DNSSEC Analyzer

Domain Name:

Time: 2022-08-16 04:14:16 UTC, NTP stratum 16

Analyzing DNSSEC problems for UCE.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (865 octets) ;; HEADER SECTION ;; id = 8491 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20220831000000 20220810000000 20326 . FJNYHZUipwrjUsDOPlE6hwUza6fRp2vwI294cL6vn5P9B5V2NT4Uf/wWoJvJlUdKPYhLSu2mfTM+ 2ufpNU9sHB+0Z1YXBj2zK8qQlT9S/BW5v4trLo1sZzK8uvl0hXKOwBsoOiNWdvqqtfqBTpz+mzWO bVSoCnNSUyIJkDyydvbJ9W2zqP+EY448BC87+BOGn+rY0yYy9dp5NYbrAOTQDF0pudHp43LHYedc AfDtjwVREPVEWYkisVpJoT3EZbF31h1Gb/+P7v84UHi6Mykq5hgQ1fV0PIMczp53moxgJxfzr1Y8 TIQnMy3xxmDxIiLXbaeUtkyBU2iMA1JJfWExyg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20220831000000 20220810000000 20326 . FJNYHZUipwrjUsDOPlE6hwUza6fRp2vwI294cL6vn5P9B5V2NT4Uf/wWoJvJlUdKPYhLSu2mfTM+ 2ufpNU9sHB+0Z1YXBj2zK8qQlT9S/BW5v4trLo1sZzK8uvl0hXKOwBsoOiNWdvqqtfqBTpz+mzWO bVSoCnNSUyIJkDyydvbJ9W2zqP+EY448BC87+BOGn+rY0yYy9dp5NYbrAOTQDF0pudHp43LHYedc AfDtjwVREPVEWYkisVpJoT3EZbF31h1Gb/+P7v84UHi6Mykq5hgQ1fV0PIMczp53moxgJxfzr1Y8 TIQnMy3xxmDxIiLXbaeUtkyBU2iMA1JJfWExyg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=20826 is now in the chain-of-trust
	Query to g.root-servers.net for UCE.GOV/A
	Received 629 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (629 octets) ;; HEADER SECTION ;; id = 56701 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; UCE.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20220828170000 20220815160000 20826 . jOWpAgmoMQaEDIy501972EmC6Y2o50emV1u0OGOfSoqMcLg1emE+wJNSI0p8+tWUjAcYKUPX/hZf 8zLCjMieK0bCR3gAwph8KYGEcPkriaM7+jTH8/xlqd7mV5WaYzr/EnCBuOl+jQNE31Ul7fnEZm6l WJjnMRotz/CJqwUFJnF8SBmaWYrC15zp0VppqtUK3hja/zjG+0sZwKLNwFMHf01zuXYbJCqATE+K AeqpGWbPBHs8gHOHKYumuxTDaVhf8yI+PKiPDJ+dZv6XdT+2ZfO8+YxWwH4iJthcFqM7+OsLXOeP fUQnl0JFK6FRlxPRUHVNr5gKVvAJkXme44bwDw== ) ;; ADDITIONAL SECTION (9 records) d.gov-servers.net. 172800 IN A 81.19.194.30 c.gov-servers.net. 172800 IN A 69.36.153.30 b.gov-servers.net. 172800 IN A 209.112.123.30 a.gov-servers.net. 172800 IN A 69.36.157.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to c.root-servers.net for GOV/DNSKEY
	Received 625 bytes from 192.33.4.12
	;; Response received from 192.33.4.12 (625 octets) ;; HEADER SECTION ;; id = 60176 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20220828170000 20220815160000 20826 . jOWpAgmoMQaEDIy501972EmC6Y2o50emV1u0OGOfSoqMcLg1emE+wJNSI0p8+tWUjAcYKUPX/hZf 8zLCjMieK0bCR3gAwph8KYGEcPkriaM7+jTH8/xlqd7mV5WaYzr/EnCBuOl+jQNE31Ul7fnEZm6l WJjnMRotz/CJqwUFJnF8SBmaWYrC15zp0VppqtUK3hja/zjG+0sZwKLNwFMHf01zuXYbJCqATE+K AeqpGWbPBHs8gHOHKYumuxTDaVhf8yI+PKiPDJ+dZv6XdT+2ZfO8+YxWwH4iJthcFqM7+OsLXOeP fUQnl0JFK6FRlxPRUHVNr5gKVvAJkXme44bwDw== ) ;; ADDITIONAL SECTION (9 records) d.gov-servers.net. 172800 IN A 81.19.194.30 c.gov-servers.net. 172800 IN A 69.36.153.30 b.gov-servers.net. 172800 IN A 209.112.123.30 a.gov-servers.net. 172800 IN A 69.36.157.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to d.root-servers.net for GOV/DS
	Received 367 bytes from 199.7.91.13
	;; Response received from 199.7.91.13 (367 octets) ;; HEADER SECTION ;; id = 11802 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20220828170000 20220815160000 20826 . jOWpAgmoMQaEDIy501972EmC6Y2o50emV1u0OGOfSoqMcLg1emE+wJNSI0p8+tWUjAcYKUPX/hZf 8zLCjMieK0bCR3gAwph8KYGEcPkriaM7+jTH8/xlqd7mV5WaYzr/EnCBuOl+jQNE31Ul7fnEZm6l WJjnMRotz/CJqwUFJnF8SBmaWYrC15zp0VppqtUK3hja/zjG+0sZwKLNwFMHf01zuXYbJCqATE+K AeqpGWbPBHs8gHOHKYumuxTDaVhf8yI+PKiPDJ+dZv6XdT+2ZfO8+YxWwH4iJthcFqM7+OsLXOeP fUQnl0JFK6FRlxPRUHVNr5gKVvAJkXme44bwDw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found 1 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20220828170000 20220815160000 20826 . jOWpAgmoMQaEDIy501972EmC6Y2o50emV1u0OGOfSoqMcLg1emE+wJNSI0p8+tWUjAcYKUPX/hZf 8zLCjMieK0bCR3gAwph8KYGEcPkriaM7+jTH8/xlqd7mV5WaYzr/EnCBuOl+jQNE31Ul7fnEZm6l WJjnMRotz/CJqwUFJnF8SBmaWYrC15zp0VppqtUK3hja/zjG+0sZwKLNwFMHf01zuXYbJCqATE+K AeqpGWbPBHs8gHOHKYumuxTDaVhf8yI+PKiPDJ+dZv6XdT+2ZfO8+YxWwH4iJthcFqM7+OsLXOeP fUQnl0JFK6FRlxPRUHVNr5gKVvAJkXme44bwDw== )`
	RRSIG=20826 and DNSKEY=20826 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to b.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 209.112.123.30
	;; Response received from 209.112.123.30 (777 octets) ;; HEADER SECTION ;; id = 64739 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbSW4ocEzPbMwUkqAURZNNLAAZ9XoKgSLoPQVtMdnKBkrDoIwWxYO0nk3n/seSHxNb4I+Shq HeLM0bydpkqpMPCesMKazwq2YfQD0t0NdN4kiApakMBOO6foEa9UKHg8YbF5ZeZ2oZzIyFVlDhZB qtVeCM7SIEfxp8VR4/TWRHaoqoOnScTAoVZA9+YknqERZeQoUecTd1xXBHV0dQawxlc= ) ; Key ID = 261 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20220822190254 20220807185754 7698 gov. dBSpBgHX0L/G2I5MJ/wkADBF0OthUgrMtPrydX0kqzyxQ9q6NGouP9nsmeBDOGrwE8zw7tL4i8fT SOopdT5cwON+mCIXEufGG3NzJq3NRDUkFe5WV3gY5YKqK6LdBcHiiRp3pUuG7KweBRaz5OoWcu9c SyZ24XyNzRfw5i0QGzAvnHXd8YDn+1pFHGbtT596srFiwAizD9ulBk8n2onBC7ITfykoxu4fEO6H 6Onjeuh0wmJx+w0kfGvuShL7+P+o88iXilvEMAxeOxTq0zWgskqQLLRpd/k/fVJUk+CelsaWz2V6 0ySOAHlvSa9XwlINoCMtuBhR3dwglLxnixqudw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbSW4ocEzPbMwUkqAURZNNLAAZ9XoKgSLoPQVtMdnKBkrDoIwWxYO0nk3n/seSHxNb4I+Shq HeLM0bydpkqpMPCesMKazwq2YfQD0t0NdN4kiApakMBOO6foEa9UKHg8YbF5ZeZ2oZzIyFVlDhZB qtVeCM7SIEfxp8VR4/TWRHaoqoOnScTAoVZA9+YknqERZeQoUecTd1xXBHV0dQawxlc= ) ; Key ID = 261`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20220822190254 20220807185754 7698 gov. dBSpBgHX0L/G2I5MJ/wkADBF0OthUgrMtPrydX0kqzyxQ9q6NGouP9nsmeBDOGrwE8zw7tL4i8fT SOopdT5cwON+mCIXEufGG3NzJq3NRDUkFe5WV3gY5YKqK6LdBcHiiRp3pUuG7KweBRaz5OoWcu9c SyZ24XyNzRfw5i0QGzAvnHXd8YDn+1pFHGbtT596srFiwAizD9ulBk8n2onBC7ITfykoxu4fEO6H 6Onjeuh0wmJx+w0kfGvuShL7+P+o88iXilvEMAxeOxTq0zWgskqQLLRpd/k/fVJUk+CelsaWz2V6 0ySOAHlvSa9XwlINoCMtuBhR3dwglLxnixqudw== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=261 is now in the chain-of-trust
	Query to a.gov-servers.net for UCE.GOV/A
	Received 382 bytes from 69.36.157.30
	;; Response received from 69.36.157.30 (382 octets) ;; HEADER SECTION ;; id = 6003 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; UCE.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) UCE.GOV. 86400 IN NS dns3.l-secb.net. UCE.GOV. 86400 IN NS dns4.l-secb.net. UCE.GOV. 86400 IN NS dns2.l-secb.net. UCE.GOV. 3600 IN DS 51331 8 1 78ceb2113f6d09b3d493f066d926d9f7f0bdc37b UCE.GOV. 3600 IN DS ( 51331 8 2 bc24c484fa9ebc3dbd58caf474825870cac296f61928dac51397e81985020894 ) UCE.GOV. 3600 IN RRSIG ( DS 8 2 3600 20220822134239 20220815134239 261 gov. eXZ26f2N4lniRcmL1yRMIchq2yr45320unWzVdwNdll0jdZXRUsZYP4UC0dFOIWSEJN5AOEEeujV 1QXPdMkJO1xjSHO97mEHOMqoz2I5Uqln6aFC40T8J6MeKMEmLsypzCQLOl8XP/9dWmU50QgdNb8h 3SA3lq02kCDvft+578Cp4LCfDRi9qcDTnzMQHdBp3KipvuanFNOZfvKicczWWg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.gov-servers.net for UCE.GOV/DNSKEY
	Received 382 bytes from 69.36.157.30
	;; Response received from 69.36.157.30 (382 octets) ;; HEADER SECTION ;; id = 61027 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; UCE.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) UCE.GOV. 86400 IN NS dns4.l-secb.net. UCE.GOV. 86400 IN NS dns2.l-secb.net. UCE.GOV. 86400 IN NS dns3.l-secb.net. UCE.GOV. 3600 IN DS 51331 8 1 78ceb2113f6d09b3d493f066d926d9f7f0bdc37b UCE.GOV. 3600 IN DS ( 51331 8 2 bc24c484fa9ebc3dbd58caf474825870cac296f61928dac51397e81985020894 ) UCE.GOV. 3600 IN RRSIG ( DS 8 2 3600 20220822134239 20220815134239 261 gov. eXZ26f2N4lniRcmL1yRMIchq2yr45320unWzVdwNdll0jdZXRUsZYP4UC0dFOIWSEJN5AOEEeujV 1QXPdMkJO1xjSHO97mEHOMqoz2I5Uqln6aFC40T8J6MeKMEmLsypzCQLOl8XP/9dWmU50QgdNb8h 3SA3lq02kCDvft+578Cp4LCfDRi9qcDTnzMQHdBp3KipvuanFNOZfvKicczWWg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone UCE.GOV

UCE.GOV

	Checking DS between GOV and UCE.GOV
	Query to d.gov-servers.net for UCE.GOV/DS
	Received 315 bytes from 81.19.194.30
	;; Response received from 81.19.194.30 (315 octets) ;; HEADER SECTION ;; id = 61232 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; UCE.GOV. IN DS ;; ANSWER SECTION (3 records) UCE.GOV. 3600 IN DS 51331 8 1 78ceb2113f6d09b3d493f066d926d9f7f0bdc37b UCE.GOV. 3600 IN DS ( 51331 8 2 bc24c484fa9ebc3dbd58caf474825870cac296f61928dac51397e81985020894 ) UCE.GOV. 3600 IN RRSIG ( DS 8 2 3600 20220822134239 20220815134239 261 gov. eXZ26f2N4lniRcmL1yRMIchq2yr45320unWzVdwNdll0jdZXRUsZYP4UC0dFOIWSEJN5AOEEeujV 1QXPdMkJO1xjSHO97mEHOMqoz2I5Uqln6aFC40T8J6MeKMEmLsypzCQLOl8XP/9dWmU50QgdNb8h 3SA3lq02kCDvft+578Cp4LCfDRi9qcDTnzMQHdBp3KipvuanFNOZfvKicczWWg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for UCE.GOV in the GOV zone
	DS=51331/SHA-1 has algorithm RSASHA256
	DS=51331/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`UCE.GOV. 3600 IN RRSIG ( DS 8 2 3600 20220822134239 20220815134239 261 gov. eXZ26f2N4lniRcmL1yRMIchq2yr45320unWzVdwNdll0jdZXRUsZYP4UC0dFOIWSEJN5AOEEeujV 1QXPdMkJO1xjSHO97mEHOMqoz2I5Uqln6aFC40T8J6MeKMEmLsypzCQLOl8XP/9dWmU50QgdNb8h 3SA3lq02kCDvft+578Cp4LCfDRi9qcDTnzMQHdBp3KipvuanFNOZfvKicczWWg== )`
	RRSIG=261 and DNSKEY=261 verifies the DS RRset
	DS=51331/SHA-1 is now in the chain-of-trust
	`UCE.GOV. 3600 IN DS 51331 8 1 78ceb2113f6d09b3d493f066d926d9f7f0bdc37b`
	`UCE.GOV. 3600 IN DS ( 51331 8 2 bc24c484fa9ebc3dbd58caf474825870cac296f61928dac51397e81985020894 )`
	Query to dns3.l-secb.net for UCE.GOV/DNSKEY
	Received 1237 bytes from 35.163.67.210
	;; Response received from 35.163.67.210 (1237 octets) ;; HEADER SECTION ;; id = 32821 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; UCE.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) UCE.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAZtEN00jwg4wNN6KTcArbeADFZio+pXhJcV6b/QEOFHOjebze5wSmG9G4pJch2652EF1V57f TmdRnfR/hvNZ9ib7INZGg0+tdkVgIy5AunMcIHvKNpeV8J68uPS8lbGPTeBDQ8MADFcQFqMdRvht bPca4/o5HUnDwqtWAtQmzvpD ) ; Key ID = 62613 UCE.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAY6hykFEaS9Guf0C56eA+8FaP1ImbPv9IHoFvDI3wxsNifXW22So17oxRwTvYWLpyof4docC Lqo10KHrRiHMKzQk+27pinkhieneH4pvJivK0jRV7B+zFvdljdQD8FZyweIK3g549+FMu52vXjge GuJuQsMxlAycRGO8E0T0GxIv ) ; Key ID = 15573 UCE.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAdg2f/ioFCs7dvCzMO/uXZ8f4V3fHPI2LAI+tP4smKwcnCwsZwNLljE5HQUOXujnmZ703kgw yC75KnC4r4hQAVvwCZUrKW5knb4HCsYoM0ZJt41IGiWC+IRuyif7xoFNk1TEj+7BCMGLdboYFLb8 PSidkJX9f7K5E0Dq62lkeC7dlOOH9GvE470qoQ6/IiN4Z8re2NqIg8AjiuWE6htN0aWH4Dd5tePy LeNTBKdJWWBpqdG2bdxImPIIcij+cJicDWETQKpd9P6sIThUkDsT83zzOX/3xV0da94uC2neIFX3 qm0T2tk+qJ/l7gee40wWxwGV3Z1S34aadfAKt8z86gU= ) ; Key ID = 51331 UCE.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20220819035525 20220812025525 62613 uce.gov. BwrJiNVmrxlZjU5ICjseTrLcHay1ZJM+zqgejJ7p7q8ncYJoYxm4TE1YyCVX8H+JOyFVrB0NL84N 8eGZwS4BQd8SnfOAxMUiDKq3D0XYlCZOXGpyYaDdyYrmwgAxTQeVoDufZdz5xKvJFkEIte5PsqXl 2Dzlt4IUzlxE22CTbnQ= ) UCE.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20220819035525 20220812025525 15573 uce.gov. K32BSnbgT8mdX2Hq/LpRFGsW1txJl1gZNJTFe4UJAHOus809w4+EJ0lcfcXu81vkXMTb/xNnExmu trU5wYjc1hHT8VzFAIbV7feyP9pgC68d3SbPAvV5xUkN7jhZTLkY5nbIKfuDoeO6yXI3hnxOSpUZ 4/ba7OwrnC4wWGdxwrQ= ) UCE.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20220819035525 20220812025525 51331 uce.gov. MSzx0jfns2mUmokqBp//ES4gsdDmrChXdVKibd1qpuDn8W33kOdUqqw4SZJBkmDNZBMqifZr0yws V+BQel7J7acZSGITPSGPqlhP9xmNXxYmjPc85Y9x1Ym3WL3cFZ1NGLNN8OJuvW/nvDBBQj+A3dwJ ZFbGJA81FTJ1Gt+muTcTsZuIRVVHuuOL0PAE6faYeO11yrYjlAHsNw/+JYEOoVK2gbKBeaC68Jqv i91wTqheelxl9HQ2fnj15JhnwbnON/aG0suheGfneBkqBz1XQ+sc9JoWq/I0NujwwBBCNg7G70/+ rTPmu8TRjhgoopAn9Ny5tnFUzN0zBb18j4NDOA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for UCE.GOV
	`UCE.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAZtEN00jwg4wNN6KTcArbeADFZio+pXhJcV6b/QEOFHOjebze5wSmG9G4pJch2652EF1V57f TmdRnfR/hvNZ9ib7INZGg0+tdkVgIy5AunMcIHvKNpeV8J68uPS8lbGPTeBDQ8MADFcQFqMdRvht bPca4/o5HUnDwqtWAtQmzvpD ) ; Key ID = 62613`
	`UCE.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAY6hykFEaS9Guf0C56eA+8FaP1ImbPv9IHoFvDI3wxsNifXW22So17oxRwTvYWLpyof4docC Lqo10KHrRiHMKzQk+27pinkhieneH4pvJivK0jRV7B+zFvdljdQD8FZyweIK3g549+FMu52vXjge GuJuQsMxlAycRGO8E0T0GxIv ) ; Key ID = 15573`
	`UCE.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAdg2f/ioFCs7dvCzMO/uXZ8f4V3fHPI2LAI+tP4smKwcnCwsZwNLljE5HQUOXujnmZ703kgw yC75KnC4r4hQAVvwCZUrKW5knb4HCsYoM0ZJt41IGiWC+IRuyif7xoFNk1TEj+7BCMGLdboYFLb8 PSidkJX9f7K5E0Dq62lkeC7dlOOH9GvE470qoQ6/IiN4Z8re2NqIg8AjiuWE6htN0aWH4Dd5tePy LeNTBKdJWWBpqdG2bdxImPIIcij+cJicDWETQKpd9P6sIThUkDsT83zzOX/3xV0da94uC2neIFX3 qm0T2tk+qJ/l7gee40wWxwGV3Z1S34aadfAKt8z86gU= ) ; Key ID = 51331`
	DNSKEY=51331/SEP is now in the chain-of-trust
	DS=51331/SHA-1 verifies DNSKEY=51331/SEP
	DS=51331/SHA-256 verifies DNSKEY=51331/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`UCE.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20220819035525 20220812025525 62613 uce.gov. BwrJiNVmrxlZjU5ICjseTrLcHay1ZJM+zqgejJ7p7q8ncYJoYxm4TE1YyCVX8H+JOyFVrB0NL84N 8eGZwS4BQd8SnfOAxMUiDKq3D0XYlCZOXGpyYaDdyYrmwgAxTQeVoDufZdz5xKvJFkEIte5PsqXl 2Dzlt4IUzlxE22CTbnQ= )`
	`UCE.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20220819035525 20220812025525 15573 uce.gov. K32BSnbgT8mdX2Hq/LpRFGsW1txJl1gZNJTFe4UJAHOus809w4+EJ0lcfcXu81vkXMTb/xNnExmu trU5wYjc1hHT8VzFAIbV7feyP9pgC68d3SbPAvV5xUkN7jhZTLkY5nbIKfuDoeO6yXI3hnxOSpUZ 4/ba7OwrnC4wWGdxwrQ= )`
	`UCE.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20220819035525 20220812025525 51331 uce.gov. MSzx0jfns2mUmokqBp//ES4gsdDmrChXdVKibd1qpuDn8W33kOdUqqw4SZJBkmDNZBMqifZr0yws V+BQel7J7acZSGITPSGPqlhP9xmNXxYmjPc85Y9x1Ym3WL3cFZ1NGLNN8OJuvW/nvDBBQj+A3dwJ ZFbGJA81FTJ1Gt+muTcTsZuIRVVHuuOL0PAE6faYeO11yrYjlAHsNw/+JYEOoVK2gbKBeaC68Jqv i91wTqheelxl9HQ2fnj15JhnwbnON/aG0suheGfneBkqBz1XQ+sc9JoWq/I0NujwwBBCNg7G70/+ rTPmu8TRjhgoopAn9Ny5tnFUzN0zBb18j4NDOA== )`
	RRSIG=62613 and DNSKEY=62613 verifies the DNSKEY RRset
	RRSIG=15573 and DNSKEY=15573 verifies the DNSKEY RRset
	RRSIG=51331 and DNSKEY=51331/SEP verifies the DNSKEY RRset
	DNSKEY=62613 is now in the chain-of-trust
	DNSKEY=15573 is now in the chain-of-trust
	Query to dns3.l-secb.net for UCE.GOV/A
	Received 854 bytes from 35.163.67.210
	;; Response received from 35.163.67.210 (854 octets) ;; HEADER SECTION ;; id = 38067 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; UCE.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) UCE.GOV. 900 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2022062002 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20220822193718 20220815183718 62613 uce.gov. ZzbkhDPnjWucecMGiP8mH4iAaFmJLCmoaBoNiVkI4khm5O2f9pvjdxEvOMQovxrrpTtZUvwLicMi V+Tp0fcE1V3yUTbXXH8KjW+ydnhZyw4dT9J8T4aSl6PFpWAnqBOx4VXjuEoZEJSpofHzbWsefuBs BTAoGwXyrOQo8qzSOVY= ) UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20220819033633 20220812023633 15573 uce.gov. Hkddfj52c/GwmfUtPo4Dlg5OApTB9MnepLJwohSvFiqpYmyV34rRpNheVtkzWuOYsQoaL2qJeNdV s8Afmvy0orZxC2ymmtY7n5D+1wgMB8XAtPGZTpesdGFSvPjkulQviEuOCvCGsapvJagtsrl2BN+G rT8kDyVdD74uRdgRvGM= ) pmbm7ta1p2a11gso2g5gd4i3pappoouc.UCE.GOV. 900 IN NSEC3 ( 1 0 1 f87cf55593cd5b8c pmbm7ta1p2a11gso2g5gd4i3pappooud NS SOA RRSIG DNSKEY NSEC3PARAM ) pmbm7ta1p2a11gso2g5gd4i3pappoouc.UCE.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20220821044637 20220814034637 62613 uce.gov. BJH+138wFYpPP6W2hOKJgrFKJBYa8hvA65fqcsOtTcH2IqBmGqYll2WqLpjQMRb2EAlj0t4ndaB/ VzpAlFN9ADAv8CpY2+HWxw1lSb4A+I62pgaCQVYrfRrHJW5n+YHD74ADAAdzCX0piew0ky1Z86qB 7Vb593+CBv8VM7q8wTU= ) pmbm7ta1p2a11gso2g5gd4i3pappoouc.UCE.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20220819033633 20220812023633 15573 uce.gov. VsnDrmonVM7szWA515Pe1ek2Nti9wxbpQxZ92rtg36ZKv9kChFthxdk+pZ7v3WLt5uYrF5iZhSwl zioAeNxRhnhduDdo3wovqUM+sHUzhaaaWPK2gshPvxALokdRg/XdnbGT4cdW9F2hqEBakULEpUeg 5RB81hRIKUoTwob3oWs= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns3.l-secb.net is authoritative for UCE.GOV
	Found RRSIG signed by uce.gov zone
	Query to dns2.l-secb.net for UCE.GOV/SOA
	Received 823 bytes from 205.130.212.37
	;; Response received from 205.130.212.37 (823 octets) ;; HEADER SECTION ;; id = 43828 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; UCE.GOV. IN SOA ;; ANSWER SECTION (3 records) UCE.GOV. 1800 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2022062002 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) UCE.GOV. 1800 IN RRSIG ( SOA 8 2 1800 20220819032154 20220812022154 62613 uce.gov. ISsnIlDdcptVs0TtJmuJkB5Tu+D2QHqieR+mOocrCexfXySJ+fO+SeTvkZTEcYkkcIrO+PquVnId YxOJ1idP+H6SS073wegSqrg1otzFD4Etiz145P6smjYgvnKc7iyWQN3LZ6Qej0QCp/b/j50T7owQ eL0UY5otEkhptLtq/gE= ) UCE.GOV. 1800 IN RRSIG ( SOA 8 2 1800 20220819094758 20220812084758 15573 uce.gov. QMx4zbi+atWQOSnEqyOWosHD1haC3HWIMeus2AHDS1uQpiJ7ar6Q3aI/dzojTqz/RgTeIrbEuEON PzVDlfjl83V6yaZ76iefRFwTHgIuXqhKwbWrQKHrXuYHs3MlMtY+tS2TAUYCUo9is20LLcYKav/l mnE1iQmhhYAXlpE0nTE= ) ;; AUTHORITY SECTION (5 records) UCE.GOV. 1800 IN NS dns3.l-secb.net. UCE.GOV. 1800 IN NS dns4.l-secb.net. UCE.GOV. 1800 IN NS dns2.l-secb.net. UCE.GOV. 1800 IN RRSIG ( NS 8 2 1800 20220822230744 20220815220744 62613 uce.gov. aLXGc66zLF3KY0OZXfY4IaMs59ZWjSURtVNdgT/skuJRAyDHT/m+/K/h80SWAWw8M0c9KStFNiuz +8qCB1jjuaTakDXwALFIM8OcC7WIXO7veO1bf4Wmby+FI3MawfJeMKVc+DQZv9BKt/s1kzUVt5JP dM2h7QRapsbv9qBLWLc= ) UCE.GOV. 1800 IN RRSIG ( NS 8 2 1800 20220819051817 20220812041817 15573 uce.gov. hKgvF+gUHZth+ILCX0wOO3BKs6gCBsaANzPfu+CAieRIKvq4cW5ntmQs0478z0y9vGBf3O0dk0I4 ChELbbfcjVSY/iKG7VuwOT/sYL/Rm9Q7dhzDzL7k3JWKEGMLOd6ojk/p63BZ1+u4tbxfU/FUMm/5 kx6Mfs7TCc/ZW4Q7iJ4= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns4.l-secb.net for UCE.GOV/SOA
	Received 823 bytes from 3.226.211.54
	;; Response received from 3.226.211.54 (823 octets) ;; HEADER SECTION ;; id = 14421 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; UCE.GOV. IN SOA ;; ANSWER SECTION (3 records) UCE.GOV. 1800 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2022062002 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) UCE.GOV. 1800 IN RRSIG ( SOA 8 2 1800 20220818132923 20220811122923 62613 uce.gov. fp5W8isUh/ntWze03q83bKb5UvBwK/Bi3dsPGdsGBqUhhJjDEx1x9x9ZVaRom7CDJ+86sBekk7qj zQvMKQ+6BsA+FEs88Yijg61p8wHOJlDSTOz+pUSH0Sb7QiRIHKwhh0pXZy6lvCiw6vBlVLrNuKVv 3u7YUurxLtScrz4wSbA= ) UCE.GOV. 1800 IN RRSIG ( SOA 8 2 1800 20220819111728 20220812101728 15573 uce.gov. TgM9meSnBf3OSgtKeB282RGnrXnJAFS6xt1etMalYeQtrfOjq76g+5w+x5bkMwHwwu3axhSyZXP8 vcV1oXvB6qhzdqGEeJ83c2z3XtIKzQ9RPE9yMOSbeUmfsoHSyi9aRZzf+wXeXV4cbaO4Ccop3SRT EMZ+i2MSDf4Ok5NWVn8= ) ;; AUTHORITY SECTION (5 records) UCE.GOV. 1800 IN NS dns3.l-secb.net. UCE.GOV. 1800 IN NS dns4.l-secb.net. UCE.GOV. 1800 IN NS dns2.l-secb.net. UCE.GOV. 1800 IN RRSIG ( NS 8 2 1800 20220822230733 20220815220733 62613 uce.gov. LcYO6hYzRGWv89IzM5VHhgqHX9bZ6m1843kZb5muA29aK99xqyl6l552F75S92LpQY32kmSu6gtO cIOB4dpb6Vcj+QwKr76SHOUToPpEYInbz1hRIXzPjs8HcB5Bm67OH8RjBO0lKE0Jb9+gLF6loNt5 QK5Afs3w4TSkIkCg1eI= ) UCE.GOV. 1800 IN RRSIG ( NS 8 2 1800 20220819052926 20220812042926 15573 uce.gov. L1LtMf+JDkbPbRzszqKyiYEKWEsSnGy3gWdxfda7MNKtgypgg3NadvLDBaDPY9HOf5TUeN5RVqsy ARtFNH8NHRP4KQP8vq1BXopYXseKa0pTC41QXkEoB5TBFoUV+ePjSvjQ1ndelh3lIXPqexPSnw5G v+w31kIs3iCDntRD2Bo= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns3.l-secb.net for UCE.GOV/A
	Received 854 bytes from 35.163.67.210
	;; Response received from 35.163.67.210 (854 octets) ;; HEADER SECTION ;; id = 26809 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; UCE.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) UCE.GOV. 900 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2022062002 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20220822193945 20220815183945 62613 uce.gov. OLkK5FBIRRobMbJHiR+25GpFWmudYZ7yAESm1YTuNJeNa/nA0ZuvSB4MnpCIU6be6Us46hAQxzIq muAs680F9ZCAVSvKll+EvKFrnihm8gcwrVTpNe7TtS+c6D1flLl7IN9s8BQygAvNri3oXAGeV3w4 5j9KFaH0iqDvveRSCe0= ) UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20220819033633 20220812023633 15573 uce.gov. Hkddfj52c/GwmfUtPo4Dlg5OApTB9MnepLJwohSvFiqpYmyV34rRpNheVtkzWuOYsQoaL2qJeNdV s8Afmvy0orZxC2ymmtY7n5D+1wgMB8XAtPGZTpesdGFSvPjkulQviEuOCvCGsapvJagtsrl2BN+G rT8kDyVdD74uRdgRvGM= ) 1engtkg372u2b59pfon1uhio71hfe61d.UCE.GOV. 900 IN NSEC3 ( 1 0 1 3365786228926194 1engtkg372u2b59pfon1uhio71hfe61e NS SOA RRSIG DNSKEY NSEC3PARAM ) 1engtkg372u2b59pfon1uhio71hfe61d.UCE.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20220821070652 20220814060652 62613 uce.gov. dbOkzTuxwJbCtgzVcdJ3D3FJOdeECuXdPRs78MEOLbogT3Ye+hbRIyMKm0djdSrkVheZBWrCAkPL L+q+Q6WN0ymZJ7bF5EvguqV7Kf3MUvWsrb+4byy1p8NjMayPFepxVt7B5LdkiGm4slfsOtj1C/ej uWOacrtDcRbVsPyjmvs= ) 1engtkg372u2b59pfon1uhio71hfe61d.UCE.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20220819033633 20220812023633 15573 uce.gov. fjPRGfxodlgpo9k+YVCjfNBIakeKnPb1WNdK3bEIGseNecYfiFrrRg8n/5vD3oz8bD97DekpbiXD hZSeDNFvaMNxAzt2ZddiKSlJWEQuqSMUgSSlV0lg2ff9j6PZOqoXJg9ILIJAsJEbRIR7/tI4xLS7 hbh+PCkc6Y5btT9jP0o= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20220822193718 20220815183718 62613 uce.gov. ZzbkhDPnjWucecMGiP8mH4iAaFmJLCmoaBoNiVkI4khm5O2f9pvjdxEvOMQovxrrpTtZUvwLicMi V+Tp0fcE1V3yUTbXXH8KjW+ydnhZyw4dT9J8T4aSl6PFpWAnqBOx4VXjuEoZEJSpofHzbWsefuBs BTAoGwXyrOQo8qzSOVY= )`
	`UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20220819033633 20220812023633 15573 uce.gov. Hkddfj52c/GwmfUtPo4Dlg5OApTB9MnepLJwohSvFiqpYmyV34rRpNheVtkzWuOYsQoaL2qJeNdV s8Afmvy0orZxC2ymmtY7n5D+1wgMB8XAtPGZTpesdGFSvPjkulQviEuOCvCGsapvJagtsrl2BN+G rT8kDyVdD74uRdgRvGM= )`
	RRSIG=62613 and DNSKEY=62613 verifies the SOA RRset
	RRSIG=15573 and DNSKEY=15573 verifies the SOA RRset

UCE.GOV

	Query to dns2.l-secb.net for UCE.GOV/A
	Received 854 bytes from 205.130.212.37
	;; Response received from 205.130.212.37 (854 octets) ;; HEADER SECTION ;; id = 5389 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; UCE.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) UCE.GOV. 900 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2022062002 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20220822193759 20220815183759 62613 uce.gov. iY2COblA3Tf56fDwZhORqBdzL4+2tenjSPKhYZ4xgRY5SVKuGYQaJqs4UucxOi31udTBF+kk4Oo1 pFxefygLSPAJE/T+ERHI/IFjdegG9+WZNjRiXmEyW1AjtpS25RUUefL6K6ykIdwEPwVol24+KWhE JnTkJBgq3XYQh36lpKI= ) UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20220819033651 20220812023651 15573 uce.gov. Rm4u6dIj3EfTatfPKXLwrlQHM08pwynYF75OrNKvf/SV7Z7g795o05cZ05cV8OtXmQoKCkNmhjB9 RwUydYI7g4XUbYNTcFztNx98DkocDhOxBEc1ozIO6IfmBnb2WA6wJAfEfVELaHp7IhueNATeYia+ mMkvcCKdqwvEcRuASrQ= ) bj7i5cd6q8tbhb31km4qmfto3ruum1fu.UCE.GOV. 900 IN NSEC3 ( 1 0 1 1ddf82dc553e7ca9 bj7i5cd6q8tbhb31km4qmfto3ruum1fv NS SOA RRSIG DNSKEY NSEC3PARAM ) bj7i5cd6q8tbhb31km4qmfto3ruum1fu.UCE.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20220819072655 20220812062655 62613 uce.gov. XSn6eLyIPkxSh2WLAydDE5Se0vdyHZYkG+qb6k8by8nsF28JUlIUIwOSJP7BetA0F33nT+AR7jvl ToYtoFdFrphACbCRAJ4vmKjsjDV5BrQS0yoLBhUA3lftrvjjhVa64fWjuGjBA8CTX/Rv9JP5+21Q mULpS53njSZqvl+/8Bc= ) bj7i5cd6q8tbhb31km4qmfto3ruum1fu.UCE.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20220819072655 20220812062655 15573 uce.gov. B8r+uVRFy9KlVck9EBVaOlek3nzEOIANWFUADlYNOs0x9Qc6kn5caC2TLqEr4z83+iooCBijfiks CfaREFsA5D8YXjw005EP485dRlrj6UKXb4mBxU1hRnk0PAoP+EHkkB9zgEHj9rxCrCAgfnimG1gG CpufPZS2PSyVH0RRaxw= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns2.l-secb.net is authoritative for UCE.GOV
	Found RRSIG signed by uce.gov zone
	Query to dns2.l-secb.net for UCE.GOV/A
	Received 854 bytes from 205.130.212.37
	;; Response received from 205.130.212.37 (854 octets) ;; HEADER SECTION ;; id = 33218 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; UCE.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) UCE.GOV. 900 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2022062002 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20220822194026 20220815184026 62613 uce.gov. DVLVAtpxgww4Bzf85pdT/ZK8x0r15WbX8TZg8ewCpaVMPWpmK0VtlTZCp2Tft1Jq2Y7eGdlXiw4E YUhlqtCVi6ZJBFt/5efJ4VtKacJAptr6tAFClG0zl2ozQoOmOcjvp7cxBxt2aJGNh2iJECM0pC3k t3gA2whM5BOpnbztVCQ= ) UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20220819033604 20220812023604 15573 uce.gov. JmpmhwJ0Ajl2XUlb7LVOhpLE+vUJ57qrnJdndStKudmME+MQxio9Se5dFTy0t+fDNSaxr/t3EJ2p j69NScDq8b9P3ibcU4N0jJBpb5kCXP8RAOh7l9gqrkJEj91jhb7n8Kkvz/JFEHVLF3slMVmOpB2H JRUt5+DGjmSfEUKR6wA= ) itsdeburrr03ipbbnqk5ptmor3cn31iu.UCE.GOV. 900 IN NSEC3 ( 1 0 1 2dd39f53415841f9 itsdeburrr03ipbbnqk5ptmor3cn31iv NS SOA RRSIG DNSKEY NSEC3PARAM ) itsdeburrr03ipbbnqk5ptmor3cn31iu.UCE.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20220819071628 20220812061628 62613 uce.gov. UALoTZFhg7iF3iEhq0GpQMIIXzgsDhVbUL4Dge9yWxSb4MDGlPucqCcNgiXPgptLwHwKrkqeBNg7 4xpMtPvLxINi8FuVfX+tqqJi644+qK0HlxCvw+s+fpyW27w4v9EC/roBtnYNQFkZ2dVBTlLUhaDz LVuqyj+RbP63L91Mm3Q= ) itsdeburrr03ipbbnqk5ptmor3cn31iu.UCE.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20220819071628 20220812061628 15573 uce.gov. VHHRinkfEH+KayHQ0dsWyarfVj1EthBxw2dV2Fbg/gZw0Mbt+3dRELH4BG69crVc1rWmMMoJbf2F 8O+TMj38A9M+rua9Fi3MzYbBNG90+9ieMuF/9h/qfmUNOgAWVOpzYizxZ6t6ptQyYtu8yA345cue XqSTbtjkMrMLXJo3NwE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20220822193759 20220815183759 62613 uce.gov. iY2COblA3Tf56fDwZhORqBdzL4+2tenjSPKhYZ4xgRY5SVKuGYQaJqs4UucxOi31udTBF+kk4Oo1 pFxefygLSPAJE/T+ERHI/IFjdegG9+WZNjRiXmEyW1AjtpS25RUUefL6K6ykIdwEPwVol24+KWhE JnTkJBgq3XYQh36lpKI= )`
	`UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20220819033651 20220812023651 15573 uce.gov. Rm4u6dIj3EfTatfPKXLwrlQHM08pwynYF75OrNKvf/SV7Z7g795o05cZ05cV8OtXmQoKCkNmhjB9 RwUydYI7g4XUbYNTcFztNx98DkocDhOxBEc1ozIO6IfmBnb2WA6wJAfEfVELaHp7IhueNATeYia+ mMkvcCKdqwvEcRuASrQ= )`
	RRSIG=62613 and DNSKEY=62613 verifies the SOA RRset
	RRSIG=15573 and DNSKEY=15573 verifies the SOA RRset

UCE.GOV

	Query to dns4.l-secb.net for UCE.GOV/A
	Received 854 bytes from 3.226.211.54
	;; Response received from 3.226.211.54 (854 octets) ;; HEADER SECTION ;; id = 28404 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; UCE.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) UCE.GOV. 900 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2022062002 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20220822193832 20220815183832 62613 uce.gov. NK2rfwMM0H8uSTfQGHZstNSfMZRP04H0yVDQThkfSs5EnB7zpg5G/4wrFTCV91SDYLmSXi33O6ur 41jamJZr7jlxzKrAs2jrean/OlGBsGDIs3VHPTR5NBKhnNEGaAz8TR2ulbmoreBggLQKXstdBrCs 7OFXo4W174sKyYkAIRk= ) UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20220819033540 20220812023540 15573 uce.gov. LWQx6gnur7yuEkLNiZ0K9TUytr8WtaVsWNPKJYqSfr/eVAR0DE2ZtQMKkEN01XVKW+N8q5w2VEfq 1HFiWKPZm62Ku7O0Wyhf0yawlmTL3mZ621e7I/0dGByST59Yjl6eLHWei240jb+h/rWFvYNnvjcg EM+oxVscdwTyRQL9xys= ) b11f699u9i767n5ht816odcpok70jjjo.UCE.GOV. 900 IN NSEC3 ( 1 0 1 4fcecbb8f5c4d1b4 b11f699u9i767n5ht816odcpok70jjjp NS SOA RRSIG DNSKEY NSEC3PARAM ) b11f699u9i767n5ht816odcpok70jjjo.UCE.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20220821161744 20220814151744 62613 uce.gov. IPe0ylmSAKT0N6cVk+HL48u1LKOni27N+QaL6OwCwafPX3EP/XjhT66loXYfqB8wsHWZF9jbzczl R6LuJ+2hi8h6s/ZX3nUDEqki4NTXB8Qg+nHPCu/SCbhv+H7FPJ8E/I5wQTXxOFjxJiJ+UUvBmhhb GP8UIZNuBQSSQ/gnkBo= ) b11f699u9i767n5ht816odcpok70jjjo.UCE.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20220821161744 20220814151744 15573 uce.gov. AtT6ZwzvYI4AEDV+OSGena8Jdd0Ao8U2KXihWVrPXIQRwovgZ3SdOjxUzQNM9XodWZHEvAWlvpG4 NSzCBkq3DtwHC/50vk+782OHmEFB13x35nf8v0QsW3o6ljAQNvZ7PnhUQBbxbjpyJ0p1QFeTzSxp K36F4vIOh93kNtTRC1U= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns4.l-secb.net is authoritative for UCE.GOV
	Found RRSIG signed by uce.gov zone
	Query to dns4.l-secb.net for UCE.GOV/A
	Received 854 bytes from 3.226.211.54
	;; Response received from 3.226.211.54 (854 octets) ;; HEADER SECTION ;; id = 22087 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; UCE.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) UCE.GOV. 900 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2022062002 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20220822194030 20220815184030 62613 uce.gov. dY7sgC+eehKwXDhz6LcfviaUccZRC1zHoN5BiPg+yQYusoz+H/MT/gpwIN5qjtkmVfsA4B2oqV9U QMMxD4Zsx9+3g0Y801CeAU6mILekT6tj9o+npfe+nP9lOEp+fdizVLq6Ah4ubeVUTq+7F6rsxstQ 3HPy2FPUuwongOVrOTw= ) UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20220819033651 20220812023651 15573 uce.gov. Rm4u6dIj3EfTatfPKXLwrlQHM08pwynYF75OrNKvf/SV7Z7g795o05cZ05cV8OtXmQoKCkNmhjB9 RwUydYI7g4XUbYNTcFztNx98DkocDhOxBEc1ozIO6IfmBnb2WA6wJAfEfVELaHp7IhueNATeYia+ mMkvcCKdqwvEcRuASrQ= ) o8a78v5md5li34tn7e1lr9o116uvoie8.UCE.GOV. 900 IN NSEC3 ( 1 0 1 f1baf70edea1c159 o8a78v5md5li34tn7e1lr9o116uvoie9 NS SOA RRSIG DNSKEY NSEC3PARAM ) o8a78v5md5li34tn7e1lr9o116uvoie8.UCE.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20220821222720 20220814212720 62613 uce.gov. mATHIWnvHiTonYdkXeNPsPS2RypU5bdxBa/MgX2vb2j+Io+paFf8iDYXD5cBTY3X5RmD0gxkd6v+ l3eHRShJGPLuQu8UW/Z+jua+nlG7queHb8uvZ8hyicVQ8b3vss5bolUQ0a5Lia6cGjlhi9gq0skH ACHWruJg5RAAVrgmeeg= ) o8a78v5md5li34tn7e1lr9o116uvoie8.UCE.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20220821222720 20220814212720 15573 uce.gov. FT9W25d07tSYZMqOMMn7mwxfKPQdxUHtcBu/3Q/AZkJBx3TlcxwUyG7o2hen1aU3Of/CM7G6xyhI JxJYlIOIbNH5hr3RUAk2mIQfAQ1H6mePKaXktLT129INapkbCffA3QNgDG/LT7B7IKkccamMs8Et kHuyBlTubYXrSulZwC8= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20220822193832 20220815183832 62613 uce.gov. NK2rfwMM0H8uSTfQGHZstNSfMZRP04H0yVDQThkfSs5EnB7zpg5G/4wrFTCV91SDYLmSXi33O6ur 41jamJZr7jlxzKrAs2jrean/OlGBsGDIs3VHPTR5NBKhnNEGaAz8TR2ulbmoreBggLQKXstdBrCs 7OFXo4W174sKyYkAIRk= )`
	`UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20220819033540 20220812023540 15573 uce.gov. LWQx6gnur7yuEkLNiZ0K9TUytr8WtaVsWNPKJYqSfr/eVAR0DE2ZtQMKkEN01XVKW+N8q5w2VEfq 1HFiWKPZm62Ku7O0Wyhf0yawlmTL3mZ621e7I/0dGByST59Yjl6eLHWei240jb+h/rWFvYNnvjcg EM+oxVscdwTyRQL9xys= )`
	RRSIG=62613 and DNSKEY=62613 verifies the SOA RRset
	RRSIG=15573 and DNSKEY=15573 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test UCE.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: