DNSSEC Analyzer - DONOTCALL.GOV

Domain Name:

Time: 2021-01-19 03:31:14 UTC, NTP stratum 4

Analyzing DNSSEC problems for DONOTCALL.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (864 bytes) ;; HEADER SECTION ;; id = 37369 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbKGKkqc1VAvQr48iPf9Nd39f337MitggxF0AB9kLKRNSuq9joOEPC/R6PD/4lTzUms8U9oP +aiF0rVC2rGOKSdOLxPHRLA3ameMFT2/3bmVCFsRsn03IVTdN5VUAfczjqjmA0t9NM7bbN5oVzuQ L3P1FyQb1q6HX4M1qg+htMNEd9PdlPLMFcrUg5fcYtTr2llVkO1Xo3lAdrjmmxfGeIyQnskpwPyW 88J527DEytmgPo5KzLBYLMoL2Q41PK0ul0rs7yN+g5IG4LnJOcjew1yrmHXrp/OzrpsO4FkicufY t/ygfQKkT5HYbr/yFgeZAfaF80nYyc7wgDYxOeHdiRk= ) ; Key ID = 42351 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210201000000 20210111000000 20326 . nPlFYAyI+iUNytZu71KcMwdvR1ubjVRP6Hp7E/owRaLhHhOON4gJsezf4UoBeq75yeDBkzRA2pwD 7g6XVY/qsQM9WDuzTYQJWqvSGDj0BYF5bS482kH8Y3N/Ly/jlQCSFIlCbTjAUBHTdYZji6esQDqi Wk2SzB38ZLsxgey439JkhxUzMh5520zLCiOnuZs9Iy0KLoy4ss7R/GiQjcYEIi0zScXZXcDBr3qd 2HB/BL98F2MDeshzQ/VRimxsZ3RH3ERNPS1GurmjY/mTUZxX3ITj1C57PI2bgurv1b7dyp1zLpmZ lIz/21lQwvT3wESGF44J1YmBDheYoG44GY9RVg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbKGKkqc1VAvQr48iPf9Nd39f337MitggxF0AB9kLKRNSuq9joOEPC/R6PD/4lTzUms8U9oP +aiF0rVC2rGOKSdOLxPHRLA3ameMFT2/3bmVCFsRsn03IVTdN5VUAfczjqjmA0t9NM7bbN5oVzuQ L3P1FyQb1q6HX4M1qg+htMNEd9PdlPLMFcrUg5fcYtTr2llVkO1Xo3lAdrjmmxfGeIyQnskpwPyW 88J527DEytmgPo5KzLBYLMoL2Q41PK0ul0rs7yN+g5IG4LnJOcjew1yrmHXrp/OzrpsO4FkicufY t/ygfQKkT5HYbr/yFgeZAfaF80nYyc7wgDYxOeHdiRk= ) ; Key ID = 42351`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210201000000 20210111000000 20326 . nPlFYAyI+iUNytZu71KcMwdvR1ubjVRP6Hp7E/owRaLhHhOON4gJsezf4UoBeq75yeDBkzRA2pwD 7g6XVY/qsQM9WDuzTYQJWqvSGDj0BYF5bS482kH8Y3N/Ly/jlQCSFIlCbTjAUBHTdYZji6esQDqi Wk2SzB38ZLsxgey439JkhxUzMh5520zLCiOnuZs9Iy0KLoy4ss7R/GiQjcYEIi0zScXZXcDBr3qd 2HB/BL98F2MDeshzQ/VRimxsZ3RH3ERNPS1GurmjY/mTUZxX3ITj1C57PI2bgurv1b7dyp1zLpmZ lIz/21lQwvT3wESGF44J1YmBDheYoG44GY9RVg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=42351 is now in the chain-of-trust
	Query to j.root-servers.net for DONOTCALL.GOV/A
	Received 668 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (668 bytes) ;; HEADER SECTION ;; id = 58462 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; DONOTCALL.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20210131170000 20210118160000 42351 . HAAVEkzpunSwDVhgNZ2fCuH3Vb/FqnagCd1fOrt2XPZA8NAiT2gpKJSIZ/efYQ8i9+rGd0aJuX3w UzLbZ4vx6GyVum+H2OoPhF0l3cXsa8kXCP1q6L82zYUHBUC7ETQNMHPZhOUddvI2FsdAIC3X3Bbn BCKoOi4b7uWABiLiaZXEqvaU2hSibgD/seuG/fRfI5IwV/rn8uMpSctg4jQoqyYNKjmrxJWiK3gJ 95uTAyKCfBW27nr9AWoeScA5HpfBOb8yaLUwDOGS9uO+yCbzpXPEL+zxURJ0lC0oHQIb7Z1CPJNu UkV9h1LzDOHTikayNEWDaQLdhMy68zhnZudIzQ== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to g.root-servers.net for GOV/DNSKEY
	Received 661 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (661 bytes) ;; HEADER SECTION ;; id = 17550 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20210131170000 20210118160000 42351 . HAAVEkzpunSwDVhgNZ2fCuH3Vb/FqnagCd1fOrt2XPZA8NAiT2gpKJSIZ/efYQ8i9+rGd0aJuX3w UzLbZ4vx6GyVum+H2OoPhF0l3cXsa8kXCP1q6L82zYUHBUC7ETQNMHPZhOUddvI2FsdAIC3X3Bbn BCKoOi4b7uWABiLiaZXEqvaU2hSibgD/seuG/fRfI5IwV/rn8uMpSctg4jQoqyYNKjmrxJWiK3gJ 95uTAyKCfBW27nr9AWoeScA5HpfBOb8yaLUwDOGS9uO+yCbzpXPEL+zxURJ0lC0oHQIb7Z1CPJNu UkV9h1LzDOHTikayNEWDaQLdhMy68zhnZudIzQ== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to e.root-servers.net for GOV/DS
	Received 403 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (403 bytes) ;; HEADER SECTION ;; id = 41694 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20210131170000 20210118160000 42351 . HAAVEkzpunSwDVhgNZ2fCuH3Vb/FqnagCd1fOrt2XPZA8NAiT2gpKJSIZ/efYQ8i9+rGd0aJuX3w UzLbZ4vx6GyVum+H2OoPhF0l3cXsa8kXCP1q6L82zYUHBUC7ETQNMHPZhOUddvI2FsdAIC3X3Bbn BCKoOi4b7uWABiLiaZXEqvaU2hSibgD/seuG/fRfI5IwV/rn8uMpSctg4jQoqyYNKjmrxJWiK3gJ 95uTAyKCfBW27nr9AWoeScA5HpfBOb8yaLUwDOGS9uO+yCbzpXPEL+zxURJ0lC0oHQIb7Z1CPJNu UkV9h1LzDOHTikayNEWDaQLdhMy68zhnZudIzQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20210131170000 20210118160000 42351 . HAAVEkzpunSwDVhgNZ2fCuH3Vb/FqnagCd1fOrt2XPZA8NAiT2gpKJSIZ/efYQ8i9+rGd0aJuX3w UzLbZ4vx6GyVum+H2OoPhF0l3cXsa8kXCP1q6L82zYUHBUC7ETQNMHPZhOUddvI2FsdAIC3X3Bbn BCKoOi4b7uWABiLiaZXEqvaU2hSibgD/seuG/fRfI5IwV/rn8uMpSctg4jQoqyYNKjmrxJWiK3gJ 95uTAyKCfBW27nr9AWoeScA5HpfBOb8yaLUwDOGS9uO+yCbzpXPEL+zxURJ0lC0oHQIb7Z1CPJNu UkV9h1LzDOHTikayNEWDaQLdhMy68zhnZudIzQ== )`
	RRSIG=42351 and DNSKEY=42351 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to a.gov-servers.net for GOV/DNSKEY
	Received 957 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (957 bytes) ;; HEADER SECTION ;; id = 613 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (4 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAaQup5BwKqvn1In1x+PzsLpFav6zsLaW7fivUq9PpXUzXn++rcjtYBS15NXm1hMAZb5FChUp 35qd7hVqdwNuT/NGFNHfEykaeWjkqBKX2mCBSiyIsK4i4TQu7CS2CgqfqR43wXFITyItTPP5wijo 9Jt4dsVTjAtNJKaXOKZ31tLaeM5C2bYqAofxX6oK3TVAZ7vFsjPqjJZtZUBMZq28BiU= ) ; Key ID = 27306 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAeFoiC01j4zIdBfR1vxBGp7WmV8q6IgTQ/pvbQJhCd9+sE16txuz6M81FPFkWhTk1nsXR4tI UZLQZpvgme+q3dqWuqtFA2amB99IM9B9iq6kwSrkZNVFv6zav3eP+5BlL/OA9FNFQHXCj5qj2noA j2le7j8umVcc+4zH677ytdtIImoAY45H8wWxVrGR4kxqM54O10fPHXEPu84irfaZGrM= ) ; Key ID = 15489 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210129200254 20210114195754 7698 gov. CGhz32kgAD2TX5Lg2j23jXXUv+RTgGyMxbh/yobXObSvJneaSKa75D5Vo/iCVbvVvp3lntOGoKnQ AD+e8tEVlaKiG2bX1u9asLn9azwmk+M5i/4vCydP31wJ4503w+7bZe1c5qg26RqVN5pudzmgUUUK msaHry0zXHrpcC941eZZhuemdKlF4XT3E6JkkAL+HyCLvqIk4rBqlShTiqUwzKj6+GbhQvuJzU+B 4ZsiuoNu1FBU2ipWi+FJ88xawWmBc+yEDZkPJFJZpdPNtonI1Cjd3H61PSXe6JRrtsLcLX/G9F+J nQo6IN7tiEONh5QAEo2RBBc1yL29N3BRDW8qMg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAaQup5BwKqvn1In1x+PzsLpFav6zsLaW7fivUq9PpXUzXn++rcjtYBS15NXm1hMAZb5FChUp 35qd7hVqdwNuT/NGFNHfEykaeWjkqBKX2mCBSiyIsK4i4TQu7CS2CgqfqR43wXFITyItTPP5wijo 9Jt4dsVTjAtNJKaXOKZ31tLaeM5C2bYqAofxX6oK3TVAZ7vFsjPqjJZtZUBMZq28BiU= ) ; Key ID = 27306`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAeFoiC01j4zIdBfR1vxBGp7WmV8q6IgTQ/pvbQJhCd9+sE16txuz6M81FPFkWhTk1nsXR4tI UZLQZpvgme+q3dqWuqtFA2amB99IM9B9iq6kwSrkZNVFv6zav3eP+5BlL/OA9FNFQHXCj5qj2noA j2le7j8umVcc+4zH677ytdtIImoAY45H8wWxVrGR4kxqM54O10fPHXEPu84irfaZGrM= ) ; Key ID = 15489`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210129200254 20210114195754 7698 gov. CGhz32kgAD2TX5Lg2j23jXXUv+RTgGyMxbh/yobXObSvJneaSKa75D5Vo/iCVbvVvp3lntOGoKnQ AD+e8tEVlaKiG2bX1u9asLn9azwmk+M5i/4vCydP31wJ4503w+7bZe1c5qg26RqVN5pudzmgUUUK msaHry0zXHrpcC941eZZhuemdKlF4XT3E6JkkAL+HyCLvqIk4rBqlShTiqUwzKj6+GbhQvuJzU+B 4ZsiuoNu1FBU2ipWi+FJ88xawWmBc+yEDZkPJFJZpdPNtonI1Cjd3H61PSXe6JRrtsLcLX/G9F+J nQo6IN7tiEONh5QAEo2RBBc1yL29N3BRDW8qMg== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=27306 is now in the chain-of-trust
	DNSKEY=15489 is now in the chain-of-trust
	Query to c.gov-servers.net for DONOTCALL.GOV/A
	Received 388 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (388 bytes) ;; HEADER SECTION ;; id = 31266 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DONOTCALL.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) DONOTCALL.GOV. 86400 IN NS dns2.l-secb.net. DONOTCALL.GOV. 86400 IN NS dns1.l-secb.net. DONOTCALL.GOV. 86400 IN NS dns3.l-secb.net. DONOTCALL.GOV. 3600 IN DS ( 11254 8 2 d5a51c1ddaa79857c4d84eea65c2e38750e53fe2aefef0459da872d2d6b6b8e2 ) DONOTCALL.GOV. 3600 IN DS ( 11254 8 1 2a0bc45a666b9492c66ad73142c7a33afb817562 ) DONOTCALL.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210126011008 20210119011008 27306 gov. WaqjLcGfnMXMWYe0vR2X8I0/J87W7as6j/a1qveMwImiwiQ+uA/uliQyPiVsJoB+LhfYm2xECo83 qrVIHlNgKoq66FQoVkW6xNt5CicfuDPRMEs2aNXFIdGPWzKLh431mq5dQjB/ZufER0u3FsnWBFqa Ciq0p7q7mORzirdPgHUGVQbUgTGEhBxS2+vYjeDRHpOkarT4OrlA8eaTqWldQA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.gov-servers.net for DONOTCALL.GOV/DNSKEY
	Received 388 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (388 bytes) ;; HEADER SECTION ;; id = 63530 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DONOTCALL.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) DONOTCALL.GOV. 86400 IN NS dns2.l-secb.net. DONOTCALL.GOV. 86400 IN NS dns1.l-secb.net. DONOTCALL.GOV. 86400 IN NS dns3.l-secb.net. DONOTCALL.GOV. 3600 IN DS ( 11254 8 2 d5a51c1ddaa79857c4d84eea65c2e38750e53fe2aefef0459da872d2d6b6b8e2 ) DONOTCALL.GOV. 3600 IN DS ( 11254 8 1 2a0bc45a666b9492c66ad73142c7a33afb817562 ) DONOTCALL.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210126011008 20210119011008 27306 gov. WaqjLcGfnMXMWYe0vR2X8I0/J87W7as6j/a1qveMwImiwiQ+uA/uliQyPiVsJoB+LhfYm2xECo83 qrVIHlNgKoq66FQoVkW6xNt5CicfuDPRMEs2aNXFIdGPWzKLh431mq5dQjB/ZufER0u3FsnWBFqa Ciq0p7q7mORzirdPgHUGVQbUgTGEhBxS2+vYjeDRHpOkarT4OrlA8eaTqWldQA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone DONOTCALL.GOV

DONOTCALL.GOV

	Checking DS between GOV and DONOTCALL.GOV
	Query to a.gov-servers.net for DONOTCALL.GOV/DS
	Received 321 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (321 bytes) ;; HEADER SECTION ;; id = 13413 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DONOTCALL.GOV. IN DS ;; ANSWER SECTION (3 records) DONOTCALL.GOV. 3600 IN DS ( 11254 8 2 d5a51c1ddaa79857c4d84eea65c2e38750e53fe2aefef0459da872d2d6b6b8e2 ) DONOTCALL.GOV. 3600 IN DS ( 11254 8 1 2a0bc45a666b9492c66ad73142c7a33afb817562 ) DONOTCALL.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210126011008 20210119011008 27306 gov. WaqjLcGfnMXMWYe0vR2X8I0/J87W7as6j/a1qveMwImiwiQ+uA/uliQyPiVsJoB+LhfYm2xECo83 qrVIHlNgKoq66FQoVkW6xNt5CicfuDPRMEs2aNXFIdGPWzKLh431mq5dQjB/ZufER0u3FsnWBFqa Ciq0p7q7mORzirdPgHUGVQbUgTGEhBxS2+vYjeDRHpOkarT4OrlA8eaTqWldQA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for DONOTCALL.GOV in the GOV zone
	DS=11254/SHA-256 has algorithm RSASHA256
	DS=11254/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`DONOTCALL.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210126011008 20210119011008 27306 gov. WaqjLcGfnMXMWYe0vR2X8I0/J87W7as6j/a1qveMwImiwiQ+uA/uliQyPiVsJoB+LhfYm2xECo83 qrVIHlNgKoq66FQoVkW6xNt5CicfuDPRMEs2aNXFIdGPWzKLh431mq5dQjB/ZufER0u3FsnWBFqa Ciq0p7q7mORzirdPgHUGVQbUgTGEhBxS2+vYjeDRHpOkarT4OrlA8eaTqWldQA== )`
	RRSIG=27306 and DNSKEY=27306 verifies the DS RRset
	DS=11254/SHA-256 is now in the chain-of-trust
	`DONOTCALL.GOV. 3600 IN DS ( 11254 8 2 d5a51c1ddaa79857c4d84eea65c2e38750e53fe2aefef0459da872d2d6b6b8e2 )`
	`DONOTCALL.GOV. 3600 IN DS ( 11254 8 1 2a0bc45a666b9492c66ad73142c7a33afb817562 )`
	Query to dns1.l-secb.net for DONOTCALL.GOV/DNSKEY
	Received 1261 bytes from 198.77.70.37
	;; Answer received from 198.77.70.37 (1261 bytes) ;; HEADER SECTION ;; id = 45016 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DONOTCALL.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) DONOTCALL.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbwSLIsoKoW4nhdMUNsKxDRLnduqtM2isvu1Hn9UAzpoTCcI81JZh7+pFPpixrFFmySs1ynk zKnwixxxyivZ+BAA9v1hsOcR6JYooctRMOHzYX4YbxRqzRlVWvBlbokDFFuH91hQNMk/qhrAEjjC YO7SBlruUVQ8K446U9iWxBWj ) ; Key ID = 53544 DONOTCALL.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbOh5YaEti64cmSy5rXqW0MXSMk1ao+zTGiQmJLdlQxzK6O+lGcffDrChewg5QTVw5k+R4lt fx1GxtBOsd9OPazb55drLeHednI5O/zG36VGMgdvYqXlKfpLAIlXRMvkuWzJvs3UdVdh60MwkX1C xHwMS+x9SEHOjgTB3+jG3nGp ) ; Key ID = 13224 DONOTCALL.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAeZ/a7DlOVDpcSdB6MBSmzlpSGxHfEphxCMm5bXEHSsx6kmKyVCkQvWBRU1mHD3R5v4TGB65 iXS3dzKbImfiS6Wm1BRDWdoFFz3QHK8/1sCLBbILVc8uynQ0XdJD3ylUqqPUEJKGFMqZmBGeyils 35dtSVO+eTlKl7o/UH3rgIEf69M+mT6UzytCbwR/OlsmRiO7cLrUYfcH4dTZISRh/k9pHN/ZiJQ4 rIH7SzSCzD20qhSR9NQIkIZNvPi7TrMFpvedT7A6tN67N/TpBJ2eoveFmJITsxO6yKQHql6PAdWF n38qm0L7rFD/SN8SfGhF3ny55rW8UnSjQagc5dbZZ/8= ) ; Key ID = 11254 DONOTCALL.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210125232605 20210118232605 53544 donotcall.gov. eytbr3kUBF3AiNbz/cXrS81HA+zq3QogKJ69XCOFpzm0B/qFmFn934iXHkyUtpN6DDz50VwPqGX2 BZqXKp7sf/1ikuvm/rT4S9iS8LdypxS+vxDLf2FYmWHvPbp2RqmB5LlYHLpxD/owwS4fxqHSSMFu XZW5mDjWcuAUWIoWvAA= ) DONOTCALL.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210125232605 20210118232605 13224 donotcall.gov. efO9ZNNIYNs1ga9/hwDGdD+zSHNEwCghkChbX+v/1ShfpogJUu0wQrBNCj6wQQNd7V9ysbgWpxou 8l6yxHsSpYKQ/FZuhlf3vLWPX1uZGLIYAaivsb2NRsUZIRpfzE+SGExS6gdKr9Az4h8/sZdeE7I2 vMxpKjTCO4gu/go6moo= ) DONOTCALL.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210125232605 20210118232605 11254 donotcall.gov. q1dz3+NHIo4vDMyRUJZLjT/lTTFUoWjz269W+qaNQJLkKjBSkQDPRFdXx6uLxUAXJQNBhYRsEdOU X/bXa5wJbpF+tGii9/7ZzXq5o2bRKRjS4NF02JrGnCsH970BEme8Pf7SWcDLOOzGEwiFftgJgRCa k7Rjdwq/10TxHHJR2LJiuSwCpFZzY+v2+1Z8eiBR4SDPjORyqMm+dG6c2SuGws4quOJTPBDi/pw0 R2JNFG5LO+h3D8tTOOTME2BaZ1nRUDCNnCevGDcTBwLyDcVGCne1fnY8oLG5veIw8McJ41m7w9FM CzFMRHoWkCgQdfqcZ/hSpTilWjOFdPvc0z/oeA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for DONOTCALL.GOV
	`DONOTCALL.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbwSLIsoKoW4nhdMUNsKxDRLnduqtM2isvu1Hn9UAzpoTCcI81JZh7+pFPpixrFFmySs1ynk zKnwixxxyivZ+BAA9v1hsOcR6JYooctRMOHzYX4YbxRqzRlVWvBlbokDFFuH91hQNMk/qhrAEjjC YO7SBlruUVQ8K446U9iWxBWj ) ; Key ID = 53544`
	`DONOTCALL.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbOh5YaEti64cmSy5rXqW0MXSMk1ao+zTGiQmJLdlQxzK6O+lGcffDrChewg5QTVw5k+R4lt fx1GxtBOsd9OPazb55drLeHednI5O/zG36VGMgdvYqXlKfpLAIlXRMvkuWzJvs3UdVdh60MwkX1C xHwMS+x9SEHOjgTB3+jG3nGp ) ; Key ID = 13224`
	`DONOTCALL.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAeZ/a7DlOVDpcSdB6MBSmzlpSGxHfEphxCMm5bXEHSsx6kmKyVCkQvWBRU1mHD3R5v4TGB65 iXS3dzKbImfiS6Wm1BRDWdoFFz3QHK8/1sCLBbILVc8uynQ0XdJD3ylUqqPUEJKGFMqZmBGeyils 35dtSVO+eTlKl7o/UH3rgIEf69M+mT6UzytCbwR/OlsmRiO7cLrUYfcH4dTZISRh/k9pHN/ZiJQ4 rIH7SzSCzD20qhSR9NQIkIZNvPi7TrMFpvedT7A6tN67N/TpBJ2eoveFmJITsxO6yKQHql6PAdWF n38qm0L7rFD/SN8SfGhF3ny55rW8UnSjQagc5dbZZ/8= ) ; Key ID = 11254`
	DNSKEY=11254/SEP is now in the chain-of-trust
	DS=11254/SHA-256 verifies DNSKEY=11254/SEP
	DS=11254/SHA-1 verifies DNSKEY=11254/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`DONOTCALL.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210125232605 20210118232605 53544 donotcall.gov. eytbr3kUBF3AiNbz/cXrS81HA+zq3QogKJ69XCOFpzm0B/qFmFn934iXHkyUtpN6DDz50VwPqGX2 BZqXKp7sf/1ikuvm/rT4S9iS8LdypxS+vxDLf2FYmWHvPbp2RqmB5LlYHLpxD/owwS4fxqHSSMFu XZW5mDjWcuAUWIoWvAA= )`
	`DONOTCALL.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210125232605 20210118232605 13224 donotcall.gov. efO9ZNNIYNs1ga9/hwDGdD+zSHNEwCghkChbX+v/1ShfpogJUu0wQrBNCj6wQQNd7V9ysbgWpxou 8l6yxHsSpYKQ/FZuhlf3vLWPX1uZGLIYAaivsb2NRsUZIRpfzE+SGExS6gdKr9Az4h8/sZdeE7I2 vMxpKjTCO4gu/go6moo= )`
	`DONOTCALL.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210125232605 20210118232605 11254 donotcall.gov. q1dz3+NHIo4vDMyRUJZLjT/lTTFUoWjz269W+qaNQJLkKjBSkQDPRFdXx6uLxUAXJQNBhYRsEdOU X/bXa5wJbpF+tGii9/7ZzXq5o2bRKRjS4NF02JrGnCsH970BEme8Pf7SWcDLOOzGEwiFftgJgRCa k7Rjdwq/10TxHHJR2LJiuSwCpFZzY+v2+1Z8eiBR4SDPjORyqMm+dG6c2SuGws4quOJTPBDi/pw0 R2JNFG5LO+h3D8tTOOTME2BaZ1nRUDCNnCevGDcTBwLyDcVGCne1fnY8oLG5veIw8McJ41m7w9FM CzFMRHoWkCgQdfqcZ/hSpTilWjOFdPvc0z/oeA== )`
	RRSIG=53544 and DNSKEY=53544 verifies the DNSKEY RRset
	RRSIG=13224 and DNSKEY=13224 verifies the DNSKEY RRset
	RRSIG=11254 and DNSKEY=11254/SEP verifies the DNSKEY RRset
	DNSKEY=53544 is now in the chain-of-trust
	DNSKEY=13224 is now in the chain-of-trust
	Query to dns3.l-secb.net for DONOTCALL.GOV/A
	Received 404 bytes from 35.163.67.210
	;; Answer received from 35.163.67.210 (404 bytes) ;; HEADER SECTION ;; id = 5797 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DONOTCALL.GOV. IN A ;; ANSWER SECTION (3 records) DONOTCALL.GOV. 30 IN A 52.23.29.251 DONOTCALL.GOV. 30 IN RRSIG ( A 8 2 30 20210124232806 20210117232806 53544 donotcall.gov. IPIXKH4HC2hCKFuT7i/THv2XH0FiUxjYO0F8pqEvYgyfIadyMtUV8XCD+6vLd+tSe6GGtV6Xse3W roAr7CyVXGAgNHZEVqfpvjgqoZN6D7Y1RgtwxJW76mDG6NWwi7e/Y4ihVsGPuDqPFPFGJNHgiZoW hOqaUIZOq7e1m/60o3I= ) DONOTCALL.GOV. 30 IN RRSIG ( A 8 2 30 20210125232524 20210118232524 13224 donotcall.gov. gdnQ7mVmnv7oDxFWIJ867zHl+hj87IwqizK2nHR1Xqp1ixqo/O90CSY/3Bk7PmebFM7nKGIoFFPT 5I/fw9WkfBSIJ2b2ZlQv7zAM6N9RFX/hW3o59ifrPfD1OGu7FV9X0bxNVva2sNtgqS500ndmnLkW hvCdCz0UwoBOgEqXpAc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	DONOTCALL.GOV is authoritative for DONOTCALL.GOV
	Found RRSIG signed by donotcall.gov zone
	Query to dns2.l-secb.net for DONOTCALL.GOV/SOA
	Timeout querying dns2.l-secb.net/205.130.212.37 for DONOTCALL.GOV/SOA
	All Queries to dns2.l-secb.net for DONOTCALL.GOV/SOA timed out or failed
	Query to dns3.l-secb.net for DONOTCALL.GOV/SOA
	Received 980 bytes from 35.163.67.210
	;; Answer received from 35.163.67.210 (980 bytes) ;; HEADER SECTION ;; id = 8115 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DONOTCALL.GOV. IN SOA ;; ANSWER SECTION (3 records) DONOTCALL.GOV. 900 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2020092801 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) DONOTCALL.GOV. 900 IN RRSIG ( SOA 8 2 900 20210124232612 20210117232612 53544 donotcall.gov. fTCEwtXggm4ZXDtYoFhNJEax/HC1axyxQEmEFU3hJztrhUwJ7Vyj8F/VFvLTtfulyBtvQfxeZHBT 3GQN9oY/AlwcqXOpx9yrus/eXLBnG/CLt8o9veKFaITRsSqb5HQwM+46onAsX7Vpgaq8sv/qcuiK faC8TEMdQB8vEBPCnYo= ) DONOTCALL.GOV. 900 IN RRSIG ( SOA 8 2 900 20210125232525 20210118232525 13224 donotcall.gov. e4UcFpyXM80tlHqYm/HUt1+/JfG2TKkldiBhfAgwE5klCwl2f1GSGpDn4zRiO6qG0PooKMgTrpsW gmFn+cJheoIRo9+UBd2yapkf0CMa3eddMQvyBk4pZA2aGyZ6OeFbST6ABh7wrZQbs4qM2Xbyh4KA U6cpi8FYwRanws8VIZM= ) ;; AUTHORITY SECTION (5 records) DONOTCALL.GOV. 900 IN NS dns3.l-secb.net. DONOTCALL.GOV. 900 IN NS dns2.l-secb.net. DONOTCALL.GOV. 900 IN NS dns1.l-secb.net. DONOTCALL.GOV. 900 IN RRSIG ( NS 8 2 900 20210124233122 20210117233122 53544 donotcall.gov. PYyJKwsNIzoaOcTnKTfFJPJ3wmeI2UAx47vqvd8AwHqy9JuH5OVWbqEJAd7dZ7BBK+kLPGx9HjKJ wa9grRNfW38FglBRQhZNdjvphkusRS751sR4/GMKCGhCzGdOX32KIiWlysnR+DYi6T3HNNs8Ggvy +jgKoa0h1IplcqCXYZ8= ) DONOTCALL.GOV. 900 IN RRSIG ( NS 8 2 900 20210125232703 20210118232703 13224 donotcall.gov. Q58pea7ZsdBx4Cz0y+S3y2+yu3A3i+sSF9aSuwFGan79RtYctY7mPwssiDWI2DNgs4fO3RfSEjyr j4jiwJNk5fO0FbkG9ksUNY56nROHOlwUmDf58neF0Lm1lyD6XYD2mR6ddb1NmYuSTeAw+Ie9PAXY 9Qqx9IpTIlsMswrFBTM= ) ;; ADDITIONAL SECTION (7 records) dns1.l-secb.net. 43200 IN A 198.77.70.37 dns2.l-secb.net. 43200 IN A 205.130.212.37 dns3.l-secb.net. 43200 IN A 35.163.67.210 dns1.l-secb.net. 43200 IN AAAA 2001:1900:2268:770:198:77:70:37 dns2.l-secb.net. 43200 IN AAAA 2001:1900:2268:512:205:130:212:37 dns3.l-secb.net. 43200 IN AAAA 2600:1f14:a2e:4b00:35:163:67:210 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns1.l-secb.net for DONOTCALL.GOV/SOA
	Received 980 bytes from 198.77.70.37
	;; Answer received from 198.77.70.37 (980 bytes) ;; HEADER SECTION ;; id = 58649 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DONOTCALL.GOV. IN SOA ;; ANSWER SECTION (3 records) DONOTCALL.GOV. 900 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2020092801 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) DONOTCALL.GOV. 900 IN RRSIG ( SOA 8 2 900 20210124232613 20210117232613 53544 donotcall.gov. kDrp/QJMyLDwcxVPHPf1k2p5vs6vQveKIIDzEhmxpsyj5xM9CsH4PYS1CK+V4416CXexWOIkcawj Z6r4NWU0dj93beTHxKlp/IJ90FlTHC0dQhe0x+XID7HL131N46QEBTf36oTN86FP25flpoSqrDus paVu/z2jZf0wJejoQwg= ) DONOTCALL.GOV. 900 IN RRSIG ( SOA 8 2 900 20210125232536 20210118232536 13224 donotcall.gov. qMmhsg3FlRQq7B3BGiRUxmNZmInsaKXVOV+0oEYNySC4GyhRUG+T8svflgBAEg9iabLUOJGXtsvV 99aue8ZEcWqrQXrykM0kvzkKlSH56cckVPbG2J6xiqJzmFXBAbz/qYpYTRdZnv1bzikq4E0kp66m pe5VRL5LVvD1XhtHMpc= ) ;; AUTHORITY SECTION (5 records) DONOTCALL.GOV. 900 IN NS dns2.l-secb.net. DONOTCALL.GOV. 900 IN NS dns1.l-secb.net. DONOTCALL.GOV. 900 IN NS dns3.l-secb.net. DONOTCALL.GOV. 900 IN RRSIG ( NS 8 2 900 20210124233144 20210117233144 53544 donotcall.gov. sWSvD8o1TMHvNP48tjsdWQmof8QldUQetC4UPJGC5EmdTgXrPCP0vNytDEnTCZU4tuvYT6EB82BU JUACrrg+Fi71Sb9I4fFp5Gwk5fIgpxNDInqwfVqrZez6xl70UJe1G8nXhwTwqoVqco1qVssi0L+g ACyi8ZSrLTI8UXfFA2Y= ) DONOTCALL.GOV. 900 IN RRSIG ( NS 8 2 900 20210125232558 20210118232558 13224 donotcall.gov. NuRPb86kmTDhB9SAWJSJg/QDfxHAUzoqHjK93NT2KG3ql6iCfWLC4WkTWt+3VGFJHZVymzJR7oQv ez+c9o//wGCX8UPDsG5MviEeq4PYzc2L4xy4sJNcK3NQxOtFQs0HFiw/b6+EzD0quLSPXtVQa4df djnyPwLA1kgi1sXOYVM= ) ;; ADDITIONAL SECTION (7 records) dns1.l-secb.net. 43200 IN A 198.77.70.37 dns2.l-secb.net. 43200 IN A 205.130.212.37 dns3.l-secb.net. 43200 IN A 35.163.67.210 dns1.l-secb.net. 43200 IN AAAA 2001:1900:2268:770:198:77:70:37 dns2.l-secb.net. 43200 IN AAAA 2001:1900:2268:512:205:130:212:37 dns3.l-secb.net. 43200 IN AAAA 2600:1f14:a2e:4b00:35:163:67:210 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns3.l-secb.net for DONOTCALL.GOV/A
	Received 404 bytes from 35.163.67.210
	;; Answer received from 35.163.67.210 (404 bytes) ;; HEADER SECTION ;; id = 2569 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DONOTCALL.GOV. IN A ;; ANSWER SECTION (3 records) DONOTCALL.GOV. 30 IN A 52.23.29.251 DONOTCALL.GOV. 30 IN RRSIG ( A 8 2 30 20210124232806 20210117232806 53544 donotcall.gov. IPIXKH4HC2hCKFuT7i/THv2XH0FiUxjYO0F8pqEvYgyfIadyMtUV8XCD+6vLd+tSe6GGtV6Xse3W roAr7CyVXGAgNHZEVqfpvjgqoZN6D7Y1RgtwxJW76mDG6NWwi7e/Y4ihVsGPuDqPFPFGJNHgiZoW hOqaUIZOq7e1m/60o3I= ) DONOTCALL.GOV. 30 IN RRSIG ( A 8 2 30 20210125232524 20210118232524 13224 donotcall.gov. gdnQ7mVmnv7oDxFWIJ867zHl+hj87IwqizK2nHR1Xqp1ixqo/O90CSY/3Bk7PmebFM7nKGIoFFPT 5I/fw9WkfBSIJ2b2ZlQv7zAM6N9RFX/hW3o59ifrPfD1OGu7FV9X0bxNVva2sNtgqS500ndmnLkW hvCdCz0UwoBOgEqXpAc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	DONOTCALL.GOV A RR has value 52.23.29.251
	Found 2 RRSIGs over A RRset
	`DONOTCALL.GOV. 30 IN RRSIG ( A 8 2 30 20210124232806 20210117232806 53544 donotcall.gov. IPIXKH4HC2hCKFuT7i/THv2XH0FiUxjYO0F8pqEvYgyfIadyMtUV8XCD+6vLd+tSe6GGtV6Xse3W roAr7CyVXGAgNHZEVqfpvjgqoZN6D7Y1RgtwxJW76mDG6NWwi7e/Y4ihVsGPuDqPFPFGJNHgiZoW hOqaUIZOq7e1m/60o3I= )`
	`DONOTCALL.GOV. 30 IN RRSIG ( A 8 2 30 20210125232524 20210118232524 13224 donotcall.gov. gdnQ7mVmnv7oDxFWIJ867zHl+hj87IwqizK2nHR1Xqp1ixqo/O90CSY/3Bk7PmebFM7nKGIoFFPT 5I/fw9WkfBSIJ2b2ZlQv7zAM6N9RFX/hW3o59ifrPfD1OGu7FV9X0bxNVva2sNtgqS500ndmnLkW hvCdCz0UwoBOgEqXpAc= )`
	RRSIG=53544 and DNSKEY=53544 verifies the A RRset
	RRSIG=13224 and DNSKEY=13224 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test DONOTCALL.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: