DNSSEC Analyzer - CAPITOL.GOV

Domain Name:

Time: 2020-01-18 13:00:58 UTC, NTP stratum 4

Analyzing DNSSEC problems for CAPITOL.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to k.root-servers.net for ./DNSKEY
	Received 864 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (864 bytes) ;; HEADER SECTION ;; id = 23833 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20200201000000 20200111000000 20326 . BWZ/zOwlTZ48dcDdYPH1DhWqARQLeQRQXlBdkjPYgV+A6EIpWvIGjXgaifneRkSg1zxN4hG6SkIO /yUu3aFMcKBlnflIQiXjO64E6sIwbvmFEkeffZGrzdsqTdZI6Fo6oA2wTJrAHoCYBtnuBEb0BmX7 1ZBF/c0d0NghM3mphiXpTBVRiUxQzv+WOa1rqaMXBZuAd1f1hurpnRGhbEB2PhyiyKrmhN1NCrTZ eeV7FVeQeGZq2F76ZusnyRNCm9AgOXa3T9uYQNnnzr5yOcqEE9D4kMWYQrPgV4jpis6imMI8W0jD gEIP8A5Ta3icEP+zsTmeLD5vCQgLNQjSrbhENA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20200201000000 20200111000000 20326 . BWZ/zOwlTZ48dcDdYPH1DhWqARQLeQRQXlBdkjPYgV+A6EIpWvIGjXgaifneRkSg1zxN4hG6SkIO /yUu3aFMcKBlnflIQiXjO64E6sIwbvmFEkeffZGrzdsqTdZI6Fo6oA2wTJrAHoCYBtnuBEb0BmX7 1ZBF/c0d0NghM3mphiXpTBVRiUxQzv+WOa1rqaMXBZuAd1f1hurpnRGhbEB2PhyiyKrmhN1NCrTZ eeV7FVeQeGZq2F76ZusnyRNCm9AgOXa3T9uYQNnnzr5yOcqEE9D4kMWYQrPgV4jpis6imMI8W0jD gEIP8A5Ta3icEP+zsTmeLD5vCQgLNQjSrbhENA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=33853 is now in the chain-of-trust
	Query to g.root-servers.net for CAPITOL.GOV/A
	Received 669 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (669 bytes) ;; HEADER SECTION ;; id = 9122 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CAPITOL.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20200131050000 20200118040000 33853 . ozB4ON880cfR3rJHQHIsTb5N+RRuOXoDus0Eep+g2lgFoxFgW2NKdLUZEoJ0/VoibBZBntSx8Ub4 qtP/3G2UVh5ZJeaclqI+dqzK6sijMuSZOhJMGNfZ8tT0hwsaDThAKB4LZ7I11zVfPj1YwNv2I5pO epTIWcM3Er7Ouz5gYjlC1HRVUmcax/lf7Gk4SDYLivF12tL9K9OJPyTO+jOHU5G17bGvsM6nw5xC DB0ShFJOf0ICeHBVNhrh50Uz7YH/AowmLXqy/nmVb+VbdwJnIF+NXiIF4cwDB4ukCjOac/B4pEQ2 YR9a1iz6Q7KqRF5rHKvbwPQ1Ui9pDdwnTLAD+Q== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to g.root-servers.net for GOV/DNSKEY
	Received 661 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (661 bytes) ;; HEADER SECTION ;; id = 33249 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20200131050000 20200118040000 33853 . ozB4ON880cfR3rJHQHIsTb5N+RRuOXoDus0Eep+g2lgFoxFgW2NKdLUZEoJ0/VoibBZBntSx8Ub4 qtP/3G2UVh5ZJeaclqI+dqzK6sijMuSZOhJMGNfZ8tT0hwsaDThAKB4LZ7I11zVfPj1YwNv2I5pO epTIWcM3Er7Ouz5gYjlC1HRVUmcax/lf7Gk4SDYLivF12tL9K9OJPyTO+jOHU5G17bGvsM6nw5xC DB0ShFJOf0ICeHBVNhrh50Uz7YH/AowmLXqy/nmVb+VbdwJnIF+NXiIF4cwDB4ukCjOac/B4pEQ2 YR9a1iz6Q7KqRF5rHKvbwPQ1Ui9pDdwnTLAD+Q== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to m.root-servers.net for GOV/DS
	Received 406 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (406 bytes) ;; HEADER SECTION ;; id = 24571 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20200131050000 20200118040000 33853 . ozB4ON880cfR3rJHQHIsTb5N+RRuOXoDus0Eep+g2lgFoxFgW2NKdLUZEoJ0/VoibBZBntSx8Ub4 qtP/3G2UVh5ZJeaclqI+dqzK6sijMuSZOhJMGNfZ8tT0hwsaDThAKB4LZ7I11zVfPj1YwNv2I5pO epTIWcM3Er7Ouz5gYjlC1HRVUmcax/lf7Gk4SDYLivF12tL9K9OJPyTO+jOHU5G17bGvsM6nw5xC DB0ShFJOf0ICeHBVNhrh50Uz7YH/AowmLXqy/nmVb+VbdwJnIF+NXiIF4cwDB4ukCjOac/B4pEQ2 YR9a1iz6Q7KqRF5rHKvbwPQ1Ui9pDdwnTLAD+Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20200131050000 20200118040000 33853 . ozB4ON880cfR3rJHQHIsTb5N+RRuOXoDus0Eep+g2lgFoxFgW2NKdLUZEoJ0/VoibBZBntSx8Ub4 qtP/3G2UVh5ZJeaclqI+dqzK6sijMuSZOhJMGNfZ8tT0hwsaDThAKB4LZ7I11zVfPj1YwNv2I5pO epTIWcM3Er7Ouz5gYjlC1HRVUmcax/lf7Gk4SDYLivF12tL9K9OJPyTO+jOHU5G17bGvsM6nw5xC DB0ShFJOf0ICeHBVNhrh50Uz7YH/AowmLXqy/nmVb+VbdwJnIF+NXiIF4cwDB4ukCjOac/B4pEQ2 YR9a1iz6Q7KqRF5rHKvbwPQ1Ui9pDdwnTLAD+Q== )`
	RRSIG=33853 and DNSKEY=33853 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to a.gov-servers.net for GOV/DNSKEY
	Error querying a.gov-servers.net/2001:500:4431:0:0:0:2:30 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 957 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (957 bytes) ;; HEADER SECTION ;; id = 20391 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (4 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAdccuiuxqTxvRcMVh4o9DCfREPNTe3hGEklbdV+L99lKySyIzskGLJ6XDBrWgBeY7ZRSOWGQ 2eHdQLN61fRyqWpVLpNzqaIz/UmMP74VPBCz4QXRDkG4hDO3uifCDVs8Jex4TrYT+hGNYmprbsrq dVQCgeeHc7UMKI/SjusQ4uTKgJ9CWt02/AgK+zKFi3LCBVDGnUwE2kUOL1b0MWfT0ks= ) ; Key ID = 36558 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAcQAVXGAbq+khqvif1NNId5wvkmsmSZEb/UXjfazqpqEeA7IUc8b/9eEIBebIcFda4Ukv8lF lnfGIvMRADLa50RVwP2asra1Md0NC9tLjrHEYN0H68WN0tTLIQ6jUF/kzYTeTOVhlUqzM+5JyyT9 x01e1FT5ANG8RkbgXIyPte2Qs8wasqNkjFGaD5oFLerVScCa0FXumybu9cBEfBbAzPU= ) ; Key ID = 14320 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200125200254 20200110195754 7698 gov. ovUQVM7cUgmfbmtjJkpEuId1o75aUV6yUr09Jq2fXCgZ4pMxw+DLSbgE5lYQlvATCICIfs8dy8pq yEd2h6T0ak7TTX7kprlnXGhkt8ig91qJPyLfxvMYDDJ4rH2u3iGqAmoc4CZuZFrDyKYwGErW+aYo jh44nCnepZ6bCmLYThR6+Xx2Fn3teoDEdq4RXe1DFukj3+wpMwwsyy6dAuOOcLPBHt+7n1RtEsoC wPbxSq5h38aC0mAXATatsYzlILnslbT+hqhhMwngMHjA4ve4I3jkV02oHBd1gb+dihauB8kz2kHe 4958bVEOLu6jHVfO2io3gfpC8wWJdAquLMiCbw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAdccuiuxqTxvRcMVh4o9DCfREPNTe3hGEklbdV+L99lKySyIzskGLJ6XDBrWgBeY7ZRSOWGQ 2eHdQLN61fRyqWpVLpNzqaIz/UmMP74VPBCz4QXRDkG4hDO3uifCDVs8Jex4TrYT+hGNYmprbsrq dVQCgeeHc7UMKI/SjusQ4uTKgJ9CWt02/AgK+zKFi3LCBVDGnUwE2kUOL1b0MWfT0ks= ) ; Key ID = 36558`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAcQAVXGAbq+khqvif1NNId5wvkmsmSZEb/UXjfazqpqEeA7IUc8b/9eEIBebIcFda4Ukv8lF lnfGIvMRADLa50RVwP2asra1Md0NC9tLjrHEYN0H68WN0tTLIQ6jUF/kzYTeTOVhlUqzM+5JyyT9 x01e1FT5ANG8RkbgXIyPte2Qs8wasqNkjFGaD5oFLerVScCa0FXumybu9cBEfBbAzPU= ) ; Key ID = 14320`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200125200254 20200110195754 7698 gov. ovUQVM7cUgmfbmtjJkpEuId1o75aUV6yUr09Jq2fXCgZ4pMxw+DLSbgE5lYQlvATCICIfs8dy8pq yEd2h6T0ak7TTX7kprlnXGhkt8ig91qJPyLfxvMYDDJ4rH2u3iGqAmoc4CZuZFrDyKYwGErW+aYo jh44nCnepZ6bCmLYThR6+Xx2Fn3teoDEdq4RXe1DFukj3+wpMwwsyy6dAuOOcLPBHt+7n1RtEsoC wPbxSq5h38aC0mAXATatsYzlILnslbT+hqhhMwngMHjA4ve4I3jkV02oHBd1gb+dihauB8kz2kHe 4958bVEOLu6jHVfO2io3gfpC8wWJdAquLMiCbw== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=36558 is now in the chain-of-trust
	DNSKEY=14320 is now in the chain-of-trust
	Query to c.gov-servers.net for CAPITOL.GOV/A
	Received 500 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (500 bytes) ;; HEADER SECTION ;; id = 15929 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CAPITOL.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) CAPITOL.GOV. 86400 IN NS auth120.ns.uu.net. CAPITOL.GOV. 86400 IN NS ns2.aoc.GOV. CAPITOL.GOV. 86400 IN NS authns2.centurylink.net. CAPITOL.GOV. 86400 IN NS ns1.aoc.GOV. CAPITOL.GOV. 86400 IN NS authns1.centurylink.net. CAPITOL.GOV. 86400 IN NS auth111.ns.uu.net. CAPITOL.GOV. 3600 IN DS ( 48772 8 2 7777dbff0e3c664f2a377436a5f9a79eb0ecce835d082f5432701cc14825ddf3 ) CAPITOL.GOV. 3600 IN DS 48772 8 1 53b6731f2c5f0bdf25384d7fe6468c37c0bb5310 CAPITOL.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200125101007 20200118101007 36558 gov. t6rzqowtLjMYqgn5gqCp/dBIV3kPCfG7yyIpqZvkoiIbiHrdUaf4ZFJ2IoG9lf40EBj5o/wTgZIb u0CTjl1jY8LX5qX0xUvXvCd2jD76ujd/lrcT/8IW6uAtL/A82vBA2sxNGLPkxLuQlNMRBR7DHcry zhhhfzzBLhpC9Yy/bmL95OMKv2hjPYa6Ul4+ldL7cx8aX2YYJ/ctiH9oEDprbA== ) ;; ADDITIONAL SECTION (3 records) ns2.aoc.GOV. 86400 IN A 161.197.100.14 ns1.aoc.GOV. 86400 IN A 161.197.102.14 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.gov-servers.net for CAPITOL.GOV/DNSKEY
	Received 500 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (500 bytes) ;; HEADER SECTION ;; id = 2012 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CAPITOL.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) CAPITOL.GOV. 86400 IN NS auth120.ns.uu.net. CAPITOL.GOV. 86400 IN NS ns2.aoc.GOV. CAPITOL.GOV. 86400 IN NS authns2.centurylink.net. CAPITOL.GOV. 86400 IN NS ns1.aoc.GOV. CAPITOL.GOV. 86400 IN NS authns1.centurylink.net. CAPITOL.GOV. 86400 IN NS auth111.ns.uu.net. CAPITOL.GOV. 3600 IN DS ( 48772 8 2 7777dbff0e3c664f2a377436a5f9a79eb0ecce835d082f5432701cc14825ddf3 ) CAPITOL.GOV. 3600 IN DS 48772 8 1 53b6731f2c5f0bdf25384d7fe6468c37c0bb5310 CAPITOL.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200125101007 20200118101007 36558 gov. t6rzqowtLjMYqgn5gqCp/dBIV3kPCfG7yyIpqZvkoiIbiHrdUaf4ZFJ2IoG9lf40EBj5o/wTgZIb u0CTjl1jY8LX5qX0xUvXvCd2jD76ujd/lrcT/8IW6uAtL/A82vBA2sxNGLPkxLuQlNMRBR7DHcry zhhhfzzBLhpC9Yy/bmL95OMKv2hjPYa6Ul4+ldL7cx8aX2YYJ/ctiH9oEDprbA== ) ;; ADDITIONAL SECTION (3 records) ns2.aoc.GOV. 86400 IN A 161.197.100.14 ns1.aoc.GOV. 86400 IN A 161.197.102.14 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone CAPITOL.GOV

CAPITOL.GOV

	Checking DS between GOV and CAPITOL.GOV
	Query to b.gov-servers.net for CAPITOL.GOV/DS
	Error querying b.gov-servers.net/2620:74:27:0:0:0:2:30 for CAPITOL.GOV/DS: 'IPv6 transport disabled'
	Received 319 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (319 bytes) ;; HEADER SECTION ;; id = 5577 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CAPITOL.GOV. IN DS ;; ANSWER SECTION (3 records) CAPITOL.GOV. 3600 IN DS ( 48772 8 2 7777dbff0e3c664f2a377436a5f9a79eb0ecce835d082f5432701cc14825ddf3 ) CAPITOL.GOV. 3600 IN DS 48772 8 1 53b6731f2c5f0bdf25384d7fe6468c37c0bb5310 CAPITOL.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200125101007 20200118101007 36558 gov. t6rzqowtLjMYqgn5gqCp/dBIV3kPCfG7yyIpqZvkoiIbiHrdUaf4ZFJ2IoG9lf40EBj5o/wTgZIb u0CTjl1jY8LX5qX0xUvXvCd2jD76ujd/lrcT/8IW6uAtL/A82vBA2sxNGLPkxLuQlNMRBR7DHcry zhhhfzzBLhpC9Yy/bmL95OMKv2hjPYa6Ul4+ldL7cx8aX2YYJ/ctiH9oEDprbA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for CAPITOL.GOV in the GOV zone
	DS=48772/SHA-256 has algorithm RSASHA256
	DS=48772/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`CAPITOL.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200125101007 20200118101007 36558 gov. t6rzqowtLjMYqgn5gqCp/dBIV3kPCfG7yyIpqZvkoiIbiHrdUaf4ZFJ2IoG9lf40EBj5o/wTgZIb u0CTjl1jY8LX5qX0xUvXvCd2jD76ujd/lrcT/8IW6uAtL/A82vBA2sxNGLPkxLuQlNMRBR7DHcry zhhhfzzBLhpC9Yy/bmL95OMKv2hjPYa6Ul4+ldL7cx8aX2YYJ/ctiH9oEDprbA== )`
	RRSIG=36558 and DNSKEY=36558 verifies the DS RRset
	DS=48772/SHA-256 is now in the chain-of-trust
	`CAPITOL.GOV. 3600 IN DS ( 48772 8 2 7777dbff0e3c664f2a377436a5f9a79eb0ecce835d082f5432701cc14825ddf3 )`
	`CAPITOL.GOV. 3600 IN DS 48772 8 1 53b6731f2c5f0bdf25384d7fe6468c37c0bb5310`
	Query to authns1.centurylink.net for CAPITOL.GOV/DNSKEY
	Received 1241 bytes from 63.150.72.4
	;; Answer received from 63.150.72.4 (1241 bytes) ;; HEADER SECTION ;; id = 45942 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CAPITOL.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) capitol.gov. 172800 IN DNSKEY ( 256 3 8 AwEAAeCSyPKExLrOR9QZPxNwN5BjgcgAr9oBnAFaAXZ4xukKMUJ3bU2W16UVnKif4mehZlsVRi1V 69TcjtJA57PyndM9y0aogsz0Ej86CAIUaNBMzTRUq/Qz9Iv1uITsckPnejGstsWiOBMyggIBv8HX cjxwtVn9bRUM5poiwbkpjYUb ) ; Key ID = 34431 capitol.gov. 172800 IN DNSKEY ( 256 3 8 AwEAAcwfb+0EuL9oMhZlZwB8OEGuOwuhaDxFxjF5Bb9Y1Rdpt02REp6wWnOLe5eGXsurFNAXKeNF 8dm9z+q3g5Zx53ciilvrO8Z/rMEr5xCkzBUBzyspFLL8QgrfE6lszs5JOwVnM1pYLjG93L4gbrNm r5D1Lj6XzllYpCbCWyMq4pdT ) ; Key ID = 24486 capitol.gov. 172800 IN DNSKEY ( 257 3 8 AwEAAcjzBSjKdYGn9i4u71NqpstoO7993x3Ij7nZLoYU0OltS84pPvZFswpChz0CgRjSFaZ9bOg9 2BkDHVFScvJ5iY9FEftNdXrVXK/dqcD3tiSct7YDmsGOQ62dUSVs8b6hMynyjCgy60c6GKbN9KQV awmXVYJioOv2fOK0U9JzPkmogYvNDgv76Ioh2TxcZ+aj7OGRDWq7ftAmCQuOsPRSNI3AzDUn1Vub C6/GeB4fegC+7smzp/JwBdoAN6InX7owW4j8DYyOzvsergXmhi5soE0K151UvwskN/w7e+qNQ9JQ 7dGLrJMwPUjqhlnTxXZv4EMIOWhGj+jbLL5kX6Vxrc0= ) ; Key ID = 48772 capitol.gov. 172800 IN DNSKEY ( 256 3 8 AwEAAaeJxVMljqEM/X2AONSKvt/9pl1K+eOueblCg2BpnjzL2MtZsoe1FDEeiij233ZmnyEL9yCf g7oDKevp7NaVe3by4qQ74lIqBv6IuhDgE9cIjpuJ8SHLJcuFwCDK64Bqs3cx0xrYGU4g9iimCYyL sJKgEMo2jSsspQrcWzNr/C9r ) ; Key ID = 17673 capitol.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20200122025143 20200118025135 34431 capitol.gov. O6JIXjvkTc6rZbtN0P2x3AsE9Pb1ypUY3wie7KrnVV6eRERNuZvwb6RRizEc+ajErMephjSO0Bty FQGiv5Zoz/wMYCpVTR7JtbOV09F8O2tsyh0xk40VuOcGWKVYQw3Lda0maFp1rz/5DOFNWZa5HMb2 cDUY4UwcOjWskoFlTvg= ) capitol.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20200122025143 20200118025135 48772 capitol.gov. DY1VXyHeHzTdYoJfQL0GL4SGZanQS6P7ZvpPdAuBhid47kPXkKrUWGcCAtkBGZbRBoIieDnFZgUb kIfurhryuS52BWX/RTO5PfLhVuMA+9qwTxgxNqYJmQb69UsVARQD+i8saahM2k91EoG7SIf8CuMf 3RveffDWnS1ORdlLsp0nwvgCBCFK0iZuwoVlnDVXty/FHAH/iyQ5V/wD/k85Shqu8ury6rL1Zd9G jCHLy/DQxhiSu1uczokn4M79I3lxLzcVnB5tN/ginBcKm/oRFunOdpo/A710Cy6I6dNXnCDEO/65 ZLkk5IgzjxszLRE7ByyKhfa36fnztB+0M8cQzg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for CAPITOL.GOV
	`capitol.gov. 172800 IN DNSKEY ( 256 3 8 AwEAAeCSyPKExLrOR9QZPxNwN5BjgcgAr9oBnAFaAXZ4xukKMUJ3bU2W16UVnKif4mehZlsVRi1V 69TcjtJA57PyndM9y0aogsz0Ej86CAIUaNBMzTRUq/Qz9Iv1uITsckPnejGstsWiOBMyggIBv8HX cjxwtVn9bRUM5poiwbkpjYUb ) ; Key ID = 34431`
	`capitol.gov. 172800 IN DNSKEY ( 256 3 8 AwEAAcwfb+0EuL9oMhZlZwB8OEGuOwuhaDxFxjF5Bb9Y1Rdpt02REp6wWnOLe5eGXsurFNAXKeNF 8dm9z+q3g5Zx53ciilvrO8Z/rMEr5xCkzBUBzyspFLL8QgrfE6lszs5JOwVnM1pYLjG93L4gbrNm r5D1Lj6XzllYpCbCWyMq4pdT ) ; Key ID = 24486`
	`capitol.gov. 172800 IN DNSKEY ( 257 3 8 AwEAAcjzBSjKdYGn9i4u71NqpstoO7993x3Ij7nZLoYU0OltS84pPvZFswpChz0CgRjSFaZ9bOg9 2BkDHVFScvJ5iY9FEftNdXrVXK/dqcD3tiSct7YDmsGOQ62dUSVs8b6hMynyjCgy60c6GKbN9KQV awmXVYJioOv2fOK0U9JzPkmogYvNDgv76Ioh2TxcZ+aj7OGRDWq7ftAmCQuOsPRSNI3AzDUn1Vub C6/GeB4fegC+7smzp/JwBdoAN6InX7owW4j8DYyOzvsergXmhi5soE0K151UvwskN/w7e+qNQ9JQ 7dGLrJMwPUjqhlnTxXZv4EMIOWhGj+jbLL5kX6Vxrc0= ) ; Key ID = 48772`
	`capitol.gov. 172800 IN DNSKEY ( 256 3 8 AwEAAaeJxVMljqEM/X2AONSKvt/9pl1K+eOueblCg2BpnjzL2MtZsoe1FDEeiij233ZmnyEL9yCf g7oDKevp7NaVe3by4qQ74lIqBv6IuhDgE9cIjpuJ8SHLJcuFwCDK64Bqs3cx0xrYGU4g9iimCYyL sJKgEMo2jSsspQrcWzNr/C9r ) ; Key ID = 17673`
	DNSKEY=48772/SEP is now in the chain-of-trust
	DS=48772/SHA-256 verifies DNSKEY=48772/SEP
	DS=48772/SHA-1 verifies DNSKEY=48772/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`capitol.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20200122025143 20200118025135 34431 capitol.gov. O6JIXjvkTc6rZbtN0P2x3AsE9Pb1ypUY3wie7KrnVV6eRERNuZvwb6RRizEc+ajErMephjSO0Bty FQGiv5Zoz/wMYCpVTR7JtbOV09F8O2tsyh0xk40VuOcGWKVYQw3Lda0maFp1rz/5DOFNWZa5HMb2 cDUY4UwcOjWskoFlTvg= )`
	`capitol.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20200122025143 20200118025135 48772 capitol.gov. DY1VXyHeHzTdYoJfQL0GL4SGZanQS6P7ZvpPdAuBhid47kPXkKrUWGcCAtkBGZbRBoIieDnFZgUb kIfurhryuS52BWX/RTO5PfLhVuMA+9qwTxgxNqYJmQb69UsVARQD+i8saahM2k91EoG7SIf8CuMf 3RveffDWnS1ORdlLsp0nwvgCBCFK0iZuwoVlnDVXty/FHAH/iyQ5V/wD/k85Shqu8ury6rL1Zd9G jCHLy/DQxhiSu1uczokn4M79I3lxLzcVnB5tN/ginBcKm/oRFunOdpo/A710Cy6I6dNXnCDEO/65 ZLkk5IgzjxszLRE7ByyKhfa36fnztB+0M8cQzg== )`
	RRSIG=34431 and DNSKEY=34431 verifies the DNSKEY RRset
	RRSIG=48772 and DNSKEY=48772/SEP verifies the DNSKEY RRset
	DNSKEY=34431 is now in the chain-of-trust
	DNSKEY=24486 is now in the chain-of-trust
	DNSKEY=17673 is now in the chain-of-trust
	Query to auth120.ns.uu.net for CAPITOL.GOV/A
	Received 238 bytes from 198.6.1.154
	;; Answer received from 198.6.1.154 (238 bytes) ;; HEADER SECTION ;; id = 49338 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CAPITOL.GOV. IN A ;; ANSWER SECTION (2 records) capitol.gov. 86400 IN A 192.237.239.228 capitol.gov. 86400 IN RRSIG ( A 8 2 86400 20200122015447 20200118014841 34431 capitol.gov. tyjWaEhIvAXnFEy+RSZFKryXVZg1L5tApPMp8x/j6VYVPyt7EskkzD28rm35OhzT+jyOUeBrBmDD ODiFpq28N/FGTrWn3AdpvFaolOhSJP8u4TZCeBUqEPxIpgor0tOYhxJ8nRHpiH1BnDfAWRqpHuAv xIejFoz0/iKG1Ol1W/Q= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	CAPITOL.GOV is authoritative for CAPITOL.GOV
	Found RRSIG signed by capitol.gov zone
	Query to authns1.centurylink.net for CAPITOL.GOV/SOA
	Error querying authns1.centurylink.net/2001:428:0:0:0:0:0:5 for CAPITOL.GOV/SOA: 'IPv6 transport disabled'
	Received 1043 bytes from 63.150.72.4
	;; Answer received from 63.150.72.4 (1043 bytes) ;; HEADER SECTION ;; id = 40170 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CAPITOL.GOV. IN SOA ;; ANSWER SECTION (2 records) capitol.gov. 86400 IN SOA ( ns1.aoc.gov. hostmaster.aoc.gov. 2168 ;serial 10800 ;refresh 1080 ;retry 604800 ;expire 86400 ;minimum ) capitol.gov. 86400 IN RRSIG ( SOA 8 2 86400 20200122035135 20200118025135 34431 capitol.gov. AXW+EsvCoE4On/CgAxkfl9VrsVZ336GrY8h+XdMYqFZyP6dxa9wPqNz+FoNU/CGUIljcsbDUJgrA MdHb/tRyC6uhcb2oy/3t/r1J4XwC/9+aOe+kKpfPz2HwJHrTz9S/3XjshhyhAzYvm1KQKYiVkIxl ACwMUlbIxFnmuItFd6M= ) ;; AUTHORITY SECTION (7 records) capitol.gov. 86400 IN NS authns2.centurylink.net. capitol.gov. 86400 IN NS auth111.ns.uu.net. capitol.gov. 86400 IN NS auth120.ns.uu.net. capitol.gov. 86400 IN NS ns2.aoc.gov. capitol.gov. 86400 IN NS ns1.aoc.gov. capitol.gov. 86400 IN NS authns1.centurylink.net. capitol.gov. 86400 IN RRSIG ( NS 8 2 86400 20200122015447 20200118014841 34431 capitol.gov. rpXJDpaOiAxdgT22EwHT2GF4C+qhzP8qLxeVPkgSqIfTm7ZC8Md38wRHzxhgydtX8EeFo2HDWSfU p3PTRKb954LiZgpDp9b0NnMRSpE+jr0PUP90ngpu20jb5n/aQE5Od/jdv7KEtVwO7EU6xVR0++oU HwWUkLXcI81vcliun2E= ) ;; ADDITIONAL SECTION (9 records) ns1.aoc.gov. 3600 IN A 161.197.102.14 ns2.aoc.gov. 3600 IN A 161.197.100.14 authns1.centurylink.net. 600 IN A 63.150.72.4 authns2.centurylink.net. 600 IN A 208.44.130.120 authns1.centurylink.net. 300 IN AAAA 2001:428::5 authns2.centurylink.net. 300 IN AAAA 2001:428::6 ns1.aoc.gov. 3600 IN RRSIG ( A 8 3 3600 20200121143529 20200117141143 47523 aoc.gov. lr6l91L6fE4WoffaF4uCnCF0m1i49eDxJejfpIvDo7Ywha6UbvAa+NazeE5DSjQBgDT6gj7b/lZy i7QMawj1SC6uZ7gOmdqBAHh2v8wmP/X+2Gx68Of/Uz7yd/HZomy67OEbPfx+VKhxZkgHCRCTbQZz 09oBcH/7lU/rNatL7XE= ) ns2.aoc.gov. 3600 IN RRSIG ( A 8 3 3600 20200122122649 20200118114226 47523 aoc.gov. uG3OXLVtKGkR6riVBOGEoAq29bRHM1Pu8Ra2xhCCkXMpbu8b7FnzIrzwA72uxkQlFQIhabQHkoay D/4J2t/pEGvRJF7cDScOQWvCWg7+dm9XCrgkXMOgs0Yt+kvnbiaXhnHcNfMaDmhDwDGyZDgOfdvT iSA8gJzxBWE3WFYuDRk= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns2.aoc.GOV for CAPITOL.GOV/SOA
	Received 266 bytes from 161.197.100.14
	;; Answer received from 161.197.100.14 (266 bytes) ;; HEADER SECTION ;; id = 39014 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CAPITOL.GOV. IN SOA ;; ANSWER SECTION (2 records) CAPITOL.GOV. 86400 IN SOA ( ns1.aoc.GOV. hostmaster.aoc.GOV. 2168 ;serial 10800 ;refresh 1080 ;retry 604800 ;expire 86400 ;minimum ) CAPITOL.GOV. 86400 IN RRSIG ( SOA 8 2 86400 20200122035135 20200118025135 34431 capitol.gov. AXW+EsvCoE4On/CgAxkfl9VrsVZ336GrY8h+XdMYqFZyP6dxa9wPqNz+FoNU/CGUIljcsbDUJgrA MdHb/tRyC6uhcb2oy/3t/r1J4XwC/9+aOe+kKpfPz2HwJHrTz9S/3XjshhyhAzYvm1KQKYiVkIxl ACwMUlbIxFnmuItFd6M= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to auth120.ns.uu.net for CAPITOL.GOV/SOA
	Received 277 bytes from 198.6.1.154
	;; Answer received from 198.6.1.154 (277 bytes) ;; HEADER SECTION ;; id = 7192 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CAPITOL.GOV. IN SOA ;; ANSWER SECTION (2 records) capitol.gov. 86400 IN SOA ( ns1.aoc.gov. hostmaster.aoc.gov. 2168 ;serial 10800 ;refresh 1080 ;retry 604800 ;expire 86400 ;minimum ) capitol.gov. 86400 IN RRSIG ( SOA 8 2 86400 20200122035135 20200118025135 34431 capitol.gov. AXW+EsvCoE4On/CgAxkfl9VrsVZ336GrY8h+XdMYqFZyP6dxa9wPqNz+FoNU/CGUIljcsbDUJgrA MdHb/tRyC6uhcb2oy/3t/r1J4XwC/9+aOe+kKpfPz2HwJHrTz9S/3XjshhyhAzYvm1KQKYiVkIxl ACwMUlbIxFnmuItFd6M= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to auth111.ns.uu.net for CAPITOL.GOV/SOA
	Received 277 bytes from 198.6.1.115
	;; Answer received from 198.6.1.115 (277 bytes) ;; HEADER SECTION ;; id = 9038 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CAPITOL.GOV. IN SOA ;; ANSWER SECTION (2 records) capitol.gov. 86400 IN SOA ( ns1.aoc.gov. hostmaster.aoc.gov. 2168 ;serial 10800 ;refresh 1080 ;retry 604800 ;expire 86400 ;minimum ) capitol.gov. 86400 IN RRSIG ( SOA 8 2 86400 20200122035135 20200118025135 34431 capitol.gov. AXW+EsvCoE4On/CgAxkfl9VrsVZ336GrY8h+XdMYqFZyP6dxa9wPqNz+FoNU/CGUIljcsbDUJgrA MdHb/tRyC6uhcb2oy/3t/r1J4XwC/9+aOe+kKpfPz2HwJHrTz9S/3XjshhyhAzYvm1KQKYiVkIxl ACwMUlbIxFnmuItFd6M= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to authns2.centurylink.net for CAPITOL.GOV/SOA
	Error querying authns2.centurylink.net/2001:428:0:0:0:0:0:6 for CAPITOL.GOV/SOA: 'IPv6 transport disabled'
	Received 1043 bytes from 208.44.130.120
	;; Answer received from 208.44.130.120 (1043 bytes) ;; HEADER SECTION ;; id = 8313 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CAPITOL.GOV. IN SOA ;; ANSWER SECTION (2 records) capitol.gov. 86400 IN SOA ( ns1.aoc.gov. hostmaster.aoc.gov. 2168 ;serial 10800 ;refresh 1080 ;retry 604800 ;expire 86400 ;minimum ) capitol.gov. 86400 IN RRSIG ( SOA 8 2 86400 20200122035135 20200118025135 34431 capitol.gov. AXW+EsvCoE4On/CgAxkfl9VrsVZ336GrY8h+XdMYqFZyP6dxa9wPqNz+FoNU/CGUIljcsbDUJgrA MdHb/tRyC6uhcb2oy/3t/r1J4XwC/9+aOe+kKpfPz2HwJHrTz9S/3XjshhyhAzYvm1KQKYiVkIxl ACwMUlbIxFnmuItFd6M= ) ;; AUTHORITY SECTION (7 records) capitol.gov. 86400 IN NS ns1.aoc.gov. capitol.gov. 86400 IN NS authns2.centurylink.net. capitol.gov. 86400 IN NS auth120.ns.uu.net. capitol.gov. 86400 IN NS auth111.ns.uu.net. capitol.gov. 86400 IN NS ns2.aoc.gov. capitol.gov. 86400 IN NS authns1.centurylink.net. capitol.gov. 86400 IN RRSIG ( NS 8 2 86400 20200122015447 20200118014841 34431 capitol.gov. rpXJDpaOiAxdgT22EwHT2GF4C+qhzP8qLxeVPkgSqIfTm7ZC8Md38wRHzxhgydtX8EeFo2HDWSfU p3PTRKb954LiZgpDp9b0NnMRSpE+jr0PUP90ngpu20jb5n/aQE5Od/jdv7KEtVwO7EU6xVR0++oU HwWUkLXcI81vcliun2E= ) ;; ADDITIONAL SECTION (9 records) ns1.aoc.gov. 3600 IN A 161.197.102.14 ns2.aoc.gov. 3600 IN A 161.197.100.14 authns1.centurylink.net. 600 IN A 63.150.72.4 authns2.centurylink.net. 600 IN A 208.44.130.120 authns1.centurylink.net. 300 IN AAAA 2001:428::5 authns2.centurylink.net. 300 IN AAAA 2001:428::6 ns1.aoc.gov. 3600 IN RRSIG ( A 8 3 3600 20200121143529 20200117141143 47523 aoc.gov. lr6l91L6fE4WoffaF4uCnCF0m1i49eDxJejfpIvDo7Ywha6UbvAa+NazeE5DSjQBgDT6gj7b/lZy i7QMawj1SC6uZ7gOmdqBAHh2v8wmP/X+2Gx68Of/Uz7yd/HZomy67OEbPfx+VKhxZkgHCRCTbQZz 09oBcH/7lU/rNatL7XE= ) ns2.aoc.gov. 3600 IN RRSIG ( A 8 3 3600 20200122122649 20200118114226 47523 aoc.gov. uG3OXLVtKGkR6riVBOGEoAq29bRHM1Pu8Ra2xhCCkXMpbu8b7FnzIrzwA72uxkQlFQIhabQHkoay D/4J2t/pEGvRJF7cDScOQWvCWg7+dm9XCrgkXMOgs0Yt+kvnbiaXhnHcNfMaDmhDwDGyZDgOfdvT iSA8gJzxBWE3WFYuDRk= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.aoc.GOV for CAPITOL.GOV/SOA
	Received 266 bytes from 161.197.102.14
	;; Answer received from 161.197.102.14 (266 bytes) ;; HEADER SECTION ;; id = 39397 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CAPITOL.GOV. IN SOA ;; ANSWER SECTION (2 records) CAPITOL.GOV. 86400 IN SOA ( ns1.aoc.GOV. hostmaster.aoc.GOV. 2168 ;serial 10800 ;refresh 1080 ;retry 604800 ;expire 86400 ;minimum ) CAPITOL.GOV. 86400 IN RRSIG ( SOA 8 2 86400 20200122035135 20200118025135 34431 capitol.gov. AXW+EsvCoE4On/CgAxkfl9VrsVZ336GrY8h+XdMYqFZyP6dxa9wPqNz+FoNU/CGUIljcsbDUJgrA MdHb/tRyC6uhcb2oy/3t/r1J4XwC/9+aOe+kKpfPz2HwJHrTz9S/3XjshhyhAzYvm1KQKYiVkIxl ACwMUlbIxFnmuItFd6M= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to auth120.ns.uu.net for CAPITOL.GOV/A
	Received 238 bytes from 198.6.1.154
	;; Answer received from 198.6.1.154 (238 bytes) ;; HEADER SECTION ;; id = 60804 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CAPITOL.GOV. IN A ;; ANSWER SECTION (2 records) capitol.gov. 86400 IN A 192.237.239.228 capitol.gov. 86400 IN RRSIG ( A 8 2 86400 20200122015447 20200118014841 34431 capitol.gov. tyjWaEhIvAXnFEy+RSZFKryXVZg1L5tApPMp8x/j6VYVPyt7EskkzD28rm35OhzT+jyOUeBrBmDD ODiFpq28N/FGTrWn3AdpvFaolOhSJP8u4TZCeBUqEPxIpgor0tOYhxJ8nRHpiH1BnDfAWRqpHuAv xIejFoz0/iKG1Ol1W/Q= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	CAPITOL.GOV A RR has value 192.237.239.228
	Found 1 RRSIGs over A RRset
	`capitol.gov. 86400 IN RRSIG ( A 8 2 86400 20200122015447 20200118014841 34431 capitol.gov. tyjWaEhIvAXnFEy+RSZFKryXVZg1L5tApPMp8x/j6VYVPyt7EskkzD28rm35OhzT+jyOUeBrBmDD ODiFpq28N/FGTrWn3AdpvFaolOhSJP8u4TZCeBUqEPxIpgor0tOYhxJ8nRHpiH1BnDfAWRqpHuAv xIejFoz0/iKG1Ol1W/Q= )`
	RRSIG=34431 and DNSKEY=34431 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test CAPITOL.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: