the chain-of-trust
	`rw. 86400 IN DS ( 39755 8 2 005f7a73f0609a69ca7736158490764e1a8dc0652ab1d0e327941af0fe673111 )`
	Query to pch.ricta.org.rw for rw/DNSKEY
	Received 1385 bytes from 204.61.216.91
	;; Response received from [204.61.216.91] 1385 octets ;; HEADER SECTION ;; id = 19173 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; rw. IN DNSKEY ;; ANSWER SECTION (3 records) rw. 86400 IN DNSKEY ( 257 3 8 AwEAAYfqbnRj/mIRSs9dlLjqxOgKgwkEyYlpyIQIzkQ6rlK8qaGjU1g0wuPkMivEs8IXONNQmlp6 WYioJ+TIpYxh2Rwu1R6cDTwNwBcGaYZ7mJG1NFhvUpgOLJTMCrwvUa1LnBH0RCSP7USoMAZM2Mum rqawtAiW6zoMbpKhYCVsoWd97ctKn8on6497nmkUatosSvmpfsrprIKsNK+gwXE9cTd35s4B0CgE OQqRGNTi2KTVgXzIyb1tvedeVBdJeV/dw3WbN7KZjAtO7RL16EmR9xPzBEOFKn+35S5fUE6UCGKf D9o8Gqqs254+SnsAoKE5ZkjK2vNFqLBmAqdMkaFItbVneN0lSaGZkKQOGnA7tY2pTqTdO3qIvdmu eLeIw2QCRv3W8rRyq87Nhbt2qESGgxBKT7lk2xUnHuiKO4CWWJMKCe/hcD73anuY9kczoss7VD4X 8poIi4jTbRSEiz56kekZLml1P9Tl4PXSNOkS21Lqaqp1qsoDlFbhRMrj1rxqBQkds73fF8L3JBeE Rg2/J4XOZcWkg0PvNXcBSTtQYET6VwdB+heJCuw8OKLr/IyXoW0wJc+fxmnb/JEwBeWADxKiA11v B0E0k6c1twtpMAG1r4fPpjCZ+YjgsT3Sb4Ziy1fWH8WauwH6xXGk9yas9p8l+OYhkmxRAlWtnVfC zbGv ) ; Key ID = 39755 rw. 86400 IN DNSKEY ( 256 3 8 AwEAAan91OVNe47JMZ5SSU9d1WrX/dHZWxu24hGbP0KImKQJzIbahw7C314HdyWCnOnU7sjdZqRb l/16qF0Pzpuil7Jz/auXu3kwbryyz0aaKLjPXoretPLnH/rF4R6PC87zp6yGlQ8sRkyhocVB9Jpk 3EmBK5vv0b8fKhTc+mB+4BAQ36+rZsO/Glysn9U0XpfJ/dQ99AwGtEPnxR1EUxe0V6q6fOxgzJl5 AaI3n4jJ/jMCtXsoCtnrevugMVyC8l4tws8vrPtllBn6f+TImSxSaS/aLlJ6aAtYPmN0Rdt76E7z QANiHlB0nIMuQN4Zsd3KZGs2MdqUDPgCHNh7T173QBU= ) ; Key ID = 39054 rw. 86400 IN RRSIG ( DNSKEY 8 1 86400 20240528180000 20240511180000 39755 rw. ZYig3PDx1uNpBEFjyZnBBol9RniRtAA9B0mYjuGCRROhXpjAdFxA8q720f6l2Q2amXrD3Ba09MXU f6tzqy9afico73ue32hLY42WZIENi/SaOwIMA8DAmH5hHi9gOp+PSJoYT8Rg25GQ4rcCSM0iw1qI TuV4xKNTmDYIi7a6t98AX0JgpIafAtqw7EmVWadzRvlz2lGzI9+9QQfcisDBx7J+Y3cdjT2D6Q3G BF//XZJcwtsxa2defOJZmoaoQufufkqdmJezYUtntOR6pIU7LV4Ypvm1reRVvmuynoeqLVeqtDqo W3Y0CDx/SKcDL76mZALq5E9BEwUV1Hd1u2SUujCOIWUX3ESL2O8xSRQ4QPkOuA46nrV+VCm0mYwD L0L5Yi6xbX483NuweWGQvRhK+AmtZrigxrzRCv7x4wv+62ZBMW0JCiFv8SwQ321tN7d466IAJOPB 428E8IunAVN3IGOGDmpvN/hGvxTU4kOIRrdihAjtFOujsIRmGbBzQa6Uk+Enl+ZXg92XJrTH/32s bjG3L2E7mJOPVzCVZbXPAutlb/S1ho0RFZM8gzIMqXexR/VKwGc8v4M+210thE+ATnQtb9M89sH4 RxsTYZC5rnS3BVzVoKc+IsFkx/33ZcOEdQlkf90QMqAlO+kzcQpwxMkBgxEhi59TAny0JoE5E7A= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for rw
	rw. 86400 IN DNSKEY ( 257 3 8 AwEAAYfqbnRj/mIRSs9dlLjqxOgKgwkEyYlpyIQIzkQ6rlK8qaGjU1g0wuPkMivEs8IXONNQmlp6 WYioJ+TIpYxh2Rwu1R6cDTwNwBcGaYZ7mJG1NFhvUpgOLJTMCrwvUa1LnBH0RCSP7USoMAZM2Mum rqawtAiW6zoMbpKhYCVsoWd97ctKn8on6497nmkUatosSvmpfsrprIKsNK+gwXE9cTd35s4B0CgE OQqRGNTi2KTVgXzIyb1tvedeVBdJeV/dw3WbN7KZjAtO7RL16EmR9xPzBEOFKn+35S5fUE6UCGKf D9o8Gqqs254+SnsAoKE5ZkjK2vNFqLBmAqdMkaFItbVneN0lSaGZkKQOGnA7tY2pTqTdO3qIvdmu eLeIw2QCRv3W8rRyq87Nhbt2qESGgxBKT7lk2xUnHuiKO4CWWJMKCe/hcD73anuY9kczoss7VD4X 8poIi4jTbRSEiz56kekZLml1P9Tl4PXSNOkS21Lqaqp1qsoDlFbhRMrj1rxqBQkds73fF8L3JBeE Rg2/J4XOZcWkg0PvNXcBSTtQYET6VwdB+heJCuw8OKLr/IyXoW0wJc+fxmnb/JEwBeWADxKiA11v B0E0k6c1twtpMAG1r4fPpjCZ+YjgsT3Sb4Ziy1fWH8WauwH6xXGk9yas9p8l+OYhkmxRAlWtnVfC zbGv ) ; Key ID = 39755
	`rw. 86400 IN DNSKEY ( 256 3 8 AwEAAan91OVNe47JMZ5SSU9d1WrX/dHZWxu24hGbP0KImKQJzIbahw7C314HdyWCnOnU7sjdZqRb l/16qF0Pzpuil7Jz/auXu3kwbryyz0aaKLjPXoretPLnH/rF4R6PC87zp6yGlQ8sRkyhocVB9Jpk 3EmBK5vv0b8fKhTc+mB+4BAQ36+rZsO/Glysn9U0XpfJ/dQ99AwGtEPnxR1EUxe0V6q6fOxgzJl5 AaI3n4jJ/jMCtXsoCtnrevugMVyC8l4tws8vrPtllBn6f+TImSxSaS/aLlJ6aAtYPmN0Rdt76E7z QANiHlB0nIMuQN4Zsd3KZGs2MdqUDPgCHNh7T173QBU= ) ; Key ID = 39054`
	DNSKEY=39755/SEP is now in the chain-of-trust
	DS=39755/SHA-256 verifies DNSKEY=39755/SEP
	Found 1 RRSIGs over DNSKEY RRset
	rw. 86400 IN RRSIG ( DNSKEY 8 1 86400 20240528180000 20240511180000 39755 rw. ZYig3PDx1uNpBEFjyZnBBol9RniRtAA9B0mYjuGCRROhXpjAdFxA8q720f6l2Q2amXrD3Ba09MXU f6tzqy9afico73ue32hLY42WZIENi/SaOwIMA8DAmH5hHi9gOp+PSJoYT8Rg25GQ4rcCSM0iw1qI TuV4xKNTmDYIi7a6t98AX0JgpIafAtqw7EmVWadzRvlz2lGzI9+9QQfcisDBx7J+Y3cdjT2D6Q3G BF//XZJcwtsxa2defOJZmoaoQufufkqdmJezYUtntOR6pIU7LV4Ypvm1reRVvmuynoeqLVeqtDqo W3Y0CDx/SKcDL76mZALq5E9BEwUV1Hd1u2SUujCOIWUX3ESL2O8xSRQ4QPkOuA46nrV+VCm0mYwD L0L5Yi6xbX483NuweWGQvRhK+AmtZrigxrzRCv7x4wv+62ZBMW0JCiFv8SwQ321tN7d466IAJOPB 428E8IunAVN3IGOGDmpvN/hGvxTU4kOIRrdihAjtFOujsIRmGbBzQa6Uk+Enl+ZXg92XJrTH/32s bjG3L2E7mJOPVzCVZbXPAutlb/S1ho0RFZM8gzIMqXexR/VKwGc8v4M+210thE+ATnQtb9M89sH4 RxsTYZC5rnS3BVzVoKc+IsFkx/33ZcOEdQlkf90QMqAlO+kzcQpwxMkBgxEhi59TAny0JoE5E7A= )
	RRSIG=39755 and DNSKEY=39755/SEP verifies the DNSKEY RRset
	DNSKEY=39054 is now in the chain-of-trust
	Query to ns1.ricta.org.rw for gov.rw/A
	Received 896 bytes from 196.49.7.188
	;; Response received from [196.49.7.188] 896 octets ;; HEADER SECTION ;; id = 39229 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.rw. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov.rw. 86400 IN NS ns2.aos.rw. gov.rw. 86400 IN NS ns3.aos.rw. gov.rw. 86400 IN NS ns1.rdb.rw. 78RLR985NLBEQ96SIG9B784TTR1B82JR.rw. 1800 IN NSEC3 ( 1 1 10 5b8378f9 d232289l4u2773d6oo8ch9ait9m1iicg NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) 78RLR985NLBEQ96SIG9B784TTR1B82JR.rw. 1800 IN RRSIG ( NSEC3 8 2 1800 20240603150000 20240517150000 39054 rw. Uq1O9Ly8Ab+7zHD++FkEwjENYpgUtPk7WZxIJObMgeEe2rSoJQqjZ0mJ++0n5qQ3Vf3yA4Thltu+ w0I/xLGX//aEpdwBIVqKTWmQ/toCjzNr/j3Bu/+rWKmupJjD1hnnE2+3Cj76BdiVijkKZaHewTGp PZbHHVqX9KR9VyqHJGBEBRx5BQQspkcZe1bUvUJLhplNTxOJy5rEakomyF/F36XsOcIR/jBYmJ/Y nAFG5OVO2S/QitkuME5P6gPS9sjH4gR5EOKH4IBYq9hskhJddBczVNzHbx8CfO9WNStyWFHoLgsh 2FVU33u92YoZlg9cKWDhd5E36b0ydqtWL7/xPw== ) FAL8TA3GP03E5P76TJGHN69SIJL29DEF.rw. 1800 IN NSEC3 ( 1 1 10 5b8378f9 klq672v78hl0r0dd44kgb8p7qpcck7rj TXT RRSIG ) FAL8TA3GP03E5P76TJGHN69SIJL29DEF.rw. 1800 IN RRSIG ( NSEC3 8 2 1800 20240603150000 20240517150000 39054 rw. pVLYcL+A5AxturvEXeSFwFJBertdFwjbVxnFiRMyT/S9+bkUvfK5T7XbUmiu75ej8sFyhtJxc/Kp kZE5yCglNTwQgUoc0A6eigVK/mmzTv6aubxuHtM8tXQ57b5EBkiTRFx3j6myjyuivqLeNgUcjWuF btgTnrqBhGEw5MTP+l+RhCcAmQpNRGgURCRSJamvXLiOwUrP/tdc2IhIuOivQqOC9nNcu5vV336x nnEDTpPRg3Iu8lSQyf6ur2ESdvYiRPQ8BCqTRQtyK1z0DSZR+3PtO6jpTJkNq/iI9aMPn8F81lgO y2hDE7uoNaipHSZ+2O+197ERzCJNrthMcsJkEg== ) ;; ADDITIONAL SECTION (4 records) ns3.aos.rw. 1800 IN A 197.243.16.231 ns2.aos.rw. 1800 IN A 197.243.14.61 ns1.rdb.rw. 86400 IN A 41.74.172.61 ;; { "EDNS-VERSION": 0 }
	Query to fork.sth.dnsnode.net for gov.rw/DNSKEY
	Received 896 bytes from 77.72.229.254
	;; Response received from [77.72.229.254] 896 octets ;; HEADER SECTION ;; id = 60257 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.rw. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov.rw. 86400 IN NS ns2.aos.rw. gov.rw. 86400 IN NS ns3.aos.rw. gov.rw. 86400 IN NS ns1.rdb.rw. 78RLR985NLBEQ96SIG9B784TTR1B82JR.rw. 1800 IN NSEC3 ( 1 1 10 5b8378f9 d232289l4u2773d6oo8ch9ait9m1iicg NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) 78RLR985NLBEQ96SIG9B784TTR1B82JR.rw. 1800 IN RRSIG ( NSEC3 8 2 1800 20240603150000 20240517150000 39054 rw. Uq1O9Ly8Ab+7zHD++FkEwjENYpgUtPk7WZxIJObMgeEe2rSoJQqjZ0mJ++0n5qQ3Vf3yA4Thltu+ w0I/xLGX//aEpdwBIVqKTWmQ/toCjzNr/j3Bu/+rWKmupJjD1hnnE2+3Cj76BdiVijkKZaHewTGp PZbHHVqX9KR9VyqHJGBEBRx5BQQspkcZe1bUvUJLhplNTxOJy5rEakomyF/F36XsOcIR/jBYmJ/Y nAFG5OVO2S/QitkuME5P6gPS9sjH4gR5EOKH4IBYq9hskhJddBczVNzHbx8CfO9WNStyWFHoLgsh 2FVU33u92YoZlg9cKWDhd5E36b0ydqtWL7/xPw== ) FAL8TA3GP03E5P76TJGHN69SIJL29DEF.rw. 1800 IN NSEC3 ( 1 1 10 5b8378f9 klq672v78hl0r0dd44kgb8p7qpcck7rj TXT RRSIG ) FAL8TA3GP03E5P76TJGHN69SIJL29DEF.rw. 1800 IN RRSIG ( NSEC3 8 2 1800 20240603150000 20240517150000 39054 rw. pVLYcL+A5AxturvEXeSFwFJBertdFwjbVxnFiRMyT/S9+bkUvfK5T7XbUmiu75ej8sFyhtJxc/Kp kZE5yCglNTwQgUoc0A6eigVK/mmzTv6aubxuHtM8tXQ57b5EBkiTRFx3j6myjyuivqLeNgUcjWuF btgTnrqBhGEw5MTP+l+RhCcAmQpNRGgURCRSJamvXLiOwUrP/tdc2IhIuOivQqOC9nNcu5vV336x nnEDTpPRg3Iu8lSQyf6ur2ESdvYiRPQ8BCqTRQtyK1z0DSZR+3PtO6jpTJkNq/iI9aMPn8F81lgO y2hDE7uoNaipHSZ+2O+197ERzCJNrthMcsJkEg== ) ;; ADDITIONAL SECTION (4 records) ns3.aos.rw. 1800 IN A 197.243.16.231 ns2.aos.rw. 1800 IN A 197.243.14.61 ns1.rdb.rw. 86400 IN A 41.74.172.61 ;; { "EDNS-VERSION": 0 }
	Found child zone gov.rw

gov.rw

	Checking DS between rw and gov.rw
	Query to fork.sth.dnsnode.net for gov.rw/DS
	Received 1134 bytes from 77.72.229.254
	;; Response received from [77.72.229.254] 1134 octets ;; HEADER SECTION ;; id = 27770 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.rw. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) 78RLR985NLBEQ96SIG9B784TTR1B82JR.rw. 1800 IN NSEC3 ( 1 1 10 5b8378f9 d232289l4u2773d6oo8ch9ait9m1iicg NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) 78RLR985NLBEQ96SIG9B784TTR1B82JR.rw. 1800 IN RRSIG ( NSEC3 8 2 1800 20240603150000 20240517150000 39054 rw. Uq1O9Ly8Ab+7zHD++FkEwjENYpgUtPk7WZxIJObMgeEe2rSoJQqjZ0mJ++0n5qQ3Vf3yA4Thltu+ w0I/xLGX//aEpdwBIVqKTWmQ/toCjzNr/j3Bu/+rWKmupJjD1hnnE2+3Cj76BdiVijkKZaHewTGp PZbHHVqX9KR9VyqHJGBEBRx5BQQspkcZe1bUvUJLhplNTxOJy5rEakomyF/F36XsOcIR/jBYmJ/Y nAFG5OVO2S/QitkuME5P6gPS9sjH4gR5EOKH4IBYq9hskhJddBczVNzHbx8CfO9WNStyWFHoLgsh 2FVU33u92YoZlg9cKWDhd5E36b0ydqtWL7/xPw== ) rw. 1800 IN SOA ( registry.ricta.org.rw. info.ricta.org.rw. 2024051919 ;serial 86400 ;refresh 7200 ;retry 604800 ;expire 1800 ;minimum ) rw. 1800 IN RRSIG ( SOA 8 1 1800 20240603150000 20240517150000 39054 rw. SH5KzRqjN88tNJ+QNSPfmhsqxjwxYBjRWOJsVGa86IOgQ7P8HgFQtkgwvHHY05p6TxBZZu6h5xEN 5zeeL5jghuhIdEnJMYmgoyeL6CBtdFeAVDt1QRCkecT5/M3eYhViBIJJkYGQqGiN3BURd5vEEJfI P7qFDoSpVJW4VtTdJaGezWPtJzGdxAPlhM0BxfsHg6vWb80oOvDl8pi7LUUdXr33EC2C0t8be7PW ZPQtwZ3NftijTfcQmqBWqgfHFCoPRVIcsDfXVd0XdGWEnQDexmQX/nw7XkQjhChwpi0pjKhBQ7md GI6s0OI8KHugq74y7InfEAcLu2rlhLPCllC18A== ) FAL8TA3GP03E5P76TJGHN69SIJL29DEF.rw. 1800 IN NSEC3 ( 1 1 10 5b8378f9 klq672v78hl0r0dd44kgb8p7qpcck7rj TXT RRSIG ) FAL8TA3GP03E5P76TJGHN69SIJL29DEF.rw. 1800 IN RRSIG ( NSEC3 8 2 1800 20240603150000 20240517150000 39054 rw. pVLYcL+A5AxturvEXeSFwFJBertdFwjbVxnFiRMyT/S9+bkUvfK5T7XbUmiu75ej8sFyhtJxc/Kp kZE5yCglNTwQgUoc0A6eigVK/mmzTv6aubxuHtM8tXQ57b5EBkiTRFx3j6myjyuivqLeNgUcjWuF btgTnrqBhGEw5MTP+l+RhCcAmQpNRGgURCRSJamvXLiOwUrP/tdc2IhIuOivQqOC9nNcu5vV336x nnEDTpPRg3Iu8lSQyf6ur2ESdvYiRPQ8BCqTRQtyK1z0DSZR+3PtO6jpTJkNq/iI9aMPn8F81lgO y2hDE7uoNaipHSZ+2O+197ERzCJNrthMcsJkEg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for gov.rw in the rw zone
	Query to ns1.rdb.rw for gov.rw/DNSKEY
	Received 87 bytes from 41.74.172.61
	;; Response received from [41.74.172.61] 87 octets ;; HEADER SECTION ;; id = 6468 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.rw. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) gov.rw. 86400 IN SOA ( ns1.rdb.rw. hosting.rdb.rw. 2024040200 ;serial 10800 ;refresh 900 ;retry 604800 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns1.rdb.rw for gov.rw/A
	Received 161 bytes from 41.74.172.61
	;; Response received from [41.74.172.61] 161 octets ;; HEADER SECTION ;; id = 23409 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.rw. IN A ;; ANSWER SECTION (1 record) gov.rw. 86400 IN A 197.243.22.155 ;; AUTHORITY SECTION (3 records) gov.rw. 86400 IN NS ns3.aos.rw. gov.rw. 86400 IN NS ns2.aos.rw. gov.rw. 86400 IN NS ns1.rdb.rw. ;; ADDITIONAL SECTION (4 records) ns1.rdb.rw. 3260 IN A 41.74.172.61 ns2.aos.rw. 60 IN A 197.243.14.61 ns3.aos.rw. 60 IN A 197.243.16.231 ;; { "EDNS-VERSION": 0 }
	ns1.rdb.rw is authoritative for gov.rw
	Query to ns3.aos.rw for gov.rw/SOA
	Received 189 bytes from 197.243.16.231
	;; Response received from [197.243.16.231] 189 octets ;; HEADER SECTION ;; id = 54825 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.rw. IN SOA ;; ANSWER SECTION (1 record) gov.rw. 86400 IN SOA ( ns1.rdb.rw. hosting.rdb.rw. 2024040200 ;serial 10800 ;refresh 900 ;retry 604800 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (3 records) gov.rw. 86400 IN NS ns3.aos.rw. gov.rw. 86400 IN NS ns2.aos.rw. gov.rw. 86400 IN NS ns1.rdb.rw. ;; ADDITIONAL SECTION (4 records) ns1.rdb.rw. 3260 IN A 41.74.172.61 ns2.aos.rw. 60 IN A 197.243.14.61 ns3.aos.rw. 60 IN A 197.243.16.231 ;; { "EDNS-VERSION": 0 }
	Query to ns2.aos.rw for gov.rw/SOA
	Received 189 bytes from 197.243.14.61
	;; Response received from [197.243.14.61] 189 octets ;; HEADER SECTION ;; id = 41966 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.rw. IN SOA ;; ANSWER SECTION (1 record) gov.rw. 86400 IN SOA ( ns1.rdb.rw. hosting.rdb.rw. 2024040200 ;serial 10800 ;refresh 900 ;retry 604800 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (3 records) gov.rw. 86400 IN NS ns1.rdb.rw. gov.rw. 86400 IN NS ns2.aos.rw. gov.rw. 86400 IN NS ns3.aos.rw. ;; ADDITIONAL SECTION (4 records) ns1.rdb.rw. 3260 IN A 41.74.172.61 ns2.aos.rw. 60 IN A 197.243.14.61 ns3.aos.rw. 60 IN A 197.243.16.231 ;; { "EDNS-VERSION": 0 }
	Query to ns1.rdb.rw for gov.rw/A
	Received 161 bytes from 41.74.172.61
	;; Response received from [41.74.172.61] 161 octets ;; HEADER SECTION ;; id = 64639 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.rw. IN A ;; ANSWER SECTION (1 record) gov.rw. 86400 IN A 197.243.22.155 ;; AUTHORITY SECTION (3 records) gov.rw. 86400 IN NS ns2.aos.rw. gov.rw. 86400 IN NS ns1.rdb.rw. gov.rw. 86400 IN NS ns3.aos.rw. ;; ADDITIONAL SECTION (4 records) ns1.rdb.rw. 3260 IN A 41.74.172.61 ns2.aos.rw. 60 IN A 197.243.14.61 ns3.aos.rw. 60 IN A 197.243.16.231 ;; { "EDNS-VERSION": 0 }
	gov.rw A RR has value 197.243.22.155
	No RRSIGs found

gov.rw

	Query to ns3.aos.rw for gov.rw/A
	Received 161 bytes from 197.243.16.231
	;; Response received from [197.243.16.231] 161 octets ;; HEADER SECTION ;; id = 1937 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.rw. IN A ;; ANSWER SECTION (1 record) gov.rw. 86400 IN A 197.243.22.155 ;; AUTHORITY SECTION (3 records) gov.rw. 86400 IN NS ns1.rdb.rw. gov.rw. 86400 IN NS ns2.aos.rw. gov.rw. 86400 IN NS ns3.aos.rw. ;; ADDITIONAL SECTION (4 records) ns1.rdb.rw. 3260 IN A 41.74.172.61 ns2.aos.rw. 60 IN A 197.243.14.61 ns3.aos.rw. 60 IN A 197.243.16.231 ;; { "EDNS-VERSION": 0 }
	ns3.aos.rw is authoritative for gov.rw
	Query to ns3.aos.rw for gov.rw/A
	Received 161 bytes from 197.243.16.231
	;; Response received from [197.243.16.231] 161 octets ;; HEADER SECTION ;; id = 46781 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.rw. IN A ;; ANSWER SECTION (1 record) gov.rw. 86400 IN A 197.243.22.155 ;; AUTHORITY SECTION (3 records) gov.rw. 86400 IN NS ns1.rdb.rw. gov.rw. 86400 IN NS ns3.aos.rw. gov.rw. 86400 IN NS ns2.aos.rw. ;; ADDITIONAL SECTION (4 records) ns1.rdb.rw. 3260 IN A 41.74.172.61 ns2.aos.rw. 60 IN A 197.243.14.61 ns3.aos.rw. 60 IN A 197.243.16.231 ;; { "EDNS-VERSION": 0 }
	gov.rw A RR has value 197.243.22.155
	No RRSIGs found

gov.rw

	Query to ns2.aos.rw for gov.rw/A
	Received 161 bytes from 197.243.14.61
	;; Response received from [197.243.14.61] 161 octets ;; HEADER SECTION ;; id = 30146 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.rw. IN A ;; ANSWER SECTION (1 record) gov.rw. 86400 IN A 197.243.22.155 ;; AUTHORITY SECTION (3 records) gov.rw. 86400 IN NS ns3.aos.rw. gov.rw. 86400 IN NS ns2.aos.rw. gov.rw. 86400 IN NS ns1.rdb.rw. ;; ADDITIONAL SECTION (4 records) ns1.rdb.rw. 3260 IN A 41.74.172.61 ns2.aos.rw. 60 IN A 197.243.14.61 ns3.aos.rw. 60 IN A 197.243.16.231 ;; { "EDNS-VERSION": 0 }
	ns2.aos.rw is authoritative for gov.rw
	Query to ns2.aos.rw for gov.rw/A
	Received 161 bytes from 197.243.14.61
	;; Response received from [197.243.14.61] 161 octets ;; HEADER SECTION ;; id = 16033 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.rw. IN A ;; ANSWER SECTION (1 record) gov.rw. 86400 IN A 197.243.22.155 ;; AUTHORITY SECTION (3 records) gov.rw. 86400 IN NS ns3.aos.rw. gov.rw. 86400 IN NS ns2.aos.rw. gov.rw. 86400 IN NS ns1.rdb.rw. ;; ADDITIONAL SECTION (4 records) ns1.rdb.rw. 3260 IN A 41.74.172.61 ns2.aos.rw. 60 IN A 197.243.14.61 ns3.aos.rw. 60 IN A 197.243.16.231 ;; { "EDNS-VERSION": 0 }
	gov.rw A RR has value 197.243.22.155
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test gov.rw at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: