DNSSEC Analyzer

Domain Name:

Time: 2022-05-17 11:25:13 UTC, NTP stratum 16

Analyzing DNSSEC problems for REC.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to b.root-servers.net for ./DNSKEY
	Received 864 bytes from 199.9.14.201
	;; Response received from 199.9.14.201 (864 octets) ;; HEADER SECTION ;; id = 64139 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAak/ZU9wDNQD7XTAGTDkn32UR8I6auRDekbGky+yyWKdUHmwAJv90YHCUTib8aVBgNgbxkee ZGRx3W4+XhMZbfUr5fMwmD3u9P2yzJpbRtjGNM/XZvzGs9HHNymz3Bp851anHZfNy6pJud265/XM KzFlAY8sMJjum0hvx/DuCDELLyhsvdfOD9rHM93UXO0bcAjvI8tjZsGI+Pfp9KdxF9vS/sAzpFXK sldix+e6xv8rRS6WPg2LAooxF+eO5DgFSilYmnyCK4VPJ7ntjD/8m0bs128ZT1eY3oXCbojDv59l LAgrdGSbcVxQF2KHoUHDmkOC5BzG/1xRtW4v/3y4/H8= ) ; Key ID = 47671 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20220601000000 20220511000000 20326 . PkWuz6E+VDmH80HQbpO7cChnMFj9YYs8wS5FP/HOcNBodxhvzpR/9mC58GJIpX+w8gZ/O6GyzgeR FCXWm1+LSBOAmRih7B9xBLiyfieHnz3Knwe8hMW8kDjnJmMjO7SV2rX4kus4dGqRFwkdUgjuraGe RIqhXLUpXb7AVaMOoM08XvykBcuyB7pTrVb9MeFVPLhXjYHghf1NKXaKcUzLkWG3LCA6crWiePRV pPG4xbYAvjWEt6SV6PwpWWctYORuErx6R5IQ0XSNSP4jK2XmR0J9mUYMCxa0YOa1Rk2oaFWsU0FQ 7fHhdndW8y2+Ol+tF6xWAsgEGXCYWqjLsXAPIg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAak/ZU9wDNQD7XTAGTDkn32UR8I6auRDekbGky+yyWKdUHmwAJv90YHCUTib8aVBgNgbxkee ZGRx3W4+XhMZbfUr5fMwmD3u9P2yzJpbRtjGNM/XZvzGs9HHNymz3Bp851anHZfNy6pJud265/XM KzFlAY8sMJjum0hvx/DuCDELLyhsvdfOD9rHM93UXO0bcAjvI8tjZsGI+Pfp9KdxF9vS/sAzpFXK sldix+e6xv8rRS6WPg2LAooxF+eO5DgFSilYmnyCK4VPJ7ntjD/8m0bs128ZT1eY3oXCbojDv59l LAgrdGSbcVxQF2KHoUHDmkOC5BzG/1xRtW4v/3y4/H8= ) ; Key ID = 47671`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20220601000000 20220511000000 20326 . PkWuz6E+VDmH80HQbpO7cChnMFj9YYs8wS5FP/HOcNBodxhvzpR/9mC58GJIpX+w8gZ/O6GyzgeR FCXWm1+LSBOAmRih7B9xBLiyfieHnz3Knwe8hMW8kDjnJmMjO7SV2rX4kus4dGqRFwkdUgjuraGe RIqhXLUpXb7AVaMOoM08XvykBcuyB7pTrVb9MeFVPLhXjYHghf1NKXaKcUzLkWG3LCA6crWiePRV pPG4xbYAvjWEt6SV6PwpWWctYORuErx6R5IQ0XSNSP4jK2XmR0J9mUYMCxa0YOa1Rk2oaFWsU0FQ 7fHhdndW8y2+Ol+tF6xWAsgEGXCYWqjLsXAPIg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=47671 is now in the chain-of-trust
	Query to e.root-servers.net for REC.GOV/A
	Received 626 bytes from 192.203.230.10
	;; Response received from 192.203.230.10 (626 octets) ;; HEADER SECTION ;; id = 57824 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; REC.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20220530050000 20220517040000 47671 . V/pZBFyWGKD3Ismj9gJ8Yf7K5tg3eFxnGm5c9FPmk84UKfMEfHIfDr2LZp5S4gq0ZG1AXwQNEHvr YBAD3B0g/EARpwmCkPCRpVcZXjPQXlCXTBSRl6No7Stz2hiCUUXhTzw9AW2a7TS7pnNs7N0RPFKX WvBvh+CUrYtl11mTLh3axVOI4+7z9JaxkJwiyLO4+vHcTeDwBpZRkwYdQrTsifGu03EZSCg+0ElR l4N+Z+R+MkDbWMnFsoio4349ZnFQ+kzL9077Tniskm4tCjwBsE6rsumrBskRzeFNEAfjkvOnC2xZ wMAAHGxM/ZfUr6fLUwxib+3iVK8S4vfbyh+55Q== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to m.root-servers.net for GOV/DNSKEY
	Received 625 bytes from 202.12.27.33
	;; Response received from 202.12.27.33 (625 octets) ;; HEADER SECTION ;; id = 4995 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20220530050000 20220517040000 47671 . V/pZBFyWGKD3Ismj9gJ8Yf7K5tg3eFxnGm5c9FPmk84UKfMEfHIfDr2LZp5S4gq0ZG1AXwQNEHvr YBAD3B0g/EARpwmCkPCRpVcZXjPQXlCXTBSRl6No7Stz2hiCUUXhTzw9AW2a7TS7pnNs7N0RPFKX WvBvh+CUrYtl11mTLh3axVOI4+7z9JaxkJwiyLO4+vHcTeDwBpZRkwYdQrTsifGu03EZSCg+0ElR l4N+Z+R+MkDbWMnFsoio4349ZnFQ+kzL9077Tniskm4tCjwBsE6rsumrBskRzeFNEAfjkvOnC2xZ wMAAHGxM/ZfUr6fLUwxib+3iVK8S4vfbyh+55Q== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to b.root-servers.net for GOV/DS
	Received 367 bytes from 199.9.14.201
	;; Response received from 199.9.14.201 (367 octets) ;; HEADER SECTION ;; id = 40739 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20220530050000 20220517040000 47671 . V/pZBFyWGKD3Ismj9gJ8Yf7K5tg3eFxnGm5c9FPmk84UKfMEfHIfDr2LZp5S4gq0ZG1AXwQNEHvr YBAD3B0g/EARpwmCkPCRpVcZXjPQXlCXTBSRl6No7Stz2hiCUUXhTzw9AW2a7TS7pnNs7N0RPFKX WvBvh+CUrYtl11mTLh3axVOI4+7z9JaxkJwiyLO4+vHcTeDwBpZRkwYdQrTsifGu03EZSCg+0ElR l4N+Z+R+MkDbWMnFsoio4349ZnFQ+kzL9077Tniskm4tCjwBsE6rsumrBskRzeFNEAfjkvOnC2xZ wMAAHGxM/ZfUr6fLUwxib+3iVK8S4vfbyh+55Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20220530050000 20220517040000 47671 . V/pZBFyWGKD3Ismj9gJ8Yf7K5tg3eFxnGm5c9FPmk84UKfMEfHIfDr2LZp5S4gq0ZG1AXwQNEHvr YBAD3B0g/EARpwmCkPCRpVcZXjPQXlCXTBSRl6No7Stz2hiCUUXhTzw9AW2a7TS7pnNs7N0RPFKX WvBvh+CUrYtl11mTLh3axVOI4+7z9JaxkJwiyLO4+vHcTeDwBpZRkwYdQrTsifGu03EZSCg+0ElR l4N+Z+R+MkDbWMnFsoio4349ZnFQ+kzL9077Tniskm4tCjwBsE6rsumrBskRzeFNEAfjkvOnC2xZ wMAAHGxM/ZfUr6fLUwxib+3iVK8S4vfbyh+55Q== )`
	RRSIG=47671 and DNSKEY=47671 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to b.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 209.112.123.30
	;; Response received from 209.112.123.30 (777 octets) ;; HEADER SECTION ;; id = 53554 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAcMiSRWS8eP1lhmsxCp/xRqF4ywBpC8OZ8SlW3boQwaSUol5jFtTpTTM8uKNyNrI/6Vc1crn QWCCPAv+mZGHzMgDkpD3JpW4UhVvI8AkNvoT/LTxCmhC6nZUOTv7Njg+yBVLm4bMw9EaH18N+HVl uhHX1ZOjhnY7uBf1DC32L4ibJvgjiREljTH622fsAXwf9hTE2UdQ/P3SDNrooKswmWE= ) ; Key ID = 2706 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20220524190254 20220509185754 7698 gov. qfiWJKXVV4H1aMozgr+uPpZgWSeNiDenfJHt0NBVsSkk/BSGzAYA2hZqS+J0s7B58PWfyfJ71QEO rIx+iFWy3Gkw3X64q0lgePvxBHnIU2Fd7f24xJ0s+tsTix/RL2mgswbly0GK5tISa7z3T99ZqDic 8lLK509uQi4PFhqPJF8ItJRHUZ7ig5Ca1cBkDib2g0HeEBU8YQYvAYfNidRJRlgyEYmVqF7GMl+s NFVeEXgej9MkOdtbkqvcmF2aXdOINeM3T+y7TNXx3NwXjmiKmEgCqsPOh+6zwzrA9WSomYZq8O77 dzgk9V3tQ60c0R2N5Al+ZemQCmmmlgQ6EHqFSw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAcMiSRWS8eP1lhmsxCp/xRqF4ywBpC8OZ8SlW3boQwaSUol5jFtTpTTM8uKNyNrI/6Vc1crn QWCCPAv+mZGHzMgDkpD3JpW4UhVvI8AkNvoT/LTxCmhC6nZUOTv7Njg+yBVLm4bMw9EaH18N+HVl uhHX1ZOjhnY7uBf1DC32L4ibJvgjiREljTH622fsAXwf9hTE2UdQ/P3SDNrooKswmWE= ) ; Key ID = 2706`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20220524190254 20220509185754 7698 gov. qfiWJKXVV4H1aMozgr+uPpZgWSeNiDenfJHt0NBVsSkk/BSGzAYA2hZqS+J0s7B58PWfyfJ71QEO rIx+iFWy3Gkw3X64q0lgePvxBHnIU2Fd7f24xJ0s+tsTix/RL2mgswbly0GK5tISa7z3T99ZqDic 8lLK509uQi4PFhqPJF8ItJRHUZ7ig5Ca1cBkDib2g0HeEBU8YQYvAYfNidRJRlgyEYmVqF7GMl+s NFVeEXgej9MkOdtbkqvcmF2aXdOINeM3T+y7TNXx3NwXjmiKmEgCqsPOh+6zwzrA9WSomYZq8O77 dzgk9V3tQ60c0R2N5Al+ZemQCmmmlgQ6EHqFSw== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=2706 is now in the chain-of-trust
	Query to d.gov-servers.net for REC.GOV/A
	Received 412 bytes from 81.19.194.30
	;; Response received from 81.19.194.30 (412 octets) ;; HEADER SECTION ;; id = 25595 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; REC.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) REC.GOV. 86400 IN NS a20-66.akam.net. REC.GOV. 86400 IN NS a22-67.akam.net. REC.GOV. 86400 IN NS a3-64.akam.net. REC.GOV. 86400 IN NS a1-219.akam.net. REC.GOV. 86400 IN NS a11-64.akam.net. REC.GOV. 86400 IN NS a18-65.akam.net. REC.GOV. 3600 IN DS ( 4812 10 2 7363db79a418bdee6389bbd75b5935c841e523a1a2acbd01be6c5705f7ce15b6 ) REC.GOV. 3600 IN RRSIG ( DS 8 2 3600 20220523134156 20220516134156 2706 gov. W0bP+ya5u2RReDZYZjxII2q6R+F674tkXGpRL8qYyT6wowdUyHQgPMMaznX7jaXNGo0H8YrxLyOC jruFkkyMLwjnYUVdXvxh75Iks6/uV2OCorhF8RM3NF7oiaBHeyOC446GRz9pXCjxtWrH+pbLCjqd wCE7rAv65JmZqfGHPdenThZ2nnJQ2nymcGPTh1KuqYAL90MyZXAL5hSdji/vAw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.gov-servers.net for REC.GOV/DNSKEY
	Received 412 bytes from 69.36.157.30
	;; Response received from 69.36.157.30 (412 octets) ;; HEADER SECTION ;; id = 4937 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; REC.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) REC.GOV. 86400 IN NS a18-65.akam.net. REC.GOV. 86400 IN NS a22-67.akam.net. REC.GOV. 86400 IN NS a20-66.akam.net. REC.GOV. 86400 IN NS a3-64.akam.net. REC.GOV. 86400 IN NS a11-64.akam.net. REC.GOV. 86400 IN NS a1-219.akam.net. REC.GOV. 3600 IN DS ( 4812 10 2 7363db79a418bdee6389bbd75b5935c841e523a1a2acbd01be6c5705f7ce15b6 ) REC.GOV. 3600 IN RRSIG ( DS 8 2 3600 20220523134156 20220516134156 2706 gov. W0bP+ya5u2RReDZYZjxII2q6R+F674tkXGpRL8qYyT6wowdUyHQgPMMaznX7jaXNGo0H8YrxLyOC jruFkkyMLwjnYUVdXvxh75Iks6/uV2OCorhF8RM3NF7oiaBHeyOC446GRz9pXCjxtWrH+pbLCjqd wCE7rAv65JmZqfGHPdenThZ2nnJQ2nymcGPTh1KuqYAL90MyZXAL5hSdji/vAw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone REC.GOV

REC.GOV

	Checking DS between GOV and REC.GOV
	Query to d.gov-servers.net for REC.GOV/DS
	Received 279 bytes from 81.19.194.30
	;; Response received from 81.19.194.30 (279 octets) ;; HEADER SECTION ;; id = 15441 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; REC.GOV. IN DS ;; ANSWER SECTION (2 records) REC.GOV. 3600 IN DS ( 4812 10 2 7363db79a418bdee6389bbd75b5935c841e523a1a2acbd01be6c5705f7ce15b6 ) REC.GOV. 3600 IN RRSIG ( DS 8 2 3600 20220523134156 20220516134156 2706 gov. W0bP+ya5u2RReDZYZjxII2q6R+F674tkXGpRL8qYyT6wowdUyHQgPMMaznX7jaXNGo0H8YrxLyOC jruFkkyMLwjnYUVdXvxh75Iks6/uV2OCorhF8RM3NF7oiaBHeyOC446GRz9pXCjxtWrH+pbLCjqd wCE7rAv65JmZqfGHPdenThZ2nnJQ2nymcGPTh1KuqYAL90MyZXAL5hSdji/vAw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for REC.GOV in the GOV zone
	DS=4812/SHA-256 has algorithm RSASHA512
	Found 1 RRSIGs over DS RRset
	`REC.GOV. 3600 IN RRSIG ( DS 8 2 3600 20220523134156 20220516134156 2706 gov. W0bP+ya5u2RReDZYZjxII2q6R+F674tkXGpRL8qYyT6wowdUyHQgPMMaznX7jaXNGo0H8YrxLyOC jruFkkyMLwjnYUVdXvxh75Iks6/uV2OCorhF8RM3NF7oiaBHeyOC446GRz9pXCjxtWrH+pbLCjqd wCE7rAv65JmZqfGHPdenThZ2nnJQ2nymcGPTh1KuqYAL90MyZXAL5hSdji/vAw== )`
	RRSIG=2706 and DNSKEY=2706 verifies the DS RRset
	DS=4812/SHA-256 is now in the chain-of-trust
	`REC.GOV. 3600 IN DS ( 4812 10 2 7363db79a418bdee6389bbd75b5935c841e523a1a2acbd01be6c5705f7ce15b6 )`
	Query to a1-219.akam.net for REC.GOV/DNSKEY
	Received 950 bytes from 193.108.91.219
	;; Response received from 193.108.91.219 (950 octets) ;; HEADER SECTION ;; id = 18765 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; REC.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) REC.GOV. 7200 IN DNSKEY ( 256 3 13 4wT2FYzTeuGRrhMi6IUkBSHIS9vj9WEZZVJ3P4qEU2GQxCskmkQTWMiCXjCeaqqsg67aOqzVTuH2 YjDCNazOVw== ) ; Key ID = 24956 REC.GOV. 7200 IN DNSKEY ( 256 3 13 6nb3UVWGJLt6VAMsNPx3VE/naffrzZ/BRAaUOJHQL4A9RTlc1FNvjgDmT+pSCpqVdjReTZ+Lz/04 NHYDOiVRuA== ) ; Key ID = 57082 REC.GOV. 7200 IN DNSKEY ( 257 3 10 AwEAAdAgcBh7yrB6AbLAqbCfCEAub/7kss6hjOTyie91BtEPv9hTZGtwoOzWNEwe8glULCRXm4Zg eNrOlLDELigUhzpnqjWvWADo0AfjA1RhXcAw04VkCOtXGsY2pe0AUsvCeW6exWDBmji3Ti1GWH5k CtnLgVsNcFxzWHeJzqKe0EYwwy6V01DyJnGUyUKtDdNAeRngNr4akvSyQU7qGXSz55f3Kp1qwcL/ t4oHwP8rPB8srahMG5lmLvduOavzM34mQMMAk8ea1N62Yd1EDMJ2H6QKf1vKMGUEuUhhO1BdlXua 8wZF5Z8pEBD1+iVQZo2rncGe8IUr9wZitd45sQ/6FUc= ) ; Key ID = 4812 REC.GOV. 7200 IN DNSKEY ( 257 3 13 aA5ipAm/HT0bQGQy7lxDFhybIeqWHZVzb7QAt1MBYJrall0WM/7gzT5pdYo6aH+dTHo1G34K/m5W 2Pn+2ZKaAA== ) ; Key ID = 45484 REC.GOV. 7200 IN RRSIG ( DNSKEY 10 2 7200 20220519135701 20220516125701 4812 rec.gov. SNd7XkWLvYL0slVsW9c5k5u9b8wydF8kS8Yk9I086JAnUO20jH8MtqJm/JjlwAqsBjHYdsKMTPXm FUidu7ZtPIJmySDmT51JjA3nXLUUs801JXdakt1lFp4kpLOp7bHTnMsCjJQaQRbZQex1vHb66NK8 /6q5M4wW5sfkp7kNaaiAIz7gcTn275anKkcLCThKK5UzGgsDTOr/GB8naT2IIls9AFw+/ml7mEyH loqfrxaytvfTAx7iNWNWFuxe712D8rqbGs0ok7KTin3Va/kGYfrq06iB3OPQx/76b1ELIDg01MZR uhlKslOPqbhKTqS0uEg+L+FCWQTG1+IH2KqP2A== ) REC.GOV. 7200 IN RRSIG ( DNSKEY 13 2 7200 20220519135701 20220516125701 45484 rec.gov. DZruycW0pY7BKxkgAxWu3HOmiAVM5bgWWPD++onsMI3Lw9AgxEkd9eGRHaESMXJ/k3CdVKxaNz9g BQ4qdFVzIg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for REC.GOV
	`REC.GOV. 7200 IN DNSKEY ( 256 3 13 4wT2FYzTeuGRrhMi6IUkBSHIS9vj9WEZZVJ3P4qEU2GQxCskmkQTWMiCXjCeaqqsg67aOqzVTuH2 YjDCNazOVw== ) ; Key ID = 24956`
	`REC.GOV. 7200 IN DNSKEY ( 256 3 13 6nb3UVWGJLt6VAMsNPx3VE/naffrzZ/BRAaUOJHQL4A9RTlc1FNvjgDmT+pSCpqVdjReTZ+Lz/04 NHYDOiVRuA== ) ; Key ID = 57082`
	`REC.GOV. 7200 IN DNSKEY ( 257 3 10 AwEAAdAgcBh7yrB6AbLAqbCfCEAub/7kss6hjOTyie91BtEPv9hTZGtwoOzWNEwe8glULCRXm4Zg eNrOlLDELigUhzpnqjWvWADo0AfjA1RhXcAw04VkCOtXGsY2pe0AUsvCeW6exWDBmji3Ti1GWH5k CtnLgVsNcFxzWHeJzqKe0EYwwy6V01DyJnGUyUKtDdNAeRngNr4akvSyQU7qGXSz55f3Kp1qwcL/ t4oHwP8rPB8srahMG5lmLvduOavzM34mQMMAk8ea1N62Yd1EDMJ2H6QKf1vKMGUEuUhhO1BdlXua 8wZF5Z8pEBD1+iVQZo2rncGe8IUr9wZitd45sQ/6FUc= ) ; Key ID = 4812`
	`REC.GOV. 7200 IN DNSKEY ( 257 3 13 aA5ipAm/HT0bQGQy7lxDFhybIeqWHZVzb7QAt1MBYJrall0WM/7gzT5pdYo6aH+dTHo1G34K/m5W 2Pn+2ZKaAA== ) ; Key ID = 45484`
	DNSKEY=4812/SEP is now in the chain-of-trust
	DS=4812/SHA-256 verifies DNSKEY=4812/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`REC.GOV. 7200 IN RRSIG ( DNSKEY 10 2 7200 20220519135701 20220516125701 4812 rec.gov. SNd7XkWLvYL0slVsW9c5k5u9b8wydF8kS8Yk9I086JAnUO20jH8MtqJm/JjlwAqsBjHYdsKMTPXm FUidu7ZtPIJmySDmT51JjA3nXLUUs801JXdakt1lFp4kpLOp7bHTnMsCjJQaQRbZQex1vHb66NK8 /6q5M4wW5sfkp7kNaaiAIz7gcTn275anKkcLCThKK5UzGgsDTOr/GB8naT2IIls9AFw+/ml7mEyH loqfrxaytvfTAx7iNWNWFuxe712D8rqbGs0ok7KTin3Va/kGYfrq06iB3OPQx/76b1ELIDg01MZR uhlKslOPqbhKTqS0uEg+L+FCWQTG1+IH2KqP2A== )`
	`REC.GOV. 7200 IN RRSIG ( DNSKEY 13 2 7200 20220519135701 20220516125701 45484 rec.gov. DZruycW0pY7BKxkgAxWu3HOmiAVM5bgWWPD++onsMI3Lw9AgxEkd9eGRHaESMXJ/k3CdVKxaNz9g BQ4qdFVzIg== )`
	RRSIG=4812 and DNSKEY=4812/SEP verifies the DNSKEY RRset
	RRSIG=45484 and DNSKEY=45484/SEP verifies the DNSKEY RRset
	DNSKEY=24956 is now in the chain-of-trust
	DNSKEY=57082 is now in the chain-of-trust
	DNSKEY=45484/SEP is now in the chain-of-trust
	Query to a20-66.akam.net for REC.GOV/A
	Received 203 bytes from 95.100.175.66
	;; Response received from 95.100.175.66 (203 octets) ;; HEADER SECTION ;; id = 50845 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; REC.GOV. IN A ;; ANSWER SECTION (5 records) REC.GOV. 1800 IN A 108.156.120.117 REC.GOV. 1800 IN A 108.156.120.123 REC.GOV. 1800 IN A 108.156.120.29 REC.GOV. 1800 IN A 108.156.120.95 REC.GOV. 1800 IN RRSIG ( A 13 2 1800 20220519135701 20220516125701 24956 rec.gov. GplK7S9D02mevXP2q5gNMWSWepooKm76nryj/axT5PtMZepV+k1bVEyR4IsJy4L+/rxx/TD3Te0p xdAd0nV/yw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	a20-66.akam.net is authoritative for REC.GOV
	Found RRSIG signed by rec.gov zone
	Query to a3-64.akam.net for REC.GOV/SOA
	Received 422 bytes from 96.7.49.64
	;; Response received from 96.7.49.64 (422 octets) ;; HEADER SECTION ;; id = 14194 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; REC.GOV. IN SOA ;; ANSWER SECTION (2 records) REC.GOV. 86400 IN SOA ( a1-219.akam.net. hostmaster.REC.GOV. 2020071607 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 300 ;minimum ) REC.GOV. 86400 IN RRSIG ( SOA 13 2 86400 20220519135701 20220516125701 24956 rec.gov. YZ/thJ+W3jwEv3iAot5iIHeJ6toroQvIuVFpXA1cfZcJ2e+MIKv8+CH+0eMf7YzniAkWFbFg4Dka YQ+gtPowGQ== ) ;; AUTHORITY SECTION (7 records) REC.GOV. 86400 IN NS a1-219.akam.net. REC.GOV. 86400 IN NS a3-64.akam.net. REC.GOV. 86400 IN NS a18-65.akam.net. REC.GOV. 86400 IN NS a20-66.akam.net. REC.GOV. 86400 IN NS a11-64.akam.net. REC.GOV. 86400 IN NS a22-67.akam.net. REC.GOV. 86400 IN RRSIG ( NS 13 2 86400 20220519135701 20220516125701 24956 rec.gov. TWWlxlNuPhI2YMOWPLt/euid5DnKhICILCGU2jJDPvmsauXnDUIbuvRKY7RVCv80zs3xCSCyfug+ e5CMadzZaA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a11-64.akam.net for REC.GOV/SOA
	Received 422 bytes from 84.53.139.64
	;; Response received from 84.53.139.64 (422 octets) ;; HEADER SECTION ;; id = 33010 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; REC.GOV. IN SOA ;; ANSWER SECTION (2 records) REC.GOV. 86400 IN SOA ( a1-219.akam.net. hostmaster.REC.GOV. 2020071607 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 300 ;minimum ) REC.GOV. 86400 IN RRSIG ( SOA 13 2 86400 20220519135701 20220516125701 24956 rec.gov. YZ/thJ+W3jwEv3iAot5iIHeJ6toroQvIuVFpXA1cfZcJ2e+MIKv8+CH+0eMf7YzniAkWFbFg4Dka YQ+gtPowGQ== ) ;; AUTHORITY SECTION (7 records) REC.GOV. 86400 IN NS a18-65.akam.net. REC.GOV. 86400 IN NS a22-67.akam.net. REC.GOV. 86400 IN NS a20-66.akam.net. REC.GOV. 86400 IN NS a3-64.akam.net. REC.GOV. 86400 IN NS a1-219.akam.net. REC.GOV. 86400 IN NS a11-64.akam.net. REC.GOV. 86400 IN RRSIG ( NS 13 2 86400 20220519135701 20220516125701 24956 rec.gov. TWWlxlNuPhI2YMOWPLt/euid5DnKhICILCGU2jJDPvmsauXnDUIbuvRKY7RVCv80zs3xCSCyfug+ e5CMadzZaA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a1-219.akam.net for REC.GOV/SOA
	Received 422 bytes from 193.108.91.219
	;; Response received from 193.108.91.219 (422 octets) ;; HEADER SECTION ;; id = 14022 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; REC.GOV. IN SOA ;; ANSWER SECTION (2 records) REC.GOV. 86400 IN SOA ( a1-219.akam.net. hostmaster.REC.GOV. 2020071607 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 300 ;minimum ) REC.GOV. 86400 IN RRSIG ( SOA 13 2 86400 20220519135701 20220516125701 24956 rec.gov. YZ/thJ+W3jwEv3iAot5iIHeJ6toroQvIuVFpXA1cfZcJ2e+MIKv8+CH+0eMf7YzniAkWFbFg4Dka YQ+gtPowGQ== ) ;; AUTHORITY SECTION (7 records) REC.GOV. 86400 IN NS a11-64.akam.net. REC.GOV. 86400 IN NS a3-64.akam.net. REC.GOV. 86400 IN NS a20-66.akam.net. REC.GOV. 86400 IN NS a18-65.akam.net. REC.GOV. 86400 IN NS a1-219.akam.net. REC.GOV. 86400 IN NS a22-67.akam.net. REC.GOV. 86400 IN RRSIG ( NS 13 2 86400 20220519135701 20220516125701 24956 rec.gov. TWWlxlNuPhI2YMOWPLt/euid5DnKhICILCGU2jJDPvmsauXnDUIbuvRKY7RVCv80zs3xCSCyfug+ e5CMadzZaA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a22-67.akam.net for REC.GOV/SOA
	Received 422 bytes from 23.211.61.67
	;; Response received from 23.211.61.67 (422 octets) ;; HEADER SECTION ;; id = 11419 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; REC.GOV. IN SOA ;; ANSWER SECTION (2 records) REC.GOV. 86400 IN SOA ( a1-219.akam.net. hostmaster.REC.GOV. 2020071607 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 300 ;minimum ) REC.GOV. 86400 IN RRSIG ( SOA 13 2 86400 20220519135701 20220516125701 24956 rec.gov. YZ/thJ+W3jwEv3iAot5iIHeJ6toroQvIuVFpXA1cfZcJ2e+MIKv8+CH+0eMf7YzniAkWFbFg4Dka YQ+gtPowGQ== ) ;; AUTHORITY SECTION (7 records) REC.GOV. 86400 IN NS a18-65.akam.net. REC.GOV. 86400 IN NS a3-64.akam.net. REC.GOV. 86400 IN NS a11-64.akam.net. REC.GOV. 86400 IN NS a22-67.akam.net. REC.GOV. 86400 IN NS a20-66.akam.net. REC.GOV. 86400 IN NS a1-219.akam.net. REC.GOV. 86400 IN RRSIG ( NS 13 2 86400 20220519135701 20220516125701 24956 rec.gov. TWWlxlNuPhI2YMOWPLt/euid5DnKhICILCGU2jJDPvmsauXnDUIbuvRKY7RVCv80zs3xCSCyfug+ e5CMadzZaA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a18-65.akam.net for REC.GOV/SOA
	Received 422 bytes from 95.101.36.65
	;; Response received from 95.101.36.65 (422 octets) ;; HEADER SECTION ;; id = 24037 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; REC.GOV. IN SOA ;; ANSWER SECTION (2 records) REC.GOV. 86400 IN SOA ( a1-219.akam.net. hostmaster.REC.GOV. 2020071607 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 300 ;minimum ) REC.GOV. 86400 IN RRSIG ( SOA 13 2 86400 20220519135701 20220516125701 24956 rec.gov. YZ/thJ+W3jwEv3iAot5iIHeJ6toroQvIuVFpXA1cfZcJ2e+MIKv8+CH+0eMf7YzniAkWFbFg4Dka YQ+gtPowGQ== ) ;; AUTHORITY SECTION (7 records) REC.GOV. 86400 IN NS a11-64.akam.net. REC.GOV. 86400 IN NS a22-67.akam.net. REC.GOV. 86400 IN NS a3-64.akam.net. REC.GOV. 86400 IN NS a20-66.akam.net. REC.GOV. 86400 IN NS a18-65.akam.net. REC.GOV. 86400 IN NS a1-219.akam.net. REC.GOV. 86400 IN RRSIG ( NS 13 2 86400 20220519135701 20220516125701 24956 rec.gov. TWWlxlNuPhI2YMOWPLt/euid5DnKhICILCGU2jJDPvmsauXnDUIbuvRKY7RVCv80zs3xCSCyfug+ e5CMadzZaA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a20-66.akam.net for REC.GOV/A
	Received 203 bytes from 95.100.175.66
	;; Response received from 95.100.175.66 (203 octets) ;; HEADER SECTION ;; id = 22607 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; REC.GOV. IN A ;; ANSWER SECTION (5 records) REC.GOV. 1800 IN A 52.84.18.94 REC.GOV. 1800 IN A 52.84.18.105 REC.GOV. 1800 IN A 52.84.18.100 REC.GOV. 1800 IN A 52.84.18.24 REC.GOV. 1800 IN RRSIG ( A 13 2 1800 20220519135701 20220516125701 24956 rec.gov. xsfejjeQPs3qRVduGVUSmQETS2v0ZYNsKs/WQ9Derx/9jBiIYU+NHrBdDcyiCotpB7v6ouqbuRgs 9Td1tVTROQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	REC.GOV A RR has value 52.84.18.94
	REC.GOV A RR has value 52.84.18.105
	REC.GOV A RR has value 52.84.18.100
	REC.GOV A RR has value 52.84.18.24
	Found 1 RRSIGs over A RRset
	`REC.GOV. 1800 IN RRSIG ( A 13 2 1800 20220519135701 20220516125701 24956 rec.gov. xsfejjeQPs3qRVduGVUSmQETS2v0ZYNsKs/WQ9Derx/9jBiIYU+NHrBdDcyiCotpB7v6ouqbuRgs 9Td1tVTROQ== )`
	RRSIG=24956 and DNSKEY=24956 verifies the A RRset
	Found DNSKEY, but no RRSIG, for algorithm 10

REC.GOV

	Query to a22-67.akam.net for REC.GOV/A
	Received 203 bytes from 23.211.61.67
	;; Response received from 23.211.61.67 (203 octets) ;; HEADER SECTION ;; id = 3258 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; REC.GOV. IN A ;; ANSWER SECTION (5 records) REC.GOV. 1800 IN A 65.8.49.29 REC.GOV. 1800 IN A 65.8.49.127 REC.GOV. 1800 IN A 65.8.49.48 REC.GOV. 1800 IN A 65.8.49.102 REC.GOV. 1800 IN RRSIG ( A 13 2 1800 20220519135701 20220516125701 24956 rec.gov. u22s5E+681+jVF9CeIDwa7JxMUtUwnaL8h/nQY57h87U5r8GMpYzmvmSBL25NSCszSWrYsycv2Yg 5cEXnfzodA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	a22-67.akam.net is authoritative for REC.GOV
	Found RRSIG signed by rec.gov zone
	Query to a22-67.akam.net for REC.GOV/A
	Received 203 bytes from 23.211.61.67
	;; Response received from 23.211.61.67 (203 octets) ;; HEADER SECTION ;; id = 28316 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; REC.GOV. IN A ;; ANSWER SECTION (5 records) REC.GOV. 1800 IN A 18.67.0.28 REC.GOV. 1800 IN A 18.67.0.128 REC.GOV. 1800 IN A 18.67.0.122 REC.GOV. 1800 IN A 18.67.0.50 REC.GOV. 1800 IN RRSIG ( A 13 2 1800 20220519135701 20220516125701 24956 rec.gov. J1DIlc8f186eqy9C/eaFP5IwgWQiS1Vfc4Z/726c7fRWZVs/5cD+/QrTNrd4jH21X1Bh+OPqv220 ddbd9JdjcA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	REC.GOV A RR has value 18.67.0.28
	REC.GOV A RR has value 18.67.0.128
	REC.GOV A RR has value 18.67.0.122
	REC.GOV A RR has value 18.67.0.50
	Found 1 RRSIGs over A RRset
	`REC.GOV. 1800 IN RRSIG ( A 13 2 1800 20220519135701 20220516125701 24956 rec.gov. J1DIlc8f186eqy9C/eaFP5IwgWQiS1Vfc4Z/726c7fRWZVs/5cD+/QrTNrd4jH21X1Bh+OPqv220 ddbd9JdjcA== )`
	RRSIG=24956 and DNSKEY=24956 verifies the A RRset
	Found DNSKEY, but no RRSIG, for algorithm 10

REC.GOV

	Query to a18-65.akam.net for REC.GOV/A
	Received 203 bytes from 95.101.36.65
	;; Response received from 95.101.36.65 (203 octets) ;; HEADER SECTION ;; id = 59809 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; REC.GOV. IN A ;; ANSWER SECTION (5 records) REC.GOV. 1800 IN A 99.84.37.88 REC.GOV. 1800 IN A 99.84.37.71 REC.GOV. 1800 IN A 99.84.37.95 REC.GOV. 1800 IN A 99.84.37.77 REC.GOV. 1800 IN RRSIG ( A 13 2 1800 20220519135701 20220516125701 24956 rec.gov. sfQIwvMABzsvuI/JnD6lwZLSpawwHQi3e5m3HyljV+MZQVkVTyuu5sCCBjTumjBiMGWLrch9B5+h 4Y5sQgSJiQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	a18-65.akam.net is authoritative for REC.GOV
	Found RRSIG signed by rec.gov zone
	Query to a18-65.akam.net for REC.GOV/A
	Received 203 bytes from 95.101.36.65
	;; Response received from 95.101.36.65 (203 octets) ;; HEADER SECTION ;; id = 64236 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; REC.GOV. IN A ;; ANSWER SECTION (5 records) REC.GOV. 1800 IN A 99.84.37.95 REC.GOV. 1800 IN A 99.84.37.71 REC.GOV. 1800 IN A 99.84.37.88 REC.GOV. 1800 IN A 99.84.37.77 REC.GOV. 1800 IN RRSIG ( A 13 2 1800 20220519135701 20220516125701 24956 rec.gov. 41R2BoQImXwqI+RWov0swCq16nSoiEW0WLutlozXtMKZrFigkw/U0Qb/YvmNY8zAEoNWGi/bU2w7 OoH7iSdB2w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	REC.GOV A RR has value 99.84.37.95
	REC.GOV A RR has value 99.84.37.71
	REC.GOV A RR has value 99.84.37.88
	REC.GOV A RR has value 99.84.37.77
	Found 1 RRSIGs over A RRset
	`REC.GOV. 1800 IN RRSIG ( A 13 2 1800 20220519135701 20220516125701 24956 rec.gov. 41R2BoQImXwqI+RWov0swCq16nSoiEW0WLutlozXtMKZrFigkw/U0Qb/YvmNY8zAEoNWGi/bU2w7 OoH7iSdB2w== )`
	RRSIG=24956 and DNSKEY=24956 verifies the A RRset
	Found DNSKEY, but no RRSIG, for algorithm 10

REC.GOV

	Query to a11-64.akam.net for REC.GOV/A
	Received 203 bytes from 84.53.139.64
	;; Response received from 84.53.139.64 (203 octets) ;; HEADER SECTION ;; id = 38706 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; REC.GOV. IN A ;; ANSWER SECTION (5 records) REC.GOV. 1800 IN A 18.65.229.120 REC.GOV. 1800 IN A 18.65.229.15 REC.GOV. 1800 IN A 18.65.229.80 REC.GOV. 1800 IN A 18.65.229.54 REC.GOV. 1800 IN RRSIG ( A 13 2 1800 20220519135701 20220516125701 24956 rec.gov. 0FYaF5lJnHhordX3XebtoLbAA2zaPaJpKNhoxQBNZ+v6BUiY5EdsvgaSXhwTGyzuvFIGQ1Mm7v8r GZjLyQ1nvQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	a11-64.akam.net is authoritative for REC.GOV
	Found RRSIG signed by rec.gov zone
	Query to a11-64.akam.net for REC.GOV/A
	Received 203 bytes from 84.53.139.64
	;; Response received from 84.53.139.64 (203 octets) ;; HEADER SECTION ;; id = 2032 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; REC.GOV. IN A ;; ANSWER SECTION (5 records) REC.GOV. 1800 IN A 52.84.162.55 REC.GOV. 1800 IN A 52.84.162.82 REC.GOV. 1800 IN A 52.84.162.79 REC.GOV. 1800 IN A 52.84.162.122 REC.GOV. 1800 IN RRSIG ( A 13 2 1800 20220519135701 20220516125701 24956 rec.gov. +4CEiao+UuKNDVmqKXhB/G/Kpp9uKuMXK+QwEoa4VGF1pp5/YJKElvYhlm5xTGKlkqanpnybCv1d VkFopJaycQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	REC.GOV A RR has value 52.84.162.55
	REC.GOV A RR has value 52.84.162.82
	REC.GOV A RR has value 52.84.162.79
	REC.GOV A RR has value 52.84.162.122
	Found 1 RRSIGs over A RRset
	`REC.GOV. 1800 IN RRSIG ( A 13 2 1800 20220519135701 20220516125701 24956 rec.gov. +4CEiao+UuKNDVmqKXhB/G/Kpp9uKuMXK+QwEoa4VGF1pp5/YJKElvYhlm5xTGKlkqanpnybCv1d VkFopJaycQ== )`
	RRSIG=24956 and DNSKEY=24956 verifies the A RRset
	Found DNSKEY, but no RRSIG, for algorithm 10

REC.GOV

	Query to a1-219.akam.net for REC.GOV/A
	Received 203 bytes from 193.108.91.219
	;; Response received from 193.108.91.219 (203 octets) ;; HEADER SECTION ;; id = 11826 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; REC.GOV. IN A ;; ANSWER SECTION (5 records) REC.GOV. 1800 IN A 65.9.149.21 REC.GOV. 1800 IN A 65.9.149.77 REC.GOV. 1800 IN A 65.9.149.76 REC.GOV. 1800 IN A 65.9.149.93 REC.GOV. 1800 IN RRSIG ( A 13 2 1800 20220519135701 20220516125701 24956 rec.gov. XhvtiwFqCMV4berZQ3seZmndpq+uujbx9OcKATa5/ze5mcT7AkZSBP09czB+OUlb10tCkjfQAcMk GN3YJwi0fw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	a1-219.akam.net is authoritative for REC.GOV
	Found RRSIG signed by rec.gov zone
	Query to a1-219.akam.net for REC.GOV/A
	Received 203 bytes from 193.108.91.219
	;; Response received from 193.108.91.219 (203 octets) ;; HEADER SECTION ;; id = 39544 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; REC.GOV. IN A ;; ANSWER SECTION (5 records) REC.GOV. 1800 IN A 13.249.205.103 REC.GOV. 1800 IN A 13.249.205.36 REC.GOV. 1800 IN A 13.249.205.114 REC.GOV. 1800 IN A 13.249.205.29 REC.GOV. 1800 IN RRSIG ( A 13 2 1800 20220519135701 20220516125701 24956 rec.gov. 3G96zCQAgsMcwBEmejwWTXJLPMX8xf4UnLwW9DYUHb2qAq7G5eOK50fAZls3+0R/2q/62NyaTFtE jSUsOt4jzw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	REC.GOV A RR has value 13.249.205.103
	REC.GOV A RR has value 13.249.205.36
	REC.GOV A RR has value 13.249.205.114
	REC.GOV A RR has value 13.249.205.29
	Found 1 RRSIGs over A RRset
	`REC.GOV. 1800 IN RRSIG ( A 13 2 1800 20220519135701 20220516125701 24956 rec.gov. 3G96zCQAgsMcwBEmejwWTXJLPMX8xf4UnLwW9DYUHb2qAq7G5eOK50fAZls3+0R/2q/62NyaTFtE jSUsOt4jzw== )`
	RRSIG=24956 and DNSKEY=24956 verifies the A RRset
	Found DNSKEY, but no RRSIG, for algorithm 10

REC.GOV

	Query to a3-64.akam.net for REC.GOV/A
	Received 203 bytes from 96.7.49.64
	;; Response received from 96.7.49.64 (203 octets) ;; HEADER SECTION ;; id = 54711 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; REC.GOV. IN A ;; ANSWER SECTION (5 records) REC.GOV. 1800 IN A 13.225.223.126 REC.GOV. 1800 IN A 13.225.223.85 REC.GOV. 1800 IN A 13.225.223.10 REC.GOV. 1800 IN A 13.225.223.62 REC.GOV. 1800 IN RRSIG ( A 13 2 1800 20220519135701 20220516125701 24956 rec.gov. NVRNgNMbRCwgnEa5sygbCGr9Koz9o0pKm6GGt6YPsP5LUoGlNXF+kNEgV4wwy+3wxAdZXuJz/23b PazVdvl00Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	a3-64.akam.net is authoritative for REC.GOV
	Found RRSIG signed by rec.gov zone
	Query to a3-64.akam.net for REC.GOV/A
	Received 203 bytes from 96.7.49.64
	;; Response received from 96.7.49.64 (203 octets) ;; HEADER SECTION ;; id = 26472 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; REC.GOV. IN A ;; ANSWER SECTION (5 records) REC.GOV. 1800 IN A 13.225.223.126 REC.GOV. 1800 IN A 13.225.223.62 REC.GOV. 1800 IN A 13.225.223.10 REC.GOV. 1800 IN A 13.225.223.85 REC.GOV. 1800 IN RRSIG ( A 13 2 1800 20220519135701 20220516125701 24956 rec.gov. UZy2jBFqd2MUP0HRNiERYSd/Sh+qjZ0lqHHrbdxAjCFf+oy42ytBDZuHrHl0BfWm0plRxczgXK6q 7pAy1szKUQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	REC.GOV A RR has value 13.225.223.126
	REC.GOV A RR has value 13.225.223.62
	REC.GOV A RR has value 13.225.223.10
	REC.GOV A RR has value 13.225.223.85
	Found 1 RRSIGs over A RRset
	`REC.GOV. 1800 IN RRSIG ( A 13 2 1800 20220519135701 20220516125701 24956 rec.gov. UZy2jBFqd2MUP0HRNiERYSd/Sh+qjZ0lqHHrbdxAjCFf+oy42ytBDZuHrHl0BfWm0plRxczgXK6q 7pAy1szKUQ== )`
	RRSIG=24956 and DNSKEY=24956 verifies the A RRset
	Found DNSKEY, but no RRSIG, for algorithm 10

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test REC.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: