DNSSEC Analyzer - CHILDRENINADVERSITY.GOV

Domain Name:

Time: 2022-10-07 03:05:24 UTC, NTP stratum 16

Analyzing DNSSEC problems for CHILDRENINADVERSITY.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Received 1141 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (1141 octets) ;; HEADER SECTION ;; id = 33090 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAeB54o2xvW6vY4qQZ0krDsEZCe6MsRWCqsXd4+cNJZMePnlV/xwDrIbbeH1SJzv742rOHzgA KM1/3SQHHSkoEIPx8XQdHAZBxfhaXl3e8c5WrE3aGXS5AeTWAkt85ccqWgKyitxjFmJEOol0BqS2 xueltaDwgWcC10nPUY+y5l/kTOYyptYQS4gg1uJNXIob/R1XIEJ10ZCurkYqZxgqyHc7tZv09N23 o9rnGdjnYiArH7FjlXD8Rvjde8YWkmfdbCEWnchrnxDK8KV2/ZvBpG/WYnRKXYPUceGCw59OJdJ5 M7utkm547RB3eEd8CVVhbXopZlsKq3GCrBwaIVe9ci0= ) ; Key ID = 18733 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20221022000000 20221001000000 20326 . J39bVSJaNAI0vdz8qBWGjXuc39IV5rNXi+3lX7cVHtcdZJ/APXxdBXKI1vD0AEJjBg31iE/r+8Vk 8PQQklaWtlJ9YBFM5sVUBozVl9WL6x0P7JcZbBvgotfNfuvx0mt3BE/myzw5+kJV0OuG6nBZcD6B QZP3aIbQbVe64Hj3TeMGowQTcdTIfWsPpKB5GvxEY2XhRdahhftG2c8aVJZsub86jUjpTSZn8Dp1 S8BS3+ZBbbqHcQGqf4cmwS1QZYHjOsa86889IPcKmQ4EBQUlLihv3qRrGILkC1fhPhsyj/r8HX3v hM+Wamz8hF1QjhOUSvUD01iBl5PdTXacgAZ3mw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeB54o2xvW6vY4qQZ0krDsEZCe6MsRWCqsXd4+cNJZMePnlV/xwDrIbbeH1SJzv742rOHzgA KM1/3SQHHSkoEIPx8XQdHAZBxfhaXl3e8c5WrE3aGXS5AeTWAkt85ccqWgKyitxjFmJEOol0BqS2 xueltaDwgWcC10nPUY+y5l/kTOYyptYQS4gg1uJNXIob/R1XIEJ10ZCurkYqZxgqyHc7tZv09N23 o9rnGdjnYiArH7FjlXD8Rvjde8YWkmfdbCEWnchrnxDK8KV2/ZvBpG/WYnRKXYPUceGCw59OJdJ5 M7utkm547RB3eEd8CVVhbXopZlsKq3GCrBwaIVe9ci0= ) ; Key ID = 18733`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20221022000000 20221001000000 20326 . J39bVSJaNAI0vdz8qBWGjXuc39IV5rNXi+3lX7cVHtcdZJ/APXxdBXKI1vD0AEJjBg31iE/r+8Vk 8PQQklaWtlJ9YBFM5sVUBozVl9WL6x0P7JcZbBvgotfNfuvx0mt3BE/myzw5+kJV0OuG6nBZcD6B QZP3aIbQbVe64Hj3TeMGowQTcdTIfWsPpKB5GvxEY2XhRdahhftG2c8aVJZsub86jUjpTSZn8Dp1 S8BS3+ZBbbqHcQGqf4cmwS1QZYHjOsa86889IPcKmQ4EBQUlLihv3qRrGILkC1fhPhsyj/r8HX3v hM+Wamz8hF1QjhOUSvUD01iBl5PdTXacgAZ3mw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=20826 is now in the chain-of-trust
	DNSKEY=18733 is now in the chain-of-trust
	Query to g.root-servers.net for CHILDRENINADVERSITY.GOV/A
	Received 645 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (645 octets) ;; HEADER SECTION ;; id = 43069 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; CHILDRENINADVERSITY.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20221019200000 20221006190000 18733 . NMhrdZIDV7KAssfaoBY0Uj80zNe+Im/ZSKYMdPTNksFvHyvFEveUj3L6P3C5yEIlig5KkwuAJQaR V8CctZ0r7I3A/pPtn5w88xrscdpwS8Y4q65dm3LuQEtDfSTamrgJxoSeZHJW0jJ+QUZA84oSdVes 22WoPcHzj5QeIB9NyDuFJ/ch6QMxjtjkN09n3QdPmJDFjxcbPFaNBvwwhmOsEKNChsjqvWEo4hyZ mpuB7PyBHjSlrNWG3kjGLVZdsrx00eBjPB8fD+Fcl8fQJhmb9KvV2TbEVqTkdjm/M5cSq0i732ET F3HR/iG+3vJYJWYxqbLPAe8DP4CmzaSt0AbwLQ== ) ;; ADDITIONAL SECTION (9 records) d.gov-servers.net. 172800 IN A 81.19.194.30 c.gov-servers.net. 172800 IN A 69.36.153.30 b.gov-servers.net. 172800 IN A 209.112.123.30 a.gov-servers.net. 172800 IN A 69.36.157.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to g.root-servers.net for GOV/DNSKEY
	Received 625 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (625 octets) ;; HEADER SECTION ;; id = 42188 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20221019200000 20221006190000 18733 . NMhrdZIDV7KAssfaoBY0Uj80zNe+Im/ZSKYMdPTNksFvHyvFEveUj3L6P3C5yEIlig5KkwuAJQaR V8CctZ0r7I3A/pPtn5w88xrscdpwS8Y4q65dm3LuQEtDfSTamrgJxoSeZHJW0jJ+QUZA84oSdVes 22WoPcHzj5QeIB9NyDuFJ/ch6QMxjtjkN09n3QdPmJDFjxcbPFaNBvwwhmOsEKNChsjqvWEo4hyZ mpuB7PyBHjSlrNWG3kjGLVZdsrx00eBjPB8fD+Fcl8fQJhmb9KvV2TbEVqTkdjm/M5cSq0i732ET F3HR/iG+3vJYJWYxqbLPAe8DP4CmzaSt0AbwLQ== ) ;; ADDITIONAL SECTION (9 records) d.gov-servers.net. 172800 IN A 81.19.194.30 c.gov-servers.net. 172800 IN A 69.36.153.30 b.gov-servers.net. 172800 IN A 209.112.123.30 a.gov-servers.net. 172800 IN A 69.36.157.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to m.root-servers.net for GOV/DS
	Received 370 bytes from 202.12.27.33
	;; Response received from 202.12.27.33 (370 octets) ;; HEADER SECTION ;; id = 52198 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20221019200000 20221006190000 18733 . NMhrdZIDV7KAssfaoBY0Uj80zNe+Im/ZSKYMdPTNksFvHyvFEveUj3L6P3C5yEIlig5KkwuAJQaR V8CctZ0r7I3A/pPtn5w88xrscdpwS8Y4q65dm3LuQEtDfSTamrgJxoSeZHJW0jJ+QUZA84oSdVes 22WoPcHzj5QeIB9NyDuFJ/ch6QMxjtjkN09n3QdPmJDFjxcbPFaNBvwwhmOsEKNChsjqvWEo4hyZ mpuB7PyBHjSlrNWG3kjGLVZdsrx00eBjPB8fD+Fcl8fQJhmb9KvV2TbEVqTkdjm/M5cSq0i732ET F3HR/iG+3vJYJWYxqbLPAe8DP4CmzaSt0AbwLQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20221019200000 20221006190000 18733 . NMhrdZIDV7KAssfaoBY0Uj80zNe+Im/ZSKYMdPTNksFvHyvFEveUj3L6P3C5yEIlig5KkwuAJQaR V8CctZ0r7I3A/pPtn5w88xrscdpwS8Y4q65dm3LuQEtDfSTamrgJxoSeZHJW0jJ+QUZA84oSdVes 22WoPcHzj5QeIB9NyDuFJ/ch6QMxjtjkN09n3QdPmJDFjxcbPFaNBvwwhmOsEKNChsjqvWEo4hyZ mpuB7PyBHjSlrNWG3kjGLVZdsrx00eBjPB8fD+Fcl8fQJhmb9KvV2TbEVqTkdjm/M5cSq0i732ET F3HR/iG+3vJYJWYxqbLPAe8DP4CmzaSt0AbwLQ== )`
	RRSIG=18733 and DNSKEY=18733 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to a.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 69.36.157.30
	;; Response received from 69.36.157.30 (777 octets) ;; HEADER SECTION ;; id = 62873 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbSW4ocEzPbMwUkqAURZNNLAAZ9XoKgSLoPQVtMdnKBkrDoIwWxYO0nk3n/seSHxNb4I+Shq HeLM0bydpkqpMPCesMKazwq2YfQD0t0NdN4kiApakMBOO6foEa9UKHg8YbF5ZeZ2oZzIyFVlDhZB qtVeCM7SIEfxp8VR4/TWRHaoqoOnScTAoVZA9+YknqERZeQoUecTd1xXBHV0dQawxlc= ) ; Key ID = 261 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20221016190254 20221001185754 7698 gov. pDnqznzjN4ZL1h3nS0IdBb7vlGlFxYiW3dfrBgFJoq8wGtgMvhsAYt4vFQf5iByRP8qWBmt52v0m rqPILOZQsasn89pibGPVJ8Jk5Mj/hQYuuQawVeEiRdEF7r9adec0g0dZ1D8inQlxOOnCAc/SqVwa c1U7wTwEpWw0Ac90p8+0wabJk7X7uxTaEsGEiPbBYuE7y2/qjtb20h+i90OMJRsalMRpcBocKfK8 dtXYJlxr2aPBk4UeVI3vIRkeMbMhtnFGSu0XpILQpycjpwwjPbaELEOpbLP8K2ktVkkBP3VadCim 011j34xQnAG4p4ij3Wro6u/756QVzYyz5Vl90A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbSW4ocEzPbMwUkqAURZNNLAAZ9XoKgSLoPQVtMdnKBkrDoIwWxYO0nk3n/seSHxNb4I+Shq HeLM0bydpkqpMPCesMKazwq2YfQD0t0NdN4kiApakMBOO6foEa9UKHg8YbF5ZeZ2oZzIyFVlDhZB qtVeCM7SIEfxp8VR4/TWRHaoqoOnScTAoVZA9+YknqERZeQoUecTd1xXBHV0dQawxlc= ) ; Key ID = 261`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20221016190254 20221001185754 7698 gov. pDnqznzjN4ZL1h3nS0IdBb7vlGlFxYiW3dfrBgFJoq8wGtgMvhsAYt4vFQf5iByRP8qWBmt52v0m rqPILOZQsasn89pibGPVJ8Jk5Mj/hQYuuQawVeEiRdEF7r9adec0g0dZ1D8inQlxOOnCAc/SqVwa c1U7wTwEpWw0Ac90p8+0wabJk7X7uxTaEsGEiPbBYuE7y2/qjtb20h+i90OMJRsalMRpcBocKfK8 dtXYJlxr2aPBk4UeVI3vIRkeMbMhtnFGSu0XpILQpycjpwwjPbaELEOpbLP8K2ktVkkBP3VadCim 011j34xQnAG4p4ij3Wro6u/756QVzYyz5Vl90A== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=261 is now in the chain-of-trust
	Query to c.gov-servers.net for CHILDRENINADVERSITY.GOV/A
	Received 491 bytes from 69.36.153.30
	;; Response received from 69.36.153.30 (491 octets) ;; HEADER SECTION ;; id = 35053 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CHILDRENINADVERSITY.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) CHILDRENINADVERSITY.GOV. 86400 IN NS ns08.usaid.GOV. CHILDRENINADVERSITY.GOV. 86400 IN NS ns07.usaid.GOV. CHILDRENINADVERSITY.GOV. 3600 IN DS ( 12775 8 2 52402009575190af81f853665802914b54c243279fae5e8a606fdd1197b12530 ) CHILDRENINADVERSITY.GOV. 3600 IN DS ( 12775 8 1 59dea6c1f5d5de5482bcf1e83c34760211508da0 ) CHILDRENINADVERSITY.GOV. 3600 IN DS ( 31465 8 1 3a4cce4d91da80ef3767ca4facdf2daf91718b21 ) CHILDRENINADVERSITY.GOV. 3600 IN DS ( 31465 8 2 2ae3600e9d229a6c4d67e7141a4fa6be441ed5176edd0bd02dc444e0b839c875 ) CHILDRENINADVERSITY.GOV. 3600 IN RRSIG ( DS 8 2 3600 20221012194010 20221005194010 261 gov. LgLnZkI/VqY3zD5K7j/j2FaiB3+UJUn7d/HgT6i/PPSbDl/ATI4UBbtL3Pyu8ho9O+t7prtRwODd 1V4bco6oUyJbpV7+HB7CL4116g7fBYvnZk7Quu1o20UUJ9aj6AusIH4QD7NRbvBbsil5kXXNE93F 1nEp/1y4xuwaGWKg4yvZKjLBwVbLIg3Ol+eKCaoIT8z7T78p6FOwdksfPyZsQA== ) ;; ADDITIONAL SECTION (3 records) ns07.usaid.GOV. 86400 IN A 12.96.42.221 ns08.usaid.GOV. 86400 IN A 206.118.0.93 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.gov-servers.net for CHILDRENINADVERSITY.GOV/DNSKEY
	Received 491 bytes from 209.112.123.30
	;; Response received from 209.112.123.30 (491 octets) ;; HEADER SECTION ;; id = 18743 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CHILDRENINADVERSITY.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) CHILDRENINADVERSITY.GOV. 86400 IN NS ns08.usaid.GOV. CHILDRENINADVERSITY.GOV. 86400 IN NS ns07.usaid.GOV. CHILDRENINADVERSITY.GOV. 3600 IN DS ( 12775 8 1 59dea6c1f5d5de5482bcf1e83c34760211508da0 ) CHILDRENINADVERSITY.GOV. 3600 IN DS ( 12775 8 2 52402009575190af81f853665802914b54c243279fae5e8a606fdd1197b12530 ) CHILDRENINADVERSITY.GOV. 3600 IN DS ( 31465 8 2 2ae3600e9d229a6c4d67e7141a4fa6be441ed5176edd0bd02dc444e0b839c875 ) CHILDRENINADVERSITY.GOV. 3600 IN DS ( 31465 8 1 3a4cce4d91da80ef3767ca4facdf2daf91718b21 ) CHILDRENINADVERSITY.GOV. 3600 IN RRSIG ( DS 8 2 3600 20221012194010 20221005194010 261 gov. LgLnZkI/VqY3zD5K7j/j2FaiB3+UJUn7d/HgT6i/PPSbDl/ATI4UBbtL3Pyu8ho9O+t7prtRwODd 1V4bco6oUyJbpV7+HB7CL4116g7fBYvnZk7Quu1o20UUJ9aj6AusIH4QD7NRbvBbsil5kXXNE93F 1nEp/1y4xuwaGWKg4yvZKjLBwVbLIg3Ol+eKCaoIT8z7T78p6FOwdksfPyZsQA== ) ;; ADDITIONAL SECTION (3 records) ns07.usaid.GOV. 86400 IN A 12.96.42.221 ns08.usaid.GOV. 86400 IN A 206.118.0.93 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone CHILDRENINADVERSITY.GOV

CHILDRENINADVERSITY.GOV

	Checking DS between GOV and CHILDRENINADVERSITY.GOV
	Query to b.gov-servers.net for CHILDRENINADVERSITY.GOV/DS
	Received 415 bytes from 209.112.123.30
	;; Response received from 209.112.123.30 (415 octets) ;; HEADER SECTION ;; id = 56322 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CHILDRENINADVERSITY.GOV. IN DS ;; ANSWER SECTION (5 records) CHILDRENINADVERSITY.GOV. 3600 IN DS ( 31465 8 1 3a4cce4d91da80ef3767ca4facdf2daf91718b21 ) CHILDRENINADVERSITY.GOV. 3600 IN DS ( 12775 8 1 59dea6c1f5d5de5482bcf1e83c34760211508da0 ) CHILDRENINADVERSITY.GOV. 3600 IN DS ( 31465 8 2 2ae3600e9d229a6c4d67e7141a4fa6be441ed5176edd0bd02dc444e0b839c875 ) CHILDRENINADVERSITY.GOV. 3600 IN DS ( 12775 8 2 52402009575190af81f853665802914b54c243279fae5e8a606fdd1197b12530 ) CHILDRENINADVERSITY.GOV. 3600 IN RRSIG ( DS 8 2 3600 20221012194010 20221005194010 261 gov. LgLnZkI/VqY3zD5K7j/j2FaiB3+UJUn7d/HgT6i/PPSbDl/ATI4UBbtL3Pyu8ho9O+t7prtRwODd 1V4bco6oUyJbpV7+HB7CL4116g7fBYvnZk7Quu1o20UUJ9aj6AusIH4QD7NRbvBbsil5kXXNE93F 1nEp/1y4xuwaGWKg4yvZKjLBwVbLIg3Ol+eKCaoIT8z7T78p6FOwdksfPyZsQA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for CHILDRENINADVERSITY.GOV in the GOV zone
	DS=31465/SHA-1 has algorithm RSASHA256
	DS=12775/SHA-1 has algorithm RSASHA256
	DS=31465/SHA-256 has algorithm RSASHA256
	DS=12775/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`CHILDRENINADVERSITY.GOV. 3600 IN RRSIG ( DS 8 2 3600 20221012194010 20221005194010 261 gov. LgLnZkI/VqY3zD5K7j/j2FaiB3+UJUn7d/HgT6i/PPSbDl/ATI4UBbtL3Pyu8ho9O+t7prtRwODd 1V4bco6oUyJbpV7+HB7CL4116g7fBYvnZk7Quu1o20UUJ9aj6AusIH4QD7NRbvBbsil5kXXNE93F 1nEp/1y4xuwaGWKg4yvZKjLBwVbLIg3Ol+eKCaoIT8z7T78p6FOwdksfPyZsQA== )`
	RRSIG=261 and DNSKEY=261 verifies the DS RRset
	DS=31465/SHA-1 is now in the chain-of-trust
	DS=12775/SHA-1 is now in the chain-of-trust
	`CHILDRENINADVERSITY.GOV. 3600 IN DS ( 31465 8 1 3a4cce4d91da80ef3767ca4facdf2daf91718b21 )`
	`CHILDRENINADVERSITY.GOV. 3600 IN DS ( 12775 8 1 59dea6c1f5d5de5482bcf1e83c34760211508da0 )`
	`CHILDRENINADVERSITY.GOV. 3600 IN DS ( 31465 8 2 2ae3600e9d229a6c4d67e7141a4fa6be441ed5176edd0bd02dc444e0b839c875 )`
	`CHILDRENINADVERSITY.GOV. 3600 IN DS ( 12775 8 2 52402009575190af81f853665802914b54c243279fae5e8a606fdd1197b12530 )`
	Query to ns08.usaid.GOV for CHILDRENINADVERSITY.GOV/DNSKEY
	Received 1888 bytes from 206.118.0.93
	;; Response received from 206.118.0.93 (1888 octets) ;; HEADER SECTION ;; id = 57639 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; CHILDRENINADVERSITY.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) CHILDRENINADVERSITY.GOV. 172800 IN DNSKEY ( 256 3 8 AwEAAcSc+mqTAftB8SpjSgf4L9qM79qOGfTOy9lyuTRlwpXMiT/2Vi44Mhkth7Z43rR1A4wZoYhc bh3dN7KORnteTrD5SJKbD0u14mTc5S0yopesdx0EZskcZrejaZqYpaYHVOzRM4QMkfCmT2cSJoVW 5EuO9iAUs5a0sSBV7vW1clRh ) ; Key ID = 9111 CHILDRENINADVERSITY.GOV. 172800 IN DNSKEY ( 256 3 8 AwEAAcoqAIGW3YuHBtEHYaoBECGEYUHOlviXM80YOpUljKd1td1e9EXDWD3aY5Xjps1wwI31QsGz /U8JebKDiGbr7f1GH/7Ae20MCdXH4eZk/R+Q+8ongua4TIpn4EPdIWVdLuS6gbBs7UFEpLIkLi2p BZA9gBZGfuvefG3rXuCjtaQ7 ) ; Key ID = 17949 CHILDRENINADVERSITY.GOV. 172800 IN DNSKEY ( 257 3 8 AwEAAclBMfpGEsNh1vVmLjcIaA9ilPA3xB1HmYsoJU7LNccsl/AKNG/rADGckOeLXmORF+WeBpro 7S9uFkFU5up34bnr6xUZtvn+y2ZfbwJR+GSsuDC90Kl/n4JbLhZoElm+VVBaCNOGRLoqCjCIBajm CWqR5hlnFZcvQ9QsbSmdiq00t2VZ86qDradkdTVEsxL7ZYEuwcRnO0UVnuuOmGnq1D5FKwEK63zW lHga+/UoyqR7uxbF6EzvXLwA/AoRdhaMDnIPLql/I6AnrxBsTFHgrTlQ6A6zdDdDlkQZs+q7lG6S NKS5rfNXn7xSG6Dw9Fwq3zUzc03r/CGabMlQonh1b3s= ) ; Key ID = 31465 CHILDRENINADVERSITY.GOV. 172800 IN DNSKEY ( 257 3 8 AwEAAddnX8QEuP9ovfEouxmdmImwLUF16FODk9dmS5mDPgsyv9Eg+ijHWQ9DJOgTQRTdhq7nDol0 xM5xc6kw7/CBJL+bBSfN5qPNWqZYcbJTKa+Cw3Cp5Cx5L1Vik/9WAYyFarfoQVhW+/JLPg31NXHR lY5fdOG0QVbtjzIbb6f6wtpPdSZSLMLSqt1PDi+1KK8PGAAUrZj/rNxUiqHBqiLGVqSTaDnlSZNR wGHmBrbrhWczICuBstH/ET8eaSm2oGUl9rwspZMHi5UBvdkyhGiueDLGNdpH7kt8/C9MH630W0BM 3KGhsMrN625Phs+PF1Os/Eek9v0FaHE72UuFLURRd7E= ) ; Key ID = 12775 CHILDRENINADVERSITY.GOV. 172800 IN RRSIG ( DNSKEY 8 2 172800 20221010201341 20221006193335 9111 childreninadversity.gov. UosoT7fockOG+7bjY2Yroq5kDWS7silecsR4CD3L92SIKk0XuzWj2xJbP1/IDSTAOtXq8PdAIJPT xak2goBYwRYM2fG3asq99mfZrIpwAMDtr+tndI8QPBikW9DNHtH8F0mHRY7Oev764ibkyX9E8HzA +H9l9+cqxfpUEhM+taU= ) childreninadversity.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20221010201341 20221006193335 12775 childreninadversity.gov. y+gq6JsPX5lOa1bRS5fN1sqyQuFxWkuunowYElJVwvq9/lvpSHsledeIzFjV78dSbM8lfSay/9F6 AhrhjaFVcfd1zpYwaT7WmGvyOEP1ojw9woYPlkIy/5Cg0DlEyU8rILa0YbrGz8pkCwnkx4tsrg5w 39mvfEnKEFeG3WvqYhe+ES9LXf/qxDMM6icqB5sDPQ07u+FNtyNWFWP1NkQcL56DXN8Zf0Oyys3z IBcsMbWZZKc8b5CksoVUXmj6ai0iEmUtGAV9VgFk70g9IGKlaXTkcAdGL6tbfSC1b3UdyGj7EIJy pUZ8lhXkCAKdDNVZpAIrD4481c/P6NZRMEx25g== ) childreninadversity.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20221010201341 20221006193335 17949 childreninadversity.gov. dBc/OO0HLgkbqxzMJQf3nr2QkKkX8YF7Rx1UAnB7+sdKZDf5UejsPtRvdXLt/jVgGgUR6RBFvYdm /GwgW+kQEikdVrluJ8y3hsdswhnU4pw+rRvVtxjP40j1CpTuu/9potzLiFWo1xhug5g6HE4oqwd1 IqXUke+X4mMfLbq353A= ) childreninadversity.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20221010201341 20221006193335 31465 childreninadversity.gov. Z8hCXchNCyTaJXLq31yCjG3mVLCuRtQiMntTJJsXCXyNexoSiL93eetWRszEv7J7Z13UofOJD6nX BGSX8G/6Ehn9uJdVQv/b3QqUt9fM+Ycz+PvqSLbwVCpuHaKFC7chk8oZQEw/7wgrB/NvKesikoY5 lj0a8/Mhb17kaoG1niM/oe1pIh62D8rkdC9kJk0+Ktzzmvk2GpLnXPNVm0ZqKDwoOP4z4z1iKBzB zOowR/EojjN6YHKQ2paQ533ESIM9UP44eXk3vTHzq+R5FQk3sRXJsYILBa1dEqnSMYTxFz2wd6Vb ab5+t27QbN6qzKCRgO0JV56kqzHjnLBiYBuHSw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	Found 4 DNSKEY records for CHILDRENINADVERSITY.GOV
	`CHILDRENINADVERSITY.GOV. 172800 IN DNSKEY ( 256 3 8 AwEAAcSc+mqTAftB8SpjSgf4L9qM79qOGfTOy9lyuTRlwpXMiT/2Vi44Mhkth7Z43rR1A4wZoYhc bh3dN7KORnteTrD5SJKbD0u14mTc5S0yopesdx0EZskcZrejaZqYpaYHVOzRM4QMkfCmT2cSJoVW 5EuO9iAUs5a0sSBV7vW1clRh ) ; Key ID = 9111`
	`CHILDRENINADVERSITY.GOV. 172800 IN DNSKEY ( 256 3 8 AwEAAcoqAIGW3YuHBtEHYaoBECGEYUHOlviXM80YOpUljKd1td1e9EXDWD3aY5Xjps1wwI31QsGz /U8JebKDiGbr7f1GH/7Ae20MCdXH4eZk/R+Q+8ongua4TIpn4EPdIWVdLuS6gbBs7UFEpLIkLi2p BZA9gBZGfuvefG3rXuCjtaQ7 ) ; Key ID = 17949`
	`CHILDRENINADVERSITY.GOV. 172800 IN DNSKEY ( 257 3 8 AwEAAclBMfpGEsNh1vVmLjcIaA9ilPA3xB1HmYsoJU7LNccsl/AKNG/rADGckOeLXmORF+WeBpro 7S9uFkFU5up34bnr6xUZtvn+y2ZfbwJR+GSsuDC90Kl/n4JbLhZoElm+VVBaCNOGRLoqCjCIBajm CWqR5hlnFZcvQ9QsbSmdiq00t2VZ86qDradkdTVEsxL7ZYEuwcRnO0UVnuuOmGnq1D5FKwEK63zW lHga+/UoyqR7uxbF6EzvXLwA/AoRdhaMDnIPLql/I6AnrxBsTFHgrTlQ6A6zdDdDlkQZs+q7lG6S NKS5rfNXn7xSG6Dw9Fwq3zUzc03r/CGabMlQonh1b3s= ) ; Key ID = 31465`
	`CHILDRENINADVERSITY.GOV. 172800 IN DNSKEY ( 257 3 8 AwEAAddnX8QEuP9ovfEouxmdmImwLUF16FODk9dmS5mDPgsyv9Eg+ijHWQ9DJOgTQRTdhq7nDol0 xM5xc6kw7/CBJL+bBSfN5qPNWqZYcbJTKa+Cw3Cp5Cx5L1Vik/9WAYyFarfoQVhW+/JLPg31NXHR lY5fdOG0QVbtjzIbb6f6wtpPdSZSLMLSqt1PDi+1KK8PGAAUrZj/rNxUiqHBqiLGVqSTaDnlSZNR wGHmBrbrhWczICuBstH/ET8eaSm2oGUl9rwspZMHi5UBvdkyhGiueDLGNdpH7kt8/C9MH630W0BM 3KGhsMrN625Phs+PF1Os/Eek9v0FaHE72UuFLURRd7E= ) ; Key ID = 12775`
	DNSKEY=31465/SEP is now in the chain-of-trust
	DS=31465/SHA-1 verifies DNSKEY=31465/SEP
	DS=31465/SHA-256 verifies DNSKEY=31465/SEP
	DNSKEY=12775/SEP is now in the chain-of-trust
	DS=12775/SHA-1 verifies DNSKEY=12775/SEP
	DS=12775/SHA-256 verifies DNSKEY=12775/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`CHILDRENINADVERSITY.GOV. 172800 IN RRSIG ( DNSKEY 8 2 172800 20221010201341 20221006193335 9111 childreninadversity.gov. UosoT7fockOG+7bjY2Yroq5kDWS7silecsR4CD3L92SIKk0XuzWj2xJbP1/IDSTAOtXq8PdAIJPT xak2goBYwRYM2fG3asq99mfZrIpwAMDtr+tndI8QPBikW9DNHtH8F0mHRY7Oev764ibkyX9E8HzA +H9l9+cqxfpUEhM+taU= )`
	`childreninadversity.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20221010201341 20221006193335 12775 childreninadversity.gov. y+gq6JsPX5lOa1bRS5fN1sqyQuFxWkuunowYElJVwvq9/lvpSHsledeIzFjV78dSbM8lfSay/9F6 AhrhjaFVcfd1zpYwaT7WmGvyOEP1ojw9woYPlkIy/5Cg0DlEyU8rILa0YbrGz8pkCwnkx4tsrg5w 39mvfEnKEFeG3WvqYhe+ES9LXf/qxDMM6icqB5sDPQ07u+FNtyNWFWP1NkQcL56DXN8Zf0Oyys3z IBcsMbWZZKc8b5CksoVUXmj6ai0iEmUtGAV9VgFk70g9IGKlaXTkcAdGL6tbfSC1b3UdyGj7EIJy pUZ8lhXkCAKdDNVZpAIrD4481c/P6NZRMEx25g== )`
	`childreninadversity.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20221010201341 20221006193335 17949 childreninadversity.gov. dBc/OO0HLgkbqxzMJQf3nr2QkKkX8YF7Rx1UAnB7+sdKZDf5UejsPtRvdXLt/jVgGgUR6RBFvYdm /GwgW+kQEikdVrluJ8y3hsdswhnU4pw+rRvVtxjP40j1CpTuu/9potzLiFWo1xhug5g6HE4oqwd1 IqXUke+X4mMfLbq353A= )`
	`childreninadversity.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20221010201341 20221006193335 31465 childreninadversity.gov. Z8hCXchNCyTaJXLq31yCjG3mVLCuRtQiMntTJJsXCXyNexoSiL93eetWRszEv7J7Z13UofOJD6nX BGSX8G/6Ehn9uJdVQv/b3QqUt9fM+Ycz+PvqSLbwVCpuHaKFC7chk8oZQEw/7wgrB/NvKesikoY5 lj0a8/Mhb17kaoG1niM/oe1pIh62D8rkdC9kJk0+Ktzzmvk2GpLnXPNVm0ZqKDwoOP4z4z1iKBzB zOowR/EojjN6YHKQ2paQ533ESIM9UP44eXk3vTHzq+R5FQk3sRXJsYILBa1dEqnSMYTxFz2wd6Vb ab5+t27QbN6qzKCRgO0JV56kqzHjnLBiYBuHSw== )`
	RRSIG=9111 and DNSKEY=9111 verifies the DNSKEY RRset
	RRSIG=12775 and DNSKEY=12775/SEP verifies the DNSKEY RRset
	RRSIG=17949 and DNSKEY=17949 verifies the DNSKEY RRset
	RRSIG=31465 and DNSKEY=31465/SEP verifies the DNSKEY RRset
	DNSKEY=9111 is now in the chain-of-trust
	DNSKEY=17949 is now in the chain-of-trust
	Query to ns07.usaid.GOV for CHILDRENINADVERSITY.GOV/A
	Received 450 bytes from 12.96.42.221
	;; Response received from 12.96.42.221 (450 octets) ;; HEADER SECTION ;; id = 19310 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; CHILDRENINADVERSITY.GOV. IN A ;; ANSWER SECTION (4 records) CHILDRENINADVERSITY.GOV. 28800 IN A 76.223.76.220 CHILDRENINADVERSITY.GOV. 28800 IN A 13.248.213.89 CHILDRENINADVERSITY.GOV. 28800 IN RRSIG ( A 8 2 28800 20221011010607 20221007000614 9111 childreninadversity.gov. CVyhPPbQl69qfDYo9XIduACsWtFcj0SPoJMz2Oe+t7uimaWo3+3R+QVxb7cF+VbnRK4aZDAvTfMK jkbflFrudy/Pg3du2oBVZRB0yErvPa4xq4cih/je2eL9QlyjqzJ12mURjuPKUPVasWAuSsfCuDEH zogGLgQFrVYl9D1oe7c= ) childreninadversity.gov. 28800 IN RRSIG ( A 8 2 28800 20221011010607 20221007000614 17949 childreninadversity.gov. CFmV9J3N/2a4FBNjXlBbB1TkI5/YH/1lfJU2MFmEHabdyD5vBvKXXJ+7BIZskn7zJ9VMxl+oGj34 UxvIBwp7GZq2AFTb2cdJ7PsEkKZB2MS1qRvOm46WB/RrXeq1fua6veSZMWNb/ZfnyC6+FgWwSpKY A+qgY1cLxOQ2bGme0+0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	ns07.usaid.GOV is authoritative for CHILDRENINADVERSITY.GOV
	Found RRSIG signed by childreninadversity.gov zone
	Query to ns08.usaid.GOV for CHILDRENINADVERSITY.GOV/SOA
	Received 475 bytes from 206.118.0.93
	;; Response received from 206.118.0.93 (475 octets) ;; HEADER SECTION ;; id = 53257 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; CHILDRENINADVERSITY.GOV. IN SOA ;; ANSWER SECTION (3 records) CHILDRENINADVERSITY.GOV. 28800 IN SOA ( ns07.usaid.GOV. linuxteam.usaid.GOV. 13589 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) CHILDRENINADVERSITY.GOV. 28800 IN RRSIG ( SOA 8 2 28800 20221011010614 20221007000614 9111 childreninadversity.gov. Lz7De4BqP+uKyFzpCBiA8taEquTU5MvTKieRXKuivxYTuhumJ3q1ClT7HxE4wkA+Z1xIR6gOB6SW 55Y4ASZcyzTujIy/CCvlTsFk09Xn5Z0XppbOHATZytjmMTL7NRIPLIsMtsxAPLIosYs5cA3zzbE1 BrGj9j4qef3fDy5amU4= ) childreninadversity.gov. 28800 IN RRSIG ( SOA 8 2 28800 20221011010614 20221007000614 17949 childreninadversity.gov. wQw5evFMmJOrGAFqF05JO2PSYiQq4QDwR0eDuGgi1/nfcJB5gaHV4nDxWImv+6FNbcGr058tnX80 GnkDxffGAySAd9A5BulP2xFqeY87sm2knUhH+TRCzC+3KQmfhRfquEioLvQHrBnOABHuGgp7224f +XdfU91DYwX08KzhQ6Q= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	Query to ns07.usaid.GOV for CHILDRENINADVERSITY.GOV/A
	Received 450 bytes from 12.96.42.221
	;; Response received from 12.96.42.221 (450 octets) ;; HEADER SECTION ;; id = 44516 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; CHILDRENINADVERSITY.GOV. IN A ;; ANSWER SECTION (4 records) CHILDRENINADVERSITY.GOV. 28800 IN A 13.248.213.89 CHILDRENINADVERSITY.GOV. 28800 IN A 76.223.76.220 CHILDRENINADVERSITY.GOV. 28800 IN RRSIG ( A 8 2 28800 20221011010607 20221007000614 9111 childreninadversity.gov. CVyhPPbQl69qfDYo9XIduACsWtFcj0SPoJMz2Oe+t7uimaWo3+3R+QVxb7cF+VbnRK4aZDAvTfMK jkbflFrudy/Pg3du2oBVZRB0yErvPa4xq4cih/je2eL9QlyjqzJ12mURjuPKUPVasWAuSsfCuDEH zogGLgQFrVYl9D1oe7c= ) childreninadversity.gov. 28800 IN RRSIG ( A 8 2 28800 20221011010607 20221007000614 17949 childreninadversity.gov. CFmV9J3N/2a4FBNjXlBbB1TkI5/YH/1lfJU2MFmEHabdyD5vBvKXXJ+7BIZskn7zJ9VMxl+oGj34 UxvIBwp7GZq2AFTb2cdJ7PsEkKZB2MS1qRvOm46WB/RrXeq1fua6veSZMWNb/ZfnyC6+FgWwSpKY A+qgY1cLxOQ2bGme0+0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	CHILDRENINADVERSITY.GOV A RR has value 13.248.213.89
	CHILDRENINADVERSITY.GOV A RR has value 76.223.76.220
	Found 2 RRSIGs over A RRset
	`CHILDRENINADVERSITY.GOV. 28800 IN RRSIG ( A 8 2 28800 20221011010607 20221007000614 9111 childreninadversity.gov. CVyhPPbQl69qfDYo9XIduACsWtFcj0SPoJMz2Oe+t7uimaWo3+3R+QVxb7cF+VbnRK4aZDAvTfMK jkbflFrudy/Pg3du2oBVZRB0yErvPa4xq4cih/je2eL9QlyjqzJ12mURjuPKUPVasWAuSsfCuDEH zogGLgQFrVYl9D1oe7c= )`
	`childreninadversity.gov. 28800 IN RRSIG ( A 8 2 28800 20221011010607 20221007000614 17949 childreninadversity.gov. CFmV9J3N/2a4FBNjXlBbB1TkI5/YH/1lfJU2MFmEHabdyD5vBvKXXJ+7BIZskn7zJ9VMxl+oGj34 UxvIBwp7GZq2AFTb2cdJ7PsEkKZB2MS1qRvOm46WB/RrXeq1fua6veSZMWNb/ZfnyC6+FgWwSpKY A+qgY1cLxOQ2bGme0+0= )`
	RRSIG=9111 and DNSKEY=9111 verifies the A RRset
	RRSIG=17949 and DNSKEY=17949 verifies the A RRset

CHILDRENINADVERSITY.GOV

	Query to ns08.usaid.GOV for CHILDRENINADVERSITY.GOV/A
	Received 450 bytes from 206.118.0.93
	;; Response received from 206.118.0.93 (450 octets) ;; HEADER SECTION ;; id = 56346 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; CHILDRENINADVERSITY.GOV. IN A ;; ANSWER SECTION (4 records) CHILDRENINADVERSITY.GOV. 28800 IN A 76.223.76.220 CHILDRENINADVERSITY.GOV. 28800 IN A 13.248.213.89 CHILDRENINADVERSITY.GOV. 28800 IN RRSIG ( A 8 2 28800 20221011010607 20221007000614 9111 childreninadversity.gov. CVyhPPbQl69qfDYo9XIduACsWtFcj0SPoJMz2Oe+t7uimaWo3+3R+QVxb7cF+VbnRK4aZDAvTfMK jkbflFrudy/Pg3du2oBVZRB0yErvPa4xq4cih/je2eL9QlyjqzJ12mURjuPKUPVasWAuSsfCuDEH zogGLgQFrVYl9D1oe7c= ) childreninadversity.gov. 28800 IN RRSIG ( A 8 2 28800 20221011010607 20221007000614 17949 childreninadversity.gov. CFmV9J3N/2a4FBNjXlBbB1TkI5/YH/1lfJU2MFmEHabdyD5vBvKXXJ+7BIZskn7zJ9VMxl+oGj34 UxvIBwp7GZq2AFTb2cdJ7PsEkKZB2MS1qRvOm46WB/RrXeq1fua6veSZMWNb/ZfnyC6+FgWwSpKY A+qgY1cLxOQ2bGme0+0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	ns08.usaid.GOV is authoritative for CHILDRENINADVERSITY.GOV
	Found RRSIG signed by childreninadversity.gov zone
	Query to ns08.usaid.GOV for CHILDRENINADVERSITY.GOV/A
	Received 450 bytes from 206.118.0.93
	;; Response received from 206.118.0.93 (450 octets) ;; HEADER SECTION ;; id = 61213 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; CHILDRENINADVERSITY.GOV. IN A ;; ANSWER SECTION (4 records) CHILDRENINADVERSITY.GOV. 28800 IN A 13.248.213.89 CHILDRENINADVERSITY.GOV. 28800 IN A 76.223.76.220 CHILDRENINADVERSITY.GOV. 28800 IN RRSIG ( A 8 2 28800 20221011010607 20221007000614 9111 childreninadversity.gov. CVyhPPbQl69qfDYo9XIduACsWtFcj0SPoJMz2Oe+t7uimaWo3+3R+QVxb7cF+VbnRK4aZDAvTfMK jkbflFrudy/Pg3du2oBVZRB0yErvPa4xq4cih/je2eL9QlyjqzJ12mURjuPKUPVasWAuSsfCuDEH zogGLgQFrVYl9D1oe7c= ) childreninadversity.gov. 28800 IN RRSIG ( A 8 2 28800 20221011010607 20221007000614 17949 childreninadversity.gov. CFmV9J3N/2a4FBNjXlBbB1TkI5/YH/1lfJU2MFmEHabdyD5vBvKXXJ+7BIZskn7zJ9VMxl+oGj34 UxvIBwp7GZq2AFTb2cdJ7PsEkKZB2MS1qRvOm46WB/RrXeq1fua6veSZMWNb/ZfnyC6+FgWwSpKY A+qgY1cLxOQ2bGme0+0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	CHILDRENINADVERSITY.GOV A RR has value 13.248.213.89
	CHILDRENINADVERSITY.GOV A RR has value 76.223.76.220
	Found 2 RRSIGs over A RRset
	`CHILDRENINADVERSITY.GOV. 28800 IN RRSIG ( A 8 2 28800 20221011010607 20221007000614 9111 childreninadversity.gov. CVyhPPbQl69qfDYo9XIduACsWtFcj0SPoJMz2Oe+t7uimaWo3+3R+QVxb7cF+VbnRK4aZDAvTfMK jkbflFrudy/Pg3du2oBVZRB0yErvPa4xq4cih/je2eL9QlyjqzJ12mURjuPKUPVasWAuSsfCuDEH zogGLgQFrVYl9D1oe7c= )`
	`childreninadversity.gov. 28800 IN RRSIG ( A 8 2 28800 20221011010607 20221007000614 17949 childreninadversity.gov. CFmV9J3N/2a4FBNjXlBbB1TkI5/YH/1lfJU2MFmEHabdyD5vBvKXXJ+7BIZskn7zJ9VMxl+oGj34 UxvIBwp7GZq2AFTb2cdJ7PsEkKZB2MS1qRvOm46WB/RrXeq1fua6veSZMWNb/ZfnyC6+FgWwSpKY A+qgY1cLxOQ2bGme0+0= )`
	RRSIG=9111 and DNSKEY=9111 verifies the A RRset
	RRSIG=17949 and DNSKEY=17949 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test CHILDRENINADVERSITY.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: