DNSSEC Analyzer - OCWR.GOV

Domain Name:

Time: 2021-10-16 11:43:35 UTC, NTP stratum 16

Analyzing DNSSEC problems for OCWR.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to e.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.203.230.10
	;; Response received from 192.203.230.10 (864 octets) ;; HEADER SECTION ;; id = 32763 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAY+oUaY0b7Z45vRD1ef/GykZqgHJtfdzRcnQNvGVQAqlH22QChtG+n1EMugw7T/6uDBAGlRI kXASdtHXhxStb9lPpyQe5/JIuMIlg+NhxKxEJ5e3J9SSPCavvDhH/BPrBCJwn8b68QAWRjVW6Rgd x63pUm7lfsimiWGMfplHNvcZWgVbKA9OI2o2lU8rT8n7zuwtlZPNpDLSI5GzrJgIiKR2Id16fmAg TJBOw14Xye/t4/BxTdxeMiiVFwA4KUV2VeqspHKSHFOz+lUIIqBRknEmYpSvnxnyi0n1n4tGnGP8 z6ZwRACi1Rw0nCu7BGOU9M6LpInRoW/W4KXLODr6xqU= ) ; Key ID = 14748 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20211101000000 20211011000000 20326 . Vgp/qDkJ+iPavrz3Y8x60J2QTkY2ohOdsNcbTYrzBeWPzrdEGMbIovAJ41Khp+0yRFfqYRc8LQqG 7NT+4Fnzsg3LAFhqpZ99NEWSHwvC/6veJRbmH9u9D4VbO90IpEoUTBd7xGU1I3Vr3RNaHGqsrVRo dgEMKlh85CJJUZAhoH+BiDQIPNPBSMGy6F+78qJb+JccBlIWD/rZulBqqc6QsSDlHNMWNmVF4Y3S 280Co5AIx+W3ATkIXyGzW78lpe/1xJyCuMsQZwAT7j5RMAwmlV2WVoe9rMaezCIzTiaiEMTOaJcc MpbdykfOLpxJDbgqzABEfK6Qg2NcOa5P1LOPTw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAY+oUaY0b7Z45vRD1ef/GykZqgHJtfdzRcnQNvGVQAqlH22QChtG+n1EMugw7T/6uDBAGlRI kXASdtHXhxStb9lPpyQe5/JIuMIlg+NhxKxEJ5e3J9SSPCavvDhH/BPrBCJwn8b68QAWRjVW6Rgd x63pUm7lfsimiWGMfplHNvcZWgVbKA9OI2o2lU8rT8n7zuwtlZPNpDLSI5GzrJgIiKR2Id16fmAg TJBOw14Xye/t4/BxTdxeMiiVFwA4KUV2VeqspHKSHFOz+lUIIqBRknEmYpSvnxnyi0n1n4tGnGP8 z6ZwRACi1Rw0nCu7BGOU9M6LpInRoW/W4KXLODr6xqU= ) ; Key ID = 14748`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20211101000000 20211011000000 20326 . Vgp/qDkJ+iPavrz3Y8x60J2QTkY2ohOdsNcbTYrzBeWPzrdEGMbIovAJ41Khp+0yRFfqYRc8LQqG 7NT+4Fnzsg3LAFhqpZ99NEWSHwvC/6veJRbmH9u9D4VbO90IpEoUTBd7xGU1I3Vr3RNaHGqsrVRo dgEMKlh85CJJUZAhoH+BiDQIPNPBSMGy6F+78qJb+JccBlIWD/rZulBqqc6QsSDlHNMWNmVF4Y3S 280Co5AIx+W3ATkIXyGzW78lpe/1xJyCuMsQZwAT7j5RMAwmlV2WVoe9rMaezCIzTiaiEMTOaJcc MpbdykfOLpxJDbgqzABEfK6Qg2NcOa5P1LOPTw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=14748 is now in the chain-of-trust
	Query to h.root-servers.net for OCWR.GOV/A
	Received 627 bytes from 198.97.190.53
	;; Response received from 198.97.190.53 (627 octets) ;; HEADER SECTION ;; id = 55470 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; OCWR.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20211029050000 20211016040000 14748 . HsJvcdYGrK2gYrexKsauiv5LuMkG2Ou4sPWh/bH2g0sRem2TWaOZis755LSMI3BlVNhyJ66tbcGh 73hdyyXEv9j+6Jz8Cq3oglTVuO0Mei3V9TP1zZzpAjmaAUkbIQUPH/icJ7S6NvInu3kHcH8rteaA URFMBsM10SoK8OHLpp+mr58m7Ii4N4aU+fQXC0JspMjhJwVgrw4JxeCQaKBPue19UcOHqR7evgej KZ2Zb3GUzrxoAKoHrYLUuqEhhMi7J0eYXJhdSy+AbvDBPGQuasRKZdCquSXDIgiFvnZrKLrThnp8 pBk0Q6Awz/piYbLGrzVIlGu9Mg+rJYTTFpdmew== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to l.root-servers.net for GOV/DNSKEY
	Received 622 bytes from 199.7.83.42
	;; Response received from 199.7.83.42 (622 octets) ;; HEADER SECTION ;; id = 6331 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20211029050000 20211016040000 14748 . HsJvcdYGrK2gYrexKsauiv5LuMkG2Ou4sPWh/bH2g0sRem2TWaOZis755LSMI3BlVNhyJ66tbcGh 73hdyyXEv9j+6Jz8Cq3oglTVuO0Mei3V9TP1zZzpAjmaAUkbIQUPH/icJ7S6NvInu3kHcH8rteaA URFMBsM10SoK8OHLpp+mr58m7Ii4N4aU+fQXC0JspMjhJwVgrw4JxeCQaKBPue19UcOHqR7evgej KZ2Zb3GUzrxoAKoHrYLUuqEhhMi7J0eYXJhdSy+AbvDBPGQuasRKZdCquSXDIgiFvnZrKLrThnp8 pBk0Q6Awz/piYbLGrzVIlGu9Mg+rJYTTFpdmew== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to l.root-servers.net for GOV/DS
	Received 367 bytes from 199.7.83.42
	;; Response received from 199.7.83.42 (367 octets) ;; HEADER SECTION ;; id = 42524 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20211029050000 20211016040000 14748 . HsJvcdYGrK2gYrexKsauiv5LuMkG2Ou4sPWh/bH2g0sRem2TWaOZis755LSMI3BlVNhyJ66tbcGh 73hdyyXEv9j+6Jz8Cq3oglTVuO0Mei3V9TP1zZzpAjmaAUkbIQUPH/icJ7S6NvInu3kHcH8rteaA URFMBsM10SoK8OHLpp+mr58m7Ii4N4aU+fQXC0JspMjhJwVgrw4JxeCQaKBPue19UcOHqR7evgej KZ2Zb3GUzrxoAKoHrYLUuqEhhMi7J0eYXJhdSy+AbvDBPGQuasRKZdCquSXDIgiFvnZrKLrThnp8 pBk0Q6Awz/piYbLGrzVIlGu9Mg+rJYTTFpdmew== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20211029050000 20211016040000 14748 . HsJvcdYGrK2gYrexKsauiv5LuMkG2Ou4sPWh/bH2g0sRem2TWaOZis755LSMI3BlVNhyJ66tbcGh 73hdyyXEv9j+6Jz8Cq3oglTVuO0Mei3V9TP1zZzpAjmaAUkbIQUPH/icJ7S6NvInu3kHcH8rteaA URFMBsM10SoK8OHLpp+mr58m7Ii4N4aU+fQXC0JspMjhJwVgrw4JxeCQaKBPue19UcOHqR7evgej KZ2Zb3GUzrxoAKoHrYLUuqEhhMi7J0eYXJhdSy+AbvDBPGQuasRKZdCquSXDIgiFvnZrKLrThnp8 pBk0Q6Awz/piYbLGrzVIlGu9Mg+rJYTTFpdmew== )`
	RRSIG=14748 and DNSKEY=14748 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to b.gov-servers.net for GOV/DNSKEY
	Received 957 bytes from 209.112.123.30
	;; Response received from 209.112.123.30 (957 octets) ;; HEADER SECTION ;; id = 5358 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (4 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAa3P+8n+GirNhbYEPYFwmMnTA1mFaJrXBX/+HB6zAOiQNrj73Itfm0sdk1PX4wkHEgvP3Mis rlHqKS8o/gzkYetRB7GpfIiG9KMih3Oq0zi0hB0ItG2DlE9VfW83TRRBVfUI5wSydNofIVnvkYFQ jLPYzy1B9mIHGqYMtpxjY7KCkyYcKMWWhbmF0Uk4WrHJcYZlkiTMH7k1SHamjrGDed0= ) ; Key ID = 6229 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAdfjPT+uxmm9v6KKrQxtXTaa8msI9el/N3dzk2ReFJban378/fN3Pxc0DDq6zw6iBkTdzTsN NDtRvTbdK7uYfrSiPrZ8sPd2jeugzdNw7zpGzW8+cGmjA+0lETYgbE+0ivR+NDheYbcM+zOW9M8f +qTaer6tmgWxqLFNI32TP6RdFr/yfMCTDoEe+JuedI2yi0X3zVDMqV/wnedEeKrWsvc= ) ; Key ID = 57735 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20211021190254 20211006185754 7698 gov. QqvXIYkuB/aqOpBTzjLaFDWG/LeBqmala3EDo6eUenbRKd+jmMqdY5nT2auZyajQ08eAAQitd8Be 1WG7aGUOuBZ1G4bK1blM4izJvjJcni3tHo9BIAAPk0MF8o1CmqOBoHQYv4gfspjH4LNJE7q96nLa uobGpjiMSwZi2OXOSlu1ZA4qeax1UA4/dVSqPhtDVqACSx11UV+SYir5rxOd/3/4lzRZQf7SQ1kw JlQg+/vCLxVzgXTGdaoTzmoqG8aQxTc7+lSW4Gf06J7tIVO3QBH5lN7QWYqHtGs2zfxnK71bcILx p7zVagLI+ZpXPe4V335kmuKVaUgLq5ilu18HbQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAa3P+8n+GirNhbYEPYFwmMnTA1mFaJrXBX/+HB6zAOiQNrj73Itfm0sdk1PX4wkHEgvP3Mis rlHqKS8o/gzkYetRB7GpfIiG9KMih3Oq0zi0hB0ItG2DlE9VfW83TRRBVfUI5wSydNofIVnvkYFQ jLPYzy1B9mIHGqYMtpxjY7KCkyYcKMWWhbmF0Uk4WrHJcYZlkiTMH7k1SHamjrGDed0= ) ; Key ID = 6229`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAdfjPT+uxmm9v6KKrQxtXTaa8msI9el/N3dzk2ReFJban378/fN3Pxc0DDq6zw6iBkTdzTsN NDtRvTbdK7uYfrSiPrZ8sPd2jeugzdNw7zpGzW8+cGmjA+0lETYgbE+0ivR+NDheYbcM+zOW9M8f +qTaer6tmgWxqLFNI32TP6RdFr/yfMCTDoEe+JuedI2yi0X3zVDMqV/wnedEeKrWsvc= ) ; Key ID = 57735`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20211021190254 20211006185754 7698 gov. QqvXIYkuB/aqOpBTzjLaFDWG/LeBqmala3EDo6eUenbRKd+jmMqdY5nT2auZyajQ08eAAQitd8Be 1WG7aGUOuBZ1G4bK1blM4izJvjJcni3tHo9BIAAPk0MF8o1CmqOBoHQYv4gfspjH4LNJE7q96nLa uobGpjiMSwZi2OXOSlu1ZA4qeax1UA4/dVSqPhtDVqACSx11UV+SYir5rxOd/3/4lzRZQf7SQ1kw JlQg+/vCLxVzgXTGdaoTzmoqG8aQxTc7+lSW4Gf06J7tIVO3QBH5lN7QWYqHtGs2zfxnK71bcILx p7zVagLI+ZpXPe4V335kmuKVaUgLq5ilu18HbQ== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=6229 is now in the chain-of-trust
	DNSKEY=57735 is now in the chain-of-trust
	Query to b.gov-servers.net for OCWR.GOV/A
	Received 419 bytes from 209.112.123.30
	;; Response received from 209.112.123.30 (419 octets) ;; HEADER SECTION ;; id = 39628 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; OCWR.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) OCWR.GOV. 86400 IN NS ns-66.awsdns-08.com. OCWR.GOV. 86400 IN NS ns-1120.awsdns-12.org. OCWR.GOV. 86400 IN NS ns-680.awsdns-21.net. OCWR.GOV. 86400 IN NS ns-1821.awsdns-35.co.uk. OCWR.GOV. 3600 IN DS ( 28527 13 2 c18d36dc06558dd536b72889a92ec276f98a5fda0a5800ee911db1f76005397e ) OCWR.GOV. 3600 IN RRSIG ( DS 8 2 3600 20211022194130 20211015194130 6229 gov. VQImo2q/XWlzgSMU9BOWVZDI9hwjRcc2r2i9EycJFQgX7Tjdq/Ho9krL5mruw9Sc/vznIoKfhQFD bo5hh4153lWFKCaDXGPjzDDdVokt+gGACM0cDCLBcLoiv7do2e4Bbhytzr+m7CgtbUgyOpziclGg UKPQA0+DewyNyr8PtJavDxnHO752Ji2Hg/Qs2PLdJ8MYRrxFh6ELDUFT9u4veA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.gov-servers.net for OCWR.GOV/DNSKEY
	Received 419 bytes from 69.36.157.30
	;; Response received from 69.36.157.30 (419 octets) ;; HEADER SECTION ;; id = 52867 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; OCWR.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) OCWR.GOV. 86400 IN NS ns-66.awsdns-08.com. OCWR.GOV. 86400 IN NS ns-1120.awsdns-12.org. OCWR.GOV. 86400 IN NS ns-680.awsdns-21.net. OCWR.GOV. 86400 IN NS ns-1821.awsdns-35.co.uk. OCWR.GOV. 3600 IN DS ( 28527 13 2 c18d36dc06558dd536b72889a92ec276f98a5fda0a5800ee911db1f76005397e ) OCWR.GOV. 3600 IN RRSIG ( DS 8 2 3600 20211022194130 20211015194130 6229 gov. VQImo2q/XWlzgSMU9BOWVZDI9hwjRcc2r2i9EycJFQgX7Tjdq/Ho9krL5mruw9Sc/vznIoKfhQFD bo5hh4153lWFKCaDXGPjzDDdVokt+gGACM0cDCLBcLoiv7do2e4Bbhytzr+m7CgtbUgyOpziclGg UKPQA0+DewyNyr8PtJavDxnHO752Ji2Hg/Qs2PLdJ8MYRrxFh6ELDUFT9u4veA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone OCWR.GOV

OCWR.GOV

	Checking DS between GOV and OCWR.GOV
	Query to b.gov-servers.net for OCWR.GOV/DS
	Received 280 bytes from 209.112.123.30
	;; Response received from 209.112.123.30 (280 octets) ;; HEADER SECTION ;; id = 33479 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; OCWR.GOV. IN DS ;; ANSWER SECTION (2 records) OCWR.GOV. 3600 IN DS ( 28527 13 2 c18d36dc06558dd536b72889a92ec276f98a5fda0a5800ee911db1f76005397e ) OCWR.GOV. 3600 IN RRSIG ( DS 8 2 3600 20211022194130 20211015194130 6229 gov. VQImo2q/XWlzgSMU9BOWVZDI9hwjRcc2r2i9EycJFQgX7Tjdq/Ho9krL5mruw9Sc/vznIoKfhQFD bo5hh4153lWFKCaDXGPjzDDdVokt+gGACM0cDCLBcLoiv7do2e4Bbhytzr+m7CgtbUgyOpziclGg UKPQA0+DewyNyr8PtJavDxnHO752Ji2Hg/Qs2PLdJ8MYRrxFh6ELDUFT9u4veA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for OCWR.GOV in the GOV zone
	DS=28527/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`OCWR.GOV. 3600 IN RRSIG ( DS 8 2 3600 20211022194130 20211015194130 6229 gov. VQImo2q/XWlzgSMU9BOWVZDI9hwjRcc2r2i9EycJFQgX7Tjdq/Ho9krL5mruw9Sc/vznIoKfhQFD bo5hh4153lWFKCaDXGPjzDDdVokt+gGACM0cDCLBcLoiv7do2e4Bbhytzr+m7CgtbUgyOpziclGg UKPQA0+DewyNyr8PtJavDxnHO752Ji2Hg/Qs2PLdJ8MYRrxFh6ELDUFT9u4veA== )`
	RRSIG=6229 and DNSKEY=6229 verifies the DS RRset
	DS=28527/SHA-256 is now in the chain-of-trust
	`OCWR.GOV. 3600 IN DS ( 28527 13 2 c18d36dc06558dd536b72889a92ec276f98a5fda0a5800ee911db1f76005397e )`
	Query to ns-1120.awsdns-12.org for OCWR.GOV/DNSKEY
	Received 381 bytes from 205.251.196.96
	;; Response received from 205.251.196.96 (381 octets) ;; HEADER SECTION ;; id = 22555 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; OCWR.GOV. IN DNSKEY ;; ANSWER SECTION (4 records) OCWR.GOV. 3600 IN DNSKEY ( 256 3 13 F1rmzeebC5IwG3vO0le29DZp9CCXEsWFQi+tpETxNIoAEU1iLFCMmdvZjNeTHGdPljp5yEbbdA0J WFQ6yLXhfA== ) ; Key ID = 22326 OCWR.GOV. 3600 IN DNSKEY ( 256 3 13 LW/uT/V4QkrLvsinruhl/646cpEIVMeagAlme1uvqvM/LuC3rrhK9KLt+ajdJ6ubXlFEIoZxJVG4 wkSap6t7gQ== ) ; Key ID = 35950 OCWR.GOV. 3600 IN DNSKEY ( 257 3 13 rhp6Z7VUNsQPF0nTUlXGzJ2UXG503qgXFfW8cSypQyqC4GpPB941gWhfz9QRgnfzHEarlV9jq0NS S/kBLMBUvQ== ) ; Key ID = 28527 OCWR.GOV. 3600 IN RRSIG ( DNSKEY 13 2 3600 20211016180000 20211016070000 28527 ocwr.gov. yhYg6IRf8MTObznif2dpiTjRepHmzwrMVJV7VZBX3Wu75GKvWOeKP3c1WPb03+RRFFEUCvHvaTJQ D+NdaJ3oxg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for OCWR.GOV
	`OCWR.GOV. 3600 IN DNSKEY ( 256 3 13 F1rmzeebC5IwG3vO0le29DZp9CCXEsWFQi+tpETxNIoAEU1iLFCMmdvZjNeTHGdPljp5yEbbdA0J WFQ6yLXhfA== ) ; Key ID = 22326`
	`OCWR.GOV. 3600 IN DNSKEY ( 256 3 13 LW/uT/V4QkrLvsinruhl/646cpEIVMeagAlme1uvqvM/LuC3rrhK9KLt+ajdJ6ubXlFEIoZxJVG4 wkSap6t7gQ== ) ; Key ID = 35950`
	`OCWR.GOV. 3600 IN DNSKEY ( 257 3 13 rhp6Z7VUNsQPF0nTUlXGzJ2UXG503qgXFfW8cSypQyqC4GpPB941gWhfz9QRgnfzHEarlV9jq0NS S/kBLMBUvQ== ) ; Key ID = 28527`
	DNSKEY=28527/SEP is now in the chain-of-trust
	DS=28527/SHA-256 verifies DNSKEY=28527/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`OCWR.GOV. 3600 IN RRSIG ( DNSKEY 13 2 3600 20211016180000 20211016070000 28527 ocwr.gov. yhYg6IRf8MTObznif2dpiTjRepHmzwrMVJV7VZBX3Wu75GKvWOeKP3c1WPb03+RRFFEUCvHvaTJQ D+NdaJ3oxg== )`
	RRSIG=28527 and DNSKEY=28527/SEP verifies the DNSKEY RRset
	DNSKEY=22326 is now in the chain-of-trust
	DNSKEY=35950 is now in the chain-of-trust
	Query to ns-680.awsdns-21.net for OCWR.GOV/A
	Received 157 bytes from 205.251.194.168
	;; Response received from 205.251.194.168 (157 octets) ;; HEADER SECTION ;; id = 5869 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; OCWR.GOV. IN A ;; ANSWER SECTION (2 records) OCWR.GOV. 900 IN A 192.31.129.203 OCWR.GOV. 900 IN RRSIG ( A 13 2 900 20211016125836 20211016104336 22326 ocwr.gov. R+2HD5rnE7PcGUw/V02fNBjGNhyQxEQAuEaFj9nONpAF1n5pn4LsOTjcq0tFjLDPzH4bb/djqLNj hbzw7N1xHg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns-680.awsdns-21.net is authoritative for OCWR.GOV
	Found RRSIG signed by ocwr.gov zone
	Query to ns-1120.awsdns-12.org for OCWR.GOV/SOA
	Received 228 bytes from 205.251.196.96
	;; Response received from 205.251.196.96 (228 octets) ;; HEADER SECTION ;; id = 65169 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; OCWR.GOV. IN SOA ;; ANSWER SECTION (2 records) OCWR.GOV. 900 IN SOA ( ns-1821.awsdns-35.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) OCWR.GOV. 900 IN RRSIG ( SOA 13 2 900 20211016125836 20211016104336 22326 ocwr.gov. 8Z2nUqwTsz4NmagyDRZzVOTBxTJZ4YDT7bD3A/isRfUOR+47Cgdb/cpwLHA6jd6oEDE17BOu6cxV Kkm9h7NbkA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-1821.awsdns-35.co.uk for OCWR.GOV/SOA
	Received 228 bytes from 205.251.199.29
	;; Response received from 205.251.199.29 (228 octets) ;; HEADER SECTION ;; id = 42381 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; OCWR.GOV. IN SOA ;; ANSWER SECTION (2 records) OCWR.GOV. 900 IN SOA ( ns-1821.awsdns-35.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) OCWR.GOV. 900 IN RRSIG ( SOA 13 2 900 20211016125836 20211016104336 22326 ocwr.gov. 5wqka3gGKVe9WEvC6jlSGNPHE9bKEWAgh5HqZ3cKQLbH7PPy28U0tAJzpr/gkTn0ae49fxlUuLrD Zah06Nyd3Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-66.awsdns-08.com for OCWR.GOV/SOA
	Received 228 bytes from 205.251.192.66
	;; Response received from 205.251.192.66 (228 octets) ;; HEADER SECTION ;; id = 18840 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; OCWR.GOV. IN SOA ;; ANSWER SECTION (2 records) OCWR.GOV. 900 IN SOA ( ns-1821.awsdns-35.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) OCWR.GOV. 900 IN RRSIG ( SOA 13 2 900 20211016125836 20211016104336 22326 ocwr.gov. XtX6Nu1kTkbqW+erl1J8lffbRQKleFwDtq8K79IuFx3FUb5MSDe+hEeKZquG4TzRo3U14l1xpwe9 Iz5PJvPijQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-680.awsdns-21.net for OCWR.GOV/A
	Received 157 bytes from 205.251.194.168
	;; Response received from 205.251.194.168 (157 octets) ;; HEADER SECTION ;; id = 9929 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; OCWR.GOV. IN A ;; ANSWER SECTION (2 records) OCWR.GOV. 900 IN A 192.31.129.203 OCWR.GOV. 900 IN RRSIG ( A 13 2 900 20211016125836 20211016104336 22326 ocwr.gov. FYkSJXVaGAjA30r/DjHxy4craF2e/QAmxhcFAemUtPbj0AMMjhkilpRcx+x7yIwJJzRaXAP+njia O/mdGtqAqg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	OCWR.GOV A RR has value 192.31.129.203
	Found 1 RRSIGs over A RRset
	`OCWR.GOV. 900 IN RRSIG ( A 13 2 900 20211016125836 20211016104336 22326 ocwr.gov. FYkSJXVaGAjA30r/DjHxy4craF2e/QAmxhcFAemUtPbj0AMMjhkilpRcx+x7yIwJJzRaXAP+njia O/mdGtqAqg== )`
	RRSIG=22326 and DNSKEY=22326 verifies the A RRset

OCWR.GOV

	Query to ns-1120.awsdns-12.org for OCWR.GOV/A
	Received 157 bytes from 205.251.196.96
	;; Response received from 205.251.196.96 (157 octets) ;; HEADER SECTION ;; id = 42680 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; OCWR.GOV. IN A ;; ANSWER SECTION (2 records) OCWR.GOV. 900 IN A 192.31.129.203 OCWR.GOV. 900 IN RRSIG ( A 13 2 900 20211016125836 20211016104336 22326 ocwr.gov. JzOJs9oFTnnr9ycvcxTjsr2QK4YsrgNumw6I9FBb4zpfUU5pmJkZo5Xg6ze5+Owt7fsgyuXLpPvG S53Jf64sdA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns-1120.awsdns-12.org is authoritative for OCWR.GOV
	Found RRSIG signed by ocwr.gov zone
	Query to ns-1120.awsdns-12.org for OCWR.GOV/A
	Received 157 bytes from 205.251.196.96
	;; Response received from 205.251.196.96 (157 octets) ;; HEADER SECTION ;; id = 37933 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; OCWR.GOV. IN A ;; ANSWER SECTION (2 records) OCWR.GOV. 900 IN A 192.31.129.203 OCWR.GOV. 900 IN RRSIG ( A 13 2 900 20211016125836 20211016104336 22326 ocwr.gov. JCROZA+HhpPYtF1OL5uuXfWjxB8Ad6vJN3DR12t36k4PjudGyvijqV/ME0bOxOwT2MV3AaZNSlgB l/r2VpBXcg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	OCWR.GOV A RR has value 192.31.129.203
	Found 1 RRSIGs over A RRset
	`OCWR.GOV. 900 IN RRSIG ( A 13 2 900 20211016125836 20211016104336 22326 ocwr.gov. JCROZA+HhpPYtF1OL5uuXfWjxB8Ad6vJN3DR12t36k4PjudGyvijqV/ME0bOxOwT2MV3AaZNSlgB l/r2VpBXcg== )`
	RRSIG=22326 and DNSKEY=22326 verifies the A RRset

OCWR.GOV

	Query to ns-66.awsdns-08.com for OCWR.GOV/A
	Received 157 bytes from 205.251.192.66
	;; Response received from 205.251.192.66 (157 octets) ;; HEADER SECTION ;; id = 57004 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; OCWR.GOV. IN A ;; ANSWER SECTION (2 records) OCWR.GOV. 900 IN A 192.31.129.203 OCWR.GOV. 900 IN RRSIG ( A 13 2 900 20211016125836 20211016104336 22326 ocwr.gov. GUhAuIt4DMRu9Fu4sohgRGNaYzS4NBI8QaamOGszVVid35oRO2Gw33RilZsUtFQ/7KBF+QqcqPi9 xVIxOVKK6g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns-66.awsdns-08.com is authoritative for OCWR.GOV
	Found RRSIG signed by ocwr.gov zone
	Query to ns-66.awsdns-08.com for OCWR.GOV/A
	Received 157 bytes from 205.251.192.66
	;; Response received from 205.251.192.66 (157 octets) ;; HEADER SECTION ;; id = 9884 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; OCWR.GOV. IN A ;; ANSWER SECTION (2 records) OCWR.GOV. 900 IN A 192.31.129.203 OCWR.GOV. 900 IN RRSIG ( A 13 2 900 20211016125836 20211016104336 22326 ocwr.gov. AmwhcKU474oDZ0cTppmDsXBr/E+RCjJ05+NhG7qnmQN+ERSJ5kEFHuqktNOIQI9n/8HWSj+qqQY/ dJNqFFR7gg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	OCWR.GOV A RR has value 192.31.129.203
	Found 1 RRSIGs over A RRset
	`OCWR.GOV. 900 IN RRSIG ( A 13 2 900 20211016125836 20211016104336 22326 ocwr.gov. AmwhcKU474oDZ0cTppmDsXBr/E+RCjJ05+NhG7qnmQN+ERSJ5kEFHuqktNOIQI9n/8HWSj+qqQY/ dJNqFFR7gg== )`
	RRSIG=22326 and DNSKEY=22326 verifies the A RRset

OCWR.GOV

	Query to ns-1821.awsdns-35.co.uk for OCWR.GOV/A
	Received 157 bytes from 205.251.199.29
	;; Response received from 205.251.199.29 (157 octets) ;; HEADER SECTION ;; id = 40456 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; OCWR.GOV. IN A ;; ANSWER SECTION (2 records) OCWR.GOV. 900 IN A 192.31.129.203 OCWR.GOV. 900 IN RRSIG ( A 13 2 900 20211016125836 20211016104336 22326 ocwr.gov. X3Ck73KpUUzR1LxpbQJNZtwn8pvy5Vxyw2WBIRiYBycy0BWIYYPQg3v0u+LrChhRB7fcqw2Bxtq+ scpRMpW0ew== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns-1821.awsdns-35.co.uk is authoritative for OCWR.GOV
	Found RRSIG signed by ocwr.gov zone
	Query to ns-1821.awsdns-35.co.uk for OCWR.GOV/A
	Received 157 bytes from 205.251.199.29
	;; Response received from 205.251.199.29 (157 octets) ;; HEADER SECTION ;; id = 24510 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; OCWR.GOV. IN A ;; ANSWER SECTION (2 records) OCWR.GOV. 900 IN A 192.31.129.203 OCWR.GOV. 900 IN RRSIG ( A 13 2 900 20211016125836 20211016104336 22326 ocwr.gov. SgWmfCl1rFoeJNNlYQWUO2Dzh7TBceUsDc+SGQPeP4hAG6HuY/gvGsEbCrzcC7XM4rR4YUOnvZ3c Vi10VVRDgw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	OCWR.GOV A RR has value 192.31.129.203
	Found 1 RRSIGs over A RRset
	`OCWR.GOV. 900 IN RRSIG ( A 13 2 900 20211016125836 20211016104336 22326 ocwr.gov. SgWmfCl1rFoeJNNlYQWUO2Dzh7TBceUsDc+SGQPeP4hAG6HuY/gvGsEbCrzcC7XM4rR4YUOnvZ3c Vi10VVRDgw== )`
	RRSIG=22326 and DNSKEY=22326 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test OCWR.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: