DNSSEC Analyzer - MAKINGHOMEAFFORDABLE.GOV

Domain Name:

Time: 2020-01-26 06:47:41 UTC, NTP stratum 4

Analyzing DNSSEC problems for MAKINGHOMEAFFORDABLE.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to m.root-servers.net for ./DNSKEY
	Received 864 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (864 bytes) ;; HEADER SECTION ;; id = 24635 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20200211000000 20200121000000 20326 . UaaPoqlBlRixcabCWMJ9jVvevx+Sp8W5rMt06Tozfg/gefIspEKxw4fx22mRaAQZzdHq9Lt+Who4 YpUX95CDrgDYtYJ9NOyICRNlWnY9FNqOW0AreCmEK0qqS52xYb72hJYpFrCILGLD6jl4Ar0LFi29 iXnVLQ99+SvD8PPHHkEiIu1WhlES7taEavtbKijyjLYXwagQxSQCzMgkbWN1+S78kJGZEMaBODTZ uiiGIw5Jy3OPAQxHQyLTElR5ZuEg59/sSnTCEfmoXcxG9/g6O1qWs6d9hDVadKfXhHr8OTXGoB25 Ttp3CyZGdSqRkCwwJpWJ9SlaL+khcJoLFqwm8w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20200211000000 20200121000000 20326 . UaaPoqlBlRixcabCWMJ9jVvevx+Sp8W5rMt06Tozfg/gefIspEKxw4fx22mRaAQZzdHq9Lt+Who4 YpUX95CDrgDYtYJ9NOyICRNlWnY9FNqOW0AreCmEK0qqS52xYb72hJYpFrCILGLD6jl4Ar0LFi29 iXnVLQ99+SvD8PPHHkEiIu1WhlES7taEavtbKijyjLYXwagQxSQCzMgkbWN1+S78kJGZEMaBODTZ uiiGIw5Jy3OPAQxHQyLTElR5ZuEg59/sSnTCEfmoXcxG9/g6O1qWs6d9hDVadKfXhHr8OTXGoB25 Ttp3CyZGdSqRkCwwJpWJ9SlaL+khcJoLFqwm8w== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=33853 is now in the chain-of-trust
	Query to j.root-servers.net for MAKINGHOMEAFFORDABLE.GOV/A
	Error querying j.root-servers.net/2001:503:c27:0:0:0:2:30 for MAKINGHOMEAFFORDABLE.GOV/A: 'IPv6 transport disabled'
	Received 679 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (679 bytes) ;; HEADER SECTION ;; id = 31103 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; MAKINGHOMEAFFORDABLE.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20200208050000 20200126040000 33853 . NLmwwnjZExz+EkEUyxEbPAiKq1uHPuPI1eLI3ff+F+kM9bbBsOOBaRvKYTaOinrRgR8+DgfNbvEW K5vvCoqrSFRpFVwGfRE5PyTeKoAF+JwjqFkkef7PwoX1P6AA//GFGSPob4/Z1X6/jYbuJOsz/Be9 JkesAHd/+0pQVlbhbiq6SxTj7H+vJ+qWIHzNLWzYUH2Z1hdZWzZKF+xPamdihqpwDEYBWoKqDgoD RP9EzYZxmPuGdi3/MPC53C1IwmM6ZtRqkfWpugEEL2PArzClZKu4wk1ymMEmH3oNEipgukfE0mhu kNNENAYoTsRJdWvoqe3MTxZH1ZrRUTdXaARYdg== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to e.root-servers.net for GOV/DNSKEY
	Error querying e.root-servers.net/2001:500:a8:0:0:0:0:e for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 658 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (658 bytes) ;; HEADER SECTION ;; id = 17103 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20200208050000 20200126040000 33853 . NLmwwnjZExz+EkEUyxEbPAiKq1uHPuPI1eLI3ff+F+kM9bbBsOOBaRvKYTaOinrRgR8+DgfNbvEW K5vvCoqrSFRpFVwGfRE5PyTeKoAF+JwjqFkkef7PwoX1P6AA//GFGSPob4/Z1X6/jYbuJOsz/Be9 JkesAHd/+0pQVlbhbiq6SxTj7H+vJ+qWIHzNLWzYUH2Z1hdZWzZKF+xPamdihqpwDEYBWoKqDgoD RP9EzYZxmPuGdi3/MPC53C1IwmM6ZtRqkfWpugEEL2PArzClZKu4wk1ymMEmH3oNEipgukfE0mhu kNNENAYoTsRJdWvoqe3MTxZH1ZrRUTdXaARYdg== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to a.root-servers.net for GOV/DS
	Error querying a.root-servers.net/2001:503:ba3e:0:0:0:2:30 for GOV/DS: 'IPv6 transport disabled'
	Received 403 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (403 bytes) ;; HEADER SECTION ;; id = 11449 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20200208050000 20200126040000 33853 . NLmwwnjZExz+EkEUyxEbPAiKq1uHPuPI1eLI3ff+F+kM9bbBsOOBaRvKYTaOinrRgR8+DgfNbvEW K5vvCoqrSFRpFVwGfRE5PyTeKoAF+JwjqFkkef7PwoX1P6AA//GFGSPob4/Z1X6/jYbuJOsz/Be9 JkesAHd/+0pQVlbhbiq6SxTj7H+vJ+qWIHzNLWzYUH2Z1hdZWzZKF+xPamdihqpwDEYBWoKqDgoD RP9EzYZxmPuGdi3/MPC53C1IwmM6ZtRqkfWpugEEL2PArzClZKu4wk1ymMEmH3oNEipgukfE0mhu kNNENAYoTsRJdWvoqe3MTxZH1ZrRUTdXaARYdg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20200208050000 20200126040000 33853 . NLmwwnjZExz+EkEUyxEbPAiKq1uHPuPI1eLI3ff+F+kM9bbBsOOBaRvKYTaOinrRgR8+DgfNbvEW K5vvCoqrSFRpFVwGfRE5PyTeKoAF+JwjqFkkef7PwoX1P6AA//GFGSPob4/Z1X6/jYbuJOsz/Be9 JkesAHd/+0pQVlbhbiq6SxTj7H+vJ+qWIHzNLWzYUH2Z1hdZWzZKF+xPamdihqpwDEYBWoKqDgoD RP9EzYZxmPuGdi3/MPC53C1IwmM6ZtRqkfWpugEEL2PArzClZKu4wk1ymMEmH3oNEipgukfE0mhu kNNENAYoTsRJdWvoqe3MTxZH1ZrRUTdXaARYdg== )`
	RRSIG=33853 and DNSKEY=33853 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to b.gov-servers.net for GOV/DNSKEY
	Error querying b.gov-servers.net/2620:74:27:0:0:0:2:30 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 777 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (777 bytes) ;; HEADER SECTION ;; id = 18862 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAdccuiuxqTxvRcMVh4o9DCfREPNTe3hGEklbdV+L99lKySyIzskGLJ6XDBrWgBeY7ZRSOWGQ 2eHdQLN61fRyqWpVLpNzqaIz/UmMP74VPBCz4QXRDkG4hDO3uifCDVs8Jex4TrYT+hGNYmprbsrq dVQCgeeHc7UMKI/SjusQ4uTKgJ9CWt02/AgK+zKFi3LCBVDGnUwE2kUOL1b0MWfT0ks= ) ; Key ID = 36558 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200204200254 20200120195754 7698 gov. AW2ehlTHCkvsoKYTELKLWDsRb5hmUce7lXmZl5v8iXW1lcvUgYHjl4mKrTmw0o/ZQunLH8tjhL2a nbCy8GymuXffQUXpsWfCtMDd1j2lQBL2ECPw418yOOCqTnoRI6DJvvArASkqLeXHX2bAu4/351ug E/d63O3H30850u+Tgakg/vlTpsNCMxNeJExRDBbwCp4VD7PZN75TMmRM4Y4McQsoGiEdDCsFJXnV 9SP2S24Y/uKSLySFDQ0qZ41uZUoEZaMclbD3Uh6AFlzapQggME06B8zjfauOHVvpfak1QgzXqDKf kWoOradUBw+7eU1rITOiOmukHsMHNdvjdDoqSA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAdccuiuxqTxvRcMVh4o9DCfREPNTe3hGEklbdV+L99lKySyIzskGLJ6XDBrWgBeY7ZRSOWGQ 2eHdQLN61fRyqWpVLpNzqaIz/UmMP74VPBCz4QXRDkG4hDO3uifCDVs8Jex4TrYT+hGNYmprbsrq dVQCgeeHc7UMKI/SjusQ4uTKgJ9CWt02/AgK+zKFi3LCBVDGnUwE2kUOL1b0MWfT0ks= ) ; Key ID = 36558`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200204200254 20200120195754 7698 gov. AW2ehlTHCkvsoKYTELKLWDsRb5hmUce7lXmZl5v8iXW1lcvUgYHjl4mKrTmw0o/ZQunLH8tjhL2a nbCy8GymuXffQUXpsWfCtMDd1j2lQBL2ECPw418yOOCqTnoRI6DJvvArASkqLeXHX2bAu4/351ug E/d63O3H30850u+Tgakg/vlTpsNCMxNeJExRDBbwCp4VD7PZN75TMmRM4Y4McQsoGiEdDCsFJXnV 9SP2S24Y/uKSLySFDQ0qZ41uZUoEZaMclbD3Uh6AFlzapQggME06B8zjfauOHVvpfak1QgzXqDKf kWoOradUBw+7eU1rITOiOmukHsMHNdvjdDoqSA== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=36558 is now in the chain-of-trust
	Query to d.gov-servers.net for MAKINGHOMEAFFORDABLE.GOV/A
	Error querying d.gov-servers.net/2620:74:29:0:0:0:2:30 for MAKINGHOMEAFFORDABLE.GOV/A: 'IPv6 transport disabled'
	Received 465 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (465 bytes) ;; HEADER SECTION ;; id = 1097 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MAKINGHOMEAFFORDABLE.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) MAKINGHOMEAFFORDABLE.GOV. 86400 IN NS ns3.treasury.GOV. MAKINGHOMEAFFORDABLE.GOV. 86400 IN NS ns1.treasury.GOV. MAKINGHOMEAFFORDABLE.GOV. 3600 IN DS ( 42834 7 1 5310aa0e7cfafec6b48f539b65ed004f565826b0 ) MAKINGHOMEAFFORDABLE.GOV. 3600 IN DS ( 42834 7 2 822e1507723b231a61586f66f2c019a4814435bdc7d31418f6b8ea7bbd0f828a ) MAKINGHOMEAFFORDABLE.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200202041008 20200126041008 36558 gov. tMJYw1fgBaLlZPTmwTh88XuVMIWG2XX87ukkgVJFTyUlUc15GX5AIOVawRCxEwb6UK6eBMajEoZL ETyvHjtOEcBDZvdj0kpRJDpTSUeldRJV8dGAx9hvu4HOwtb6Iy1Rh27eGFaaz1T9UlY19nUELaYv jjwwq2p2f4HYxRqWv0InaKC1CvZz1lmjuA3XN0a+5VaUUq0gm830mSbdXV7wRA== ) ;; ADDITIONAL SECTION (5 records) ns3.treasury.GOV. 86400 IN A 164.95.95.155 ns3.treasury.GOV. 86400 IN AAAA 2610:108:3000:100a::155 ns1.treasury.GOV. 86400 IN A 166.123.208.249 ns1.treasury.GOV. 86400 IN AAAA 2610:108:4000:100a::249 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.gov-servers.net for MAKINGHOMEAFFORDABLE.GOV/DNSKEY
	Error querying b.gov-servers.net/2620:74:27:0:0:0:2:30 for MAKINGHOMEAFFORDABLE.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 465 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (465 bytes) ;; HEADER SECTION ;; id = 63325 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MAKINGHOMEAFFORDABLE.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) MAKINGHOMEAFFORDABLE.GOV. 86400 IN NS ns3.treasury.GOV. MAKINGHOMEAFFORDABLE.GOV. 86400 IN NS ns1.treasury.GOV. MAKINGHOMEAFFORDABLE.GOV. 3600 IN DS ( 42834 7 1 5310aa0e7cfafec6b48f539b65ed004f565826b0 ) MAKINGHOMEAFFORDABLE.GOV. 3600 IN DS ( 42834 7 2 822e1507723b231a61586f66f2c019a4814435bdc7d31418f6b8ea7bbd0f828a ) MAKINGHOMEAFFORDABLE.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200202041008 20200126041008 36558 gov. tMJYw1fgBaLlZPTmwTh88XuVMIWG2XX87ukkgVJFTyUlUc15GX5AIOVawRCxEwb6UK6eBMajEoZL ETyvHjtOEcBDZvdj0kpRJDpTSUeldRJV8dGAx9hvu4HOwtb6Iy1Rh27eGFaaz1T9UlY19nUELaYv jjwwq2p2f4HYxRqWv0InaKC1CvZz1lmjuA3XN0a+5VaUUq0gm830mSbdXV7wRA== ) ;; ADDITIONAL SECTION (5 records) ns3.treasury.GOV. 86400 IN A 164.95.95.155 ns3.treasury.GOV. 86400 IN AAAA 2610:108:3000:100a::155 ns1.treasury.GOV. 86400 IN A 166.123.208.249 ns1.treasury.GOV. 86400 IN AAAA 2610:108:4000:100a::249 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone MAKINGHOMEAFFORDABLE.GOV

MAKINGHOMEAFFORDABLE.GOV

	Checking DS between GOV and MAKINGHOMEAFFORDABLE.GOV
	Query to b.gov-servers.net for MAKINGHOMEAFFORDABLE.GOV/DS
	Error querying b.gov-servers.net/2620:74:27:0:0:0:2:30 for MAKINGHOMEAFFORDABLE.GOV/DS: 'IPv6 transport disabled'
	Received 332 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (332 bytes) ;; HEADER SECTION ;; id = 20867 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MAKINGHOMEAFFORDABLE.GOV. IN DS ;; ANSWER SECTION (3 records) MAKINGHOMEAFFORDABLE.GOV. 3600 IN DS ( 42834 7 1 5310aa0e7cfafec6b48f539b65ed004f565826b0 ) MAKINGHOMEAFFORDABLE.GOV. 3600 IN DS ( 42834 7 2 822e1507723b231a61586f66f2c019a4814435bdc7d31418f6b8ea7bbd0f828a ) MAKINGHOMEAFFORDABLE.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200202041008 20200126041008 36558 gov. tMJYw1fgBaLlZPTmwTh88XuVMIWG2XX87ukkgVJFTyUlUc15GX5AIOVawRCxEwb6UK6eBMajEoZL ETyvHjtOEcBDZvdj0kpRJDpTSUeldRJV8dGAx9hvu4HOwtb6Iy1Rh27eGFaaz1T9UlY19nUELaYv jjwwq2p2f4HYxRqWv0InaKC1CvZz1lmjuA3XN0a+5VaUUq0gm830mSbdXV7wRA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for MAKINGHOMEAFFORDABLE.GOV in the GOV zone
	DS=42834/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=42834/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`MAKINGHOMEAFFORDABLE.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200202041008 20200126041008 36558 gov. tMJYw1fgBaLlZPTmwTh88XuVMIWG2XX87ukkgVJFTyUlUc15GX5AIOVawRCxEwb6UK6eBMajEoZL ETyvHjtOEcBDZvdj0kpRJDpTSUeldRJV8dGAx9hvu4HOwtb6Iy1Rh27eGFaaz1T9UlY19nUELaYv jjwwq2p2f4HYxRqWv0InaKC1CvZz1lmjuA3XN0a+5VaUUq0gm830mSbdXV7wRA== )`
	RRSIG=36558 and DNSKEY=36558 verifies the DS RRset
	DS=42834/SHA-1 is now in the chain-of-trust
	`MAKINGHOMEAFFORDABLE.GOV. 3600 IN DS ( 42834 7 1 5310aa0e7cfafec6b48f539b65ed004f565826b0 )`
	`MAKINGHOMEAFFORDABLE.GOV. 3600 IN DS ( 42834 7 2 822e1507723b231a61586f66f2c019a4814435bdc7d31418f6b8ea7bbd0f828a )`
	Query to ns3.treasury.GOV for MAKINGHOMEAFFORDABLE.GOV/DNSKEY
	Received 1049 bytes from 164.95.95.155
	;; Answer received from 164.95.95.155 (1049 bytes) ;; HEADER SECTION ;; id = 46188 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MAKINGHOMEAFFORDABLE.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) MAKINGHOMEAFFORDABLE.GOV. 3600 IN DNSKEY ( 257 3 7 AwEAAbrghzd+ftf3B2uprehXXTE/U+GsIwXvgCgRZ/OYUTJ0oQ1hP/YVsSjmZk8EGofIE6+krv6W +iXsUkS4yfqSlSitapgt0wHNzvfpOKgJkXy7qgEnz+J4dGf1B9Ex/bScsvc+ZliYBvKtR7lSVU0h eJ6Xy6fDXvp3h06aje3zorXx ) ; Key ID = 42834 MAKINGHOMEAFFORDABLE.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAcouHPWQ+JFdse/xgQVtyw0Qg3cU7A5zD2v+69V/ppp2i8i4bqB2WgfF3IulYkE/+aqtN7p2 xTN0KlxsrJw3Ffrun4uVWaPlLuGy2tFOQ8UeIxbR/tRd06OxBQ7mfJRHjytl18FQUUw0B2Oirno8 6fop8fabEqY43Oc+O3Q/N8pB ) ; Key ID = 54698 MAKINGHOMEAFFORDABLE.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAcIl1wVLAyj6R9ao/SVsxKggCBivDWy1ybyG9vevsqBDwrvm0GtKVDd/qatsknWjsTvPf1KY TBJPJy7X6a9ImqA2u0h68NXKLqVEn0h5yIDBUi92e7isuSA/cLQly8LbAPdaOOxWxNkvANSJLfV6 fquPHNG9z+d19hVkkDcPfmop ) ; Key ID = 55817 MAKINGHOMEAFFORDABLE.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20200202003821 20200126003821 42834 makinghomeaffordable.gov. XLR1zM0gdD003kFZkUWbbcwFN+KlolCL8lopxOXuNEwAZY2v64omhZW1xcJ1SolffJyhA9CzHG6+ MIQ91WvE152h1iB9p8E3O4YqwkJjB82s1pcuxVHimKVWUpXJbaNgQUz30L2+2DTLTGXLv+tBjufa vS1v2dYq/jGwsisj8eA= ) MAKINGHOMEAFFORDABLE.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20200202003821 20200126003821 54698 makinghomeaffordable.gov. EhbnHBstq3t3OPWK4yMETOlct9VsL14gIH9JOMmTdyFqma1+rAHTlF4/KBvBsvzAJhhiDW59wjQF oYt4PGohWJ45nRarFzdJ8zK96XcE2kKsvCf2zzzIBjjOGYusZxifLftJ9koqmSE1CBQ9HaWbFjpy cnxEjCudZbtXEK5nIks= ) MAKINGHOMEAFFORDABLE.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20200202003821 20200126003821 55817 makinghomeaffordable.gov. BBkS82SRG1u+E1GgDyZBdsT3MSOjpF7i7/Rgf6wmcxuMhJvfkWZGS6YrHuNexW/sjV9fRFFRsl8f f4W/6f49Eg6EYFgEDxJVgVkBU8NmSsaL9eavyGxL66O+/XmrjFv7b7jFDECkCAv5yRkm9An8AzeZ hfaURfWmy8BTJoXl7Gs= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for MAKINGHOMEAFFORDABLE.GOV
	`MAKINGHOMEAFFORDABLE.GOV. 3600 IN DNSKEY ( 257 3 7 AwEAAbrghzd+ftf3B2uprehXXTE/U+GsIwXvgCgRZ/OYUTJ0oQ1hP/YVsSjmZk8EGofIE6+krv6W +iXsUkS4yfqSlSitapgt0wHNzvfpOKgJkXy7qgEnz+J4dGf1B9Ex/bScsvc+ZliYBvKtR7lSVU0h eJ6Xy6fDXvp3h06aje3zorXx ) ; Key ID = 42834`
	`MAKINGHOMEAFFORDABLE.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAcouHPWQ+JFdse/xgQVtyw0Qg3cU7A5zD2v+69V/ppp2i8i4bqB2WgfF3IulYkE/+aqtN7p2 xTN0KlxsrJw3Ffrun4uVWaPlLuGy2tFOQ8UeIxbR/tRd06OxBQ7mfJRHjytl18FQUUw0B2Oirno8 6fop8fabEqY43Oc+O3Q/N8pB ) ; Key ID = 54698`
	`MAKINGHOMEAFFORDABLE.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAcIl1wVLAyj6R9ao/SVsxKggCBivDWy1ybyG9vevsqBDwrvm0GtKVDd/qatsknWjsTvPf1KY TBJPJy7X6a9ImqA2u0h68NXKLqVEn0h5yIDBUi92e7isuSA/cLQly8LbAPdaOOxWxNkvANSJLfV6 fquPHNG9z+d19hVkkDcPfmop ) ; Key ID = 55817`
	DNSKEY=42834/SEP is now in the chain-of-trust
	DS=42834/SHA-1 verifies DNSKEY=42834/SEP
	DS=42834/SHA-256 verifies DNSKEY=42834/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`MAKINGHOMEAFFORDABLE.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20200202003821 20200126003821 42834 makinghomeaffordable.gov. XLR1zM0gdD003kFZkUWbbcwFN+KlolCL8lopxOXuNEwAZY2v64omhZW1xcJ1SolffJyhA9CzHG6+ MIQ91WvE152h1iB9p8E3O4YqwkJjB82s1pcuxVHimKVWUpXJbaNgQUz30L2+2DTLTGXLv+tBjufa vS1v2dYq/jGwsisj8eA= )`
	`MAKINGHOMEAFFORDABLE.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20200202003821 20200126003821 54698 makinghomeaffordable.gov. EhbnHBstq3t3OPWK4yMETOlct9VsL14gIH9JOMmTdyFqma1+rAHTlF4/KBvBsvzAJhhiDW59wjQF oYt4PGohWJ45nRarFzdJ8zK96XcE2kKsvCf2zzzIBjjOGYusZxifLftJ9koqmSE1CBQ9HaWbFjpy cnxEjCudZbtXEK5nIks= )`
	`MAKINGHOMEAFFORDABLE.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20200202003821 20200126003821 55817 makinghomeaffordable.gov. BBkS82SRG1u+E1GgDyZBdsT3MSOjpF7i7/Rgf6wmcxuMhJvfkWZGS6YrHuNexW/sjV9fRFFRsl8f f4W/6f49Eg6EYFgEDxJVgVkBU8NmSsaL9eavyGxL66O+/XmrjFv7b7jFDECkCAv5yRkm9An8AzeZ hfaURfWmy8BTJoXl7Gs= )`
	RRSIG=42834 and DNSKEY=42834/SEP verifies the DNSKEY RRset
	RRSIG=54698 and DNSKEY=54698 verifies the DNSKEY RRset
	RRSIG=55817 and DNSKEY=55817 verifies the DNSKEY RRset
	DNSKEY=54698 is now in the chain-of-trust
	DNSKEY=55817 is now in the chain-of-trust
	Query to ns1.treasury.GOV for MAKINGHOMEAFFORDABLE.GOV/A
	Error querying ns1.treasury.GOV/2610:108:4000:100a:0:0:0:249 for MAKINGHOMEAFFORDABLE.GOV/A: 'IPv6 transport disabled'
	Received 437 bytes from 166.123.208.249
	;; Answer received from 166.123.208.249 (437 bytes) ;; HEADER SECTION ;; id = 46673 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MAKINGHOMEAFFORDABLE.GOV. IN A ;; ANSWER SECTION (3 records) MAKINGHOMEAFFORDABLE.GOV. 2 IN A 166.123.218.220 MAKINGHOMEAFFORDABLE.GOV. 2 IN RRSIG ( A 7 2 2 20200129141107 20200122141107 54698 makinghomeaffordable.gov. HrQV9MDbVKbr0Ip58qHmx2Mx+QbTH5IkmVMZUkY49nk9xHanJNChhYRV+Bc93Hd9fgRqRRDOLmeR tetDoORouZROTSBnTQl1lHQz43YraS6LxBoJTfsdUcoivtt44f7Nc5difbe8iKTCT2TAWTstmWOl c2WZV52bgouJLHopTlg= ) MAKINGHOMEAFFORDABLE.GOV. 2 IN RRSIG ( A 7 2 2 20200202004652 20200126004652 55817 makinghomeaffordable.gov. JqZvBfGDK0OGJzij3xMisZcnCZHSzYg9Sb/8eVI3T7a1zDqUK+R0Qd6eeiFDXeLiRb66qFC8TLl4 fmu5IvJdZJEe96R9tZCWpc5JcMycF3BBUs/8If8STED5w7fHm+vul9MsTF6Yo2fkDzvpFW26oSGr OXTG1MqVlikgIFcVdb4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	MAKINGHOMEAFFORDABLE.GOV is authoritative for MAKINGHOMEAFFORDABLE.GOV
	Found RRSIG signed by makinghomeaffordable.gov zone
	Query to ns3.treasury.GOV for MAKINGHOMEAFFORDABLE.GOV/SOA
	Error querying ns3.treasury.GOV/2610:108:3000:100a:0:0:0:155 for MAKINGHOMEAFFORDABLE.GOV/SOA: 'IPv6 transport disabled'
	Received 1665 bytes from 164.95.95.155
	;; Answer received from 164.95.95.155 (1665 bytes) ;; HEADER SECTION ;; id = 38271 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MAKINGHOMEAFFORDABLE.GOV. IN SOA ;; ANSWER SECTION (3 records) MAKINGHOMEAFFORDABLE.GOV. 28800 IN SOA ( ns1.treasury.GOV. webadmin.bpd.treas.GOV. 2009032847 ;serial 10800 ;refresh 1080 ;retry 1209600 ;expire 1800 ;minimum ) MAKINGHOMEAFFORDABLE.GOV. 28800 IN RRSIG ( SOA 7 2 28800 20200131144343 20200124144343 54698 makinghomeaffordable.gov. b/SlVuF+SCWDdI3AUmcWZxkNDDTBBTNsnwbKxB3crf0qDycWWMOf/xzx/hSy/LBkHElJfGAOA+4T QyfpY+YoeHIbpD4abyA3Hh9yCUfIj1m9ECC+6PPTcCKQ4vDh6Kwjoj3xrqSCDk6Hs1sHABQoVOIJ sGMxiaz6vXEsdI7hLAc= ) MAKINGHOMEAFFORDABLE.GOV. 28800 IN RRSIG ( SOA 7 2 28800 20200202044120 20200126044120 55817 makinghomeaffordable.gov. s3cMHWDwgLuU914UtqygnfsZpSi7DbvviS1VypuylAmMw7hcXZOYnkf0S62xyu6G12DCy+TfZRTg d882uDIjdh/ksRpu2IvXh5RvyhZj6cghw8iSaOPHlRV2o2EMytxJzacuCBtuLjNF0ZT7QC7BwCTI pRf7e7Ff7jisq85gYAc= ) ;; AUTHORITY SECTION (4 records) MAKINGHOMEAFFORDABLE.GOV. 28800 IN NS ns3.treasury.GOV. MAKINGHOMEAFFORDABLE.GOV. 28800 IN NS ns1.treasury.GOV. MAKINGHOMEAFFORDABLE.GOV. 28800 IN RRSIG ( NS 7 2 28800 20200131033707 20200124033707 54698 makinghomeaffordable.gov. jdUmP+D9eVusnKP6TdzmxmoQ/Nk4LjSwvMuF3T924YrQUFuqHByztNjAwxS21NeINnoFJ20JxLE/ LZFD5pWihNcnkWQW/oNYKyjAfG3UuS8OT7AQtnbPUAPDiJpGVk4IVMDh9/Ma0FFM6SNJyiG50tCO CUDEAF2z5E2ADx5oyro= ) MAKINGHOMEAFFORDABLE.GOV. 28800 IN RRSIG ( NS 7 2 28800 20200202011240 20200126011240 55817 makinghomeaffordable.gov. hcm7ZMD/n9//hLgAn/PQRWcBz3zE/dTB3+qqnYfArvmFSkHlLm6v8XKXcTOVVUarQshUdlnylNkQ kSoL6LOg47EsMGzZ/XGpzG58H3AJTZJgJz4fpIwy2Crab+tWEmU5YWMjlGZFLpKJ+7id/loMwKxI KxGhek6J2VUR3m+DF8E= ) ;; ADDITIONAL SECTION (9 records) ns3.treasury.GOV. 300 IN A 164.95.95.155 ns3.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20200201065943 20200125065943 31562 treasury.gov. PgLpSWDleSHaSAEndpFdEhcBPOe64XpPaKP4Md5CFW/glVxHUTEhv4KwlldEyH1p/foa1qAmeMtU /2eFL4R2PYQAtSnc6DGkUYkONrHAFqODpLzmuB9aQbvy6ySgmes+UmQqB/A0w3+lwxJUlHKHyDlJ 3raPGVZIDA8Qpap+ub4= ) ns3.treasury.GOV. 300 IN AAAA 2610:108:3000:100a::155 ns3.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20200201065943 20200125065943 31562 treasury.gov. m5woU8npp5YCIBtRy1TC62lqqCawp1/6KQkuAf71i1sXPDsKC4+UVmylKyoqrt1zmaoYtxFhK3Xr wkrW+aPG9UolokR8zswlMU8BL7/+rC9BowH6Oy0mCy/06+WRTadAsStSVrjy/7M2sy2xrJuqy0Nk fVBCH0al6H8tSztitDQ= ) ns1.treasury.GOV. 300 IN A 166.123.208.249 ns1.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20200201065943 20200125065943 31562 treasury.gov. JnkbYnUp/TM4pGQmfqmL09dRMKf1mwzFpDf2j+aDUl0vxVNCu9U0mzBtiWy/hOROkydyLTVuGb8B ZfDfGDlV8+fmqSXNSRyAP43bOhxBZY/n5LSDKxFMOzQRzca7uWwBdAby6D5z66BeTncN8I6lD2Dn jSjilUcN3lVz8Fxw+A8= ) ns1.treasury.GOV. 300 IN AAAA 2610:108:4000:100a::249 ns1.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20200201065943 20200125065943 31562 treasury.gov. NN6/zEdNmKVteXy66euayNEwX5GmLuUd/pbuxkdMuFvWJ+8QbyoFGeDdADKjkMmzPrWqyBfgCkFr O0YbW3NutSxlkFMINzML1cHr3wXrIFbD7pC/aHRN3f3TTIUtMQHD1XE4tnH2O99BaBW9gKjoYSuK lqf2wQbTq6hZWAYAL1k= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.treasury.GOV for MAKINGHOMEAFFORDABLE.GOV/SOA
	Error querying ns1.treasury.GOV/2610:108:4000:100a:0:0:0:249 for MAKINGHOMEAFFORDABLE.GOV/SOA: 'IPv6 transport disabled'
	Received 1665 bytes from 166.123.208.249
	;; Answer received from 166.123.208.249 (1665 bytes) ;; HEADER SECTION ;; id = 44888 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MAKINGHOMEAFFORDABLE.GOV. IN SOA ;; ANSWER SECTION (3 records) MAKINGHOMEAFFORDABLE.GOV. 28800 IN SOA ( ns1.treasury.GOV. webadmin.bpd.treas.GOV. 2009032847 ;serial 10800 ;refresh 1080 ;retry 1209600 ;expire 1800 ;minimum ) MAKINGHOMEAFFORDABLE.GOV. 28800 IN RRSIG ( SOA 7 2 28800 20200130183332 20200123183332 54698 makinghomeaffordable.gov. gNgcQ8jGWhbeA7imGxnQkG2os+hEmrslyf/ghi2Z0maejb5mCieZMyWgjqBxcq13TO0t3JrTeyF7 dKGxrp1uQ6XuAyj8aP87Tzi2XSY97m3ZWco0wDEH0h5BhK47sJd17Qp3G8QbBKFtP47x0N/c6X8i 0Gf63FzqE07d0GPUGwM= ) MAKINGHOMEAFFORDABLE.GOV. 28800 IN RRSIG ( SOA 7 2 28800 20200202044120 20200126044120 55817 makinghomeaffordable.gov. s3cMHWDwgLuU914UtqygnfsZpSi7DbvviS1VypuylAmMw7hcXZOYnkf0S62xyu6G12DCy+TfZRTg d882uDIjdh/ksRpu2IvXh5RvyhZj6cghw8iSaOPHlRV2o2EMytxJzacuCBtuLjNF0ZT7QC7BwCTI pRf7e7Ff7jisq85gYAc= ) ;; AUTHORITY SECTION (4 records) MAKINGHOMEAFFORDABLE.GOV. 28800 IN NS ns3.treasury.GOV. MAKINGHOMEAFFORDABLE.GOV. 28800 IN NS ns1.treasury.GOV. MAKINGHOMEAFFORDABLE.GOV. 28800 IN RRSIG ( NS 7 2 28800 20200129155748 20200122155748 54698 makinghomeaffordable.gov. GFHS3O6sPo1mSPVKJNv+b/hIUq0Jck3ckOr+TNA/ts9WfQH5MyJTfJTHiL0pNdTB03Iq4l5a5CJk QfqC3eYEDskUQDAzvfaUahaXjV4DQZuosRE88BwplMK9QLiis82yZrK88M1tr305bswv6wca1B5O MotC3hNPKWNx3dPVABo= ) MAKINGHOMEAFFORDABLE.GOV. 28800 IN RRSIG ( NS 7 2 28800 20200202030643 20200126030643 55817 makinghomeaffordable.gov. DZa8hihcr082X0nccTXHhWAMA+B66x48M8KByeqofG7IJ4izs/0MBfB9MmvW/uTaYwk+IcPW9DIj KWr6FBS2lKt/FkCpx3/ZP+uSrKuaSkBnxUG4yxMRzJr8EofNhXyTPTVjmz08x+Nxia3wwFMnbNnI CSD4IwkhbtoX9l6mVSM= ) ;; ADDITIONAL SECTION (9 records) ns3.treasury.GOV. 300 IN A 164.95.95.155 ns3.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20200129134155 20200122134155 31562 treasury.gov. PGffBhTopwOQtBUuYk/XcIuUNeKf4ro8WqNj2u9IgTX5cU1wD4P8f8k6M1dVCGo6IPJctGoeSPvh xl2/XkH89ziut1OF7krbNvBmlK4NfCHch8mijFNz5fT7AY4iVE2gaO8J81sYvU+iuQdY4h1svyo3 gMBiG59ghAb8meRYRPk= ) ns3.treasury.GOV. 300 IN AAAA 2610:108:3000:100a::155 ns3.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20200129134155 20200122134155 31562 treasury.gov. inzafH8eZLVXp+T7H83qIcy3TENej1/R8x1mziPyWSHzr75ZpFJnFgZ3do8U+s8y+3DFTQhfN/Q9 WViOjDF+yciMWy+AIKBQS6IEYlqNiv7woTBYW83UfFfO5CoqebfIQBZdhszvNHBL6UUClIYlP6pp qzVI/yfAmtnz1fGOvLY= ) ns1.treasury.GOV. 300 IN A 166.123.208.249 ns1.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20200129134155 20200122134155 31562 treasury.gov. KEOQfI6Kpq6qPbYUyj2bqUYYp4eAtqjf5TLtGeJbRB2dSDyBUNGJlq6pgnw8SWDeDOp0yH8il1as GxpLO4syQAOX6RSGgS14hJ/4OBF+SKYucz39apXzAiBc9EOqQTm1aXNwpFK1B3LyEJHSvNkOCSfT Bjjl+Fs1y5fnYM7U52s= ) ns1.treasury.GOV. 300 IN AAAA 2610:108:4000:100a::249 ns1.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20200129134155 20200122134155 31562 treasury.gov. h5lKByHftGWHl+FvMM4/FvJ4nogX9IIWTFmIHYucW0BoMVKJ4jgoDGti8eWCjnX4PqQvMInh3al4 1KN2y05xWG5K0JW2PnDyVx56icRnFw0C8Onhlxnn0r1gSoBGFDh7UxsTiGr2x+7cR6jN9xokE87p TTsWa6Fnnwzil/Zv4pM= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.treasury.GOV for MAKINGHOMEAFFORDABLE.GOV/A
	Error querying ns1.treasury.GOV/2610:108:4000:100a:0:0:0:249 for MAKINGHOMEAFFORDABLE.GOV/A: 'IPv6 transport disabled'
	Received 437 bytes from 166.123.208.249
	;; Answer received from 166.123.208.249 (437 bytes) ;; HEADER SECTION ;; id = 12507 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MAKINGHOMEAFFORDABLE.GOV. IN A ;; ANSWER SECTION (3 records) MAKINGHOMEAFFORDABLE.GOV. 2 IN A 166.123.218.220 MAKINGHOMEAFFORDABLE.GOV. 2 IN RRSIG ( A 7 2 2 20200129141359 20200122141359 54698 makinghomeaffordable.gov. mucGIfrgBgjd4U+itlHgGxV3qw41oN9j8QKkfIjgRbC99m3xEm1Aej1mXGriHupu/9VGYbCsBCTK fJQQUePqdsmtZ58n9c/2DQCzyOD5QnyboVOzDWaTC0CwPg1T7l3xIZzYq55b/N88FjYuJxStwTTk UDD/VCJV5vU1dzzr16A= ) MAKINGHOMEAFFORDABLE.GOV. 2 IN RRSIG ( A 7 2 2 20200202004646 20200126004646 55817 makinghomeaffordable.gov. GwGyvvAmeXUtukRvZtQXsNvcwnTs5qYfU48t77CeLkNqZ5s8co+/LklXB3k57notR9TBuu62qrCH b87L/ci9RuW1hputMXhpOSbVCUzgGL2xBErnBudzAclNrqkcJeUj6UqwNth/Nk20rmIXEPa83kLD EsCWt8FCwcN7wkWTQ6g= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	MAKINGHOMEAFFORDABLE.GOV A RR has value 166.123.218.220
	Found 2 RRSIGs over A RRset
	`MAKINGHOMEAFFORDABLE.GOV. 2 IN RRSIG ( A 7 2 2 20200129141359 20200122141359 54698 makinghomeaffordable.gov. mucGIfrgBgjd4U+itlHgGxV3qw41oN9j8QKkfIjgRbC99m3xEm1Aej1mXGriHupu/9VGYbCsBCTK fJQQUePqdsmtZ58n9c/2DQCzyOD5QnyboVOzDWaTC0CwPg1T7l3xIZzYq55b/N88FjYuJxStwTTk UDD/VCJV5vU1dzzr16A= )`
	`MAKINGHOMEAFFORDABLE.GOV. 2 IN RRSIG ( A 7 2 2 20200202004646 20200126004646 55817 makinghomeaffordable.gov. GwGyvvAmeXUtukRvZtQXsNvcwnTs5qYfU48t77CeLkNqZ5s8co+/LklXB3k57notR9TBuu62qrCH b87L/ci9RuW1hputMXhpOSbVCUzgGL2xBErnBudzAclNrqkcJeUj6UqwNth/Nk20rmIXEPa83kLD EsCWt8FCwcN7wkWTQ6g= )`
	RRSIG=54698 and DNSKEY=54698 verifies the A RRset
	RRSIG=55817 and DNSKEY=55817 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test MAKINGHOMEAFFORDABLE.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: