DNSSEC Analyzer

Domain Name:

Time: 2021-05-11 01:18:56 UTC, NTP stratum 4

Analyzing DNSSEC problems for UCE.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (864 bytes) ;; HEADER SECTION ;; id = 34517 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210522000000 20210501000000 20326 . KTOHq4gvmIC2KJOzZwQhHGonCSPCCEtX/453Ow6uauO3BjuoNp3Bdjh2BxEaHBQ5mvp+n/WjsrlQ dQvuf1BSZfVUJoOm3ofTQI6rRpex3rYxj8BYBjgSxYcRJniVP1nRnAozTspKfsm/bCUqB0RsnXWh 4tySxKv5fs8Ej7Eph9aG7JpIy7GuoqCxyAEKSJ6IOG8iTKtfInjg0zSF+ElRlr+K9MeCJxvsVeCP BR5BNWQ4EimmoMSCL7DfEzyHsKLau11nrDpx2jBih72PG6UmMohitJp+cCQz+C2qUSsiuME4olp9 X64P2CwkqY5T75GOmmVX+WJZsBd9xsuQkUuHTQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210522000000 20210501000000 20326 . KTOHq4gvmIC2KJOzZwQhHGonCSPCCEtX/453Ow6uauO3BjuoNp3Bdjh2BxEaHBQ5mvp+n/WjsrlQ dQvuf1BSZfVUJoOm3ofTQI6rRpex3rYxj8BYBjgSxYcRJniVP1nRnAozTspKfsm/bCUqB0RsnXWh 4tySxKv5fs8Ej7Eph9aG7JpIy7GuoqCxyAEKSJ6IOG8iTKtfInjg0zSF+ElRlr+K9MeCJxvsVeCP BR5BNWQ4EimmoMSCL7DfEzyHsKLau11nrDpx2jBih72PG6UmMohitJp+cCQz+C2qUSsiuME4olp9 X64P2CwkqY5T75GOmmVX+WJZsBd9xsuQkUuHTQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=14631 is now in the chain-of-trust
	Query to l.root-servers.net for UCE.GOV/A
	Received 626 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (626 bytes) ;; HEADER SECTION ;; id = 34468 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; UCE.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20210523200000 20210510190000 14631 . SjqaGxB7M4EuzOJoZBBRa8SbP3aTClssQ28CRZ7X6RbDSPw/kn5bbpKhgejbppKKb8u9bzMX6nrE g62bgNKSc+S4gzGjZDJ43j7t6BbU86Xkkbaubt7lDVTogSYIL1fe0+8hGSQm6+te37QYmIxU1iJP fsl8Sq1v84uvRAttkRVohWpg6FWVr/GmbndjB1J1PxM9mTaUVK8BNt95hFuVAHDyvdGRSXw2SJ7g 3Mvf4GUVzgMDnjIO9QGVDSoMzCmUxJ1jZLs6zkHT/XxbNI16osdmH8pdANxiyg3G45wlyidLy3Gr RJ6TZFc7A+PLbQ25wwKnSgi5EJrHWZGpILap7w== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to m.root-servers.net for GOV/DNSKEY
	Received 625 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (625 bytes) ;; HEADER SECTION ;; id = 13039 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20210523200000 20210510190000 14631 . SjqaGxB7M4EuzOJoZBBRa8SbP3aTClssQ28CRZ7X6RbDSPw/kn5bbpKhgejbppKKb8u9bzMX6nrE g62bgNKSc+S4gzGjZDJ43j7t6BbU86Xkkbaubt7lDVTogSYIL1fe0+8hGSQm6+te37QYmIxU1iJP fsl8Sq1v84uvRAttkRVohWpg6FWVr/GmbndjB1J1PxM9mTaUVK8BNt95hFuVAHDyvdGRSXw2SJ7g 3Mvf4GUVzgMDnjIO9QGVDSoMzCmUxJ1jZLs6zkHT/XxbNI16osdmH8pdANxiyg3G45wlyidLy3Gr RJ6TZFc7A+PLbQ25wwKnSgi5EJrHWZGpILap7w== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to l.root-servers.net for GOV/DS
	Received 367 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (367 bytes) ;; HEADER SECTION ;; id = 40468 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20210523200000 20210510190000 14631 . SjqaGxB7M4EuzOJoZBBRa8SbP3aTClssQ28CRZ7X6RbDSPw/kn5bbpKhgejbppKKb8u9bzMX6nrE g62bgNKSc+S4gzGjZDJ43j7t6BbU86Xkkbaubt7lDVTogSYIL1fe0+8hGSQm6+te37QYmIxU1iJP fsl8Sq1v84uvRAttkRVohWpg6FWVr/GmbndjB1J1PxM9mTaUVK8BNt95hFuVAHDyvdGRSXw2SJ7g 3Mvf4GUVzgMDnjIO9QGVDSoMzCmUxJ1jZLs6zkHT/XxbNI16osdmH8pdANxiyg3G45wlyidLy3Gr RJ6TZFc7A+PLbQ25wwKnSgi5EJrHWZGpILap7w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20210523200000 20210510190000 14631 . SjqaGxB7M4EuzOJoZBBRa8SbP3aTClssQ28CRZ7X6RbDSPw/kn5bbpKhgejbppKKb8u9bzMX6nrE g62bgNKSc+S4gzGjZDJ43j7t6BbU86Xkkbaubt7lDVTogSYIL1fe0+8hGSQm6+te37QYmIxU1iJP fsl8Sq1v84uvRAttkRVohWpg6FWVr/GmbndjB1J1PxM9mTaUVK8BNt95hFuVAHDyvdGRSXw2SJ7g 3Mvf4GUVzgMDnjIO9QGVDSoMzCmUxJ1jZLs6zkHT/XxbNI16osdmH8pdANxiyg3G45wlyidLy3Gr RJ6TZFc7A+PLbQ25wwKnSgi5EJrHWZGpILap7w== )`
	RRSIG=14631 and DNSKEY=14631 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to b.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (777 bytes) ;; HEADER SECTION ;; id = 14888 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbexj/PgN9RGQ1TokFnYjJ87/rMFIqE/rXjWtsmwzxteOcKIVCUJAAWg0pIZZer88omuCVrq +fAz0iBOgY48TRFWgyVFV9rm5esTGOEuCU6BTYj1Cb7zrpb/RayEw0yzVVZ0adT/AXbAsQhteTpV kgWK8K33gxq4wY70AK5KWdDCyj4v9uR6TS0mgbGdg7RzFCi8xeZoYP2PY5XOhAHFon0= ) ; Key ID = 48498 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210524190254 20210509185754 7698 gov. OgUUmguy6HS+AcNAUUxxinzf47xubcLwfLc+B/xt+kM//rKUgtxZjor/wh4xNRZa+SV0j6aJ/y/u We0JV/dbI9cueoq9xYSDzk2BPTW3WFjYKv1X2xcy+tfuPfbAUj5ZG20y5FUxnlcgHfDv+QnK0P5o e/yoeAFFma85ZozCWYGHwOoctKdaVq9dWyrljKdsl9Kwzkd3f7SA7dBXoo3ytFeM1NeEY9gRlTFp zrPRsTqksloHzamrlBu8hmRLEHGNh1l1M6JB4qn22VhJJ76k2yiT6WBvhhyUK4C/MRiAdxqMvuUM SO1OaIUaAVdZgJEg5Az/MIdD7OV1zaQBaA4mgw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbexj/PgN9RGQ1TokFnYjJ87/rMFIqE/rXjWtsmwzxteOcKIVCUJAAWg0pIZZer88omuCVrq +fAz0iBOgY48TRFWgyVFV9rm5esTGOEuCU6BTYj1Cb7zrpb/RayEw0yzVVZ0adT/AXbAsQhteTpV kgWK8K33gxq4wY70AK5KWdDCyj4v9uR6TS0mgbGdg7RzFCi8xeZoYP2PY5XOhAHFon0= ) ; Key ID = 48498`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210524190254 20210509185754 7698 gov. OgUUmguy6HS+AcNAUUxxinzf47xubcLwfLc+B/xt+kM//rKUgtxZjor/wh4xNRZa+SV0j6aJ/y/u We0JV/dbI9cueoq9xYSDzk2BPTW3WFjYKv1X2xcy+tfuPfbAUj5ZG20y5FUxnlcgHfDv+QnK0P5o e/yoeAFFma85ZozCWYGHwOoctKdaVq9dWyrljKdsl9Kwzkd3f7SA7dBXoo3ytFeM1NeEY9gRlTFp zrPRsTqksloHzamrlBu8hmRLEHGNh1l1M6JB4qn22VhJJ76k2yiT6WBvhhyUK4C/MRiAdxqMvuUM SO1OaIUaAVdZgJEg5Az/MIdD7OV1zaQBaA4mgw== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=48498 is now in the chain-of-trust
	Query to c.gov-servers.net for UCE.GOV/A
	Received 382 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (382 bytes) ;; HEADER SECTION ;; id = 23753 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; UCE.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) UCE.GOV. 86400 IN NS dns1.l-secb.net. UCE.GOV. 86400 IN NS dns3.l-secb.net. UCE.GOV. 86400 IN NS dns2.l-secb.net. UCE.GOV. 3600 IN DS ( 2665 8 2 24d49d8206730dbfc0e327cd40eaa05c3a2542118db267d22d166a8d0fda9ff1 ) UCE.GOV. 3600 IN DS 2665 8 1 632f025860cdc505fccf1d489f947377f21d6687 UCE.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210517231008 20210510231008 48498 gov. p/fvxTVjiUpiIyRdie/AkiHniIU7CiF5xSjVcLO0hrHHQRMOXrEpDjTT1923xCL2dceXe3Myw34E tBdJIWuVcQ3Wx+q5EYXoqiqn57cI9ZLSjnIdm1btduNvu/ZxGbMl0a/OchAD5o0ginlpn0P/JgGs kLeKZoNLjvhBVe37mSUdcsBY0EOsJ1Uq1pvbc7VJDbQ+u651IFf9KJy/IFdWmA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.gov-servers.net for UCE.GOV/DNSKEY
	Received 382 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (382 bytes) ;; HEADER SECTION ;; id = 23713 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; UCE.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) UCE.GOV. 86400 IN NS dns1.l-secb.net. UCE.GOV. 86400 IN NS dns3.l-secb.net. UCE.GOV. 86400 IN NS dns2.l-secb.net. UCE.GOV. 3600 IN DS ( 2665 8 2 24d49d8206730dbfc0e327cd40eaa05c3a2542118db267d22d166a8d0fda9ff1 ) UCE.GOV. 3600 IN DS 2665 8 1 632f025860cdc505fccf1d489f947377f21d6687 UCE.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210517231008 20210510231008 48498 gov. p/fvxTVjiUpiIyRdie/AkiHniIU7CiF5xSjVcLO0hrHHQRMOXrEpDjTT1923xCL2dceXe3Myw34E tBdJIWuVcQ3Wx+q5EYXoqiqn57cI9ZLSjnIdm1btduNvu/ZxGbMl0a/OchAD5o0ginlpn0P/JgGs kLeKZoNLjvhBVe37mSUdcsBY0EOsJ1Uq1pvbc7VJDbQ+u651IFf9KJy/IFdWmA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone UCE.GOV

UCE.GOV

	Checking DS between GOV and UCE.GOV
	Query to c.gov-servers.net for UCE.GOV/DS
	Received 315 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (315 bytes) ;; HEADER SECTION ;; id = 55278 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; UCE.GOV. IN DS ;; ANSWER SECTION (3 records) UCE.GOV. 3600 IN DS ( 2665 8 2 24d49d8206730dbfc0e327cd40eaa05c3a2542118db267d22d166a8d0fda9ff1 ) UCE.GOV. 3600 IN DS 2665 8 1 632f025860cdc505fccf1d489f947377f21d6687 UCE.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210517231008 20210510231008 48498 gov. p/fvxTVjiUpiIyRdie/AkiHniIU7CiF5xSjVcLO0hrHHQRMOXrEpDjTT1923xCL2dceXe3Myw34E tBdJIWuVcQ3Wx+q5EYXoqiqn57cI9ZLSjnIdm1btduNvu/ZxGbMl0a/OchAD5o0ginlpn0P/JgGs kLeKZoNLjvhBVe37mSUdcsBY0EOsJ1Uq1pvbc7VJDbQ+u651IFf9KJy/IFdWmA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for UCE.GOV in the GOV zone
	DS=2665/SHA-256 has algorithm RSASHA256
	DS=2665/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`UCE.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210517231008 20210510231008 48498 gov. p/fvxTVjiUpiIyRdie/AkiHniIU7CiF5xSjVcLO0hrHHQRMOXrEpDjTT1923xCL2dceXe3Myw34E tBdJIWuVcQ3Wx+q5EYXoqiqn57cI9ZLSjnIdm1btduNvu/ZxGbMl0a/OchAD5o0ginlpn0P/JgGs kLeKZoNLjvhBVe37mSUdcsBY0EOsJ1Uq1pvbc7VJDbQ+u651IFf9KJy/IFdWmA== )`
	RRSIG=48498 and DNSKEY=48498 verifies the DS RRset
	DS=2665/SHA-256 is now in the chain-of-trust
	`UCE.GOV. 3600 IN DS ( 2665 8 2 24d49d8206730dbfc0e327cd40eaa05c3a2542118db267d22d166a8d0fda9ff1 )`
	`UCE.GOV. 3600 IN DS 2665 8 1 632f025860cdc505fccf1d489f947377f21d6687`
	Query to dns1.l-secb.net for UCE.GOV/DNSKEY
	Received 1237 bytes from 198.77.70.37
	;; Answer received from 198.77.70.37 (1237 bytes) ;; HEADER SECTION ;; id = 29298 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; UCE.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) UCE.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAfCetdul2oejg5LBTYY3JNgWW38sJRvKEGtVlPvqZyaXZ0Dmr3mMXtaWjc8wPQDhO8y4x1sE 7swANo0nMiaQnmSrNyf6Vi0VODiHxKgD6ZpClxpiPxITxE1pCveivaCDaqrYAA25vyoT2V07F4oQ mbxyi4ze5CFqQac8MOInft9v ) ; Key ID = 53814 UCE.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbkUh2goA7UaH3l9bJujjRvxdu8bSU1ySXELyrqknbuCPCfD+BxNQ5sWTUuQ7h+VE0Piq83e /ai7cJMlHJOqVUf4os8feWkvDtNwnp/7MngM6ZanSCLyHZ7On9a6WRZG2M9I8MtwxyENdoEClSNN 38UlPxuXy91CE4TwA+/PWPrH ) ; Key ID = 14748 UCE.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAYs0uDua66GEZn8fx6XTOAOd1EDtbBgM9GHX4s+1Cq7DpewJpRh9iVZLwpG8KG1Ij0AWCHv2 jqQ5oPYvKOaiT3F6ax21omDXgwP0c3MVjyia1o2B3ktzP8HanggY8+H9hQw7+7hpWsUHFjbwJZ55 Rg58ipmELaQtYhQ2DyKwRwbkKhiUu4PBaZq/j55bkrOq8rzSO52nHR7Ok8PKheZpfFFohNpHenjf PdexwLprkJkiPrOXb+vN+dAOKWVf5yNfytpN+N53z/RQ8WSbl543tHPH8FlJN1CalajNPt7h78ka HZJ4vtNAm1icbrO090m4fcA0l8O59yvTFvarzvHElps= ) ; Key ID = 2665 UCE.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210516193603 20210509193603 53814 uce.gov. uok7SkIQWtbNtvwvZnkPFyzNLmXxJSVckEGNwSOn1oTPHvq0X0NbYM+UZ4c4jNGnwQWcO7MrGp5Y J+vj8kcO8K1eeU797CmyPFLhuSp4uvolBnuB2FtsDYBNK5WOpmdlIEFYlD+UqSPZ7eT3eJoAe9Os a8rmWPmgfNgeilWZFcw= ) UCE.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210516193603 20210509193603 14748 uce.gov. qprQ9RU0vpftIjGYRVpFspi2YObc8xclSruOa4RLPwsogYpdvgJPeM+j7juoGkerid6TXw/1A6nF +IWmikG+OofWP5r3+OwvXQhV5VrjLAIyGoQk9oMNPNat9eoU8tlNE0AJH+PP9DjTo1QyUWW/v17N 8GzZFMGxEsQe+QsFpug= ) UCE.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210516193603 20210509193603 2665 uce.gov. XLDfjQuGgrTHoktXdR/t8aqhgyVUNlWEK6DAQ/bMcNWHKnTAUSAsiMnE0qgtAEH3PRz+49rRfoPM 3qmYa+QRDddJP7kDcAq3R1+Z6C7OOSDH89i/OlIWhP6/yz5x4jUGsGcsUllAYRGu2PobqnB3SHKc bZ9BoK+yKs7oVkFU3OKCRyXKUgR+CM8UYlssn+zOO+aEyFbO36zyo+RO9qQAJ/NdukFELIYkW2ed GM91xw83ar8vzOLFjPHFCqm5g0bJuAIVNe9vVtIEPrZgMySDDYI+n00FBV/vvm5YlORPYR7lxcFP LAbhFoO1DOQyIsEb4qJk8TEe28QfX+jjeVhRrA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for UCE.GOV
	`UCE.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAfCetdul2oejg5LBTYY3JNgWW38sJRvKEGtVlPvqZyaXZ0Dmr3mMXtaWjc8wPQDhO8y4x1sE 7swANo0nMiaQnmSrNyf6Vi0VODiHxKgD6ZpClxpiPxITxE1pCveivaCDaqrYAA25vyoT2V07F4oQ mbxyi4ze5CFqQac8MOInft9v ) ; Key ID = 53814`
	`UCE.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbkUh2goA7UaH3l9bJujjRvxdu8bSU1ySXELyrqknbuCPCfD+BxNQ5sWTUuQ7h+VE0Piq83e /ai7cJMlHJOqVUf4os8feWkvDtNwnp/7MngM6ZanSCLyHZ7On9a6WRZG2M9I8MtwxyENdoEClSNN 38UlPxuXy91CE4TwA+/PWPrH ) ; Key ID = 14748`
	`UCE.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAYs0uDua66GEZn8fx6XTOAOd1EDtbBgM9GHX4s+1Cq7DpewJpRh9iVZLwpG8KG1Ij0AWCHv2 jqQ5oPYvKOaiT3F6ax21omDXgwP0c3MVjyia1o2B3ktzP8HanggY8+H9hQw7+7hpWsUHFjbwJZ55 Rg58ipmELaQtYhQ2DyKwRwbkKhiUu4PBaZq/j55bkrOq8rzSO52nHR7Ok8PKheZpfFFohNpHenjf PdexwLprkJkiPrOXb+vN+dAOKWVf5yNfytpN+N53z/RQ8WSbl543tHPH8FlJN1CalajNPt7h78ka HZJ4vtNAm1icbrO090m4fcA0l8O59yvTFvarzvHElps= ) ; Key ID = 2665`
	DNSKEY=2665/SEP is now in the chain-of-trust
	DS=2665/SHA-256 verifies DNSKEY=2665/SEP
	DS=2665/SHA-1 verifies DNSKEY=2665/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`UCE.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210516193603 20210509193603 53814 uce.gov. uok7SkIQWtbNtvwvZnkPFyzNLmXxJSVckEGNwSOn1oTPHvq0X0NbYM+UZ4c4jNGnwQWcO7MrGp5Y J+vj8kcO8K1eeU797CmyPFLhuSp4uvolBnuB2FtsDYBNK5WOpmdlIEFYlD+UqSPZ7eT3eJoAe9Os a8rmWPmgfNgeilWZFcw= )`
	`UCE.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210516193603 20210509193603 14748 uce.gov. qprQ9RU0vpftIjGYRVpFspi2YObc8xclSruOa4RLPwsogYpdvgJPeM+j7juoGkerid6TXw/1A6nF +IWmikG+OofWP5r3+OwvXQhV5VrjLAIyGoQk9oMNPNat9eoU8tlNE0AJH+PP9DjTo1QyUWW/v17N 8GzZFMGxEsQe+QsFpug= )`
	`UCE.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210516193603 20210509193603 2665 uce.gov. XLDfjQuGgrTHoktXdR/t8aqhgyVUNlWEK6DAQ/bMcNWHKnTAUSAsiMnE0qgtAEH3PRz+49rRfoPM 3qmYa+QRDddJP7kDcAq3R1+Z6C7OOSDH89i/OlIWhP6/yz5x4jUGsGcsUllAYRGu2PobqnB3SHKc bZ9BoK+yKs7oVkFU3OKCRyXKUgR+CM8UYlssn+zOO+aEyFbO36zyo+RO9qQAJ/NdukFELIYkW2ed GM91xw83ar8vzOLFjPHFCqm5g0bJuAIVNe9vVtIEPrZgMySDDYI+n00FBV/vvm5YlORPYR7lxcFP LAbhFoO1DOQyIsEb4qJk8TEe28QfX+jjeVhRrA== )`
	RRSIG=53814 and DNSKEY=53814 verifies the DNSKEY RRset
	RRSIG=14748 and DNSKEY=14748 verifies the DNSKEY RRset
	RRSIG=2665 and DNSKEY=2665/SEP verifies the DNSKEY RRset
	DNSKEY=53814 is now in the chain-of-trust
	DNSKEY=14748 is now in the chain-of-trust
	Query to dns2.l-secb.net for UCE.GOV/A
	Received 854 bytes from 205.130.212.37
	;; Answer received from 205.130.212.37 (854 bytes) ;; HEADER SECTION ;; id = 19655 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; UCE.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) UCE.GOV. 900 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2019102101 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20210515193515 20210508193515 53814 uce.gov. oFRVhPQScnoVIfkZViAx221e9rmCCyuOovolyjscQJV4rSUTJN6kBPciAC/9u0IY4mNKO3igE3Ae Z1P6yMWsEmH5ZByd+mrNGJasEuQ7Wpr/YIRUOw2idr0meg1OTPd2Ig0HHyXfkjk0qjPU1meuz5IA gtGiGA9OPe7Or1oogFU= ) UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20210516193451 20210509193451 14748 uce.gov. O5mELhT1JXxO5XKXG3UlWyp711BGMZ8UTix7varQpKjZ5FC8+hgkT+XX/HNdBoXFzAw4btcDEMY/ 3Us+oUvS7lYUENAumi0JeuaS+90FhQj6iV5flNsMUsgVE9SINQqgPh/MVztsBRpHT2oavgCCyLvb KUu3MYe4yEJyywAtR7E= ) jgesd9t01hg7t6p49kn9f6sukoitllmr.UCE.GOV. 900 IN NSEC3 ( 1 0 1 31478bc079736bbc jgesd9t01hg7t6p49kn9f6sukoitllms NS SOA RRSIG DNSKEY NSEC3PARAM ) jgesd9t01hg7t6p49kn9f6sukoitllmr.UCE.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20210517224414 20210510224414 53814 uce.gov. mGstB5BrCkpXWuI2YxdrK2Bx60hC4OiqP4p9HsDztFxZXHYisfk9dppQno6d/G5ZNR9rdhO4tPO/ M/feiPuUFza5mU2ZoBn9kh2B4SpAFUI0fQu6/XzGK9tmCFCeHY77dklUSF7H33KF/iO2zGWXnQZ7 FAubgNn9lHNInypX08c= ) jgesd9t01hg7t6p49kn9f6sukoitllmr.UCE.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20210516193608 20210509193608 14748 uce.gov. sVoIShpfU6sAZzuWaehwlgCIwkU9JBU5bDh40PJSmAD+ArUOD2yXmxdCydLJo/tYGNGfpwam096v jXoUOVbzgkPp87/k5DiThyvOrz3LcNTRnjXhVTASJ2PvS63DqafKmRO85HVCmNCIw6+eLFmxx0q6 yMp/sjWGb/BY+NyoALM= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns2.l-secb.net is authoritative for UCE.GOV
	Found RRSIG signed by uce.gov zone
	Query to dns3.l-secb.net for UCE.GOV/SOA
	Received 950 bytes from 35.163.67.210
	;; Answer received from 35.163.67.210 (950 bytes) ;; HEADER SECTION ;; id = 23368 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; UCE.GOV. IN SOA ;; ANSWER SECTION (3 records) UCE.GOV. 1800 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2019102101 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) UCE.GOV. 1800 IN RRSIG ( SOA 8 2 1800 20210516095050 20210509095050 53814 uce.gov. 6zZTaieJ2XaViA2Mvb5qUJ82IWVBMNsNrrZxGx0yhIayc4SQ/dFGwHuXRY8X/GP4NcKtPjvpcutX u+VIsG4E7l+1PQaTZs2qV6tpmKzosQCJhPpycDlaOWCExXcErab8LgDxQRkXQYI3iZ+VY5sRlmne PvSSMko4Bnkb0zzoTkA= ) UCE.GOV. 1800 IN RRSIG ( SOA 8 2 1800 20210516193558 20210509193558 14748 uce.gov. WdlD0EoFGT0vaAOoHpbFREs9+/59WOhUInbDg8ip1uGIBzVY8Md4OaM6bx6QD6/Z/dcd+W8XsZNu 9i7hzYLuozVIRFSo+m9GxKt0QjZnBLsl6tmqOGgdE92FfF9og4iwy2nhh1z/ulqgETqvVuq6oNS2 +eQ837L/aWyK2f1D0AQ= ) ;; AUTHORITY SECTION (5 records) UCE.GOV. 1800 IN NS dns3.l-secb.net. UCE.GOV. 1800 IN NS dns2.l-secb.net. UCE.GOV. 1800 IN NS dns1.l-secb.net. UCE.GOV. 1800 IN RRSIG ( NS 8 2 1800 20210515193448 20210508193448 53814 uce.gov. OQWNuXVbpm6+7+Bf9ezhLMz880s5CMeMMa0hYDdpP+x+EXD+1vpYZ+VMCSY13QB9D6UyNM7Xte65 8HIzxu0exwa0su7pXrkcsmHYfHaUWPezsTW2RLLFoD7TpsNiRyf7L/qr2LClGpA2VBcUYdNwHU2M gVGHoWdtcq3aXKM57xg= ) UCE.GOV. 1800 IN RRSIG ( NS 8 2 1800 20210516193436 20210509193436 14748 uce.gov. jdjqV+rjGDakosTaq97xW6aadLHQfvlvvrmgSxa8ay/SV8QT8Zt3eCBDM+Z6sWfKXn0u4bAa9uXm A9r6WNQ9+LcGERnZkcgMWDz/M4slK4WthckrAN3Lxu0ZnwPSSs8EfGqG9TwuaUsydzeDUKUc5/UH Cmq0AxDpiR4S0i5aEu4= ) ;; ADDITIONAL SECTION (7 records) dns1.l-secb.net. 43200 IN A 198.77.70.37 dns2.l-secb.net. 43200 IN A 205.130.212.37 dns3.l-secb.net. 43200 IN A 35.163.67.210 dns1.l-secb.net. 43200 IN AAAA 2001:1900:2268:770:198:77:70:37 dns2.l-secb.net. 43200 IN AAAA 2001:1900:2268:512:205:130:212:37 dns3.l-secb.net. 43200 IN AAAA 2600:1f14:a2e:4b00:35:163:67:210 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns1.l-secb.net for UCE.GOV/SOA
	Received 950 bytes from 198.77.70.37
	;; Answer received from 198.77.70.37 (950 bytes) ;; HEADER SECTION ;; id = 10047 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; UCE.GOV. IN SOA ;; ANSWER SECTION (3 records) UCE.GOV. 1800 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2019102101 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) UCE.GOV. 1800 IN RRSIG ( SOA 8 2 1800 20210516022551 20210509022551 53814 uce.gov. dIucdO0H3Nhi/Mb1GsKM/+qnqPV2bn/FaOEROWDa1mHUuJlyyYVqnFwpkRHqxr/Qj3Tcu5ew/LyI dgjKdJ9OdLqpdbOomrEjrMkvLj7vW5yWo9HyDIaGoOajol2xMW8Khlay9mMLzNm1cM3lr9CZcXP2 kpEfGUPCHJvFjY3GbIg= ) UCE.GOV. 1800 IN RRSIG ( SOA 8 2 1800 20210517031542 20210510031542 14748 uce.gov. INe6BF6DfnauDP8fddpI0yk1+jGdG06N03sHNZ/HJIE3Sd6VretRDEXdAgxw1Oepa3rg/OtmNxqN FqhCv50OupOgU9rgnZXqGwt1MHR5ND9dPS8qGS5HVrOLso6A/9WBXi0U+M9suCS8hYufDYowOF+6 y5bnuzumv4qdMp/kfwo= ) ;; AUTHORITY SECTION (5 records) UCE.GOV. 1800 IN NS dns3.l-secb.net. UCE.GOV. 1800 IN NS dns1.l-secb.net. UCE.GOV. 1800 IN NS dns2.l-secb.net. UCE.GOV. 1800 IN RRSIG ( NS 8 2 1800 20210515193456 20210508193456 53814 uce.gov. Jsm7sdxfUtLHp3nro42QnsmTZvPo6C0gCalZ1N6vLuDEOGuT2Qw3lUDf3hzQqTJNbmCMgecjuy+1 8x1n8mZxNHJ817BbIY0w2Uo2h5oqdzrcfq2m/1+rrEZNE8lEgYph3m4Ei/fjTz9taTqHtWy1uqjI 9HXwbP1NdirQBs1WBA8= ) UCE.GOV. 1800 IN RRSIG ( NS 8 2 1800 20210516193439 20210509193439 14748 uce.gov. kvmDzwZJlcy8bNyQU2RhKuH+xldnnmzse7qnoY8/J/HSkrhdSDds1dWslQ65CudHfIdDdJIEcTkN frgRe3Ww5v5zlKv2Xgyk6ktRZ9xLjdE8CbwoABqh8v9ZdH6auAaFbeB56TY9qFwF/1nyhjEVY/Hx A2ymNh9Dee2R51g8VPM= ) ;; ADDITIONAL SECTION (7 records) dns1.l-secb.net. 43200 IN A 198.77.70.37 dns2.l-secb.net. 43200 IN A 205.130.212.37 dns3.l-secb.net. 43200 IN A 35.163.67.210 dns1.l-secb.net. 43200 IN AAAA 2001:1900:2268:770:198:77:70:37 dns2.l-secb.net. 43200 IN AAAA 2001:1900:2268:512:205:130:212:37 dns3.l-secb.net. 43200 IN AAAA 2600:1f14:a2e:4b00:35:163:67:210 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns2.l-secb.net for UCE.GOV/A
	Received 854 bytes from 205.130.212.37
	;; Answer received from 205.130.212.37 (854 bytes) ;; HEADER SECTION ;; id = 21502 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; UCE.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) UCE.GOV. 900 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2019102101 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20210515193546 20210508193546 53814 uce.gov. NqEqRE+MgX9fIAi+AZAGO0u0E7BLDIwBnqbWgHZeVX5migNF+r65wOFWw4RQYJwq6AmrL+7oNkDB Kwnxq4T0UXYBPt8n3cIJGGadd4+0xWX4fhKfUHKEfGmg1BzAG14qw1KBeUrGMhWaNOUhRhM9rjO8 WPQpsAnmtXcAy3eL5bM= ) UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20210516193451 20210509193451 14748 uce.gov. O5mELhT1JXxO5XKXG3UlWyp711BGMZ8UTix7varQpKjZ5FC8+hgkT+XX/HNdBoXFzAw4btcDEMY/ 3Us+oUvS7lYUENAumi0JeuaS+90FhQj6iV5flNsMUsgVE9SINQqgPh/MVztsBRpHT2oavgCCyLvb KUu3MYe4yEJyywAtR7E= ) vbcnk4f8vie8cpgjviqbn03ak80mrhai.UCE.GOV. 900 IN NSEC3 ( 1 0 1 3a6d2aef8f1eebea vbcnk4f8vie8cpgjviqbn03ak80mrhaj NS SOA RRSIG DNSKEY NSEC3PARAM ) vbcnk4f8vie8cpgjviqbn03ak80mrhai.UCE.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20210517173159 20210510173159 53814 uce.gov. zkfIHzQNFAfkQWKaWjBNAcI5nWefLMRQ6QjhGZ2ki+lQHzrzzfpZuCb1PF8PYfS3LWvFTJfb2X+Y OLX9c9t7/rCvcBfALcw0j78PirpX9TLegiFps4rfjclDsroa5g7N8QadvE8nK2kasn5h7qNifEYj FJW35+eWvTA1a8vlZLM= ) vbcnk4f8vie8cpgjviqbn03ak80mrhai.UCE.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20210516194401 20210509194401 14748 uce.gov. Q25lFCVhn92VY+XZKzbHJ4EtfDSbeQ9osSPEe0puSL+DpgJL/h7tKYHFrrDn3b0LmE64JQds+Mg+ RbhHIzo1V9gL/LUbAz4FuMrjAExaOlCGoytOiKksId4X8NiYTQY9cuE+B7ti1yGV3g+h/l9ae/mF XTmIZ5rt8nh0sGRPaMI= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20210515193515 20210508193515 53814 uce.gov. oFRVhPQScnoVIfkZViAx221e9rmCCyuOovolyjscQJV4rSUTJN6kBPciAC/9u0IY4mNKO3igE3Ae Z1P6yMWsEmH5ZByd+mrNGJasEuQ7Wpr/YIRUOw2idr0meg1OTPd2Ig0HHyXfkjk0qjPU1meuz5IA gtGiGA9OPe7Or1oogFU= )`
	`UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20210516193451 20210509193451 14748 uce.gov. O5mELhT1JXxO5XKXG3UlWyp711BGMZ8UTix7varQpKjZ5FC8+hgkT+XX/HNdBoXFzAw4btcDEMY/ 3Us+oUvS7lYUENAumi0JeuaS+90FhQj6iV5flNsMUsgVE9SINQqgPh/MVztsBRpHT2oavgCCyLvb KUu3MYe4yEJyywAtR7E= )`
	RRSIG=53814 and DNSKEY=53814 verifies the SOA RRset
	RRSIG=14748 and DNSKEY=14748 verifies the SOA RRset

UCE.GOV

	Query to dns3.l-secb.net for UCE.GOV/A
	Received 854 bytes from 35.163.67.210
	;; Answer received from 35.163.67.210 (854 bytes) ;; HEADER SECTION ;; id = 37385 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; UCE.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) UCE.GOV. 900 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2019102101 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20210515193806 20210508193806 53814 uce.gov. T/jFt9R/JgS+KzeCZgkF1+gsT7QGK9APIO34O7ZXdn3UGb6DQ3q4hF8AZWHBLUb1jz4V2NBOTc3p g5e4+2+BvDrT6J1SfUbKenjf9iVk0MmtyF8hvMmLwW6ndsFjxgn3oTUmxduYkVn7Hxn3PQ4PZfd2 K7ZyfBW6snKvuu++A3s= ) UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20210516193453 20210509193453 14748 uce.gov. d0vSvXsNex9v2mJPxYSuchCOiG2okV4h88R1DfT7GtKyQmv4d1piRIWCsGLfrGBmbLL3dSDYje+c soriC5jII1geT31wHDf7A3W19534miBrgnqU8AE4pcQHy9bURNwjCwQSgX4H4iba9erSTgwdfaA3 Ar9WmrMc5y/ftRNAzmY= ) 4vk3753usd8mp5p4j0huh68e3bvpcl0t.UCE.GOV. 900 IN NSEC3 ( 1 0 1 d8b224dd5275054a 4vk3753usd8mp5p4j0huh68e3bvpcl0u NS SOA RRSIG DNSKEY NSEC3PARAM ) 4vk3753usd8mp5p4j0huh68e3bvpcl0t.UCE.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20210517065352 20210510065352 53814 uce.gov. kGx2RctStSLcOz+JNL2afXL8SlSXyN4NcrO4e0xyYpzk5pzidpv63zKujnI/yHVLD64RTwcbBhza OZa4W6xUOXaHCFYTqL46wXdk2kLQqj2+R99YJosTqHzv+lJEw+899KK0aTxLrikP8tCB6prEqKEG 2CC1ut0ELNXvEbjkb7w= ) 4vk3753usd8mp5p4j0huh68e3bvpcl0t.UCE.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20210516193557 20210509193557 14748 uce.gov. Z8fRM2l0uREiOsiERE+bTJcj6JvvgrrmbJ0o3xO3WsLYXvKcD1SpVokZ9NL5unpFlcx7E3aijjSN DYffD/BO8ggzu3tjt4Q06nmUO3eKNZdKntMG0rLDtpguLho61XN3vk2825CAax0JIct18tV09kay fwrJjGWadk//2R5aTfA= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns3.l-secb.net is authoritative for UCE.GOV
	Found RRSIG signed by uce.gov zone
	Query to dns3.l-secb.net for UCE.GOV/A
	Received 854 bytes from 35.163.67.210
	;; Answer received from 35.163.67.210 (854 bytes) ;; HEADER SECTION ;; id = 51838 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; UCE.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) UCE.GOV. 900 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2019102101 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20210515193634 20210508193634 53814 uce.gov. I4iYFdzQ585O1AafLXAyN9ZdFP5aKHp3p0DDTJh6mr1s+xhDOdwQ60ZktUS9WiB14VmL1yU8CfjJ waRuCnZMyicjOQ4rnYjeS6LPKR4zZYSwyBWIkOr1ebVMfBEkQ4WJGF2hsBI6AeGzGJ2bReMTFaVg Wm8ZgW0WUJ/Aq45qzrI= ) UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20210516193449 20210509193449 14748 uce.gov. lDNcdklczU64mzFYzlrYkxW9Rze8u4k83EiTK8WlM7XrUFNscEnSVzp+E7XXKCMuHNTuLTl5GFRb Sbkg/FuTd1OyJp7AdBeRcCu9g8RjRNqRizGEa/PopLu5VLqrroVEpjqTztH9pVErkmfLK68PuFCU QgK9aU1t9ZZ9NF8GKTk= ) i25kcss3mbqmmeojs8lolu3k0ju6mvvg.UCE.GOV. 900 IN NSEC3 ( 1 0 1 d3d687a804b534fe i25kcss3mbqmmeojs8lolu3k0ju6mvvh NS SOA RRSIG DNSKEY NSEC3PARAM ) i25kcss3mbqmmeojs8lolu3k0ju6mvvg.UCE.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20210517090133 20210510090133 53814 uce.gov. LloUNOnHRpYu4RVJPVMTHL1ee8g0SKXquk7hzUTYQHcRWNJgVhlr3saIHRjLYubb6TgAeivRPKe5 wgtGb8Wu3kWhybRtdZUJ3emFglHdFDstTzmxUH8CfcRZsinJCzJNMMTUTdDTCvEZmktfv4BDraAQ +Jn/U5KoiG0Vu0LnpDE= ) i25kcss3mbqmmeojs8lolu3k0ju6mvvg.UCE.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20210516194932 20210509194932 14748 uce.gov. fbXLioZ2hVYm1oo8bbhPrXeoOLwTtAHAXV/BjlRUDeKjEwlXrc1dxwSSk12ZekoiEBq+VzCguck1 doXxwXvsOWfKZMSjYlgz8tHv3D1NsuvMHAbFkj8zCTUO1bLJ0FatokiSHQX8OYYBF6b4Q9hbXU7A 9aGJTVOQfeBkFTV43DY= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20210515193806 20210508193806 53814 uce.gov. T/jFt9R/JgS+KzeCZgkF1+gsT7QGK9APIO34O7ZXdn3UGb6DQ3q4hF8AZWHBLUb1jz4V2NBOTc3p g5e4+2+BvDrT6J1SfUbKenjf9iVk0MmtyF8hvMmLwW6ndsFjxgn3oTUmxduYkVn7Hxn3PQ4PZfd2 K7ZyfBW6snKvuu++A3s= )`
	`UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20210516193453 20210509193453 14748 uce.gov. d0vSvXsNex9v2mJPxYSuchCOiG2okV4h88R1DfT7GtKyQmv4d1piRIWCsGLfrGBmbLL3dSDYje+c soriC5jII1geT31wHDf7A3W19534miBrgnqU8AE4pcQHy9bURNwjCwQSgX4H4iba9erSTgwdfaA3 Ar9WmrMc5y/ftRNAzmY= )`
	RRSIG=53814 and DNSKEY=53814 verifies the SOA RRset
	RRSIG=14748 and DNSKEY=14748 verifies the SOA RRset

UCE.GOV

	Query to dns1.l-secb.net for UCE.GOV/A
	Received 854 bytes from 198.77.70.37
	;; Answer received from 198.77.70.37 (854 bytes) ;; HEADER SECTION ;; id = 63627 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; UCE.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) UCE.GOV. 900 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2019102101 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20210515193525 20210508193525 53814 uce.gov. qt/GzxebeTLWpx5OrNU82Ma9RmasRh/v0rskIp2oTZwEurq9e7kWb+RbcLb9rLekK8SvtCbD4+cU /10Dnzq5cchoBQ46znT8gWuLe/6w8nnrCD0VygzmPhd76XYqErCC0XeBY/naTeABqliJQggl9J5w 1pU7dmBqFmjxnJYZA1s= ) UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20210516193449 20210509193449 14748 uce.gov. lDNcdklczU64mzFYzlrYkxW9Rze8u4k83EiTK8WlM7XrUFNscEnSVzp+E7XXKCMuHNTuLTl5GFRb Sbkg/FuTd1OyJp7AdBeRcCu9g8RjRNqRizGEa/PopLu5VLqrroVEpjqTztH9pVErkmfLK68PuFCU QgK9aU1t9ZZ9NF8GKTk= ) trkv754131c4rjdg4lf9p1nij01obgh2.UCE.GOV. 900 IN NSEC3 ( 1 0 1 cbec101c33cf0333 trkv754131c4rjdg4lf9p1nij01obgh3 NS SOA RRSIG DNSKEY NSEC3PARAM ) trkv754131c4rjdg4lf9p1nij01obgh2.UCE.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20210514190129 20210507190129 53814 uce.gov. iL2X9Encsx69+4U5zem6/m7r3ofSF8nNGePGaEgKw3PXl2xV7GiwzHkbZnI29kQ2QLwo5/6yuzCG +TWD19lD1oSxRYQ1QUVWyKnhHZmJTcy2El6cDMAPRghvZW/y9HXbGteJy56Wq4aipPig+cD03Kc1 g/ONTTm13sOAiAxSf4Q= ) trkv754131c4rjdg4lf9p1nij01obgh2.UCE.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20210516193703 20210509193703 14748 uce.gov. cshnRtvAKhl2t6wPPDkfeuQzcW0vk2Y8vqmJPzEKefgSkhDJjf4IUIOkzOFsQSk0i7dvkNcsKC01 of91U25NuhufWmSUxAZjGcZCb6OFDfxsdloj3/O+C5Ld55XUmFUgGwVRD0Qc9vP7nbc6d9y3+eHi ZEo8U9RAH/ShTeY0goA= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns1.l-secb.net is authoritative for UCE.GOV
	Found RRSIG signed by uce.gov zone
	Query to dns1.l-secb.net for UCE.GOV/A
	Received 854 bytes from 198.77.70.37
	;; Answer received from 198.77.70.37 (854 bytes) ;; HEADER SECTION ;; id = 54139 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; UCE.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) UCE.GOV. 900 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2019102101 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20210515193515 20210508193515 53814 uce.gov. oFRVhPQScnoVIfkZViAx221e9rmCCyuOovolyjscQJV4rSUTJN6kBPciAC/9u0IY4mNKO3igE3Ae Z1P6yMWsEmH5ZByd+mrNGJasEuQ7Wpr/YIRUOw2idr0meg1OTPd2Ig0HHyXfkjk0qjPU1meuz5IA gtGiGA9OPe7Or1oogFU= ) UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20210516193449 20210509193449 14748 uce.gov. lDNcdklczU64mzFYzlrYkxW9Rze8u4k83EiTK8WlM7XrUFNscEnSVzp+E7XXKCMuHNTuLTl5GFRb Sbkg/FuTd1OyJp7AdBeRcCu9g8RjRNqRizGEa/PopLu5VLqrroVEpjqTztH9pVErkmfLK68PuFCU QgK9aU1t9ZZ9NF8GKTk= ) t5gp1j2m5bv2ts2cpn7vn68ogreb453s.UCE.GOV. 900 IN NSEC3 ( 1 0 1 af578f08ee1d4014 t5gp1j2m5bv2ts2cpn7vn68ogreb453t NS SOA RRSIG DNSKEY NSEC3PARAM ) t5gp1j2m5bv2ts2cpn7vn68ogreb453s.UCE.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20210514154410 20210507154410 53814 uce.gov. TTxAv6pGuyoq3WEqebI8TPeJ4mcMGk1ywI9z0BTv7XBlENYJrxyrQAgeE70RyRUD+jHG4EvYdCYq DalpRj3A1Qda7WzlnBx0cxPQhVhX2cHAKRHi5HkkpvAmMT2eHFzwqh0ex71dL47Sf145ZwJQ/KN4 AKZ186cxhwxcvjIvb94= ) t5gp1j2m5bv2ts2cpn7vn68ogreb453s.UCE.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20210516193649 20210509193649 14748 uce.gov. ba49SBfpaahngK9KuRtzqzbkv9+gik4wd1gLKxpuDDKU2DaTzho1M0YUWlewbxwI8ziVzfABRsXn QU22OyPKGnVhkQ4WABKYMpGHlJ+WHXhywnybl8EVLnpgdCXpIf8uDB06rx113FRzYpMpfRw0bsTz FhyEjoLFvx07F6OBgrA= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20210515193525 20210508193525 53814 uce.gov. qt/GzxebeTLWpx5OrNU82Ma9RmasRh/v0rskIp2oTZwEurq9e7kWb+RbcLb9rLekK8SvtCbD4+cU /10Dnzq5cchoBQ46znT8gWuLe/6w8nnrCD0VygzmPhd76XYqErCC0XeBY/naTeABqliJQggl9J5w 1pU7dmBqFmjxnJYZA1s= )`
	`UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20210516193449 20210509193449 14748 uce.gov. lDNcdklczU64mzFYzlrYkxW9Rze8u4k83EiTK8WlM7XrUFNscEnSVzp+E7XXKCMuHNTuLTl5GFRb Sbkg/FuTd1OyJp7AdBeRcCu9g8RjRNqRizGEa/PopLu5VLqrroVEpjqTztH9pVErkmfLK68PuFCU QgK9aU1t9ZZ9NF8GKTk= )`
	RRSIG=53814 and DNSKEY=53814 verifies the SOA RRset
	RRSIG=14748 and DNSKEY=14748 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test UCE.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: