DNSSEC Debugger - usandc.gov

Domain Name:

Time: 2024-05-21 21:49:39 UTC

Analyzing DNSSEC problems for usandc.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to b.root-servers.net for ./DNSKEY
	Received 864 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 864 octets ;; HEADER SECTION ;; id = 10873 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240611000000 20240521000000 20326 . W/Hsuxwei6HE8IzojCIwmIP/lrqd6TZmm1cv7VEm7bjqgUyc5FBDUSNxWfIQiwLTn+Xqk8ZVG/68 0XZptzkT2ZxyXwK7AGFAvGrKiFBertupXxU7I5uYs27GPOnnKwlA5ZrUJW0AK66XIKMb+qVMHa7C 2agO1VOsAUSDeZtR8XJmJbzIMZN2GBlSowjWe90CX0jU+ncr58MOYEiI6N2JsWJi4gU546OrmhJd hEnPGDX/gPF5OjrgDZER2+PyjSEGdxdP0nbqlBcC39aLm3lfHNNJDzC+dxgL04qt1RiTTPhDbuMp hE2l6WxjC9N8wWzM+h0IKgDMc2oVSc4B+U5Kjw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240611000000 20240521000000 20326 . W/Hsuxwei6HE8IzojCIwmIP/lrqd6TZmm1cv7VEm7bjqgUyc5FBDUSNxWfIQiwLTn+Xqk8ZVG/68 0XZptzkT2ZxyXwK7AGFAvGrKiFBertupXxU7I5uYs27GPOnnKwlA5ZrUJW0AK66XIKMb+qVMHa7C 2agO1VOsAUSDeZtR8XJmJbzIMZN2GBlSowjWe90CX0jU+ncr58MOYEiI6N2JsWJi4gU546OrmhJd hEnPGDX/gPF5OjrgDZER2+PyjSEGdxdP0nbqlBcC39aLm3lfHNNJDzC+dxgL04qt1RiTTPhDbuMp hE2l6WxjC9N8wWzM+h0IKgDMc2oVSc4B+U5Kjw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to d.root-servers.net for usandc.gov/A
	Received 617 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 617 octets ;; HEADER SECTION ;; id = 16144 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; usandc.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240603210000 20240521200000 5613 . Hvw0nfVPqgtfimoItO/kHHQEK6pap/PosoUVt3ICHRz1eCsg6r2mKKXmXNbBZhIWf/VVFYu9gWFb 6W0gFvlX+K2ODaZfIcMRlkCtittKqjqkpLjnava2BeUSyor64Cvx/tG9zmWLphf/HyAUqCwLUGHq p5WUcrD/m2L6ifUB9blN66MUtRacQj3b7lgs1kf4DBGoKiDxOMrPhLlcR9xZRb2dOCjR06iKJdLR bqyRZZhUwWP+Tw6NgC36ythLFwjiouNwBXHw/aeYfCAuyg0slzqpFWOKBxuBvfnshVbL/aUHU4ci 9HfSt3praVg4WotzbyYh7oZDdQDoHdmjix79Rw== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to k.root-servers.net for gov/DNSKEY
	Received 610 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 610 octets ;; HEADER SECTION ;; id = 46984 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240603210000 20240521200000 5613 . Hvw0nfVPqgtfimoItO/kHHQEK6pap/PosoUVt3ICHRz1eCsg6r2mKKXmXNbBZhIWf/VVFYu9gWFb 6W0gFvlX+K2ODaZfIcMRlkCtittKqjqkpLjnava2BeUSyor64Cvx/tG9zmWLphf/HyAUqCwLUGHq p5WUcrD/m2L6ifUB9blN66MUtRacQj3b7lgs1kf4DBGoKiDxOMrPhLlcR9xZRb2dOCjR06iKJdLR bqyRZZhUwWP+Tw6NgC36ythLFwjiouNwBXHw/aeYfCAuyg0slzqpFWOKBxuBvfnshVbL/aUHU4ci 9HfSt3praVg4WotzbyYh7oZDdQDoHdmjix79Rw== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to c.root-servers.net for gov/DS
	Received 367 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 367 octets ;; HEADER SECTION ;; id = 47076 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240603170000 20240521160000 5613 . j2aPdAYvQu/EiFR4UEapI2Tu6iZnSZW6mtFHMpvk0x+9tq4cQWRMs1SeI1AmPdfYPbtQMM+K0SID 6y8GigUDLOR9uAfGleO3YWzhg1gYyAYVZlf4lY4T6lSoQryJn0ZtYpoEoCMmichaaAV1wecmOJnA ooRiLubpvZiSaCaptMDZ/YDVS3F2mVlP+RbKPeNfGTadYNXSJKjIMqzNk9CahwDY8uIrsPtKLcGP SU7/hw7eMaJgv8WmhTzMb5Dh9BaASeYI/guXaEK9vhj6IKOwI5CO2NSx/9QmgYYmB1FQU1xDAMAv YsJrl/dFhBURGB5o421IT7eQjFEpG5hAqVvqsA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=64280/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20240603170000 20240521160000 5613 . j2aPdAYvQu/EiFR4UEapI2Tu6iZnSZW6mtFHMpvk0x+9tq4cQWRMs1SeI1AmPdfYPbtQMM+K0SID 6y8GigUDLOR9uAfGleO3YWzhg1gYyAYVZlf4lY4T6lSoQryJn0ZtYpoEoCMmichaaAV1wecmOJnA ooRiLubpvZiSaCaptMDZ/YDVS3F2mVlP+RbKPeNfGTadYNXSJKjIMqzNk9CahwDY8uIrsPtKLcGP SU7/hw7eMaJgv8WmhTzMb5Dh9BaASeYI/guXaEK9vhj6IKOwI5CO2NSx/9QmgYYmB1FQU1xDAMAv YsJrl/dFhBURGB5o421IT7eQjFEpG5hAqVvqsA== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=64280/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 )`
	Query to d.ns.gov for gov/DNSKEY
	Received 1038 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 1038 octets ;; HEADER SECTION ;; id = 29064 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (6 records) gov. 3600 IN DNSKEY ( 257 3 8 AwEAAZp0vliR0TOBCJXmdagY36BI5ZveSPE3OSrcXKDs8IZa86x1+gwbheJcfLB6Fw6cWYUXaNgA mFcbxqIqWc5VJSyPS9yCPdEOLEIiegwCmcWnNsEyc0snKTyypXnvJ5JNhoznpFILDqlksAqP/aiq 1/l0w8TMkRbRrViLrJ1ayaScZ0nn/ge5wNpX09T9RI+gF1OIMJDdgH1vi0a+t6smSy4pUrerFTsu y8JAL+PP85MZiOssT9yoERfWSjFKde6PrQX5vj090AxT+hztb+q2EFXnF1a2L73/3UarB19k5NR3 MT1uM7ddag64Q0lg3aTy3MglDCzP7/StUxdeyL5qIX8= ) ; Key ID = 64280 gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; Key ID = 2536 gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcbYvlY667qXEzHsDTkft9cgKy5F0S9CAP+aFK9+sJumGqvpMaOyOzsilJ+OSVFhopJ1aRFp CUpLVIcVJ3E3YATGpzB45M0D5c4oJ0RjEIUakBwcPghmSW8K1GPqj/eUs4fbVPytXwtwvUll9Lxf gUvi5DA6xD6d2ckwDyRxfcMhXYydr2hIsgfrBLmRDMi4BkxMvA23eShPd/tPvnR0gJk= ) ; Key ID = 10104 gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; Key ID = 35496 gov. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240720152440 20240520152440 64280 gov. beqATvQPKeTKpMHslZwJz4cEMNG/M7MNcNstf5X4xRUMwwvmQ55ZVHAunrvdS4vDzgy6PMy7l/DR ZxIygJtz/FHRqD7WEYxj8hfFoz2IZd/PBzA4dnIA7GS525I6Sz8RlvMUw4ymziITotDm+7IMuBTu MQ266jXfYum+z8DRJjSqsr23j9aB4M4q5wOZWN2/WVBL8wr+CVxRY3MZOF48OacDyYSpG0xkgUiK DyBpyZ8PXT36LFk2aIkbQJF1onbYz1d8hMDap7IiLuzdOAkYU1pC24HgTNmXdhwinRhFePh5SW8A vtgKjQQdCkHsHyvkyzIjVfiaaK25Muvt3Eilfw== ) gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240720152440 20240520152440 2536 gov. ar9xV2CFzuHySpzh+HX9s8aq68NgE7z0vjYoYWN167QFWeUhlDU4u8hFHQ/C0cFR9XagtNeicnqp qdANIQhGXQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 8 AwEAAZp0vliR0TOBCJXmdagY36BI5ZveSPE3OSrcXKDs8IZa86x1+gwbheJcfLB6Fw6cWYUXaNgA mFcbxqIqWc5VJSyPS9yCPdEOLEIiegwCmcWnNsEyc0snKTyypXnvJ5JNhoznpFILDqlksAqP/aiq 1/l0w8TMkRbRrViLrJ1ayaScZ0nn/ge5wNpX09T9RI+gF1OIMJDdgH1vi0a+t6smSy4pUrerFTsu y8JAL+PP85MZiOssT9yoERfWSjFKde6PrQX5vj090AxT+hztb+q2EFXnF1a2L73/3UarB19k5NR3 MT1uM7ddag64Q0lg3aTy3MglDCzP7/StUxdeyL5qIX8= ) ; Key ID = 64280`
	`gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; Key ID = 2536`
	`gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcbYvlY667qXEzHsDTkft9cgKy5F0S9CAP+aFK9+sJumGqvpMaOyOzsilJ+OSVFhopJ1aRFp CUpLVIcVJ3E3YATGpzB45M0D5c4oJ0RjEIUakBwcPghmSW8K1GPqj/eUs4fbVPytXwtwvUll9Lxf gUvi5DA6xD6d2ckwDyRxfcMhXYydr2hIsgfrBLmRDMi4BkxMvA23eShPd/tPvnR0gJk= ) ; Key ID = 10104`
	`gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; Key ID = 35496`
	DNSKEY=64280/SEP is now in the chain-of-trust
	DS=64280/SHA-256 verifies DNSKEY=64280/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240720152440 20240520152440 64280 gov. beqATvQPKeTKpMHslZwJz4cEMNG/M7MNcNstf5X4xRUMwwvmQ55ZVHAunrvdS4vDzgy6PMy7l/DR ZxIygJtz/FHRqD7WEYxj8hfFoz2IZd/PBzA4dnIA7GS525I6Sz8RlvMUw4ymziITotDm+7IMuBTu MQ266jXfYum+z8DRJjSqsr23j9aB4M4q5wOZWN2/WVBL8wr+CVxRY3MZOF48OacDyYSpG0xkgUiK DyBpyZ8PXT36LFk2aIkbQJF1onbYz1d8hMDap7IiLuzdOAkYU1pC24HgTNmXdhwinRhFePh5SW8A vtgKjQQdCkHsHyvkyzIjVfiaaK25Muvt3Eilfw== )`
	`gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240720152440 20240520152440 2536 gov. ar9xV2CFzuHySpzh+HX9s8aq68NgE7z0vjYoYWN167QFWeUhlDU4u8hFHQ/C0cFR9XagtNeicnqp qdANIQhGXQ== )`
	RRSIG=64280 and DNSKEY=64280/SEP verifies the DNSKEY RRset
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=2536/SEP is now in the chain-of-trust
	DNSKEY=10104 is now in the chain-of-trust
	DNSKEY=35496 is now in the chain-of-trust
	Query to a.ns.gov for usandc.gov/A
	Received 1088 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 1088 octets ;; HEADER SECTION ;; id = 62694 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 7 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; usandc.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) usandc.gov. 10800 IN NS altdsos.altusandc.gov. usandc.gov. 10800 IN NS altdstork.altusandc.gov. usandc.gov. 10800 IN NS dsos.aftac.gov. usandc.gov. 10800 IN NS dstork.aftac.gov. usandc.gov. 1800 IN NSEC usandc\000.gov. NS RRSIG NSEC usandc.gov. 1800 IN RRSIG ( NSEC 8 2 1800 20240522224939 20240520204939 10104 gov. PnGKwwT8WqGZ+WCbXJxQHgjRLWpyG8JtEBncpQ48H3AXoB4l5nBGmBjXAPvqttymt3wVhKWMixKN CFqsc5l2vPpO+h8gDsIVWVMeoCwN44Th4ubP1zFH7s7xtqP5j611ORWD+blglqm3mei4JDUOuJ/9 k/uhl+oiZ4Dt9li8BLbP0jQjHfQ814kMI2yfYFURiai1yNaamBqovf2TqaXY4A== ) usandc.gov. 1800 IN RRSIG ( NSEC 13 2 1800 20240522224939 20240520204939 35496 gov. Mo9dyLRmy7yfpG5w9NT3aOquvO41fKRU+wFCUOJ5KYxXRQogebl0/FP9kzTQ9NqGxFGm8LNtDn/m wsKhhDoqew== ) ;; ADDITIONAL SECTION (7 records) dsos.aftac.gov. 3600 IN A 198.47.84.11 dstork.aftac.gov. 3600 IN A 198.47.84.12 dsos.aftac.gov. 3600 IN RRSIG ( A 8 3 3600 20240522224939 20240520204939 10104 gov. MjxipiM11ifUbXzSXoKZq64IRywJ6MLc4mYyrRqqwpUPy2c3xkKHAGcHWMf8VXhDkE4UViO7WQoN 8ZXoVotq5V2MPg4HAgPpoUYnjp1Jipw4abYzy3+WIHJJ9u80UdMaWiPp8iEZ308VTLYGcAYqJUqJ MjuURKBN9hxZZqxVWQ84mEOkbNXAkWWxMgEna/tMkeS6DI5nN5u5cY8HxDUBhg== ) dsos.aftac.gov. 3600 IN RRSIG ( A 13 3 3600 20240522224939 20240520204939 35496 gov. Fm52ENLDZ5Bi1Y1VmjPJX+vSdDysM850bJox8ZGcS5HxF2aa2bhkxIVn7p7py1rBDiHruJdXKMUv sE00M8QjNQ== ) dstork.aftac.gov. 3600 IN RRSIG ( A 8 3 3600 20240522224939 20240520204939 10104 gov. glokn9Lwlln4x6Wh2dM+Z4K/9VKaJR8sUBOHwoqKFt0tUeLC5ikzUrpZ81dHP9CL5YzZqfgOceIV +GYDjjDUXhJ4btv93D1qkO6gtuoens/IksavRv6xkGv6c9v72RfReig6IoRC8HmEUqw6r5q5NhUf 4J6w1vI8jcJ2G90yMbEEE2Q03EFwdsR5ElHf2D1gzd4lw47foBgaUeCrKmXUwQ== ) dstork.aftac.gov. 3600 IN RRSIG ( A 13 3 3600 20240522224939 20240520204939 35496 gov. gQKSwR+w/4/0++SpUJffq3qMPsY7sDAKL6zKm8tXLqMT4IFyCUweQFevnr49//Zggl82nrIBqIyA cdNUcZUMaw== ) ;; { "EDNS-VERSION": 0 }
	Query to a.ns.gov for usandc.gov/DNSKEY
	Received 1088 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 1088 octets ;; HEADER SECTION ;; id = 42189 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 7 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; usandc.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) usandc.gov. 10800 IN NS altdsos.altusandc.gov. usandc.gov. 10800 IN NS altdstork.altusandc.gov. usandc.gov. 10800 IN NS dsos.aftac.gov. usandc.gov. 10800 IN NS dstork.aftac.gov. usandc.gov. 1800 IN NSEC usandc\000.gov. NS RRSIG NSEC usandc.gov. 1800 IN RRSIG ( NSEC 8 2 1800 20240522224939 20240520204939 10104 gov. PnGKwwT8WqGZ+WCbXJxQHgjRLWpyG8JtEBncpQ48H3AXoB4l5nBGmBjXAPvqttymt3wVhKWMixKN CFqsc5l2vPpO+h8gDsIVWVMeoCwN44Th4ubP1zFH7s7xtqP5j611ORWD+blglqm3mei4JDUOuJ/9 k/uhl+oiZ4Dt9li8BLbP0jQjHfQ814kMI2yfYFURiai1yNaamBqovf2TqaXY4A== ) usandc.gov. 1800 IN RRSIG ( NSEC 13 2 1800 20240522224939 20240520204939 35496 gov. zP4WLzkDalWpk8JmLrwBmeuWMaasN0gSXFFQ/+A23snJiVXfiUrq+JxyxO/y0HeokDpdgRYr+BHe rltTAtJFvQ== ) ;; ADDITIONAL SECTION (7 records) dsos.aftac.gov. 3600 IN A 198.47.84.11 dstork.aftac.gov. 3600 IN A 198.47.84.12 dstork.aftac.gov. 3600 IN RRSIG ( A 8 3 3600 20240522224939 20240520204939 10104 gov. glokn9Lwlln4x6Wh2dM+Z4K/9VKaJR8sUBOHwoqKFt0tUeLC5ikzUrpZ81dHP9CL5YzZqfgOceIV +GYDjjDUXhJ4btv93D1qkO6gtuoens/IksavRv6xkGv6c9v72RfReig6IoRC8HmEUqw6r5q5NhUf 4J6w1vI8jcJ2G90yMbEEE2Q03EFwdsR5ElHf2D1gzd4lw47foBgaUeCrKmXUwQ== ) dstork.aftac.gov. 3600 IN RRSIG ( A 13 3 3600 20240522224939 20240520204939 35496 gov. gs/GRCsvu/r5539hDDo+JgU6jvBL5AMclRJqqBTAWTkUTBmGN/qjxD6dwuB0SRRTX/06XhRqtzlL tiEhbYcdrg== ) dsos.aftac.gov. 3600 IN RRSIG ( A 8 3 3600 20240522224939 20240520204939 10104 gov. MjxipiM11ifUbXzSXoKZq64IRywJ6MLc4mYyrRqqwpUPy2c3xkKHAGcHWMf8VXhDkE4UViO7WQoN 8ZXoVotq5V2MPg4HAgPpoUYnjp1Jipw4abYzy3+WIHJJ9u80UdMaWiPp8iEZ308VTLYGcAYqJUqJ MjuURKBN9hxZZqxVWQ84mEOkbNXAkWWxMgEna/tMkeS6DI5nN5u5cY8HxDUBhg== ) dsos.aftac.gov. 3600 IN RRSIG ( A 13 3 3600 20240522224939 20240520204939 35496 gov. uVWc1gRSpDhupX0tAywFkgQim5QPY0rAFgderCwhyTCqT8qb3UrVf9aN5kI+HwjCblAYqQSwU5pg eysVLq7COg== ) ;; { "EDNS-VERSION": 0 }
	Found child zone usandc.gov

usandc.gov

	Checking DS between gov and usandc.gov
	Query to c.ns.gov for usandc.gov/DS
	Received 719 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 719 octets ;; HEADER SECTION ;; id = 12061 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; usandc.gov. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 300 IN SOA ( a.ns.gov. dns.cloudflare.com. 1716327900 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 300 ;minimum ) usandc.gov. 300 IN NSEC usandc\000.gov. NS RRSIG NSEC gov. 300 IN RRSIG ( SOA 8 1 300 20240522224939 20240520204939 10104 gov. hnU4fsBuMyfcF2vvc/tS3rLWdHADhXUnKYkUaYc6o2AmEIiFYtMdtzHAfqNUgu0Zos/2DNgEgHej x/NEFxaM2HhgrMEqy4RnBjXhaeI0kPoTTyoao8gq3IcE3jkPuJFGU5/kAoL5J5VDavtrS1Dxgtzt yEArYhFJ6JN/4ANnVZUbloniArbeljLbAetNh/uqaYLlTpQFdEzSRf1LOPANgQ== ) gov. 300 IN RRSIG ( SOA 13 1 300 20240522224939 20240520204939 35496 gov. h0U+wxDa2oQTMST0et1OJfb7zX19nRBtr239uIOiWdKbTbIVsTD2OzRc+R9D/dzAH14o1vh+92GX RcL3szMqsQ== ) usandc.gov. 300 IN RRSIG ( NSEC 8 2 300 20240522224939 20240520204939 10104 gov. bGOAQOWZ0hWso0tkWHue0ZaMyxUU6e3Dtzyo37X+bD5CWsiwMs1WvHROJbyEAhK/u4EusozNNtY7 wCBB1IJgVyBQS4lYspyNtfkk0o40rpQrnbpIBZx6sJ2lwjWKN5hGhG97A4FXG0WXrDUXCscoKHV0 V+aHGRnj1zjqUoRELxff1jwSwqCuv0TnKkF//grE/M72/L/jlv3TU9aUhD0bJA== ) usandc.gov. 300 IN RRSIG ( NSEC 13 2 300 20240522224939 20240520204939 35496 gov. SHrQHPZub1ob5al28YfwRJovpOeRZeDhi6plygXQ6X89tbCASdwsoevv+dQiE0PVbUFl0O8LhWLF iGnT4gNEzQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for usandc.gov in the gov zone
	Query to altdstork.altusandc.gov for usandc.gov/DNSKEY
	Unknown host altdstork.altusandc.gov
	Query to dstork.aftac.gov for usandc.gov/DNSKEY
	Received 107 bytes from 198.47.84.12
	;; Response received from [198.47.84.12] 107 octets ;; HEADER SECTION ;; id = 15352 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; usandc.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) usandc.gov. 3600 IN SOA ( mnsa-dns-001zu.aftac.gov. hostmaster.aftac.gov. 2022072702 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to altdsos.altusandc.gov for usandc.gov/A
	Unknown host altdsos.altusandc.gov
	Query to altdstork.altusandc.gov for usandc.gov/A
	Unknown host altdstork.altusandc.gov
	Query to dstork.aftac.gov for usandc.gov/A
	Received 107 bytes from 198.47.84.12
	;; Response received from [198.47.84.12] 107 octets ;; HEADER SECTION ;; id = 8983 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; usandc.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) usandc.gov. 3600 IN SOA ( mnsa-dns-001zu.aftac.gov. hostmaster.aftac.gov. 2022072702 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dstork.aftac.gov is authoritative for usandc.gov
	Query to altdsos.altusandc.gov for usandc.gov/SOA
	Unknown host altdsos.altusandc.gov
	Query to dsos.aftac.gov for usandc.gov/SOA
	Received 279 bytes from 198.47.84.11
	;; Response received from [198.47.84.11] 279 octets ;; HEADER SECTION ;; id = 599 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; usandc.gov. IN SOA ;; ANSWER SECTION (1 record) usandc.gov. 3600 IN SOA ( mnsa-dns-001zu.aftac.gov. hostmaster.aftac.gov. 2022072702 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) usandc.gov. 3600 IN NS dsos.aftac.gov. usandc.gov. 3600 IN NS mnsa-dns-001zu.altusandc.gov. usandc.gov. 3600 IN NS mnsa-dns-002zu.altusandc.gov. usandc.gov. 3600 IN NS dstork.aftac.gov. ;; ADDITIONAL SECTION (5 records) dstork.aftac.gov. 3600 IN A 198.47.84.12 dsos.aftac.gov. 3600 IN A 198.47.84.11 mnsa-dns-001zu.altusandc.gov. 3600 IN A 198.47.65.101 mnsa-dns-002zu.altusandc.gov. 3600 IN A 198.47.65.102 ;; { "EDNS-VERSION": 0 }
	Query to altdstork.altusandc.gov for usandc.gov/SOA
	Unknown host altdstork.altusandc.gov
	Query to dstork.aftac.gov for usandc.gov/A
	Received 107 bytes from 198.47.84.12
	;; Response received from [198.47.84.12] 107 octets ;; HEADER SECTION ;; id = 2103 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; usandc.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) usandc.gov. 3600 IN SOA ( mnsa-dns-001zu.aftac.gov. hostmaster.aftac.gov. 2022072702 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No NSEC records in response
	No RRSIGs found

usandc.gov

	Query to altdsos.altusandc.gov for usandc.gov/A
	Unknown host altdsos.altusandc.gov
	Query to dsos.aftac.gov for usandc.gov/A
	Received 107 bytes from 198.47.84.11
	;; Response received from [198.47.84.11] 107 octets ;; HEADER SECTION ;; id = 12693 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; usandc.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) usandc.gov. 3600 IN SOA ( mnsa-dns-001zu.aftac.gov. hostmaster.aftac.gov. 2022072702 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dsos.aftac.gov is authoritative for usandc.gov
	Query to dsos.aftac.gov for usandc.gov/A
	Received 107 bytes from 198.47.84.11
	;; Response received from [198.47.84.11] 107 octets ;; HEADER SECTION ;; id = 21858 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; usandc.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) usandc.gov. 3600 IN SOA ( mnsa-dns-001zu.aftac.gov. hostmaster.aftac.gov. 2022072702 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No NSEC records in response
	No RRSIGs found

usandc.gov

	Query to altdsos.altusandc.gov for usandc.gov/A
	Unknown host altdsos.altusandc.gov
	Query to altdstork.altusandc.gov for usandc.gov/A
	Unknown host altdstork.altusandc.gov
	No response from usandc.gov nameservers

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test usandc.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: