DNSSEC Analyzer - NATIONSREPORTCARD.GOV

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2019-04-22 07:02:38 UTC, NTP stratum 4

Analyzing DNSSEC problems for NATIONSREPORTCARD.GOV

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to e.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (864 bytes) ;; HEADER SECTION ;; id = 63573 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190512000000 20190421000000 20326 . ljHKB9UaikaYC1wHzZyFwwibNFjGuwnI3DtVLsnRUwqmq2Er3uaMUYA63Odz4yO1f46zPAOcciVt Xol5oOyci84eGFb/7x6iZpcpIqFP7kWoNTRlQWgJ2V3KHYLr6w3TYiV/eWY7Ziu9HFPV6SLAt6g9 RWgaNwlLUw+fHdmhiAteoXjEBfqNC1je5FtAdPaOB3/aYbUayL4miAo3tsBt8vDzFPOvYVkMHbo4 75Bg1roJfSqxlfKEamGWMwtfnSjmw8htrvi51TBgUOsBBsSGgYWY5/5THwyc8oQDZfi72DiOF2Gr UGjr9yvQIYMuukNAOG8tvAn9PjHlY6pg4XkGUA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DS=19036/SHA-256 is published, but a corresponding DNSKEY is not
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190512000000 20190421000000 20326 . ljHKB9UaikaYC1wHzZyFwwibNFjGuwnI3DtVLsnRUwqmq2Er3uaMUYA63Odz4yO1f46zPAOcciVt Xol5oOyci84eGFb/7x6iZpcpIqFP7kWoNTRlQWgJ2V3KHYLr6w3TYiV/eWY7Ziu9HFPV6SLAt6g9 RWgaNwlLUw+fHdmhiAteoXjEBfqNC1je5FtAdPaOB3/aYbUayL4miAo3tsBt8vDzFPOvYVkMHbo4 75Bg1roJfSqxlfKEamGWMwtfnSjmw8htrvi51TBgUOsBBsSGgYWY5/5THwyc8oQDZfi72DiOF2Gr UGjr9yvQIYMuukNAOG8tvAn9PjHlY6pg4XkGUA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=25266 is now in the chain-of-trust
	Query to f.root-servers.net for NATIONSREPORTCARD.GOV/A
	Received 679 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (679 bytes) ;; HEADER SECTION ;; id = 45351 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; NATIONSREPORTCARD.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20190505050000 20190422040000 25266 . X3KdSnlGqitlfWWDeDtZGCCJU0hOCY9p+q8XLEuy1n1gTtXCZBA1cL9QfeHbTYCqYFnOS5qmTijk Xq5lM77Ru4oYKhByB0kYS+lk+Yptxi4DrNJ5ZkPe2odp2Ct8qMf1b829Vcg59Iat9yimCOoJrnZV ZcIdVc+tSjHLW32TutaMvxPZnHsQtQ7RKzudVdlvw7urNjbN06/NPVLRg7vjfYeK3usGUhgVueXK Q0SohnZTiUVjXhIe3we17+wD21HaZEJiaF6h3zwlm73Mikqj2XUGDAqUxwXKEsSv0FNPV3d+XAvU 2nWx2Osnya9axFx3LOfuUYe0TFRu/YGRuk0SlQ== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to b.root-servers.net for GOV/DNSKEY
	Received 661 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (661 bytes) ;; HEADER SECTION ;; id = 24414 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20190505050000 20190422040000 25266 . X3KdSnlGqitlfWWDeDtZGCCJU0hOCY9p+q8XLEuy1n1gTtXCZBA1cL9QfeHbTYCqYFnOS5qmTijk Xq5lM77Ru4oYKhByB0kYS+lk+Yptxi4DrNJ5ZkPe2odp2Ct8qMf1b829Vcg59Iat9yimCOoJrnZV ZcIdVc+tSjHLW32TutaMvxPZnHsQtQ7RKzudVdlvw7urNjbN06/NPVLRg7vjfYeK3usGUhgVueXK Q0SohnZTiUVjXhIe3we17+wD21HaZEJiaF6h3zwlm73Mikqj2XUGDAqUxwXKEsSv0FNPV3d+XAvU 2nWx2Osnya9axFx3LOfuUYe0TFRu/YGRuk0SlQ== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to b.root-servers.net for GOV/DS
	Error querying b.root-servers.net/2001:500:200:0:0:0:0:b for GOV/DS: 'IPv6 transport disabled'
	Received 406 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (406 bytes) ;; HEADER SECTION ;; id = 56844 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20190505050000 20190422040000 25266 . X3KdSnlGqitlfWWDeDtZGCCJU0hOCY9p+q8XLEuy1n1gTtXCZBA1cL9QfeHbTYCqYFnOS5qmTijk Xq5lM77Ru4oYKhByB0kYS+lk+Yptxi4DrNJ5ZkPe2odp2Ct8qMf1b829Vcg59Iat9yimCOoJrnZV ZcIdVc+tSjHLW32TutaMvxPZnHsQtQ7RKzudVdlvw7urNjbN06/NPVLRg7vjfYeK3usGUhgVueXK Q0SohnZTiUVjXhIe3we17+wD21HaZEJiaF6h3zwlm73Mikqj2XUGDAqUxwXKEsSv0FNPV3d+XAvU 2nWx2Osnya9axFx3LOfuUYe0TFRu/YGRuk0SlQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20190505050000 20190422040000 25266 . X3KdSnlGqitlfWWDeDtZGCCJU0hOCY9p+q8XLEuy1n1gTtXCZBA1cL9QfeHbTYCqYFnOS5qmTijk Xq5lM77Ru4oYKhByB0kYS+lk+Yptxi4DrNJ5ZkPe2odp2Ct8qMf1b829Vcg59Iat9yimCOoJrnZV ZcIdVc+tSjHLW32TutaMvxPZnHsQtQ7RKzudVdlvw7urNjbN06/NPVLRg7vjfYeK3usGUhgVueXK Q0SohnZTiUVjXhIe3we17+wD21HaZEJiaF6h3zwlm73Mikqj2XUGDAqUxwXKEsSv0FNPV3d+XAvU 2nWx2Osnya9axFx3LOfuUYe0TFRu/YGRuk0SlQ== )`
	RRSIG=25266 and DNSKEY=25266 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to c.gov-servers.net for GOV/DNSKEY
	Error querying c.gov-servers.net/2620:74:28:0:0:0:2:30 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 743 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (743 bytes) ;; HEADER SECTION ;; id = 55324 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 256 3 8 AQPO0gfZTyKZiRSwF/XvW9ta+joX/SlCfvNcTsNT4t5edmGhhiRNf45246Z4L6Cx3n93FPHtW91n F+M1gCPyxewRyAM0/UVrqBwutdPQnR8vsQ/WzdsAk50loby/jGN7UAStU/FzllD2qIq4uJ8HcLZW Qth9JV8vKuqVYXgPfhx5lw== ) ; Key ID = 43583 GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190502214731 20190417214231 7698 gov. GjRUnOLfnBAtIlt6hLcfcO1H6NuS90vNTDPZ+AQznOz3HueEqBORAmtN1Yr1z0Bnu7LHCEUVijJN SAfPRqPhwhnwBUWDHBahKuDspOKEJtNHzO5Wag4dk5n9szFVyIf6oWOPc5B0NLZc/9phCu4it24X FOynCwl+G5Fo1bFQaMfoh1CSDwZeq90LFwjLUOOKMMcwHdTVL7DIreDuGsqkFS4ZX5MoqztrUkmj TN9nF9soq7kSUiyPtbGy0c+FgMc8iEE5weI0bYXC2J8msnsFQijTQTPiwZGSIVZD5l74b2uK1SVq rHZULW5BRRnVaAGCEVLU8gTPZS0GRBNWNQcbWQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQPO0gfZTyKZiRSwF/XvW9ta+joX/SlCfvNcTsNT4t5edmGhhiRNf45246Z4L6Cx3n93FPHtW91n F+M1gCPyxewRyAM0/UVrqBwutdPQnR8vsQ/WzdsAk50loby/jGN7UAStU/FzllD2qIq4uJ8HcLZW Qth9JV8vKuqVYXgPfhx5lw== ) ; Key ID = 43583`
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190502214731 20190417214231 7698 gov. GjRUnOLfnBAtIlt6hLcfcO1H6NuS90vNTDPZ+AQznOz3HueEqBORAmtN1Yr1z0Bnu7LHCEUVijJN SAfPRqPhwhnwBUWDHBahKuDspOKEJtNHzO5Wag4dk5n9szFVyIf6oWOPc5B0NLZc/9phCu4it24X FOynCwl+G5Fo1bFQaMfoh1CSDwZeq90LFwjLUOOKMMcwHdTVL7DIreDuGsqkFS4ZX5MoqztrUkmj TN9nF9soq7kSUiyPtbGy0c+FgMc8iEE5weI0bYXC2J8msnsFQijTQTPiwZGSIVZD5l74b2uK1SVq rHZULW5BRRnVaAGCEVLU8gTPZS0GRBNWNQcbWQ== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=43583 is now in the chain-of-trust
	Query to c.gov-servers.net for NATIONSREPORTCARD.GOV/A
	Received 352 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (352 bytes) ;; HEADER SECTION ;; id = 14962 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; NATIONSREPORTCARD.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) NATIONSREPORTCARD.GOV. 86400 IN NS sauthns1.qwest.net. NATIONSREPORTCARD.GOV. 86400 IN NS sauthns2.qwest.net. NATIONSREPORTCARD.GOV. 3600 IN DS ( 20728 7 1 b23258e6d628603d698aa60d620414181fcef79d ) NATIONSREPORTCARD.GOV. 3600 IN DS ( 20728 7 2 3d90b982edc5dac9b861a35a29d493cf95543c8644e2761cbfc92790c643b337 ) NATIONSREPORTCARD.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190428221008 20190421221008 43583 gov. UKJf1/EEvDTwsk57a3ChJ8ygh0OIvO7kZOpsMqqDP9js4hcSJVbh+OKLnpLgXNOiy/TjFKNHzxkk ThbyKfceD74He5neKusQk06E4rm7+6GH0ml2sIPBglO8dtRfnvdPx4KGssLPfkL8Nsp9AYj4PBHZ xiEoIj95fql/y6fIXPc= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to a.gov-servers.net for NATIONSREPORTCARD.GOV/DNSKEY
	Received 436 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (436 bytes) ;; HEADER SECTION ;; id = 43228 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NATIONSREPORTCARD.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) NATIONSREPORTCARD.GOV. 86400 IN NS sauthns1.qwest.net. NATIONSREPORTCARD.GOV. 86400 IN NS sauthns2.qwest.net. NATIONSREPORTCARD.GOV. 3600 IN DS ( 20728 7 1 b23258e6d628603d698aa60d620414181fcef79d ) NATIONSREPORTCARD.GOV. 3600 IN DS ( 60784 7 1 d755096ed801c57542f69f8adb9caa8d4c6afc92 ) NATIONSREPORTCARD.GOV. 3600 IN DS ( 20728 7 2 3d90b982edc5dac9b861a35a29d493cf95543c8644e2761cbfc92790c643b337 ) NATIONSREPORTCARD.GOV. 3600 IN DS ( 60784 7 2 5fc464c696025ce25979cc0a0007373d6ba41729ed1114319fbcd838c17d85d0 ) NATIONSREPORTCARD.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190429041007 20190422041007 43583 gov. kLpYZ3fy6/+d9Pfjg78hF0ZCJqWyTdFCUNZAYzrpKrYxMUjLWdRbX2k8vJ3wasKiHr6KIm0tK8jo +JGqc4Gjp/Jw529EF8wBXd+uLAUcDWbhggRvk2MKq5gOZSiQLeDH3+l4c/vbygPFwMGGY1qsPR9w Lzxj/0ci1NdsA39xdCY= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone NATIONSREPORTCARD.GOV

NATIONSREPORTCARD.GOV

	Checking DS between GOV and NATIONSREPORTCARD.GOV
	Query to c.gov-servers.net for NATIONSREPORTCARD.GOV/DS
	Received 381 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (381 bytes) ;; HEADER SECTION ;; id = 48058 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; NATIONSREPORTCARD.GOV. IN DS ;; ANSWER SECTION (5 records) NATIONSREPORTCARD.GOV. 3600 IN DS ( 20728 7 1 b23258e6d628603d698aa60d620414181fcef79d ) NATIONSREPORTCARD.GOV. 3600 IN DS ( 20728 7 2 3d90b982edc5dac9b861a35a29d493cf95543c8644e2761cbfc92790c643b337 ) NATIONSREPORTCARD.GOV. 3600 IN DS ( 60784 7 1 d755096ed801c57542f69f8adb9caa8d4c6afc92 ) NATIONSREPORTCARD.GOV. 3600 IN DS ( 60784 7 2 5fc464c696025ce25979cc0a0007373d6ba41729ed1114319fbcd838c17d85d0 ) NATIONSREPORTCARD.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190429041007 20190422041007 43583 gov. kLpYZ3fy6/+d9Pfjg78hF0ZCJqWyTdFCUNZAYzrpKrYxMUjLWdRbX2k8vJ3wasKiHr6KIm0tK8jo +JGqc4Gjp/Jw529EF8wBXd+uLAUcDWbhggRvk2MKq5gOZSiQLeDH3+l4c/vbygPFwMGGY1qsPR9w Lzxj/0ci1NdsA39xdCY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 4 DS records for NATIONSREPORTCARD.GOV in the GOV zone
	DS=20728/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=20728/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=60784/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=60784/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`NATIONSREPORTCARD.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190429041007 20190422041007 43583 gov. kLpYZ3fy6/+d9Pfjg78hF0ZCJqWyTdFCUNZAYzrpKrYxMUjLWdRbX2k8vJ3wasKiHr6KIm0tK8jo +JGqc4Gjp/Jw529EF8wBXd+uLAUcDWbhggRvk2MKq5gOZSiQLeDH3+l4c/vbygPFwMGGY1qsPR9w Lzxj/0ci1NdsA39xdCY= )`
	RRSIG=43583 and DNSKEY=43583 verifies the DS RRset
	DS=20728/SHA-1 is now in the chain-of-trust
	DS=60784/SHA-1 is now in the chain-of-trust
	`NATIONSREPORTCARD.GOV. 3600 IN DS ( 20728 7 1 b23258e6d628603d698aa60d620414181fcef79d )`
	`NATIONSREPORTCARD.GOV. 3600 IN DS ( 20728 7 2 3d90b982edc5dac9b861a35a29d493cf95543c8644e2761cbfc92790c643b337 )`
	`NATIONSREPORTCARD.GOV. 3600 IN DS ( 60784 7 1 d755096ed801c57542f69f8adb9caa8d4c6afc92 )`
	`NATIONSREPORTCARD.GOV. 3600 IN DS ( 60784 7 2 5fc464c696025ce25979cc0a0007373d6ba41729ed1114319fbcd838c17d85d0 )`
	Query to sauthns2.qwest.net for NATIONSREPORTCARD.GOV/DNSKEY
	Error querying sauthns2.qwest.net/2001:428:0:0:0:0:0:8 for NATIONSREPORTCARD.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 1409 bytes from 208.44.130.121
	;; Answer received from 208.44.130.121 (1409 bytes) ;; HEADER SECTION ;; id = 36751 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NATIONSREPORTCARD.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) nationsreportcard.gov. 86400 IN DNSKEY ( 256 3 7 AwEAAZX9yhUnRtXnHziyjn7M0mtsccH78kq0oMitAXZcA6TJACqMWyrPpaekF+yClt4wTc8X/spO CWNOD9ThdvRPSHtWLnW7HeRGbUCOD9frzALc+pQmE/NpmQ/QE5WAbLbjHn4isr0h9WK0u90WssFU mzScjORJ21UFGx46yjGvL1CD ) ; Key ID = 35204 nationsreportcard.gov. 86400 IN DNSKEY ( 256 3 7 AwEAAXeHDwfDhD3OTcw9i1GkN/xDmeeNnQK2fS6ZVhCIv0VVoBSYdYteM/BJzyKTvRrVh/uiMRo+ UF+rA5wYGXGibzVaI8XaR7M8swscgly+H7e3Wm/tNRw6/n6w4Cj6sBdvOHrsu7tejnOE3Cvv/1bx AAaIoFLLJz54e9l+OF22TcSV ) ; Key ID = 27245 nationsreportcard.gov. 86400 IN DNSKEY ( 257 3 7 AwEAAY4D8bdNuVbs4tT4jIJfKvsRcM1WulBjZsgzpodniCPWjAgEQxii/iL3vPLLbW/OkhO1UTM4 I6F+kTmwtTv2l9DRw/7qA7VxXBsLAepZwk05orkHE7bJuVlTDyoD7LzzwuXMH7FXJxkTYmVcFrzD +30jaK3vDpkKFS7gbfok1wNtKNZ2XOA6FxP+uzq20/bro3F4B1HZ1fX2nl7qndA0Qz4rr6oLIwVv qHoCuZd9Eh3YT3fP4MlW+1Z4TCYcGm5w43k5YDS4xPLcYZe2NyyK2EEf2zMw6v0q7IGUt5GFl0JE yOPDsY8x++ZU9eea0Cht98CUMEm5xPP7n8PQ191RwDk= ) ; Key ID = 60784 nationsreportcard.gov. 86400 IN DNSKEY ( 257 3 7 AwEAAd2iacpWYJsH+PxWQyq4PWPL/05xiSl0sYmt7aoc6sz8MId5UQabK5Ovz25NbxxVy/RE1YAe Vc8dVUoWFqUlTIxh/rEEjUikxbMM1POO5iyOcnweGltTWJiXnjoNSheGsoBIVDnKeCzYaWipIlic xfvmLobX5/Yw/hOwK8UmbVVL7Vl8Z3s2aYqi2O8AjrQzWtuCXiEWO8aGOrYk4C+aAk72sn3S++1n j0GwsUyJnECHBhMR+NqnXQQxu5IXcI6s0dHY2RIqvvJhds3pLp2pA3jUEtARJ+pJYKQvj4PLxR6/ ozYsSg2W2MSoWEfteLl5xq6ClSr+2zIn0+pV6LR0ZnU= ) ; Key ID = 20728 nationsreportcard.gov. 86400 IN RRSIG ( DNSKEY 7 2 86400 20190429030009 20190422020009 20728 nationsreportcard.gov. XUyShJ8F5JZvAv5ZB3nw2lC208Rw7OjKc6XzwcS/A9C+1zhAMjkZV0iibxZNEKz5FcPzBC2ibjLc be72aFKALnSqowsQWmAYgw+p4HaJEfL/ZmsOKL7DXnrvQMLFZYPJ5j04XO3JMD2jRK+rxR6F265/ oVZLTi7FJzzqWwRgnpUpxqyFL2UdWrixGdnUCfSC1U7l2NcLN4HA0gOAJDnW6Q2H54u4k/pryUbW qRiyS8y5ZE+kmEz2ZGIGDi587Or54w31hnebhENHkgI1Fj4p03WMUWm8qKx8jC5L1EBmOIJYRQ/f K969Fo9emp/8xYzRywj3zUzzIaKhq8zQ35LkIg== ) nationsreportcard.gov. 86400 IN RRSIG ( DNSKEY 7 2 86400 20190429030009 20190422020009 27245 nationsreportcard.gov. W5aqxvxNv4IweFOdiqKC7H4WyFqnqoY3ZBDOVCUGf+9hB5KmGEJePm1E0yYwTTStJTv0zycU3McP +il/g+zUmiflge/ylUQDuykb+mqPqb3Y4bZLEUHwBTg5LZoL4wwxOXCRc04lt5GSI1SryNeiV2+u FiNZyir7CP2ztiOTtyc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for NATIONSREPORTCARD.GOV
	`nationsreportcard.gov. 86400 IN DNSKEY ( 256 3 7 AwEAAZX9yhUnRtXnHziyjn7M0mtsccH78kq0oMitAXZcA6TJACqMWyrPpaekF+yClt4wTc8X/spO CWNOD9ThdvRPSHtWLnW7HeRGbUCOD9frzALc+pQmE/NpmQ/QE5WAbLbjHn4isr0h9WK0u90WssFU mzScjORJ21UFGx46yjGvL1CD ) ; Key ID = 35204`
	`nationsreportcard.gov. 86400 IN DNSKEY ( 256 3 7 AwEAAXeHDwfDhD3OTcw9i1GkN/xDmeeNnQK2fS6ZVhCIv0VVoBSYdYteM/BJzyKTvRrVh/uiMRo+ UF+rA5wYGXGibzVaI8XaR7M8swscgly+H7e3Wm/tNRw6/n6w4Cj6sBdvOHrsu7tejnOE3Cvv/1bx AAaIoFLLJz54e9l+OF22TcSV ) ; Key ID = 27245`
	`nationsreportcard.gov. 86400 IN DNSKEY ( 257 3 7 AwEAAY4D8bdNuVbs4tT4jIJfKvsRcM1WulBjZsgzpodniCPWjAgEQxii/iL3vPLLbW/OkhO1UTM4 I6F+kTmwtTv2l9DRw/7qA7VxXBsLAepZwk05orkHE7bJuVlTDyoD7LzzwuXMH7FXJxkTYmVcFrzD +30jaK3vDpkKFS7gbfok1wNtKNZ2XOA6FxP+uzq20/bro3F4B1HZ1fX2nl7qndA0Qz4rr6oLIwVv qHoCuZd9Eh3YT3fP4MlW+1Z4TCYcGm5w43k5YDS4xPLcYZe2NyyK2EEf2zMw6v0q7IGUt5GFl0JE yOPDsY8x++ZU9eea0Cht98CUMEm5xPP7n8PQ191RwDk= ) ; Key ID = 60784`
	`nationsreportcard.gov. 86400 IN DNSKEY ( 257 3 7 AwEAAd2iacpWYJsH+PxWQyq4PWPL/05xiSl0sYmt7aoc6sz8MId5UQabK5Ovz25NbxxVy/RE1YAe Vc8dVUoWFqUlTIxh/rEEjUikxbMM1POO5iyOcnweGltTWJiXnjoNSheGsoBIVDnKeCzYaWipIlic xfvmLobX5/Yw/hOwK8UmbVVL7Vl8Z3s2aYqi2O8AjrQzWtuCXiEWO8aGOrYk4C+aAk72sn3S++1n j0GwsUyJnECHBhMR+NqnXQQxu5IXcI6s0dHY2RIqvvJhds3pLp2pA3jUEtARJ+pJYKQvj4PLxR6/ ozYsSg2W2MSoWEfteLl5xq6ClSr+2zIn0+pV6LR0ZnU= ) ; Key ID = 20728`
	DNSKEY=60784/SEP is now in the chain-of-trust
	DS=60784/SHA-1 verifies DNSKEY=60784/SEP
	DS=60784/SHA-256 verifies DNSKEY=60784/SEP
	DNSKEY=20728/SEP is now in the chain-of-trust
	DS=20728/SHA-1 verifies DNSKEY=20728/SEP
	DS=20728/SHA-256 verifies DNSKEY=20728/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`nationsreportcard.gov. 86400 IN RRSIG ( DNSKEY 7 2 86400 20190429030009 20190422020009 20728 nationsreportcard.gov. XUyShJ8F5JZvAv5ZB3nw2lC208Rw7OjKc6XzwcS/A9C+1zhAMjkZV0iibxZNEKz5FcPzBC2ibjLc be72aFKALnSqowsQWmAYgw+p4HaJEfL/ZmsOKL7DXnrvQMLFZYPJ5j04XO3JMD2jRK+rxR6F265/ oVZLTi7FJzzqWwRgnpUpxqyFL2UdWrixGdnUCfSC1U7l2NcLN4HA0gOAJDnW6Q2H54u4k/pryUbW qRiyS8y5ZE+kmEz2ZGIGDi587Or54w31hnebhENHkgI1Fj4p03WMUWm8qKx8jC5L1EBmOIJYRQ/f K969Fo9emp/8xYzRywj3zUzzIaKhq8zQ35LkIg== )`
	`nationsreportcard.gov. 86400 IN RRSIG ( DNSKEY 7 2 86400 20190429030009 20190422020009 27245 nationsreportcard.gov. W5aqxvxNv4IweFOdiqKC7H4WyFqnqoY3ZBDOVCUGf+9hB5KmGEJePm1E0yYwTTStJTv0zycU3McP +il/g+zUmiflge/ylUQDuykb+mqPqb3Y4bZLEUHwBTg5LZoL4wwxOXCRc04lt5GSI1SryNeiV2+u FiNZyir7CP2ztiOTtyc= )`
	RRSIG=20728 and DNSKEY=20728/SEP verifies the DNSKEY RRset
	RRSIG=27245 and DNSKEY=27245 verifies the DNSKEY RRset
	DNSKEY=35204 is now in the chain-of-trust
	DNSKEY=27245 is now in the chain-of-trust
	Query to sauthns1.qwest.net for NATIONSREPORTCARD.GOV/A
	Received 504 bytes from 63.150.72.5
	;; Answer received from 63.150.72.5 (504 bytes) ;; HEADER SECTION ;; id = 58034 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NATIONSREPORTCARD.GOV. IN A ;; ANSWER SECTION (2 records) nationsreportcard.gov. 300 IN A 63.145.228.26 nationsreportcard.gov. 300 IN RRSIG ( A 7 2 300 20190429030009 20190422020009 27245 nationsreportcard.gov. FY+L49Trs05S7H1AlwUI0uzbl7oaFb6Y7eAKPCb08kLrqqnNbPR/kBSDbyr/uX07jjsqC1lHgfHR iuYXIOY0ZVdB+lm8318rxRD8EGJPPla+XmTZq2o2uVlRfGZ6QKFX3d1JfaapZ22D+3W/X69LV9zf mSRAjCjtQFiXmvtSwqQ= ) ;; AUTHORITY SECTION (3 records) nationsreportcard.gov. 86400 IN NS sauthns2.qwest.net. nationsreportcard.gov. 86400 IN NS sauthns1.qwest.net. nationsreportcard.gov. 86400 IN RRSIG ( NS 7 2 86400 20190429030009 20190422020009 27245 nationsreportcard.gov. CFCzjxkn2Ln1rKA9HRop//facwL6TStf968JRpgahYd0iuJ6J5QVVYGdKsJo5OcFEov6N5dQqNVg JN8UZSVb0/gov+hWCSezwaEJX1npMn/3vNYZ6ICur8yUs9oyCgCyI2HJd1QacgE1y7mtEawPdVxE ZwvSN44UXfke9Rebi9o= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NATIONSREPORTCARD.GOV is authoritative for NATIONSREPORTCARD.GOV
	Found RRSIG signed by nationsreportcard.gov zone
	Query to sauthns2.qwest.net for NATIONSREPORTCARD.GOV/SOA
	Received 542 bytes from 208.44.130.121
	;; Answer received from 208.44.130.121 (542 bytes) ;; HEADER SECTION ;; id = 37437 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NATIONSREPORTCARD.GOV. IN SOA ;; ANSWER SECTION (2 records) nationsreportcard.gov. 86400 IN SOA ( sauthns1.qwest.net. dns-admin.qwestip.net. 2190417017 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) nationsreportcard.gov. 86400 IN RRSIG ( SOA 7 2 86400 20190429030009 20190422020009 27245 nationsreportcard.gov. GV4EqRDcBx2+eTqeTFGHmcfpgagznM+Po9P8S5pLznopp62d0e2cTkbU+gez9OhvjZEfiAeo3G+J Tz1C6xsRqUVrPmJ/nDSbnRQATa7xL4muzH+SfmeNhpLRyR3mbY0D+1fKE9twhYaUXmVjJKspbUpE 8pK1/RAbyFcbm8Ow7B4= ) ;; AUTHORITY SECTION (3 records) nationsreportcard.gov. 86400 IN NS sauthns1.qwest.net. nationsreportcard.gov. 86400 IN NS sauthns2.qwest.net. nationsreportcard.gov. 86400 IN RRSIG ( NS 7 2 86400 20190429030009 20190422020009 27245 nationsreportcard.gov. CFCzjxkn2Ln1rKA9HRop//facwL6TStf968JRpgahYd0iuJ6J5QVVYGdKsJo5OcFEov6N5dQqNVg JN8UZSVb0/gov+hWCSezwaEJX1npMn/3vNYZ6ICur8yUs9oyCgCyI2HJd1QacgE1y7mtEawPdVxE ZwvSN44UXfke9Rebi9o= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to sauthns1.qwest.net for NATIONSREPORTCARD.GOV/SOA
	Error querying sauthns1.qwest.net/2001:428:0:0:0:0:0:7 for NATIONSREPORTCARD.GOV/SOA: 'IPv6 transport disabled'
	Received 542 bytes from 63.150.72.5
	;; Answer received from 63.150.72.5 (542 bytes) ;; HEADER SECTION ;; id = 27373 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NATIONSREPORTCARD.GOV. IN SOA ;; ANSWER SECTION (2 records) nationsreportcard.gov. 86400 IN SOA ( sauthns1.qwest.net. dns-admin.qwestip.net. 2190417017 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) nationsreportcard.gov. 86400 IN RRSIG ( SOA 7 2 86400 20190429030009 20190422020009 27245 nationsreportcard.gov. GV4EqRDcBx2+eTqeTFGHmcfpgagznM+Po9P8S5pLznopp62d0e2cTkbU+gez9OhvjZEfiAeo3G+J Tz1C6xsRqUVrPmJ/nDSbnRQATa7xL4muzH+SfmeNhpLRyR3mbY0D+1fKE9twhYaUXmVjJKspbUpE 8pK1/RAbyFcbm8Ow7B4= ) ;; AUTHORITY SECTION (3 records) nationsreportcard.gov. 86400 IN NS sauthns2.qwest.net. nationsreportcard.gov. 86400 IN NS sauthns1.qwest.net. nationsreportcard.gov. 86400 IN RRSIG ( NS 7 2 86400 20190429030009 20190422020009 27245 nationsreportcard.gov. CFCzjxkn2Ln1rKA9HRop//facwL6TStf968JRpgahYd0iuJ6J5QVVYGdKsJo5OcFEov6N5dQqNVg JN8UZSVb0/gov+hWCSezwaEJX1npMn/3vNYZ6ICur8yUs9oyCgCyI2HJd1QacgE1y7mtEawPdVxE ZwvSN44UXfke9Rebi9o= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to sauthns1.qwest.net for NATIONSREPORTCARD.GOV/A
	Error querying sauthns1.qwest.net/2001:428:0:0:0:0:0:7 for NATIONSREPORTCARD.GOV/A: 'IPv6 transport disabled'
	Received 504 bytes from 63.150.72.5
	;; Answer received from 63.150.72.5 (504 bytes) ;; HEADER SECTION ;; id = 22751 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NATIONSREPORTCARD.GOV. IN A ;; ANSWER SECTION (2 records) nationsreportcard.gov. 300 IN A 63.145.228.26 nationsreportcard.gov. 300 IN RRSIG ( A 7 2 300 20190429030009 20190422020009 27245 nationsreportcard.gov. FY+L49Trs05S7H1AlwUI0uzbl7oaFb6Y7eAKPCb08kLrqqnNbPR/kBSDbyr/uX07jjsqC1lHgfHR iuYXIOY0ZVdB+lm8318rxRD8EGJPPla+XmTZq2o2uVlRfGZ6QKFX3d1JfaapZ22D+3W/X69LV9zf mSRAjCjtQFiXmvtSwqQ= ) ;; AUTHORITY SECTION (3 records) nationsreportcard.gov. 86400 IN NS sauthns2.qwest.net. nationsreportcard.gov. 86400 IN NS sauthns1.qwest.net. nationsreportcard.gov. 86400 IN RRSIG ( NS 7 2 86400 20190429030009 20190422020009 27245 nationsreportcard.gov. CFCzjxkn2Ln1rKA9HRop//facwL6TStf968JRpgahYd0iuJ6J5QVVYGdKsJo5OcFEov6N5dQqNVg JN8UZSVb0/gov+hWCSezwaEJX1npMn/3vNYZ6ICur8yUs9oyCgCyI2HJd1QacgE1y7mtEawPdVxE ZwvSN44UXfke9Rebi9o= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NATIONSREPORTCARD.GOV A RR has value 63.145.228.26
	Found 1 RRSIGs over A RRset
	`nationsreportcard.gov. 300 IN RRSIG ( A 7 2 300 20190429030009 20190422020009 27245 nationsreportcard.gov. FY+L49Trs05S7H1AlwUI0uzbl7oaFb6Y7eAKPCb08kLrqqnNbPR/kBSDbyr/uX07jjsqC1lHgfHR iuYXIOY0ZVdB+lm8318rxRD8EGJPPla+XmTZq2o2uVlRfGZ6QKFX3d1JfaapZ22D+3W/X69LV9zf mSRAjCjtQFiXmvtSwqQ= )`
	RRSIG=27245 and DNSKEY=27245 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test NATIONSREPORTCARD.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: