DNSSEC Analyzer - DONOTCALL.GOV

Domain Name:

Time: 2021-05-11 00:14:48 UTC, NTP stratum 4

Analyzing DNSSEC problems for DONOTCALL.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to m.root-servers.net for ./DNSKEY
	Received 864 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (864 bytes) ;; HEADER SECTION ;; id = 52753 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210522000000 20210501000000 20326 . KTOHq4gvmIC2KJOzZwQhHGonCSPCCEtX/453Ow6uauO3BjuoNp3Bdjh2BxEaHBQ5mvp+n/WjsrlQ dQvuf1BSZfVUJoOm3ofTQI6rRpex3rYxj8BYBjgSxYcRJniVP1nRnAozTspKfsm/bCUqB0RsnXWh 4tySxKv5fs8Ej7Eph9aG7JpIy7GuoqCxyAEKSJ6IOG8iTKtfInjg0zSF+ElRlr+K9MeCJxvsVeCP BR5BNWQ4EimmoMSCL7DfEzyHsKLau11nrDpx2jBih72PG6UmMohitJp+cCQz+C2qUSsiuME4olp9 X64P2CwkqY5T75GOmmVX+WJZsBd9xsuQkUuHTQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210522000000 20210501000000 20326 . KTOHq4gvmIC2KJOzZwQhHGonCSPCCEtX/453Ow6uauO3BjuoNp3Bdjh2BxEaHBQ5mvp+n/WjsrlQ dQvuf1BSZfVUJoOm3ofTQI6rRpex3rYxj8BYBjgSxYcRJniVP1nRnAozTspKfsm/bCUqB0RsnXWh 4tySxKv5fs8Ej7Eph9aG7JpIy7GuoqCxyAEKSJ6IOG8iTKtfInjg0zSF+ElRlr+K9MeCJxvsVeCP BR5BNWQ4EimmoMSCL7DfEzyHsKLau11nrDpx2jBih72PG6UmMohitJp+cCQz+C2qUSsiuME4olp9 X64P2CwkqY5T75GOmmVX+WJZsBd9xsuQkUuHTQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=14631 is now in the chain-of-trust
	Query to l.root-servers.net for DONOTCALL.GOV/A
	Received 632 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (632 bytes) ;; HEADER SECTION ;; id = 1245 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DONOTCALL.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20210523200000 20210510190000 14631 . SjqaGxB7M4EuzOJoZBBRa8SbP3aTClssQ28CRZ7X6RbDSPw/kn5bbpKhgejbppKKb8u9bzMX6nrE g62bgNKSc+S4gzGjZDJ43j7t6BbU86Xkkbaubt7lDVTogSYIL1fe0+8hGSQm6+te37QYmIxU1iJP fsl8Sq1v84uvRAttkRVohWpg6FWVr/GmbndjB1J1PxM9mTaUVK8BNt95hFuVAHDyvdGRSXw2SJ7g 3Mvf4GUVzgMDnjIO9QGVDSoMzCmUxJ1jZLs6zkHT/XxbNI16osdmH8pdANxiyg3G45wlyidLy3Gr RJ6TZFc7A+PLbQ25wwKnSgi5EJrHWZGpILap7w== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to g.root-servers.net for GOV/DNSKEY
	Received 625 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (625 bytes) ;; HEADER SECTION ;; id = 22989 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20210523200000 20210510190000 14631 . SjqaGxB7M4EuzOJoZBBRa8SbP3aTClssQ28CRZ7X6RbDSPw/kn5bbpKhgejbppKKb8u9bzMX6nrE g62bgNKSc+S4gzGjZDJ43j7t6BbU86Xkkbaubt7lDVTogSYIL1fe0+8hGSQm6+te37QYmIxU1iJP fsl8Sq1v84uvRAttkRVohWpg6FWVr/GmbndjB1J1PxM9mTaUVK8BNt95hFuVAHDyvdGRSXw2SJ7g 3Mvf4GUVzgMDnjIO9QGVDSoMzCmUxJ1jZLs6zkHT/XxbNI16osdmH8pdANxiyg3G45wlyidLy3Gr RJ6TZFc7A+PLbQ25wwKnSgi5EJrHWZGpILap7w== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to l.root-servers.net for GOV/DS
	Received 367 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (367 bytes) ;; HEADER SECTION ;; id = 55745 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20210523200000 20210510190000 14631 . SjqaGxB7M4EuzOJoZBBRa8SbP3aTClssQ28CRZ7X6RbDSPw/kn5bbpKhgejbppKKb8u9bzMX6nrE g62bgNKSc+S4gzGjZDJ43j7t6BbU86Xkkbaubt7lDVTogSYIL1fe0+8hGSQm6+te37QYmIxU1iJP fsl8Sq1v84uvRAttkRVohWpg6FWVr/GmbndjB1J1PxM9mTaUVK8BNt95hFuVAHDyvdGRSXw2SJ7g 3Mvf4GUVzgMDnjIO9QGVDSoMzCmUxJ1jZLs6zkHT/XxbNI16osdmH8pdANxiyg3G45wlyidLy3Gr RJ6TZFc7A+PLbQ25wwKnSgi5EJrHWZGpILap7w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20210523200000 20210510190000 14631 . SjqaGxB7M4EuzOJoZBBRa8SbP3aTClssQ28CRZ7X6RbDSPw/kn5bbpKhgejbppKKb8u9bzMX6nrE g62bgNKSc+S4gzGjZDJ43j7t6BbU86Xkkbaubt7lDVTogSYIL1fe0+8hGSQm6+te37QYmIxU1iJP fsl8Sq1v84uvRAttkRVohWpg6FWVr/GmbndjB1J1PxM9mTaUVK8BNt95hFuVAHDyvdGRSXw2SJ7g 3Mvf4GUVzgMDnjIO9QGVDSoMzCmUxJ1jZLs6zkHT/XxbNI16osdmH8pdANxiyg3G45wlyidLy3Gr RJ6TZFc7A+PLbQ25wwKnSgi5EJrHWZGpILap7w== )`
	RRSIG=14631 and DNSKEY=14631 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to b.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (777 bytes) ;; HEADER SECTION ;; id = 35508 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbexj/PgN9RGQ1TokFnYjJ87/rMFIqE/rXjWtsmwzxteOcKIVCUJAAWg0pIZZer88omuCVrq +fAz0iBOgY48TRFWgyVFV9rm5esTGOEuCU6BTYj1Cb7zrpb/RayEw0yzVVZ0adT/AXbAsQhteTpV kgWK8K33gxq4wY70AK5KWdDCyj4v9uR6TS0mgbGdg7RzFCi8xeZoYP2PY5XOhAHFon0= ) ; Key ID = 48498 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210524190254 20210509185754 7698 gov. OgUUmguy6HS+AcNAUUxxinzf47xubcLwfLc+B/xt+kM//rKUgtxZjor/wh4xNRZa+SV0j6aJ/y/u We0JV/dbI9cueoq9xYSDzk2BPTW3WFjYKv1X2xcy+tfuPfbAUj5ZG20y5FUxnlcgHfDv+QnK0P5o e/yoeAFFma85ZozCWYGHwOoctKdaVq9dWyrljKdsl9Kwzkd3f7SA7dBXoo3ytFeM1NeEY9gRlTFp zrPRsTqksloHzamrlBu8hmRLEHGNh1l1M6JB4qn22VhJJ76k2yiT6WBvhhyUK4C/MRiAdxqMvuUM SO1OaIUaAVdZgJEg5Az/MIdD7OV1zaQBaA4mgw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbexj/PgN9RGQ1TokFnYjJ87/rMFIqE/rXjWtsmwzxteOcKIVCUJAAWg0pIZZer88omuCVrq +fAz0iBOgY48TRFWgyVFV9rm5esTGOEuCU6BTYj1Cb7zrpb/RayEw0yzVVZ0adT/AXbAsQhteTpV kgWK8K33gxq4wY70AK5KWdDCyj4v9uR6TS0mgbGdg7RzFCi8xeZoYP2PY5XOhAHFon0= ) ; Key ID = 48498`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210524190254 20210509185754 7698 gov. OgUUmguy6HS+AcNAUUxxinzf47xubcLwfLc+B/xt+kM//rKUgtxZjor/wh4xNRZa+SV0j6aJ/y/u We0JV/dbI9cueoq9xYSDzk2BPTW3WFjYKv1X2xcy+tfuPfbAUj5ZG20y5FUxnlcgHfDv+QnK0P5o e/yoeAFFma85ZozCWYGHwOoctKdaVq9dWyrljKdsl9Kwzkd3f7SA7dBXoo3ytFeM1NeEY9gRlTFp zrPRsTqksloHzamrlBu8hmRLEHGNh1l1M6JB4qn22VhJJ76k2yiT6WBvhhyUK4C/MRiAdxqMvuUM SO1OaIUaAVdZgJEg5Az/MIdD7OV1zaQBaA4mgw== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=48498 is now in the chain-of-trust
	Query to a.gov-servers.net for DONOTCALL.GOV/A
	Received 388 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (388 bytes) ;; HEADER SECTION ;; id = 36478 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DONOTCALL.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) DONOTCALL.GOV. 86400 IN NS dns2.l-secb.net. DONOTCALL.GOV. 86400 IN NS dns1.l-secb.net. DONOTCALL.GOV. 86400 IN NS dns3.l-secb.net. DONOTCALL.GOV. 3600 IN DS ( 11254 8 2 d5a51c1ddaa79857c4d84eea65c2e38750e53fe2aefef0459da872d2d6b6b8e2 ) DONOTCALL.GOV. 3600 IN DS ( 11254 8 1 2a0bc45a666b9492c66ad73142c7a33afb817562 ) DONOTCALL.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210517231008 20210510231008 48498 gov. l35o6dYP6XRsDLGu5IAINOFjXimD8FHiSH/JT48RYAniKxhJfMzdLpQ8y2ArJpNsO8o6rDpIoCAY O7LUGi5eHVsSqX+BgGcK+Bw3D7D58/QeRiizmp8yhJqg5c8AcLlpFpBrTLed9j+GMp6DiU3hduuJ Ohj6EoIEBHHJMiFPLg7C1w1o0VqV3wDICRYyHcZWEDZbQ8M5yyDJJe+m/vBx+g== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.gov-servers.net for DONOTCALL.GOV/DNSKEY
	Received 388 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (388 bytes) ;; HEADER SECTION ;; id = 35195 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DONOTCALL.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) DONOTCALL.GOV. 86400 IN NS dns2.l-secb.net. DONOTCALL.GOV. 86400 IN NS dns1.l-secb.net. DONOTCALL.GOV. 86400 IN NS dns3.l-secb.net. DONOTCALL.GOV. 3600 IN DS ( 11254 8 2 d5a51c1ddaa79857c4d84eea65c2e38750e53fe2aefef0459da872d2d6b6b8e2 ) DONOTCALL.GOV. 3600 IN DS ( 11254 8 1 2a0bc45a666b9492c66ad73142c7a33afb817562 ) DONOTCALL.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210517231008 20210510231008 48498 gov. l35o6dYP6XRsDLGu5IAINOFjXimD8FHiSH/JT48RYAniKxhJfMzdLpQ8y2ArJpNsO8o6rDpIoCAY O7LUGi5eHVsSqX+BgGcK+Bw3D7D58/QeRiizmp8yhJqg5c8AcLlpFpBrTLed9j+GMp6DiU3hduuJ Ohj6EoIEBHHJMiFPLg7C1w1o0VqV3wDICRYyHcZWEDZbQ8M5yyDJJe+m/vBx+g== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone DONOTCALL.GOV

DONOTCALL.GOV

	Checking DS between GOV and DONOTCALL.GOV
	Query to b.gov-servers.net for DONOTCALL.GOV/DS
	Received 321 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (321 bytes) ;; HEADER SECTION ;; id = 63608 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DONOTCALL.GOV. IN DS ;; ANSWER SECTION (3 records) DONOTCALL.GOV. 3600 IN DS ( 11254 8 2 d5a51c1ddaa79857c4d84eea65c2e38750e53fe2aefef0459da872d2d6b6b8e2 ) DONOTCALL.GOV. 3600 IN DS ( 11254 8 1 2a0bc45a666b9492c66ad73142c7a33afb817562 ) DONOTCALL.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210517231008 20210510231008 48498 gov. l35o6dYP6XRsDLGu5IAINOFjXimD8FHiSH/JT48RYAniKxhJfMzdLpQ8y2ArJpNsO8o6rDpIoCAY O7LUGi5eHVsSqX+BgGcK+Bw3D7D58/QeRiizmp8yhJqg5c8AcLlpFpBrTLed9j+GMp6DiU3hduuJ Ohj6EoIEBHHJMiFPLg7C1w1o0VqV3wDICRYyHcZWEDZbQ8M5yyDJJe+m/vBx+g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for DONOTCALL.GOV in the GOV zone
	DS=11254/SHA-256 has algorithm RSASHA256
	DS=11254/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`DONOTCALL.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210517231008 20210510231008 48498 gov. l35o6dYP6XRsDLGu5IAINOFjXimD8FHiSH/JT48RYAniKxhJfMzdLpQ8y2ArJpNsO8o6rDpIoCAY O7LUGi5eHVsSqX+BgGcK+Bw3D7D58/QeRiizmp8yhJqg5c8AcLlpFpBrTLed9j+GMp6DiU3hduuJ Ohj6EoIEBHHJMiFPLg7C1w1o0VqV3wDICRYyHcZWEDZbQ8M5yyDJJe+m/vBx+g== )`
	RRSIG=48498 and DNSKEY=48498 verifies the DS RRset
	DS=11254/SHA-256 is now in the chain-of-trust
	`DONOTCALL.GOV. 3600 IN DS ( 11254 8 2 d5a51c1ddaa79857c4d84eea65c2e38750e53fe2aefef0459da872d2d6b6b8e2 )`
	`DONOTCALL.GOV. 3600 IN DS ( 11254 8 1 2a0bc45a666b9492c66ad73142c7a33afb817562 )`
	Query to dns2.l-secb.net for DONOTCALL.GOV/DNSKEY
	Received 1261 bytes from 205.130.212.37
	;; Answer received from 205.130.212.37 (1261 bytes) ;; HEADER SECTION ;; id = 50890 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DONOTCALL.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) DONOTCALL.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAdgL5yvwWI9nAFlrUEzqS8oTYISBtoUfFiDkDJPxXilL2vlETRfeomdrhQ3D/x72fOI2AAcw fKW37V5HbU3pGU+DyfMyLup0tYD6W5BxHPEMwJ9VmNXGze85JGyEWtXFQReaElkEmDHvyBSNLyQJ 2jMxwncXuaCgpen72pQtemfZ ) ; Key ID = 34533 DONOTCALL.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAeaXPzzMxbc7XAeT12NifIkcfryYtBeoDJxo/RZh66U6hJZ7L3g2X2zIF+C5KU1V5BRHZK85 XTgCrAAu1X/XGfEPmUnPQW3VH2c0fHGXEnFuwSehmEHTmLhfH8p4rJF06GafIJbUYM2DWESx2F3Q TtGGmiWsGObVZn7GLr4yTwir ) ; Key ID = 64593 DONOTCALL.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAeZ/a7DlOVDpcSdB6MBSmzlpSGxHfEphxCMm5bXEHSsx6kmKyVCkQvWBRU1mHD3R5v4TGB65 iXS3dzKbImfiS6Wm1BRDWdoFFz3QHK8/1sCLBbILVc8uynQ0XdJD3ylUqqPUEJKGFMqZmBGeyils 35dtSVO+eTlKl7o/UH3rgIEf69M+mT6UzytCbwR/OlsmRiO7cLrUYfcH4dTZISRh/k9pHN/ZiJQ4 rIH7SzSCzD20qhSR9NQIkIZNvPi7TrMFpvedT7A6tN67N/TpBJ2eoveFmJITsxO6yKQHql6PAdWF n38qm0L7rFD/SN8SfGhF3ny55rW8UnSjQagc5dbZZ/8= ) ; Key ID = 11254 DONOTCALL.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210516152541 20210509152541 34533 donotcall.gov. FN8h8bYNht6/X/pdf+XphgTYmBzXccOgeumLZSondx3fMNBH9RbPFfSj3RMRqCOIw2TTIt7uvqo9 vI0hj3EbxRPPmKaI3rA2jPAkEhMjioDJ+2dMf4+bzaDPfbV6MtgyUyRf2IE97KSeyfleuKjgT8E+ 9b7kNMW7IT4+EceJFrU= ) DONOTCALL.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210516152541 20210509152541 64593 donotcall.gov. I6dRjK7mDEcLGUusSxqMdLYhDHfVrix4q3jAkz/JRRtxmr9bJO8jRDhDjiuF8Em2D1orfK3BmCpz S427v7S40RKREO7hGN8nL50Tpd060Iv4MVilUkNZOagh5Rn7FRt61Z2m7igJyKcezW+WtTv3aUA0 wWrzJVMpr1tUxxDDok0= ) DONOTCALL.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210516152541 20210509152541 11254 donotcall.gov. Nl6Zdk7MSbegg9XcWDmgxhCQ9ZCrdTntgTydzJaBRcqM9r1GD4VkRFhQWaf6RoQ/Exo4bMbRlrYv Bhspn+N2/yJ7eECavPsM5fw99pN0ym5KFUf5LGeHN5U4oMjhIXJlvncQO6zdFiMzEnmocGyFdkfG B5CDfYB7jgXiSEtsKpqwifR/8m7ftRq+c4zHBg/O464pJXx8VB7SUT+x+5XtxI+ARAEmSecl9Rbg uLK58RmWIWc2MTaLPQ59gn4r5R1KOlSzq8HlEvgVgtWQ485rmmumoqK1mYTUuS+sOmL9ywfmkoNG eqwZFtRhlRdlk9yjInb1UDH3DMGZGwdNCwYxpQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for DONOTCALL.GOV
	`DONOTCALL.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAdgL5yvwWI9nAFlrUEzqS8oTYISBtoUfFiDkDJPxXilL2vlETRfeomdrhQ3D/x72fOI2AAcw fKW37V5HbU3pGU+DyfMyLup0tYD6W5BxHPEMwJ9VmNXGze85JGyEWtXFQReaElkEmDHvyBSNLyQJ 2jMxwncXuaCgpen72pQtemfZ ) ; Key ID = 34533`
	`DONOTCALL.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAeaXPzzMxbc7XAeT12NifIkcfryYtBeoDJxo/RZh66U6hJZ7L3g2X2zIF+C5KU1V5BRHZK85 XTgCrAAu1X/XGfEPmUnPQW3VH2c0fHGXEnFuwSehmEHTmLhfH8p4rJF06GafIJbUYM2DWESx2F3Q TtGGmiWsGObVZn7GLr4yTwir ) ; Key ID = 64593`
	`DONOTCALL.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAeZ/a7DlOVDpcSdB6MBSmzlpSGxHfEphxCMm5bXEHSsx6kmKyVCkQvWBRU1mHD3R5v4TGB65 iXS3dzKbImfiS6Wm1BRDWdoFFz3QHK8/1sCLBbILVc8uynQ0XdJD3ylUqqPUEJKGFMqZmBGeyils 35dtSVO+eTlKl7o/UH3rgIEf69M+mT6UzytCbwR/OlsmRiO7cLrUYfcH4dTZISRh/k9pHN/ZiJQ4 rIH7SzSCzD20qhSR9NQIkIZNvPi7TrMFpvedT7A6tN67N/TpBJ2eoveFmJITsxO6yKQHql6PAdWF n38qm0L7rFD/SN8SfGhF3ny55rW8UnSjQagc5dbZZ/8= ) ; Key ID = 11254`
	DNSKEY=11254/SEP is now in the chain-of-trust
	DS=11254/SHA-256 verifies DNSKEY=11254/SEP
	DS=11254/SHA-1 verifies DNSKEY=11254/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`DONOTCALL.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210516152541 20210509152541 34533 donotcall.gov. FN8h8bYNht6/X/pdf+XphgTYmBzXccOgeumLZSondx3fMNBH9RbPFfSj3RMRqCOIw2TTIt7uvqo9 vI0hj3EbxRPPmKaI3rA2jPAkEhMjioDJ+2dMf4+bzaDPfbV6MtgyUyRf2IE97KSeyfleuKjgT8E+ 9b7kNMW7IT4+EceJFrU= )`
	`DONOTCALL.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210516152541 20210509152541 64593 donotcall.gov. I6dRjK7mDEcLGUusSxqMdLYhDHfVrix4q3jAkz/JRRtxmr9bJO8jRDhDjiuF8Em2D1orfK3BmCpz S427v7S40RKREO7hGN8nL50Tpd060Iv4MVilUkNZOagh5Rn7FRt61Z2m7igJyKcezW+WtTv3aUA0 wWrzJVMpr1tUxxDDok0= )`
	`DONOTCALL.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210516152541 20210509152541 11254 donotcall.gov. Nl6Zdk7MSbegg9XcWDmgxhCQ9ZCrdTntgTydzJaBRcqM9r1GD4VkRFhQWaf6RoQ/Exo4bMbRlrYv Bhspn+N2/yJ7eECavPsM5fw99pN0ym5KFUf5LGeHN5U4oMjhIXJlvncQO6zdFiMzEnmocGyFdkfG B5CDfYB7jgXiSEtsKpqwifR/8m7ftRq+c4zHBg/O464pJXx8VB7SUT+x+5XtxI+ARAEmSecl9Rbg uLK58RmWIWc2MTaLPQ59gn4r5R1KOlSzq8HlEvgVgtWQ485rmmumoqK1mYTUuS+sOmL9ywfmkoNG eqwZFtRhlRdlk9yjInb1UDH3DMGZGwdNCwYxpQ== )`
	RRSIG=34533 and DNSKEY=34533 verifies the DNSKEY RRset
	RRSIG=64593 and DNSKEY=64593 verifies the DNSKEY RRset
	RRSIG=11254 and DNSKEY=11254/SEP verifies the DNSKEY RRset
	DNSKEY=34533 is now in the chain-of-trust
	DNSKEY=64593 is now in the chain-of-trust
	Query to dns3.l-secb.net for DONOTCALL.GOV/A
	Received 404 bytes from 35.163.67.210
	;; Answer received from 35.163.67.210 (404 bytes) ;; HEADER SECTION ;; id = 33251 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DONOTCALL.GOV. IN A ;; ANSWER SECTION (3 records) DONOTCALL.GOV. 30 IN A 52.23.29.251 DONOTCALL.GOV. 30 IN RRSIG ( A 8 2 30 20210515152717 20210508152717 34533 donotcall.gov. OG5nij6/Mwvgj/81+2YKXcwC87x6cf27QgV5RKo2N07L1rAeKJ7Tyl6k2UrwmoxIY8LhS3hvsgYd JBy4kKel06l21p1AdcS65G5LdJc/n6cvNRVHnSff66Q82a6FFfnFb8KJlXx4BFZKHkjrZK1tmGty X0u1MvdJSmz9cJQW6tA= ) DONOTCALL.GOV. 30 IN RRSIG ( A 8 2 30 20210516152514 20210509152514 64593 donotcall.gov. JTzKSwWlnKJo4orcAvVP0GKZLa8oZ+N+qZjqmTvVe6tbNO4sAypgyhrcBoz4LuFP5GxMOICXlcMJ q2oE4bT7TczIPQFsXMjW5FvnHXtsvOYOsRFotFL6g4/JcyzUBXzlBlp7fxZiWqtxBcivG4kiZ4vX 5XUrH9HWQTBIA+zB5us= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns3.l-secb.net is authoritative for DONOTCALL.GOV
	Found RRSIG signed by donotcall.gov zone
	Query to dns2.l-secb.net for DONOTCALL.GOV/SOA
	Received 980 bytes from 205.130.212.37
	;; Answer received from 205.130.212.37 (980 bytes) ;; HEADER SECTION ;; id = 10601 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DONOTCALL.GOV. IN SOA ;; ANSWER SECTION (3 records) DONOTCALL.GOV. 900 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2021032201 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) DONOTCALL.GOV. 900 IN RRSIG ( SOA 8 2 900 20210515152557 20210508152557 34533 donotcall.gov. bqcN+MO+Sm621DJI/VPF331DNXxRXTlldR4xzT1HgNb2kvawcyaTsZvSBWUypeODzA/XZU3Q/oz6 oQmtfe7EO6mB/KUVphCbMmoDCyB8Kfj56eqjQFdfTZ3d6e/6x12E4RxNbapudmovRm3NzLARzQ/h /Eqh7ZOU7LvtZYpdXfw= ) DONOTCALL.GOV. 900 IN RRSIG ( SOA 8 2 900 20210516152540 20210509152540 64593 donotcall.gov. Tv9W0/aT7kV+fZSJIq4TPR19cwsQhT1xsbisUGjpceGb2JXeryFeyhUIm+hW64ZlUAk2bO/eDCCk 4weYdipZkXKs8WsbIMgsbx1zmMNI7e7VWAPHFuxDFEa0CKu79yBG/TUy7BXHw40kOsQt07+k4Wpe 23b5WgZpIM0d5FVzZ68= ) ;; AUTHORITY SECTION (5 records) DONOTCALL.GOV. 900 IN NS dns2.l-secb.net. DONOTCALL.GOV. 900 IN NS dns3.l-secb.net. DONOTCALL.GOV. 900 IN NS dns1.l-secb.net. DONOTCALL.GOV. 900 IN RRSIG ( NS 8 2 900 20210515152733 20210508152733 34533 donotcall.gov. BXynfAcWLBeurH6a7SWkAKv5DdfUQLLhsxkDuaoylSmANWVkm+xq8xTYgeTeKeh8UhWxr895xabS HvUIM0yhrqSZovWmB4nq/rqOZeLX3R/dj5qxKHYkAyEOh2MjX+Nr499NsasPLZu1evJHfykDxiAa hKUaBnebegLkdCBBizQ= ) DONOTCALL.GOV. 900 IN RRSIG ( NS 8 2 900 20210516152537 20210509152537 64593 donotcall.gov. zr83+iJtJ8Xdz7MwoNQ7+70qFO6NAEAiY1Pw6/dnnPAaFflYy/SuJD+64HcHVgIjxnulkSJAff/5 /EoON3YdTNULwBYbN1awMgqAmwLqtuEZdk6nywrj3rWYi76IfUUXLho8iN6fqIdrKpyJOACZd87B C6tPpBK+BOt6ss85dzg= ) ;; ADDITIONAL SECTION (7 records) dns1.l-secb.net. 43200 IN A 198.77.70.37 dns2.l-secb.net. 43200 IN A 205.130.212.37 dns3.l-secb.net. 43200 IN A 35.163.67.210 dns1.l-secb.net. 43200 IN AAAA 2001:1900:2268:770:198:77:70:37 dns2.l-secb.net. 43200 IN AAAA 2001:1900:2268:512:205:130:212:37 dns3.l-secb.net. 43200 IN AAAA 2600:1f14:a2e:4b00:35:163:67:210 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns1.l-secb.net for DONOTCALL.GOV/SOA
	Received 980 bytes from 198.77.70.37
	;; Answer received from 198.77.70.37 (980 bytes) ;; HEADER SECTION ;; id = 13205 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DONOTCALL.GOV. IN SOA ;; ANSWER SECTION (3 records) DONOTCALL.GOV. 900 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2021032201 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) DONOTCALL.GOV. 900 IN RRSIG ( SOA 8 2 900 20210515152559 20210508152559 34533 donotcall.gov. zlw6BXwG2n5W14aA78NjOkkkD4QaSfek+j65jPU7YCuTWYhNRIii3qSrQh9DHZq9IayI1ZDD2Cbc 9jaCbux+2HaizjKF1jwpQ4caWMECOzvKRk5d5hDrd/FT4BJ5MX2W7a7LXm4wCJkp19hk4v6xtkrN 8izIx2G1UnukqvO2FUU= ) DONOTCALL.GOV. 900 IN RRSIG ( SOA 8 2 900 20210516152513 20210509152513 64593 donotcall.gov. GsZBg6QPgJMKFSzjX1gPCNjz7wn+UjSlAGgGssoyH5yuyljduGG9dIdtTEj2a/dHcOE/pL0k22lF Mj9gKOvzadGeXqtwvXhoyfcptiwM0eRGiwqZasC9Oe4y0jF+27VS1skeeGGVMVhGY8Q/Vof9QO0r uIMqluQrl7agyPod3K4= ) ;; AUTHORITY SECTION (5 records) DONOTCALL.GOV. 900 IN NS dns1.l-secb.net. DONOTCALL.GOV. 900 IN NS dns3.l-secb.net. DONOTCALL.GOV. 900 IN NS dns2.l-secb.net. DONOTCALL.GOV. 900 IN RRSIG ( NS 8 2 900 20210515152621 20210508152621 34533 donotcall.gov. sITG9xnu3AwTelzcFWLcWs9GzTDHD4oqCGNhZWb0pHiVJyXqRj7nU0lYkGdfWQTOnpolaAKYbZbf fXGEd86v92UBUISr0SSHQJQgJKvcAhhIhXip0FO0410nnxJNeWm8gg3lsqYZ1C3rYdKU4Yc8ZPvz T1z+P8qJSvcpkp/BWuc= ) DONOTCALL.GOV. 900 IN RRSIG ( NS 8 2 900 20210516152509 20210509152509 64593 donotcall.gov. dXsTPA36VLnCp1SYsQVPsOf9eu7RqQym2GV/L83gOXns6b3aSJC7fEwpQ6y1IELJqQV/cwiK3ZXR TXljIOrtbDMO6QVXEzhydh866pepLiEhHxeJLjTN4JYtK4Z1DOlArbdt97z1Mpop99NC+bPydFM4 Al7BbSfeEbVW4/DbCmk= ) ;; ADDITIONAL SECTION (7 records) dns1.l-secb.net. 43200 IN A 198.77.70.37 dns2.l-secb.net. 43200 IN A 205.130.212.37 dns3.l-secb.net. 43200 IN A 35.163.67.210 dns1.l-secb.net. 43200 IN AAAA 2001:1900:2268:770:198:77:70:37 dns2.l-secb.net. 43200 IN AAAA 2001:1900:2268:512:205:130:212:37 dns3.l-secb.net. 43200 IN AAAA 2600:1f14:a2e:4b00:35:163:67:210 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns3.l-secb.net for DONOTCALL.GOV/A
	Received 404 bytes from 35.163.67.210
	;; Answer received from 35.163.67.210 (404 bytes) ;; HEADER SECTION ;; id = 10294 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DONOTCALL.GOV. IN A ;; ANSWER SECTION (3 records) DONOTCALL.GOV. 30 IN A 52.23.29.251 DONOTCALL.GOV. 30 IN RRSIG ( A 8 2 30 20210515152617 20210508152617 34533 donotcall.gov. hSmsHPMBo0ayolE8kAN7OC5nbWpbSCsHyGN81uh+lhhcDLfCPHJtgBqpTrfLKfS/KuzRNsAYJqyx /2m4yUHSMpWI69byvqPBsW4pUFxZtHvxt5bylnadjaBEvaSOnffdv36GjcNUV/S+tibKn6JVSHS8 VoE9BZyDSmuuo6krHUA= ) DONOTCALL.GOV. 30 IN RRSIG ( A 8 2 30 20210516152538 20210509152538 64593 donotcall.gov. SqmjYPNziO9m4eSkc3CtwcmWG4UI9BtQlBHLi6wi3hno7DTLVPVBA/yrhHPQeHnNIZyTm4pilX9x bzbY/jkN7WBtZbwx1j415ohSphcXHCwODDHwoHjvrLlofGfvCwXeFOMF4KuDtzsLgVab0oBoeJjm 4myBw9r60xE7P+ozim4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	DONOTCALL.GOV A RR has value 52.23.29.251
	Found 2 RRSIGs over A RRset
	`DONOTCALL.GOV. 30 IN RRSIG ( A 8 2 30 20210515152617 20210508152617 34533 donotcall.gov. hSmsHPMBo0ayolE8kAN7OC5nbWpbSCsHyGN81uh+lhhcDLfCPHJtgBqpTrfLKfS/KuzRNsAYJqyx /2m4yUHSMpWI69byvqPBsW4pUFxZtHvxt5bylnadjaBEvaSOnffdv36GjcNUV/S+tibKn6JVSHS8 VoE9BZyDSmuuo6krHUA= )`
	`DONOTCALL.GOV. 30 IN RRSIG ( A 8 2 30 20210516152538 20210509152538 64593 donotcall.gov. SqmjYPNziO9m4eSkc3CtwcmWG4UI9BtQlBHLi6wi3hno7DTLVPVBA/yrhHPQeHnNIZyTm4pilX9x bzbY/jkN7WBtZbwx1j415ohSphcXHCwODDHwoHjvrLlofGfvCwXeFOMF4KuDtzsLgVab0oBoeJjm 4myBw9r60xE7P+ozim4= )`
	RRSIG=34533 and DNSKEY=34533 verifies the A RRset
	RRSIG=64593 and DNSKEY=64593 verifies the A RRset

DONOTCALL.GOV

	Query to dns1.l-secb.net for DONOTCALL.GOV/A
	Received 404 bytes from 198.77.70.37
	;; Answer received from 198.77.70.37 (404 bytes) ;; HEADER SECTION ;; id = 26675 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DONOTCALL.GOV. IN A ;; ANSWER SECTION (3 records) DONOTCALL.GOV. 30 IN A 52.23.29.251 DONOTCALL.GOV. 30 IN RRSIG ( A 8 2 30 20210515152606 20210508152606 34533 donotcall.gov. h/vfmI3t+fFzCCq9JllBM7mPLiZ14/w5/V8TD+TPpCbqpTIGm08zX3zUhNFDdtksIfAlua0otoZa 6roN00YEjTVo4fRf3XOcoMzQdJn5o9kSrroBvIT9FvRTYGG4QbudwsgxlSqmDRB/2Wdmf1/HhGpg Dm+JwEpCrEcuB8xZC2g= ) DONOTCALL.GOV. 30 IN RRSIG ( A 8 2 30 20210516152525 20210509152525 64593 donotcall.gov. QLpvuQmOPPQtBaoWYCxM7zvZaH2j6ViDLq6V+vMfsHZ+vJNHI8EH93ULFWre9pI0bwagv0cx+Vpn cXTZor+jFZ1mNil84O3Z4q5jbY+MeswQuGvy7PQalshb1I7n3S1kRSC7Co47yeUn9V0OAHs60urd hYWOZ/4KOVKAq8sqT/c= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns1.l-secb.net is authoritative for DONOTCALL.GOV
	Found RRSIG signed by donotcall.gov zone
	Query to dns1.l-secb.net for DONOTCALL.GOV/A
	Received 404 bytes from 198.77.70.37
	;; Answer received from 198.77.70.37 (404 bytes) ;; HEADER SECTION ;; id = 59848 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DONOTCALL.GOV. IN A ;; ANSWER SECTION (3 records) DONOTCALL.GOV. 30 IN A 52.23.29.251 DONOTCALL.GOV. 30 IN RRSIG ( A 8 2 30 20210515152557 20210508152557 34533 donotcall.gov. ZbKpnnaQshswQ3Ajx1NZ6N+4FJkPgUWtIUrQUizfXNJTBDL0YTea7vKarOVFIgaWW+aTM9BF8/qW 3LJldZa5GUKe3mkc9c+GL935EKhgOVRBujbXyRKIHH8hMKKncb1xJKWOlvvxo48PD5nTAGQq/PP4 mCHklzacExEuySPXAXY= ) DONOTCALL.GOV. 30 IN RRSIG ( A 8 2 30 20210516152535 20210509152535 64593 donotcall.gov. hqSspUGHo7RNEJUkgCWJgF9wttRjWcSsIEm1IcV+V5ASXSmP8GwHZsRUbCOntfppbwR2jlf7q7E1 dmA/M26Ij9rviygtsM8RnRI8GQHgRkNzegO7gUzF/h8kNaWb/pvZZi8S6wbhkYczH+h/S51W2CT6 NDMgEAyeLu6ycbGzpGY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	DONOTCALL.GOV A RR has value 52.23.29.251
	Found 2 RRSIGs over A RRset
	`DONOTCALL.GOV. 30 IN RRSIG ( A 8 2 30 20210515152557 20210508152557 34533 donotcall.gov. ZbKpnnaQshswQ3Ajx1NZ6N+4FJkPgUWtIUrQUizfXNJTBDL0YTea7vKarOVFIgaWW+aTM9BF8/qW 3LJldZa5GUKe3mkc9c+GL935EKhgOVRBujbXyRKIHH8hMKKncb1xJKWOlvvxo48PD5nTAGQq/PP4 mCHklzacExEuySPXAXY= )`
	`DONOTCALL.GOV. 30 IN RRSIG ( A 8 2 30 20210516152535 20210509152535 64593 donotcall.gov. hqSspUGHo7RNEJUkgCWJgF9wttRjWcSsIEm1IcV+V5ASXSmP8GwHZsRUbCOntfppbwR2jlf7q7E1 dmA/M26Ij9rviygtsM8RnRI8GQHgRkNzegO7gUzF/h8kNaWb/pvZZi8S6wbhkYczH+h/S51W2CT6 NDMgEAyeLu6ycbGzpGY= )`
	RRSIG=34533 and DNSKEY=34533 verifies the A RRset
	RRSIG=64593 and DNSKEY=64593 verifies the A RRset

DONOTCALL.GOV

	Query to dns2.l-secb.net for DONOTCALL.GOV/A
	Received 404 bytes from 205.130.212.37
	;; Answer received from 205.130.212.37 (404 bytes) ;; HEADER SECTION ;; id = 13660 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DONOTCALL.GOV. IN A ;; ANSWER SECTION (3 records) DONOTCALL.GOV. 30 IN A 52.23.29.251 DONOTCALL.GOV. 30 IN RRSIG ( A 8 2 30 20210515152559 20210508152559 34533 donotcall.gov. tSYZOe0fAKiRjWJJbZoVQT+dPPZICnHQ1GQEewRznrpb9JGkHZv5d/84SkbP2AFBhgxurD38YK/9 jBrLpU+OzD4eOFEr/Sf6z1U+Yn4nZ3+eQhn7v5Q0vNp37OWwO6Adf7Kgwi1bA2mDiyWoSMvcGN52 8M8vUlmXYe40eCaz3fU= ) DONOTCALL.GOV. 30 IN RRSIG ( A 8 2 30 20210516152521 20210509152521 64593 donotcall.gov. wZZvwFDrrmXhQRK1R60c7o912vva5zcLLngBmFQbbxBcv8bJ4gBKYLrWeB/7V/51uOAI7QfXAbce h+doKBg4+OCPCiQmxxdVtwTqTL/N0ucrcSo8sk5aMEBRoB14AQNLAP1zMe85UVW+4VfI3A8rq0Jq xhIoBYkp/4HKAEdrBPU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns2.l-secb.net is authoritative for DONOTCALL.GOV
	Found RRSIG signed by donotcall.gov zone
	Query to dns2.l-secb.net for DONOTCALL.GOV/A
	Received 404 bytes from 205.130.212.37
	;; Answer received from 205.130.212.37 (404 bytes) ;; HEADER SECTION ;; id = 43513 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DONOTCALL.GOV. IN A ;; ANSWER SECTION (3 records) DONOTCALL.GOV. 30 IN A 52.23.29.251 DONOTCALL.GOV. 30 IN RRSIG ( A 8 2 30 20210515152610 20210508152610 34533 donotcall.gov. uDBr1BERqa1EL0pfopvlKP+DJk2FRmPauY0BXYHDFO/5ia0pBnRtiTISNp3wdNAo8Zp/9eivL66e dnlha/fAYmGO2kPXtMQ7aqptpFkZ2Z1sD3lYQbkeKR36WQwzX5KoG2j+UNt/tRZP8LTpJS2zGs+I oELaJFxr8TvP0MUoWwQ= ) DONOTCALL.GOV. 30 IN RRSIG ( A 8 2 30 20210516152538 20210509152538 64593 donotcall.gov. SqmjYPNziO9m4eSkc3CtwcmWG4UI9BtQlBHLi6wi3hno7DTLVPVBA/yrhHPQeHnNIZyTm4pilX9x bzbY/jkN7WBtZbwx1j415ohSphcXHCwODDHwoHjvrLlofGfvCwXeFOMF4KuDtzsLgVab0oBoeJjm 4myBw9r60xE7P+ozim4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	DONOTCALL.GOV A RR has value 52.23.29.251
	Found 2 RRSIGs over A RRset
	`DONOTCALL.GOV. 30 IN RRSIG ( A 8 2 30 20210515152610 20210508152610 34533 donotcall.gov. uDBr1BERqa1EL0pfopvlKP+DJk2FRmPauY0BXYHDFO/5ia0pBnRtiTISNp3wdNAo8Zp/9eivL66e dnlha/fAYmGO2kPXtMQ7aqptpFkZ2Z1sD3lYQbkeKR36WQwzX5KoG2j+UNt/tRZP8LTpJS2zGs+I oELaJFxr8TvP0MUoWwQ= )`
	`DONOTCALL.GOV. 30 IN RRSIG ( A 8 2 30 20210516152538 20210509152538 64593 donotcall.gov. SqmjYPNziO9m4eSkc3CtwcmWG4UI9BtQlBHLi6wi3hno7DTLVPVBA/yrhHPQeHnNIZyTm4pilX9x bzbY/jkN7WBtZbwx1j415ohSphcXHCwODDHwoHjvrLlofGfvCwXeFOMF4KuDtzsLgVab0oBoeJjm 4myBw9r60xE7P+ozim4= )`
	RRSIG=34533 and DNSKEY=34533 verifies the A RRset
	RRSIG=64593 and DNSKEY=64593 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test DONOTCALL.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: