DNSSEC Analyzer

Domain Name:

Time: 2019-12-09 08:41:25 UTC, NTP stratum 4

Analyzing DNSSEC problems for OCC.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Error querying c.root-servers.net/2001:500:2:0:0:0:0:c for ./DNSKEY: 'IPv6 transport disabled'
	Received 864 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (864 bytes) ;; HEADER SECTION ;; id = 33902 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20191221000000 20191130000000 20326 . Gq7w8sR2CNe4RDL05IeRsmtmsJ38wsSuTCaSgsZmBoVk0azQToi8bJ2pd6EUlav0hRwpFXhGrOeg Rutf6RcePbaDVLLChY5H1ExeT1GhJVtCctHNTbUQadziztCEPcmtjrMEoOsRGkW8cNTo8MG79DZa jdG6P3MjQselQVVxFCWiT1Eqa0A9ojd2wEgNanUafw7mJSasBMD0tco+tQMmMmLGqX/d7/K1D/3/ lFPrclzwWiOcv3yRbTLW2X45Fn4ZNpuuV4KSwxTGBylxG5jDhPsrrumwnAk2hrRrWzshGCWgbXtk R95utBYdb/ZsZaO7KuqicdE5ZItJEV8Qh4FikA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20191221000000 20191130000000 20326 . Gq7w8sR2CNe4RDL05IeRsmtmsJ38wsSuTCaSgsZmBoVk0azQToi8bJ2pd6EUlav0hRwpFXhGrOeg Rutf6RcePbaDVLLChY5H1ExeT1GhJVtCctHNTbUQadziztCEPcmtjrMEoOsRGkW8cNTo8MG79DZa jdG6P3MjQselQVVxFCWiT1Eqa0A9ojd2wEgNanUafw7mJSasBMD0tco+tQMmMmLGqX/d7/K1D/3/ lFPrclzwWiOcv3yRbTLW2X45Fn4ZNpuuV4KSwxTGBylxG5jDhPsrrumwnAk2hrRrWzshGCWgbXtk R95utBYdb/ZsZaO7KuqicdE5ZItJEV8Qh4FikA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=22545 is now in the chain-of-trust
	Query to c.root-servers.net for OCC.GOV/A
	Received 665 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (665 bytes) ;; HEADER SECTION ;; id = 55503 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; OCC.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20191222050000 20191209040000 22545 . IWjC+LZFs0tHSJMsCYFhMBiqzMVwcXNWHVrtIMFWqLnmS2/HWC3PKPlXRAtzHBnOtHjbPUNpYSLg 2UE2eaBBpAGpUx98BrzlXmbzDqkwnUGqkOhgg4rBtQAYMBTFQNuNpbitG/PnZM1dox/nzC2AlMRm NvvkgqhTBuuuwohHFBEpJc3fkYGDNV1+HY7wzCoTgkZCaMd0CRHd38fRe3ATaLGkwJmbddqmL2VF o6ETQKOJihJ+jqGVJQpXws6uUmc4HvDbCe10kN+jNsU3j0taI3qCLXSe7RBGCa///wG18LEgqoj1 rqmjXQUQfBjlA3XuwY94y2FFNpbLz4e4kIndYg== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to i.root-servers.net for GOV/DNSKEY
	Received 661 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (661 bytes) ;; HEADER SECTION ;; id = 19654 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20191222050000 20191209040000 22545 . IWjC+LZFs0tHSJMsCYFhMBiqzMVwcXNWHVrtIMFWqLnmS2/HWC3PKPlXRAtzHBnOtHjbPUNpYSLg 2UE2eaBBpAGpUx98BrzlXmbzDqkwnUGqkOhgg4rBtQAYMBTFQNuNpbitG/PnZM1dox/nzC2AlMRm NvvkgqhTBuuuwohHFBEpJc3fkYGDNV1+HY7wzCoTgkZCaMd0CRHd38fRe3ATaLGkwJmbddqmL2VF o6ETQKOJihJ+jqGVJQpXws6uUmc4HvDbCe10kN+jNsU3j0taI3qCLXSe7RBGCa///wG18LEgqoj1 rqmjXQUQfBjlA3XuwY94y2FFNpbLz4e4kIndYg== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to l.root-servers.net for GOV/DS
	Error querying l.root-servers.net/2001:500:9f:0:0:0:0:42 for GOV/DS: 'IPv6 transport disabled'
	Received 403 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (403 bytes) ;; HEADER SECTION ;; id = 26480 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20191222050000 20191209040000 22545 . IWjC+LZFs0tHSJMsCYFhMBiqzMVwcXNWHVrtIMFWqLnmS2/HWC3PKPlXRAtzHBnOtHjbPUNpYSLg 2UE2eaBBpAGpUx98BrzlXmbzDqkwnUGqkOhgg4rBtQAYMBTFQNuNpbitG/PnZM1dox/nzC2AlMRm NvvkgqhTBuuuwohHFBEpJc3fkYGDNV1+HY7wzCoTgkZCaMd0CRHd38fRe3ATaLGkwJmbddqmL2VF o6ETQKOJihJ+jqGVJQpXws6uUmc4HvDbCe10kN+jNsU3j0taI3qCLXSe7RBGCa///wG18LEgqoj1 rqmjXQUQfBjlA3XuwY94y2FFNpbLz4e4kIndYg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20191222050000 20191209040000 22545 . IWjC+LZFs0tHSJMsCYFhMBiqzMVwcXNWHVrtIMFWqLnmS2/HWC3PKPlXRAtzHBnOtHjbPUNpYSLg 2UE2eaBBpAGpUx98BrzlXmbzDqkwnUGqkOhgg4rBtQAYMBTFQNuNpbitG/PnZM1dox/nzC2AlMRm NvvkgqhTBuuuwohHFBEpJc3fkYGDNV1+HY7wzCoTgkZCaMd0CRHd38fRe3ATaLGkwJmbddqmL2VF o6ETQKOJihJ+jqGVJQpXws6uUmc4HvDbCe10kN+jNsU3j0taI3qCLXSe7RBGCa///wG18LEgqoj1 rqmjXQUQfBjlA3XuwY94y2FFNpbLz4e4kIndYg== )`
	RRSIG=22545 and DNSKEY=22545 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to b.gov-servers.net for GOV/DNSKEY
	Error querying b.gov-servers.net/2620:74:27:0:0:0:2:30 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 777 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (777 bytes) ;; HEADER SECTION ;; id = 53182 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAcQAVXGAbq+khqvif1NNId5wvkmsmSZEb/UXjfazqpqEeA7IUc8b/9eEIBebIcFda4Ukv8lF lnfGIvMRADLa50RVwP2asra1Md0NC9tLjrHEYN0H68WN0tTLIQ6jUF/kzYTeTOVhlUqzM+5JyyT9 x01e1FT5ANG8RkbgXIyPte2Qs8wasqNkjFGaD5oFLerVScCa0FXumybu9cBEfBbAzPU= ) ; Key ID = 14320 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20191216200254 20191201195754 7698 gov. eu0gshGgymERiO+iIcdmJ9TqP0dRgpvjyGnI2OQlkm58YEsevRvOYxpKw0K6F9PT3RvOGPbRPvO2 b6psOWhSSeu0Btc+bvHWrEBqnf9t3h+lrfkGKSb53OFDvgtgtWR9zzeUrgivuVU09zPOqozOWcmk Ox8uhvXUrK0zoscGpBDO9efoTVF/Di6gg3tR0DWhsL/Qu3uuDT2F+k1m2WAaLaJCb3QDWgEWgcGn XEy1HEmJ0Uzca8PnKWwMNBktuODiBTiSNaUwVNFnXJmDxQMEAA+PS+DbbLJJX2CcodMHFiErvO4U JQiQgu9X8g0RpG2EO2oq6gTfIPKs+KsZ6K2y7Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAcQAVXGAbq+khqvif1NNId5wvkmsmSZEb/UXjfazqpqEeA7IUc8b/9eEIBebIcFda4Ukv8lF lnfGIvMRADLa50RVwP2asra1Md0NC9tLjrHEYN0H68WN0tTLIQ6jUF/kzYTeTOVhlUqzM+5JyyT9 x01e1FT5ANG8RkbgXIyPte2Qs8wasqNkjFGaD5oFLerVScCa0FXumybu9cBEfBbAzPU= ) ; Key ID = 14320`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20191216200254 20191201195754 7698 gov. eu0gshGgymERiO+iIcdmJ9TqP0dRgpvjyGnI2OQlkm58YEsevRvOYxpKw0K6F9PT3RvOGPbRPvO2 b6psOWhSSeu0Btc+bvHWrEBqnf9t3h+lrfkGKSb53OFDvgtgtWR9zzeUrgivuVU09zPOqozOWcmk Ox8uhvXUrK0zoscGpBDO9efoTVF/Di6gg3tR0DWhsL/Qu3uuDT2F+k1m2WAaLaJCb3QDWgEWgcGn XEy1HEmJ0Uzca8PnKWwMNBktuODiBTiSNaUwVNFnXJmDxQMEAA+PS+DbbLJJX2CcodMHFiErvO4U JQiQgu9X8g0RpG2EO2oq6gTfIPKs+KsZ6K2y7Q== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=14320 is now in the chain-of-trust
	Query to a.gov-servers.net for OCC.GOV/A
	Received 532 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (532 bytes) ;; HEADER SECTION ;; id = 63640 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; OCC.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) OCC.GOV. 86400 IN NS ns1.treasury.GOV. OCC.GOV. 86400 IN NS ns3.treasury.GOV. OCC.GOV. 3600 IN DS 29601 7 1 34bde372400948acf2f00598d86dfc41893bca31 OCC.GOV. 3600 IN DS ( 64230 7 2 9034f2d582491ebfb32df4afad533c7852ac9d7fecf12e2dc8301699556e62dd ) OCC.GOV. 3600 IN DS ( 29601 7 2 9566bad8c86391118fa6009eed1c9d4da1c952165c7103f399e80657b531f8ad ) OCC.GOV. 3600 IN DS 64230 7 1 1cd1f7d0abb7f1b3a907dfad1ffee2d0d2cfa366 OCC.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191216041007 20191209041007 14320 gov. GvLy1y4nX6TaL0QaWz/Mjo06WjUFkqC9zx77LvVUUKJmvvUJ05s9erVqGI3Ewo0duuTKBzSJi3KK 7Yc31iPteDWsXEV6M0QgZRtCGQXBKHKd62wNfQCcEF2UAmVgUPdZHF0PXlDA3lXgSJg9wYo8dlMU L7sy/BUuPnzJzSbwrM6b9EKy/jso4rWCBdO2427nGX1YHV0vxvm4Ij4xHpZClg== ) ;; ADDITIONAL SECTION (5 records) ns1.treasury.GOV. 86400 IN A 166.123.208.249 ns1.treasury.GOV. 86400 IN AAAA 2610:108:4000:100a::249 ns3.treasury.GOV. 86400 IN A 164.95.95.155 ns3.treasury.GOV. 86400 IN AAAA 2610:108:3000:100a::155 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.gov-servers.net for OCC.GOV/DNSKEY
	Error querying c.gov-servers.net/2620:74:28:0:0:0:2:30 for OCC.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 532 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (532 bytes) ;; HEADER SECTION ;; id = 38912 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; OCC.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) OCC.GOV. 86400 IN NS ns1.treasury.GOV. OCC.GOV. 86400 IN NS ns3.treasury.GOV. OCC.GOV. 3600 IN DS 29601 7 1 34bde372400948acf2f00598d86dfc41893bca31 OCC.GOV. 3600 IN DS ( 64230 7 2 9034f2d582491ebfb32df4afad533c7852ac9d7fecf12e2dc8301699556e62dd ) OCC.GOV. 3600 IN DS ( 29601 7 2 9566bad8c86391118fa6009eed1c9d4da1c952165c7103f399e80657b531f8ad ) OCC.GOV. 3600 IN DS 64230 7 1 1cd1f7d0abb7f1b3a907dfad1ffee2d0d2cfa366 OCC.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191216041007 20191209041007 14320 gov. GvLy1y4nX6TaL0QaWz/Mjo06WjUFkqC9zx77LvVUUKJmvvUJ05s9erVqGI3Ewo0duuTKBzSJi3KK 7Yc31iPteDWsXEV6M0QgZRtCGQXBKHKd62wNfQCcEF2UAmVgUPdZHF0PXlDA3lXgSJg9wYo8dlMU L7sy/BUuPnzJzSbwrM6b9EKy/jso4rWCBdO2427nGX1YHV0vxvm4Ij4xHpZClg== ) ;; ADDITIONAL SECTION (5 records) ns1.treasury.GOV. 86400 IN A 166.123.208.249 ns1.treasury.GOV. 86400 IN AAAA 2610:108:4000:100a::249 ns3.treasury.GOV. 86400 IN A 164.95.95.155 ns3.treasury.GOV. 86400 IN AAAA 2610:108:3000:100a::155 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone OCC.GOV

OCC.GOV

	Checking DS between GOV and OCC.GOV
	Query to a.gov-servers.net for OCC.GOV/DS
	Error querying a.gov-servers.net/2001:500:4431:0:0:0:2:30 for OCC.GOV/DS: 'IPv6 transport disabled'
	Received 399 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (399 bytes) ;; HEADER SECTION ;; id = 54634 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; OCC.GOV. IN DS ;; ANSWER SECTION (5 records) OCC.GOV. 3600 IN DS 29601 7 1 34bde372400948acf2f00598d86dfc41893bca31 OCC.GOV. 3600 IN DS ( 64230 7 2 9034f2d582491ebfb32df4afad533c7852ac9d7fecf12e2dc8301699556e62dd ) OCC.GOV. 3600 IN DS ( 29601 7 2 9566bad8c86391118fa6009eed1c9d4da1c952165c7103f399e80657b531f8ad ) OCC.GOV. 3600 IN DS 64230 7 1 1cd1f7d0abb7f1b3a907dfad1ffee2d0d2cfa366 OCC.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191216041007 20191209041007 14320 gov. GvLy1y4nX6TaL0QaWz/Mjo06WjUFkqC9zx77LvVUUKJmvvUJ05s9erVqGI3Ewo0duuTKBzSJi3KK 7Yc31iPteDWsXEV6M0QgZRtCGQXBKHKd62wNfQCcEF2UAmVgUPdZHF0PXlDA3lXgSJg9wYo8dlMU L7sy/BUuPnzJzSbwrM6b9EKy/jso4rWCBdO2427nGX1YHV0vxvm4Ij4xHpZClg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for OCC.GOV in the GOV zone
	DS=29601/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=64230/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=29601/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=64230/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`OCC.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191216041007 20191209041007 14320 gov. GvLy1y4nX6TaL0QaWz/Mjo06WjUFkqC9zx77LvVUUKJmvvUJ05s9erVqGI3Ewo0duuTKBzSJi3KK 7Yc31iPteDWsXEV6M0QgZRtCGQXBKHKd62wNfQCcEF2UAmVgUPdZHF0PXlDA3lXgSJg9wYo8dlMU L7sy/BUuPnzJzSbwrM6b9EKy/jso4rWCBdO2427nGX1YHV0vxvm4Ij4xHpZClg== )`
	RRSIG=14320 and DNSKEY=14320 verifies the DS RRset
	DS=29601/SHA-1 is now in the chain-of-trust
	DS=64230/SHA-256 is now in the chain-of-trust
	`OCC.GOV. 3600 IN DS 29601 7 1 34bde372400948acf2f00598d86dfc41893bca31`
	`OCC.GOV. 3600 IN DS ( 64230 7 2 9034f2d582491ebfb32df4afad533c7852ac9d7fecf12e2dc8301699556e62dd )`
	`OCC.GOV. 3600 IN DS ( 29601 7 2 9566bad8c86391118fa6009eed1c9d4da1c952165c7103f399e80657b531f8ad )`
	`OCC.GOV. 3600 IN DS 64230 7 1 1cd1f7d0abb7f1b3a907dfad1ffee2d0d2cfa366`
	Query to ns3.treasury.GOV for OCC.GOV/DNSKEY
	Error querying ns3.treasury.GOV/2610:108:3000:100a:0:0:0:155 for OCC.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 1808 bytes from 164.95.95.155
	;; Answer received from 164.95.95.155 (1808 bytes) ;; HEADER SECTION ;; id = 63680 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; OCC.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) OCC.GOV. 172800 IN DNSKEY ( 256 3 7 AwEAAbW+yW8DSF9OL0OACXW4PmnN+aPUZxssktDdrv+1YbF64ZwBQ1J1E799WVcgkf5XiVRZaL+0 lCRIKuUexzCYe4hgNxvSeQRyEBgZMLLuPXp1rWO1GyF17vYzVJTjZ0mVE0PwtTMX4+GsyK5C8yAM WPh+Bg21KCCvMgP9Cn1FDHaf ) ; Key ID = 49142 OCC.GOV. 172800 IN DNSKEY ( 257 3 7 AwEAAZY39ol+5rUqOXB7mgHJu6jfsEmECEL4b5TuuRQ0s3Jn5lNJf7+fkRSypt46Qw92zKQOdZl2 oUW259uLrEjiOf7dvNpLy836MueNiR1bUjeunqe6lnqZ4M9xdIFm9ewKqCXDhea0ve6gyiwL3TfG TcY/kbX2QxOO948oyY5qqyG0iSuEYzn2YCCe0UZkdH8uubcvdDJ4jFaXbbdghi/0823FMMMKnzxg vJwv/S4qsLgn0mV8N4W8Ppa85rdET2Gtj1rgmfyHzTFKe0D1VRgqTDxw5KGmx9t/oE5P4vn9cKse zqGTZmSy5EWHxxOvCVDQ5QgPyIfN+6plbxCZnAmosUc= ) ; Key ID = 64230 OCC.GOV. 172800 IN DNSKEY ( 257 3 7 AwEAAc275IbN3083fbWOlMeLfgcdoiQZ3viIx8SrUi074XJJUwr46Rv9b2gMdUuow1ySA743QNs7 3LbUegzxG0/EvB8XdKIs6x7tSwlkxpll+3u2tVtz+tN/PElUSLNtzEqTHkgm9lhz5f4R1/1G6GcN eq0sMvHaRq/dwppsOa8T8sLveAlyWpF64CsMt1zccTxCK7sEPL0RgvNAvAx5fhFKpDPaFNcOGvbK EBZ1DQWgIlOJnD5QVx+s3sAf5YbfRuvMTEmCErRpvBfCJ2y3/sAnycAeyOKNv3wa005jtKHvQ9Fj Uvi1gMJGofMpHN8Z89u73pyXie622sBz8qfBILPEqWU= ) ; Key ID = 29601 OCC.GOV. 172800 IN DNSKEY ( 256 3 7 AwEAAbRPG5PX43DWC3N1hhe+dMDpSaTPLfCONMGspEMi4/QwBKKnRNS0GajDC337ES3Cmc058lHv B49FHD7Nny88NUXnFOz3H8CMuAZLU/8H1O11KOjnsMkwBoBw38gw7m3QF6LwkKZZykj5siY1dJ8l vFLcLbm5hPxdZUrUuJb4hodL ) ; Key ID = 60569 OCC.GOV. 172800 IN RRSIG ( DNSKEY 7 2 172800 20191212234205 20191208231149 29601 occ.gov. GIOTXt8NmA8T8UYGsTT05/NRycQ120ztvRlMuRZX4t8IilPOmDFqs8M6COSenyp8QT/ur11uVS3x bzizM9dMPP2QqIU85MJEz8YIqcPVbc3tt+E6o4NKlGUTheudbTgG4eoCoxC15TJtD4FT1IL6fkbb esc96ukkvVh0fQDzMCWsdrRBtFujC1wgWRUKo9/v2xfhMqLg6JxDxuTRkC8q2Xz8Nb0h6G6b/87z 0CVunJZQwhy5+mrgGfmMJFOtchn3dnsc+w5TQrQ+KvgIrvCU9n/BXLwsnaPKK0mtWOlzkgQZMBkk ipqdzM5QHmaNY1r1VeRIBO4Cj4TBAYuwOH3h7A== ) occ.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20191212234205 20191208231149 49142 occ.gov. jFv8R8lmyfT76IwJH2XDxHwCcSdVZ46ZUohixHdNhkllMgqi1LSqNcK/iLdRorUgGvw+WDrTNyEz NNsk/q2s2tIF/qUPMhk0HWekdHvQ4H232TtdQRG/R6V+trzosmQgQM2zVyiD7M8lM0+G4/IvkLBK A7lHBDMDOnbXr46cz+g= ) occ.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20191212234205 20191208231149 60569 occ.gov. QIsRw+5IBQoTrE3abP2+Sq4DNjDIP6+4d/zB+bz0EaJfZvr10G0WpfgWsgoXRjtLqMOaIzbZHELx 7s1q69uUhSPDjRanc+r6z+M1tqHkmDrmI+2f90WggojycPu7WESDpuCt0s6o/g0PrkKg8noaKmtk ljVCGO6akR8O4cRB2bM= ) occ.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20191212234205 20191208231149 64230 occ.gov. AshAvfDna2l/lv8GqCZtC1SXS0qPmFW+OEqdW4WIbb5+Zb9eOWakgU+D96t5afc3IhCQ1rngqL8l dfm5Qmgb7KZg6yI1HsCYeGBR3OUWNZG7UB81exJCq8/uIUddtcQaeJ6cPwFpOGgwsJ++iGTJop8+ RmPS11Cz7c7cERAKgn10b+AbdZ9sehwA20EXHPn2IwZxb5k6NXvRyo2huQfQbzeHtqUbsYnRfM+B Q794fQeqI8B0PTisxl7kAE1HT5OQnVUplu978rUTIccvdoqRj25DYFBZIQkgqAOQuD68427nDZgS cxcYhxz5JS5+znGlo1FXWgF36Wm0lSrKtMzudQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for OCC.GOV
	`OCC.GOV. 172800 IN DNSKEY ( 256 3 7 AwEAAbW+yW8DSF9OL0OACXW4PmnN+aPUZxssktDdrv+1YbF64ZwBQ1J1E799WVcgkf5XiVRZaL+0 lCRIKuUexzCYe4hgNxvSeQRyEBgZMLLuPXp1rWO1GyF17vYzVJTjZ0mVE0PwtTMX4+GsyK5C8yAM WPh+Bg21KCCvMgP9Cn1FDHaf ) ; Key ID = 49142`
	`OCC.GOV. 172800 IN DNSKEY ( 257 3 7 AwEAAZY39ol+5rUqOXB7mgHJu6jfsEmECEL4b5TuuRQ0s3Jn5lNJf7+fkRSypt46Qw92zKQOdZl2 oUW259uLrEjiOf7dvNpLy836MueNiR1bUjeunqe6lnqZ4M9xdIFm9ewKqCXDhea0ve6gyiwL3TfG TcY/kbX2QxOO948oyY5qqyG0iSuEYzn2YCCe0UZkdH8uubcvdDJ4jFaXbbdghi/0823FMMMKnzxg vJwv/S4qsLgn0mV8N4W8Ppa85rdET2Gtj1rgmfyHzTFKe0D1VRgqTDxw5KGmx9t/oE5P4vn9cKse zqGTZmSy5EWHxxOvCVDQ5QgPyIfN+6plbxCZnAmosUc= ) ; Key ID = 64230`
	`OCC.GOV. 172800 IN DNSKEY ( 257 3 7 AwEAAc275IbN3083fbWOlMeLfgcdoiQZ3viIx8SrUi074XJJUwr46Rv9b2gMdUuow1ySA743QNs7 3LbUegzxG0/EvB8XdKIs6x7tSwlkxpll+3u2tVtz+tN/PElUSLNtzEqTHkgm9lhz5f4R1/1G6GcN eq0sMvHaRq/dwppsOa8T8sLveAlyWpF64CsMt1zccTxCK7sEPL0RgvNAvAx5fhFKpDPaFNcOGvbK EBZ1DQWgIlOJnD5QVx+s3sAf5YbfRuvMTEmCErRpvBfCJ2y3/sAnycAeyOKNv3wa005jtKHvQ9Fj Uvi1gMJGofMpHN8Z89u73pyXie622sBz8qfBILPEqWU= ) ; Key ID = 29601`
	`OCC.GOV. 172800 IN DNSKEY ( 256 3 7 AwEAAbRPG5PX43DWC3N1hhe+dMDpSaTPLfCONMGspEMi4/QwBKKnRNS0GajDC337ES3Cmc058lHv B49FHD7Nny88NUXnFOz3H8CMuAZLU/8H1O11KOjnsMkwBoBw38gw7m3QF6LwkKZZykj5siY1dJ8l vFLcLbm5hPxdZUrUuJb4hodL ) ; Key ID = 60569`
	DNSKEY=64230/SEP is now in the chain-of-trust
	DS=64230/SHA-256 verifies DNSKEY=64230/SEP
	DS=64230/SHA-1 verifies DNSKEY=64230/SEP
	DNSKEY=29601/SEP is now in the chain-of-trust
	DS=29601/SHA-1 verifies DNSKEY=29601/SEP
	DS=29601/SHA-256 verifies DNSKEY=29601/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`OCC.GOV. 172800 IN RRSIG ( DNSKEY 7 2 172800 20191212234205 20191208231149 29601 occ.gov. GIOTXt8NmA8T8UYGsTT05/NRycQ120ztvRlMuRZX4t8IilPOmDFqs8M6COSenyp8QT/ur11uVS3x bzizM9dMPP2QqIU85MJEz8YIqcPVbc3tt+E6o4NKlGUTheudbTgG4eoCoxC15TJtD4FT1IL6fkbb esc96ukkvVh0fQDzMCWsdrRBtFujC1wgWRUKo9/v2xfhMqLg6JxDxuTRkC8q2Xz8Nb0h6G6b/87z 0CVunJZQwhy5+mrgGfmMJFOtchn3dnsc+w5TQrQ+KvgIrvCU9n/BXLwsnaPKK0mtWOlzkgQZMBkk ipqdzM5QHmaNY1r1VeRIBO4Cj4TBAYuwOH3h7A== )`
	`occ.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20191212234205 20191208231149 49142 occ.gov. jFv8R8lmyfT76IwJH2XDxHwCcSdVZ46ZUohixHdNhkllMgqi1LSqNcK/iLdRorUgGvw+WDrTNyEz NNsk/q2s2tIF/qUPMhk0HWekdHvQ4H232TtdQRG/R6V+trzosmQgQM2zVyiD7M8lM0+G4/IvkLBK A7lHBDMDOnbXr46cz+g= )`
	`occ.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20191212234205 20191208231149 60569 occ.gov. QIsRw+5IBQoTrE3abP2+Sq4DNjDIP6+4d/zB+bz0EaJfZvr10G0WpfgWsgoXRjtLqMOaIzbZHELx 7s1q69uUhSPDjRanc+r6z+M1tqHkmDrmI+2f90WggojycPu7WESDpuCt0s6o/g0PrkKg8noaKmtk ljVCGO6akR8O4cRB2bM= )`
	`occ.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20191212234205 20191208231149 64230 occ.gov. AshAvfDna2l/lv8GqCZtC1SXS0qPmFW+OEqdW4WIbb5+Zb9eOWakgU+D96t5afc3IhCQ1rngqL8l dfm5Qmgb7KZg6yI1HsCYeGBR3OUWNZG7UB81exJCq8/uIUddtcQaeJ6cPwFpOGgwsJ++iGTJop8+ RmPS11Cz7c7cERAKgn10b+AbdZ9sehwA20EXHPn2IwZxb5k6NXvRyo2huQfQbzeHtqUbsYnRfM+B Q794fQeqI8B0PTisxl7kAE1HT5OQnVUplu978rUTIccvdoqRj25DYFBZIQkgqAOQuD68427nDZgS cxcYhxz5JS5+znGlo1FXWgF36Wm0lSrKtMzudQ== )`
	RRSIG=29601 and DNSKEY=29601/SEP verifies the DNSKEY RRset
	RRSIG=49142 and DNSKEY=49142 verifies the DNSKEY RRset
	RRSIG=60569 and DNSKEY=60569 verifies the DNSKEY RRset
	RRSIG=64230 and DNSKEY=64230/SEP verifies the DNSKEY RRset
	DNSKEY=49142 is now in the chain-of-trust
	DNSKEY=60569 is now in the chain-of-trust
	Query to ns1.treasury.GOV for OCC.GOV/A
	Error querying ns1.treasury.GOV/2610:108:4000:100a:0:0:0:249 for OCC.GOV/A: 'IPv6 transport disabled'
	Received 853 bytes from 166.123.208.249
	;; Answer received from 166.123.208.249 (853 bytes) ;; HEADER SECTION ;; id = 46798 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; OCC.GOV. IN A ;; ANSWER SECTION (3 records) OCC.GOV. 18000 IN A 199.83.40.54 OCC.GOV. 18000 IN RRSIG ( A 7 2 18000 20191213020408 20191209012606 49142 occ.gov. eIbMxyHxOlo/j8Ts8u6H+mvjIftxyagk/ofRgeyULwCw863OIe9cSS/3C0ZO7Fgf7wj5ZY1L1rEl qzOtzrBRvSxUWA3fsWL+zbsh5P0D2RmZPcNRfEsQs+Vm6JwwEHTnzNb2ehDc+b0PeuYSRUYZtEWg Hlx4RgK75sWXUSilL8M= ) occ.gov. 18000 IN RRSIG ( A 7 2 18000 20191213020408 20191209012606 60569 occ.gov. YcW3lRta7sj4SAwC4HKhyR10pWHgb66W+17Js93QPtPOeU7j6lEGOW94sj3IKMnWnT6jU9rgCvvN oVDmzuGlyhZGHs0zQIAr8RkL+iDDLKGbiOQJUkAwUuE7C7s/cLxkGJPYKE7b+ZVMJG7K2C0yKIK0 PJuErJAxWM10q4boQqI= ) ;; AUTHORITY SECTION (4 records) occ.gov. 18000 IN NS ns3.treasury.gov. occ.gov. 18000 IN NS ns1.treasury.gov. occ.gov. 18000 IN RRSIG ( NS 7 2 18000 20191212201103 20191208193245 49142 occ.gov. Eh9M0QEWytvU20WJDch/P5urMwx/9iSguR7J1zK2+0WmClIo+Myib/0f5hmbTDdclAHAvXCw5Eko w0MRkgS2h6iNSStajHwIGiZAbgpjunrUFuEFp2l19tKyRIsy89Ok8RE7k31nozT4oKIAwH96x3Us 9NBL3Wt6/aUQiSMY4go= ) occ.gov. 18000 IN RRSIG ( NS 7 2 18000 20191212201103 20191208193245 60569 occ.gov. Cv3ZtHmtXpO6RsKcR3bCPESb+Ej3iQJZRGZ6rZPTw1cfsC7JwrvsCmWEVTWpFPqZ+Gpt3/UpoIU3 CFvVvUU75CBUMtjgXtOR8hAIz0eu0UEC9chKIaN8jOJG4gurY0te/1gz8pMYWXpiqWJw5TizTTGX NWzskaJKuayIw8aT3AI= ) ;; ADDITIONAL SECTION (5 records) ns3.treasury.gov. 300 IN A 164.95.95.155 ns3.treasury.gov. 300 IN AAAA 2610:108:3000:100a::155 ns1.treasury.gov. 300 IN A 166.123.208.249 ns1.treasury.gov. 300 IN AAAA 2610:108:4000:100a::249 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	OCC.GOV is authoritative for OCC.GOV
	Found RRSIG signed by occ.gov zone
	Query to ns3.treasury.gov for OCC.GOV/SOA
	Received 892 bytes from 164.95.95.155
	;; Answer received from 164.95.95.155 (892 bytes) ;; HEADER SECTION ;; id = 3713 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; OCC.GOV. IN SOA ;; ANSWER SECTION (3 records) OCC.GOV. 18000 IN SOA ( ns1.treasury.GOV. ecb-hosting.fiscal.treasury.GOV. 300869 ;serial 10800 ;refresh 1080 ;retry 1209600 ;expire 1800 ;minimum ) OCC.GOV. 18000 IN RRSIG ( SOA 7 2 18000 20191213071203 20191209061203 49142 occ.gov. szSLI5ppiiuhb5u6lgu3EvNgNYdRH8QR6+oXIfiSUjeMnXNEl4zLhzFZ8kev7zGoPU8JH5Mm8A3G 32+ra34wlLOnNOk8sn14oNvVxYjHqHeH4wQsNlxmOXoOmDaAiuV2Cdci/7fwINP1sZKW6cL5SnIS IxbCUdia2bGAi6HGWCs= ) occ.gov. 18000 IN RRSIG ( SOA 7 2 18000 20191213071203 20191209061203 60569 occ.gov. aH+VdSwi2Fli6YBk16kC9XJ+D90y5hfLv0ZeTLCLkOUgnajfQcCXswZKbmQBol7mkQySLnurJpnm 95qilpRp7fO47gPSL3xgmqXSK7VAR6xBk1dCCL/je8lV5c0OG8NrbJ8nd0UCu/hsVofvEZNV9U5q uvDDPb5fp60OxwBDj5k= ) ;; AUTHORITY SECTION (4 records) occ.gov. 18000 IN NS ns3.treasury.GOV. occ.gov. 18000 IN NS ns1.treasury.GOV. occ.gov. 18000 IN RRSIG ( NS 7 2 18000 20191212201103 20191208193245 49142 occ.gov. Eh9M0QEWytvU20WJDch/P5urMwx/9iSguR7J1zK2+0WmClIo+Myib/0f5hmbTDdclAHAvXCw5Eko w0MRkgS2h6iNSStajHwIGiZAbgpjunrUFuEFp2l19tKyRIsy89Ok8RE7k31nozT4oKIAwH96x3Us 9NBL3Wt6/aUQiSMY4go= ) occ.gov. 18000 IN RRSIG ( NS 7 2 18000 20191212201103 20191208193245 60569 occ.gov. Cv3ZtHmtXpO6RsKcR3bCPESb+Ej3iQJZRGZ6rZPTw1cfsC7JwrvsCmWEVTWpFPqZ+Gpt3/UpoIU3 CFvVvUU75CBUMtjgXtOR8hAIz0eu0UEC9chKIaN8jOJG4gurY0te/1gz8pMYWXpiqWJw5TizTTGX NWzskaJKuayIw8aT3AI= ) ;; ADDITIONAL SECTION (5 records) ns3.treasury.GOV. 300 IN A 164.95.95.155 ns3.treasury.GOV. 300 IN AAAA 2610:108:3000:100a::155 ns1.treasury.GOV. 300 IN A 166.123.208.249 ns1.treasury.GOV. 300 IN AAAA 2610:108:4000:100a::249 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.treasury.gov for OCC.GOV/SOA
	Received 892 bytes from 166.123.208.249
	;; Answer received from 166.123.208.249 (892 bytes) ;; HEADER SECTION ;; id = 53544 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; OCC.GOV. IN SOA ;; ANSWER SECTION (3 records) OCC.GOV. 18000 IN SOA ( ns1.treasury.GOV. ecb-hosting.fiscal.treasury.GOV. 300869 ;serial 10800 ;refresh 1080 ;retry 1209600 ;expire 1800 ;minimum ) OCC.GOV. 18000 IN RRSIG ( SOA 7 2 18000 20191213071203 20191209061203 49142 occ.gov. szSLI5ppiiuhb5u6lgu3EvNgNYdRH8QR6+oXIfiSUjeMnXNEl4zLhzFZ8kev7zGoPU8JH5Mm8A3G 32+ra34wlLOnNOk8sn14oNvVxYjHqHeH4wQsNlxmOXoOmDaAiuV2Cdci/7fwINP1sZKW6cL5SnIS IxbCUdia2bGAi6HGWCs= ) occ.gov. 18000 IN RRSIG ( SOA 7 2 18000 20191213071203 20191209061203 60569 occ.gov. aH+VdSwi2Fli6YBk16kC9XJ+D90y5hfLv0ZeTLCLkOUgnajfQcCXswZKbmQBol7mkQySLnurJpnm 95qilpRp7fO47gPSL3xgmqXSK7VAR6xBk1dCCL/je8lV5c0OG8NrbJ8nd0UCu/hsVofvEZNV9U5q uvDDPb5fp60OxwBDj5k= ) ;; AUTHORITY SECTION (4 records) occ.gov. 18000 IN NS ns1.treasury.GOV. occ.gov. 18000 IN NS ns3.treasury.GOV. occ.gov. 18000 IN RRSIG ( NS 7 2 18000 20191212201103 20191208193245 49142 occ.gov. Eh9M0QEWytvU20WJDch/P5urMwx/9iSguR7J1zK2+0WmClIo+Myib/0f5hmbTDdclAHAvXCw5Eko w0MRkgS2h6iNSStajHwIGiZAbgpjunrUFuEFp2l19tKyRIsy89Ok8RE7k31nozT4oKIAwH96x3Us 9NBL3Wt6/aUQiSMY4go= ) occ.gov. 18000 IN RRSIG ( NS 7 2 18000 20191212201103 20191208193245 60569 occ.gov. Cv3ZtHmtXpO6RsKcR3bCPESb+Ej3iQJZRGZ6rZPTw1cfsC7JwrvsCmWEVTWpFPqZ+Gpt3/UpoIU3 CFvVvUU75CBUMtjgXtOR8hAIz0eu0UEC9chKIaN8jOJG4gurY0te/1gz8pMYWXpiqWJw5TizTTGX NWzskaJKuayIw8aT3AI= ) ;; ADDITIONAL SECTION (5 records) ns3.treasury.GOV. 300 IN A 164.95.95.155 ns3.treasury.GOV. 300 IN AAAA 2610:108:3000:100a::155 ns1.treasury.GOV. 300 IN A 166.123.208.249 ns1.treasury.GOV. 300 IN AAAA 2610:108:4000:100a::249 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.treasury.GOV for OCC.GOV/A
	Received 853 bytes from 166.123.208.249
	;; Answer received from 166.123.208.249 (853 bytes) ;; HEADER SECTION ;; id = 11412 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; OCC.GOV. IN A ;; ANSWER SECTION (3 records) OCC.GOV. 18000 IN A 199.83.40.54 OCC.GOV. 18000 IN RRSIG ( A 7 2 18000 20191213020408 20191209012606 49142 occ.gov. eIbMxyHxOlo/j8Ts8u6H+mvjIftxyagk/ofRgeyULwCw863OIe9cSS/3C0ZO7Fgf7wj5ZY1L1rEl qzOtzrBRvSxUWA3fsWL+zbsh5P0D2RmZPcNRfEsQs+Vm6JwwEHTnzNb2ehDc+b0PeuYSRUYZtEWg Hlx4RgK75sWXUSilL8M= ) occ.gov. 18000 IN RRSIG ( A 7 2 18000 20191213020408 20191209012606 60569 occ.gov. YcW3lRta7sj4SAwC4HKhyR10pWHgb66W+17Js93QPtPOeU7j6lEGOW94sj3IKMnWnT6jU9rgCvvN oVDmzuGlyhZGHs0zQIAr8RkL+iDDLKGbiOQJUkAwUuE7C7s/cLxkGJPYKE7b+ZVMJG7K2C0yKIK0 PJuErJAxWM10q4boQqI= ) ;; AUTHORITY SECTION (4 records) occ.gov. 18000 IN NS ns3.treasury.gov. occ.gov. 18000 IN NS ns1.treasury.gov. occ.gov. 18000 IN RRSIG ( NS 7 2 18000 20191212201103 20191208193245 49142 occ.gov. Eh9M0QEWytvU20WJDch/P5urMwx/9iSguR7J1zK2+0WmClIo+Myib/0f5hmbTDdclAHAvXCw5Eko w0MRkgS2h6iNSStajHwIGiZAbgpjunrUFuEFp2l19tKyRIsy89Ok8RE7k31nozT4oKIAwH96x3Us 9NBL3Wt6/aUQiSMY4go= ) occ.gov. 18000 IN RRSIG ( NS 7 2 18000 20191212201103 20191208193245 60569 occ.gov. Cv3ZtHmtXpO6RsKcR3bCPESb+Ej3iQJZRGZ6rZPTw1cfsC7JwrvsCmWEVTWpFPqZ+Gpt3/UpoIU3 CFvVvUU75CBUMtjgXtOR8hAIz0eu0UEC9chKIaN8jOJG4gurY0te/1gz8pMYWXpiqWJw5TizTTGX NWzskaJKuayIw8aT3AI= ) ;; ADDITIONAL SECTION (5 records) ns3.treasury.gov. 300 IN A 164.95.95.155 ns3.treasury.gov. 300 IN AAAA 2610:108:3000:100a::155 ns1.treasury.gov. 300 IN A 166.123.208.249 ns1.treasury.gov. 300 IN AAAA 2610:108:4000:100a::249 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	OCC.GOV A RR has value 199.83.40.54
	Found 2 RRSIGs over A RRset
	`OCC.GOV. 18000 IN RRSIG ( A 7 2 18000 20191213020408 20191209012606 49142 occ.gov. eIbMxyHxOlo/j8Ts8u6H+mvjIftxyagk/ofRgeyULwCw863OIe9cSS/3C0ZO7Fgf7wj5ZY1L1rEl qzOtzrBRvSxUWA3fsWL+zbsh5P0D2RmZPcNRfEsQs+Vm6JwwEHTnzNb2ehDc+b0PeuYSRUYZtEWg Hlx4RgK75sWXUSilL8M= )`
	`occ.gov. 18000 IN RRSIG ( A 7 2 18000 20191213020408 20191209012606 60569 occ.gov. YcW3lRta7sj4SAwC4HKhyR10pWHgb66W+17Js93QPtPOeU7j6lEGOW94sj3IKMnWnT6jU9rgCvvN oVDmzuGlyhZGHs0zQIAr8RkL+iDDLKGbiOQJUkAwUuE7C7s/cLxkGJPYKE7b+ZVMJG7K2C0yKIK0 PJuErJAxWM10q4boQqI= )`
	RRSIG=49142 and DNSKEY=49142 verifies the A RRset
	RRSIG=60569 and DNSKEY=60569 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test OCC.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: