DNSSEC Debugger - www.ca.gov

Domain Name:

Time: 2024-05-22 00:59:28 UTC

Analyzing DNSSEC problems for www.ca.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to h.root-servers.net for ./DNSKEY
	Received 864 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 864 octets ;; HEADER SECTION ;; id = 29120 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240611000000 20240521000000 20326 . W/Hsuxwei6HE8IzojCIwmIP/lrqd6TZmm1cv7VEm7bjqgUyc5FBDUSNxWfIQiwLTn+Xqk8ZVG/68 0XZptzkT2ZxyXwK7AGFAvGrKiFBertupXxU7I5uYs27GPOnnKwlA5ZrUJW0AK66XIKMb+qVMHa7C 2agO1VOsAUSDeZtR8XJmJbzIMZN2GBlSowjWe90CX0jU+ncr58MOYEiI6N2JsWJi4gU546OrmhJd hEnPGDX/gPF5OjrgDZER2+PyjSEGdxdP0nbqlBcC39aLm3lfHNNJDzC+dxgL04qt1RiTTPhDbuMp hE2l6WxjC9N8wWzM+h0IKgDMc2oVSc4B+U5Kjw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240611000000 20240521000000 20326 . W/Hsuxwei6HE8IzojCIwmIP/lrqd6TZmm1cv7VEm7bjqgUyc5FBDUSNxWfIQiwLTn+Xqk8ZVG/68 0XZptzkT2ZxyXwK7AGFAvGrKiFBertupXxU7I5uYs27GPOnnKwlA5ZrUJW0AK66XIKMb+qVMHa7C 2agO1VOsAUSDeZtR8XJmJbzIMZN2GBlSowjWe90CX0jU+ncr58MOYEiI6N2JsWJi4gU546OrmhJd hEnPGDX/gPF5OjrgDZER2+PyjSEGdxdP0nbqlBcC39aLm3lfHNNJDzC+dxgL04qt1RiTTPhDbuMp hE2l6WxjC9N8wWzM+h0IKgDMc2oVSc4B+U5Kjw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to l.root-servers.net for www.ca.gov/A
	Received 617 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 617 octets ;; HEADER SECTION ;; id = 32595 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.ca.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240603210000 20240521200000 5613 . Hvw0nfVPqgtfimoItO/kHHQEK6pap/PosoUVt3ICHRz1eCsg6r2mKKXmXNbBZhIWf/VVFYu9gWFb 6W0gFvlX+K2ODaZfIcMRlkCtittKqjqkpLjnava2BeUSyor64Cvx/tG9zmWLphf/HyAUqCwLUGHq p5WUcrD/m2L6ifUB9blN66MUtRacQj3b7lgs1kf4DBGoKiDxOMrPhLlcR9xZRb2dOCjR06iKJdLR bqyRZZhUwWP+Tw6NgC36ythLFwjiouNwBXHw/aeYfCAuyg0slzqpFWOKBxuBvfnshVbL/aUHU4ci 9HfSt3praVg4WotzbyYh7oZDdQDoHdmjix79Rw== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to k.root-servers.net for gov/DNSKEY
	Received 610 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 610 octets ;; HEADER SECTION ;; id = 41129 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240603210000 20240521200000 5613 . Hvw0nfVPqgtfimoItO/kHHQEK6pap/PosoUVt3ICHRz1eCsg6r2mKKXmXNbBZhIWf/VVFYu9gWFb 6W0gFvlX+K2ODaZfIcMRlkCtittKqjqkpLjnava2BeUSyor64Cvx/tG9zmWLphf/HyAUqCwLUGHq p5WUcrD/m2L6ifUB9blN66MUtRacQj3b7lgs1kf4DBGoKiDxOMrPhLlcR9xZRb2dOCjR06iKJdLR bqyRZZhUwWP+Tw6NgC36ythLFwjiouNwBXHw/aeYfCAuyg0slzqpFWOKBxuBvfnshVbL/aUHU4ci 9HfSt3praVg4WotzbyYh7oZDdQDoHdmjix79Rw== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to l.root-servers.net for gov/DS
	Received 367 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 367 octets ;; HEADER SECTION ;; id = 3983 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240603210000 20240521200000 5613 . Hvw0nfVPqgtfimoItO/kHHQEK6pap/PosoUVt3ICHRz1eCsg6r2mKKXmXNbBZhIWf/VVFYu9gWFb 6W0gFvlX+K2ODaZfIcMRlkCtittKqjqkpLjnava2BeUSyor64Cvx/tG9zmWLphf/HyAUqCwLUGHq p5WUcrD/m2L6ifUB9blN66MUtRacQj3b7lgs1kf4DBGoKiDxOMrPhLlcR9xZRb2dOCjR06iKJdLR bqyRZZhUwWP+Tw6NgC36ythLFwjiouNwBXHw/aeYfCAuyg0slzqpFWOKBxuBvfnshVbL/aUHU4ci 9HfSt3praVg4WotzbyYh7oZDdQDoHdmjix79Rw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=64280/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20240603210000 20240521200000 5613 . Hvw0nfVPqgtfimoItO/kHHQEK6pap/PosoUVt3ICHRz1eCsg6r2mKKXmXNbBZhIWf/VVFYu9gWFb 6W0gFvlX+K2ODaZfIcMRlkCtittKqjqkpLjnava2BeUSyor64Cvx/tG9zmWLphf/HyAUqCwLUGHq p5WUcrD/m2L6ifUB9blN66MUtRacQj3b7lgs1kf4DBGoKiDxOMrPhLlcR9xZRb2dOCjR06iKJdLR bqyRZZhUwWP+Tw6NgC36ythLFwjiouNwBXHw/aeYfCAuyg0slzqpFWOKBxuBvfnshVbL/aUHU4ci 9HfSt3praVg4WotzbyYh7oZDdQDoHdmjix79Rw== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=64280/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 )`
	Query to b.ns.gov for gov/DNSKEY
	Received 1038 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 1038 octets ;; HEADER SECTION ;; id = 941 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (6 records) gov. 3600 IN DNSKEY ( 257 3 8 AwEAAZp0vliR0TOBCJXmdagY36BI5ZveSPE3OSrcXKDs8IZa86x1+gwbheJcfLB6Fw6cWYUXaNgA mFcbxqIqWc5VJSyPS9yCPdEOLEIiegwCmcWnNsEyc0snKTyypXnvJ5JNhoznpFILDqlksAqP/aiq 1/l0w8TMkRbRrViLrJ1ayaScZ0nn/ge5wNpX09T9RI+gF1OIMJDdgH1vi0a+t6smSy4pUrerFTsu y8JAL+PP85MZiOssT9yoERfWSjFKde6PrQX5vj090AxT+hztb+q2EFXnF1a2L73/3UarB19k5NR3 MT1uM7ddag64Q0lg3aTy3MglDCzP7/StUxdeyL5qIX8= ) ; Key ID = 64280 gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; Key ID = 2536 gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcbYvlY667qXEzHsDTkft9cgKy5F0S9CAP+aFK9+sJumGqvpMaOyOzsilJ+OSVFhopJ1aRFp CUpLVIcVJ3E3YATGpzB45M0D5c4oJ0RjEIUakBwcPghmSW8K1GPqj/eUs4fbVPytXwtwvUll9Lxf gUvi5DA6xD6d2ckwDyRxfcMhXYydr2hIsgfrBLmRDMi4BkxMvA23eShPd/tPvnR0gJk= ) ; Key ID = 10104 gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; Key ID = 35496 gov. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240720152440 20240520152440 64280 gov. beqATvQPKeTKpMHslZwJz4cEMNG/M7MNcNstf5X4xRUMwwvmQ55ZVHAunrvdS4vDzgy6PMy7l/DR ZxIygJtz/FHRqD7WEYxj8hfFoz2IZd/PBzA4dnIA7GS525I6Sz8RlvMUw4ymziITotDm+7IMuBTu MQ266jXfYum+z8DRJjSqsr23j9aB4M4q5wOZWN2/WVBL8wr+CVxRY3MZOF48OacDyYSpG0xkgUiK DyBpyZ8PXT36LFk2aIkbQJF1onbYz1d8hMDap7IiLuzdOAkYU1pC24HgTNmXdhwinRhFePh5SW8A vtgKjQQdCkHsHyvkyzIjVfiaaK25Muvt3Eilfw== ) gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240720152440 20240520152440 2536 gov. ar9xV2CFzuHySpzh+HX9s8aq68NgE7z0vjYoYWN167QFWeUhlDU4u8hFHQ/C0cFR9XagtNeicnqp qdANIQhGXQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 8 AwEAAZp0vliR0TOBCJXmdagY36BI5ZveSPE3OSrcXKDs8IZa86x1+gwbheJcfLB6Fw6cWYUXaNgA mFcbxqIqWc5VJSyPS9yCPdEOLEIiegwCmcWnNsEyc0snKTyypXnvJ5JNhoznpFILDqlksAqP/aiq 1/l0w8TMkRbRrViLrJ1ayaScZ0nn/ge5wNpX09T9RI+gF1OIMJDdgH1vi0a+t6smSy4pUrerFTsu y8JAL+PP85MZiOssT9yoERfWSjFKde6PrQX5vj090AxT+hztb+q2EFXnF1a2L73/3UarB19k5NR3 MT1uM7ddag64Q0lg3aTy3MglDCzP7/StUxdeyL5qIX8= ) ; Key ID = 64280`
	`gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; Key ID = 2536`
	`gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcbYvlY667qXEzHsDTkft9cgKy5F0S9CAP+aFK9+sJumGqvpMaOyOzsilJ+OSVFhopJ1aRFp CUpLVIcVJ3E3YATGpzB45M0D5c4oJ0RjEIUakBwcPghmSW8K1GPqj/eUs4fbVPytXwtwvUll9Lxf gUvi5DA6xD6d2ckwDyRxfcMhXYydr2hIsgfrBLmRDMi4BkxMvA23eShPd/tPvnR0gJk= ) ; Key ID = 10104`
	`gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; Key ID = 35496`
	DNSKEY=64280/SEP is now in the chain-of-trust
	DS=64280/SHA-256 verifies DNSKEY=64280/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240720152440 20240520152440 64280 gov. beqATvQPKeTKpMHslZwJz4cEMNG/M7MNcNstf5X4xRUMwwvmQ55ZVHAunrvdS4vDzgy6PMy7l/DR ZxIygJtz/FHRqD7WEYxj8hfFoz2IZd/PBzA4dnIA7GS525I6Sz8RlvMUw4ymziITotDm+7IMuBTu MQ266jXfYum+z8DRJjSqsr23j9aB4M4q5wOZWN2/WVBL8wr+CVxRY3MZOF48OacDyYSpG0xkgUiK DyBpyZ8PXT36LFk2aIkbQJF1onbYz1d8hMDap7IiLuzdOAkYU1pC24HgTNmXdhwinRhFePh5SW8A vtgKjQQdCkHsHyvkyzIjVfiaaK25Muvt3Eilfw== )`
	`gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240720152440 20240520152440 2536 gov. ar9xV2CFzuHySpzh+HX9s8aq68NgE7z0vjYoYWN167QFWeUhlDU4u8hFHQ/C0cFR9XagtNeicnqp qdANIQhGXQ== )`
	RRSIG=64280 and DNSKEY=64280/SEP verifies the DNSKEY RRset
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=2536/SEP is now in the chain-of-trust
	DNSKEY=10104 is now in the chain-of-trust
	DNSKEY=35496 is now in the chain-of-trust
	Query to d.ns.gov for www.ca.gov/A
	Received 436 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 436 octets ;; HEADER SECTION ;; id = 5939 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.ca.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) ca.gov. 10800 IN NS asa.ns.cloudflare.com. ca.gov. 10800 IN NS chase.ns.cloudflare.com. ca.gov. 3600 IN DS ( 2371 13 2 27b709ba6ce7e22250ee3210f4030f0d81d3aaba7b70ad2c7546eb0bebdbb69e ) ca.gov. 3600 IN RRSIG ( DS 8 2 3600 20240523015929 20240520235929 10104 gov. AuDQbc/idCYGX3Qq6Pv0DT6wx7ct+olp2NTHVuJKZ9MZwifkG/fDFs5N+6hR/YPyIgQL7OZiiYpp IDJgOiW4YgmzRIi9b7gJQgvZTqNmgaJYkrMKiaa4nopSogRxw7qXSbkdVNNk8sz4L5co6IKdeZnO avvnpccyfci0oMZ2WMxmKY8H3hYQQGFJK9UyZKZb6RAV8R5fawO68bMU6SXfMw== ) ca.gov. 3600 IN RRSIG ( DS 13 2 3600 20240523015929 20240520235929 35496 gov. GZMvtggZgS+ifnRLly/FAmAP764tbc+dGPC25VDDm1INSnb4Z0VJPfQV8OFM7NkCiDa8sQ4b8SxP elfzRxvm5Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a.ns.gov for ca.gov/DNSKEY
	Received 432 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 432 octets ;; HEADER SECTION ;; id = 49751 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ca.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) ca.gov. 10800 IN NS asa.ns.cloudflare.com. ca.gov. 10800 IN NS chase.ns.cloudflare.com. ca.gov. 3600 IN DS ( 2371 13 2 27b709ba6ce7e22250ee3210f4030f0d81d3aaba7b70ad2c7546eb0bebdbb69e ) ca.gov. 3600 IN RRSIG ( DS 8 2 3600 20240523015929 20240520235929 10104 gov. AuDQbc/idCYGX3Qq6Pv0DT6wx7ct+olp2NTHVuJKZ9MZwifkG/fDFs5N+6hR/YPyIgQL7OZiiYpp IDJgOiW4YgmzRIi9b7gJQgvZTqNmgaJYkrMKiaa4nopSogRxw7qXSbkdVNNk8sz4L5co6IKdeZnO avvnpccyfci0oMZ2WMxmKY8H3hYQQGFJK9UyZKZb6RAV8R5fawO68bMU6SXfMw== ) ca.gov. 3600 IN RRSIG ( DS 13 2 3600 20240523015929 20240520235929 35496 gov. cATuv9FXxjzOv3NcFkUZiwAkl4hvJ51yJKc2Gype9/zbt9uFNWX6T7+ToJOEOhF+VPC0PSWIXbsc cbHkvmx1AA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone ca.gov

ca.gov

	Checking DS between gov and ca.gov
	Query to c.ns.gov for ca.gov/DS
	Received 377 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 377 octets ;; HEADER SECTION ;; id = 59292 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ca.gov. IN DS ;; ANSWER SECTION (3 records) ca.gov. 3600 IN DS ( 2371 13 2 27b709ba6ce7e22250ee3210f4030f0d81d3aaba7b70ad2c7546eb0bebdbb69e ) ca.gov. 3600 IN RRSIG ( DS 8 2 3600 20240523015929 20240520235929 10104 gov. AuDQbc/idCYGX3Qq6Pv0DT6wx7ct+olp2NTHVuJKZ9MZwifkG/fDFs5N+6hR/YPyIgQL7OZiiYpp IDJgOiW4YgmzRIi9b7gJQgvZTqNmgaJYkrMKiaa4nopSogRxw7qXSbkdVNNk8sz4L5co6IKdeZnO avvnpccyfci0oMZ2WMxmKY8H3hYQQGFJK9UyZKZb6RAV8R5fawO68bMU6SXfMw== ) ca.gov. 3600 IN RRSIG ( DS 13 2 3600 20240523015929 20240520235929 35496 gov. Bf2pVNdIY9/YspdXe5nKYaLgRjsKTQJp56J1W8IpxXWJQp7zt82B2yNPBEn/KAX6oQ6WL2HojvhQ FMbsK1ylBA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for ca.gov in the gov zone
	DS=2371/SHA-256 has algorithm ECDSAP256SHA256
	Found 2 RRSIGs over DS RRset
	`ca.gov. 3600 IN RRSIG ( DS 8 2 3600 20240523015929 20240520235929 10104 gov. AuDQbc/idCYGX3Qq6Pv0DT6wx7ct+olp2NTHVuJKZ9MZwifkG/fDFs5N+6hR/YPyIgQL7OZiiYpp IDJgOiW4YgmzRIi9b7gJQgvZTqNmgaJYkrMKiaa4nopSogRxw7qXSbkdVNNk8sz4L5co6IKdeZnO avvnpccyfci0oMZ2WMxmKY8H3hYQQGFJK9UyZKZb6RAV8R5fawO68bMU6SXfMw== )`
	`ca.gov. 3600 IN RRSIG ( DS 13 2 3600 20240523015929 20240520235929 35496 gov. Bf2pVNdIY9/YspdXe5nKYaLgRjsKTQJp56J1W8IpxXWJQp7zt82B2yNPBEn/KAX6oQ6WL2HojvhQ FMbsK1ylBA== )`
	RRSIG=10104 and DNSKEY=10104 verifies the DS RRset
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=2371/SHA-256 is now in the chain-of-trust
	`ca.gov. 3600 IN DS ( 2371 13 2 27b709ba6ce7e22250ee3210f4030f0d81d3aaba7b70ad2c7546eb0bebdbb69e )`
	Query to asa.ns.cloudflare.com for ca.gov/DNSKEY
	Received 297 bytes from 108.162.192.246
	;; Response received from [108.162.192.246] 297 octets ;; HEADER SECTION ;; id = 14291 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ca.gov. IN DNSKEY ;; ANSWER SECTION (3 records) ca.gov. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; Key ID = 2371 ca.gov. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; Key ID = 34505 ca.gov. 3600 IN RRSIG ( DNSKEY 13 2 3600 20240711032312 20240511032312 2371 ca.gov. K+iJOJjvZaiSIkmXXA6ERVael/VK+If9JovKW/m8sAgjERsN96dmkRXnEFAPBuKsmPDn9keJn/qQ AKuA6gTwAQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for ca.gov
	`ca.gov. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; Key ID = 2371`
	`ca.gov. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; Key ID = 34505`
	DNSKEY=2371/SEP is now in the chain-of-trust
	DS=2371/SHA-256 verifies DNSKEY=2371/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ca.gov. 3600 IN RRSIG ( DNSKEY 13 2 3600 20240711032312 20240511032312 2371 ca.gov. K+iJOJjvZaiSIkmXXA6ERVael/VK+If9JovKW/m8sAgjERsN96dmkRXnEFAPBuKsmPDn9keJn/qQ AKuA6gTwAQ== )`
	RRSIG=2371 and DNSKEY=2371/SEP verifies the DNSKEY RRset
	DNSKEY=34505 is now in the chain-of-trust
	Query to asa.ns.cloudflare.com for www.ca.gov/A
	Received 177 bytes from 172.64.32.246
	;; Response received from [172.64.32.246] 177 octets ;; HEADER SECTION ;; id = 29089 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.ca.gov. IN A ;; ANSWER SECTION (2 records) www.ca.gov. 300 IN CNAME www.ca.gov.edgekey.net. www.ca.gov. 300 IN RRSIG ( CNAME 13 3 300 20240523015929 20240520235929 34505 ca.gov. T9tX7jbI50TfSnO3wazAaUoqN4gPC5DKLAXpx19x5l4dF8spb9ucH70SrFqCx5u4Ohssuymupbi3 pk4WwbtxbQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	asa.ns.cloudflare.com is authoritative for www.ca.gov
	Query to asa.ns.cloudflare.com for www.ca.gov/DNSKEY
	Received 177 bytes from 108.162.192.246
	;; Response received from [108.162.192.246] 177 octets ;; HEADER SECTION ;; id = 59754 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.ca.gov. IN DNSKEY ;; ANSWER SECTION (2 records) www.ca.gov. 300 IN CNAME www.ca.gov.edgekey.net. www.ca.gov. 300 IN RRSIG ( CNAME 13 3 300 20240523015929 20240520235929 34505 ca.gov. rfSCtETF7zRNTMUMOIoYZ2uiS5BZcrROJ25XiFOQJL+JE8Ie/s1Rq9lApuiEOv7V9eXGvOsAYGKh 9IgL/SsfZQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by ca.gov zone
	www.ca.gov is a CNAME to www.ca.gov.edgekey.net
	Found 1 RRSIGs over CNAME RRset
	`www.ca.gov. 300 IN RRSIG ( CNAME 13 3 300 20240523015929 20240520235929 34505 ca.gov. T9tX7jbI50TfSnO3wazAaUoqN4gPC5DKLAXpx19x5l4dF8spb9ucH70SrFqCx5u4Ohssuymupbi3 pk4WwbtxbQ== )`
	RRSIG=34505 and DNSKEY=34505 verifies the CNAME RRset

	Query to i.root-servers.net for www.ca.gov.edgekey.net/A
	Received 1185 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 1185 octets ;; HEADER SECTION ;; id = 33736 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.ca.gov.edgekey.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20240603210000 20240521200000 5613 . Nad//IINkZhlf63dbs2psMp+2ut5GZsco06ZhRd0ZgmGl38guh16dMEI/QiRA4oc8DTXspLdR4SZ 7nIy4/G1XG8zl3FqKW+5uWczlnZnYWtJHuB2rf3BpAIC3+cP3uSemLburEanlT2oMq0GZwKe2xIa 7+eiHH8KifNYeE3jvsPA17ag3DdN9PbIxPWdBsDCazjSKp7lEkPw7qFaeHGSDgouPNDea0hudyAI MGsRybDaJAv38V+3GmLXtlxRgo6u6rCdfPcagLmBYkaTPhnMQSYGMFfLCYZZORNMjPD/HIcQok8U 0Fy5G07XAONOqLtqN/4+xJ8TmnjsWwFg9PS0eA== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 a.gtld-servers.net. 172800 IN A 192.5.6.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 ;; { "EDNS-VERSION": 0 }
	Query to k.root-servers.net for net/DNSKEY
	Received 1160 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 1160 octets ;; HEADER SECTION ;; id = 18023 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20240603210000 20240521200000 5613 . Nad//IINkZhlf63dbs2psMp+2ut5GZsco06ZhRd0ZgmGl38guh16dMEI/QiRA4oc8DTXspLdR4SZ 7nIy4/G1XG8zl3FqKW+5uWczlnZnYWtJHuB2rf3BpAIC3+cP3uSemLburEanlT2oMq0GZwKe2xIa 7+eiHH8KifNYeE3jvsPA17ag3DdN9PbIxPWdBsDCazjSKp7lEkPw7qFaeHGSDgouPNDea0hudyAI MGsRybDaJAv38V+3GmLXtlxRgo6u6rCdfPcagLmBYkaTPhnMQSYGMFfLCYZZORNMjPD/HIcQok8U 0Fy5G07XAONOqLtqN/4+xJ8TmnjsWwFg9PS0eA== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 m.gtld-servers.net. 172800 IN A 192.55.83.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; { "EDNS-VERSION": 0 }
	Found child zone net

net

	Checking DS between . and net
	Query to g.root-servers.net for net/DS
	Received 367 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 367 octets ;; HEADER SECTION ;; id = 15471 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DS ;; ANSWER SECTION (2 records) net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20240603210000 20240521200000 5613 . Nad//IINkZhlf63dbs2psMp+2ut5GZsco06ZhRd0ZgmGl38guh16dMEI/QiRA4oc8DTXspLdR4SZ 7nIy4/G1XG8zl3FqKW+5uWczlnZnYWtJHuB2rf3BpAIC3+cP3uSemLburEanlT2oMq0GZwKe2xIa 7+eiHH8KifNYeE3jvsPA17ag3DdN9PbIxPWdBsDCazjSKp7lEkPw7qFaeHGSDgouPNDea0hudyAI MGsRybDaJAv38V+3GmLXtlxRgo6u6rCdfPcagLmBYkaTPhnMQSYGMFfLCYZZORNMjPD/HIcQok8U 0Fy5G07XAONOqLtqN/4+xJ8TmnjsWwFg9PS0eA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for net in the . zone
	DS=37331/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`net. 86400 IN RRSIG ( DS 8 1 86400 20240603210000 20240521200000 5613 . Nad//IINkZhlf63dbs2psMp+2ut5GZsco06ZhRd0ZgmGl38guh16dMEI/QiRA4oc8DTXspLdR4SZ 7nIy4/G1XG8zl3FqKW+5uWczlnZnYWtJHuB2rf3BpAIC3+cP3uSemLburEanlT2oMq0GZwKe2xIa 7+eiHH8KifNYeE3jvsPA17ag3DdN9PbIxPWdBsDCazjSKp7lEkPw7qFaeHGSDgouPNDea0hudyAI MGsRybDaJAv38V+3GmLXtlxRgo6u6rCdfPcagLmBYkaTPhnMQSYGMFfLCYZZORNMjPD/HIcQok8U 0Fy5G07XAONOqLtqN/4+xJ8TmnjsWwFg9PS0eA== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=37331/SHA-256 is now in the chain-of-trust
	`net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b )`
	Query to l.gtld-servers.net for net/DNSKEY
	Received 291 bytes from 192.41.162.30
	;; Response received from [192.41.162.30] 291 octets ;; HEADER SECTION ;; id = 33321 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (3 records) net. 86400 IN DNSKEY ( 256 3 13 56fSEr8Q2Bl/n3F1QOjcCUqKU1NITVCsZWfKkLiIhbMCsJXeLnuqEL45zAjYm7yZtSZjzguugrN5 1pay45GWWA== ) ; Key ID = 51809 net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; Key ID = 37331 net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20240601141035 20240517140535 37331 net. qOsooWR4HrL/Zbm95bWfpBIngzRM74y8DLX7uZfytCQcZSOaZ+MDuCi6fbfCeSMOCYJIKQa/9mqM EJPgfV1SJQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for net
	`net. 86400 IN DNSKEY ( 256 3 13 56fSEr8Q2Bl/n3F1QOjcCUqKU1NITVCsZWfKkLiIhbMCsJXeLnuqEL45zAjYm7yZtSZjzguugrN5 1pay45GWWA== ) ; Key ID = 51809`
	`net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; Key ID = 37331`
	DNSKEY=37331/SEP is now in the chain-of-trust
	DS=37331/SHA-256 verifies DNSKEY=37331/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20240601141035 20240517140535 37331 net. qOsooWR4HrL/Zbm95bWfpBIngzRM74y8DLX7uZfytCQcZSOaZ+MDuCi6fbfCeSMOCYJIKQa/9mqM EJPgfV1SJQ== )`
	RRSIG=37331 and DNSKEY=37331/SEP verifies the DNSKEY RRset
	DNSKEY=51809 is now in the chain-of-trust
	Query to l.gtld-servers.net for www.ca.gov.edgekey.net/A
	Received 930 bytes from 192.41.162.30
	;; Response received from [192.41.162.30] 930 octets ;; HEADER SECTION ;; id = 24963 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 12 arcount = 17 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.ca.gov.edgekey.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (12 records) edgekey.net. 172800 IN NS a6-65.akam.net. edgekey.net. 172800 IN NS a12-65.akam.net. edgekey.net. 172800 IN NS a7-64.akam.net. edgekey.net. 172800 IN NS a16-65.akam.net. edgekey.net. 172800 IN NS a18-65.akam.net. edgekey.net. 172800 IN NS a1-66.akam.net. edgekey.net. 172800 IN NS a28-65.akam.net. edgekey.net. 172800 IN NS a10-66.akam.net. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 13 2 86400 20240528065428 20240521054428 51809 net. +QjJVC7b0ovjm+qhCDKXyUAZj4NjuxZSuBNtqvjNUT6YWj/BlpOwTsj53DLjpP5M2uvg+zwO/eQ6 vCwD0AbOJQ== ) 2A0963GVLTDDOGKCJI3EUJGINNCDIME3.net. 86400 IN NSEC3 ( 1 1 0 - 2a0dj5vpi8s7nqvoi1idabi5tt0jc7g7 NS DS RRSIG ) 2A0963GVLTDDOGKCJI3EUJGINNCDIME3.net. 86400 IN RRSIG ( NSEC3 13 2 86400 20240528065931 20240521054931 51809 net. zE3wiUr+0xil89nmPt/kNJhx5FEb4WYG3aiCHUq/muJV9o96HiniqxYc5gF2OBxPoZtxWYFxe/QE yYfl3rMQ9A== ) ;; ADDITIONAL SECTION (17 records) a6-65.akam.net. 172800 IN A 23.211.133.65 a6-65.akam.net. 172800 IN AAAA 2600:1401:1::41 a12-65.akam.net. 172800 IN A 184.26.160.65 a12-65.akam.net. 172800 IN AAAA 2600:1480:f000::41 a7-64.akam.net. 172800 IN A 23.61.199.64 a7-64.akam.net. 172800 IN AAAA 2600:1406:32::40 a16-65.akam.net. 172800 IN A 23.211.132.65 a16-65.akam.net. 172800 IN AAAA 2600:1406:1b::41 a18-65.akam.net. 172800 IN AAAA 2600:1480:4800::41 a18-65.akam.net. 172800 IN A 95.101.36.65 a1-66.akam.net. 172800 IN A 193.108.91.66 a1-66.akam.net. 172800 IN AAAA 2600:1401:2::42 a28-65.akam.net. 172800 IN AAAA 2600:1480:d800::41 a28-65.akam.net. 172800 IN A 95.100.173.65 a10-66.akam.net. 172800 IN AAAA 2600:1480:d000::42 a10-66.akam.net. 172800 IN A 96.7.50.66 ;; { "EDNS-VERSION": 0 }
	Query to h.gtld-servers.net for edgekey.net/DNSKEY
	Received 919 bytes from 192.54.112.30
	;; Response received from [192.54.112.30] 919 octets ;; HEADER SECTION ;; id = 14063 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 12 arcount = 17 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edgekey.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (12 records) edgekey.net. 172800 IN NS a6-65.akam.net. edgekey.net. 172800 IN NS a12-65.akam.net. edgekey.net. 172800 IN NS a7-64.akam.net. edgekey.net. 172800 IN NS a16-65.akam.net. edgekey.net. 172800 IN NS a18-65.akam.net. edgekey.net. 172800 IN NS a1-66.akam.net. edgekey.net. 172800 IN NS a28-65.akam.net. edgekey.net. 172800 IN NS a10-66.akam.net. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 13 2 86400 20240528065428 20240521054428 51809 net. +QjJVC7b0ovjm+qhCDKXyUAZj4NjuxZSuBNtqvjNUT6YWj/BlpOwTsj53DLjpP5M2uvg+zwO/eQ6 vCwD0AbOJQ== ) 2A0963GVLTDDOGKCJI3EUJGINNCDIME3.net. 86400 IN NSEC3 ( 1 1 0 - 2a0dj5vpi8s7nqvoi1idabi5tt0jc7g7 NS DS RRSIG ) 2A0963GVLTDDOGKCJI3EUJGINNCDIME3.net. 86400 IN RRSIG ( NSEC3 13 2 86400 20240528065931 20240521054931 51809 net. zE3wiUr+0xil89nmPt/kNJhx5FEb4WYG3aiCHUq/muJV9o96HiniqxYc5gF2OBxPoZtxWYFxe/QE yYfl3rMQ9A== ) ;; ADDITIONAL SECTION (17 records) a6-65.akam.net. 172800 IN A 23.211.133.65 a6-65.akam.net. 172800 IN AAAA 2600:1401:1::41 a12-65.akam.net. 172800 IN A 184.26.160.65 a12-65.akam.net. 172800 IN AAAA 2600:1480:f000::41 a7-64.akam.net. 172800 IN A 23.61.199.64 a7-64.akam.net. 172800 IN AAAA 2600:1406:32::40 a16-65.akam.net. 172800 IN A 23.211.132.65 a16-65.akam.net. 172800 IN AAAA 2600:1406:1b::41 a18-65.akam.net. 172800 IN AAAA 2600:1480:4800::41 a18-65.akam.net. 172800 IN A 95.101.36.65 a1-66.akam.net. 172800 IN A 193.108.91.66 a1-66.akam.net. 172800 IN AAAA 2600:1401:2::42 a28-65.akam.net. 172800 IN AAAA 2600:1480:d800::41 a28-65.akam.net. 172800 IN A 95.100.173.65 a10-66.akam.net. 172800 IN AAAA 2600:1480:d000::42 a10-66.akam.net. 172800 IN A 96.7.50.66 ;; { "EDNS-VERSION": 0 }
	Found child zone edgekey.net

edgekey.net

	Checking DS between net and edgekey.net
	Query to m.gtld-servers.net for edgekey.net/DS
	Received 569 bytes from 192.55.83.30
	;; Response received from [192.55.83.30] 569 octets ;; HEADER SECTION ;; id = 64097 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edgekey.net. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 13 2 86400 20240528065428 20240521054428 51809 net. +QjJVC7b0ovjm+qhCDKXyUAZj4NjuxZSuBNtqvjNUT6YWj/BlpOwTsj53DLjpP5M2uvg+zwO/eQ6 vCwD0AbOJQ== ) net. 900 IN SOA ( a.gtld-servers.net. nstld.verisign-grs.com. 1716339539 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 86400 ;minimum ) net. 900 IN RRSIG ( SOA 13 1 900 20240529005859 20240521234859 51809 net. 9IFIWPQ6Zw8HGtN7LFeaz3Ir8i//WNCUt2fUo70qLsUY22E6brC1O+8rIDdCT84TFdJiajkAL7pA V4k9SlSucw== ) 2A0963GVLTDDOGKCJI3EUJGINNCDIME3.net. 86400 IN NSEC3 ( 1 1 0 - 2a0dj5vpi8s7nqvoi1idabi5tt0jc7g7 NS DS RRSIG ) 2A0963GVLTDDOGKCJI3EUJGINNCDIME3.net. 86400 IN RRSIG ( NSEC3 13 2 86400 20240528065931 20240521054931 51809 net. zE3wiUr+0xil89nmPt/kNJhx5FEb4WYG3aiCHUq/muJV9o96HiniqxYc5gF2OBxPoZtxWYFxe/QE yYfl3rMQ9A== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for edgekey.net in the net zone
	Query to a6-65.akam.net for edgekey.net/DNSKEY
	Received 103 bytes from 23.211.133.65
	;; Response received from [23.211.133.65] 103 octets ;; HEADER SECTION ;; id = 52865 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edgekey.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) edgekey.net. 180 IN SOA ( ns1-2.akamai.com. hostmaster.akamai.com. 1579360496 ;serial 900 ;refresh 300 ;retry 604800 ;expire 180 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to a10-66.akam.net for www.ca.gov.edgekey.net/A
	Received 88 bytes from 96.7.50.66
	;; Response received from [96.7.50.66] 88 octets ;; HEADER SECTION ;; id = 65080 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.ca.gov.edgekey.net. IN A ;; ANSWER SECTION (1 record) www.ca.gov.edgekey.net. 300 IN CNAME e97907.dscb.akamaiedge.net. ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a10-66.akam.net is authoritative for www.ca.gov.edgekey.net
	Query to a7-64.akam.net for gov.edgekey.net/DNSKEY
	Received 107 bytes from 23.61.199.64
	;; Response received from [23.61.199.64] 107 octets ;; HEADER SECTION ;; id = 17579 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.edgekey.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) edgekey.net. 180 IN SOA ( ns1-2.akamai.com. hostmaster.akamai.com. 1579360496 ;serial 900 ;refresh 300 ;retry 604800 ;expire 180 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a10-66.akam.net for ca.gov.edgekey.net/DNSKEY
	Received 110 bytes from 96.7.50.66
	;; Response received from [96.7.50.66] 110 octets ;; HEADER SECTION ;; id = 7848 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ca.gov.edgekey.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) edgekey.net. 180 IN SOA ( ns1-2.akamai.com. hostmaster.akamai.com. 1579360496 ;serial 900 ;refresh 300 ;retry 604800 ;expire 180 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a7-64.akam.net for www.ca.gov.edgekey.net/DNSKEY
	Received 88 bytes from 23.61.199.64
	;; Response received from [23.61.199.64] 88 octets ;; HEADER SECTION ;; id = 57102 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.ca.gov.edgekey.net. IN DNSKEY ;; ANSWER SECTION (1 record) www.ca.gov.edgekey.net. 300 IN CNAME e97907.dscb.akamaiedge.net. ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	www.ca.gov.edgekey.net is a CNAME to e97907.dscb.akamaiedge.net
	No RRSIGs found

net

	Query to d.gtld-servers.net for e97907.dscb.akamaiedge.net/A
	Received 731 bytes from 192.31.80.30
	;; Response received from [192.31.80.30] 731 octets ;; HEADER SECTION ;; id = 37561 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 12 arcount = 10 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e97907.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (12 records) akamaiedge.net. 172800 IN NS la1.akamaiedge.net. akamaiedge.net. 172800 IN NS la3.akamaiedge.net. akamaiedge.net. 172800 IN NS lar2.akamaiedge.net. akamaiedge.net. 172800 IN NS ns3-194.akamaiedge.net. akamaiedge.net. 172800 IN NS a12-192.akamaiedge.net. akamaiedge.net. 172800 IN NS a28-192.akamaiedge.net. akamaiedge.net. 172800 IN NS a6-192.akamaiedge.net. akamaiedge.net. 172800 IN NS a1-192.akamaiedge.net. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 13 2 86400 20240528065428 20240521054428 51809 net. +QjJVC7b0ovjm+qhCDKXyUAZj4NjuxZSuBNtqvjNUT6YWj/BlpOwTsj53DLjpP5M2uvg+zwO/eQ6 vCwD0AbOJQ== ) GCRQED795V343AT1SHAJVTRUH2TP3NQV.net. 86400 IN NSEC3 ( 1 1 0 - gcrscv89i3tl9et9jv9hp27b83ehje9m NS DS RRSIG ) GCRQED795V343AT1SHAJVTRUH2TP3NQV.net. 86400 IN RRSIG ( NSEC3 13 2 86400 20240527064836 20240520053836 51809 net. MupeUYubxweJhuCVlx+hLDdyXFL1BPSiBndL0eDdrzrpccXBrqs8N/aikDW56b/B1ZEs2fsaTkzx ys5TATrUJw== ) ;; ADDITIONAL SECTION (10 records) la1.akamaiedge.net. 172800 IN A 184.26.161.192 la3.akamaiedge.net. 172800 IN A 95.101.36.192 lar2.akamaiedge.net. 172800 IN A 2.16.40.192 ns3-194.akamaiedge.net. 172800 IN A 23.61.199.194 ns3-194.akamaiedge.net. 172800 IN AAAA 2600:1406:32::c2 a12-192.akamaiedge.net. 172800 IN A 184.26.160.192 a28-192.akamaiedge.net. 172800 IN A 95.100.173.192 a6-192.akamaiedge.net. 172800 IN A 23.211.133.192 a1-192.akamaiedge.net. 172800 IN A 193.108.88.0 ;; { "EDNS-VERSION": 0 }
	Query to c.gtld-servers.net for akamaiedge.net/DNSKEY
	Received 719 bytes from 192.26.92.30
	;; Response received from [192.26.92.30] 719 octets ;; HEADER SECTION ;; id = 11344 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 12 arcount = 10 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (12 records) akamaiedge.net. 172800 IN NS la1.akamaiedge.net. akamaiedge.net. 172800 IN NS la3.akamaiedge.net. akamaiedge.net. 172800 IN NS lar2.akamaiedge.net. akamaiedge.net. 172800 IN NS ns3-194.akamaiedge.net. akamaiedge.net. 172800 IN NS a12-192.akamaiedge.net. akamaiedge.net. 172800 IN NS a28-192.akamaiedge.net. akamaiedge.net. 172800 IN NS a6-192.akamaiedge.net. akamaiedge.net. 172800 IN NS a1-192.akamaiedge.net. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 13 2 86400 20240528065428 20240521054428 51809 net. +QjJVC7b0ovjm+qhCDKXyUAZj4NjuxZSuBNtqvjNUT6YWj/BlpOwTsj53DLjpP5M2uvg+zwO/eQ6 vCwD0AbOJQ== ) GCRQED795V343AT1SHAJVTRUH2TP3NQV.net. 86400 IN NSEC3 ( 1 1 0 - gcrscv89i3tl9et9jv9hp27b83ehje9m NS DS RRSIG ) GCRQED795V343AT1SHAJVTRUH2TP3NQV.net. 86400 IN RRSIG ( NSEC3 13 2 86400 20240527064836 20240520053836 51809 net. MupeUYubxweJhuCVlx+hLDdyXFL1BPSiBndL0eDdrzrpccXBrqs8N/aikDW56b/B1ZEs2fsaTkzx ys5TATrUJw== ) ;; ADDITIONAL SECTION (10 records) la1.akamaiedge.net. 172800 IN A 184.26.161.192 la3.akamaiedge.net. 172800 IN A 95.101.36.192 lar2.akamaiedge.net. 172800 IN A 2.16.40.192 ns3-194.akamaiedge.net. 172800 IN A 23.61.199.194 ns3-194.akamaiedge.net. 172800 IN AAAA 2600:1406:32::c2 a12-192.akamaiedge.net. 172800 IN A 184.26.160.192 a28-192.akamaiedge.net. 172800 IN A 95.100.173.192 a6-192.akamaiedge.net. 172800 IN A 23.211.133.192 a1-192.akamaiedge.net. 172800 IN A 193.108.88.0 ;; { "EDNS-VERSION": 0 }
	Found child zone akamaiedge.net

akamaiedge.net

	Checking DS between net and akamaiedge.net
	Query to k.gtld-servers.net for akamaiedge.net/DS
	Received 572 bytes from 192.52.178.30
	;; Response received from [192.52.178.30] 572 octets ;; HEADER SECTION ;; id = 62733 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; akamaiedge.net. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 13 2 86400 20240528065428 20240521054428 51809 net. +QjJVC7b0ovjm+qhCDKXyUAZj4NjuxZSuBNtqvjNUT6YWj/BlpOwTsj53DLjpP5M2uvg+zwO/eQ6 vCwD0AbOJQ== ) net. 900 IN SOA ( a.gtld-servers.net. nstld.verisign-grs.com. 1716339539 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 86400 ;minimum ) net. 900 IN RRSIG ( SOA 13 1 900 20240529005859 20240521234859 51809 net. 9IFIWPQ6Zw8HGtN7LFeaz3Ir8i//WNCUt2fUo70qLsUY22E6brC1O+8rIDdCT84TFdJiajkAL7pA V4k9SlSucw== ) GCRQED795V343AT1SHAJVTRUH2TP3NQV.net. 86400 IN NSEC3 ( 1 1 0 - gcrscv89i3tl9et9jv9hp27b83ehje9m NS DS RRSIG ) GCRQED795V343AT1SHAJVTRUH2TP3NQV.net. 86400 IN RRSIG ( NSEC3 13 2 86400 20240527064836 20240520053836 51809 net. MupeUYubxweJhuCVlx+hLDdyXFL1BPSiBndL0eDdrzrpccXBrqs8N/aikDW56b/B1ZEs2fsaTkzx ys5TATrUJw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for akamaiedge.net in the net zone
	Query to a28-192.akamaiedge.net for akamaiedge.net/DNSKEY
	Received 109 bytes from 95.100.173.192
	;; Response received from [95.100.173.192] 109 octets ;; HEADER SECTION ;; id = 32196 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) akamaiedge.net. 180 IN SOA ( internal.akamaiedge.net. hostmaster.akamai.com. 1559044082 ;serial 90000 ;refresh 90000 ;retry 90000 ;expire 180 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to la3.akamaiedge.net for e97907.dscb.akamaiedge.net/A
	Received 379 bytes from 95.101.36.192
	;; Response received from [95.101.36.192] 379 octets ;; HEADER SECTION ;; id = 43761 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 10 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e97907.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) dscb.akamaiedge.net. 4000 IN NS n7dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n3dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n2dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n0dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n4dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n5dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n6dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n1dscb.akamaiedge.net. ;; ADDITIONAL SECTION (10 records) n7dscb.akamaiedge.net. 4000 IN A 23.220.107.16 n2dscb.akamaiedge.net. 4000 IN A 23.220.107.25 n6dscb.akamaiedge.net. 4000 IN A 23.222.0.216 n0dscb.akamaiedge.net. 4000 IN A 88.221.81.192 n4dscb.akamaiedge.net. 4000 IN A 23.222.0.206 n3dscb.akamaiedge.net. 4000 IN A 23.222.16.134 n0dscb.akamaiedge.net. 4000 IN AAAA 2600:1480:e800::c0 n1dscb.akamaiedge.net. 4000 IN A 104.78.78.84 n5dscb.akamaiedge.net. 4000 IN A 23.222.0.205 ;; { "EDNS-VERSION": 0 }
	Query to la1.akamaiedge.net for dscb.akamaiedge.net/DNSKEY
	Received 372 bytes from 184.26.161.192
	;; Response received from [184.26.161.192] 372 octets ;; HEADER SECTION ;; id = 6176 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 10 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dscb.akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) dscb.akamaiedge.net. 4000 IN NS n1dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n4dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n6dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n0dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n7dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n2dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n3dscb.akamaiedge.net. dscb.akamaiedge.net. 4000 IN NS n5dscb.akamaiedge.net. ;; ADDITIONAL SECTION (10 records) n5dscb.akamaiedge.net. 4000 IN A 23.222.0.205 n0dscb.akamaiedge.net. 4000 IN AAAA 2600:1480:e800::c0 n2dscb.akamaiedge.net. 4000 IN A 23.220.107.25 n3dscb.akamaiedge.net. 4000 IN A 23.222.16.134 n1dscb.akamaiedge.net. 4000 IN A 104.78.78.84 n6dscb.akamaiedge.net. 4000 IN A 23.222.0.216 n7dscb.akamaiedge.net. 4000 IN A 23.220.107.16 n0dscb.akamaiedge.net. 4000 IN A 88.221.81.192 n4dscb.akamaiedge.net. 4000 IN A 23.222.0.206 ;; { "EDNS-VERSION": 0 }
	Found child zone dscb.akamaiedge.net

dscb.akamaiedge.net

	Checking DS between akamaiedge.net and dscb.akamaiedge.net
	Query to a28-192.akamaiedge.net for dscb.akamaiedge.net/DS
	Received 114 bytes from 95.100.173.192
	;; Response received from [95.100.173.192] 114 octets ;; HEADER SECTION ;; id = 7947 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dscb.akamaiedge.net. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) akamaiedge.net. 180 IN SOA ( internal.akamaiedge.net. hostmaster.akamai.com. 1559044082 ;serial 90000 ;refresh 90000 ;retry 90000 ;expire 180 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for dscb.akamaiedge.net in the akamaiedge.net zone
	Query to n0dscb.akamaiedge.net for dscb.akamaiedge.net/DNSKEY
	Received 112 bytes from 88.221.81.192
	;; Response received from [88.221.81.192] 112 octets ;; HEADER SECTION ;; id = 26377 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dscb.akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1716339570 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to n7dscb.akamaiedge.net for e97907.dscb.akamaiedge.net/A
	Received 87 bytes from 23.220.107.16
	;; Response received from [23.220.107.16] 87 octets ;; HEADER SECTION ;; id = 55316 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e97907.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (2 records) e97907.dscb.akamaiedge.net. 20 IN A 23.212.251.23 e97907.dscb.akamaiedge.net. 20 IN A 23.212.251.8 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	n7dscb.akamaiedge.net is authoritative for e97907.dscb.akamaiedge.net
	Query to n4dscb.akamaiedge.net for e97907.dscb.akamaiedge.net/DNSKEY
	Received 119 bytes from 23.222.0.206
	;; Response received from [23.222.0.206] 119 octets ;; HEADER SECTION ;; id = 6962 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e97907.dscb.akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1716339570 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n4dscb.akamaiedge.net for dscb.akamaiedge.net/SOA
	Received 112 bytes from 23.222.0.206
	;; Response received from [23.222.0.206] 112 octets ;; HEADER SECTION ;; id = 17214 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dscb.akamaiedge.net. IN SOA ;; ANSWER SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1716339570 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n1dscb.akamaiedge.net for dscb.akamaiedge.net/SOA
	Received 112 bytes from 104.78.78.84
	;; Response received from [104.78.78.84] 112 octets ;; HEADER SECTION ;; id = 27969 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dscb.akamaiedge.net. IN SOA ;; ANSWER SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1716339570 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n0dscb.akamaiedge.net for dscb.akamaiedge.net/SOA
	Received 112 bytes from 88.221.81.192
	;; Response received from [88.221.81.192] 112 octets ;; HEADER SECTION ;; id = 5608 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dscb.akamaiedge.net. IN SOA ;; ANSWER SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1716339570 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n6dscb.akamaiedge.net for dscb.akamaiedge.net/SOA
	Received 112 bytes from 23.222.0.216
	;; Response received from [23.222.0.216] 112 octets ;; HEADER SECTION ;; id = 38216 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dscb.akamaiedge.net. IN SOA ;; ANSWER SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1716339570 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n3dscb.akamaiedge.net for dscb.akamaiedge.net/SOA
	Received 112 bytes from 23.222.16.134
	;; Response received from [23.222.16.134] 112 octets ;; HEADER SECTION ;; id = 15671 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dscb.akamaiedge.net. IN SOA ;; ANSWER SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1716339570 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n5dscb.akamaiedge.net for dscb.akamaiedge.net/SOA
	Received 112 bytes from 23.222.0.205
	;; Response received from [23.222.0.205] 112 octets ;; HEADER SECTION ;; id = 26816 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dscb.akamaiedge.net. IN SOA ;; ANSWER SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1716339570 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n2dscb.akamaiedge.net for dscb.akamaiedge.net/SOA
	Received 112 bytes from 23.220.107.25
	;; Response received from [23.220.107.25] 112 octets ;; HEADER SECTION ;; id = 48656 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dscb.akamaiedge.net. IN SOA ;; ANSWER SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1716339570 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n7dscb.akamaiedge.net for e97907.dscb.akamaiedge.net/A
	Received 87 bytes from 23.220.107.16
	;; Response received from [23.220.107.16] 87 octets ;; HEADER SECTION ;; id = 65208 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e97907.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (2 records) e97907.dscb.akamaiedge.net. 20 IN A 23.212.251.23 e97907.dscb.akamaiedge.net. 20 IN A 23.212.251.8 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	e97907.dscb.akamaiedge.net A RR has value 23.212.251.23
	e97907.dscb.akamaiedge.net A RR has value 23.212.251.8
	No RRSIGs found

dscb.akamaiedge.net

	Query to n4dscb.akamaiedge.net for e97907.dscb.akamaiedge.net/A
	Received 87 bytes from 23.222.0.206
	;; Response received from [23.222.0.206] 87 octets ;; HEADER SECTION ;; id = 57730 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e97907.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (2 records) e97907.dscb.akamaiedge.net. 20 IN A 23.212.251.23 e97907.dscb.akamaiedge.net. 20 IN A 23.212.251.8 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	n4dscb.akamaiedge.net is authoritative for e97907.dscb.akamaiedge.net
	Query to n1dscb.akamaiedge.net for e97907.dscb.akamaiedge.net/DNSKEY
	Received 119 bytes from 104.78.78.84
	;; Response received from [104.78.78.84] 119 octets ;; HEADER SECTION ;; id = 14246 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e97907.dscb.akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1716339570 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n4dscb.akamaiedge.net for e97907.dscb.akamaiedge.net/A
	Received 87 bytes from 23.222.0.206
	;; Response received from [23.222.0.206] 87 octets ;; HEADER SECTION ;; id = 25429 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e97907.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (2 records) e97907.dscb.akamaiedge.net. 20 IN A 23.212.251.23 e97907.dscb.akamaiedge.net. 20 IN A 23.212.251.8 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	e97907.dscb.akamaiedge.net A RR has value 23.212.251.23
	e97907.dscb.akamaiedge.net A RR has value 23.212.251.8
	No RRSIGs found

dscb.akamaiedge.net

	Query to n0dscb.akamaiedge.net for e97907.dscb.akamaiedge.net/A
	Received 87 bytes from 88.221.81.192
	;; Response received from [88.221.81.192] 87 octets ;; HEADER SECTION ;; id = 20750 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e97907.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (2 records) e97907.dscb.akamaiedge.net. 20 IN A 23.212.251.23 e97907.dscb.akamaiedge.net. 20 IN A 23.212.251.8 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	n0dscb.akamaiedge.net is authoritative for e97907.dscb.akamaiedge.net
	Query to n3dscb.akamaiedge.net for e97907.dscb.akamaiedge.net/DNSKEY
	Received 119 bytes from 23.222.16.134
	;; Response received from [23.222.16.134] 119 octets ;; HEADER SECTION ;; id = 21094 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e97907.dscb.akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1716339570 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n0dscb.akamaiedge.net for e97907.dscb.akamaiedge.net/A
	Received 87 bytes from 88.221.81.192
	;; Response received from [88.221.81.192] 87 octets ;; HEADER SECTION ;; id = 62555 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e97907.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (2 records) e97907.dscb.akamaiedge.net. 20 IN A 23.212.251.23 e97907.dscb.akamaiedge.net. 20 IN A 23.212.251.8 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	e97907.dscb.akamaiedge.net A RR has value 23.212.251.23
	e97907.dscb.akamaiedge.net A RR has value 23.212.251.8
	No RRSIGs found

dscb.akamaiedge.net

	Query to n1dscb.akamaiedge.net for e97907.dscb.akamaiedge.net/A
	Received 87 bytes from 104.78.78.84
	;; Response received from [104.78.78.84] 87 octets ;; HEADER SECTION ;; id = 28146 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e97907.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (2 records) e97907.dscb.akamaiedge.net. 20 IN A 23.212.251.23 e97907.dscb.akamaiedge.net. 20 IN A 23.212.251.8 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	n1dscb.akamaiedge.net is authoritative for e97907.dscb.akamaiedge.net
	Query to n5dscb.akamaiedge.net for e97907.dscb.akamaiedge.net/DNSKEY
	Received 119 bytes from 23.222.0.205
	;; Response received from [23.222.0.205] 119 octets ;; HEADER SECTION ;; id = 28586 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e97907.dscb.akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1716339570 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n1dscb.akamaiedge.net for e97907.dscb.akamaiedge.net/A
	Received 87 bytes from 104.78.78.84
	;; Response received from [104.78.78.84] 87 octets ;; HEADER SECTION ;; id = 33097 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e97907.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (2 records) e97907.dscb.akamaiedge.net. 20 IN A 23.212.251.23 e97907.dscb.akamaiedge.net. 20 IN A 23.212.251.8 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	e97907.dscb.akamaiedge.net A RR has value 23.212.251.23
	e97907.dscb.akamaiedge.net A RR has value 23.212.251.8
	No RRSIGs found

dscb.akamaiedge.net

	Query to n6dscb.akamaiedge.net for e97907.dscb.akamaiedge.net/A
	Received 87 bytes from 23.222.0.216
	;; Response received from [23.222.0.216] 87 octets ;; HEADER SECTION ;; id = 18346 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e97907.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (2 records) e97907.dscb.akamaiedge.net. 20 IN A 23.212.251.23 e97907.dscb.akamaiedge.net. 20 IN A 23.212.251.8 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	n6dscb.akamaiedge.net is authoritative for e97907.dscb.akamaiedge.net
	Query to n5dscb.akamaiedge.net for e97907.dscb.akamaiedge.net/DNSKEY
	Received 119 bytes from 23.222.0.205
	;; Response received from [23.222.0.205] 119 octets ;; HEADER SECTION ;; id = 55098 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e97907.dscb.akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1716339570 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n6dscb.akamaiedge.net for e97907.dscb.akamaiedge.net/A
	Received 87 bytes from 23.222.0.216
	;; Response received from [23.222.0.216] 87 octets ;; HEADER SECTION ;; id = 35814 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e97907.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (2 records) e97907.dscb.akamaiedge.net. 20 IN A 23.212.251.23 e97907.dscb.akamaiedge.net. 20 IN A 23.212.251.8 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	e97907.dscb.akamaiedge.net A RR has value 23.212.251.23
	e97907.dscb.akamaiedge.net A RR has value 23.212.251.8
	No RRSIGs found

dscb.akamaiedge.net

	Query to n3dscb.akamaiedge.net for e97907.dscb.akamaiedge.net/A
	Received 87 bytes from 23.222.16.134
	;; Response received from [23.222.16.134] 87 octets ;; HEADER SECTION ;; id = 50278 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e97907.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (2 records) e97907.dscb.akamaiedge.net. 20 IN A 23.212.251.23 e97907.dscb.akamaiedge.net. 20 IN A 23.212.251.8 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	n3dscb.akamaiedge.net is authoritative for e97907.dscb.akamaiedge.net
	Query to n2dscb.akamaiedge.net for e97907.dscb.akamaiedge.net/DNSKEY
	Received 119 bytes from 23.220.107.25
	;; Response received from [23.220.107.25] 119 octets ;; HEADER SECTION ;; id = 24098 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e97907.dscb.akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1716339570 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n3dscb.akamaiedge.net for e97907.dscb.akamaiedge.net/A
	Received 87 bytes from 23.222.16.134
	;; Response received from [23.222.16.134] 87 octets ;; HEADER SECTION ;; id = 37520 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e97907.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (2 records) e97907.dscb.akamaiedge.net. 20 IN A 23.212.251.8 e97907.dscb.akamaiedge.net. 20 IN A 23.212.251.23 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	e97907.dscb.akamaiedge.net A RR has value 23.212.251.8
	e97907.dscb.akamaiedge.net A RR has value 23.212.251.23
	No RRSIGs found

dscb.akamaiedge.net

	Query to n2dscb.akamaiedge.net for e97907.dscb.akamaiedge.net/A
	Received 87 bytes from 23.220.107.25
	;; Response received from [23.220.107.25] 87 octets ;; HEADER SECTION ;; id = 12388 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e97907.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (2 records) e97907.dscb.akamaiedge.net. 20 IN A 23.212.251.8 e97907.dscb.akamaiedge.net. 20 IN A 23.212.251.23 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	n2dscb.akamaiedge.net is authoritative for e97907.dscb.akamaiedge.net
	Query to n2dscb.akamaiedge.net for e97907.dscb.akamaiedge.net/DNSKEY
	Received 119 bytes from 23.220.107.25
	;; Response received from [23.220.107.25] 119 octets ;; HEADER SECTION ;; id = 7089 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e97907.dscb.akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1716339570 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n2dscb.akamaiedge.net for e97907.dscb.akamaiedge.net/A
	Received 87 bytes from 23.220.107.25
	;; Response received from [23.220.107.25] 87 octets ;; HEADER SECTION ;; id = 27244 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e97907.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (2 records) e97907.dscb.akamaiedge.net. 20 IN A 23.212.251.23 e97907.dscb.akamaiedge.net. 20 IN A 23.212.251.8 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	e97907.dscb.akamaiedge.net A RR has value 23.212.251.23
	e97907.dscb.akamaiedge.net A RR has value 23.212.251.8
	No RRSIGs found

dscb.akamaiedge.net

	Query to n5dscb.akamaiedge.net for e97907.dscb.akamaiedge.net/A
	Received 87 bytes from 23.222.0.205
	;; Response received from [23.222.0.205] 87 octets ;; HEADER SECTION ;; id = 3758 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e97907.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (2 records) e97907.dscb.akamaiedge.net. 20 IN A 23.212.251.8 e97907.dscb.akamaiedge.net. 20 IN A 23.212.251.23 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	n5dscb.akamaiedge.net is authoritative for e97907.dscb.akamaiedge.net
	Query to n5dscb.akamaiedge.net for e97907.dscb.akamaiedge.net/DNSKEY
	Received 119 bytes from 23.222.0.205
	;; Response received from [23.222.0.205] 119 octets ;; HEADER SECTION ;; id = 63356 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e97907.dscb.akamaiedge.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dscb.akamaiedge.net. 1000 IN SOA ( n0dscb.akamaiedge.net. hostmaster.akamai.com. 1716339570 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n5dscb.akamaiedge.net for e97907.dscb.akamaiedge.net/A
	Received 87 bytes from 23.222.0.205
	;; Response received from [23.222.0.205] 87 octets ;; HEADER SECTION ;; id = 47451 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e97907.dscb.akamaiedge.net. IN A ;; ANSWER SECTION (2 records) e97907.dscb.akamaiedge.net. 20 IN A 23.212.251.23 e97907.dscb.akamaiedge.net. 20 IN A 23.212.251.8 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	e97907.dscb.akamaiedge.net A RR has value 23.212.251.23
	e97907.dscb.akamaiedge.net A RR has value 23.212.251.8
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test www.ca.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: