DNSSEC Analyzer - DONOTCALL.GOV

Domain Name:

Time: 2020-01-24 03:08:41 UTC, NTP stratum 4

Analyzing DNSSEC problems for DONOTCALL.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to b.root-servers.net for ./DNSKEY
	Error querying b.root-servers.net/2001:500:200:0:0:0:0:b for ./DNSKEY: 'IPv6 transport disabled'
	Received 864 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (864 bytes) ;; HEADER SECTION ;; id = 9637 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20200211000000 20200121000000 20326 . UaaPoqlBlRixcabCWMJ9jVvevx+Sp8W5rMt06Tozfg/gefIspEKxw4fx22mRaAQZzdHq9Lt+Who4 YpUX95CDrgDYtYJ9NOyICRNlWnY9FNqOW0AreCmEK0qqS52xYb72hJYpFrCILGLD6jl4Ar0LFi29 iXnVLQ99+SvD8PPHHkEiIu1WhlES7taEavtbKijyjLYXwagQxSQCzMgkbWN1+S78kJGZEMaBODTZ uiiGIw5Jy3OPAQxHQyLTElR5ZuEg59/sSnTCEfmoXcxG9/g6O1qWs6d9hDVadKfXhHr8OTXGoB25 Ttp3CyZGdSqRkCwwJpWJ9SlaL+khcJoLFqwm8w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20200211000000 20200121000000 20326 . UaaPoqlBlRixcabCWMJ9jVvevx+Sp8W5rMt06Tozfg/gefIspEKxw4fx22mRaAQZzdHq9Lt+Who4 YpUX95CDrgDYtYJ9NOyICRNlWnY9FNqOW0AreCmEK0qqS52xYb72hJYpFrCILGLD6jl4Ar0LFi29 iXnVLQ99+SvD8PPHHkEiIu1WhlES7taEavtbKijyjLYXwagQxSQCzMgkbWN1+S78kJGZEMaBODTZ uiiGIw5Jy3OPAQxHQyLTElR5ZuEg59/sSnTCEfmoXcxG9/g6O1qWs6d9hDVadKfXhHr8OTXGoB25 Ttp3CyZGdSqRkCwwJpWJ9SlaL+khcJoLFqwm8w== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=33853 is now in the chain-of-trust
	Query to a.root-servers.net for DONOTCALL.GOV/A
	Received 668 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (668 bytes) ;; HEADER SECTION ;; id = 22284 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DONOTCALL.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20200205210000 20200123200000 33853 . E8bXIRY/E4muIOIyh32DOOnDAO/l7iJdkhdafopb1FB9x6ZhiTe5rp9HMhfIVyBFjE+AiB+d/vqw 6BnkhYEYMz077bogygAJKFTveIeGxB0246XW0HKavT92Tzy2W6vKt5YD8n08a0gp0nOdltZ9mE2c CRNCtUexhIkoY6BY3fiKBmO4D9UmHmm+BSjjv2+ewq46b3PhQKXCRQU3iA2SYrns3qKjDn2BJwh+ UVx4JfB8fFrw2BZLZZl0UZQg3s6TBw004Kz5w+1b8hNyNAZXrC1o1EgMu93nIlsXm6vqK/05UwCw yS30q091C2gSSqh9DROwF/iXxaLt9oTj41vjhg== ) ;; ADDITIONAL SECTION (9 records) b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.root-servers.net for GOV/DNSKEY
	Received 661 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (661 bytes) ;; HEADER SECTION ;; id = 49009 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20200205210000 20200123200000 33853 . E8bXIRY/E4muIOIyh32DOOnDAO/l7iJdkhdafopb1FB9x6ZhiTe5rp9HMhfIVyBFjE+AiB+d/vqw 6BnkhYEYMz077bogygAJKFTveIeGxB0246XW0HKavT92Tzy2W6vKt5YD8n08a0gp0nOdltZ9mE2c CRNCtUexhIkoY6BY3fiKBmO4D9UmHmm+BSjjv2+ewq46b3PhQKXCRQU3iA2SYrns3qKjDn2BJwh+ UVx4JfB8fFrw2BZLZZl0UZQg3s6TBw004Kz5w+1b8hNyNAZXrC1o1EgMu93nIlsXm6vqK/05UwCw yS30q091C2gSSqh9DROwF/iXxaLt9oTj41vjhg== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to d.root-servers.net for GOV/DS
	Error querying d.root-servers.net/2001:500:2d:0:0:0:0:d for GOV/DS: 'IPv6 transport disabled'
	Received 403 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (403 bytes) ;; HEADER SECTION ;; id = 15983 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20200205210000 20200123200000 33853 . E8bXIRY/E4muIOIyh32DOOnDAO/l7iJdkhdafopb1FB9x6ZhiTe5rp9HMhfIVyBFjE+AiB+d/vqw 6BnkhYEYMz077bogygAJKFTveIeGxB0246XW0HKavT92Tzy2W6vKt5YD8n08a0gp0nOdltZ9mE2c CRNCtUexhIkoY6BY3fiKBmO4D9UmHmm+BSjjv2+ewq46b3PhQKXCRQU3iA2SYrns3qKjDn2BJwh+ UVx4JfB8fFrw2BZLZZl0UZQg3s6TBw004Kz5w+1b8hNyNAZXrC1o1EgMu93nIlsXm6vqK/05UwCw yS30q091C2gSSqh9DROwF/iXxaLt9oTj41vjhg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20200205210000 20200123200000 33853 . E8bXIRY/E4muIOIyh32DOOnDAO/l7iJdkhdafopb1FB9x6ZhiTe5rp9HMhfIVyBFjE+AiB+d/vqw 6BnkhYEYMz077bogygAJKFTveIeGxB0246XW0HKavT92Tzy2W6vKt5YD8n08a0gp0nOdltZ9mE2c CRNCtUexhIkoY6BY3fiKBmO4D9UmHmm+BSjjv2+ewq46b3PhQKXCRQU3iA2SYrns3qKjDn2BJwh+ UVx4JfB8fFrw2BZLZZl0UZQg3s6TBw004Kz5w+1b8hNyNAZXrC1o1EgMu93nIlsXm6vqK/05UwCw yS30q091C2gSSqh9DROwF/iXxaLt9oTj41vjhg== )`
	RRSIG=33853 and DNSKEY=33853 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to c.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (777 bytes) ;; HEADER SECTION ;; id = 3913 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAdccuiuxqTxvRcMVh4o9DCfREPNTe3hGEklbdV+L99lKySyIzskGLJ6XDBrWgBeY7ZRSOWGQ 2eHdQLN61fRyqWpVLpNzqaIz/UmMP74VPBCz4QXRDkG4hDO3uifCDVs8Jex4TrYT+hGNYmprbsrq dVQCgeeHc7UMKI/SjusQ4uTKgJ9CWt02/AgK+zKFi3LCBVDGnUwE2kUOL1b0MWfT0ks= ) ; Key ID = 36558 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200204200254 20200120195754 7698 gov. AW2ehlTHCkvsoKYTELKLWDsRb5hmUce7lXmZl5v8iXW1lcvUgYHjl4mKrTmw0o/ZQunLH8tjhL2a nbCy8GymuXffQUXpsWfCtMDd1j2lQBL2ECPw418yOOCqTnoRI6DJvvArASkqLeXHX2bAu4/351ug E/d63O3H30850u+Tgakg/vlTpsNCMxNeJExRDBbwCp4VD7PZN75TMmRM4Y4McQsoGiEdDCsFJXnV 9SP2S24Y/uKSLySFDQ0qZ41uZUoEZaMclbD3Uh6AFlzapQggME06B8zjfauOHVvpfak1QgzXqDKf kWoOradUBw+7eU1rITOiOmukHsMHNdvjdDoqSA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAdccuiuxqTxvRcMVh4o9DCfREPNTe3hGEklbdV+L99lKySyIzskGLJ6XDBrWgBeY7ZRSOWGQ 2eHdQLN61fRyqWpVLpNzqaIz/UmMP74VPBCz4QXRDkG4hDO3uifCDVs8Jex4TrYT+hGNYmprbsrq dVQCgeeHc7UMKI/SjusQ4uTKgJ9CWt02/AgK+zKFi3LCBVDGnUwE2kUOL1b0MWfT0ks= ) ; Key ID = 36558`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200204200254 20200120195754 7698 gov. AW2ehlTHCkvsoKYTELKLWDsRb5hmUce7lXmZl5v8iXW1lcvUgYHjl4mKrTmw0o/ZQunLH8tjhL2a nbCy8GymuXffQUXpsWfCtMDd1j2lQBL2ECPw418yOOCqTnoRI6DJvvArASkqLeXHX2bAu4/351ug E/d63O3H30850u+Tgakg/vlTpsNCMxNeJExRDBbwCp4VD7PZN75TMmRM4Y4McQsoGiEdDCsFJXnV 9SP2S24Y/uKSLySFDQ0qZ41uZUoEZaMclbD3Uh6AFlzapQggME06B8zjfauOHVvpfak1QgzXqDKf kWoOradUBw+7eU1rITOiOmukHsMHNdvjdDoqSA== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=36558 is now in the chain-of-trust
	Query to b.gov-servers.net for DONOTCALL.GOV/A
	Received 388 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (388 bytes) ;; HEADER SECTION ;; id = 36546 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DONOTCALL.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) DONOTCALL.GOV. 86400 IN NS dns1.l-secb.net. DONOTCALL.GOV. 86400 IN NS dns2.l-secb.net. DONOTCALL.GOV. 86400 IN NS dns3.l-secb.net. DONOTCALL.GOV. 3600 IN DS ( 3784 8 2 9b562f9da23798e17eeefb953a1ff58690ee12627ae8c0c3e927db3448ac432f ) DONOTCALL.GOV. 3600 IN DS 3784 8 1 089833afeee3b499b24c8ab360f22a61b3adaa36 DONOTCALL.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200130221007 20200123221007 36558 gov. bTv34mPAOx6pFbUqHqwr/NRqdYi8eovT9dFVrzMKnMKETmrJDSHvdFu/NFi3rn6/EVQJKw5dg2Zp H/gsWkp1ArR1N9ZEiMzDVm5G/X+cxVTSWMLLLfVwiIafilbn0I3cSMuY4+muvbJSEkrokrQV6ic9 LgwwqReeqrRKzzndlPTBPXV5tYe77yYzkq6akfFFvC6f7hIHieM7W4LyivhX7g== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.gov-servers.net for DONOTCALL.GOV/DNSKEY
	Error querying d.gov-servers.net/2620:74:29:0:0:0:2:30 for DONOTCALL.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 388 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (388 bytes) ;; HEADER SECTION ;; id = 65269 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DONOTCALL.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) DONOTCALL.GOV. 86400 IN NS dns1.l-secb.net. DONOTCALL.GOV. 86400 IN NS dns2.l-secb.net. DONOTCALL.GOV. 86400 IN NS dns3.l-secb.net. DONOTCALL.GOV. 3600 IN DS ( 3784 8 2 9b562f9da23798e17eeefb953a1ff58690ee12627ae8c0c3e927db3448ac432f ) DONOTCALL.GOV. 3600 IN DS 3784 8 1 089833afeee3b499b24c8ab360f22a61b3adaa36 DONOTCALL.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200130221007 20200123221007 36558 gov. bTv34mPAOx6pFbUqHqwr/NRqdYi8eovT9dFVrzMKnMKETmrJDSHvdFu/NFi3rn6/EVQJKw5dg2Zp H/gsWkp1ArR1N9ZEiMzDVm5G/X+cxVTSWMLLLfVwiIafilbn0I3cSMuY4+muvbJSEkrokrQV6ic9 LgwwqReeqrRKzzndlPTBPXV5tYe77yYzkq6akfFFvC6f7hIHieM7W4LyivhX7g== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone DONOTCALL.GOV

DONOTCALL.GOV

	Checking DS between GOV and DONOTCALL.GOV
	Query to b.gov-servers.net for DONOTCALL.GOV/DS
	Error querying b.gov-servers.net/2620:74:27:0:0:0:2:30 for DONOTCALL.GOV/DS: 'IPv6 transport disabled'
	Received 321 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (321 bytes) ;; HEADER SECTION ;; id = 9729 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DONOTCALL.GOV. IN DS ;; ANSWER SECTION (3 records) DONOTCALL.GOV. 3600 IN DS ( 3784 8 2 9b562f9da23798e17eeefb953a1ff58690ee12627ae8c0c3e927db3448ac432f ) DONOTCALL.GOV. 3600 IN DS 3784 8 1 089833afeee3b499b24c8ab360f22a61b3adaa36 DONOTCALL.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200130221007 20200123221007 36558 gov. bTv34mPAOx6pFbUqHqwr/NRqdYi8eovT9dFVrzMKnMKETmrJDSHvdFu/NFi3rn6/EVQJKw5dg2Zp H/gsWkp1ArR1N9ZEiMzDVm5G/X+cxVTSWMLLLfVwiIafilbn0I3cSMuY4+muvbJSEkrokrQV6ic9 LgwwqReeqrRKzzndlPTBPXV5tYe77yYzkq6akfFFvC6f7hIHieM7W4LyivhX7g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for DONOTCALL.GOV in the GOV zone
	DS=3784/SHA-256 has algorithm RSASHA256
	DS=3784/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`DONOTCALL.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200130221007 20200123221007 36558 gov. bTv34mPAOx6pFbUqHqwr/NRqdYi8eovT9dFVrzMKnMKETmrJDSHvdFu/NFi3rn6/EVQJKw5dg2Zp H/gsWkp1ArR1N9ZEiMzDVm5G/X+cxVTSWMLLLfVwiIafilbn0I3cSMuY4+muvbJSEkrokrQV6ic9 LgwwqReeqrRKzzndlPTBPXV5tYe77yYzkq6akfFFvC6f7hIHieM7W4LyivhX7g== )`
	RRSIG=36558 and DNSKEY=36558 verifies the DS RRset
	DS=3784/SHA-256 is now in the chain-of-trust
	`DONOTCALL.GOV. 3600 IN DS ( 3784 8 2 9b562f9da23798e17eeefb953a1ff58690ee12627ae8c0c3e927db3448ac432f )`
	`DONOTCALL.GOV. 3600 IN DS 3784 8 1 089833afeee3b499b24c8ab360f22a61b3adaa36`
	Query to dns1.l-secb.net for DONOTCALL.GOV/DNSKEY
	Received 1261 bytes from 198.77.70.37
	;; Answer received from 198.77.70.37 (1261 bytes) ;; HEADER SECTION ;; id = 22703 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DONOTCALL.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) DONOTCALL.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAbEzlXUeI75jjfVWP4oLDpvW2bhzT8Fm1X/r5S8Nc8DWpxt+4yXbJcVgY4bcmjwJgkOt1PL+ cj35dkeNODbT2HqMdJZ+TW+5NrQnM4KbPmvy+8T+P4CU55w0uKw1VJJJpj8YnHxJgeqro5/tJNeF jk2LQUSgOtNH+r74UP6a/9S3tZapN2EjhQP74oC3VwPrWLkXItnggOOc7O2K72yCv43JDQccKdGt nP5Bno5XBwhZuJtQXxxyu+vtq9Kkr6cjYPXlNq0rMOboIL0Jm1gN1hkCeaMjmI28wEMdqdFW7WN7 fp8/OCWpX+ph62O7a/nK2d8a3Jr5L4+zLX7Tt6dV8Is= ) ; Key ID = 3784 DONOTCALL.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbonUE+D6G+ndXtNqfu+aGXsLjSSYQMSgi4uofXlaEiIPkOQ6bedciDtqXGhXY8myKHBZ8Ag HTqnJ2tHbkBPuqaDqRFDVk14SbEQLOosbh8Y3nKF9j+82v59Jf7tXF/EuO0FXj5aYHjuEyXIVUfz hXL3h+KiwAmoLPVLnod9UpTf ) ; Key ID = 49800 DONOTCALL.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAYsWG6ie1UvWPJ3aIa1JNEr57a7Jufa94SAPB+70J1l/xoWeg1UQM1P4OLQlD1koosd/MK+R pytDWgWqlUKEf619lDzkAZ2bhTmilgDtD0ktAr2mZPZ6gfRvrV6pigqJfPLo4Ph0rLdsnFora6a1 ZbDUvoyhh6mGxZJMkCIISOkt ) ; Key ID = 11631 DONOTCALL.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200127072552 20200120072552 3784 donotcall.gov. mLuq7m/ZXlO0t2rI1yuJEtTB9T5k/I+9XysNMDyWszD+rhskJbUwCrKoSHR3tWYovM8a9cRT0w9Z h5BLTa/Oikh2ltRmjRFpTzMRhqtaCXS11Gx2l+NHNrRKdKOAmnQ4N9SoGZ8qECz6ARHxd4j26urn G7hYy1yc/XMReYLwyKOJ11ec3fbfeB0KGjnzbkZkP2N0p4GvZQDZr3ANw23nBycuCImJMvdTCPCz Andlb8dZvkMJUvGWTLukmfTIa5wYDj7TDr6EYFwNpSCDw1dkIfLCR1blFMoJphIBLkyrC52J8GFB r3Gg164K9M0Q2oRnZnPtuQ0vuH8B6wqIhCxUZw== ) DONOTCALL.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200127072552 20200120072552 49800 donotcall.gov. Vz+TZ4h1XnT4qkQ0NWAed9gbtvdD2lKD7stRkvgqPRE2p9nigS7t+gt2KE6RtV4IzGBHqlDRoc7M 5suOTcg1qrpCqBntROkMjQdAHI3Sm6UU9jNTXuygvv3hQPHDa7t51kUxMxqih1WgvhlmEdVdbsU2 Yx1Chgf3JceCN9WVwU8= ) DONOTCALL.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200127072552 20200120072552 11631 donotcall.gov. FCO/FSifVn1rKSyaIwcZ6RT6liCdw66fCSHBQO8NfuMQ+3UgDv1fIiex/B6mc2BL+3IDqVRyAcO3 r3QJIdlBhVOX3+9SDyWU1rF0nCbdYHUtp+CzB284+lCrEYCflUpETQLlhla+msELNQfYO4iATScU R9md2fFLEKzyqJ2ILdA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for DONOTCALL.GOV
	`DONOTCALL.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAbEzlXUeI75jjfVWP4oLDpvW2bhzT8Fm1X/r5S8Nc8DWpxt+4yXbJcVgY4bcmjwJgkOt1PL+ cj35dkeNODbT2HqMdJZ+TW+5NrQnM4KbPmvy+8T+P4CU55w0uKw1VJJJpj8YnHxJgeqro5/tJNeF jk2LQUSgOtNH+r74UP6a/9S3tZapN2EjhQP74oC3VwPrWLkXItnggOOc7O2K72yCv43JDQccKdGt nP5Bno5XBwhZuJtQXxxyu+vtq9Kkr6cjYPXlNq0rMOboIL0Jm1gN1hkCeaMjmI28wEMdqdFW7WN7 fp8/OCWpX+ph62O7a/nK2d8a3Jr5L4+zLX7Tt6dV8Is= ) ; Key ID = 3784`
	`DONOTCALL.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbonUE+D6G+ndXtNqfu+aGXsLjSSYQMSgi4uofXlaEiIPkOQ6bedciDtqXGhXY8myKHBZ8Ag HTqnJ2tHbkBPuqaDqRFDVk14SbEQLOosbh8Y3nKF9j+82v59Jf7tXF/EuO0FXj5aYHjuEyXIVUfz hXL3h+KiwAmoLPVLnod9UpTf ) ; Key ID = 49800`
	`DONOTCALL.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAYsWG6ie1UvWPJ3aIa1JNEr57a7Jufa94SAPB+70J1l/xoWeg1UQM1P4OLQlD1koosd/MK+R pytDWgWqlUKEf619lDzkAZ2bhTmilgDtD0ktAr2mZPZ6gfRvrV6pigqJfPLo4Ph0rLdsnFora6a1 ZbDUvoyhh6mGxZJMkCIISOkt ) ; Key ID = 11631`
	DNSKEY=3784/SEP is now in the chain-of-trust
	DS=3784/SHA-256 verifies DNSKEY=3784/SEP
	DS=3784/SHA-1 verifies DNSKEY=3784/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`DONOTCALL.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200127072552 20200120072552 3784 donotcall.gov. mLuq7m/ZXlO0t2rI1yuJEtTB9T5k/I+9XysNMDyWszD+rhskJbUwCrKoSHR3tWYovM8a9cRT0w9Z h5BLTa/Oikh2ltRmjRFpTzMRhqtaCXS11Gx2l+NHNrRKdKOAmnQ4N9SoGZ8qECz6ARHxd4j26urn G7hYy1yc/XMReYLwyKOJ11ec3fbfeB0KGjnzbkZkP2N0p4GvZQDZr3ANw23nBycuCImJMvdTCPCz Andlb8dZvkMJUvGWTLukmfTIa5wYDj7TDr6EYFwNpSCDw1dkIfLCR1blFMoJphIBLkyrC52J8GFB r3Gg164K9M0Q2oRnZnPtuQ0vuH8B6wqIhCxUZw== )`
	`DONOTCALL.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200127072552 20200120072552 49800 donotcall.gov. Vz+TZ4h1XnT4qkQ0NWAed9gbtvdD2lKD7stRkvgqPRE2p9nigS7t+gt2KE6RtV4IzGBHqlDRoc7M 5suOTcg1qrpCqBntROkMjQdAHI3Sm6UU9jNTXuygvv3hQPHDa7t51kUxMxqih1WgvhlmEdVdbsU2 Yx1Chgf3JceCN9WVwU8= )`
	`DONOTCALL.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200127072552 20200120072552 11631 donotcall.gov. FCO/FSifVn1rKSyaIwcZ6RT6liCdw66fCSHBQO8NfuMQ+3UgDv1fIiex/B6mc2BL+3IDqVRyAcO3 r3QJIdlBhVOX3+9SDyWU1rF0nCbdYHUtp+CzB284+lCrEYCflUpETQLlhla+msELNQfYO4iATScU R9md2fFLEKzyqJ2ILdA= )`
	RRSIG=3784 and DNSKEY=3784/SEP verifies the DNSKEY RRset
	RRSIG=49800 and DNSKEY=49800 verifies the DNSKEY RRset
	RRSIG=11631 and DNSKEY=11631 verifies the DNSKEY RRset
	DNSKEY=49800 is now in the chain-of-trust
	DNSKEY=11631 is now in the chain-of-trust
	Query to dns2.l-secb.net for DONOTCALL.GOV/A
	Error querying dns2.l-secb.net/2001:1900:2268:512:205:130:212:37 for DONOTCALL.GOV/A: 'IPv6 transport disabled'
	Received 404 bytes from 205.130.212.37
	;; Answer received from 205.130.212.37 (404 bytes) ;; HEADER SECTION ;; id = 52388 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DONOTCALL.GOV. IN A ;; ANSWER SECTION (3 records) DONOTCALL.GOV. 30 IN A 52.23.29.251 DONOTCALL.GOV. 30 IN RRSIG ( A 8 2 30 20200130232559 20200123232559 49800 donotcall.gov. WxlyHD8d7xS1CxrOnF9MnZygkTnN9CKf17g1PDhb925tgrwfzRR+qgF3ra0/i4l9DiMe4aqFXYYB SZ4QEw19EXgjR+vDyfRSZL4yxGajOnN6FwK/I7jacpLRO/uMmguZbCG4o457fAefU2V3sQ6ppiki p8iwDF5mhLH/PbzfTxc= ) DONOTCALL.GOV. 30 IN RRSIG ( A 8 2 30 20200127072520 20200120072520 11631 donotcall.gov. Ug1EBRqJaUQz2XZDcd9Uio28RSHjpPm3fBQyQgTocbI66qziygnT+bCorbTiZpC/54HCEDLWRzy7 y9eZ1RaLgRxk48wqCtFyjhCWw9mG6485mpSkAA7rFhGYndOyzf/pon+otW/Oy3c2PPnhIQNySjyk tCnecvNxdffgaVyzjf0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	DONOTCALL.GOV is authoritative for DONOTCALL.GOV
	Found RRSIG signed by donotcall.gov zone
	Query to dns2.l-secb.net for DONOTCALL.GOV/SOA
	Error querying dns2.l-secb.net/2001:1900:2268:512:205:130:212:37 for DONOTCALL.GOV/SOA: 'IPv6 transport disabled'
	Received 980 bytes from 205.130.212.37
	;; Answer received from 205.130.212.37 (980 bytes) ;; HEADER SECTION ;; id = 47176 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DONOTCALL.GOV. IN SOA ;; ANSWER SECTION (3 records) DONOTCALL.GOV. 900 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2019121801 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) DONOTCALL.GOV. 900 IN RRSIG ( SOA 8 2 900 20200130232508 20200123232508 49800 donotcall.gov. sBxBb2wXCafYe3YfG+/g6QWJ/ijZdUYyFBMwhMlgEa4la65GJ3m0V8dOuhnre9WSUdmk9Ft6XsWb YcqT1puYsiAVq0XcBnY3AVecmW+gYCJxtoi8+3NQ94sOR+MmDWdnjw3j7CV06XnmZKZj+yUk9y/J b9OiKRNw+DesiLvxBoM= ) DONOTCALL.GOV. 900 IN RRSIG ( SOA 8 2 900 20200127072511 20200120072511 11631 donotcall.gov. aiVKBAGWobL/vNgmbHO5Cb0/erOmSaJatgjYpNLGPg5bMfGMObLYoErzr51S5psSXMdGVE7TBlnQ u71kPXyWGdXyXzXLzROFyNMvGLNrsQZ8u5Pv47pJoFaQC+Jk/DOoVkpIKQZBXc6EdG8Mkf/686aD TZmehNMPsnzN2eAPjic= ) ;; AUTHORITY SECTION (5 records) DONOTCALL.GOV. 900 IN NS dns3.l-secb.net. DONOTCALL.GOV. 900 IN NS dns1.l-secb.net. DONOTCALL.GOV. 900 IN NS dns2.l-secb.net. DONOTCALL.GOV. 900 IN RRSIG ( NS 8 2 900 20200130232645 20200123232645 49800 donotcall.gov. I+o9nMEd6EWVFWi6dxwpHxOclvkZSO02w5FzFF3LFV14Ohggg/q8A/CE1a0NR9JbpCrOpWb1rU/u qczIJ7X6DVf7pjAfDW+x0HP7Fbnvi5dAW0B0WFPn4RTM1Dy6v6Usy+qPRkt+R0Xl7bzRGCIyLxcy x1GHyL3fjds1jeVYGAA= ) DONOTCALL.GOV. 900 IN RRSIG ( NS 8 2 900 20200127072634 20200120072634 11631 donotcall.gov. VaQAHk1oEkPt5Iiv3rId3GepDOalFpgDLiPknCJAjcSp0IBpF94/5a7LtzOrcOrLpovcpn7+1S09 fW5uOH2KCCAN+V1/uORbXIL49tyFHg6tshjHm9rI2owO07sHidsSWHvPz5MANv8EQaBO5DrLEAn8 goBepWI2cW2EZojUDtM= ) ;; ADDITIONAL SECTION (7 records) dns1.l-secb.net. 43200 IN A 198.77.70.37 dns2.l-secb.net. 43200 IN A 205.130.212.37 dns3.l-secb.net. 43200 IN A 35.163.67.210 dns1.l-secb.net. 43200 IN AAAA 2001:1900:2268:770:198:77:70:37 dns2.l-secb.net. 43200 IN AAAA 2001:1900:2268:512:205:130:212:37 dns3.l-secb.net. 43200 IN AAAA 2600:1f14:a2e:4b00:35:163:67:210 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns3.l-secb.net for DONOTCALL.GOV/SOA
	Received 980 bytes from 35.163.67.210
	;; Answer received from 35.163.67.210 (980 bytes) ;; HEADER SECTION ;; id = 28796 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DONOTCALL.GOV. IN SOA ;; ANSWER SECTION (3 records) DONOTCALL.GOV. 900 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2019121801 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) DONOTCALL.GOV. 900 IN RRSIG ( SOA 8 2 900 20200130232455 20200123232455 49800 donotcall.gov. W6CV8NtK3tyZ2XAfLMleV1FXv6VhuwiQQ0JONrkDXLMv6SQUiVCBhF3BCcilFSeaG6en743ghULN 0QaQSlDtPbDg2bIQDJ4L71/P0BzQAmPcBuS/WD8dBu3bXGiFbzmF6SUfJV0xKVjwi6n6SWjQpZnN QOsgdo17VK6VgoM5UaE= ) DONOTCALL.GOV. 900 IN RRSIG ( SOA 8 2 900 20200127072500 20200120072500 11631 donotcall.gov. d0jnwB8JlLULIwmOEOjuelqYjqMH4pqcL/Tu2tk2FAna9a4Tw7m0SQMmVBKKENxe0wrBpHJGD62G mnvV3Xyj2+JBoFDBlucqqaFB3Lpkkho+ZB8PPw/GowTH8uNEUTQKntgRdMaXCqCN21wV/55PYYwY uOQ+1kl1ZkB/seNSpa4= ) ;; AUTHORITY SECTION (5 records) DONOTCALL.GOV. 900 IN NS dns3.l-secb.net. DONOTCALL.GOV. 900 IN NS dns2.l-secb.net. DONOTCALL.GOV. 900 IN NS dns1.l-secb.net. DONOTCALL.GOV. 900 IN RRSIG ( NS 8 2 900 20200130232834 20200123232834 49800 donotcall.gov. VfkXdRH+PAIBhWHmwVD43pqAB5iMoxHpWruqYFeA7npSNs/U0NyccqW4eMnktRqQftlXhkiENjl8 fDoM9gml/oUFS02MhtOHiglumQcsywfksT9W8KvzYm9i/FZAW37vXqB2ZdMu/GnirOGarKl/XwzF pKKOocAXSvK0Li8Vc0s= ) DONOTCALL.GOV. 900 IN RRSIG ( NS 8 2 900 20200127072509 20200120072509 11631 donotcall.gov. MiE+3YA8ZP7YDqDEH2bTAnkxAXc7+JaHuFa34exUZe63GYnLPVwAdv0f+p0k35TlcJBb+KeQTCRB urHW1ki62RfW7Ki8asthNwSxsXHemgYCwXW5ZpvUI02k5Vx5GQKc7xUBwFnKP+ARe4E1uTgSRow8 nWQIMSgXmH/+QP/tfwA= ) ;; ADDITIONAL SECTION (7 records) dns1.l-secb.net. 43200 IN A 198.77.70.37 dns2.l-secb.net. 43200 IN A 205.130.212.37 dns3.l-secb.net. 43200 IN A 35.163.67.210 dns1.l-secb.net. 43200 IN AAAA 2001:1900:2268:770:198:77:70:37 dns2.l-secb.net. 43200 IN AAAA 2001:1900:2268:512:205:130:212:37 dns3.l-secb.net. 43200 IN AAAA 2600:1f14:a2e:4b00:35:163:67:210 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns1.l-secb.net for DONOTCALL.GOV/SOA
	Error querying dns1.l-secb.net/2001:1900:2268:770:198:77:70:37 for DONOTCALL.GOV/SOA: 'IPv6 transport disabled'
	Received 980 bytes from 198.77.70.37
	;; Answer received from 198.77.70.37 (980 bytes) ;; HEADER SECTION ;; id = 47868 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DONOTCALL.GOV. IN SOA ;; ANSWER SECTION (3 records) DONOTCALL.GOV. 900 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2019121801 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) DONOTCALL.GOV. 900 IN RRSIG ( SOA 8 2 900 20200130232550 20200123232550 49800 donotcall.gov. F5M05FjWP7m94GCzki8xFlxSdo2YWusKAQvHsEjN/xXx6M4tfMZqxcvchtdwMSFIQ3ps61U4Nq6L ZnWTyVmcZ3sb9EH/Im81mn6rf8UpQSql+WUHbd/ot8w/O90CqTkqNoHMKZa7hTu6oFsQwsCQ+XgF /CfYP8ngzCjqEfXAOnQ= ) DONOTCALL.GOV. 900 IN RRSIG ( SOA 8 2 900 20200127072500 20200120072500 11631 donotcall.gov. d0jnwB8JlLULIwmOEOjuelqYjqMH4pqcL/Tu2tk2FAna9a4Tw7m0SQMmVBKKENxe0wrBpHJGD62G mnvV3Xyj2+JBoFDBlucqqaFB3Lpkkho+ZB8PPw/GowTH8uNEUTQKntgRdMaXCqCN21wV/55PYYwY uOQ+1kl1ZkB/seNSpa4= ) ;; AUTHORITY SECTION (5 records) DONOTCALL.GOV. 900 IN NS dns1.l-secb.net. DONOTCALL.GOV. 900 IN NS dns3.l-secb.net. DONOTCALL.GOV. 900 IN NS dns2.l-secb.net. DONOTCALL.GOV. 900 IN RRSIG ( NS 8 2 900 20200130232737 20200123232737 49800 donotcall.gov. Xqq0FqWhdgESeapMSBFTNiSPebbVC312s4uF9jGmYr+TlAlMQARcDcO1KRk0nS8HOORaVnWUefEe Mp+htwXMACWgY5xgJ19up4LKqPq+/G1WYbEGv3EDK+Yjpi2O0vOVRfgnabVlkHC5xHvAs2/v1cd3 lLzP/BasfY+XwybGG5c= ) DONOTCALL.GOV. 900 IN RRSIG ( NS 8 2 900 20200127072509 20200120072509 11631 donotcall.gov. MiE+3YA8ZP7YDqDEH2bTAnkxAXc7+JaHuFa34exUZe63GYnLPVwAdv0f+p0k35TlcJBb+KeQTCRB urHW1ki62RfW7Ki8asthNwSxsXHemgYCwXW5ZpvUI02k5Vx5GQKc7xUBwFnKP+ARe4E1uTgSRow8 nWQIMSgXmH/+QP/tfwA= ) ;; ADDITIONAL SECTION (7 records) dns1.l-secb.net. 43200 IN A 198.77.70.37 dns2.l-secb.net. 43200 IN A 205.130.212.37 dns3.l-secb.net. 43200 IN A 35.163.67.210 dns1.l-secb.net. 43200 IN AAAA 2001:1900:2268:770:198:77:70:37 dns2.l-secb.net. 43200 IN AAAA 2001:1900:2268:512:205:130:212:37 dns3.l-secb.net. 43200 IN AAAA 2600:1f14:a2e:4b00:35:163:67:210 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns2.l-secb.net for DONOTCALL.GOV/A
	Error querying dns2.l-secb.net/2001:1900:2268:512:205:130:212:37 for DONOTCALL.GOV/A: 'IPv6 transport disabled'
	Received 404 bytes from 205.130.212.37
	;; Answer received from 205.130.212.37 (404 bytes) ;; HEADER SECTION ;; id = 25296 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DONOTCALL.GOV. IN A ;; ANSWER SECTION (3 records) DONOTCALL.GOV. 30 IN A 52.23.29.251 DONOTCALL.GOV. 30 IN RRSIG ( A 8 2 30 20200130232516 20200123232516 49800 donotcall.gov. UTTZOZQnDnRLZG+849xuEY3uqCszCdiYa9kAJCyAHmc+35ebQMCYI5wVhk2i97Y0XbRlqNJ4j2wu 7GHhhaFtIMH3MlPZjfMx37JIauhF2xUJhvD9lMWl2kaOBJClKCfRFEvzFfSJSjeVIutAQ7jdEXTP bj6xpqzZXclnPzUEIvE= ) DONOTCALL.GOV. 30 IN RRSIG ( A 8 2 30 20200127072442 20200120072442 11631 donotcall.gov. fh9wKttNqYUyoGJ5vuvUzSNGyKWhCU3iTUToV/bGE+OPKa7fbhkSnTZIC5b9IHbOuFV0cWrvPt84 sOuI4BQ9i8HFBYZ4/Yl1hpH5lk/QcgSPe2hO4UgFF03M17spyadwbP27mXmILfswtgRfisJPZ/Md 2s1KGWvpfLet7GMO6qA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	DONOTCALL.GOV A RR has value 52.23.29.251
	Found 2 RRSIGs over A RRset
	`DONOTCALL.GOV. 30 IN RRSIG ( A 8 2 30 20200130232516 20200123232516 49800 donotcall.gov. UTTZOZQnDnRLZG+849xuEY3uqCszCdiYa9kAJCyAHmc+35ebQMCYI5wVhk2i97Y0XbRlqNJ4j2wu 7GHhhaFtIMH3MlPZjfMx37JIauhF2xUJhvD9lMWl2kaOBJClKCfRFEvzFfSJSjeVIutAQ7jdEXTP bj6xpqzZXclnPzUEIvE= )`
	`DONOTCALL.GOV. 30 IN RRSIG ( A 8 2 30 20200127072442 20200120072442 11631 donotcall.gov. fh9wKttNqYUyoGJ5vuvUzSNGyKWhCU3iTUToV/bGE+OPKa7fbhkSnTZIC5b9IHbOuFV0cWrvPt84 sOuI4BQ9i8HFBYZ4/Yl1hpH5lk/QcgSPe2hO4UgFF03M17spyadwbP27mXmILfswtgRfisJPZ/Md 2s1KGWvpfLet7GMO6qA= )`
	RRSIG=49800 and DNSKEY=49800 verifies the A RRset
	RRSIG=11631 and DNSKEY=11631 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test DONOTCALL.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: