DNSSEC Analyzer - LIBRARYOFCONGRESS.GOV

Domain Name:

Time: 2020-01-24 01:54:42 UTC, NTP stratum 4

Analyzing DNSSEC problems for LIBRARYOFCONGRESS.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to e.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (864 bytes) ;; HEADER SECTION ;; id = 65121 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20200211000000 20200121000000 20326 . UaaPoqlBlRixcabCWMJ9jVvevx+Sp8W5rMt06Tozfg/gefIspEKxw4fx22mRaAQZzdHq9Lt+Who4 YpUX95CDrgDYtYJ9NOyICRNlWnY9FNqOW0AreCmEK0qqS52xYb72hJYpFrCILGLD6jl4Ar0LFi29 iXnVLQ99+SvD8PPHHkEiIu1WhlES7taEavtbKijyjLYXwagQxSQCzMgkbWN1+S78kJGZEMaBODTZ uiiGIw5Jy3OPAQxHQyLTElR5ZuEg59/sSnTCEfmoXcxG9/g6O1qWs6d9hDVadKfXhHr8OTXGoB25 Ttp3CyZGdSqRkCwwJpWJ9SlaL+khcJoLFqwm8w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20200211000000 20200121000000 20326 . UaaPoqlBlRixcabCWMJ9jVvevx+Sp8W5rMt06Tozfg/gefIspEKxw4fx22mRaAQZzdHq9Lt+Who4 YpUX95CDrgDYtYJ9NOyICRNlWnY9FNqOW0AreCmEK0qqS52xYb72hJYpFrCILGLD6jl4Ar0LFi29 iXnVLQ99+SvD8PPHHkEiIu1WhlES7taEavtbKijyjLYXwagQxSQCzMgkbWN1+S78kJGZEMaBODTZ uiiGIw5Jy3OPAQxHQyLTElR5ZuEg59/sSnTCEfmoXcxG9/g6O1qWs6d9hDVadKfXhHr8OTXGoB25 Ttp3CyZGdSqRkCwwJpWJ9SlaL+khcJoLFqwm8w== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=33853 is now in the chain-of-trust
	Query to j.root-servers.net for LIBRARYOFCONGRESS.GOV/A
	Received 676 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (676 bytes) ;; HEADER SECTION ;; id = 14713 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; LIBRARYOFCONGRESS.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20200205210000 20200123200000 33853 . E8bXIRY/E4muIOIyh32DOOnDAO/l7iJdkhdafopb1FB9x6ZhiTe5rp9HMhfIVyBFjE+AiB+d/vqw 6BnkhYEYMz077bogygAJKFTveIeGxB0246XW0HKavT92Tzy2W6vKt5YD8n08a0gp0nOdltZ9mE2c CRNCtUexhIkoY6BY3fiKBmO4D9UmHmm+BSjjv2+ewq46b3PhQKXCRQU3iA2SYrns3qKjDn2BJwh+ UVx4JfB8fFrw2BZLZZl0UZQg3s6TBw004Kz5w+1b8hNyNAZXrC1o1EgMu93nIlsXm6vqK/05UwCw yS30q091C2gSSqh9DROwF/iXxaLt9oTj41vjhg== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to i.root-servers.net for GOV/DNSKEY
	Error querying i.root-servers.net/2001:7fe:0:0:0:0:0:53 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 661 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (661 bytes) ;; HEADER SECTION ;; id = 18905 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20200205210000 20200123200000 33853 . E8bXIRY/E4muIOIyh32DOOnDAO/l7iJdkhdafopb1FB9x6ZhiTe5rp9HMhfIVyBFjE+AiB+d/vqw 6BnkhYEYMz077bogygAJKFTveIeGxB0246XW0HKavT92Tzy2W6vKt5YD8n08a0gp0nOdltZ9mE2c CRNCtUexhIkoY6BY3fiKBmO4D9UmHmm+BSjjv2+ewq46b3PhQKXCRQU3iA2SYrns3qKjDn2BJwh+ UVx4JfB8fFrw2BZLZZl0UZQg3s6TBw004Kz5w+1b8hNyNAZXrC1o1EgMu93nIlsXm6vqK/05UwCw yS30q091C2gSSqh9DROwF/iXxaLt9oTj41vjhg== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to d.root-servers.net for GOV/DS
	Error querying d.root-servers.net/2001:500:2d:0:0:0:0:d for GOV/DS: 'IPv6 transport disabled'
	Received 403 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (403 bytes) ;; HEADER SECTION ;; id = 57220 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20200205210000 20200123200000 33853 . E8bXIRY/E4muIOIyh32DOOnDAO/l7iJdkhdafopb1FB9x6ZhiTe5rp9HMhfIVyBFjE+AiB+d/vqw 6BnkhYEYMz077bogygAJKFTveIeGxB0246XW0HKavT92Tzy2W6vKt5YD8n08a0gp0nOdltZ9mE2c CRNCtUexhIkoY6BY3fiKBmO4D9UmHmm+BSjjv2+ewq46b3PhQKXCRQU3iA2SYrns3qKjDn2BJwh+ UVx4JfB8fFrw2BZLZZl0UZQg3s6TBw004Kz5w+1b8hNyNAZXrC1o1EgMu93nIlsXm6vqK/05UwCw yS30q091C2gSSqh9DROwF/iXxaLt9oTj41vjhg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20200205210000 20200123200000 33853 . E8bXIRY/E4muIOIyh32DOOnDAO/l7iJdkhdafopb1FB9x6ZhiTe5rp9HMhfIVyBFjE+AiB+d/vqw 6BnkhYEYMz077bogygAJKFTveIeGxB0246XW0HKavT92Tzy2W6vKt5YD8n08a0gp0nOdltZ9mE2c CRNCtUexhIkoY6BY3fiKBmO4D9UmHmm+BSjjv2+ewq46b3PhQKXCRQU3iA2SYrns3qKjDn2BJwh+ UVx4JfB8fFrw2BZLZZl0UZQg3s6TBw004Kz5w+1b8hNyNAZXrC1o1EgMu93nIlsXm6vqK/05UwCw yS30q091C2gSSqh9DROwF/iXxaLt9oTj41vjhg== )`
	RRSIG=33853 and DNSKEY=33853 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to c.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (777 bytes) ;; HEADER SECTION ;; id = 64887 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAdccuiuxqTxvRcMVh4o9DCfREPNTe3hGEklbdV+L99lKySyIzskGLJ6XDBrWgBeY7ZRSOWGQ 2eHdQLN61fRyqWpVLpNzqaIz/UmMP74VPBCz4QXRDkG4hDO3uifCDVs8Jex4TrYT+hGNYmprbsrq dVQCgeeHc7UMKI/SjusQ4uTKgJ9CWt02/AgK+zKFi3LCBVDGnUwE2kUOL1b0MWfT0ks= ) ; Key ID = 36558 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200204200254 20200120195754 7698 gov. AW2ehlTHCkvsoKYTELKLWDsRb5hmUce7lXmZl5v8iXW1lcvUgYHjl4mKrTmw0o/ZQunLH8tjhL2a nbCy8GymuXffQUXpsWfCtMDd1j2lQBL2ECPw418yOOCqTnoRI6DJvvArASkqLeXHX2bAu4/351ug E/d63O3H30850u+Tgakg/vlTpsNCMxNeJExRDBbwCp4VD7PZN75TMmRM4Y4McQsoGiEdDCsFJXnV 9SP2S24Y/uKSLySFDQ0qZ41uZUoEZaMclbD3Uh6AFlzapQggME06B8zjfauOHVvpfak1QgzXqDKf kWoOradUBw+7eU1rITOiOmukHsMHNdvjdDoqSA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAdccuiuxqTxvRcMVh4o9DCfREPNTe3hGEklbdV+L99lKySyIzskGLJ6XDBrWgBeY7ZRSOWGQ 2eHdQLN61fRyqWpVLpNzqaIz/UmMP74VPBCz4QXRDkG4hDO3uifCDVs8Jex4TrYT+hGNYmprbsrq dVQCgeeHc7UMKI/SjusQ4uTKgJ9CWt02/AgK+zKFi3LCBVDGnUwE2kUOL1b0MWfT0ks= ) ; Key ID = 36558`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200204200254 20200120195754 7698 gov. AW2ehlTHCkvsoKYTELKLWDsRb5hmUce7lXmZl5v8iXW1lcvUgYHjl4mKrTmw0o/ZQunLH8tjhL2a nbCy8GymuXffQUXpsWfCtMDd1j2lQBL2ECPw418yOOCqTnoRI6DJvvArASkqLeXHX2bAu4/351ug E/d63O3H30850u+Tgakg/vlTpsNCMxNeJExRDBbwCp4VD7PZN75TMmRM4Y4McQsoGiEdDCsFJXnV 9SP2S24Y/uKSLySFDQ0qZ41uZUoEZaMclbD3Uh6AFlzapQggME06B8zjfauOHVvpfak1QgzXqDKf kWoOradUBw+7eU1rITOiOmukHsMHNdvjdDoqSA== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=36558 is now in the chain-of-trust
	Query to d.gov-servers.net for LIBRARYOFCONGRESS.GOV/A
	Error querying d.gov-servers.net/2620:74:29:0:0:0:2:30 for LIBRARYOFCONGRESS.GOV/A: 'IPv6 transport disabled'
	Received 487 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (487 bytes) ;; HEADER SECTION ;; id = 58333 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; LIBRARYOFCONGRESS.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) LIBRARYOFCONGRESS.GOV. 86400 IN NS ns23.loc.GOV. LIBRARYOFCONGRESS.GOV. 86400 IN NS ns21.loc.GOV. LIBRARYOFCONGRESS.GOV. 3600 IN DS ( 64876 8 2 70923a929d01dca2f07d3c4aeed6bcf0196b68d6e198e4b0b23605e3e1e20106 ) LIBRARYOFCONGRESS.GOV. 3600 IN DS ( 22510 8 2 ed95939c969c52d7cd21f6d0a050b0d39e08f6bbe52c9dad62799fca541f9f71 ) LIBRARYOFCONGRESS.GOV. 3600 IN DS ( 64876 8 1 128b227b80dc325c3e7640a5d7077dcd81dc4791 ) LIBRARYOFCONGRESS.GOV. 3600 IN DS ( 22510 8 1 b77ae2f07a579c393a8ff896ba577c101d1bcedb ) LIBRARYOFCONGRESS.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200130221007 20200123221007 36558 gov. QBF5uCnog+ki1vq+AQp5u4f86/hX06kw9M6XwjV6hk6CdllkLFzGCe24Du2qEoUnIQt7M/Y05fLI Xwo4jM8I+FcY/0kOSiTFM648dXOJ9zTKoRJzQxWveqbaE4jc7KWeFw7wJbZMreJnte6C7YPbu/1f yGS32aA8ifGDbPF5Cigp9tPvLpqBMf0CrSDprku2th2NWzQi0w2Iwt7KI3/1vA== ) ;; ADDITIONAL SECTION (3 records) ns23.loc.GOV. 86400 IN A 140.147.239.150 ns21.loc.GOV. 86400 IN A 140.147.32.166 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.gov-servers.net for LIBRARYOFCONGRESS.GOV/DNSKEY
	Received 487 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (487 bytes) ;; HEADER SECTION ;; id = 51150 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; LIBRARYOFCONGRESS.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) LIBRARYOFCONGRESS.GOV. 86400 IN NS ns23.loc.GOV. LIBRARYOFCONGRESS.GOV. 86400 IN NS ns21.loc.GOV. LIBRARYOFCONGRESS.GOV. 3600 IN DS ( 64876 8 2 70923a929d01dca2f07d3c4aeed6bcf0196b68d6e198e4b0b23605e3e1e20106 ) LIBRARYOFCONGRESS.GOV. 3600 IN DS ( 22510 8 2 ed95939c969c52d7cd21f6d0a050b0d39e08f6bbe52c9dad62799fca541f9f71 ) LIBRARYOFCONGRESS.GOV. 3600 IN DS ( 64876 8 1 128b227b80dc325c3e7640a5d7077dcd81dc4791 ) LIBRARYOFCONGRESS.GOV. 3600 IN DS ( 22510 8 1 b77ae2f07a579c393a8ff896ba577c101d1bcedb ) LIBRARYOFCONGRESS.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200130221007 20200123221007 36558 gov. QBF5uCnog+ki1vq+AQp5u4f86/hX06kw9M6XwjV6hk6CdllkLFzGCe24Du2qEoUnIQt7M/Y05fLI Xwo4jM8I+FcY/0kOSiTFM648dXOJ9zTKoRJzQxWveqbaE4jc7KWeFw7wJbZMreJnte6C7YPbu/1f yGS32aA8ifGDbPF5Cigp9tPvLpqBMf0CrSDprku2th2NWzQi0w2Iwt7KI3/1vA== ) ;; ADDITIONAL SECTION (3 records) ns23.loc.GOV. 86400 IN A 140.147.239.150 ns21.loc.GOV. 86400 IN A 140.147.32.166 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone LIBRARYOFCONGRESS.GOV

LIBRARYOFCONGRESS.GOV

	Checking DS between GOV and LIBRARYOFCONGRESS.GOV
	Query to a.gov-servers.net for LIBRARYOFCONGRESS.GOV/DS
	Error querying a.gov-servers.net/2001:500:4431:0:0:0:2:30 for LIBRARYOFCONGRESS.GOV/DS: 'IPv6 transport disabled'
	Received 413 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (413 bytes) ;; HEADER SECTION ;; id = 30158 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; LIBRARYOFCONGRESS.GOV. IN DS ;; ANSWER SECTION (5 records) LIBRARYOFCONGRESS.GOV. 3600 IN DS ( 64876 8 2 70923a929d01dca2f07d3c4aeed6bcf0196b68d6e198e4b0b23605e3e1e20106 ) LIBRARYOFCONGRESS.GOV. 3600 IN DS ( 22510 8 2 ed95939c969c52d7cd21f6d0a050b0d39e08f6bbe52c9dad62799fca541f9f71 ) LIBRARYOFCONGRESS.GOV. 3600 IN DS ( 64876 8 1 128b227b80dc325c3e7640a5d7077dcd81dc4791 ) LIBRARYOFCONGRESS.GOV. 3600 IN DS ( 22510 8 1 b77ae2f07a579c393a8ff896ba577c101d1bcedb ) LIBRARYOFCONGRESS.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200130221007 20200123221007 36558 gov. QBF5uCnog+ki1vq+AQp5u4f86/hX06kw9M6XwjV6hk6CdllkLFzGCe24Du2qEoUnIQt7M/Y05fLI Xwo4jM8I+FcY/0kOSiTFM648dXOJ9zTKoRJzQxWveqbaE4jc7KWeFw7wJbZMreJnte6C7YPbu/1f yGS32aA8ifGDbPF5Cigp9tPvLpqBMf0CrSDprku2th2NWzQi0w2Iwt7KI3/1vA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for LIBRARYOFCONGRESS.GOV in the GOV zone
	DS=64876/SHA-256 has algorithm RSASHA256
	DS=22510/SHA-256 has algorithm RSASHA256
	DS=64876/SHA-1 has algorithm RSASHA256
	DS=22510/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`LIBRARYOFCONGRESS.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200130221007 20200123221007 36558 gov. QBF5uCnog+ki1vq+AQp5u4f86/hX06kw9M6XwjV6hk6CdllkLFzGCe24Du2qEoUnIQt7M/Y05fLI Xwo4jM8I+FcY/0kOSiTFM648dXOJ9zTKoRJzQxWveqbaE4jc7KWeFw7wJbZMreJnte6C7YPbu/1f yGS32aA8ifGDbPF5Cigp9tPvLpqBMf0CrSDprku2th2NWzQi0w2Iwt7KI3/1vA== )`
	RRSIG=36558 and DNSKEY=36558 verifies the DS RRset
	DS=64876/SHA-256 is now in the chain-of-trust
	DS=22510/SHA-256 is now in the chain-of-trust
	`LIBRARYOFCONGRESS.GOV. 3600 IN DS ( 64876 8 2 70923a929d01dca2f07d3c4aeed6bcf0196b68d6e198e4b0b23605e3e1e20106 )`
	`LIBRARYOFCONGRESS.GOV. 3600 IN DS ( 22510 8 2 ed95939c969c52d7cd21f6d0a050b0d39e08f6bbe52c9dad62799fca541f9f71 )`
	`LIBRARYOFCONGRESS.GOV. 3600 IN DS ( 64876 8 1 128b227b80dc325c3e7640a5d7077dcd81dc4791 )`
	`LIBRARYOFCONGRESS.GOV. 3600 IN DS ( 22510 8 1 b77ae2f07a579c393a8ff896ba577c101d1bcedb )`
	Query to ns23.loc.GOV for LIBRARYOFCONGRESS.GOV/DNSKEY
	Received 1878 bytes from 140.147.239.150
	;; Answer received from 140.147.239.150 (1878 bytes) ;; HEADER SECTION ;; id = 6238 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; LIBRARYOFCONGRESS.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) LIBRARYOFCONGRESS.GOV. 172800 IN DNSKEY ( 257 3 8 AwEAAZfn3sYKpudVV1c7xgeSqfZQnxfp5mPiAlgIvfrTtGPC0PYz7SRpW5+vIDMoUoqFSNFCVfBP PxJZ2sHhME9sBmZLoRA+tw/UWTbo51AfXedB5I+MUmXis5cG5Tngki9MG96oiUq2Zs7UWLo+aCOX ++DVaUKE9cIebXdmo7255mNvH8k2W/UvbeBzoIzArts1ByMu4eNCA8g71sKP795caArFIljkdDig 77hGZ4ejlYbZSRI80YVFAjbLEyvinX40yXqz2CG1kIXjyUsN69roTQaSPHigW6BjKuvoHyHdOe6B h73DBCB5mjqsrdaH0jWcI1c/gPHrH5h85rE60NhLCrU= ) ; Key ID = 64876 LIBRARYOFCONGRESS.GOV. 172800 IN DNSKEY ( 257 3 8 AwEAAdrusilYZyJr7jYQ9x/iekRmMmjioYQ+FtgGQE77pw1CAUVYVU9C+wpygG04oTSLRFpvaaaH Yz3Nd9VPJY8Pd83C+8wRzcZW0frJiuqO2JJb4fdFU2jaUVQ9vCtDpE/cwSI4c68qDCknOI4fnM12 o+sKHUxMagnO4lVphO4bjBrvgZBwmMd65fuP/9Ya3M8BKZONId8CJx3yy2YSz4JQLn32F57grIHQ NIqh6MpTQTnHt5JiwGFHPjD+yrZX+tcOEOsyE7nM9FrRvBqlJN/PeOFeJKtNlTVQaD+pEFkhiZQa FV7l54Ut+7ASoKH7ohaQLOYANhIAHka3/KWKvjyDLjE= ) ; Key ID = 22510 LIBRARYOFCONGRESS.GOV. 172800 IN DNSKEY ( 256 3 8 AwEAAd+CKRPOXXq+VyiQep174AY8N7A81vNBPTM+4pP1r3sgOH+Xydj9dV0jIEJbwuwWI/mHgB6I jyVl6rhv1LmF4GrpOu+t7ZmBTfDmhspItIAXy6uoFfm5Bi88DDJQsO2ZLU9Y1XTn5rBy3oqc6wgx FGM3JGhgAuJV+F+fc05ehNFj ) ; Key ID = 51015 LIBRARYOFCONGRESS.GOV. 172800 IN DNSKEY ( 256 3 8 AwEAAc5wWx19axrM8XBnNX5d1+cCa+Q8mW8afVGZJRXwipF2bbK48QqZbm8fzlzX3hYuHk2v0Xrw eP9EaKe8S53dCciKZkDdLEVmT063EAtoNxQcTw3fyTnJFK6cmPp2QMJ6fdQvlt+EyqIOwLy1K450 ASUkQjw80z1ASlzQXTDApYyx ) ; Key ID = 10845 LIBRARYOFCONGRESS.GOV. 172800 IN RRSIG ( DNSKEY 8 2 172800 20200127181958 20200123181501 10845 libraryofcongress.gov. G+JO6khIX5+QhNNbE00ckdD217nsddMzrdfm8LHN3AsTksF8DD+0Qe49j9qjiV7BLMC44BAddR0r 2kX/zNINu0Vbnxy6Q7WEk4g8QJWWTEqiaqm+KUfdp9I08xgxNCQ6vn/XMRUofJz5eXAkDcx7U9HG G6n/uQ02pMMOzAegG1U= ) libraryofcongress.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20200127181958 20200123181501 22510 libraryofcongress.gov. PM62gK/6qKF5IoSAGBwZOh9O66nmn1/ejXS+5of8h89+4Oc7UUHBQSkLwODWbUUwV70srKUxq61S 8yviEu9xP5MPZFq/JBxmffxEmslVQ+QyyeBzST2LjNdPT5owJZvF25hhqjncxD+5jTtdPX6nXgKU N5PkTolF4yzD0B9o6WOdyjrk/NMkvpjM736brJ9neoCH0I+0EZwKu9XcfjHpAN18KBnM1QlNW8gK MNCfZZleOn35DKr9BQNgEhnM7b+umpo7gvBOLi9fqif+RB/bMpRsqSRtu6RYRVeF2cHiyFLZHfj1 HpZkret0fNW3Wa4c4OKmR2x0HYYZf9auHN8wQw== ) libraryofcongress.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20200127181958 20200123181501 51015 libraryofcongress.gov. o3GHyWV5r8IVyq2RcM17aznDBbijZxaPwccstSfolwEi6fgr39ra26//Fdh4cNvswLTmyklV33V8 swZcBaZKv7NnzHz2IOV8dbd+URg369/SGP6tQWHqAuZ8rDe7JJ09McsvGTIk1VHNi6UZDfXeklxY U+47tNxEJbkzDeorEUo= ) libraryofcongress.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20200127181958 20200123181501 64876 libraryofcongress.gov. Z5MbE3xHyfAjO/lRdfbonA7GrYc1yxA65/TJp3B/jTf/6VoVMVGQovq9PC4pPMWZOB9NMXalVxfs et+cUOhUAlSHFoCyLjYUVOg7ZflqbVDPmdA6d6AJ0LIJRUGLYD0aHs+DAWBWJ+4kzwngwPUXKMGG z1mOkzww5EvyH9rc4TFWvXYOFFeCL9bVbZlxjJgBEL69u8o+CmFJwdGFLp+psfHHNWuJwkmQ0di2 BjatUrZc7mI85u/8GXo2EgqEN1s02I3uizluPObo0lQMUk/WtWIfzD1yRWLxvpr2l9ja8zNjMBVQ NPVMXtDl57lxtJSlOTguNH6HXpcdXodpwckWog== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for LIBRARYOFCONGRESS.GOV
	`LIBRARYOFCONGRESS.GOV. 172800 IN DNSKEY ( 257 3 8 AwEAAZfn3sYKpudVV1c7xgeSqfZQnxfp5mPiAlgIvfrTtGPC0PYz7SRpW5+vIDMoUoqFSNFCVfBP PxJZ2sHhME9sBmZLoRA+tw/UWTbo51AfXedB5I+MUmXis5cG5Tngki9MG96oiUq2Zs7UWLo+aCOX ++DVaUKE9cIebXdmo7255mNvH8k2W/UvbeBzoIzArts1ByMu4eNCA8g71sKP795caArFIljkdDig 77hGZ4ejlYbZSRI80YVFAjbLEyvinX40yXqz2CG1kIXjyUsN69roTQaSPHigW6BjKuvoHyHdOe6B h73DBCB5mjqsrdaH0jWcI1c/gPHrH5h85rE60NhLCrU= ) ; Key ID = 64876`
	`LIBRARYOFCONGRESS.GOV. 172800 IN DNSKEY ( 257 3 8 AwEAAdrusilYZyJr7jYQ9x/iekRmMmjioYQ+FtgGQE77pw1CAUVYVU9C+wpygG04oTSLRFpvaaaH Yz3Nd9VPJY8Pd83C+8wRzcZW0frJiuqO2JJb4fdFU2jaUVQ9vCtDpE/cwSI4c68qDCknOI4fnM12 o+sKHUxMagnO4lVphO4bjBrvgZBwmMd65fuP/9Ya3M8BKZONId8CJx3yy2YSz4JQLn32F57grIHQ NIqh6MpTQTnHt5JiwGFHPjD+yrZX+tcOEOsyE7nM9FrRvBqlJN/PeOFeJKtNlTVQaD+pEFkhiZQa FV7l54Ut+7ASoKH7ohaQLOYANhIAHka3/KWKvjyDLjE= ) ; Key ID = 22510`
	`LIBRARYOFCONGRESS.GOV. 172800 IN DNSKEY ( 256 3 8 AwEAAd+CKRPOXXq+VyiQep174AY8N7A81vNBPTM+4pP1r3sgOH+Xydj9dV0jIEJbwuwWI/mHgB6I jyVl6rhv1LmF4GrpOu+t7ZmBTfDmhspItIAXy6uoFfm5Bi88DDJQsO2ZLU9Y1XTn5rBy3oqc6wgx FGM3JGhgAuJV+F+fc05ehNFj ) ; Key ID = 51015`
	`LIBRARYOFCONGRESS.GOV. 172800 IN DNSKEY ( 256 3 8 AwEAAc5wWx19axrM8XBnNX5d1+cCa+Q8mW8afVGZJRXwipF2bbK48QqZbm8fzlzX3hYuHk2v0Xrw eP9EaKe8S53dCciKZkDdLEVmT063EAtoNxQcTw3fyTnJFK6cmPp2QMJ6fdQvlt+EyqIOwLy1K450 ASUkQjw80z1ASlzQXTDApYyx ) ; Key ID = 10845`
	DNSKEY=64876/SEP is now in the chain-of-trust
	DS=64876/SHA-256 verifies DNSKEY=64876/SEP
	DS=64876/SHA-1 verifies DNSKEY=64876/SEP
	DNSKEY=22510/SEP is now in the chain-of-trust
	DS=22510/SHA-256 verifies DNSKEY=22510/SEP
	DS=22510/SHA-1 verifies DNSKEY=22510/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`LIBRARYOFCONGRESS.GOV. 172800 IN RRSIG ( DNSKEY 8 2 172800 20200127181958 20200123181501 10845 libraryofcongress.gov. G+JO6khIX5+QhNNbE00ckdD217nsddMzrdfm8LHN3AsTksF8DD+0Qe49j9qjiV7BLMC44BAddR0r 2kX/zNINu0Vbnxy6Q7WEk4g8QJWWTEqiaqm+KUfdp9I08xgxNCQ6vn/XMRUofJz5eXAkDcx7U9HG G6n/uQ02pMMOzAegG1U= )`
	`libraryofcongress.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20200127181958 20200123181501 22510 libraryofcongress.gov. PM62gK/6qKF5IoSAGBwZOh9O66nmn1/ejXS+5of8h89+4Oc7UUHBQSkLwODWbUUwV70srKUxq61S 8yviEu9xP5MPZFq/JBxmffxEmslVQ+QyyeBzST2LjNdPT5owJZvF25hhqjncxD+5jTtdPX6nXgKU N5PkTolF4yzD0B9o6WOdyjrk/NMkvpjM736brJ9neoCH0I+0EZwKu9XcfjHpAN18KBnM1QlNW8gK MNCfZZleOn35DKr9BQNgEhnM7b+umpo7gvBOLi9fqif+RB/bMpRsqSRtu6RYRVeF2cHiyFLZHfj1 HpZkret0fNW3Wa4c4OKmR2x0HYYZf9auHN8wQw== )`
	`libraryofcongress.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20200127181958 20200123181501 51015 libraryofcongress.gov. o3GHyWV5r8IVyq2RcM17aznDBbijZxaPwccstSfolwEi6fgr39ra26//Fdh4cNvswLTmyklV33V8 swZcBaZKv7NnzHz2IOV8dbd+URg369/SGP6tQWHqAuZ8rDe7JJ09McsvGTIk1VHNi6UZDfXeklxY U+47tNxEJbkzDeorEUo= )`
	`libraryofcongress.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20200127181958 20200123181501 64876 libraryofcongress.gov. Z5MbE3xHyfAjO/lRdfbonA7GrYc1yxA65/TJp3B/jTf/6VoVMVGQovq9PC4pPMWZOB9NMXalVxfs et+cUOhUAlSHFoCyLjYUVOg7ZflqbVDPmdA6d6AJ0LIJRUGLYD0aHs+DAWBWJ+4kzwngwPUXKMGG z1mOkzww5EvyH9rc4TFWvXYOFFeCL9bVbZlxjJgBEL69u8o+CmFJwdGFLp+psfHHNWuJwkmQ0di2 BjatUrZc7mI85u/8GXo2EgqEN1s02I3uizluPObo0lQMUk/WtWIfzD1yRWLxvpr2l9ja8zNjMBVQ NPVMXtDl57lxtJSlOTguNH6HXpcdXodpwckWog== )`
	RRSIG=10845 and DNSKEY=10845 verifies the DNSKEY RRset
	RRSIG=22510 and DNSKEY=22510/SEP verifies the DNSKEY RRset
	RRSIG=51015 and DNSKEY=51015 verifies the DNSKEY RRset
	RRSIG=64876 and DNSKEY=64876/SEP verifies the DNSKEY RRset
	DNSKEY=51015 is now in the chain-of-trust
	DNSKEY=10845 is now in the chain-of-trust
	Query to ns21.loc.GOV for LIBRARYOFCONGRESS.GOV/A
	Received 428 bytes from 140.147.32.166
	;; Answer received from 140.147.32.166 (428 bytes) ;; HEADER SECTION ;; id = 21884 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; LIBRARYOFCONGRESS.GOV. IN A ;; ANSWER SECTION (3 records) LIBRARYOFCONGRESS.GOV. 7200 IN A 140.147.137.166 LIBRARYOFCONGRESS.GOV. 7200 IN RRSIG ( A 8 2 7200 20200127020230 20200123020212 10845 libraryofcongress.gov. t4KZuPhy2nWoaOvy4CjMQy1+naFgU1HimrEVS3KQGj9DYEgSo9mCPhklyzNU+NNDdi8Vw2ZwBXSV qXDZdnUiK1MmHBAShUeHo7HbzFEYtzmB5SrkTxOr9fjEJ6XPtkOznseEZCGgjnkFyb4h56tzWI4E v9D8KYSjEiDfGAK6fnc= ) libraryofcongress.gov. 7200 IN RRSIG ( A 8 2 7200 20200127020230 20200123020212 51015 libraryofcongress.gov. HWZ9mtlPbUhTAkFmRZqSSFP29nxfdG8JwBJkO8lQ728eShCnBf7Jy6OPx5p+VRhFA6nSXbBCeXC7 uKJFWXhk1RCYoZu3gtEq59gdXR+DnVbkC4Wx2/t/MDfXh5pOCIxXTb1efB+DEhtr+3BlAXKH0yfC oozsglYNcmLfVK4SWEw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	LIBRARYOFCONGRESS.GOV is authoritative for LIBRARYOFCONGRESS.GOV
	Found RRSIG signed by libraryofcongress.gov zone
	Query to ns21.loc.GOV for LIBRARYOFCONGRESS.GOV/SOA
	Received 466 bytes from 140.147.32.166
	;; Answer received from 140.147.32.166 (466 bytes) ;; HEADER SECTION ;; id = 43783 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; LIBRARYOFCONGRESS.GOV. IN SOA ;; ANSWER SECTION (3 records) LIBRARYOFCONGRESS.GOV. 7200 IN SOA ( ns12.loc.GOV. root.rs1.loc.GOV. 2006093253 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) LIBRARYOFCONGRESS.GOV. 7200 IN RRSIG ( SOA 8 2 7200 20200127225302 20200123215302 10845 libraryofcongress.gov. c1jMg7YmKhRqs5NwGCMzOAImIpOuQm6Uq+xFQ6r0QLMD4K0VfVAzf4XQKyMT6l7FCrFTXsTNjqSf atpCL366GpJJ99k2DQtytNxNhpuxi9V3GXWusv61NJuhqJJ0y8NZH+0YFW3fDmuYZUFxo1vRhkrU TgeheLM61op5lVLbCps= ) libraryofcongress.gov. 7200 IN RRSIG ( SOA 8 2 7200 20200127225302 20200123215302 51015 libraryofcongress.gov. FSVVi0Q5Zvh5Z4XSOv92bMY5n8egMmAYBuPvewTr6r6LJcr3InL8bkIBOF8wFMZ7Hqtm1/D8yUjb 36VouLmB5NDnnZIQGHrpZ56tq6zWGXxfTptzHQQEsF5PhQyj7Nv2uRa13TeQlxoVUtQc9YY1o66+ d699jMC3wd+B+fob7e0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns23.loc.GOV for LIBRARYOFCONGRESS.GOV/SOA
	Received 466 bytes from 140.147.239.150
	;; Answer received from 140.147.239.150 (466 bytes) ;; HEADER SECTION ;; id = 4591 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; LIBRARYOFCONGRESS.GOV. IN SOA ;; ANSWER SECTION (3 records) LIBRARYOFCONGRESS.GOV. 7200 IN SOA ( ns12.loc.GOV. root.rs1.loc.GOV. 2006093253 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) LIBRARYOFCONGRESS.GOV. 7200 IN RRSIG ( SOA 8 2 7200 20200127225302 20200123215302 10845 libraryofcongress.gov. c1jMg7YmKhRqs5NwGCMzOAImIpOuQm6Uq+xFQ6r0QLMD4K0VfVAzf4XQKyMT6l7FCrFTXsTNjqSf atpCL366GpJJ99k2DQtytNxNhpuxi9V3GXWusv61NJuhqJJ0y8NZH+0YFW3fDmuYZUFxo1vRhkrU TgeheLM61op5lVLbCps= ) libraryofcongress.gov. 7200 IN RRSIG ( SOA 8 2 7200 20200127225302 20200123215302 51015 libraryofcongress.gov. FSVVi0Q5Zvh5Z4XSOv92bMY5n8egMmAYBuPvewTr6r6LJcr3InL8bkIBOF8wFMZ7Hqtm1/D8yUjb 36VouLmB5NDnnZIQGHrpZ56tq6zWGXxfTptzHQQEsF5PhQyj7Nv2uRa13TeQlxoVUtQc9YY1o66+ d699jMC3wd+B+fob7e0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns21.loc.GOV for LIBRARYOFCONGRESS.GOV/A
	Received 428 bytes from 140.147.32.166
	;; Answer received from 140.147.32.166 (428 bytes) ;; HEADER SECTION ;; id = 35923 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; LIBRARYOFCONGRESS.GOV. IN A ;; ANSWER SECTION (3 records) LIBRARYOFCONGRESS.GOV. 7200 IN A 140.147.137.166 LIBRARYOFCONGRESS.GOV. 7200 IN RRSIG ( A 8 2 7200 20200127020230 20200123020212 10845 libraryofcongress.gov. t4KZuPhy2nWoaOvy4CjMQy1+naFgU1HimrEVS3KQGj9DYEgSo9mCPhklyzNU+NNDdi8Vw2ZwBXSV qXDZdnUiK1MmHBAShUeHo7HbzFEYtzmB5SrkTxOr9fjEJ6XPtkOznseEZCGgjnkFyb4h56tzWI4E v9D8KYSjEiDfGAK6fnc= ) libraryofcongress.gov. 7200 IN RRSIG ( A 8 2 7200 20200127020230 20200123020212 51015 libraryofcongress.gov. HWZ9mtlPbUhTAkFmRZqSSFP29nxfdG8JwBJkO8lQ728eShCnBf7Jy6OPx5p+VRhFA6nSXbBCeXC7 uKJFWXhk1RCYoZu3gtEq59gdXR+DnVbkC4Wx2/t/MDfXh5pOCIxXTb1efB+DEhtr+3BlAXKH0yfC oozsglYNcmLfVK4SWEw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	LIBRARYOFCONGRESS.GOV A RR has value 140.147.137.166
	Found 2 RRSIGs over A RRset
	`LIBRARYOFCONGRESS.GOV. 7200 IN RRSIG ( A 8 2 7200 20200127020230 20200123020212 10845 libraryofcongress.gov. t4KZuPhy2nWoaOvy4CjMQy1+naFgU1HimrEVS3KQGj9DYEgSo9mCPhklyzNU+NNDdi8Vw2ZwBXSV qXDZdnUiK1MmHBAShUeHo7HbzFEYtzmB5SrkTxOr9fjEJ6XPtkOznseEZCGgjnkFyb4h56tzWI4E v9D8KYSjEiDfGAK6fnc= )`
	`libraryofcongress.gov. 7200 IN RRSIG ( A 8 2 7200 20200127020230 20200123020212 51015 libraryofcongress.gov. HWZ9mtlPbUhTAkFmRZqSSFP29nxfdG8JwBJkO8lQ728eShCnBf7Jy6OPx5p+VRhFA6nSXbBCeXC7 uKJFWXhk1RCYoZu3gtEq59gdXR+DnVbkC4Wx2/t/MDfXh5pOCIxXTb1efB+DEhtr+3BlAXKH0yfC oozsglYNcmLfVK4SWEw= )`
	RRSIG=10845 and DNSKEY=10845 verifies the A RRset
	RRSIG=51015 and DNSKEY=51015 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test LIBRARYOFCONGRESS.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: