DNSSEC Analyzer - OCCNET.GOV

Domain Name:

Time: 2020-09-26 19:05:55 UTC, NTP stratum 4

Analyzing DNSSEC problems for OCCNET.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to k.root-servers.net for ./DNSKEY
	Received 1141 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (1141 bytes) ;; HEADER SECTION ;; id = 3334 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAdauOGxLhfAKFTTZwGhBXbk793QKdWIQRjiSftWdusCwkPhNyJrIjwtNffCWXGLlZAbpcs41 4RE3oS1qVwV+AdXsO92SBu5haGlxMUk0NqZO7Xlf84/wrzGZVRRouPo5pNX/CKS8Mv9UOi0olKGC u31dNfh8qCszWZcloLDgeLzSnQSkvFoGe69vNCfh7feESKedkBC2qRz0BZv9+oJI0IY/3D7WEnV0 NOlf8gSHozhfJFJ/ZAKtvw/Q3ogrVJFk0LyVaU/NVtVA5FM4pVMIRID7pfrPi78aAzG7b/Wh/Pce 4jPAIpS3dApq25YkvMuPvfB91NMf9FemKwlp78PBVcM= ) ; Key ID = 46594 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20201010000000 20200919000000 20326 . gNV6AU+66kB5XldvckVd/ldhaWTu0rO589zdyHDODOwQ1murJshvt8cjBw3G3G4xO06I1gCKT2HW IJLEEhhvQSRvowbcIW3EocWtTZjeQvCp4U1449doRAiUblpQi7EIstdOxIzcttvh0VcIRecWV7Fl 3kvBzEhpwX42EKXaWUV58Rrn/43o/bRSgh3XBSDwIuIsZVJiMMvHdgm0a5FM6jNHxuuXT1DLlXgL Qyggm/PFciUKTXAo91f6HiyWGNZY9AfAAlvprPiyFOCjBotvk7F5Bi5ss1p8mxl522t/8UuSKcFz qE1J3U4IisgEjTkyxnbCJqY/vKJcyPU8fCzxEg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdauOGxLhfAKFTTZwGhBXbk793QKdWIQRjiSftWdusCwkPhNyJrIjwtNffCWXGLlZAbpcs41 4RE3oS1qVwV+AdXsO92SBu5haGlxMUk0NqZO7Xlf84/wrzGZVRRouPo5pNX/CKS8Mv9UOi0olKGC u31dNfh8qCszWZcloLDgeLzSnQSkvFoGe69vNCfh7feESKedkBC2qRz0BZv9+oJI0IY/3D7WEnV0 NOlf8gSHozhfJFJ/ZAKtvw/Q3ogrVJFk0LyVaU/NVtVA5FM4pVMIRID7pfrPi78aAzG7b/Wh/Pce 4jPAIpS3dApq25YkvMuPvfB91NMf9FemKwlp78PBVcM= ) ; Key ID = 46594`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20201010000000 20200919000000 20326 . gNV6AU+66kB5XldvckVd/ldhaWTu0rO589zdyHDODOwQ1murJshvt8cjBw3G3G4xO06I1gCKT2HW IJLEEhhvQSRvowbcIW3EocWtTZjeQvCp4U1449doRAiUblpQi7EIstdOxIzcttvh0VcIRecWV7Fl 3kvBzEhpwX42EKXaWUV58Rrn/43o/bRSgh3XBSDwIuIsZVJiMMvHdgm0a5FM6jNHxuuXT1DLlXgL Qyggm/PFciUKTXAo91f6HiyWGNZY9AfAAlvprPiyFOCjBotvk7F5Bi5ss1p8mxl522t/8UuSKcFz qE1J3U4IisgEjTkyxnbCJqY/vKJcyPU8fCzxEg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=26116 is now in the chain-of-trust
	DNSKEY=46594 is now in the chain-of-trust
	Query to l.root-servers.net for OCCNET.GOV/A
	Received 665 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (665 bytes) ;; HEADER SECTION ;; id = 21657 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; OCCNET.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20201009170000 20200926160000 46594 . CdDuJj0UH9xkYcOQA+ZmRi95J+CqNXiHjM4oBzue/kd/eaE63MsnCJI2KwQmIH7Vdd+BDdFft7Ke mV55CTM7gb0JfXHzr1azFlBm3mC9XhGwzBtWKq/Z756S5gHadrCi0kSwrSJRyxGzP3jttxE0bhiI jxfwrpSY8hG2g9daqsVxlHLxcsT30J/CkC1W+6R3ckU0NDIpDxEYy8tHXR/Yne+2jML/SsI7QTju ytyRUfHjqxlOpKVgVpQn7sN3D/lUJ0NwroV4wGrvzvs/v+wqv92tJpVZOikXaRK6zwMwbIGa3v+C bf9nP/2zNSmJBbeRN/FKZDBIYsoaYYqX97Pf3Q== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.root-servers.net for GOV/DNSKEY
	Received 661 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (661 bytes) ;; HEADER SECTION ;; id = 65425 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20201009170000 20200926160000 46594 . CdDuJj0UH9xkYcOQA+ZmRi95J+CqNXiHjM4oBzue/kd/eaE63MsnCJI2KwQmIH7Vdd+BDdFft7Ke mV55CTM7gb0JfXHzr1azFlBm3mC9XhGwzBtWKq/Z756S5gHadrCi0kSwrSJRyxGzP3jttxE0bhiI jxfwrpSY8hG2g9daqsVxlHLxcsT30J/CkC1W+6R3ckU0NDIpDxEYy8tHXR/Yne+2jML/SsI7QTju ytyRUfHjqxlOpKVgVpQn7sN3D/lUJ0NwroV4wGrvzvs/v+wqv92tJpVZOikXaRK6zwMwbIGa3v+C bf9nP/2zNSmJBbeRN/FKZDBIYsoaYYqX97Pf3Q== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to j.root-servers.net for GOV/DS
	Received 403 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (403 bytes) ;; HEADER SECTION ;; id = 48104 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20201009170000 20200926160000 46594 . CdDuJj0UH9xkYcOQA+ZmRi95J+CqNXiHjM4oBzue/kd/eaE63MsnCJI2KwQmIH7Vdd+BDdFft7Ke mV55CTM7gb0JfXHzr1azFlBm3mC9XhGwzBtWKq/Z756S5gHadrCi0kSwrSJRyxGzP3jttxE0bhiI jxfwrpSY8hG2g9daqsVxlHLxcsT30J/CkC1W+6R3ckU0NDIpDxEYy8tHXR/Yne+2jML/SsI7QTju ytyRUfHjqxlOpKVgVpQn7sN3D/lUJ0NwroV4wGrvzvs/v+wqv92tJpVZOikXaRK6zwMwbIGa3v+C bf9nP/2zNSmJBbeRN/FKZDBIYsoaYYqX97Pf3Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20201009170000 20200926160000 46594 . CdDuJj0UH9xkYcOQA+ZmRi95J+CqNXiHjM4oBzue/kd/eaE63MsnCJI2KwQmIH7Vdd+BDdFft7Ke mV55CTM7gb0JfXHzr1azFlBm3mC9XhGwzBtWKq/Z756S5gHadrCi0kSwrSJRyxGzP3jttxE0bhiI jxfwrpSY8hG2g9daqsVxlHLxcsT30J/CkC1W+6R3ckU0NDIpDxEYy8tHXR/Yne+2jML/SsI7QTju ytyRUfHjqxlOpKVgVpQn7sN3D/lUJ0NwroV4wGrvzvs/v+wqv92tJpVZOikXaRK6zwMwbIGa3v+C bf9nP/2zNSmJBbeRN/FKZDBIYsoaYYqX97Pf3Q== )`
	RRSIG=46594 and DNSKEY=46594 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to c.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (777 bytes) ;; HEADER SECTION ;; id = 56074 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAegdXlD9lumYfYK1EZkZgTXd/IgQSNnvRkdpQa8KXFujLQRrJ2+yqhamuyJq2HZ3k8yYqEER PmtKiuBYWIFw5on1Q0zUn3sO1/14bvKPcI5nbrpJXnlH672yS7FcSeWn14SRe9VzX1Y4/16QXtKh 2gC1Ot1nO0SUqjxdvY5lSDzcdJMRTJws3UjIK3f0uHMw+F5PuHpLWI5zZXir6KUuj2M= ) ; Key ID = 26665 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20201001190254 20200916185754 7698 gov. WJb3UC5UfhfrhSDl/HH+i6dNa14I10Toprb/UxSwtc3+S9Zryxs+sSdsUolE7TZbDbATIDrBb92U 8RgrE1d9/5YtacnuSr5bIp8IF7+DvlWA0Lz2kjatiXGje59QeG58hx//Q/P7AhnDdM7REWXxiNFa Qc1xrOQezskvGXX0KizIQm0TrXlAW0QQ4F2PteJCVhQg+w69WBRU4vxiGGAmJIdRVkwzgJXneadM rqLjoQXDV/XEnNc8nh9JIU5a1UsgW6hGypeuDjE/9p+UCXrFz6diNnEQ2P5cvJv8GqzJrnSONCKJ 8vNRlMB+n6D2WGFqzfVhFuAjuvSnfp8aXOByEQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAegdXlD9lumYfYK1EZkZgTXd/IgQSNnvRkdpQa8KXFujLQRrJ2+yqhamuyJq2HZ3k8yYqEER PmtKiuBYWIFw5on1Q0zUn3sO1/14bvKPcI5nbrpJXnlH672yS7FcSeWn14SRe9VzX1Y4/16QXtKh 2gC1Ot1nO0SUqjxdvY5lSDzcdJMRTJws3UjIK3f0uHMw+F5PuHpLWI5zZXir6KUuj2M= ) ; Key ID = 26665`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20201001190254 20200916185754 7698 gov. WJb3UC5UfhfrhSDl/HH+i6dNa14I10Toprb/UxSwtc3+S9Zryxs+sSdsUolE7TZbDbATIDrBb92U 8RgrE1d9/5YtacnuSr5bIp8IF7+DvlWA0Lz2kjatiXGje59QeG58hx//Q/P7AhnDdM7REWXxiNFa Qc1xrOQezskvGXX0KizIQm0TrXlAW0QQ4F2PteJCVhQg+w69WBRU4vxiGGAmJIdRVkwzgJXneadM rqLjoQXDV/XEnNc8nh9JIU5a1UsgW6hGypeuDjE/9p+UCXrFz6diNnEQ2P5cvJv8GqzJrnSONCKJ 8vNRlMB+n6D2WGFqzfVhFuAjuvSnfp8aXOByEQ== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=26665 is now in the chain-of-trust
	Query to c.gov-servers.net for OCCNET.GOV/A
	Received 451 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (451 bytes) ;; HEADER SECTION ;; id = 63787 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; OCCNET.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) OCCNET.GOV. 86400 IN NS ns1.treasury.GOV. OCCNET.GOV. 86400 IN NS ns3.treasury.GOV. OCCNET.GOV. 3600 IN DS 24034 8 1 d146ef291a3564194be876abb7dbb0cd8fb6c12b OCCNET.GOV. 3600 IN DS ( 24034 8 2 b7ea534d78de004a2a583a38a07f77d22e393b0be1423ec2ec415f00bd7aa1e8 ) OCCNET.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201003161008 20200926161008 26665 gov. 4UzvbCTtXWgRzbh/mivPtqh9aJTPWTpRZxBnHJ7WuFNHObeHDWsHHfrViTwuvNqtiZyUZmwzmQXl yg/G5vbM2sJtHFPX7DPutAtzfVQ7fWbxl3QeAvw08N2ymdeAYtNQt2FBEDCT6BcpPPtStuAsjM8l 5Ll254K2XzuGRufMzbDU7aIsB2NwcvRviB1gX8G6UpUs4l8Y8CX+shsaqEB1UA== ) ;; ADDITIONAL SECTION (5 records) ns1.treasury.GOV. 86400 IN A 166.123.208.249 ns1.treasury.GOV. 86400 IN AAAA 2610:108:4000:100a::249 ns3.treasury.GOV. 86400 IN A 164.95.95.155 ns3.treasury.GOV. 86400 IN AAAA 2610:108:3000:100a::155 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.gov-servers.net for OCCNET.GOV/DNSKEY
	Received 451 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (451 bytes) ;; HEADER SECTION ;; id = 59723 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; OCCNET.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) OCCNET.GOV. 86400 IN NS ns1.treasury.GOV. OCCNET.GOV. 86400 IN NS ns3.treasury.GOV. OCCNET.GOV. 3600 IN DS 24034 8 1 d146ef291a3564194be876abb7dbb0cd8fb6c12b OCCNET.GOV. 3600 IN DS ( 24034 8 2 b7ea534d78de004a2a583a38a07f77d22e393b0be1423ec2ec415f00bd7aa1e8 ) OCCNET.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201003161008 20200926161008 26665 gov. 4UzvbCTtXWgRzbh/mivPtqh9aJTPWTpRZxBnHJ7WuFNHObeHDWsHHfrViTwuvNqtiZyUZmwzmQXl yg/G5vbM2sJtHFPX7DPutAtzfVQ7fWbxl3QeAvw08N2ymdeAYtNQt2FBEDCT6BcpPPtStuAsjM8l 5Ll254K2XzuGRufMzbDU7aIsB2NwcvRviB1gX8G6UpUs4l8Y8CX+shsaqEB1UA== ) ;; ADDITIONAL SECTION (5 records) ns1.treasury.GOV. 86400 IN A 166.123.208.249 ns1.treasury.GOV. 86400 IN AAAA 2610:108:4000:100a::249 ns3.treasury.GOV. 86400 IN A 164.95.95.155 ns3.treasury.GOV. 86400 IN AAAA 2610:108:3000:100a::155 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone OCCNET.GOV

OCCNET.GOV

	Checking DS between GOV and OCCNET.GOV
	Query to a.gov-servers.net for OCCNET.GOV/DS
	Received 318 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (318 bytes) ;; HEADER SECTION ;; id = 19338 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; OCCNET.GOV. IN DS ;; ANSWER SECTION (3 records) OCCNET.GOV. 3600 IN DS 24034 8 1 d146ef291a3564194be876abb7dbb0cd8fb6c12b OCCNET.GOV. 3600 IN DS ( 24034 8 2 b7ea534d78de004a2a583a38a07f77d22e393b0be1423ec2ec415f00bd7aa1e8 ) OCCNET.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201003161008 20200926161008 26665 gov. 4UzvbCTtXWgRzbh/mivPtqh9aJTPWTpRZxBnHJ7WuFNHObeHDWsHHfrViTwuvNqtiZyUZmwzmQXl yg/G5vbM2sJtHFPX7DPutAtzfVQ7fWbxl3QeAvw08N2ymdeAYtNQt2FBEDCT6BcpPPtStuAsjM8l 5Ll254K2XzuGRufMzbDU7aIsB2NwcvRviB1gX8G6UpUs4l8Y8CX+shsaqEB1UA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for OCCNET.GOV in the GOV zone
	DS=24034/SHA-1 has algorithm RSASHA256
	DS=24034/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`OCCNET.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201003161008 20200926161008 26665 gov. 4UzvbCTtXWgRzbh/mivPtqh9aJTPWTpRZxBnHJ7WuFNHObeHDWsHHfrViTwuvNqtiZyUZmwzmQXl yg/G5vbM2sJtHFPX7DPutAtzfVQ7fWbxl3QeAvw08N2ymdeAYtNQt2FBEDCT6BcpPPtStuAsjM8l 5Ll254K2XzuGRufMzbDU7aIsB2NwcvRviB1gX8G6UpUs4l8Y8CX+shsaqEB1UA== )`
	RRSIG=26665 and DNSKEY=26665 verifies the DS RRset
	DS=24034/SHA-1 is now in the chain-of-trust
	`OCCNET.GOV. 3600 IN DS 24034 8 1 d146ef291a3564194be876abb7dbb0cd8fb6c12b`
	`OCCNET.GOV. 3600 IN DS ( 24034 8 2 b7ea534d78de004a2a583a38a07f77d22e393b0be1423ec2ec415f00bd7aa1e8 )`
	Query to ns1.treasury.GOV for OCCNET.GOV/DNSKEY
	Received 675 bytes from 166.123.208.249
	;; Answer received from 166.123.208.249 (675 bytes) ;; HEADER SECTION ;; id = 20971 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; OCCNET.GOV. IN DNSKEY ;; ANSWER SECTION (4 records) OCCNET.GOV. 300 IN DNSKEY ( 256 3 8 AwEAAchCEcNbayOIj62Ofi7w3/pGxopdJOQa6lpNsHWKNLJPPxcti3qx8GomyA2X946r5ftcq0J/ 2cWSScX3yItyvusxwDtPk7uEhJGizfoCw4+hb8kVcQc7pueorVVR+zLjZMA0Z0lo7E5hUUkazyDg gXBEi1xZRezKRGEBFs7TI4Jz ) ; Key ID = 65493 OCCNET.GOV. 300 IN DNSKEY ( 257 3 8 AwEAAeBe7vwhG4VWe/HFAcZllik5cTE0kMwLqWKl7OCdSH0A7y0rUlVoPlI5ZfdLkHytQpSzhGTB Y/3EjYIhTbHfciYnCSSsiJgMBqKEscvvbT1FW9r6XP3fovp/mXe/HCy/IcT9h45rTYFBrAx3vKlC 3PY3VhbiQ67xy3U5lEb72nOf ) ; Key ID = 24034 OCCNET.GOV. 300 IN RRSIG ( DNSKEY 8 2 300 20201002220238 20200925220238 65493 occnet.gov. tx1MdCEtqyp6b1VDvnuMjtyz9hkTzOx4m+5dIxbYOJQbWLvmFb82LcEZO0fB8LT26QGIeBHF3Oet jwXTK0VTEOpZsVommjQeDFZi8HvlBtNIY3c5gTBKmJKfetYdBv7F3FTgHNZNsNtKIhosgayZcs52 MHVxn3HHIqx4ahdadB4= ) OCCNET.GOV. 300 IN RRSIG ( DNSKEY 8 2 300 20201002220238 20200925220238 24034 occnet.gov. Nx79CwpxgunOot1FOK7J7GdLPEi8pF4XnFtR5fHwVfmpeuuuSEXMDx/8LLMlY/iHWolA78qKesCX 8yjM8tYMfp5Vzy1VVCzs2LczGeS9QBWDsQ0vkbYqBwzbcjawXyDAscd0uZ179ouzwSvy6Q/b3ebl w08PNpOZmWOHsowRbhQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for OCCNET.GOV
	`OCCNET.GOV. 300 IN DNSKEY ( 256 3 8 AwEAAchCEcNbayOIj62Ofi7w3/pGxopdJOQa6lpNsHWKNLJPPxcti3qx8GomyA2X946r5ftcq0J/ 2cWSScX3yItyvusxwDtPk7uEhJGizfoCw4+hb8kVcQc7pueorVVR+zLjZMA0Z0lo7E5hUUkazyDg gXBEi1xZRezKRGEBFs7TI4Jz ) ; Key ID = 65493`
	`OCCNET.GOV. 300 IN DNSKEY ( 257 3 8 AwEAAeBe7vwhG4VWe/HFAcZllik5cTE0kMwLqWKl7OCdSH0A7y0rUlVoPlI5ZfdLkHytQpSzhGTB Y/3EjYIhTbHfciYnCSSsiJgMBqKEscvvbT1FW9r6XP3fovp/mXe/HCy/IcT9h45rTYFBrAx3vKlC 3PY3VhbiQ67xy3U5lEb72nOf ) ; Key ID = 24034`
	DNSKEY=24034/SEP is now in the chain-of-trust
	DS=24034/SHA-1 verifies DNSKEY=24034/SEP
	DS=24034/SHA-256 verifies DNSKEY=24034/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`OCCNET.GOV. 300 IN RRSIG ( DNSKEY 8 2 300 20201002220238 20200925220238 65493 occnet.gov. tx1MdCEtqyp6b1VDvnuMjtyz9hkTzOx4m+5dIxbYOJQbWLvmFb82LcEZO0fB8LT26QGIeBHF3Oet jwXTK0VTEOpZsVommjQeDFZi8HvlBtNIY3c5gTBKmJKfetYdBv7F3FTgHNZNsNtKIhosgayZcs52 MHVxn3HHIqx4ahdadB4= )`
	`OCCNET.GOV. 300 IN RRSIG ( DNSKEY 8 2 300 20201002220238 20200925220238 24034 occnet.gov. Nx79CwpxgunOot1FOK7J7GdLPEi8pF4XnFtR5fHwVfmpeuuuSEXMDx/8LLMlY/iHWolA78qKesCX 8yjM8tYMfp5Vzy1VVCzs2LczGeS9QBWDsQ0vkbYqBwzbcjawXyDAscd0uZ179ouzwSvy6Q/b3ebl w08PNpOZmWOHsowRbhQ= )`
	RRSIG=65493 and DNSKEY=65493 verifies the DNSKEY RRset
	RRSIG=24034 and DNSKEY=24034/SEP verifies the DNSKEY RRset
	DNSKEY=65493 is now in the chain-of-trust
	Query to ns3.treasury.GOV for OCCNET.GOV/A
	Received 537 bytes from 164.95.95.155
	;; Answer received from 164.95.95.155 (537 bytes) ;; HEADER SECTION ;; id = 34552 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; OCCNET.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) OCCNET.GOV. 1800 IN SOA ( tsgm1.treasury.GOV. ecb-hosting.fiscal.treasury.GOV. 103637 ;serial 10800 ;refresh 1080 ;retry 1209600 ;expire 1800 ;minimum ) OCCNET.GOV. 1800 IN RRSIG ( SOA 8 2 1800 20201002091754 20200925091754 65493 occnet.gov. CeStOOcU6P7xcyfsTRdHxrVTzLQbrxdD7xuBn9BDvFFGl9mPbk7JAa/YG6u2XnFwZyfzTO4/vV9v C2m6W5Lb9xWD5NakmPRgMjJ38VrMVuwpLa42SfrkEzwyRkGokMbsHy07jACJcpodOug9IbEQ81YL 4RsPu10i8OLpyN4+D7A= ) m3fnha2c4829qrltcg4bvfma0pfhn94v.OCCNET.GOV. 1800 IN NSEC3 ( 1 0 1 bbb86ea9cec2e55e m3fnha2c4829qrltcg4bvfma0pfhn950 NS SOA RRSIG DNSKEY NSEC3PARAM ) m3fnha2c4829qrltcg4bvfma0pfhn94v.OCCNET.GOV. 1800 IN RRSIG ( NSEC3 8 3 1800 20201002131127 20200925131127 65493 occnet.gov. WCBGvQQK/spH8DnKj3b66frpQEaHDXUZ/ogjdOPVNyR9CURhfHxZtQt3WNUQxUgRVt3vuDa2Cd45 C9lFW+9vRdEGPFhuow4GxcaQRFCufxdCl0XnSs2dyWubM8T9jj8p8gSePgWvGQWT+vfd4pIeCJKl uw86ELRJT7R6zl3RVro= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	OCCNET.GOV is authoritative for OCCNET.GOV
	Found RRSIG signed by occnet.gov zone
	Query to ns3.treasury.GOV for OCCNET.GOV/SOA
	Received 1949 bytes from 164.95.95.155
	;; Answer received from 164.95.95.155 (1949 bytes) ;; HEADER SECTION ;; id = 19501 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; OCCNET.GOV. IN SOA ;; ANSWER SECTION (2 records) OCCNET.GOV. 28800 IN SOA ( tsgm1.treasury.GOV. ecb-hosting.fiscal.treasury.GOV. 103637 ;serial 10800 ;refresh 1080 ;retry 1209600 ;expire 1800 ;minimum ) OCCNET.GOV. 28800 IN RRSIG ( SOA 8 2 28800 20201003010435 20200926010435 65493 occnet.gov. QQL8DGdSqzL2Y0DVdRutRyOJIY+DpZZ36foanolmZSU4P25zShJrGHXa2WOh+ETPzxx5urpnULQR qF58BXP+GCd537fNymAb49w0ogQ0HT+2oxbDPtNXFU7TfdoPSxMH3irOZdYQmdly4iNdtycnZNox KlCe0/C8mm4KPfLdMoA= ) ;; AUTHORITY SECTION (3 records) OCCNET.GOV. 28800 IN NS ns3.treasury.GOV. OCCNET.GOV. 28800 IN NS ns1.treasury.GOV. OCCNET.GOV. 28800 IN RRSIG ( NS 8 2 28800 20201002131609 20200925131609 65493 occnet.gov. taawi0czF3qGDVTX0Bx8icS4ujn3bcaFsjq3T9TBHit8+TwCqxlddKW70QrEo2BsYaimb9YENQwm U+q9bPi0fsVY3uv+GWRiboPBQkk90IaGn7YL+HQJQcuCGzrnSgpxdgvccteH2fScNAMUw1dH6ySO hvJtYN9PlhEaL7AX4ow= ) ;; ADDITIONAL SECTION (13 records) ns3.treasury.GOV. 300 IN A 164.95.95.155 ns3.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20201002044035 20200925044035 22148 treasury.gov. RiRyZh6LGnzkxMXPQiEvyoCxe0O3yMJdlKSNNaCTfyTQk/sgP5m4DI86IrXBcE8qIIidqtXJhRv1 yFXHs/3YteCwZ0WNuaQOWSMmhgClhQrjMIpiJ0M58Anv1fG/NlL5rM/zqBP5otVqAjsjz0J+7nPO DgtHWol3JOmcWoQdQ/k= ) ns3.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20201002020930 20200925020930 13 treasury.gov. DIpWE3LIFOaoCbp6vhHh6QONMhkrX4YOROyUu+pE5oby1cHPOx/JS1KluQbetbyyf4jRmJY6hDc2 MX2ND1xjaZny/DA7w1ryrfS7xjKsmxOqTSH2Y1AYXf9TS6TP5a+7bIZhK9juFIhA7PF1UyDKU8WI cOuDq6z3BQANs+ezUFE= ) ns3.treasury.GOV. 300 IN AAAA 2610:108:3000:100a::155 ns3.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20201001132300 20200924132300 22148 treasury.gov. bv5CU6mG7jff8BioC3loQCzJx6+dqZ7NzoS8sje+2peotbNWl10MP/3esUBrS2ng3HAyQ9PJJUCP Up4QVXW/VIOp82qJ/QABLPjmOzR0yvI009NoAutVguWDkaFFQq5J0hhmWE4OgqmHSQICPN+3Wbii QmJPtevYm5jv+KsrWuc= ) ns3.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20201002020930 20200925020930 13 treasury.gov. K5es4GhOw9/5zhsBp/xx+Zd+VdwC5im6KjZs0b65nKuHGqB+2b+hsNOQ4hdhF3yCPAnUpavU6b/E ffeVclWDR9s98AhVCHb2xr6hFieEvMQRoEvM9cYo+d73brtq0C36T0uqP4mwTTKdeCfLhZIzHcDq Yd1R2+DWjPAwL68Cvp0= ) ns1.treasury.GOV. 300 IN A 166.123.208.249 ns1.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20201002052655 20200925052655 22148 treasury.gov. ZCwTBTxWQkFBJlqxDuhPGSOh705YMRLaKowoEd0MrdOsf3JWCT9sG56AOdH7bqke31ZPdtCgFet4 hMXnj24DRdclP8OQkrrdLc7h86rXVkjuqqswSzAFw975dwOGQLaMjpGOnUVzykYC30pIJnN+ZCHS k4oSvxIKTf2o3GKwOqc= ) ns1.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20201002020930 20200925020930 13 treasury.gov. crZ9x+4aRoY8BQuQ+U1DrbbZ6g30Bm+lxf5doBjr6AKhaLw8FRXDRrLY268tlQYJ99NzuLECijMM z3kT3SHDYcBpwa4RICRvjpJlcTi2WFL6Ftzk2x1twqY2leHRhMGzH7AZSZ30Cfa5XeQkF3IT8S2b ykZo8COmXi6uo9xWXyA= ) ns1.treasury.GOV. 300 IN AAAA 2610:108:4000:100a::249 ns1.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20200930020933 20200923020933 22148 treasury.gov. IbwWGfhVc0ekWeI4TuQwCH+0JKs3qS2tvnAAEM+Uw63cCxhX2U6zwyElKw4R9iob7BdDcpw8cqav xXTRQQMnVzMPzpnsBcn66xiKF6/YDjAY3wAPsuKlaT2rGxRwDwrY2GT3O4pCXkONEl0hbaitwoH+ HXjIzPEsFDlgtLoMNhk= ) ns1.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20201002020930 20200925020930 13 treasury.gov. YXjRMDchqgMCvs7t9xFNwIiXChdWCHSxi3YCWw/FLPwMl1fzz+lwOGjOyrM74e4MapmfMQg0jrYf 1FTMka92/sbgfnU/HmOOlrkT6oMoUjeK21lb+agKmAUwJ0F7sNBkXdnutXYUUQO6b37zhfCnSPS0 a+SOs+//Qx+AJk4WXlo= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.treasury.GOV for OCCNET.GOV/SOA
	Received 1949 bytes from 166.123.208.249
	;; Answer received from 166.123.208.249 (1949 bytes) ;; HEADER SECTION ;; id = 17145 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; OCCNET.GOV. IN SOA ;; ANSWER SECTION (2 records) OCCNET.GOV. 28800 IN SOA ( tsgm1.treasury.GOV. ecb-hosting.fiscal.treasury.GOV. 103637 ;serial 10800 ;refresh 1080 ;retry 1209600 ;expire 1800 ;minimum ) OCCNET.GOV. 28800 IN RRSIG ( SOA 8 2 28800 20201001104516 20200924104516 65493 occnet.gov. Yzilquo8ZVPd1CoFIXrgtj1xiym1MxPLFD+VHdeFclSp1PJDjTZXz50Xcjujzwoq/QeCNE1xdzVF 1brO+aSIkDxAJ2sRYHyZptTHEb6ZriUrv0NaJziPp17MrYA6F01MpUdrh026kGCh7uowBpqOx42R IcpdfB2eDK5JMidUD9Q= ) ;; AUTHORITY SECTION (3 records) OCCNET.GOV. 28800 IN NS ns1.treasury.GOV. OCCNET.GOV. 28800 IN NS ns3.treasury.GOV. OCCNET.GOV. 28800 IN RRSIG ( NS 8 2 28800 20201001024546 20200924024546 65493 occnet.gov. QVSXq8hDcip2ISaztanyMB7NZcGVtoO6d5P9tK/ekhl25kvp9zPn50aapaju+951Ck2Gl0IeXf5t xty694rsfyudofep8iynqx+AxvFaiWOsMlAjQwyaW7XE0bIRrouQqfPrFPvt1krGyiqBvnkJWnIi y9RUSarb+FTeDxB/0jU= ) ;; ADDITIONAL SECTION (13 records) ns3.treasury.GOV. 300 IN A 164.95.95.155 ns3.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20201001021007 20200924021007 22148 treasury.gov. AWBv2+pYa7cIHOshLYG9sNqRxK6bDxmp3+WSN+XlK/xAgZFLATzWNY0p/0hrFhvq9xAEIyWN9R1y nZEk9JDlS1C62lB7trP2wS6xxdvDXwM+wiNxJR8t1l5tBd29/FykrFBhPwJXJDN5pEIE3zsyzGgm B3SEwP9EVDMIy8fRPyY= ) ns3.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20201002020931 20200925020931 13 treasury.gov. W0g3bWDHg6pCY5xhLxIE9gFZvTw+zPrsa1sCECtkyD3hKapVGMEHMqdnjMiRKlLtA2LDspggr3ek mz9qvxsXEMLogD6JGClUVWF2Doe6TMLEKwDlJh4qbQ5K0uR51RvlLyPoQXkcLHXv5Snwnpf1gYyN qfzwbx+awKrSD3Yw++I= ) ns3.treasury.GOV. 300 IN AAAA 2610:108:3000:100a::155 ns3.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20201001021007 20200924021007 22148 treasury.gov. Tzg29tI7mxJJ3Pv4R1FCkVisBqYT8BpQ+1LmKG3jIrGGBvjTKcklBVrinvJHQlQzffD6ce04GfId DIhTSdF1wvzN2gEDao5V5j6xWPeruaqMLXTpqyj0Yw9JijZc3dDuDLHuD8WXY7UNVpjN3svWslOY osZZZJYxdZt+bq3YZIc= ) ns3.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20201002020931 20200925020931 13 treasury.gov. bDo4r1wvFPKgMQZ9dHRe3VZz7zd9xoUK0jVxZR/rJNys51qndklGSU5X3TJjh66tHK2dIqIo5+ap neTq7psZVa2cuXS+PGTbfEs2gisl5QX0Nq/ROv8Bua8jAV4uiiwZk5jN4x6+LDsKQtalAXVpceKO GhtFN2WGdjrcCKOlqkM= ) ns1.treasury.GOV. 300 IN A 166.123.208.249 ns1.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20201001021007 20200924021007 22148 treasury.gov. iCLeDpk0tLXT0010RUpvX2AbuiUW8XDolIKlXdK6egDMY0/2oGWGRf2UXaIpsNuilctW5Ne+lO65 qeE6Qgyq/yNoXrQmUVsEmXerUJok1APf3Y0SR4hnFHnSFo6ltYwdtwjypklAJegTiB0gi0Vs+FeN +DaS/X8ZUEv3YQ0w130= ) ns1.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20201002020931 20200925020931 13 treasury.gov. EioY27B53oml/yNfuLaS/RUbc0nU/iCGFDsal5+8D5n1n3+lKABMPPb+f7nnNFJHy25QLTQad5fo hdfvn1Rd9+5BxgyF2TO9LleN8i1Aet1CLDpYUQuz/O6tjDfpWqYFgh544cNGTlmwieg4gthoF4gb 7YQNndxJfOMmTJWzTyU= ) ns1.treasury.GOV. 300 IN AAAA 2610:108:4000:100a::249 ns1.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20201001021007 20200924021007 22148 treasury.gov. hnrXsjCGSkwq87xjYRt7ja8i5eOwsotNEmKueDEuqEfmkFfToXiLZdy4wFakZksTHmtZRgbE38La +o/jaOpsfPRh44cS/X+dgEenJqtIWHJKyB90YPA+JY0kDWpaHELZiywTb7iJV0HqgTaZ81K9+GtA 0JSPm5E9dDkWsbDARgA= ) ns1.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20201002020931 20200925020931 13 treasury.gov. Sntk8x/SYTRartZfZKhw1Cd1SRpltl+dl8B4fRFKWz+gBqLoYObemqlAosbTN+gSKVzDgdgcLSAy RAMKkKw/TsowAyy2v6rqpfzzwlDM4vU80cFcFF33/OAjcy05Qk4oOwKRE7m5e5xFdjv5SrltreAr nYCc0ZiNJwH9PSFuaOY= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns3.treasury.GOV for OCCNET.GOV/A
	Received 537 bytes from 164.95.95.155
	;; Answer received from 164.95.95.155 (537 bytes) ;; HEADER SECTION ;; id = 11267 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; OCCNET.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) OCCNET.GOV. 1800 IN SOA ( tsgm1.treasury.GOV. ecb-hosting.fiscal.treasury.GOV. 103637 ;serial 10800 ;refresh 1080 ;retry 1209600 ;expire 1800 ;minimum ) OCCNET.GOV. 1800 IN RRSIG ( SOA 8 2 1800 20201002095041 20200925095041 65493 occnet.gov. gEMgTqEC6Hp7nGVVG6962+/ctXkaLNPRRDsn4mZ5mPnQoMJ0gdSiah8kf2FejmgzPcdy4ODHzXd1 hJbZCwNdZ6cvlMoUo4DXUPFv1+NnjeQwl1BOcbzU2/TqplMlJyApUiFXHzowfvKlavbumVxCqESP 2zsp1bOy6NqGp6f5OR8= ) ojpml7fnjlq7lj9lcgdptd9ulmp608po.OCCNET.GOV. 1800 IN NSEC3 ( 1 0 1 7c29ea0f5d9fe198 ojpml7fnjlq7lj9lcgdptd9ulmp608pp NS SOA RRSIG DNSKEY NSEC3PARAM ) ojpml7fnjlq7lj9lcgdptd9ulmp608po.OCCNET.GOV. 1800 IN RRSIG ( NSEC3 8 3 1800 20201002115125 20200925115125 65493 occnet.gov. lm+xvUs3WCktPkkA3SOM/EilXDtp8+WQhv9ewaEm8FWnjwvkNz3Py6XB9BpgR1t3yy/dQ2BjtQ3Y vO4Vn30Jk/uTnixzrBX6jdbkRmUFX2a+tU9tRLZJoSHdXwMTxbnne33rveC43AJrZ6e+KfoGDZ19 w+WSYZUdCZvrVlXKnUc= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`OCCNET.GOV. 1800 IN RRSIG ( SOA 8 2 1800 20201002091754 20200925091754 65493 occnet.gov. CeStOOcU6P7xcyfsTRdHxrVTzLQbrxdD7xuBn9BDvFFGl9mPbk7JAa/YG6u2XnFwZyfzTO4/vV9v C2m6W5Lb9xWD5NakmPRgMjJ38VrMVuwpLa42SfrkEzwyRkGokMbsHy07jACJcpodOug9IbEQ81YL 4RsPu10i8OLpyN4+D7A= )`
	RRSIG=65493 and DNSKEY=65493 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test OCCNET.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: