DNSSEC Debugger - openworld.gov

Domain Name:

Time: 2024-05-21 20:19:09 UTC

Analyzing DNSSEC problems for openworld.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to i.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 865 octets ;; HEADER SECTION ;; id = 8712 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240611000000 20240521000000 20326 . W/Hsuxwei6HE8IzojCIwmIP/lrqd6TZmm1cv7VEm7bjqgUyc5FBDUSNxWfIQiwLTn+Xqk8ZVG/68 0XZptzkT2ZxyXwK7AGFAvGrKiFBertupXxU7I5uYs27GPOnnKwlA5ZrUJW0AK66XIKMb+qVMHa7C 2agO1VOsAUSDeZtR8XJmJbzIMZN2GBlSowjWe90CX0jU+ncr58MOYEiI6N2JsWJi4gU546OrmhJd hEnPGDX/gPF5OjrgDZER2+PyjSEGdxdP0nbqlBcC39aLm3lfHNNJDzC+dxgL04qt1RiTTPhDbuMp hE2l6WxjC9N8wWzM+h0IKgDMc2oVSc4B+U5Kjw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240611000000 20240521000000 20326 . W/Hsuxwei6HE8IzojCIwmIP/lrqd6TZmm1cv7VEm7bjqgUyc5FBDUSNxWfIQiwLTn+Xqk8ZVG/68 0XZptzkT2ZxyXwK7AGFAvGrKiFBertupXxU7I5uYs27GPOnnKwlA5ZrUJW0AK66XIKMb+qVMHa7C 2agO1VOsAUSDeZtR8XJmJbzIMZN2GBlSowjWe90CX0jU+ncr58MOYEiI6N2JsWJi4gU546OrmhJd hEnPGDX/gPF5OjrgDZER2+PyjSEGdxdP0nbqlBcC39aLm3lfHNNJDzC+dxgL04qt1RiTTPhDbuMp hE2l6WxjC9N8wWzM+h0IKgDMc2oVSc4B+U5Kjw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to g.root-servers.net for openworld.gov/A
	Received 623 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 623 octets ;; HEADER SECTION ;; id = 5389 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; openworld.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240603170000 20240521160000 5613 . j2aPdAYvQu/EiFR4UEapI2Tu6iZnSZW6mtFHMpvk0x+9tq4cQWRMs1SeI1AmPdfYPbtQMM+K0SID 6y8GigUDLOR9uAfGleO3YWzhg1gYyAYVZlf4lY4T6lSoQryJn0ZtYpoEoCMmichaaAV1wecmOJnA ooRiLubpvZiSaCaptMDZ/YDVS3F2mVlP+RbKPeNfGTadYNXSJKjIMqzNk9CahwDY8uIrsPtKLcGP SU7/hw7eMaJgv8WmhTzMb5Dh9BaASeYI/guXaEK9vhj6IKOwI5CO2NSx/9QmgYYmB1FQU1xDAMAv YsJrl/dFhBURGB5o421IT7eQjFEpG5hAqVvqsA== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Query to m.root-servers.net for gov/DNSKEY
	Received 613 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 613 octets ;; HEADER SECTION ;; id = 33767 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240603170000 20240521160000 5613 . j2aPdAYvQu/EiFR4UEapI2Tu6iZnSZW6mtFHMpvk0x+9tq4cQWRMs1SeI1AmPdfYPbtQMM+K0SID 6y8GigUDLOR9uAfGleO3YWzhg1gYyAYVZlf4lY4T6lSoQryJn0ZtYpoEoCMmichaaAV1wecmOJnA ooRiLubpvZiSaCaptMDZ/YDVS3F2mVlP+RbKPeNfGTadYNXSJKjIMqzNk9CahwDY8uIrsPtKLcGP SU7/hw7eMaJgv8WmhTzMb5Dh9BaASeYI/guXaEK9vhj6IKOwI5CO2NSx/9QmgYYmB1FQU1xDAMAv YsJrl/dFhBURGB5o421IT7eQjFEpG5hAqVvqsA== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to k.root-servers.net for gov/DS
	Received 367 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 367 octets ;; HEADER SECTION ;; id = 15191 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240603170000 20240521160000 5613 . j2aPdAYvQu/EiFR4UEapI2Tu6iZnSZW6mtFHMpvk0x+9tq4cQWRMs1SeI1AmPdfYPbtQMM+K0SID 6y8GigUDLOR9uAfGleO3YWzhg1gYyAYVZlf4lY4T6lSoQryJn0ZtYpoEoCMmichaaAV1wecmOJnA ooRiLubpvZiSaCaptMDZ/YDVS3F2mVlP+RbKPeNfGTadYNXSJKjIMqzNk9CahwDY8uIrsPtKLcGP SU7/hw7eMaJgv8WmhTzMb5Dh9BaASeYI/guXaEK9vhj6IKOwI5CO2NSx/9QmgYYmB1FQU1xDAMAv YsJrl/dFhBURGB5o421IT7eQjFEpG5hAqVvqsA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=64280/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20240603170000 20240521160000 5613 . j2aPdAYvQu/EiFR4UEapI2Tu6iZnSZW6mtFHMpvk0x+9tq4cQWRMs1SeI1AmPdfYPbtQMM+K0SID 6y8GigUDLOR9uAfGleO3YWzhg1gYyAYVZlf4lY4T6lSoQryJn0ZtYpoEoCMmichaaAV1wecmOJnA ooRiLubpvZiSaCaptMDZ/YDVS3F2mVlP+RbKPeNfGTadYNXSJKjIMqzNk9CahwDY8uIrsPtKLcGP SU7/hw7eMaJgv8WmhTzMb5Dh9BaASeYI/guXaEK9vhj6IKOwI5CO2NSx/9QmgYYmB1FQU1xDAMAv YsJrl/dFhBURGB5o421IT7eQjFEpG5hAqVvqsA== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=64280/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 )`
	Query to a.ns.gov for gov/DNSKEY
	Received 1038 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 1038 octets ;; HEADER SECTION ;; id = 6839 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (6 records) gov. 3600 IN DNSKEY ( 257 3 8 AwEAAZp0vliR0TOBCJXmdagY36BI5ZveSPE3OSrcXKDs8IZa86x1+gwbheJcfLB6Fw6cWYUXaNgA mFcbxqIqWc5VJSyPS9yCPdEOLEIiegwCmcWnNsEyc0snKTyypXnvJ5JNhoznpFILDqlksAqP/aiq 1/l0w8TMkRbRrViLrJ1ayaScZ0nn/ge5wNpX09T9RI+gF1OIMJDdgH1vi0a+t6smSy4pUrerFTsu y8JAL+PP85MZiOssT9yoERfWSjFKde6PrQX5vj090AxT+hztb+q2EFXnF1a2L73/3UarB19k5NR3 MT1uM7ddag64Q0lg3aTy3MglDCzP7/StUxdeyL5qIX8= ) ; Key ID = 64280 gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; Key ID = 2536 gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcbYvlY667qXEzHsDTkft9cgKy5F0S9CAP+aFK9+sJumGqvpMaOyOzsilJ+OSVFhopJ1aRFp CUpLVIcVJ3E3YATGpzB45M0D5c4oJ0RjEIUakBwcPghmSW8K1GPqj/eUs4fbVPytXwtwvUll9Lxf gUvi5DA6xD6d2ckwDyRxfcMhXYydr2hIsgfrBLmRDMi4BkxMvA23eShPd/tPvnR0gJk= ) ; Key ID = 10104 gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; Key ID = 35496 gov. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240720152440 20240520152440 64280 gov. beqATvQPKeTKpMHslZwJz4cEMNG/M7MNcNstf5X4xRUMwwvmQ55ZVHAunrvdS4vDzgy6PMy7l/DR ZxIygJtz/FHRqD7WEYxj8hfFoz2IZd/PBzA4dnIA7GS525I6Sz8RlvMUw4ymziITotDm+7IMuBTu MQ266jXfYum+z8DRJjSqsr23j9aB4M4q5wOZWN2/WVBL8wr+CVxRY3MZOF48OacDyYSpG0xkgUiK DyBpyZ8PXT36LFk2aIkbQJF1onbYz1d8hMDap7IiLuzdOAkYU1pC24HgTNmXdhwinRhFePh5SW8A vtgKjQQdCkHsHyvkyzIjVfiaaK25Muvt3Eilfw== ) gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240720152440 20240520152440 2536 gov. ar9xV2CFzuHySpzh+HX9s8aq68NgE7z0vjYoYWN167QFWeUhlDU4u8hFHQ/C0cFR9XagtNeicnqp qdANIQhGXQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 8 AwEAAZp0vliR0TOBCJXmdagY36BI5ZveSPE3OSrcXKDs8IZa86x1+gwbheJcfLB6Fw6cWYUXaNgA mFcbxqIqWc5VJSyPS9yCPdEOLEIiegwCmcWnNsEyc0snKTyypXnvJ5JNhoznpFILDqlksAqP/aiq 1/l0w8TMkRbRrViLrJ1ayaScZ0nn/ge5wNpX09T9RI+gF1OIMJDdgH1vi0a+t6smSy4pUrerFTsu y8JAL+PP85MZiOssT9yoERfWSjFKde6PrQX5vj090AxT+hztb+q2EFXnF1a2L73/3UarB19k5NR3 MT1uM7ddag64Q0lg3aTy3MglDCzP7/StUxdeyL5qIX8= ) ; Key ID = 64280`
	`gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; Key ID = 2536`
	`gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcbYvlY667qXEzHsDTkft9cgKy5F0S9CAP+aFK9+sJumGqvpMaOyOzsilJ+OSVFhopJ1aRFp CUpLVIcVJ3E3YATGpzB45M0D5c4oJ0RjEIUakBwcPghmSW8K1GPqj/eUs4fbVPytXwtwvUll9Lxf gUvi5DA6xD6d2ckwDyRxfcMhXYydr2hIsgfrBLmRDMi4BkxMvA23eShPd/tPvnR0gJk= ) ; Key ID = 10104`
	`gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; Key ID = 35496`
	DNSKEY=64280/SEP is now in the chain-of-trust
	DS=64280/SHA-256 verifies DNSKEY=64280/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240720152440 20240520152440 64280 gov. beqATvQPKeTKpMHslZwJz4cEMNG/M7MNcNstf5X4xRUMwwvmQ55ZVHAunrvdS4vDzgy6PMy7l/DR ZxIygJtz/FHRqD7WEYxj8hfFoz2IZd/PBzA4dnIA7GS525I6Sz8RlvMUw4ymziITotDm+7IMuBTu MQ266jXfYum+z8DRJjSqsr23j9aB4M4q5wOZWN2/WVBL8wr+CVxRY3MZOF48OacDyYSpG0xkgUiK DyBpyZ8PXT36LFk2aIkbQJF1onbYz1d8hMDap7IiLuzdOAkYU1pC24HgTNmXdhwinRhFePh5SW8A vtgKjQQdCkHsHyvkyzIjVfiaaK25Muvt3Eilfw== )`
	`gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240720152440 20240520152440 2536 gov. ar9xV2CFzuHySpzh+HX9s8aq68NgE7z0vjYoYWN167QFWeUhlDU4u8hFHQ/C0cFR9XagtNeicnqp qdANIQhGXQ== )`
	RRSIG=64280 and DNSKEY=64280/SEP verifies the DNSKEY RRset
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=2536/SEP is now in the chain-of-trust
	DNSKEY=10104 is now in the chain-of-trust
	DNSKEY=35496 is now in the chain-of-trust
	Query to c.ns.gov for openworld.gov/A
	Received 649 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 649 octets ;; HEADER SECTION ;; id = 60817 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 10 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; openworld.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) openworld.gov. 10800 IN NS oxygen.house.gov. openworld.gov. 10800 IN NS oxygen2.house.gov. openworld.gov. 10800 IN NS pdns109.ultradns.biz. openworld.gov. 10800 IN NS pdns109.ultradns.com. openworld.gov. 10800 IN NS pdns109.ultradns.net. openworld.gov. 10800 IN NS pdns109.ultradns.org. openworld.gov. 3600 IN DS ( 48295 8 2 59d27d6ac9652f5a5e1ecf84e02d5a522e1817d4fa85df6f4c90c12704100c70 ) openworld.gov. 3600 IN DS ( 51172 8 2 897559d66d472343c28831aa371516d9afd552184349a975d32fada7c9c02ae7 ) openworld.gov. 3600 IN RRSIG ( DS 8 2 3600 20240522211909 20240520191909 10104 gov. bKzNgU/qVT/KOCRKKzcyZbO6C5/fKxqETaP1HSJAYzAd1CNu38x1aYdmFIh3DllnWajvEpw+xzca NXmGJhr8HtbCQAgtoNhjjoLdJ4h40qDOGGD+MsllRXQzcXkjC8b4HnIVHtbztCqDQUkc03hu6/Az /u0samUeXAdwmgPfRxbBqdfr9+lXhb5b3j+SpkXm1jZrNVH8Lu+YE3YhRD4DVg== ) openworld.gov. 3600 IN RRSIG ( DS 13 2 3600 20240522211909 20240520191909 35496 gov. wc9ZJRej3aZsgRwL7xAgN97XJtP8qnM8cmPCdQJWkk34lwKqVNAe+7Lf/TPXxBdcWr22TBjFHwXw vePa3BnCXA== ) ;; ADDITIONAL SECTION (3 records) oxygen.house.gov. 3600 IN A 216.218.141.197 oxygen2.house.gov. 3600 IN A 184.105.22.101 ;; { "EDNS-VERSION": 0 }
	Query to a.ns.gov for openworld.gov/DNSKEY
	Received 649 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 649 octets ;; HEADER SECTION ;; id = 18139 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 10 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; openworld.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) openworld.gov. 10800 IN NS oxygen.house.gov. openworld.gov. 10800 IN NS oxygen2.house.gov. openworld.gov. 10800 IN NS pdns109.ultradns.biz. openworld.gov. 10800 IN NS pdns109.ultradns.com. openworld.gov. 10800 IN NS pdns109.ultradns.net. openworld.gov. 10800 IN NS pdns109.ultradns.org. openworld.gov. 3600 IN DS ( 48295 8 2 59d27d6ac9652f5a5e1ecf84e02d5a522e1817d4fa85df6f4c90c12704100c70 ) openworld.gov. 3600 IN DS ( 51172 8 2 897559d66d472343c28831aa371516d9afd552184349a975d32fada7c9c02ae7 ) openworld.gov. 3600 IN RRSIG ( DS 8 2 3600 20240522211909 20240520191909 10104 gov. bKzNgU/qVT/KOCRKKzcyZbO6C5/fKxqETaP1HSJAYzAd1CNu38x1aYdmFIh3DllnWajvEpw+xzca NXmGJhr8HtbCQAgtoNhjjoLdJ4h40qDOGGD+MsllRXQzcXkjC8b4HnIVHtbztCqDQUkc03hu6/Az /u0samUeXAdwmgPfRxbBqdfr9+lXhb5b3j+SpkXm1jZrNVH8Lu+YE3YhRD4DVg== ) openworld.gov. 3600 IN RRSIG ( DS 13 2 3600 20240522211909 20240520191909 35496 gov. r2bOxFvg8p9qlDPYMWDssA+tdeULrlQeXAQFfCHg11lquslwOYd6fMn+OO40uftPxP/iAN0MGQCL y8CRrPLjOA== ) ;; ADDITIONAL SECTION (3 records) oxygen.house.gov. 3600 IN A 216.218.141.197 oxygen2.house.gov. 3600 IN A 184.105.22.101 ;; { "EDNS-VERSION": 0 }
	Found child zone openworld.gov

openworld.gov

	Checking DS between gov and openworld.gov
	Query to a.ns.gov for openworld.gov/DS
	Received 432 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 432 octets ;; HEADER SECTION ;; id = 27326 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; openworld.gov. IN DS ;; ANSWER SECTION (4 records) openworld.gov. 3600 IN DS ( 48295 8 2 59d27d6ac9652f5a5e1ecf84e02d5a522e1817d4fa85df6f4c90c12704100c70 ) openworld.gov. 3600 IN DS ( 51172 8 2 897559d66d472343c28831aa371516d9afd552184349a975d32fada7c9c02ae7 ) openworld.gov. 3600 IN RRSIG ( DS 8 2 3600 20240522211909 20240520191909 10104 gov. bKzNgU/qVT/KOCRKKzcyZbO6C5/fKxqETaP1HSJAYzAd1CNu38x1aYdmFIh3DllnWajvEpw+xzca NXmGJhr8HtbCQAgtoNhjjoLdJ4h40qDOGGD+MsllRXQzcXkjC8b4HnIVHtbztCqDQUkc03hu6/Az /u0samUeXAdwmgPfRxbBqdfr9+lXhb5b3j+SpkXm1jZrNVH8Lu+YE3YhRD4DVg== ) openworld.gov. 3600 IN RRSIG ( DS 13 2 3600 20240522211909 20240520191909 35496 gov. XxZ7SJiFlkHGcKKfkYQgoGxSvgfWAn/tgB4bHNsXoTa9MTFex8LjMWzplsocYJw6+f0+3fzoJIQ7 AmCsJXN7Og== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for openworld.gov in the gov zone
	DS=48295/SHA-256 has algorithm RSASHA256
	DS=51172/SHA-256 has algorithm RSASHA256
	Found 2 RRSIGs over DS RRset
	`openworld.gov. 3600 IN RRSIG ( DS 8 2 3600 20240522211909 20240520191909 10104 gov. bKzNgU/qVT/KOCRKKzcyZbO6C5/fKxqETaP1HSJAYzAd1CNu38x1aYdmFIh3DllnWajvEpw+xzca NXmGJhr8HtbCQAgtoNhjjoLdJ4h40qDOGGD+MsllRXQzcXkjC8b4HnIVHtbztCqDQUkc03hu6/Az /u0samUeXAdwmgPfRxbBqdfr9+lXhb5b3j+SpkXm1jZrNVH8Lu+YE3YhRD4DVg== )`
	`openworld.gov. 3600 IN RRSIG ( DS 13 2 3600 20240522211909 20240520191909 35496 gov. XxZ7SJiFlkHGcKKfkYQgoGxSvgfWAn/tgB4bHNsXoTa9MTFex8LjMWzplsocYJw6+f0+3fzoJIQ7 AmCsJXN7Og== )`
	RRSIG=10104 and DNSKEY=10104 verifies the DS RRset
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=48295/SHA-256 is now in the chain-of-trust
	DS=51172/SHA-256 is now in the chain-of-trust
	`openworld.gov. 3600 IN DS ( 48295 8 2 59d27d6ac9652f5a5e1ecf84e02d5a522e1817d4fa85df6f4c90c12704100c70 )`
	`openworld.gov. 3600 IN DS ( 51172 8 2 897559d66d472343c28831aa371516d9afd552184349a975d32fada7c9c02ae7 )`
	Query to oxygen.house.gov for openworld.gov/DNSKEY
	Received 1813 bytes from 216.218.141.197
	;; Response received from [216.218.141.197] 1813 octets ;; HEADER SECTION ;; id = 49934 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; openworld.gov. IN DNSKEY ;; ANSWER SECTION (8 records) openworld.gov. 259200 IN DNSKEY ( 256 3 8 AwEAAdsoA656PeDBMS1bDOUFSHCdX5J86qxlsqX0FNAOHoHjpS4rOKGa+DopFP1S3Fopsny3TMUY na85nl/M3uZvZVkNyFpOnqb+YykpCIwYW1hamFbAxueAz6lDCb+iWRHpSyofCMQ5Ep4Xz4S2iFlp TF2FMLO3679oDW+RGYOvdSE3 ) ; Key ID = 48594 openworld.gov. 259200 IN DNSKEY ( 256 3 8 AwEAAcWFPGK/TwF5nsWvJn2cjlH/zS1kfdkNbQG0wxW8eq4dxNylKq5XHzioQp+2oi20JAskynxj In9Hlez+wJxp6eIxrOhsPuayQvP+gmeDPU6XxN1H3gTFdHI1woHcG6iHOg9GkuNCuBMQ/jedIGwU l09aeRYb4RU3ZgAkXGPkCmdp ) ; Key ID = 45060 openworld.gov. 259200 IN DNSKEY ( 256 3 8 AwEAAegjgxA64FvqVV/Gl+s8rBbaMTAkICSdJlgrTl332wLYCgMRwjH8JKnaS48hP9M1EqBYjY8+ U8aUT7AIAHHcaUiOlqoxPbNb48jMVFX7PUvukRmJYz0QFTgleI8zz9k8gmeKcLi2AX4RmTIx5Sol +em0KSyZlRXqsAnL9JXEFQsd ) ; Key ID = 27048 openworld.gov. 259200 IN DNSKEY ( 257 3 8 AwEAAcdZ3qbDvv1F11hY09R4U0ay8x82GKkryiOBGGT3c99GzBbVar7Zo/gkr9uspchSjSNiLIaj VfYuY6+NtDfw5L+5JgdZOP5evypXHg/mcjnMRi6fatCyeotrUmKlk5Idl+lUh9SHkHCnT/SHsKMK DRCY29VoiG1GYMqE35cNHmXhkvCVUmTQEA03C3+EoQLjRPzvw0fReoM1xF9LPLxTqxl1RKgxTknp O5hJ30DWDOtXGXAc/TaUKzKgRBPmge1jeBLx9w4PHblvYv0+bbAJX3dNE7XLO97nN/v9uezdESP4 LKdMoeD/kmpMr9UZOyYQyHEXC6fSCnJXuyCA036rwpc= ) ; Key ID = 48295 openworld.gov. 259200 IN DNSKEY ( 257 3 8 AwEAAbn6HbEKT/8iuDYuQsK+elcphPPD2cva8Iu6xvKtJhjXiNvTda+vZY9Eo2b2Jra5B1baltYW IhGRylA2dE3AnTkS5P5iosy7CzVjX/Tktg96dr4KPlDvj+Mz8UdxOWsmwDOX15rbofw9Ppszt0jQ 3lp0xq/wACN6obmujmabWF4fOc+JWEMkFsyBw4OfpFtr19yZMDdQ4qTlXeXCvWqiAhyKGgavw8Gt Mpujq79XICayS0G02DAjhHLgJOGLhXUvf2o9EyzAXCRW2vrlGafxmFumbyR1T+FVhv+rBBpWJzej 4CNYpgIj91pn4kDKmd+vZm9fqsqkD5w2vy4tA96R3Rc= ) ; Key ID = 51172 openworld.gov. 259200 IN RRSIG ( DNSKEY 8 2 259200 20240527055239 20240521045239 45060 openworld.gov. E7hN9CMyuOVMyhUW7PFPYx2xvHkU3GmEmvYCyzRIt9IQHOrD+Zc/jDZYAIxl0zHxKsHcGH/2zlzg Ro+aTf4vgvarnlfKVjwdFpjWX8us5ztI4YpCbfkPjnYEhRtgf8WgUL5y+AigSPRvmGmdWDP23wHa ckNz3C7GWy3tHdP7mpU= ) openworld.gov. 259200 IN RRSIG ( DNSKEY 8 2 259200 20240527055239 20240521045239 48295 openworld.gov. w4H/t7NapHNQa52CfGvgkdIzMa1pOL8oCPf6xr7RRl1hfxyqN8cUl4RLw3GtbIhWrP1nxXwAbzGB jgm16eVx8GmQKcxveg2q6+K511SVffWQW+HrB7nkcgEASMhb/L7+oiTkhi2CPfHXFz2L30XO2k0F sGgp/D2siZ0EOThWg3twE5GMojBfgQVfcGiOr+oUD9HBVq1LA6ejHSbGRfPdj1b9oBCB8WLiJsnJ u1gyw0+WgBXwbe6IM6e78461KUFrP9IxEMXbvJUefoqeqMpSPrZc5tGcwUM01TiEMEMrlFbMyDsd EkpB4LeJvETOkuC+aZQy0h9SuMluR96unwLeIA== ) openworld.gov. 259200 IN RRSIG ( DNSKEY 8 2 259200 20240527055239 20240521045239 51172 openworld.gov. YB5FR1UtU8RnTOtsQ2DcvFJfZbM9VICF3lLMtd/l5f2dPaXu5IKoXVMSaaB1jgOSlcvtUxz4wJpd 2hQMO8xnKxHUhWbLoJ9rd5DdNEVGt1tBfiZ7awC8FL5UTZ9lhbtfHetfdfWnpDCPaQEPpon5UNVa srAsZikeY6zfpML/5YoMVVvkmPt6Jm39Uam1DZHlIFvwmKIXkMDxRdWehV9iRV1irVfLhHepXoGZ dEJWPJmPz9O3+SdHC4xN4mD8pimwVg+V/b5BLrgNf8p5r8aSF+1h8zWH8fvo4QHb4cVkMtPWix8M BOZ5OyyAmvRN3Zl3O4J6LRVOkI+npi3kTEzaTg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 5 DNSKEY records for openworld.gov
	`openworld.gov. 259200 IN DNSKEY ( 256 3 8 AwEAAdsoA656PeDBMS1bDOUFSHCdX5J86qxlsqX0FNAOHoHjpS4rOKGa+DopFP1S3Fopsny3TMUY na85nl/M3uZvZVkNyFpOnqb+YykpCIwYW1hamFbAxueAz6lDCb+iWRHpSyofCMQ5Ep4Xz4S2iFlp TF2FMLO3679oDW+RGYOvdSE3 ) ; Key ID = 48594`
	`openworld.gov. 259200 IN DNSKEY ( 256 3 8 AwEAAcWFPGK/TwF5nsWvJn2cjlH/zS1kfdkNbQG0wxW8eq4dxNylKq5XHzioQp+2oi20JAskynxj In9Hlez+wJxp6eIxrOhsPuayQvP+gmeDPU6XxN1H3gTFdHI1woHcG6iHOg9GkuNCuBMQ/jedIGwU l09aeRYb4RU3ZgAkXGPkCmdp ) ; Key ID = 45060`
	`openworld.gov. 259200 IN DNSKEY ( 256 3 8 AwEAAegjgxA64FvqVV/Gl+s8rBbaMTAkICSdJlgrTl332wLYCgMRwjH8JKnaS48hP9M1EqBYjY8+ U8aUT7AIAHHcaUiOlqoxPbNb48jMVFX7PUvukRmJYz0QFTgleI8zz9k8gmeKcLi2AX4RmTIx5Sol +em0KSyZlRXqsAnL9JXEFQsd ) ; Key ID = 27048`
	`openworld.gov. 259200 IN DNSKEY ( 257 3 8 AwEAAcdZ3qbDvv1F11hY09R4U0ay8x82GKkryiOBGGT3c99GzBbVar7Zo/gkr9uspchSjSNiLIaj VfYuY6+NtDfw5L+5JgdZOP5evypXHg/mcjnMRi6fatCyeotrUmKlk5Idl+lUh9SHkHCnT/SHsKMK DRCY29VoiG1GYMqE35cNHmXhkvCVUmTQEA03C3+EoQLjRPzvw0fReoM1xF9LPLxTqxl1RKgxTknp O5hJ30DWDOtXGXAc/TaUKzKgRBPmge1jeBLx9w4PHblvYv0+bbAJX3dNE7XLO97nN/v9uezdESP4 LKdMoeD/kmpMr9UZOyYQyHEXC6fSCnJXuyCA036rwpc= ) ; Key ID = 48295`
	`openworld.gov. 259200 IN DNSKEY ( 257 3 8 AwEAAbn6HbEKT/8iuDYuQsK+elcphPPD2cva8Iu6xvKtJhjXiNvTda+vZY9Eo2b2Jra5B1baltYW IhGRylA2dE3AnTkS5P5iosy7CzVjX/Tktg96dr4KPlDvj+Mz8UdxOWsmwDOX15rbofw9Ppszt0jQ 3lp0xq/wACN6obmujmabWF4fOc+JWEMkFsyBw4OfpFtr19yZMDdQ4qTlXeXCvWqiAhyKGgavw8Gt Mpujq79XICayS0G02DAjhHLgJOGLhXUvf2o9EyzAXCRW2vrlGafxmFumbyR1T+FVhv+rBBpWJzej 4CNYpgIj91pn4kDKmd+vZm9fqsqkD5w2vy4tA96R3Rc= ) ; Key ID = 51172`
	DNSKEY=48295/SEP is now in the chain-of-trust
	DS=48295/SHA-256 verifies DNSKEY=48295/SEP
	DNSKEY=51172/SEP is now in the chain-of-trust
	DS=51172/SHA-256 verifies DNSKEY=51172/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`openworld.gov. 259200 IN RRSIG ( DNSKEY 8 2 259200 20240527055239 20240521045239 45060 openworld.gov. E7hN9CMyuOVMyhUW7PFPYx2xvHkU3GmEmvYCyzRIt9IQHOrD+Zc/jDZYAIxl0zHxKsHcGH/2zlzg Ro+aTf4vgvarnlfKVjwdFpjWX8us5ztI4YpCbfkPjnYEhRtgf8WgUL5y+AigSPRvmGmdWDP23wHa ckNz3C7GWy3tHdP7mpU= )`
	`openworld.gov. 259200 IN RRSIG ( DNSKEY 8 2 259200 20240527055239 20240521045239 48295 openworld.gov. w4H/t7NapHNQa52CfGvgkdIzMa1pOL8oCPf6xr7RRl1hfxyqN8cUl4RLw3GtbIhWrP1nxXwAbzGB jgm16eVx8GmQKcxveg2q6+K511SVffWQW+HrB7nkcgEASMhb/L7+oiTkhi2CPfHXFz2L30XO2k0F sGgp/D2siZ0EOThWg3twE5GMojBfgQVfcGiOr+oUD9HBVq1LA6ejHSbGRfPdj1b9oBCB8WLiJsnJ u1gyw0+WgBXwbe6IM6e78461KUFrP9IxEMXbvJUefoqeqMpSPrZc5tGcwUM01TiEMEMrlFbMyDsd EkpB4LeJvETOkuC+aZQy0h9SuMluR96unwLeIA== )`
	`openworld.gov. 259200 IN RRSIG ( DNSKEY 8 2 259200 20240527055239 20240521045239 51172 openworld.gov. YB5FR1UtU8RnTOtsQ2DcvFJfZbM9VICF3lLMtd/l5f2dPaXu5IKoXVMSaaB1jgOSlcvtUxz4wJpd 2hQMO8xnKxHUhWbLoJ9rd5DdNEVGt1tBfiZ7awC8FL5UTZ9lhbtfHetfdfWnpDCPaQEPpon5UNVa srAsZikeY6zfpML/5YoMVVvkmPt6Jm39Uam1DZHlIFvwmKIXkMDxRdWehV9iRV1irVfLhHepXoGZ dEJWPJmPz9O3+SdHC4xN4mD8pimwVg+V/b5BLrgNf8p5r8aSF+1h8zWH8fvo4QHb4cVkMtPWix8M BOZ5OyyAmvRN3Zl3O4J6LRVOkI+npi3kTEzaTg== )`
	RRSIG=45060 and DNSKEY=45060 verifies the DNSKEY RRset
	RRSIG=48295 and DNSKEY=48295/SEP verifies the DNSKEY RRset
	RRSIG=51172 and DNSKEY=51172/SEP verifies the DNSKEY RRset
	DNSKEY=48594 is now in the chain-of-trust
	DNSKEY=45060 is now in the chain-of-trust
	DNSKEY=27048 is now in the chain-of-trust
	Query to pdns109.ultradns.biz for openworld.gov/A
	Received 605 bytes from 156.154.66.109
	;; Response received from [156.154.66.109] 605 octets ;; HEADER SECTION ;; id = 13745 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; openworld.gov. IN A ;; ANSWER SECTION (3 records) openworld.gov. 28800 IN A 3.33.159.71 openworld.gov. 28800 IN A 15.197.146.213 openworld.gov. 28800 IN RRSIG ( A 8 2 28800 20240527055238 20240521045238 45060 openworld.gov. lTmazL7jY5k7wW1ol1ouu72Oc291UdlU1p8iSPkDJkVyDoF7iQH8d5gH7EruK8D+BSi2/Ma84f/j +dmKwi9AEp++vnfQuDVe1UqvwlcJ/TSmNqunkgifkY3tSwceVTmyFQ2JRMw3kC34I63KJGImh+UW hx52TLedMJ/mgaRNO1Y= ) ;; AUTHORITY SECTION (7 records) openworld.gov. 28800 IN NS oxygen2.house.gov. openworld.gov. 28800 IN NS oxygen.house.gov. openworld.gov. 28800 IN NS pdns109.ultradns.org. openworld.gov. 28800 IN NS pdns109.ultradns.net. openworld.gov. 28800 IN NS pdns109.ultradns.com. openworld.gov. 28800 IN NS pdns109.ultradns.biz. openworld.gov. 28800 IN RRSIG ( NS 8 2 28800 20240527055238 20240521045238 45060 openworld.gov. DqX3tucyV5JWT8YRATqWquWIu1nVxtXAm7c1/I6lJDKTwHUSBACN4JwNhvJ8D2uEwLDDCSwSi4/c WvQAJrydIi4DekkxXhLGVPeAK/shkIKnJMFpnLH8C5hh3dTyc7cl30I+wDuLWLw4uXYwQT27WZkA GsEFVTrHD7SJvl4no5A= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	pdns109.ultradns.biz is authoritative for openworld.gov
	Found RRSIG signed by openworld.gov zone
	Query to oxygen2.house.gov for openworld.gov/SOA
	Received 273 bytes from 184.105.22.101
	;; Response received from [184.105.22.101] 273 octets ;; HEADER SECTION ;; id = 38256 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; openworld.gov. IN SOA ;; ANSWER SECTION (2 records) openworld.gov. 28800 IN SOA ( oxygen.house.gov. ncc.mail.house.gov. 3497 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) openworld.gov. 28800 IN RRSIG ( SOA 8 2 28800 20240527055239 20240521045239 45060 openworld.gov. Uc31EaFwga7boQ0niypEr98UbGZeYiJE6+c5KRithcEYY0caI5KnGEdSvz5oxjnfWEsSYK8gwQUY NA0i6TAhUXRHLO2RrNi3fwYyPONsfGLj2Qyet//6Fxsqdqsl/DLF3uP+y5EY4+NJOCOkB2I7GHiv sOLeIHxW4/c/Nccyoig= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to pdns109.ultradns.org for openworld.gov/SOA
	Received 618 bytes from 156.154.67.109
	;; Response received from [156.154.67.109] 618 octets ;; HEADER SECTION ;; id = 37873 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; openworld.gov. IN SOA ;; ANSWER SECTION (2 records) openworld.gov. 28800 IN SOA ( oxygen.house.gov. ncc.mail.house.gov. 3497 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) openworld.gov. 28800 IN RRSIG ( SOA 8 2 28800 20240527055239 20240521045239 45060 openworld.gov. Uc31EaFwga7boQ0niypEr98UbGZeYiJE6+c5KRithcEYY0caI5KnGEdSvz5oxjnfWEsSYK8gwQUY NA0i6TAhUXRHLO2RrNi3fwYyPONsfGLj2Qyet//6Fxsqdqsl/DLF3uP+y5EY4+NJOCOkB2I7GHiv sOLeIHxW4/c/Nccyoig= ) ;; AUTHORITY SECTION (7 records) openworld.gov. 28800 IN NS oxygen2.house.gov. openworld.gov. 28800 IN NS oxygen.house.gov. openworld.gov. 28800 IN NS pdns109.ultradns.org. openworld.gov. 28800 IN NS pdns109.ultradns.net. openworld.gov. 28800 IN NS pdns109.ultradns.com. openworld.gov. 28800 IN NS pdns109.ultradns.biz. openworld.gov. 28800 IN RRSIG ( NS 8 2 28800 20240527055238 20240521045238 45060 openworld.gov. DqX3tucyV5JWT8YRATqWquWIu1nVxtXAm7c1/I6lJDKTwHUSBACN4JwNhvJ8D2uEwLDDCSwSi4/c WvQAJrydIi4DekkxXhLGVPeAK/shkIKnJMFpnLH8C5hh3dTyc7cl30I+wDuLWLw4uXYwQT27WZkA GsEFVTrHD7SJvl4no5A= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to oxygen.house.gov for openworld.gov/SOA
	Received 273 bytes from 216.218.141.197
	;; Response received from [216.218.141.197] 273 octets ;; HEADER SECTION ;; id = 2290 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; openworld.gov. IN SOA ;; ANSWER SECTION (2 records) openworld.gov. 28800 IN SOA ( oxygen.house.gov. ncc.mail.house.gov. 3497 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) openworld.gov. 28800 IN RRSIG ( SOA 8 2 28800 20240527055239 20240521045239 45060 openworld.gov. Uc31EaFwga7boQ0niypEr98UbGZeYiJE6+c5KRithcEYY0caI5KnGEdSvz5oxjnfWEsSYK8gwQUY NA0i6TAhUXRHLO2RrNi3fwYyPONsfGLj2Qyet//6Fxsqdqsl/DLF3uP+y5EY4+NJOCOkB2I7GHiv sOLeIHxW4/c/Nccyoig= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to pdns109.ultradns.com for openworld.gov/SOA
	Received 618 bytes from 156.154.64.109
	;; Response received from [156.154.64.109] 618 octets ;; HEADER SECTION ;; id = 50604 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; openworld.gov. IN SOA ;; ANSWER SECTION (2 records) openworld.gov. 28800 IN SOA ( oxygen.house.gov. ncc.mail.house.gov. 3497 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) openworld.gov. 28800 IN RRSIG ( SOA 8 2 28800 20240527055239 20240521045239 45060 openworld.gov. Uc31EaFwga7boQ0niypEr98UbGZeYiJE6+c5KRithcEYY0caI5KnGEdSvz5oxjnfWEsSYK8gwQUY NA0i6TAhUXRHLO2RrNi3fwYyPONsfGLj2Qyet//6Fxsqdqsl/DLF3uP+y5EY4+NJOCOkB2I7GHiv sOLeIHxW4/c/Nccyoig= ) ;; AUTHORITY SECTION (7 records) openworld.gov. 28800 IN NS oxygen2.house.gov. openworld.gov. 28800 IN NS oxygen.house.gov. openworld.gov. 28800 IN NS pdns109.ultradns.org. openworld.gov. 28800 IN NS pdns109.ultradns.net. openworld.gov. 28800 IN NS pdns109.ultradns.com. openworld.gov. 28800 IN NS pdns109.ultradns.biz. openworld.gov. 28800 IN RRSIG ( NS 8 2 28800 20240527055238 20240521045238 45060 openworld.gov. DqX3tucyV5JWT8YRATqWquWIu1nVxtXAm7c1/I6lJDKTwHUSBACN4JwNhvJ8D2uEwLDDCSwSi4/c WvQAJrydIi4DekkxXhLGVPeAK/shkIKnJMFpnLH8C5hh3dTyc7cl30I+wDuLWLw4uXYwQT27WZkA GsEFVTrHD7SJvl4no5A= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to pdns109.ultradns.net for openworld.gov/SOA
	Received 618 bytes from 156.154.65.109
	;; Response received from [156.154.65.109] 618 octets ;; HEADER SECTION ;; id = 37972 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; openworld.gov. IN SOA ;; ANSWER SECTION (2 records) openworld.gov. 28800 IN SOA ( oxygen.house.gov. ncc.mail.house.gov. 3497 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) openworld.gov. 28800 IN RRSIG ( SOA 8 2 28800 20240527055239 20240521045239 45060 openworld.gov. Uc31EaFwga7boQ0niypEr98UbGZeYiJE6+c5KRithcEYY0caI5KnGEdSvz5oxjnfWEsSYK8gwQUY NA0i6TAhUXRHLO2RrNi3fwYyPONsfGLj2Qyet//6Fxsqdqsl/DLF3uP+y5EY4+NJOCOkB2I7GHiv sOLeIHxW4/c/Nccyoig= ) ;; AUTHORITY SECTION (7 records) openworld.gov. 28800 IN NS oxygen2.house.gov. openworld.gov. 28800 IN NS oxygen.house.gov. openworld.gov. 28800 IN NS pdns109.ultradns.org. openworld.gov. 28800 IN NS pdns109.ultradns.net. openworld.gov. 28800 IN NS pdns109.ultradns.com. openworld.gov. 28800 IN NS pdns109.ultradns.biz. openworld.gov. 28800 IN RRSIG ( NS 8 2 28800 20240527055238 20240521045238 45060 openworld.gov. DqX3tucyV5JWT8YRATqWquWIu1nVxtXAm7c1/I6lJDKTwHUSBACN4JwNhvJ8D2uEwLDDCSwSi4/c WvQAJrydIi4DekkxXhLGVPeAK/shkIKnJMFpnLH8C5hh3dTyc7cl30I+wDuLWLw4uXYwQT27WZkA GsEFVTrHD7SJvl4no5A= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to pdns109.ultradns.biz for openworld.gov/A
	Received 605 bytes from 156.154.66.109
	;; Response received from [156.154.66.109] 605 octets ;; HEADER SECTION ;; id = 29425 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; openworld.gov. IN A ;; ANSWER SECTION (3 records) openworld.gov. 28800 IN A 3.33.159.71 openworld.gov. 28800 IN A 15.197.146.213 openworld.gov. 28800 IN RRSIG ( A 8 2 28800 20240527055238 20240521045238 45060 openworld.gov. lTmazL7jY5k7wW1ol1ouu72Oc291UdlU1p8iSPkDJkVyDoF7iQH8d5gH7EruK8D+BSi2/Ma84f/j +dmKwi9AEp++vnfQuDVe1UqvwlcJ/TSmNqunkgifkY3tSwceVTmyFQ2JRMw3kC34I63KJGImh+UW hx52TLedMJ/mgaRNO1Y= ) ;; AUTHORITY SECTION (7 records) openworld.gov. 28800 IN NS oxygen2.house.gov. openworld.gov. 28800 IN NS oxygen.house.gov. openworld.gov. 28800 IN NS pdns109.ultradns.org. openworld.gov. 28800 IN NS pdns109.ultradns.net. openworld.gov. 28800 IN NS pdns109.ultradns.com. openworld.gov. 28800 IN NS pdns109.ultradns.biz. openworld.gov. 28800 IN RRSIG ( NS 8 2 28800 20240527055238 20240521045238 45060 openworld.gov. DqX3tucyV5JWT8YRATqWquWIu1nVxtXAm7c1/I6lJDKTwHUSBACN4JwNhvJ8D2uEwLDDCSwSi4/c WvQAJrydIi4DekkxXhLGVPeAK/shkIKnJMFpnLH8C5hh3dTyc7cl30I+wDuLWLw4uXYwQT27WZkA GsEFVTrHD7SJvl4no5A= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	openworld.gov A RR has value 3.33.159.71
	openworld.gov A RR has value 15.197.146.213
	Found 1 RRSIGs over A RRset
	`openworld.gov. 28800 IN RRSIG ( A 8 2 28800 20240527055238 20240521045238 45060 openworld.gov. lTmazL7jY5k7wW1ol1ouu72Oc291UdlU1p8iSPkDJkVyDoF7iQH8d5gH7EruK8D+BSi2/Ma84f/j +dmKwi9AEp++vnfQuDVe1UqvwlcJ/TSmNqunkgifkY3tSwceVTmyFQ2JRMw3kC34I63KJGImh+UW hx52TLedMJ/mgaRNO1Y= )`
	RRSIG=45060 and DNSKEY=45060 verifies the A RRset

openworld.gov

	Query to pdns109.ultradns.net for openworld.gov/A
	Received 605 bytes from 156.154.65.109
	;; Response received from [156.154.65.109] 605 octets ;; HEADER SECTION ;; id = 23391 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; openworld.gov. IN A ;; ANSWER SECTION (3 records) openworld.gov. 28800 IN A 3.33.159.71 openworld.gov. 28800 IN A 15.197.146.213 openworld.gov. 28800 IN RRSIG ( A 8 2 28800 20240527055238 20240521045238 45060 openworld.gov. lTmazL7jY5k7wW1ol1ouu72Oc291UdlU1p8iSPkDJkVyDoF7iQH8d5gH7EruK8D+BSi2/Ma84f/j +dmKwi9AEp++vnfQuDVe1UqvwlcJ/TSmNqunkgifkY3tSwceVTmyFQ2JRMw3kC34I63KJGImh+UW hx52TLedMJ/mgaRNO1Y= ) ;; AUTHORITY SECTION (7 records) openworld.gov. 28800 IN NS oxygen2.house.gov. openworld.gov. 28800 IN NS oxygen.house.gov. openworld.gov. 28800 IN NS pdns109.ultradns.org. openworld.gov. 28800 IN NS pdns109.ultradns.net. openworld.gov. 28800 IN NS pdns109.ultradns.com. openworld.gov. 28800 IN NS pdns109.ultradns.biz. openworld.gov. 28800 IN RRSIG ( NS 8 2 28800 20240527055238 20240521045238 45060 openworld.gov. DqX3tucyV5JWT8YRATqWquWIu1nVxtXAm7c1/I6lJDKTwHUSBACN4JwNhvJ8D2uEwLDDCSwSi4/c WvQAJrydIi4DekkxXhLGVPeAK/shkIKnJMFpnLH8C5hh3dTyc7cl30I+wDuLWLw4uXYwQT27WZkA GsEFVTrHD7SJvl4no5A= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	pdns109.ultradns.net is authoritative for openworld.gov
	Found RRSIG signed by openworld.gov zone
	Query to pdns109.ultradns.net for openworld.gov/A
	Received 605 bytes from 156.154.65.109
	;; Response received from [156.154.65.109] 605 octets ;; HEADER SECTION ;; id = 60702 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; openworld.gov. IN A ;; ANSWER SECTION (3 records) openworld.gov. 28800 IN A 15.197.146.213 openworld.gov. 28800 IN A 3.33.159.71 openworld.gov. 28800 IN RRSIG ( A 8 2 28800 20240527055238 20240521045238 45060 openworld.gov. lTmazL7jY5k7wW1ol1ouu72Oc291UdlU1p8iSPkDJkVyDoF7iQH8d5gH7EruK8D+BSi2/Ma84f/j +dmKwi9AEp++vnfQuDVe1UqvwlcJ/TSmNqunkgifkY3tSwceVTmyFQ2JRMw3kC34I63KJGImh+UW hx52TLedMJ/mgaRNO1Y= ) ;; AUTHORITY SECTION (7 records) openworld.gov. 28800 IN NS oxygen2.house.gov. openworld.gov. 28800 IN NS oxygen.house.gov. openworld.gov. 28800 IN NS pdns109.ultradns.org. openworld.gov. 28800 IN NS pdns109.ultradns.net. openworld.gov. 28800 IN NS pdns109.ultradns.com. openworld.gov. 28800 IN NS pdns109.ultradns.biz. openworld.gov. 28800 IN RRSIG ( NS 8 2 28800 20240527055238 20240521045238 45060 openworld.gov. DqX3tucyV5JWT8YRATqWquWIu1nVxtXAm7c1/I6lJDKTwHUSBACN4JwNhvJ8D2uEwLDDCSwSi4/c WvQAJrydIi4DekkxXhLGVPeAK/shkIKnJMFpnLH8C5hh3dTyc7cl30I+wDuLWLw4uXYwQT27WZkA GsEFVTrHD7SJvl4no5A= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	openworld.gov A RR has value 15.197.146.213
	openworld.gov A RR has value 3.33.159.71
	Found 1 RRSIGs over A RRset
	`openworld.gov. 28800 IN RRSIG ( A 8 2 28800 20240527055238 20240521045238 45060 openworld.gov. lTmazL7jY5k7wW1ol1ouu72Oc291UdlU1p8iSPkDJkVyDoF7iQH8d5gH7EruK8D+BSi2/Ma84f/j +dmKwi9AEp++vnfQuDVe1UqvwlcJ/TSmNqunkgifkY3tSwceVTmyFQ2JRMw3kC34I63KJGImh+UW hx52TLedMJ/mgaRNO1Y= )`
	RRSIG=45060 and DNSKEY=45060 verifies the A RRset

openworld.gov

	Query to oxygen.house.gov for openworld.gov/A
	Received 247 bytes from 216.218.141.197
	;; Response received from [216.218.141.197] 247 octets ;; HEADER SECTION ;; id = 2662 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; openworld.gov. IN A ;; ANSWER SECTION (3 records) openworld.gov. 28800 IN A 3.33.159.71 openworld.gov. 28800 IN A 15.197.146.213 openworld.gov. 28800 IN RRSIG ( A 8 2 28800 20240527055238 20240521045238 45060 openworld.gov. lTmazL7jY5k7wW1ol1ouu72Oc291UdlU1p8iSPkDJkVyDoF7iQH8d5gH7EruK8D+BSi2/Ma84f/j +dmKwi9AEp++vnfQuDVe1UqvwlcJ/TSmNqunkgifkY3tSwceVTmyFQ2JRMw3kC34I63KJGImh+UW hx52TLedMJ/mgaRNO1Y= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	oxygen.house.gov is authoritative for openworld.gov
	Found RRSIG signed by openworld.gov zone
	Query to oxygen.house.gov for openworld.gov/A
	Received 247 bytes from 216.218.141.197
	;; Response received from [216.218.141.197] 247 octets ;; HEADER SECTION ;; id = 50495 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; openworld.gov. IN A ;; ANSWER SECTION (3 records) openworld.gov. 28800 IN A 15.197.146.213 openworld.gov. 28800 IN A 3.33.159.71 openworld.gov. 28800 IN RRSIG ( A 8 2 28800 20240527055238 20240521045238 45060 openworld.gov. lTmazL7jY5k7wW1ol1ouu72Oc291UdlU1p8iSPkDJkVyDoF7iQH8d5gH7EruK8D+BSi2/Ma84f/j +dmKwi9AEp++vnfQuDVe1UqvwlcJ/TSmNqunkgifkY3tSwceVTmyFQ2JRMw3kC34I63KJGImh+UW hx52TLedMJ/mgaRNO1Y= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	openworld.gov A RR has value 15.197.146.213
	openworld.gov A RR has value 3.33.159.71
	Found 1 RRSIGs over A RRset
	`openworld.gov. 28800 IN RRSIG ( A 8 2 28800 20240527055238 20240521045238 45060 openworld.gov. lTmazL7jY5k7wW1ol1ouu72Oc291UdlU1p8iSPkDJkVyDoF7iQH8d5gH7EruK8D+BSi2/Ma84f/j +dmKwi9AEp++vnfQuDVe1UqvwlcJ/TSmNqunkgifkY3tSwceVTmyFQ2JRMw3kC34I63KJGImh+UW hx52TLedMJ/mgaRNO1Y= )`
	RRSIG=45060 and DNSKEY=45060 verifies the A RRset

openworld.gov

	Query to oxygen2.house.gov for openworld.gov/A
	Received 247 bytes from 184.105.22.101
	;; Response received from [184.105.22.101] 247 octets ;; HEADER SECTION ;; id = 40840 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; openworld.gov. IN A ;; ANSWER SECTION (3 records) openworld.gov. 28800 IN A 15.197.146.213 openworld.gov. 28800 IN A 3.33.159.71 openworld.gov. 28800 IN RRSIG ( A 8 2 28800 20240527055238 20240521045238 45060 openworld.gov. lTmazL7jY5k7wW1ol1ouu72Oc291UdlU1p8iSPkDJkVyDoF7iQH8d5gH7EruK8D+BSi2/Ma84f/j +dmKwi9AEp++vnfQuDVe1UqvwlcJ/TSmNqunkgifkY3tSwceVTmyFQ2JRMw3kC34I63KJGImh+UW hx52TLedMJ/mgaRNO1Y= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	oxygen2.house.gov is authoritative for openworld.gov
	Found RRSIG signed by openworld.gov zone
	Query to oxygen2.house.gov for openworld.gov/A
	Received 247 bytes from 184.105.22.101
	;; Response received from [184.105.22.101] 247 octets ;; HEADER SECTION ;; id = 61123 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; openworld.gov. IN A ;; ANSWER SECTION (3 records) openworld.gov. 28800 IN A 3.33.159.71 openworld.gov. 28800 IN A 15.197.146.213 openworld.gov. 28800 IN RRSIG ( A 8 2 28800 20240527055238 20240521045238 45060 openworld.gov. lTmazL7jY5k7wW1ol1ouu72Oc291UdlU1p8iSPkDJkVyDoF7iQH8d5gH7EruK8D+BSi2/Ma84f/j +dmKwi9AEp++vnfQuDVe1UqvwlcJ/TSmNqunkgifkY3tSwceVTmyFQ2JRMw3kC34I63KJGImh+UW hx52TLedMJ/mgaRNO1Y= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	openworld.gov A RR has value 3.33.159.71
	openworld.gov A RR has value 15.197.146.213
	Found 1 RRSIGs over A RRset
	`openworld.gov. 28800 IN RRSIG ( A 8 2 28800 20240527055238 20240521045238 45060 openworld.gov. lTmazL7jY5k7wW1ol1ouu72Oc291UdlU1p8iSPkDJkVyDoF7iQH8d5gH7EruK8D+BSi2/Ma84f/j +dmKwi9AEp++vnfQuDVe1UqvwlcJ/TSmNqunkgifkY3tSwceVTmyFQ2JRMw3kC34I63KJGImh+UW hx52TLedMJ/mgaRNO1Y= )`
	RRSIG=45060 and DNSKEY=45060 verifies the A RRset

openworld.gov

	Query to pdns109.ultradns.com for openworld.gov/A
	Received 605 bytes from 156.154.64.109
	;; Response received from [156.154.64.109] 605 octets ;; HEADER SECTION ;; id = 29435 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; openworld.gov. IN A ;; ANSWER SECTION (3 records) openworld.gov. 28800 IN A 3.33.159.71 openworld.gov. 28800 IN A 15.197.146.213 openworld.gov. 28800 IN RRSIG ( A 8 2 28800 20240527055238 20240521045238 45060 openworld.gov. lTmazL7jY5k7wW1ol1ouu72Oc291UdlU1p8iSPkDJkVyDoF7iQH8d5gH7EruK8D+BSi2/Ma84f/j +dmKwi9AEp++vnfQuDVe1UqvwlcJ/TSmNqunkgifkY3tSwceVTmyFQ2JRMw3kC34I63KJGImh+UW hx52TLedMJ/mgaRNO1Y= ) ;; AUTHORITY SECTION (7 records) openworld.gov. 28800 IN NS oxygen2.house.gov. openworld.gov. 28800 IN NS oxygen.house.gov. openworld.gov. 28800 IN NS pdns109.ultradns.org. openworld.gov. 28800 IN NS pdns109.ultradns.net. openworld.gov. 28800 IN NS pdns109.ultradns.com. openworld.gov. 28800 IN NS pdns109.ultradns.biz. openworld.gov. 28800 IN RRSIG ( NS 8 2 28800 20240527055238 20240521045238 45060 openworld.gov. DqX3tucyV5JWT8YRATqWquWIu1nVxtXAm7c1/I6lJDKTwHUSBACN4JwNhvJ8D2uEwLDDCSwSi4/c WvQAJrydIi4DekkxXhLGVPeAK/shkIKnJMFpnLH8C5hh3dTyc7cl30I+wDuLWLw4uXYwQT27WZkA GsEFVTrHD7SJvl4no5A= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	pdns109.ultradns.com is authoritative for openworld.gov
	Found RRSIG signed by openworld.gov zone
	Query to pdns109.ultradns.com for openworld.gov/A
	Received 605 bytes from 156.154.64.109
	;; Response received from [156.154.64.109] 605 octets ;; HEADER SECTION ;; id = 39541 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; openworld.gov. IN A ;; ANSWER SECTION (3 records) openworld.gov. 28800 IN A 3.33.159.71 openworld.gov. 28800 IN A 15.197.146.213 openworld.gov. 28800 IN RRSIG ( A 8 2 28800 20240527055238 20240521045238 45060 openworld.gov. lTmazL7jY5k7wW1ol1ouu72Oc291UdlU1p8iSPkDJkVyDoF7iQH8d5gH7EruK8D+BSi2/Ma84f/j +dmKwi9AEp++vnfQuDVe1UqvwlcJ/TSmNqunkgifkY3tSwceVTmyFQ2JRMw3kC34I63KJGImh+UW hx52TLedMJ/mgaRNO1Y= ) ;; AUTHORITY SECTION (7 records) openworld.gov. 28800 IN NS oxygen2.house.gov. openworld.gov. 28800 IN NS oxygen.house.gov. openworld.gov. 28800 IN NS pdns109.ultradns.org. openworld.gov. 28800 IN NS pdns109.ultradns.net. openworld.gov. 28800 IN NS pdns109.ultradns.com. openworld.gov. 28800 IN NS pdns109.ultradns.biz. openworld.gov. 28800 IN RRSIG ( NS 8 2 28800 20240527055238 20240521045238 45060 openworld.gov. DqX3tucyV5JWT8YRATqWquWIu1nVxtXAm7c1/I6lJDKTwHUSBACN4JwNhvJ8D2uEwLDDCSwSi4/c WvQAJrydIi4DekkxXhLGVPeAK/shkIKnJMFpnLH8C5hh3dTyc7cl30I+wDuLWLw4uXYwQT27WZkA GsEFVTrHD7SJvl4no5A= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	openworld.gov A RR has value 3.33.159.71
	openworld.gov A RR has value 15.197.146.213
	Found 1 RRSIGs over A RRset
	`openworld.gov. 28800 IN RRSIG ( A 8 2 28800 20240527055238 20240521045238 45060 openworld.gov. lTmazL7jY5k7wW1ol1ouu72Oc291UdlU1p8iSPkDJkVyDoF7iQH8d5gH7EruK8D+BSi2/Ma84f/j +dmKwi9AEp++vnfQuDVe1UqvwlcJ/TSmNqunkgifkY3tSwceVTmyFQ2JRMw3kC34I63KJGImh+UW hx52TLedMJ/mgaRNO1Y= )`
	RRSIG=45060 and DNSKEY=45060 verifies the A RRset

openworld.gov

	Query to pdns109.ultradns.org for openworld.gov/A
	Received 605 bytes from 156.154.67.109
	;; Response received from [156.154.67.109] 605 octets ;; HEADER SECTION ;; id = 48322 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; openworld.gov. IN A ;; ANSWER SECTION (3 records) openworld.gov. 28800 IN A 15.197.146.213 openworld.gov. 28800 IN A 3.33.159.71 openworld.gov. 28800 IN RRSIG ( A 8 2 28800 20240527055238 20240521045238 45060 openworld.gov. lTmazL7jY5k7wW1ol1ouu72Oc291UdlU1p8iSPkDJkVyDoF7iQH8d5gH7EruK8D+BSi2/Ma84f/j +dmKwi9AEp++vnfQuDVe1UqvwlcJ/TSmNqunkgifkY3tSwceVTmyFQ2JRMw3kC34I63KJGImh+UW hx52TLedMJ/mgaRNO1Y= ) ;; AUTHORITY SECTION (7 records) openworld.gov. 28800 IN NS oxygen2.house.gov. openworld.gov. 28800 IN NS oxygen.house.gov. openworld.gov. 28800 IN NS pdns109.ultradns.org. openworld.gov. 28800 IN NS pdns109.ultradns.net. openworld.gov. 28800 IN NS pdns109.ultradns.com. openworld.gov. 28800 IN NS pdns109.ultradns.biz. openworld.gov. 28800 IN RRSIG ( NS 8 2 28800 20240527055238 20240521045238 45060 openworld.gov. DqX3tucyV5JWT8YRATqWquWIu1nVxtXAm7c1/I6lJDKTwHUSBACN4JwNhvJ8D2uEwLDDCSwSi4/c WvQAJrydIi4DekkxXhLGVPeAK/shkIKnJMFpnLH8C5hh3dTyc7cl30I+wDuLWLw4uXYwQT27WZkA GsEFVTrHD7SJvl4no5A= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	pdns109.ultradns.org is authoritative for openworld.gov
	Found RRSIG signed by openworld.gov zone
	Query to pdns109.ultradns.org for openworld.gov/A
	Received 605 bytes from 156.154.67.109
	;; Response received from [156.154.67.109] 605 octets ;; HEADER SECTION ;; id = 9780 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; openworld.gov. IN A ;; ANSWER SECTION (3 records) openworld.gov. 28800 IN A 15.197.146.213 openworld.gov. 28800 IN A 3.33.159.71 openworld.gov. 28800 IN RRSIG ( A 8 2 28800 20240527055238 20240521045238 45060 openworld.gov. lTmazL7jY5k7wW1ol1ouu72Oc291UdlU1p8iSPkDJkVyDoF7iQH8d5gH7EruK8D+BSi2/Ma84f/j +dmKwi9AEp++vnfQuDVe1UqvwlcJ/TSmNqunkgifkY3tSwceVTmyFQ2JRMw3kC34I63KJGImh+UW hx52TLedMJ/mgaRNO1Y= ) ;; AUTHORITY SECTION (7 records) openworld.gov. 28800 IN NS oxygen2.house.gov. openworld.gov. 28800 IN NS oxygen.house.gov. openworld.gov. 28800 IN NS pdns109.ultradns.org. openworld.gov. 28800 IN NS pdns109.ultradns.net. openworld.gov. 28800 IN NS pdns109.ultradns.com. openworld.gov. 28800 IN NS pdns109.ultradns.biz. openworld.gov. 28800 IN RRSIG ( NS 8 2 28800 20240527055238 20240521045238 45060 openworld.gov. DqX3tucyV5JWT8YRATqWquWIu1nVxtXAm7c1/I6lJDKTwHUSBACN4JwNhvJ8D2uEwLDDCSwSi4/c WvQAJrydIi4DekkxXhLGVPeAK/shkIKnJMFpnLH8C5hh3dTyc7cl30I+wDuLWLw4uXYwQT27WZkA GsEFVTrHD7SJvl4no5A= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	openworld.gov A RR has value 15.197.146.213
	openworld.gov A RR has value 3.33.159.71
	Found 1 RRSIGs over A RRset
	`openworld.gov. 28800 IN RRSIG ( A 8 2 28800 20240527055238 20240521045238 45060 openworld.gov. lTmazL7jY5k7wW1ol1ouu72Oc291UdlU1p8iSPkDJkVyDoF7iQH8d5gH7EruK8D+BSi2/Ma84f/j +dmKwi9AEp++vnfQuDVe1UqvwlcJ/TSmNqunkgifkY3tSwceVTmyFQ2JRMw3kC34I63KJGImh+UW hx52TLedMJ/mgaRNO1Y= )`
	RRSIG=45060 and DNSKEY=45060 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test openworld.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: