DNSSEC Analyzer - 911COMMISSION.GOV

Domain Name:

Time: 2021-04-22 02:44:17 UTC, NTP stratum 4

Analyzing DNSSEC problems for 911COMMISSION.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to l.root-servers.net for ./DNSKEY
	Received 864 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (864 bytes) ;; HEADER SECTION ;; id = 17095 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210512000000 20210421000000 20326 . bx5MOQGiU0gAwVPCF6fPBYdApVZCvs4fZ3603lzlRdtiHNsNSk2j/mVU7UD6oZkA/q/AIucEPGMD Lua0HNNnfhW8QsYssPHURJpcOUhgt17GinADGwADQYSI6fH12kFnb5wIZ/jznJ58dCdJDr0E7tg6 GarIqeu190nLM+sp75CNlKEG3HrrdSIGLWY8CFU1wLcU43ZAXaCiO5D6XwV8j7WUOs0n8XB48JzO yq4nZ/9Pt6Nl1QWT1UMrGZPPpBBeBKFeggIiGmDuzCn/nrk8F5zuN8f8RvhCxJZi1Kf6rEB0l79X XZ+JnpyjIJrNSNsDxeTQkO5NgXOrols1Gxv/QA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210512000000 20210421000000 20326 . bx5MOQGiU0gAwVPCF6fPBYdApVZCvs4fZ3603lzlRdtiHNsNSk2j/mVU7UD6oZkA/q/AIucEPGMD Lua0HNNnfhW8QsYssPHURJpcOUhgt17GinADGwADQYSI6fH12kFnb5wIZ/jznJ58dCdJDr0E7tg6 GarIqeu190nLM+sp75CNlKEG3HrrdSIGLWY8CFU1wLcU43ZAXaCiO5D6XwV8j7WUOs0n8XB48JzO yq4nZ/9Pt6Nl1QWT1UMrGZPPpBBeBKFeggIiGmDuzCn/nrk8F5zuN8f8RvhCxJZi1Kf6rEB0l79X XZ+JnpyjIJrNSNsDxeTQkO5NgXOrols1Gxv/QA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=14631 is now in the chain-of-trust
	Query to h.root-servers.net for 911COMMISSION.GOV/A
	Received 636 bytes from 198.97.190.53
	;; Answer received from 198.97.190.53 (636 bytes) ;; HEADER SECTION ;; id = 50112 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; 911COMMISSION.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20210504220000 20210421210000 14631 . neNcEL5svdpJboSvCA+APK3KufuPIO46bPXaX0L+wE2H1nrU6g8caNctZy4c+dh1PPC37fu6Vv7p Ms2kWW/AIWLClxMB949tRwGiWv2oSJs7I0QK8qpNtq0NiYbq2Z0j/ZZTuvhj4Hw3eSZkJbJfmacp iQ0+6xBoYa2wsmaslO76AFzjBwJYgOkjGYmMpsPsLdl3rwuuZK2XkTR0eXUo0RlplxqE+E6Ps8tl tK/7wlsSFpwWn0Vrt8ntcGulTsa5Mb4nCTAiGWJohceq+4hpIk8ZiDKhrUpR9czZzqPOgXB0dyBF qjkZzYnrvdcdQJgODAxt78pylFWJCRnGxKc56w== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to f.root-servers.net for GOV/DNSKEY
	Received 622 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (622 bytes) ;; HEADER SECTION ;; id = 58108 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20210504220000 20210421210000 14631 . neNcEL5svdpJboSvCA+APK3KufuPIO46bPXaX0L+wE2H1nrU6g8caNctZy4c+dh1PPC37fu6Vv7p Ms2kWW/AIWLClxMB949tRwGiWv2oSJs7I0QK8qpNtq0NiYbq2Z0j/ZZTuvhj4Hw3eSZkJbJfmacp iQ0+6xBoYa2wsmaslO76AFzjBwJYgOkjGYmMpsPsLdl3rwuuZK2XkTR0eXUo0RlplxqE+E6Ps8tl tK/7wlsSFpwWn0Vrt8ntcGulTsa5Mb4nCTAiGWJohceq+4hpIk8ZiDKhrUpR9czZzqPOgXB0dyBF qjkZzYnrvdcdQJgODAxt78pylFWJCRnGxKc56w== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to c.root-servers.net for GOV/DS
	Received 370 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (370 bytes) ;; HEADER SECTION ;; id = 16700 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20210504220000 20210421210000 14631 . neNcEL5svdpJboSvCA+APK3KufuPIO46bPXaX0L+wE2H1nrU6g8caNctZy4c+dh1PPC37fu6Vv7p Ms2kWW/AIWLClxMB949tRwGiWv2oSJs7I0QK8qpNtq0NiYbq2Z0j/ZZTuvhj4Hw3eSZkJbJfmacp iQ0+6xBoYa2wsmaslO76AFzjBwJYgOkjGYmMpsPsLdl3rwuuZK2XkTR0eXUo0RlplxqE+E6Ps8tl tK/7wlsSFpwWn0Vrt8ntcGulTsa5Mb4nCTAiGWJohceq+4hpIk8ZiDKhrUpR9czZzqPOgXB0dyBF qjkZzYnrvdcdQJgODAxt78pylFWJCRnGxKc56w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20210504220000 20210421210000 14631 . neNcEL5svdpJboSvCA+APK3KufuPIO46bPXaX0L+wE2H1nrU6g8caNctZy4c+dh1PPC37fu6Vv7p Ms2kWW/AIWLClxMB949tRwGiWv2oSJs7I0QK8qpNtq0NiYbq2Z0j/ZZTuvhj4Hw3eSZkJbJfmacp iQ0+6xBoYa2wsmaslO76AFzjBwJYgOkjGYmMpsPsLdl3rwuuZK2XkTR0eXUo0RlplxqE+E6Ps8tl tK/7wlsSFpwWn0Vrt8ntcGulTsa5Mb4nCTAiGWJohceq+4hpIk8ZiDKhrUpR9czZzqPOgXB0dyBF qjkZzYnrvdcdQJgODAxt78pylFWJCRnGxKc56w== )`
	RRSIG=14631 and DNSKEY=14631 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to b.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (777 bytes) ;; HEADER SECTION ;; id = 58263 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbexj/PgN9RGQ1TokFnYjJ87/rMFIqE/rXjWtsmwzxteOcKIVCUJAAWg0pIZZer88omuCVrq +fAz0iBOgY48TRFWgyVFV9rm5esTGOEuCU6BTYj1Cb7zrpb/RayEw0yzVVZ0adT/AXbAsQhteTpV kgWK8K33gxq4wY70AK5KWdDCyj4v9uR6TS0mgbGdg7RzFCi8xeZoYP2PY5XOhAHFon0= ) ; Key ID = 48498 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210504190254 20210419185754 7698 gov. ZUQqCCEYe1uWRzEtjSAi55l/uPdT1PBCAPVabl5T0bTDYGDYkEUq6tEFc/VB/eBfw2B2pGWSIGb5 hzuuYFXyRfbgM+uwLGpFejX5M1rIRxqMawk8jyalKiedBy2NaID8XUy6yB9zHTa3QfoaGgLjvH6l Zbj6346qKK7OqyYRriKnF0K2DWGjOgfmi7zmIV1HgQ/l4Fwm8EUcrIlPnhA+l6RT37PO3u5Af+Xy HHT5s8hoOwHRthbq0W3+fP1z3luZbFre5c4nR4/sReFkwUHp0JlsVBxOaHKvDqOGARhy5U8YIT8N V4j5TSyrf+7xO6W60UfdQRPymiBmBzNWTdgm2w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbexj/PgN9RGQ1TokFnYjJ87/rMFIqE/rXjWtsmwzxteOcKIVCUJAAWg0pIZZer88omuCVrq +fAz0iBOgY48TRFWgyVFV9rm5esTGOEuCU6BTYj1Cb7zrpb/RayEw0yzVVZ0adT/AXbAsQhteTpV kgWK8K33gxq4wY70AK5KWdDCyj4v9uR6TS0mgbGdg7RzFCi8xeZoYP2PY5XOhAHFon0= ) ; Key ID = 48498`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210504190254 20210419185754 7698 gov. ZUQqCCEYe1uWRzEtjSAi55l/uPdT1PBCAPVabl5T0bTDYGDYkEUq6tEFc/VB/eBfw2B2pGWSIGb5 hzuuYFXyRfbgM+uwLGpFejX5M1rIRxqMawk8jyalKiedBy2NaID8XUy6yB9zHTa3QfoaGgLjvH6l Zbj6346qKK7OqyYRriKnF0K2DWGjOgfmi7zmIV1HgQ/l4Fwm8EUcrIlPnhA+l6RT37PO3u5Af+Xy HHT5s8hoOwHRthbq0W3+fP1z3luZbFre5c4nR4/sReFkwUHp0JlsVBxOaHKvDqOGARhy5U8YIT8N V4j5TSyrf+7xO6W60UfdQRPymiBmBzNWTdgm2w== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=48498 is now in the chain-of-trust
	Query to a.gov-servers.net for 911COMMISSION.GOV/A
	Received 464 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (464 bytes) ;; HEADER SECTION ;; id = 42339 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; 911COMMISSION.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) 911COMMISSION.GOV. 86400 IN NS sauthns1.qwest.net. 911COMMISSION.GOV. 86400 IN NS sauthns2.qwest.net. 911COMMISSION.GOV. 3600 IN DS ( 39570 7 1 8e5d6df1515bdc661695028ee9419f4734566e96 ) 911COMMISSION.GOV. 3600 IN DS ( 13533 7 1 d6f88939a0167ccdbc0f123a74541e204141d9f9 ) 911COMMISSION.GOV. 3600 IN DS ( 39570 7 2 99e400ddd7ee55cd8bc1036016c29accc7484c2a927bfa73166a7678bfd5230f ) 911COMMISSION.GOV. 3600 IN DS ( 13533 7 2 eff7d83ac6d65b58fb45944a7441fc0b01e1ce004664690d23d08884442730e2 ) 911COMMISSION.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210429011007 20210422011007 48498 gov. bhNBOYjVn9ekQuyOKuldg1QhPKCiGdnIrNn5vBgWmsGNDBGF0wwO+NEP6dp38EbLTq/pGmI/ZtEE 0VTCUPiZazkswUpEK51i2Q0TNHfh2EeeBmqrX83SxOf0UiPB9bt+PwZcS1iMRMxmgjIlkcEF87xs lgVozkhzl7Gz20BqPnrXup/bPpxMtxQ8aH18vesaNDx1vvfSvY1cY+1LPkcVKg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.gov-servers.net for 911COMMISSION.GOV/DNSKEY
	Received 464 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (464 bytes) ;; HEADER SECTION ;; id = 65523 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; 911COMMISSION.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) 911COMMISSION.GOV. 86400 IN NS sauthns1.qwest.net. 911COMMISSION.GOV. 86400 IN NS sauthns2.qwest.net. 911COMMISSION.GOV. 3600 IN DS ( 39570 7 1 8e5d6df1515bdc661695028ee9419f4734566e96 ) 911COMMISSION.GOV. 3600 IN DS ( 13533 7 1 d6f88939a0167ccdbc0f123a74541e204141d9f9 ) 911COMMISSION.GOV. 3600 IN DS ( 39570 7 2 99e400ddd7ee55cd8bc1036016c29accc7484c2a927bfa73166a7678bfd5230f ) 911COMMISSION.GOV. 3600 IN DS ( 13533 7 2 eff7d83ac6d65b58fb45944a7441fc0b01e1ce004664690d23d08884442730e2 ) 911COMMISSION.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210429011007 20210422011007 48498 gov. bhNBOYjVn9ekQuyOKuldg1QhPKCiGdnIrNn5vBgWmsGNDBGF0wwO+NEP6dp38EbLTq/pGmI/ZtEE 0VTCUPiZazkswUpEK51i2Q0TNHfh2EeeBmqrX83SxOf0UiPB9bt+PwZcS1iMRMxmgjIlkcEF87xs lgVozkhzl7Gz20BqPnrXup/bPpxMtxQ8aH18vesaNDx1vvfSvY1cY+1LPkcVKg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone 911COMMISSION.GOV

911COMMISSION.GOV

	Checking DS between GOV and 911COMMISSION.GOV
	Query to b.gov-servers.net for 911COMMISSION.GOV/DS
	Received 409 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (409 bytes) ;; HEADER SECTION ;; id = 62904 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; 911COMMISSION.GOV. IN DS ;; ANSWER SECTION (5 records) 911COMMISSION.GOV. 3600 IN DS ( 39570 7 1 8e5d6df1515bdc661695028ee9419f4734566e96 ) 911COMMISSION.GOV. 3600 IN DS ( 13533 7 1 d6f88939a0167ccdbc0f123a74541e204141d9f9 ) 911COMMISSION.GOV. 3600 IN DS ( 39570 7 2 99e400ddd7ee55cd8bc1036016c29accc7484c2a927bfa73166a7678bfd5230f ) 911COMMISSION.GOV. 3600 IN DS ( 13533 7 2 eff7d83ac6d65b58fb45944a7441fc0b01e1ce004664690d23d08884442730e2 ) 911COMMISSION.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210429011007 20210422011007 48498 gov. bhNBOYjVn9ekQuyOKuldg1QhPKCiGdnIrNn5vBgWmsGNDBGF0wwO+NEP6dp38EbLTq/pGmI/ZtEE 0VTCUPiZazkswUpEK51i2Q0TNHfh2EeeBmqrX83SxOf0UiPB9bt+PwZcS1iMRMxmgjIlkcEF87xs lgVozkhzl7Gz20BqPnrXup/bPpxMtxQ8aH18vesaNDx1vvfSvY1cY+1LPkcVKg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for 911COMMISSION.GOV in the GOV zone
	DS=39570/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=13533/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=39570/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=13533/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`911COMMISSION.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210429011007 20210422011007 48498 gov. bhNBOYjVn9ekQuyOKuldg1QhPKCiGdnIrNn5vBgWmsGNDBGF0wwO+NEP6dp38EbLTq/pGmI/ZtEE 0VTCUPiZazkswUpEK51i2Q0TNHfh2EeeBmqrX83SxOf0UiPB9bt+PwZcS1iMRMxmgjIlkcEF87xs lgVozkhzl7Gz20BqPnrXup/bPpxMtxQ8aH18vesaNDx1vvfSvY1cY+1LPkcVKg== )`
	RRSIG=48498 and DNSKEY=48498 verifies the DS RRset
	DS=39570/SHA-1 is now in the chain-of-trust
	DS=13533/SHA-1 is now in the chain-of-trust
	`911COMMISSION.GOV. 3600 IN DS ( 39570 7 1 8e5d6df1515bdc661695028ee9419f4734566e96 )`
	`911COMMISSION.GOV. 3600 IN DS ( 13533 7 1 d6f88939a0167ccdbc0f123a74541e204141d9f9 )`
	`911COMMISSION.GOV. 3600 IN DS ( 39570 7 2 99e400ddd7ee55cd8bc1036016c29accc7484c2a927bfa73166a7678bfd5230f )`
	`911COMMISSION.GOV. 3600 IN DS ( 13533 7 2 eff7d83ac6d65b58fb45944a7441fc0b01e1ce004664690d23d08884442730e2 )`
	Query to sauthns2.qwest.net for 911COMMISSION.GOV/DNSKEY
	Received 1393 bytes from 208.44.130.121
	;; Answer received from 208.44.130.121 (1393 bytes) ;; HEADER SECTION ;; id = 48037 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; 911COMMISSION.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) 911commission.gov. 86400 IN DNSKEY ( 256 3 7 AwEAAbHlCt+slTJVZ6mHr5xv/gi8twSPQ0jZU80qBKfMces3y4W0Pyxh23RQpvbzgeFU8dSoUNYT E9uZHzdhoDtn7H6+aGIDJB/ncOaf8GB9Po2LhygGS6TQ1Ksvjxx0BDseirFSQ9hbS1EyRWlPk1EO fxEizwPPXky5kfdba12VEuk1 ) ; Key ID = 41117 911commission.gov. 86400 IN DNSKEY ( 257 3 7 AwEAAdG6flvUQ8F48II9tYE3UMPsy28Ek5r0gnp3VWEUNq5Ka3ZOH1ST+Ux9I5qn80MJgdTh4XRI g+4eyblv2tzxuRiFVfYnoaYjakb1gexbhrgRtOYXQn5MlZV2JnToY4RDVs3astSETnIqH47bslGD psPqpdVEEO1E9cSP5KpzU5msMBmFzOJ+BDsecUa2PqNPMgBn3IkOWCi9UC8xp+p69eV3izHK9ecP xk/CligAggyVNvfG0m3Yxvf5N/H2bhsUKwwawxEj2fLZoxp+V7nS3DtUEsOiHneEZ6AH6+aPivPX de58YaHwbZ/+0xNPESmFqNGcWI8V1vuOLRZd2fGOIRs= ) ; Key ID = 13533 911commission.gov. 86400 IN DNSKEY ( 256 3 7 AwEAAdc7tyokp0tiV1BEKNv/popE5cd9zxGyFfVJsggQO95ofzxNSPtZaFGhKVcjczMCq/7YvUFe j5+U/T827KiT02HnaUJBT94oXXWSyC8X79juwUKfZoWgK0MBmC16xY+ZfauJEuMjT3ULXhQXLU6h C4fT919R3QKdwe1JQwns48KL ) ; Key ID = 29678 911commission.gov. 86400 IN DNSKEY ( 257 3 7 AwEAAdD8dJjOm1XKfG0b1hcDcz5KznQE2pQDFX1vDbZbgcUKZ/7Vtx303IP6VpKE1pNYCaV/L6h6 sCvQn1qJib2XDWMDDMvS+79VuLBE4aGHOVAxaopWeMCjZtgFoIllJE1nATjrEErcL9Tt+EkQnizt rsosmX4d9+G3FwSy4t4dI51pte88PxXsEeRZVlJGezAVmmDmrAtsJXgItKYSjM3FrMdSAJfODdkp LiHfkCongH5KHiuiVHBei2NjJcyZP+WWkP5NPclMfZboKzb5o/mhZW+7ifM1BwES0I5G7u93KoW9 gWCupBsVBxwXgLu6eWkpaIA8vprTlYGQofslUnCFtds= ) ; Key ID = 39570 911commission.gov. 86400 IN RRSIG ( DNSKEY 7 2 86400 20210428194529 20210421184529 29678 911commission.gov. AqRsTTAkvpMd4fCW7sHJvIXXtFPDdig5U0Gcce1D1lAqeBAxBK18Jn0NRSpMxAim7fdBcUyVcHXe IuNtLe+Z4QFLBqu3Ab1Fv7mdvjmfO6GsQiu6flO2rjm5D6gin1eTbu4I/+X+BD19WAErqpIp3bMQ Rs6Es8eEx4K5GWI1wuY= ) 911commission.gov. 86400 IN RRSIG ( DNSKEY 7 2 86400 20210428194529 20210421184529 39570 911commission.gov. hY4SUofrp8iXMBKm9gF298gOh1ldhzzAk3jNYMS2s7dMmbRg0Kk+NxZ5K5jQktIjLAqACS0JGqGD G68n/KMMrjkgP52Jmqbxkhej8NCUEbXX9fCXGwvsAHM/DVOf/7WSUXe1N7YkyfUm9oJ8UPlyYHhu DURJOUDtdo6PnPU94+4WnTkVuoVJ7gqkHoCapPpQ7sgvN1U2F5QCCWA0BG/3QaOhe3nrGRmiU6ex ZRV+nd2pNyAbI820CWS2BcWyA4QEGA85OlJwy4LNL63msMWzHWj8Ff361TdcWCEaLrn0crdG/IhP 2n5pWI0NIG7ynpfbGIuxVSBnfgirmn23cSzk3A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for 911COMMISSION.GOV
	`911commission.gov. 86400 IN DNSKEY ( 256 3 7 AwEAAbHlCt+slTJVZ6mHr5xv/gi8twSPQ0jZU80qBKfMces3y4W0Pyxh23RQpvbzgeFU8dSoUNYT E9uZHzdhoDtn7H6+aGIDJB/ncOaf8GB9Po2LhygGS6TQ1Ksvjxx0BDseirFSQ9hbS1EyRWlPk1EO fxEizwPPXky5kfdba12VEuk1 ) ; Key ID = 41117`
	`911commission.gov. 86400 IN DNSKEY ( 257 3 7 AwEAAdG6flvUQ8F48II9tYE3UMPsy28Ek5r0gnp3VWEUNq5Ka3ZOH1ST+Ux9I5qn80MJgdTh4XRI g+4eyblv2tzxuRiFVfYnoaYjakb1gexbhrgRtOYXQn5MlZV2JnToY4RDVs3astSETnIqH47bslGD psPqpdVEEO1E9cSP5KpzU5msMBmFzOJ+BDsecUa2PqNPMgBn3IkOWCi9UC8xp+p69eV3izHK9ecP xk/CligAggyVNvfG0m3Yxvf5N/H2bhsUKwwawxEj2fLZoxp+V7nS3DtUEsOiHneEZ6AH6+aPivPX de58YaHwbZ/+0xNPESmFqNGcWI8V1vuOLRZd2fGOIRs= ) ; Key ID = 13533`
	`911commission.gov. 86400 IN DNSKEY ( 256 3 7 AwEAAdc7tyokp0tiV1BEKNv/popE5cd9zxGyFfVJsggQO95ofzxNSPtZaFGhKVcjczMCq/7YvUFe j5+U/T827KiT02HnaUJBT94oXXWSyC8X79juwUKfZoWgK0MBmC16xY+ZfauJEuMjT3ULXhQXLU6h C4fT919R3QKdwe1JQwns48KL ) ; Key ID = 29678`
	`911commission.gov. 86400 IN DNSKEY ( 257 3 7 AwEAAdD8dJjOm1XKfG0b1hcDcz5KznQE2pQDFX1vDbZbgcUKZ/7Vtx303IP6VpKE1pNYCaV/L6h6 sCvQn1qJib2XDWMDDMvS+79VuLBE4aGHOVAxaopWeMCjZtgFoIllJE1nATjrEErcL9Tt+EkQnizt rsosmX4d9+G3FwSy4t4dI51pte88PxXsEeRZVlJGezAVmmDmrAtsJXgItKYSjM3FrMdSAJfODdkp LiHfkCongH5KHiuiVHBei2NjJcyZP+WWkP5NPclMfZboKzb5o/mhZW+7ifM1BwES0I5G7u93KoW9 gWCupBsVBxwXgLu6eWkpaIA8vprTlYGQofslUnCFtds= ) ; Key ID = 39570`
	DNSKEY=13533/SEP is now in the chain-of-trust
	DS=13533/SHA-1 verifies DNSKEY=13533/SEP
	DS=13533/SHA-256 verifies DNSKEY=13533/SEP
	DNSKEY=39570/SEP is now in the chain-of-trust
	DS=39570/SHA-1 verifies DNSKEY=39570/SEP
	DS=39570/SHA-256 verifies DNSKEY=39570/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`911commission.gov. 86400 IN RRSIG ( DNSKEY 7 2 86400 20210428194529 20210421184529 29678 911commission.gov. AqRsTTAkvpMd4fCW7sHJvIXXtFPDdig5U0Gcce1D1lAqeBAxBK18Jn0NRSpMxAim7fdBcUyVcHXe IuNtLe+Z4QFLBqu3Ab1Fv7mdvjmfO6GsQiu6flO2rjm5D6gin1eTbu4I/+X+BD19WAErqpIp3bMQ Rs6Es8eEx4K5GWI1wuY= )`
	`911commission.gov. 86400 IN RRSIG ( DNSKEY 7 2 86400 20210428194529 20210421184529 39570 911commission.gov. hY4SUofrp8iXMBKm9gF298gOh1ldhzzAk3jNYMS2s7dMmbRg0Kk+NxZ5K5jQktIjLAqACS0JGqGD G68n/KMMrjkgP52Jmqbxkhej8NCUEbXX9fCXGwvsAHM/DVOf/7WSUXe1N7YkyfUm9oJ8UPlyYHhu DURJOUDtdo6PnPU94+4WnTkVuoVJ7gqkHoCapPpQ7sgvN1U2F5QCCWA0BG/3QaOhe3nrGRmiU6ex ZRV+nd2pNyAbI820CWS2BcWyA4QEGA85OlJwy4LNL63msMWzHWj8Ff361TdcWCEaLrn0crdG/IhP 2n5pWI0NIG7ynpfbGIuxVSBnfgirmn23cSzk3A== )`
	RRSIG=29678 and DNSKEY=29678 verifies the DNSKEY RRset
	RRSIG=39570 and DNSKEY=39570/SEP verifies the DNSKEY RRset
	DNSKEY=41117 is now in the chain-of-trust
	DNSKEY=29678 is now in the chain-of-trust
	Query to sauthns2.qwest.net for 911COMMISSION.GOV/A
	Received 488 bytes from 208.44.130.121
	;; Answer received from 208.44.130.121 (488 bytes) ;; HEADER SECTION ;; id = 15079 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; 911COMMISSION.GOV. IN A ;; ANSWER SECTION (2 records) 911commission.gov. 86400 IN A 129.120.93.242 911commission.gov. 86400 IN RRSIG ( A 7 2 86400 20210428194529 20210421184529 29678 911commission.gov. mdE3oUGpGKw+NX+Yok+1e+5zClJK8NuDCDylDbRLUcfwWN9aLH7cqTI9nphDHXAECB3sTUKl12yO TW5hvnVoLWF6FWsPH6Gp5ccLnVj++kH+Oaxv9cYyaJVdU/EuI6yrRPzEjyZkiHDsthzqawTopENP ldBSdL3FuE4uL611z5E= ) ;; AUTHORITY SECTION (3 records) 911commission.gov. 86400 IN NS sauthns1.qwest.net. 911commission.gov. 86400 IN NS sauthns2.qwest.net. 911commission.gov. 86400 IN RRSIG ( NS 7 2 86400 20210428194529 20210421184529 29678 911commission.gov. RDnpWEO44likhHUomUzqEa8KaTW/tnISUs4fEIwUJxp5rK9LTV8eK0+Tf6qcaY6hH2im+evKUll+ sJ7Mcoc9MfJXXGPK4QQlWGFAx11AfwUNN844ymioHsUXj+itlpz7NIXc+y2ITyQL0bqG2VpCO2YN 80j5TNxwEwsph/1X854= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	sauthns2.qwest.net is authoritative for 911COMMISSION.GOV
	Found RRSIG signed by 911commission.gov zone
	Query to sauthns1.qwest.net for 911COMMISSION.GOV/SOA
	Received 526 bytes from 63.150.72.5
	;; Answer received from 63.150.72.5 (526 bytes) ;; HEADER SECTION ;; id = 41540 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; 911COMMISSION.GOV. IN SOA ;; ANSWER SECTION (2 records) 911commission.gov. 86400 IN SOA ( sauthns1.qwest.net. dns-admin.qwestip.net. 2190132853 ;serial 10800 ;refresh 3601 ;retry 604800 ;expire 86400 ;minimum ) 911commission.gov. 86400 IN RRSIG ( SOA 7 2 86400 20210428194529 20210421184529 29678 911commission.gov. rr9V/+A5EuBrpisDV6MjiMFTcZMVTMBNugwduSs16IoD2Fy6Pg0hZMRpDB5h5oQtcC7uk4s/QGjU zyJOo/QIxOji+2uDh947sF4BvqMCZ314XzfPShZIcH11DjMwYoTrtcx+kmY4Xt1J5ni6LQN3sEwZ XwPput9IX9sBtlRnGPg= ) ;; AUTHORITY SECTION (3 records) 911commission.gov. 86400 IN NS sauthns1.qwest.net. 911commission.gov. 86400 IN NS sauthns2.qwest.net. 911commission.gov. 86400 IN RRSIG ( NS 7 2 86400 20210428194529 20210421184529 29678 911commission.gov. RDnpWEO44likhHUomUzqEa8KaTW/tnISUs4fEIwUJxp5rK9LTV8eK0+Tf6qcaY6hH2im+evKUll+ sJ7Mcoc9MfJXXGPK4QQlWGFAx11AfwUNN844ymioHsUXj+itlpz7NIXc+y2ITyQL0bqG2VpCO2YN 80j5TNxwEwsph/1X854= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to sauthns2.qwest.net for 911COMMISSION.GOV/A
	Received 488 bytes from 208.44.130.121
	;; Answer received from 208.44.130.121 (488 bytes) ;; HEADER SECTION ;; id = 23042 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; 911COMMISSION.GOV. IN A ;; ANSWER SECTION (2 records) 911commission.gov. 86400 IN A 129.120.93.242 911commission.gov. 86400 IN RRSIG ( A 7 2 86400 20210428194529 20210421184529 29678 911commission.gov. mdE3oUGpGKw+NX+Yok+1e+5zClJK8NuDCDylDbRLUcfwWN9aLH7cqTI9nphDHXAECB3sTUKl12yO TW5hvnVoLWF6FWsPH6Gp5ccLnVj++kH+Oaxv9cYyaJVdU/EuI6yrRPzEjyZkiHDsthzqawTopENP ldBSdL3FuE4uL611z5E= ) ;; AUTHORITY SECTION (3 records) 911commission.gov. 86400 IN NS sauthns2.qwest.net. 911commission.gov. 86400 IN NS sauthns1.qwest.net. 911commission.gov. 86400 IN RRSIG ( NS 7 2 86400 20210428194529 20210421184529 29678 911commission.gov. RDnpWEO44likhHUomUzqEa8KaTW/tnISUs4fEIwUJxp5rK9LTV8eK0+Tf6qcaY6hH2im+evKUll+ sJ7Mcoc9MfJXXGPK4QQlWGFAx11AfwUNN844ymioHsUXj+itlpz7NIXc+y2ITyQL0bqG2VpCO2YN 80j5TNxwEwsph/1X854= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	911COMMISSION.GOV A RR has value 129.120.93.242
	Found 1 RRSIGs over A RRset
	`911commission.gov. 86400 IN RRSIG ( A 7 2 86400 20210428194529 20210421184529 29678 911commission.gov. mdE3oUGpGKw+NX+Yok+1e+5zClJK8NuDCDylDbRLUcfwWN9aLH7cqTI9nphDHXAECB3sTUKl12yO TW5hvnVoLWF6FWsPH6Gp5ccLnVj++kH+Oaxv9cYyaJVdU/EuI6yrRPzEjyZkiHDsthzqawTopENP ldBSdL3FuE4uL611z5E= )`
	RRSIG=29678 and DNSKEY=29678 verifies the A RRset

911COMMISSION.GOV

	Query to sauthns1.qwest.net for 911COMMISSION.GOV/A
	Received 488 bytes from 63.150.72.5
	;; Answer received from 63.150.72.5 (488 bytes) ;; HEADER SECTION ;; id = 23150 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; 911COMMISSION.GOV. IN A ;; ANSWER SECTION (2 records) 911commission.gov. 86400 IN A 129.120.93.242 911commission.gov. 86400 IN RRSIG ( A 7 2 86400 20210428194529 20210421184529 29678 911commission.gov. mdE3oUGpGKw+NX+Yok+1e+5zClJK8NuDCDylDbRLUcfwWN9aLH7cqTI9nphDHXAECB3sTUKl12yO TW5hvnVoLWF6FWsPH6Gp5ccLnVj++kH+Oaxv9cYyaJVdU/EuI6yrRPzEjyZkiHDsthzqawTopENP ldBSdL3FuE4uL611z5E= ) ;; AUTHORITY SECTION (3 records) 911commission.gov. 86400 IN NS sauthns2.qwest.net. 911commission.gov. 86400 IN NS sauthns1.qwest.net. 911commission.gov. 86400 IN RRSIG ( NS 7 2 86400 20210428194529 20210421184529 29678 911commission.gov. RDnpWEO44likhHUomUzqEa8KaTW/tnISUs4fEIwUJxp5rK9LTV8eK0+Tf6qcaY6hH2im+evKUll+ sJ7Mcoc9MfJXXGPK4QQlWGFAx11AfwUNN844ymioHsUXj+itlpz7NIXc+y2ITyQL0bqG2VpCO2YN 80j5TNxwEwsph/1X854= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	sauthns1.qwest.net is authoritative for 911COMMISSION.GOV
	Found RRSIG signed by 911commission.gov zone
	Query to sauthns1.qwest.net for 911COMMISSION.GOV/A
	Received 488 bytes from 63.150.72.5
	;; Answer received from 63.150.72.5 (488 bytes) ;; HEADER SECTION ;; id = 57920 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; 911COMMISSION.GOV. IN A ;; ANSWER SECTION (2 records) 911commission.gov. 86400 IN A 129.120.93.242 911commission.gov. 86400 IN RRSIG ( A 7 2 86400 20210428194529 20210421184529 29678 911commission.gov. mdE3oUGpGKw+NX+Yok+1e+5zClJK8NuDCDylDbRLUcfwWN9aLH7cqTI9nphDHXAECB3sTUKl12yO TW5hvnVoLWF6FWsPH6Gp5ccLnVj++kH+Oaxv9cYyaJVdU/EuI6yrRPzEjyZkiHDsthzqawTopENP ldBSdL3FuE4uL611z5E= ) ;; AUTHORITY SECTION (3 records) 911commission.gov. 86400 IN NS sauthns2.qwest.net. 911commission.gov. 86400 IN NS sauthns1.qwest.net. 911commission.gov. 86400 IN RRSIG ( NS 7 2 86400 20210428194529 20210421184529 29678 911commission.gov. RDnpWEO44likhHUomUzqEa8KaTW/tnISUs4fEIwUJxp5rK9LTV8eK0+Tf6qcaY6hH2im+evKUll+ sJ7Mcoc9MfJXXGPK4QQlWGFAx11AfwUNN844ymioHsUXj+itlpz7NIXc+y2ITyQL0bqG2VpCO2YN 80j5TNxwEwsph/1X854= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	911COMMISSION.GOV A RR has value 129.120.93.242
	Found 1 RRSIGs over A RRset
	`911commission.gov. 86400 IN RRSIG ( A 7 2 86400 20210428194529 20210421184529 29678 911commission.gov. mdE3oUGpGKw+NX+Yok+1e+5zClJK8NuDCDylDbRLUcfwWN9aLH7cqTI9nphDHXAECB3sTUKl12yO TW5hvnVoLWF6FWsPH6Gp5ccLnVj++kH+Oaxv9cYyaJVdU/EuI6yrRPzEjyZkiHDsthzqawTopENP ldBSdL3FuE4uL611z5E= )`
	RRSIG=29678 and DNSKEY=29678 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test 911COMMISSION.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: