DNSSEC Analyzer - AMBERALERT.GOV

Domain Name:

Time: 2022-10-07 01:59:22 UTC, NTP stratum 16

Analyzing DNSSEC problems for AMBERALERT.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.58.128.30
	;; Response received from 192.58.128.30 (1139 octets) ;; HEADER SECTION ;; id = 16903 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeB54o2xvW6vY4qQZ0krDsEZCe6MsRWCqsXd4+cNJZMePnlV/xwDrIbbeH1SJzv742rOHzgA KM1/3SQHHSkoEIPx8XQdHAZBxfhaXl3e8c5WrE3aGXS5AeTWAkt85ccqWgKyitxjFmJEOol0BqS2 xueltaDwgWcC10nPUY+y5l/kTOYyptYQS4gg1uJNXIob/R1XIEJ10ZCurkYqZxgqyHc7tZv09N23 o9rnGdjnYiArH7FjlXD8Rvjde8YWkmfdbCEWnchrnxDK8KV2/ZvBpG/WYnRKXYPUceGCw59OJdJ5 M7utkm547RB3eEd8CVVhbXopZlsKq3GCrBwaIVe9ci0= ) ; Key ID = 18733 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20221022000000 20221001000000 20326 . J39bVSJaNAI0vdz8qBWGjXuc39IV5rNXi+3lX7cVHtcdZJ/APXxdBXKI1vD0AEJjBg31iE/r+8Vk 8PQQklaWtlJ9YBFM5sVUBozVl9WL6x0P7JcZbBvgotfNfuvx0mt3BE/myzw5+kJV0OuG6nBZcD6B QZP3aIbQbVe64Hj3TeMGowQTcdTIfWsPpKB5GvxEY2XhRdahhftG2c8aVJZsub86jUjpTSZn8Dp1 S8BS3+ZBbbqHcQGqf4cmwS1QZYHjOsa86889IPcKmQ4EBQUlLihv3qRrGILkC1fhPhsyj/r8HX3v hM+Wamz8hF1QjhOUSvUD01iBl5PdTXacgAZ3mw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeB54o2xvW6vY4qQZ0krDsEZCe6MsRWCqsXd4+cNJZMePnlV/xwDrIbbeH1SJzv742rOHzgA KM1/3SQHHSkoEIPx8XQdHAZBxfhaXl3e8c5WrE3aGXS5AeTWAkt85ccqWgKyitxjFmJEOol0BqS2 xueltaDwgWcC10nPUY+y5l/kTOYyptYQS4gg1uJNXIob/R1XIEJ10ZCurkYqZxgqyHc7tZv09N23 o9rnGdjnYiArH7FjlXD8Rvjde8YWkmfdbCEWnchrnxDK8KV2/ZvBpG/WYnRKXYPUceGCw59OJdJ5 M7utkm547RB3eEd8CVVhbXopZlsKq3GCrBwaIVe9ci0= ) ; Key ID = 18733`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20221022000000 20221001000000 20326 . J39bVSJaNAI0vdz8qBWGjXuc39IV5rNXi+3lX7cVHtcdZJ/APXxdBXKI1vD0AEJjBg31iE/r+8Vk 8PQQklaWtlJ9YBFM5sVUBozVl9WL6x0P7JcZbBvgotfNfuvx0mt3BE/myzw5+kJV0OuG6nBZcD6B QZP3aIbQbVe64Hj3TeMGowQTcdTIfWsPpKB5GvxEY2XhRdahhftG2c8aVJZsub86jUjpTSZn8Dp1 S8BS3+ZBbbqHcQGqf4cmwS1QZYHjOsa86889IPcKmQ4EBQUlLihv3qRrGILkC1fhPhsyj/r8HX3v hM+Wamz8hF1QjhOUSvUD01iBl5PdTXacgAZ3mw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=18733 is now in the chain-of-trust
	DNSKEY=20826 is now in the chain-of-trust
	Query to f.root-servers.net for AMBERALERT.GOV/A
	Received 633 bytes from 192.5.5.241
	;; Response received from 192.5.5.241 (633 octets) ;; HEADER SECTION ;; id = 29774 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; AMBERALERT.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20221019200000 20221006190000 18733 . NMhrdZIDV7KAssfaoBY0Uj80zNe+Im/ZSKYMdPTNksFvHyvFEveUj3L6P3C5yEIlig5KkwuAJQaR V8CctZ0r7I3A/pPtn5w88xrscdpwS8Y4q65dm3LuQEtDfSTamrgJxoSeZHJW0jJ+QUZA84oSdVes 22WoPcHzj5QeIB9NyDuFJ/ch6QMxjtjkN09n3QdPmJDFjxcbPFaNBvwwhmOsEKNChsjqvWEo4hyZ mpuB7PyBHjSlrNWG3kjGLVZdsrx00eBjPB8fD+Fcl8fQJhmb9KvV2TbEVqTkdjm/M5cSq0i732ET F3HR/iG+3vJYJWYxqbLPAe8DP4CmzaSt0AbwLQ== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to c.root-servers.net for GOV/DNSKEY
	Received 625 bytes from 192.33.4.12
	;; Response received from 192.33.4.12 (625 octets) ;; HEADER SECTION ;; id = 27378 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20221019200000 20221006190000 18733 . NMhrdZIDV7KAssfaoBY0Uj80zNe+Im/ZSKYMdPTNksFvHyvFEveUj3L6P3C5yEIlig5KkwuAJQaR V8CctZ0r7I3A/pPtn5w88xrscdpwS8Y4q65dm3LuQEtDfSTamrgJxoSeZHJW0jJ+QUZA84oSdVes 22WoPcHzj5QeIB9NyDuFJ/ch6QMxjtjkN09n3QdPmJDFjxcbPFaNBvwwhmOsEKNChsjqvWEo4hyZ mpuB7PyBHjSlrNWG3kjGLVZdsrx00eBjPB8fD+Fcl8fQJhmb9KvV2TbEVqTkdjm/M5cSq0i732ET F3HR/iG+3vJYJWYxqbLPAe8DP4CmzaSt0AbwLQ== ) ;; ADDITIONAL SECTION (9 records) d.gov-servers.net. 172800 IN A 81.19.194.30 c.gov-servers.net. 172800 IN A 69.36.153.30 b.gov-servers.net. 172800 IN A 209.112.123.30 a.gov-servers.net. 172800 IN A 69.36.157.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to h.root-servers.net for GOV/DS
	Received 367 bytes from 198.97.190.53
	;; Response received from 198.97.190.53 (367 octets) ;; HEADER SECTION ;; id = 21050 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20221019200000 20221006190000 18733 . NMhrdZIDV7KAssfaoBY0Uj80zNe+Im/ZSKYMdPTNksFvHyvFEveUj3L6P3C5yEIlig5KkwuAJQaR V8CctZ0r7I3A/pPtn5w88xrscdpwS8Y4q65dm3LuQEtDfSTamrgJxoSeZHJW0jJ+QUZA84oSdVes 22WoPcHzj5QeIB9NyDuFJ/ch6QMxjtjkN09n3QdPmJDFjxcbPFaNBvwwhmOsEKNChsjqvWEo4hyZ mpuB7PyBHjSlrNWG3kjGLVZdsrx00eBjPB8fD+Fcl8fQJhmb9KvV2TbEVqTkdjm/M5cSq0i732ET F3HR/iG+3vJYJWYxqbLPAe8DP4CmzaSt0AbwLQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20221019200000 20221006190000 18733 . NMhrdZIDV7KAssfaoBY0Uj80zNe+Im/ZSKYMdPTNksFvHyvFEveUj3L6P3C5yEIlig5KkwuAJQaR V8CctZ0r7I3A/pPtn5w88xrscdpwS8Y4q65dm3LuQEtDfSTamrgJxoSeZHJW0jJ+QUZA84oSdVes 22WoPcHzj5QeIB9NyDuFJ/ch6QMxjtjkN09n3QdPmJDFjxcbPFaNBvwwhmOsEKNChsjqvWEo4hyZ mpuB7PyBHjSlrNWG3kjGLVZdsrx00eBjPB8fD+Fcl8fQJhmb9KvV2TbEVqTkdjm/M5cSq0i732ET F3HR/iG+3vJYJWYxqbLPAe8DP4CmzaSt0AbwLQ== )`
	RRSIG=18733 and DNSKEY=18733 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to a.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 69.36.157.30
	;; Response received from 69.36.157.30 (777 octets) ;; HEADER SECTION ;; id = 29403 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbSW4ocEzPbMwUkqAURZNNLAAZ9XoKgSLoPQVtMdnKBkrDoIwWxYO0nk3n/seSHxNb4I+Shq HeLM0bydpkqpMPCesMKazwq2YfQD0t0NdN4kiApakMBOO6foEa9UKHg8YbF5ZeZ2oZzIyFVlDhZB qtVeCM7SIEfxp8VR4/TWRHaoqoOnScTAoVZA9+YknqERZeQoUecTd1xXBHV0dQawxlc= ) ; Key ID = 261 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20221016190254 20221001185754 7698 gov. pDnqznzjN4ZL1h3nS0IdBb7vlGlFxYiW3dfrBgFJoq8wGtgMvhsAYt4vFQf5iByRP8qWBmt52v0m rqPILOZQsasn89pibGPVJ8Jk5Mj/hQYuuQawVeEiRdEF7r9adec0g0dZ1D8inQlxOOnCAc/SqVwa c1U7wTwEpWw0Ac90p8+0wabJk7X7uxTaEsGEiPbBYuE7y2/qjtb20h+i90OMJRsalMRpcBocKfK8 dtXYJlxr2aPBk4UeVI3vIRkeMbMhtnFGSu0XpILQpycjpwwjPbaELEOpbLP8K2ktVkkBP3VadCim 011j34xQnAG4p4ij3Wro6u/756QVzYyz5Vl90A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbSW4ocEzPbMwUkqAURZNNLAAZ9XoKgSLoPQVtMdnKBkrDoIwWxYO0nk3n/seSHxNb4I+Shq HeLM0bydpkqpMPCesMKazwq2YfQD0t0NdN4kiApakMBOO6foEa9UKHg8YbF5ZeZ2oZzIyFVlDhZB qtVeCM7SIEfxp8VR4/TWRHaoqoOnScTAoVZA9+YknqERZeQoUecTd1xXBHV0dQawxlc= ) ; Key ID = 261`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20221016190254 20221001185754 7698 gov. pDnqznzjN4ZL1h3nS0IdBb7vlGlFxYiW3dfrBgFJoq8wGtgMvhsAYt4vFQf5iByRP8qWBmt52v0m rqPILOZQsasn89pibGPVJ8Jk5Mj/hQYuuQawVeEiRdEF7r9adec0g0dZ1D8inQlxOOnCAc/SqVwa c1U7wTwEpWw0Ac90p8+0wabJk7X7uxTaEsGEiPbBYuE7y2/qjtb20h+i90OMJRsalMRpcBocKfK8 dtXYJlxr2aPBk4UeVI3vIRkeMbMhtnFGSu0XpILQpycjpwwjPbaELEOpbLP8K2ktVkkBP3VadCim 011j34xQnAG4p4ij3Wro6u/756QVzYyz5Vl90A== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=261 is now in the chain-of-trust
	Query to d.gov-servers.net for AMBERALERT.GOV/A
	Received 550 bytes from 81.19.194.30
	;; Response received from 81.19.194.30 (550 octets) ;; HEADER SECTION ;; id = 52582 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; AMBERALERT.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) AMBERALERT.GOV. 86400 IN NS ns-jdcw-01.usdoj.GOV. AMBERALERT.GOV. 86400 IN NS ns-jdcw-02.usdoj.GOV. AMBERALERT.GOV. 3600 IN DS ( 62167 8 1 5093d692869dfc23c5717873d77fc703813e957b ) AMBERALERT.GOV. 3600 IN DS ( 62155 8 2 9eebdb903fa42c489508539d77fd1e77ecd6e2fec66bb5492f141e7ec56d36a7 ) AMBERALERT.GOV. 3600 IN DS ( 62155 8 1 813124bd6c0d38b53619e71d461726ba21b66b08 ) AMBERALERT.GOV. 3600 IN DS ( 62167 8 2 8a3d539bd30260b5bceb2807f3e5a5ee3f8360e169eec8c7e22ebfd01296dddb ) AMBERALERT.GOV. 3600 IN RRSIG ( DS 8 2 3600 20221012194014 20221005194014 261 gov. alXUE78N3rU8TBFEEu6ZVWfbfcFw4tFw0tx0iV1Ie8feQNXPyxEzuflybIGZArG3fv7Yx6MUAPnM ODNyKGQAqCQZSMssAsn/LLEQXqEkSkTj+ZIUiLUR+QLvyKQQIK/tuMp/P+NaEgwQPzuu5yGJDdxR Eid/Yun5lXt67TaCF+FlqWx/mXSZq8dgO6DHXiN71OFF080ddawj8dM7DXXj8g== ) ;; ADDITIONAL SECTION (5 records) ns-jdcw-02.usdoj.GOV. 86400 IN A 149.101.80.157 ns-jdcw-01.usdoj.GOV. 86400 IN A 149.101.180.157 ns-jdcw-02.usdoj.GOV. 86400 IN AAAA 2607:f330:5000:107f::86 ns-jdcw-01.usdoj.GOV. 86400 IN AAAA 2607:f330:6000:107f::86 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.gov-servers.net for AMBERALERT.GOV/DNSKEY
	Received 550 bytes from 209.112.123.30
	;; Response received from 209.112.123.30 (550 octets) ;; HEADER SECTION ;; id = 6760 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; AMBERALERT.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) AMBERALERT.GOV. 86400 IN NS ns-jdcw-01.usdoj.GOV. AMBERALERT.GOV. 86400 IN NS ns-jdcw-02.usdoj.GOV. AMBERALERT.GOV. 3600 IN DS ( 62167 8 1 5093d692869dfc23c5717873d77fc703813e957b ) AMBERALERT.GOV. 3600 IN DS ( 62167 8 2 8a3d539bd30260b5bceb2807f3e5a5ee3f8360e169eec8c7e22ebfd01296dddb ) AMBERALERT.GOV. 3600 IN DS ( 62155 8 2 9eebdb903fa42c489508539d77fd1e77ecd6e2fec66bb5492f141e7ec56d36a7 ) AMBERALERT.GOV. 3600 IN DS ( 62155 8 1 813124bd6c0d38b53619e71d461726ba21b66b08 ) AMBERALERT.GOV. 3600 IN RRSIG ( DS 8 2 3600 20221012194014 20221005194014 261 gov. alXUE78N3rU8TBFEEu6ZVWfbfcFw4tFw0tx0iV1Ie8feQNXPyxEzuflybIGZArG3fv7Yx6MUAPnM ODNyKGQAqCQZSMssAsn/LLEQXqEkSkTj+ZIUiLUR+QLvyKQQIK/tuMp/P+NaEgwQPzuu5yGJDdxR Eid/Yun5lXt67TaCF+FlqWx/mXSZq8dgO6DHXiN71OFF080ddawj8dM7DXXj8g== ) ;; ADDITIONAL SECTION (5 records) ns-jdcw-02.usdoj.GOV. 86400 IN A 149.101.80.157 ns-jdcw-01.usdoj.GOV. 86400 IN A 149.101.180.157 ns-jdcw-02.usdoj.GOV. 86400 IN AAAA 2607:f330:5000:107f::86 ns-jdcw-01.usdoj.GOV. 86400 IN AAAA 2607:f330:6000:107f::86 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone AMBERALERT.GOV

AMBERALERT.GOV

	Checking DS between GOV and AMBERALERT.GOV
	Query to a.gov-servers.net for AMBERALERT.GOV/DS
	Received 406 bytes from 69.36.157.30
	;; Response received from 69.36.157.30 (406 octets) ;; HEADER SECTION ;; id = 54466 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; AMBERALERT.GOV. IN DS ;; ANSWER SECTION (5 records) AMBERALERT.GOV. 3600 IN DS ( 62167 8 2 8a3d539bd30260b5bceb2807f3e5a5ee3f8360e169eec8c7e22ebfd01296dddb ) AMBERALERT.GOV. 3600 IN DS ( 62155 8 2 9eebdb903fa42c489508539d77fd1e77ecd6e2fec66bb5492f141e7ec56d36a7 ) AMBERALERT.GOV. 3600 IN DS ( 62155 8 1 813124bd6c0d38b53619e71d461726ba21b66b08 ) AMBERALERT.GOV. 3600 IN DS ( 62167 8 1 5093d692869dfc23c5717873d77fc703813e957b ) AMBERALERT.GOV. 3600 IN RRSIG ( DS 8 2 3600 20221012194014 20221005194014 261 gov. alXUE78N3rU8TBFEEu6ZVWfbfcFw4tFw0tx0iV1Ie8feQNXPyxEzuflybIGZArG3fv7Yx6MUAPnM ODNyKGQAqCQZSMssAsn/LLEQXqEkSkTj+ZIUiLUR+QLvyKQQIK/tuMp/P+NaEgwQPzuu5yGJDdxR Eid/Yun5lXt67TaCF+FlqWx/mXSZq8dgO6DHXiN71OFF080ddawj8dM7DXXj8g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for AMBERALERT.GOV in the GOV zone
	DS=62167/SHA-256 has algorithm RSASHA256
	DS=62155/SHA-256 has algorithm RSASHA256
	DS=62155/SHA-1 has algorithm RSASHA256
	DS=62167/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`AMBERALERT.GOV. 3600 IN RRSIG ( DS 8 2 3600 20221012194014 20221005194014 261 gov. alXUE78N3rU8TBFEEu6ZVWfbfcFw4tFw0tx0iV1Ie8feQNXPyxEzuflybIGZArG3fv7Yx6MUAPnM ODNyKGQAqCQZSMssAsn/LLEQXqEkSkTj+ZIUiLUR+QLvyKQQIK/tuMp/P+NaEgwQPzuu5yGJDdxR Eid/Yun5lXt67TaCF+FlqWx/mXSZq8dgO6DHXiN71OFF080ddawj8dM7DXXj8g== )`
	RRSIG=261 and DNSKEY=261 verifies the DS RRset
	DS=62167/SHA-256 is now in the chain-of-trust
	DS=62155/SHA-256 is now in the chain-of-trust
	`AMBERALERT.GOV. 3600 IN DS ( 62167 8 2 8a3d539bd30260b5bceb2807f3e5a5ee3f8360e169eec8c7e22ebfd01296dddb )`
	`AMBERALERT.GOV. 3600 IN DS ( 62155 8 2 9eebdb903fa42c489508539d77fd1e77ecd6e2fec66bb5492f141e7ec56d36a7 )`
	`AMBERALERT.GOV. 3600 IN DS ( 62155 8 1 813124bd6c0d38b53619e71d461726ba21b66b08 )`
	`AMBERALERT.GOV. 3600 IN DS ( 62167 8 1 5093d692869dfc23c5717873d77fc703813e957b )`
	Query to ns-jdcw-01.usdoj.GOV for AMBERALERT.GOV/DNSKEY
	Received 1843 bytes from 149.101.180.157
	;; Response received from 149.101.180.157 (1843 octets) ;; HEADER SECTION ;; id = 28393 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; AMBERALERT.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) AMBERALERT.GOV. 432000 IN DNSKEY ( 257 3 8 AwEAAb0Hu847jKvUKa5rhIakjXkYNZh9PMLgilDZX+cfBXqvXNUBQbBhv4A2HdhlKy66fTCBPWHH O7VaP08jnxH7r7l/MnmvT1OwRUSnEWCVUdQkcNSbEAPcydTdigjB64U4sLK47+Bd/olEefvnsIjL JekBFHI7bsa/klxi0STzYeUQKTd2ql/jr+SgOXDN2QMkTKNJBKqnZImvnsJ0QFLYPI/+rPx7lWWL XFKTNyhBa/eJXqyLgcsfxlnku3V/bQpLsTevEzHvOq1i4SBYeEE/GhP1S7h0XwtCZChYA1R0JLE7 COqJ9mBIIDESXzPAyOdkk+R3slSfYFwqiBU6A4o+8aM= ) ; Key ID = 62167 AMBERALERT.GOV. 432000 IN DNSKEY ( 256 3 8 AwEAAaykdOWLVm8AvWHl77zLT9Ou58G69dY0O/nFdZmfzwRwDwtWee2984cRK9NIoFKobS9gU1qD LGKJarRqZPxVMYql6c8QmgJiCBKz/+sU0Eno4eFXojvja+oVC41cBBAJoy/s7IkxNPCOTI0VAKFq Yg/ANtBXM8bOL3Rvew8WN0JB ) ; Key ID = 21021 AMBERALERT.GOV. 432000 IN DNSKEY ( 256 3 8 AwEAAaxEEXaQUPLhLNuOX7UzjGcQrJYId8W/n75ugIRNy5uMSWClkETfvhzd6gGb//WJWmITHXuB zJDKtpJ0aU60yllOW5XJE8wfgu7aveIJNk1Za2dZikK6476QfRKw/zv279C8zWRHpIXnvlr2rXlB SwiNeKwx5gBHOqq1QggSH3iZ ) ; Key ID = 57093 AMBERALERT.GOV. 432000 IN DNSKEY ( 257 3 8 AwEAAbjFntfhLtPbWpbaNGprcdNdhjeuKBjBizdsIgo/Jsz/BoMynPCqGfBCgaA0dt79dtebuz9a uzxB34lZsyR/zFB83Qv+lZXvsngBKqV/VtVHoFXEhhWM7whz3gaZcrdi2hGqLQ6flgRw5wkldTww 64QpkiK6Cx17Y+lCi+vmFvrfBfIbRd+uv9jg25ngsA1e6Fh1uI7dDVyqSRO+uQtTUFQP4/SKlboE zF1To62dljTvTW+d/ib/w8Re+AaV8G0LXNiltipEeopkHcJ9CzZLxQd2f0DCneWL4GsRxNg9o4+8 lVJaffZupTGXoH1w1SjlBdQaDVPo1VxEa3JPijUzFfU= ) ; Key ID = 62155 AMBERALERT.GOV. 432000 IN RRSIG ( DNSKEY 8 2 432000 20221014123053 20221004115645 21021 amberalert.gov. EL/DQgwahmBQco4vD4Ho3uxr51nf1Hd+L8sU7pJlpOfG4MdYatlCfDGeEe2IXqwYa3OGpa6uhEWI NRwSonmNTOb4gJB/gQ90RydTQB8zHE/hchUIIKps59vb+8e1cbQUavoMaojgGpLvMn1YnjuqWK1o ktKYs1eNoD2ElWh/prM= ) amberalert.gov. 432000 IN RRSIG ( DNSKEY 8 2 432000 20221014123053 20221004115645 57093 amberalert.gov. l0T+4LHOY+QA0UIk/uqhcfSnrCENuH7ZidXs16kM0KSsvmhMlioMqmpYxVnqzChuJC8iDcQjemSr ucZCbcUu3Fa1k7EgR0ppLgTEs/HxMAuqdiAVdk5H9pVCPiLV0CT85NKYZVeMgq0nPjgYC5rHq5yk Qsi5Hqp7wz1V9RaoSXk= ) amberalert.gov. 432000 IN RRSIG ( DNSKEY 8 2 432000 20221014123053 20221004115645 62155 amberalert.gov. FMvztaC2eqwIMYa+P6n3Mich2psBsy0BnnIrxMAIZpGy3RlrIcGaGvc9JRjJ6GMqiXrP1zbuCFO3 mWLZfP6S0rtDhjGEZ/ePuEMd1fJPFaaSPfjkJNOwmsRZBnrd1TUdGarAq9iMMPi9R5TWuz6mgigC y5jBoVj2CVxZ6kDUYDePXXm41oTDbmlqqFIhyWNxI6Rbo7i5EspUQFbxstxz6Ibe0ckg+xlclhh5 140Kp/5LrFon9MBdBPIYQU/E960NnrSIZEBuBllgip2yPBSQ4SoA0NJK/GVbabLSpnhTowJFSTmX DQOQHmZ5mmMM69z6vSGQNTxfstTS61OzJoRc6g== ) amberalert.gov. 432000 IN RRSIG ( DNSKEY 8 2 432000 20221014123053 20221004115645 62167 amberalert.gov. qHuzH8h24rrT9ug0qKUPI2Z3z7A55dN3N/fD8yvqFp/lMl9JP5i4tnIkuWJKxPfmTRtIv1zZ9huf //JN3gdxVQZEWvmAeet5y+tg63wlgesMtVYm+boRKI0EM9xbA098eehudfsSRCNypQ8sT4NDeysO a1z2U9QdR0YBn22LLZCyfBakd++pGIldvOFkAPaAU87plmIL4wQHU8Nv46Xm8Os/duD1sKI8qOnV lTHyGkdCKRpdTrxZMyZo5Z/GDtueXIv7Ga9674Zds5ahE7gvIC9oovQjqjM3QSWTFOwPCd1+B/hE dXzalrbh9xtEe5Vo5ejB1OR4rU4s9N5HgNaLbw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	Found 4 DNSKEY records for AMBERALERT.GOV
	`AMBERALERT.GOV. 432000 IN DNSKEY ( 257 3 8 AwEAAb0Hu847jKvUKa5rhIakjXkYNZh9PMLgilDZX+cfBXqvXNUBQbBhv4A2HdhlKy66fTCBPWHH O7VaP08jnxH7r7l/MnmvT1OwRUSnEWCVUdQkcNSbEAPcydTdigjB64U4sLK47+Bd/olEefvnsIjL JekBFHI7bsa/klxi0STzYeUQKTd2ql/jr+SgOXDN2QMkTKNJBKqnZImvnsJ0QFLYPI/+rPx7lWWL XFKTNyhBa/eJXqyLgcsfxlnku3V/bQpLsTevEzHvOq1i4SBYeEE/GhP1S7h0XwtCZChYA1R0JLE7 COqJ9mBIIDESXzPAyOdkk+R3slSfYFwqiBU6A4o+8aM= ) ; Key ID = 62167`
	`AMBERALERT.GOV. 432000 IN DNSKEY ( 256 3 8 AwEAAaykdOWLVm8AvWHl77zLT9Ou58G69dY0O/nFdZmfzwRwDwtWee2984cRK9NIoFKobS9gU1qD LGKJarRqZPxVMYql6c8QmgJiCBKz/+sU0Eno4eFXojvja+oVC41cBBAJoy/s7IkxNPCOTI0VAKFq Yg/ANtBXM8bOL3Rvew8WN0JB ) ; Key ID = 21021`
	`AMBERALERT.GOV. 432000 IN DNSKEY ( 256 3 8 AwEAAaxEEXaQUPLhLNuOX7UzjGcQrJYId8W/n75ugIRNy5uMSWClkETfvhzd6gGb//WJWmITHXuB zJDKtpJ0aU60yllOW5XJE8wfgu7aveIJNk1Za2dZikK6476QfRKw/zv279C8zWRHpIXnvlr2rXlB SwiNeKwx5gBHOqq1QggSH3iZ ) ; Key ID = 57093`
	`AMBERALERT.GOV. 432000 IN DNSKEY ( 257 3 8 AwEAAbjFntfhLtPbWpbaNGprcdNdhjeuKBjBizdsIgo/Jsz/BoMynPCqGfBCgaA0dt79dtebuz9a uzxB34lZsyR/zFB83Qv+lZXvsngBKqV/VtVHoFXEhhWM7whz3gaZcrdi2hGqLQ6flgRw5wkldTww 64QpkiK6Cx17Y+lCi+vmFvrfBfIbRd+uv9jg25ngsA1e6Fh1uI7dDVyqSRO+uQtTUFQP4/SKlboE zF1To62dljTvTW+d/ib/w8Re+AaV8G0LXNiltipEeopkHcJ9CzZLxQd2f0DCneWL4GsRxNg9o4+8 lVJaffZupTGXoH1w1SjlBdQaDVPo1VxEa3JPijUzFfU= ) ; Key ID = 62155`
	DNSKEY=62167/SEP is now in the chain-of-trust
	DS=62167/SHA-256 verifies DNSKEY=62167/SEP
	DS=62167/SHA-1 verifies DNSKEY=62167/SEP
	DNSKEY=62155/SEP is now in the chain-of-trust
	DS=62155/SHA-256 verifies DNSKEY=62155/SEP
	DS=62155/SHA-1 verifies DNSKEY=62155/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`AMBERALERT.GOV. 432000 IN RRSIG ( DNSKEY 8 2 432000 20221014123053 20221004115645 21021 amberalert.gov. EL/DQgwahmBQco4vD4Ho3uxr51nf1Hd+L8sU7pJlpOfG4MdYatlCfDGeEe2IXqwYa3OGpa6uhEWI NRwSonmNTOb4gJB/gQ90RydTQB8zHE/hchUIIKps59vb+8e1cbQUavoMaojgGpLvMn1YnjuqWK1o ktKYs1eNoD2ElWh/prM= )`
	`amberalert.gov. 432000 IN RRSIG ( DNSKEY 8 2 432000 20221014123053 20221004115645 57093 amberalert.gov. l0T+4LHOY+QA0UIk/uqhcfSnrCENuH7ZidXs16kM0KSsvmhMlioMqmpYxVnqzChuJC8iDcQjemSr ucZCbcUu3Fa1k7EgR0ppLgTEs/HxMAuqdiAVdk5H9pVCPiLV0CT85NKYZVeMgq0nPjgYC5rHq5yk Qsi5Hqp7wz1V9RaoSXk= )`
	`amberalert.gov. 432000 IN RRSIG ( DNSKEY 8 2 432000 20221014123053 20221004115645 62155 amberalert.gov. FMvztaC2eqwIMYa+P6n3Mich2psBsy0BnnIrxMAIZpGy3RlrIcGaGvc9JRjJ6GMqiXrP1zbuCFO3 mWLZfP6S0rtDhjGEZ/ePuEMd1fJPFaaSPfjkJNOwmsRZBnrd1TUdGarAq9iMMPi9R5TWuz6mgigC y5jBoVj2CVxZ6kDUYDePXXm41oTDbmlqqFIhyWNxI6Rbo7i5EspUQFbxstxz6Ibe0ckg+xlclhh5 140Kp/5LrFon9MBdBPIYQU/E960NnrSIZEBuBllgip2yPBSQ4SoA0NJK/GVbabLSpnhTowJFSTmX DQOQHmZ5mmMM69z6vSGQNTxfstTS61OzJoRc6g== )`
	`amberalert.gov. 432000 IN RRSIG ( DNSKEY 8 2 432000 20221014123053 20221004115645 62167 amberalert.gov. qHuzH8h24rrT9ug0qKUPI2Z3z7A55dN3N/fD8yvqFp/lMl9JP5i4tnIkuWJKxPfmTRtIv1zZ9huf //JN3gdxVQZEWvmAeet5y+tg63wlgesMtVYm+boRKI0EM9xbA098eehudfsSRCNypQ8sT4NDeysO a1z2U9QdR0YBn22LLZCyfBakd++pGIldvOFkAPaAU87plmIL4wQHU8Nv46Xm8Os/duD1sKI8qOnV lTHyGkdCKRpdTrxZMyZo5Z/GDtueXIv7Ga9674Zds5ahE7gvIC9oovQjqjM3QSWTFOwPCd1+B/hE dXzalrbh9xtEe5Vo5ejB1OR4rU4s9N5HgNaLbw== )`
	RRSIG=21021 and DNSKEY=21021 verifies the DNSKEY RRset
	RRSIG=57093 and DNSKEY=57093 verifies the DNSKEY RRset
	RRSIG=62155 and DNSKEY=62155/SEP verifies the DNSKEY RRset
	RRSIG=62167 and DNSKEY=62167/SEP verifies the DNSKEY RRset
	DNSKEY=21021 is now in the chain-of-trust
	DNSKEY=57093 is now in the chain-of-trust
	Query to ns-jdcw-01.usdoj.GOV for AMBERALERT.GOV/A
	Received 407 bytes from 149.101.180.157
	;; Response received from 149.101.180.157 (407 octets) ;; HEADER SECTION ;; id = 38493 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; AMBERALERT.GOV. IN A ;; ANSWER SECTION (3 records) AMBERALERT.GOV. 600 IN A 149.101.127.86 AMBERALERT.GOV. 600 IN RRSIG ( A 8 2 600 20221014031702 20221004025554 21021 amberalert.gov. TSH6sD7OG0aoHYXoOC5b84kpwWXz03hF8GkpE/AtKLFgOiT53f4wOTS9IHProKGJWJfj3e/MI/Uk v/5azdkjC8bf+9LwstzuIoZ1cuwMT7/NwHQOfA0/wCvKQGH8dH758ZUGl11WSfbthxZvtMf1BF/X PxYwKu6FYcTno8Hqmto= ) amberalert.gov. 600 IN RRSIG ( A 8 2 600 20221014031702 20221004025554 57093 amberalert.gov. em7pbFMIGfs9j6RIg7diiUwQGx7b6F2V6BXEV0CH1+g2EQzNxy/lxCTTMgZ4vMXrF+ls/i47EqQN v4StRMDTBz1WdOjBUb5CuZdL07NEx1CcTn9pjcGxpPwHOVF0QCuruuYR7iG0YnIstAo2FVgNues9 gAIJmkxs5lfCaPfeK/Q= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	ns-jdcw-01.usdoj.GOV is authoritative for AMBERALERT.GOV
	Found RRSIG signed by amberalert.gov zone
	Query to ns-jdcw-02.usdoj.GOV for AMBERALERT.GOV/SOA
	Received 462 bytes from 149.101.80.157
	;; Response received from 149.101.80.157 (462 octets) ;; HEADER SECTION ;; id = 20255 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; AMBERALERT.GOV. IN SOA ;; ANSWER SECTION (3 records) AMBERALERT.GOV. 600 IN SOA ( dnsgm-dc2.admin.oss.doj.GOV. root.usdoj.GOV. 2000120085 ;serial 10800 ;refresh 1080 ;retry 2592000 ;expire 600 ;minimum ) AMBERALERT.GOV. 600 IN RRSIG ( SOA 8 2 600 20221016004144 20221005234144 21021 amberalert.gov. cpAOUc0StZb+dNXetopWzddN+uHc6/lfDlH7e77a+xpQHEe6zBvPNRBVLB/LX6joAj0YAzBka3OW 7q2BVgwarPyFQ1P4OPXcbP43HHQ2WbzsBMzPG4WXcm7UeK/v3qVtoBt1AX6e4t4iL997wcTnWjzz B1O8fh6pCiIQ/WfMQMQ= ) amberalert.gov. 600 IN RRSIG ( SOA 8 2 600 20221016004144 20221005234144 57093 amberalert.gov. HoPLyArtPz6xLKMZS+BqA2aDJjoyYjt01eziqmN7A1KUWQ908vMRXAvbFlHCqwfeYKA7QZVOae6s +KGd9pZyYbXii9OoeJreJGpimR09XurSeX6zWJR9rmntDjQvIvjiVEqfZ31fs4AVcG4rg/mOXKzh Z1/2Cl+FtN7ikBQcPKA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	Query to ns-jdcw-01.usdoj.GOV for AMBERALERT.GOV/A
	Received 407 bytes from 149.101.180.157
	;; Response received from 149.101.180.157 (407 octets) ;; HEADER SECTION ;; id = 62256 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; AMBERALERT.GOV. IN A ;; ANSWER SECTION (3 records) AMBERALERT.GOV. 600 IN A 149.101.127.86 AMBERALERT.GOV. 600 IN RRSIG ( A 8 2 600 20221014031702 20221004025554 21021 amberalert.gov. TSH6sD7OG0aoHYXoOC5b84kpwWXz03hF8GkpE/AtKLFgOiT53f4wOTS9IHProKGJWJfj3e/MI/Uk v/5azdkjC8bf+9LwstzuIoZ1cuwMT7/NwHQOfA0/wCvKQGH8dH758ZUGl11WSfbthxZvtMf1BF/X PxYwKu6FYcTno8Hqmto= ) amberalert.gov. 600 IN RRSIG ( A 8 2 600 20221014031702 20221004025554 57093 amberalert.gov. em7pbFMIGfs9j6RIg7diiUwQGx7b6F2V6BXEV0CH1+g2EQzNxy/lxCTTMgZ4vMXrF+ls/i47EqQN v4StRMDTBz1WdOjBUb5CuZdL07NEx1CcTn9pjcGxpPwHOVF0QCuruuYR7iG0YnIstAo2FVgNues9 gAIJmkxs5lfCaPfeK/Q= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	AMBERALERT.GOV A RR has value 149.101.127.86
	Found 2 RRSIGs over A RRset
	`AMBERALERT.GOV. 600 IN RRSIG ( A 8 2 600 20221014031702 20221004025554 21021 amberalert.gov. TSH6sD7OG0aoHYXoOC5b84kpwWXz03hF8GkpE/AtKLFgOiT53f4wOTS9IHProKGJWJfj3e/MI/Uk v/5azdkjC8bf+9LwstzuIoZ1cuwMT7/NwHQOfA0/wCvKQGH8dH758ZUGl11WSfbthxZvtMf1BF/X PxYwKu6FYcTno8Hqmto= )`
	`amberalert.gov. 600 IN RRSIG ( A 8 2 600 20221014031702 20221004025554 57093 amberalert.gov. em7pbFMIGfs9j6RIg7diiUwQGx7b6F2V6BXEV0CH1+g2EQzNxy/lxCTTMgZ4vMXrF+ls/i47EqQN v4StRMDTBz1WdOjBUb5CuZdL07NEx1CcTn9pjcGxpPwHOVF0QCuruuYR7iG0YnIstAo2FVgNues9 gAIJmkxs5lfCaPfeK/Q= )`
	RRSIG=21021 and DNSKEY=21021 verifies the A RRset
	RRSIG=57093 and DNSKEY=57093 verifies the A RRset

AMBERALERT.GOV

	Query to ns-jdcw-02.usdoj.GOV for AMBERALERT.GOV/A
	Received 407 bytes from 149.101.80.157
	;; Response received from 149.101.80.157 (407 octets) ;; HEADER SECTION ;; id = 40028 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; AMBERALERT.GOV. IN A ;; ANSWER SECTION (3 records) AMBERALERT.GOV. 600 IN A 149.101.127.86 AMBERALERT.GOV. 600 IN RRSIG ( A 8 2 600 20221014031702 20221004025554 21021 amberalert.gov. TSH6sD7OG0aoHYXoOC5b84kpwWXz03hF8GkpE/AtKLFgOiT53f4wOTS9IHProKGJWJfj3e/MI/Uk v/5azdkjC8bf+9LwstzuIoZ1cuwMT7/NwHQOfA0/wCvKQGH8dH758ZUGl11WSfbthxZvtMf1BF/X PxYwKu6FYcTno8Hqmto= ) amberalert.gov. 600 IN RRSIG ( A 8 2 600 20221014031702 20221004025554 57093 amberalert.gov. em7pbFMIGfs9j6RIg7diiUwQGx7b6F2V6BXEV0CH1+g2EQzNxy/lxCTTMgZ4vMXrF+ls/i47EqQN v4StRMDTBz1WdOjBUb5CuZdL07NEx1CcTn9pjcGxpPwHOVF0QCuruuYR7iG0YnIstAo2FVgNues9 gAIJmkxs5lfCaPfeK/Q= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	ns-jdcw-02.usdoj.GOV is authoritative for AMBERALERT.GOV
	Found RRSIG signed by amberalert.gov zone
	Query to ns-jdcw-02.usdoj.GOV for AMBERALERT.GOV/A
	Received 407 bytes from 149.101.80.157
	;; Response received from 149.101.80.157 (407 octets) ;; HEADER SECTION ;; id = 37037 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; AMBERALERT.GOV. IN A ;; ANSWER SECTION (3 records) AMBERALERT.GOV. 600 IN A 149.101.127.86 AMBERALERT.GOV. 600 IN RRSIG ( A 8 2 600 20221014031702 20221004025554 21021 amberalert.gov. TSH6sD7OG0aoHYXoOC5b84kpwWXz03hF8GkpE/AtKLFgOiT53f4wOTS9IHProKGJWJfj3e/MI/Uk v/5azdkjC8bf+9LwstzuIoZ1cuwMT7/NwHQOfA0/wCvKQGH8dH758ZUGl11WSfbthxZvtMf1BF/X PxYwKu6FYcTno8Hqmto= ) amberalert.gov. 600 IN RRSIG ( A 8 2 600 20221014031702 20221004025554 57093 amberalert.gov. em7pbFMIGfs9j6RIg7diiUwQGx7b6F2V6BXEV0CH1+g2EQzNxy/lxCTTMgZ4vMXrF+ls/i47EqQN v4StRMDTBz1WdOjBUb5CuZdL07NEx1CcTn9pjcGxpPwHOVF0QCuruuYR7iG0YnIstAo2FVgNues9 gAIJmkxs5lfCaPfeK/Q= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	AMBERALERT.GOV A RR has value 149.101.127.86
	Found 2 RRSIGs over A RRset
	`AMBERALERT.GOV. 600 IN RRSIG ( A 8 2 600 20221014031702 20221004025554 21021 amberalert.gov. TSH6sD7OG0aoHYXoOC5b84kpwWXz03hF8GkpE/AtKLFgOiT53f4wOTS9IHProKGJWJfj3e/MI/Uk v/5azdkjC8bf+9LwstzuIoZ1cuwMT7/NwHQOfA0/wCvKQGH8dH758ZUGl11WSfbthxZvtMf1BF/X PxYwKu6FYcTno8Hqmto= )`
	`amberalert.gov. 600 IN RRSIG ( A 8 2 600 20221014031702 20221004025554 57093 amberalert.gov. em7pbFMIGfs9j6RIg7diiUwQGx7b6F2V6BXEV0CH1+g2EQzNxy/lxCTTMgZ4vMXrF+ls/i47EqQN v4StRMDTBz1WdOjBUb5CuZdL07NEx1CcTn9pjcGxpPwHOVF0QCuruuYR7iG0YnIstAo2FVgNues9 gAIJmkxs5lfCaPfeK/Q= )`
	RRSIG=21021 and DNSKEY=21021 verifies the A RRset
	RRSIG=57093 and DNSKEY=57093 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test AMBERALERT.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: