DNSSEC Analyzer

Domain Name:

Time: 2021-04-22 03:04:28 UTC, NTP stratum 4

Analyzing DNSSEC problems for UCE.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (864 bytes) ;; HEADER SECTION ;; id = 11405 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210512000000 20210421000000 20326 . bx5MOQGiU0gAwVPCF6fPBYdApVZCvs4fZ3603lzlRdtiHNsNSk2j/mVU7UD6oZkA/q/AIucEPGMD Lua0HNNnfhW8QsYssPHURJpcOUhgt17GinADGwADQYSI6fH12kFnb5wIZ/jznJ58dCdJDr0E7tg6 GarIqeu190nLM+sp75CNlKEG3HrrdSIGLWY8CFU1wLcU43ZAXaCiO5D6XwV8j7WUOs0n8XB48JzO yq4nZ/9Pt6Nl1QWT1UMrGZPPpBBeBKFeggIiGmDuzCn/nrk8F5zuN8f8RvhCxJZi1Kf6rEB0l79X XZ+JnpyjIJrNSNsDxeTQkO5NgXOrols1Gxv/QA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210512000000 20210421000000 20326 . bx5MOQGiU0gAwVPCF6fPBYdApVZCvs4fZ3603lzlRdtiHNsNSk2j/mVU7UD6oZkA/q/AIucEPGMD Lua0HNNnfhW8QsYssPHURJpcOUhgt17GinADGwADQYSI6fH12kFnb5wIZ/jznJ58dCdJDr0E7tg6 GarIqeu190nLM+sp75CNlKEG3HrrdSIGLWY8CFU1wLcU43ZAXaCiO5D6XwV8j7WUOs0n8XB48JzO yq4nZ/9Pt6Nl1QWT1UMrGZPPpBBeBKFeggIiGmDuzCn/nrk8F5zuN8f8RvhCxJZi1Kf6rEB0l79X XZ+JnpyjIJrNSNsDxeTQkO5NgXOrols1Gxv/QA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=14631 is now in the chain-of-trust
	Query to f.root-servers.net for UCE.GOV/A
	Received 626 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (626 bytes) ;; HEADER SECTION ;; id = 42432 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; UCE.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20210504220000 20210421210000 14631 . neNcEL5svdpJboSvCA+APK3KufuPIO46bPXaX0L+wE2H1nrU6g8caNctZy4c+dh1PPC37fu6Vv7p Ms2kWW/AIWLClxMB949tRwGiWv2oSJs7I0QK8qpNtq0NiYbq2Z0j/ZZTuvhj4Hw3eSZkJbJfmacp iQ0+6xBoYa2wsmaslO76AFzjBwJYgOkjGYmMpsPsLdl3rwuuZK2XkTR0eXUo0RlplxqE+E6Ps8tl tK/7wlsSFpwWn0Vrt8ntcGulTsa5Mb4nCTAiGWJohceq+4hpIk8ZiDKhrUpR9czZzqPOgXB0dyBF qjkZzYnrvdcdQJgODAxt78pylFWJCRnGxKc56w== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to a.root-servers.net for GOV/DNSKEY
	Received 622 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (622 bytes) ;; HEADER SECTION ;; id = 43811 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20210504220000 20210421210000 14631 . neNcEL5svdpJboSvCA+APK3KufuPIO46bPXaX0L+wE2H1nrU6g8caNctZy4c+dh1PPC37fu6Vv7p Ms2kWW/AIWLClxMB949tRwGiWv2oSJs7I0QK8qpNtq0NiYbq2Z0j/ZZTuvhj4Hw3eSZkJbJfmacp iQ0+6xBoYa2wsmaslO76AFzjBwJYgOkjGYmMpsPsLdl3rwuuZK2XkTR0eXUo0RlplxqE+E6Ps8tl tK/7wlsSFpwWn0Vrt8ntcGulTsa5Mb4nCTAiGWJohceq+4hpIk8ZiDKhrUpR9czZzqPOgXB0dyBF qjkZzYnrvdcdQJgODAxt78pylFWJCRnGxKc56w== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to m.root-servers.net for GOV/DS
	Received 370 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (370 bytes) ;; HEADER SECTION ;; id = 44100 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20210504220000 20210421210000 14631 . neNcEL5svdpJboSvCA+APK3KufuPIO46bPXaX0L+wE2H1nrU6g8caNctZy4c+dh1PPC37fu6Vv7p Ms2kWW/AIWLClxMB949tRwGiWv2oSJs7I0QK8qpNtq0NiYbq2Z0j/ZZTuvhj4Hw3eSZkJbJfmacp iQ0+6xBoYa2wsmaslO76AFzjBwJYgOkjGYmMpsPsLdl3rwuuZK2XkTR0eXUo0RlplxqE+E6Ps8tl tK/7wlsSFpwWn0Vrt8ntcGulTsa5Mb4nCTAiGWJohceq+4hpIk8ZiDKhrUpR9czZzqPOgXB0dyBF qjkZzYnrvdcdQJgODAxt78pylFWJCRnGxKc56w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20210504220000 20210421210000 14631 . neNcEL5svdpJboSvCA+APK3KufuPIO46bPXaX0L+wE2H1nrU6g8caNctZy4c+dh1PPC37fu6Vv7p Ms2kWW/AIWLClxMB949tRwGiWv2oSJs7I0QK8qpNtq0NiYbq2Z0j/ZZTuvhj4Hw3eSZkJbJfmacp iQ0+6xBoYa2wsmaslO76AFzjBwJYgOkjGYmMpsPsLdl3rwuuZK2XkTR0eXUo0RlplxqE+E6Ps8tl tK/7wlsSFpwWn0Vrt8ntcGulTsa5Mb4nCTAiGWJohceq+4hpIk8ZiDKhrUpR9czZzqPOgXB0dyBF qjkZzYnrvdcdQJgODAxt78pylFWJCRnGxKc56w== )`
	RRSIG=14631 and DNSKEY=14631 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to d.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (777 bytes) ;; HEADER SECTION ;; id = 44504 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbexj/PgN9RGQ1TokFnYjJ87/rMFIqE/rXjWtsmwzxteOcKIVCUJAAWg0pIZZer88omuCVrq +fAz0iBOgY48TRFWgyVFV9rm5esTGOEuCU6BTYj1Cb7zrpb/RayEw0yzVVZ0adT/AXbAsQhteTpV kgWK8K33gxq4wY70AK5KWdDCyj4v9uR6TS0mgbGdg7RzFCi8xeZoYP2PY5XOhAHFon0= ) ; Key ID = 48498 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210504190254 20210419185754 7698 gov. ZUQqCCEYe1uWRzEtjSAi55l/uPdT1PBCAPVabl5T0bTDYGDYkEUq6tEFc/VB/eBfw2B2pGWSIGb5 hzuuYFXyRfbgM+uwLGpFejX5M1rIRxqMawk8jyalKiedBy2NaID8XUy6yB9zHTa3QfoaGgLjvH6l Zbj6346qKK7OqyYRriKnF0K2DWGjOgfmi7zmIV1HgQ/l4Fwm8EUcrIlPnhA+l6RT37PO3u5Af+Xy HHT5s8hoOwHRthbq0W3+fP1z3luZbFre5c4nR4/sReFkwUHp0JlsVBxOaHKvDqOGARhy5U8YIT8N V4j5TSyrf+7xO6W60UfdQRPymiBmBzNWTdgm2w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbexj/PgN9RGQ1TokFnYjJ87/rMFIqE/rXjWtsmwzxteOcKIVCUJAAWg0pIZZer88omuCVrq +fAz0iBOgY48TRFWgyVFV9rm5esTGOEuCU6BTYj1Cb7zrpb/RayEw0yzVVZ0adT/AXbAsQhteTpV kgWK8K33gxq4wY70AK5KWdDCyj4v9uR6TS0mgbGdg7RzFCi8xeZoYP2PY5XOhAHFon0= ) ; Key ID = 48498`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210504190254 20210419185754 7698 gov. ZUQqCCEYe1uWRzEtjSAi55l/uPdT1PBCAPVabl5T0bTDYGDYkEUq6tEFc/VB/eBfw2B2pGWSIGb5 hzuuYFXyRfbgM+uwLGpFejX5M1rIRxqMawk8jyalKiedBy2NaID8XUy6yB9zHTa3QfoaGgLjvH6l Zbj6346qKK7OqyYRriKnF0K2DWGjOgfmi7zmIV1HgQ/l4Fwm8EUcrIlPnhA+l6RT37PO3u5Af+Xy HHT5s8hoOwHRthbq0W3+fP1z3luZbFre5c4nR4/sReFkwUHp0JlsVBxOaHKvDqOGARhy5U8YIT8N V4j5TSyrf+7xO6W60UfdQRPymiBmBzNWTdgm2w== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=48498 is now in the chain-of-trust
	Query to c.gov-servers.net for UCE.GOV/A
	Received 382 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (382 bytes) ;; HEADER SECTION ;; id = 12989 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; UCE.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) UCE.GOV. 86400 IN NS dns1.l-secb.net. UCE.GOV. 86400 IN NS dns3.l-secb.net. UCE.GOV. 86400 IN NS dns2.l-secb.net. UCE.GOV. 3600 IN DS ( 2665 8 2 24d49d8206730dbfc0e327cd40eaa05c3a2542118db267d22d166a8d0fda9ff1 ) UCE.GOV. 3600 IN DS 2665 8 1 632f025860cdc505fccf1d489f947377f21d6687 UCE.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210429011007 20210422011007 48498 gov. IwgykB92Ns4Ppw4kF4+ZMblxSIrGR5yALidOZ0iyzDaxCKLyy9T+95wVLZbsn7uGNX2R/SdOruk2 seoKWDwx3/5avtkrwytGTCWkODyO2x8SpIu/xmkosiPUHylpZ+3+8ehs3zQJ7yNufr0iQtrc5lo5 52F33JGj1MfVPxxHKBlmTqSiYRxvAC3k9KR0IifUIPg3XyF/pDj0Os+YWtrdbA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.gov-servers.net for UCE.GOV/DNSKEY
	Received 382 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (382 bytes) ;; HEADER SECTION ;; id = 63974 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; UCE.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) UCE.GOV. 86400 IN NS dns1.l-secb.net. UCE.GOV. 86400 IN NS dns3.l-secb.net. UCE.GOV. 86400 IN NS dns2.l-secb.net. UCE.GOV. 3600 IN DS ( 2665 8 2 24d49d8206730dbfc0e327cd40eaa05c3a2542118db267d22d166a8d0fda9ff1 ) UCE.GOV. 3600 IN DS 2665 8 1 632f025860cdc505fccf1d489f947377f21d6687 UCE.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210429011007 20210422011007 48498 gov. IwgykB92Ns4Ppw4kF4+ZMblxSIrGR5yALidOZ0iyzDaxCKLyy9T+95wVLZbsn7uGNX2R/SdOruk2 seoKWDwx3/5avtkrwytGTCWkODyO2x8SpIu/xmkosiPUHylpZ+3+8ehs3zQJ7yNufr0iQtrc5lo5 52F33JGj1MfVPxxHKBlmTqSiYRxvAC3k9KR0IifUIPg3XyF/pDj0Os+YWtrdbA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone UCE.GOV

UCE.GOV

	Checking DS between GOV and UCE.GOV
	Query to a.gov-servers.net for UCE.GOV/DS
	Received 315 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (315 bytes) ;; HEADER SECTION ;; id = 27340 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; UCE.GOV. IN DS ;; ANSWER SECTION (3 records) UCE.GOV. 3600 IN DS ( 2665 8 2 24d49d8206730dbfc0e327cd40eaa05c3a2542118db267d22d166a8d0fda9ff1 ) UCE.GOV. 3600 IN DS 2665 8 1 632f025860cdc505fccf1d489f947377f21d6687 UCE.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210429011007 20210422011007 48498 gov. IwgykB92Ns4Ppw4kF4+ZMblxSIrGR5yALidOZ0iyzDaxCKLyy9T+95wVLZbsn7uGNX2R/SdOruk2 seoKWDwx3/5avtkrwytGTCWkODyO2x8SpIu/xmkosiPUHylpZ+3+8ehs3zQJ7yNufr0iQtrc5lo5 52F33JGj1MfVPxxHKBlmTqSiYRxvAC3k9KR0IifUIPg3XyF/pDj0Os+YWtrdbA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for UCE.GOV in the GOV zone
	DS=2665/SHA-256 has algorithm RSASHA256
	DS=2665/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`UCE.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210429011007 20210422011007 48498 gov. IwgykB92Ns4Ppw4kF4+ZMblxSIrGR5yALidOZ0iyzDaxCKLyy9T+95wVLZbsn7uGNX2R/SdOruk2 seoKWDwx3/5avtkrwytGTCWkODyO2x8SpIu/xmkosiPUHylpZ+3+8ehs3zQJ7yNufr0iQtrc5lo5 52F33JGj1MfVPxxHKBlmTqSiYRxvAC3k9KR0IifUIPg3XyF/pDj0Os+YWtrdbA== )`
	RRSIG=48498 and DNSKEY=48498 verifies the DS RRset
	DS=2665/SHA-256 is now in the chain-of-trust
	`UCE.GOV. 3600 IN DS ( 2665 8 2 24d49d8206730dbfc0e327cd40eaa05c3a2542118db267d22d166a8d0fda9ff1 )`
	`UCE.GOV. 3600 IN DS 2665 8 1 632f025860cdc505fccf1d489f947377f21d6687`
	Query to dns2.l-secb.net for UCE.GOV/DNSKEY
	Received 1237 bytes from 205.130.212.37
	;; Answer received from 205.130.212.37 (1237 bytes) ;; HEADER SECTION ;; id = 17080 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; UCE.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) UCE.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAat9DX3OaE6Crya4/12hNEWah6U+uUqv8p8rwdwViR4i9b1/QNtkhb88dZQOx7K0uxkJYG9n GyCPOOhfvsgriWe4nvByKuz3QdZ6RGoWOXGUK4T8idLXCT5LXce9HNnMwHnFm4k0eOYJEVeoRITQ SVEkNJ/x8syCBLXRnCdgD/Ph ) ; Key ID = 10338 UCE.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAc7McQgyM6Fa0rWbRHkxqenSaYK6NQk5V40J9w0UwfReu1zMBo3r1ID5oWGUaPjKKmj0tb+t jkJNL7iAFHZPeb2fhwR6RqREEYxYCLsGoKe0F8rkZlDabrjtyK2z9r9F18ofQQ74ffFC6ijZNv0w g9Ztpy+3ztWHXKL6NQZ3bvDR ) ; Key ID = 38385 UCE.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAYs0uDua66GEZn8fx6XTOAOd1EDtbBgM9GHX4s+1Cq7DpewJpRh9iVZLwpG8KG1Ij0AWCHv2 jqQ5oPYvKOaiT3F6ax21omDXgwP0c3MVjyia1o2B3ktzP8HanggY8+H9hQw7+7hpWsUHFjbwJZ55 Rg58ipmELaQtYhQ2DyKwRwbkKhiUu4PBaZq/j55bkrOq8rzSO52nHR7Ok8PKheZpfFFohNpHenjf PdexwLprkJkiPrOXb+vN+dAOKWVf5yNfytpN+N53z/RQ8WSbl543tHPH8FlJN1CalajNPt7h78ka HZJ4vtNAm1icbrO090m4fcA0l8O59yvTFvarzvHElps= ) ; Key ID = 2665 UCE.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210426034022 20210419034022 10338 uce.gov. G5WECXjHrITHGGvPHCMtZXlUl4L7Fdl+GH7k69RZh66pRbubzOGg5oD7m+xh92slkyiBwv/j7buZ kfX1nbhiJ6llUUPGemA1Kwy/VODamjRQRlzhd6Oiya7WyZv7rN741rEsJwIlbYrek11/ywXYRNky GqV8TEUE8DOQYARIq54= ) UCE.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210426034022 20210419034022 38385 uce.gov. L+eY0gqhi9Z06V/wXs1AY+uPsIZkbRR+ermENy1FP8Db0qbl5kxLwYhwNHFIz6ObxwkBZNDGah6N fqZJ1XCUpimRmALZqgHs9fsLj4WGPHXiiSm+L+DcppiGV7J2r4pWTWS5kJte7rpez3105R2SLZCS 4AEUGQ6UPN55EBp+vWc= ) UCE.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210426034022 20210419034022 2665 uce.gov. VOEmmZ0hMu1AnvNhDw7IjHJtpG0v3OWj3+1x+Gig3KoZ3Y4jg8zuU66ATg3qBazGG3MGcwH5zrJS kn2sPdaWmUhsc/mEO2xbC1eB7foUTKUzMWCewmcjVkB2mKvIBVdbRKFjge+/e00n/BrCLpOtRkop I+DwW1kQ3F/rhE02MiMO7aIEnwKjDu9tJnNio3QAa6BucHIauQkl226d+qFxTtrZYXvKFT+AjIMp 4rQd7O0Z+GrY1Lu9zGmY9Lrzn6xFNg0OH3gPJJoBE8wn8eIwOdObzIL0VA6O+VmW5yx2W8dBolla O02zAn92j6OwdZjqVIEB61PdwVzmTNM7QyPiXw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for UCE.GOV
	`UCE.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAat9DX3OaE6Crya4/12hNEWah6U+uUqv8p8rwdwViR4i9b1/QNtkhb88dZQOx7K0uxkJYG9n GyCPOOhfvsgriWe4nvByKuz3QdZ6RGoWOXGUK4T8idLXCT5LXce9HNnMwHnFm4k0eOYJEVeoRITQ SVEkNJ/x8syCBLXRnCdgD/Ph ) ; Key ID = 10338`
	`UCE.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAc7McQgyM6Fa0rWbRHkxqenSaYK6NQk5V40J9w0UwfReu1zMBo3r1ID5oWGUaPjKKmj0tb+t jkJNL7iAFHZPeb2fhwR6RqREEYxYCLsGoKe0F8rkZlDabrjtyK2z9r9F18ofQQ74ffFC6ijZNv0w g9Ztpy+3ztWHXKL6NQZ3bvDR ) ; Key ID = 38385`
	`UCE.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAYs0uDua66GEZn8fx6XTOAOd1EDtbBgM9GHX4s+1Cq7DpewJpRh9iVZLwpG8KG1Ij0AWCHv2 jqQ5oPYvKOaiT3F6ax21omDXgwP0c3MVjyia1o2B3ktzP8HanggY8+H9hQw7+7hpWsUHFjbwJZ55 Rg58ipmELaQtYhQ2DyKwRwbkKhiUu4PBaZq/j55bkrOq8rzSO52nHR7Ok8PKheZpfFFohNpHenjf PdexwLprkJkiPrOXb+vN+dAOKWVf5yNfytpN+N53z/RQ8WSbl543tHPH8FlJN1CalajNPt7h78ka HZJ4vtNAm1icbrO090m4fcA0l8O59yvTFvarzvHElps= ) ; Key ID = 2665`
	DNSKEY=2665/SEP is now in the chain-of-trust
	DS=2665/SHA-256 verifies DNSKEY=2665/SEP
	DS=2665/SHA-1 verifies DNSKEY=2665/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`UCE.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210426034022 20210419034022 10338 uce.gov. G5WECXjHrITHGGvPHCMtZXlUl4L7Fdl+GH7k69RZh66pRbubzOGg5oD7m+xh92slkyiBwv/j7buZ kfX1nbhiJ6llUUPGemA1Kwy/VODamjRQRlzhd6Oiya7WyZv7rN741rEsJwIlbYrek11/ywXYRNky GqV8TEUE8DOQYARIq54= )`
	`UCE.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210426034022 20210419034022 38385 uce.gov. L+eY0gqhi9Z06V/wXs1AY+uPsIZkbRR+ermENy1FP8Db0qbl5kxLwYhwNHFIz6ObxwkBZNDGah6N fqZJ1XCUpimRmALZqgHs9fsLj4WGPHXiiSm+L+DcppiGV7J2r4pWTWS5kJte7rpez3105R2SLZCS 4AEUGQ6UPN55EBp+vWc= )`
	`UCE.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210426034022 20210419034022 2665 uce.gov. VOEmmZ0hMu1AnvNhDw7IjHJtpG0v3OWj3+1x+Gig3KoZ3Y4jg8zuU66ATg3qBazGG3MGcwH5zrJS kn2sPdaWmUhsc/mEO2xbC1eB7foUTKUzMWCewmcjVkB2mKvIBVdbRKFjge+/e00n/BrCLpOtRkop I+DwW1kQ3F/rhE02MiMO7aIEnwKjDu9tJnNio3QAa6BucHIauQkl226d+qFxTtrZYXvKFT+AjIMp 4rQd7O0Z+GrY1Lu9zGmY9Lrzn6xFNg0OH3gPJJoBE8wn8eIwOdObzIL0VA6O+VmW5yx2W8dBolla O02zAn92j6OwdZjqVIEB61PdwVzmTNM7QyPiXw== )`
	RRSIG=10338 and DNSKEY=10338 verifies the DNSKEY RRset
	RRSIG=38385 and DNSKEY=38385 verifies the DNSKEY RRset
	RRSIG=2665 and DNSKEY=2665/SEP verifies the DNSKEY RRset
	DNSKEY=10338 is now in the chain-of-trust
	DNSKEY=38385 is now in the chain-of-trust
	Query to dns3.l-secb.net for UCE.GOV/A
	Received 854 bytes from 35.163.67.210
	;; Answer received from 35.163.67.210 (854 bytes) ;; HEADER SECTION ;; id = 63034 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; UCE.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) UCE.GOV. 900 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2019102101 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20210425033623 20210418033623 10338 uce.gov. dsNlAkoUGCkW4o5vnvI7uwZDt+Nh9YBfPC3Lwsg79Rjm+Sm2ZaLQxAxAjREOUeEh4yQVXZbSAVyC m3pcdA4qA0hxbZFJ/J8c7kuiupYEyklLQUTM0uzTrV+UvFVEV252+jp4pog/sNsgHjyQlM2aiRpc 75g/yCmeZcJbx/oe8cs= ) UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20210426033626 20210419033626 38385 uce.gov. w9SBs+F3KI+VGjhtpjg4ToYfc8nEruEjIzWqJq67z/YogECv1bQqjPw0d0+idl38KKQLGSLpKnoc gx6aQq5YABEZckkBAGqvbLXdX3H3EuPrdzlbmXHDngHW4aKTdCoTtlvue5u6R0f7ywU/QAKK3kJu Uqn5rt4F3oviGuTAfKM= ) 5mct06q19hv49nt7mo71l1abrgd4puk6.UCE.GOV. 900 IN NSEC3 ( 1 0 1 ead4448fe60fca8e 5mct06q19hv49nt7mo71l1abrgd4puk7 NS SOA RRSIG DNSKEY NSEC3PARAM ) 5mct06q19hv49nt7mo71l1abrgd4puk6.UCE.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20210426070608 20210419070608 10338 uce.gov. pMcyJsDfsEdMsZEkkcN+5OsmOowoWBxuD9Vd6br7czIzuYuDIunIe9U/e2CwgZr5r5bRnCnBHPQZ ahJWZPvIfy6fhZnkepoAfAKJp6YmzNaGhRK6bWoFhfpzGP3ZgsdK0MNZ3RkaRWxoLdApq8Fsz9jH 5nuUe21In93WSt2Q48c= ) 5mct06q19hv49nt7mo71l1abrgd4puk6.UCE.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20210426070608 20210419070608 38385 uce.gov. YMm6zeWVxzML181GmWjlBOavDDxVLjH4+Wz6YcMBLHnkZZJijO5YomKEWNKent3fEcGXGbwPqPIW 8Fp2bzEcpUDIW9DjaRi6tclOpb9fl+Mu8X8bySUChUSIe9RR9EAXWHqO2vYzzvOCTW0/ShwtVYal 8a9BIjwKIl9PMczR5Ao= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns3.l-secb.net is authoritative for UCE.GOV
	Found RRSIG signed by uce.gov zone
	Query to dns2.l-secb.net for UCE.GOV/SOA
	Received 950 bytes from 205.130.212.37
	;; Answer received from 205.130.212.37 (950 bytes) ;; HEADER SECTION ;; id = 40285 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; UCE.GOV. IN SOA ;; ANSWER SECTION (3 records) UCE.GOV. 1800 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2019102101 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) UCE.GOV. 1800 IN RRSIG ( SOA 8 2 1800 20210425225503 20210418225503 10338 uce.gov. IM9t11eQUtbYEH2+MYYE/+aWIWPcuDUsn6BCf4rfob3+lEczAOKbxwKNQoCElpX08MTdOOJPanpn xGAKBF4g1YP5Ct/1h3BcO0vU4XaqTYy7iy3eszoqTt4hZp7NhGkAfCkqMMU2OLOQLaNd9XHb5S5A 87H8V6bFKziM8rDvKT4= ) UCE.GOV. 1800 IN RRSIG ( SOA 8 2 1800 20210426070457 20210419070457 38385 uce.gov. bQbp+xEjWltiTFQJnXZzorQpTATu8e1DvbwhlXpqDqznfF91RksrZMlllmLgvamiKDMJRYxtcTO0 YuS8/F+l9h0eEdBwOotHA4wkiH4a/5N+BL2B43NJsM7sBoRCYqN5lwln/LBDkNKNLGYoEn+crime 57AEd06lpWR7mNLUdxk= ) ;; AUTHORITY SECTION (5 records) UCE.GOV. 1800 IN NS dns1.l-secb.net. UCE.GOV. 1800 IN NS dns2.l-secb.net. UCE.GOV. 1800 IN NS dns3.l-secb.net. UCE.GOV. 1800 IN RRSIG ( NS 8 2 1800 20210425033450 20210418033450 10338 uce.gov. g5R0zHDEuxHFWs2voFm1yQ7owwzSsPkxbm5avzqGzRT0ZIUHCQr7yyQ7yF5aw5VHi4yl/ca06GTZ r5tYr3XewqwFBmYwYvDdOnn3TP2a7REjd+k+NKXpM30a8kJ+xHt8Ioa2bdeusf707QlrYLjnzze3 uteRo3y7Bm81m/rP8C0= ) UCE.GOV. 1800 IN RRSIG ( NS 8 2 1800 20210426033441 20210419033441 38385 uce.gov. lFwTfLnD3YfEic2hQ2mZIcAVW8m2TXkcpBTZfAMiGt+b/iSbUaexPnUoPxGMqCq+3WYVU3WJ7ZQ3 DSKT7JoqFyJpjKjdJPPSHd+5kr6lyN4Be7+EtGsbidHba43TWGOMpTjO0EQzDPBNgjCHb2/SEJFv 4IzP/Fme3+TtOQeW2kI= ) ;; ADDITIONAL SECTION (7 records) dns1.l-secb.net. 43200 IN A 198.77.70.37 dns2.l-secb.net. 43200 IN A 205.130.212.37 dns3.l-secb.net. 43200 IN A 35.163.67.210 dns1.l-secb.net. 43200 IN AAAA 2001:1900:2268:770:198:77:70:37 dns2.l-secb.net. 43200 IN AAAA 2001:1900:2268:512:205:130:212:37 dns3.l-secb.net. 43200 IN AAAA 2600:1f14:a2e:4b00:35:163:67:210 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns1.l-secb.net for UCE.GOV/SOA
	Received 950 bytes from 198.77.70.37
	;; Answer received from 198.77.70.37 (950 bytes) ;; HEADER SECTION ;; id = 58198 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; UCE.GOV. IN SOA ;; ANSWER SECTION (3 records) UCE.GOV. 1800 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2019102101 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) UCE.GOV. 1800 IN RRSIG ( SOA 8 2 1800 20210425134700 20210418134700 10338 uce.gov. fwTMbdP/V5zvHnDz1PfC8a1eAKf2EPJFaBm3UjeVmHflvec78+zZxXxdJwUFu6B4KCPuD2mXX6hH QvuH5AsPWOCRN1v7MTfoa+kCbJbRDsCMIpYhrhzvTENeOi77reeQBQdFaQtKrrKZS9WSHcYFo0WD Iab35YBoDXuZLso7JM0= ) UCE.GOV. 1800 IN RRSIG ( SOA 8 2 1800 20210426135616 20210419135616 38385 uce.gov. bEuGSFg4ycUBJem1jeFmMUGgvrRWUMIoXPJND3yhymbDfPuAPIRZJyAKUvdnBz07OI55/7ffYUyc VlII+HO1DnxrTZeuDT3OBRUIuYSBqLDC6Hanu+zqRes5v5MfSYrNAjcYpM1p0/Y+BKZtEpf8yj0o kDv4XY1jJO62VIN9C6E= ) ;; AUTHORITY SECTION (5 records) UCE.GOV. 1800 IN NS dns3.l-secb.net. UCE.GOV. 1800 IN NS dns2.l-secb.net. UCE.GOV. 1800 IN NS dns1.l-secb.net. UCE.GOV. 1800 IN RRSIG ( NS 8 2 1800 20210425033446 20210418033446 10338 uce.gov. mFpLqRzC55/4N7ddr7ZT5GlPlCYTxSAG3z6FBFjM7dnLPWc8tncuIBDU/kIAAuSjbpxrIpVw/YDV snFD04BFU1A2knldxQzILODAUcdJR/e1FJ+59rCQkwVgYcCVePSY/4JKkNssOCwADl9rTTCIEmXi 9gRBg3CIcoRSLinHDY4= ) UCE.GOV. 1800 IN RRSIG ( NS 8 2 1800 20210426033445 20210419033445 38385 uce.gov. GJn1+Jik8nWtTyosK8w9NLoHwyIDGUK2sTryVOWW9PgMnc4NFg4wtXAOU1+d/AP9ynZwrbdTsumu AbS+L2LueQQDKAgmkM3EFx+KhrkYPcdO6Zrff7TvcuxCuKrCeteIMGRag9WxiKWNUPZIUMZk8pYw KgggJO8oAMDVDMX+gkU= ) ;; ADDITIONAL SECTION (7 records) dns1.l-secb.net. 43200 IN A 198.77.70.37 dns2.l-secb.net. 43200 IN A 205.130.212.37 dns3.l-secb.net. 43200 IN A 35.163.67.210 dns1.l-secb.net. 43200 IN AAAA 2001:1900:2268:770:198:77:70:37 dns2.l-secb.net. 43200 IN AAAA 2001:1900:2268:512:205:130:212:37 dns3.l-secb.net. 43200 IN AAAA 2600:1f14:a2e:4b00:35:163:67:210 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns3.l-secb.net for UCE.GOV/A
	Received 854 bytes from 35.163.67.210
	;; Answer received from 35.163.67.210 (854 bytes) ;; HEADER SECTION ;; id = 26726 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; UCE.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) UCE.GOV. 900 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2019102101 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20210425034015 20210418034015 10338 uce.gov. LfJ4qPGE1aAEhcQSWxZ/t4YiYNmC1U8AOzQ11iT0TgDkn3PvSc432nsTDqxmt1bhaSN9+omoliIV bsafpWLdcKX0vrh8aISH2ZJaotPTO/7/ykIygC9ayGTslcDrqJy+L9oXURc4prAIMKZgnUc7pLA+ +daEgUyUxNizzUHaFNI= ) UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20210426033454 20210419033454 38385 uce.gov. GtOtFzxqcFzqcPEkSJy2S7LItOxrrfbzYENKQgYI06wc4la7ezNg7Gcl/HTnraCsg26ITeYasUMm 97I/EL8yXFQYALYptMqWUm750MZVfk+EjTyWdjviytw4uVpt1fqgQA0n46KPH0HJOiOYaGNFO2nL Kwu6HAszGCHsg0vXm7c= ) c2qnp4q5hfa3ej340uvvs7nl7nsceu30.UCE.GOV. 900 IN NSEC3 ( 1 0 1 6fba3fbeb7f41793 c2qnp4q5hfa3ej340uvvs7nl7nsceu31 NS SOA RRSIG DNSKEY NSEC3PARAM ) c2qnp4q5hfa3ej340uvvs7nl7nsceu30.UCE.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20210426031503 20210419031503 10338 uce.gov. CuFl6nQh4+KrPv2BvehsImm3DABnIIJLn1ygGnw26B1wXPwieeO9+tyb92Qg5ZjiIfI1rssX5U3h zIUM76bsx/E6U3gHDKUVBgofKLoCN8ljXBd6AI1+fyEpHhHIsuoe1Xb2Hmei+kiuaj3hB6HfGFAB PZ3/Zl9X3M9XchjvABA= ) c2qnp4q5hfa3ej340uvvs7nl7nsceu30.UCE.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20210426034815 20210419034815 38385 uce.gov. PfLgJp0Zi0CdTo3T4/udWxkTsFGv9uJEll8F36ZSyyvolPMkgWjyWTd2SpzTXxdWf8H8y3rDS7oD Xlgk02GIDNkypC3TmtgghOh1cCouaXBh+rqCrnyjTN/OWYQDBcNXxLegrgrffbEEVWG5Bk0eR3Ar DaXlIEFI6aqncMC0uXU= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20210425033623 20210418033623 10338 uce.gov. dsNlAkoUGCkW4o5vnvI7uwZDt+Nh9YBfPC3Lwsg79Rjm+Sm2ZaLQxAxAjREOUeEh4yQVXZbSAVyC m3pcdA4qA0hxbZFJ/J8c7kuiupYEyklLQUTM0uzTrV+UvFVEV252+jp4pog/sNsgHjyQlM2aiRpc 75g/yCmeZcJbx/oe8cs= )`
	`UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20210426033626 20210419033626 38385 uce.gov. w9SBs+F3KI+VGjhtpjg4ToYfc8nEruEjIzWqJq67z/YogECv1bQqjPw0d0+idl38KKQLGSLpKnoc gx6aQq5YABEZckkBAGqvbLXdX3H3EuPrdzlbmXHDngHW4aKTdCoTtlvue5u6R0f7ywU/QAKK3kJu Uqn5rt4F3oviGuTAfKM= )`
	RRSIG=10338 and DNSKEY=10338 verifies the SOA RRset
	RRSIG=38385 and DNSKEY=38385 verifies the SOA RRset

UCE.GOV

	Query to dns2.l-secb.net for UCE.GOV/A
	Received 854 bytes from 205.130.212.37
	;; Answer received from 205.130.212.37 (854 bytes) ;; HEADER SECTION ;; id = 27145 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; UCE.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) UCE.GOV. 900 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2019102101 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20210425033553 20210418033553 10338 uce.gov. hq5DAmYuwEKL0TEHuk1wT6rXNobBkCLUVTTvrrFwLO3zbfWXKV5Q2twheOqLbMBuUiyuvR+rVnX2 Sjd5GGHnxFofDrHjb9N6l1GGjPh9Jz2ckz39Z22E8pmNAlGo4dem5ZrkuLvvMS9CdenKozdpVX42 l3XVAB1ZHbJp4FXuogo= ) UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20210426033548 20210419033548 38385 uce.gov. FqCbd7PzCls/uj4Vasi8dRw3yOli57l9cUkxyYURoLL6Y2j3LRWUSZyjCnqZ4sC2QoAU2vNUCiv4 J9TCRMPGTWQryV1s1aIQvGQ7R7NJPj5JR3gPRIxpAPrxyaBbu8Zw5EbL1P/oXyuuxNsa0MHy51ID 44B64xEgYeJy+pv72eU= ) e3l0ju53d4h3cjdbcisf5fffo8jqjmde.UCE.GOV. 900 IN NSEC3 ( 1 0 1 8ee5461eb747005e e3l0ju53d4h3cjdbcisf5fffo8jqjmdf NS SOA RRSIG DNSKEY NSEC3PARAM ) e3l0ju53d4h3cjdbcisf5fffo8jqjmde.UCE.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20210427220722 20210420220722 10338 uce.gov. XrEi+XLepBZ7FX9BWCEi1a7qRh7bcpT3/UhyMzCcH0F12zaPbTEvi3T5LrKnynQI2TpnyI9TlCaU GytQdvAuFuZRpT9D6gg3ubLWD4qtPzVnVhlmVOipBPJqeEoNZPkLp2C1+I7dcJlzkxkNZhIj3ml6 kl/pdfqRWVB2CyK5GkU= ) e3l0ju53d4h3cjdbcisf5fffo8jqjmde.UCE.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20210427220722 20210420220722 38385 uce.gov. QSs9dNdLF/oqVYb3iuDwCzF22l0ksZyuh7ADT0nuSbj7LqndfvosgL8dnkQiggDn4wyHAm0jbOiJ QlDptcawScQkt08tbiNQ1KxA8P0v4kB0TaGeK/6oR1RFvhFSvnMRmv6hcC2BrYXWyru6a5QtrKXu RPuoS4cEK+2Iyx+QYeY= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns2.l-secb.net is authoritative for UCE.GOV
	Found RRSIG signed by uce.gov zone
	Query to dns2.l-secb.net for UCE.GOV/A
	Received 854 bytes from 205.130.212.37
	;; Answer received from 205.130.212.37 (854 bytes) ;; HEADER SECTION ;; id = 19423 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; UCE.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) UCE.GOV. 900 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2019102101 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20210425033635 20210418033635 10338 uce.gov. Zs32DDvczR3Fse9Qtc2D1Li9gYMyxZeRhwpwiytKWl3pmglcJmvivTvV9DX8yEyY1IAm5hb5/LgI Hx0vp+L9njRKRg6tudP+YCCrEk2mI7kJrzhvnjPbvgCA0Ad5sa88Kn8EuyTAmag+iqHDqnzg4aTx y9bOg6VU65efPXFP9bM= ) UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20210426033518 20210419033518 38385 uce.gov. x6LKmzerfWokDZFnS+/HXeUffb4y4VOP5yf1DSSUqRulDhgD73yWpuVh0jwq60MgbjuJMk8Glu3X LNb+5DoD13LvhW15qo6Jhk1xZCuoee/ZnJhvwN+ytMjmsyjte6yinoB2vgt7klIhpBZku+a9JUIM NyUt5CEDM8HgDTNmsoU= ) kq2ugtvm6qgg881is3bh5ej9qrt9esbj.UCE.GOV. 900 IN NSEC3 ( 1 0 1 dfb0a0b9b8433d8e kq2ugtvm6qgg881is3bh5ej9qrt9esbk NS SOA RRSIG DNSKEY NSEC3PARAM ) kq2ugtvm6qgg881is3bh5ej9qrt9esbj.UCE.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20210427182249 20210420182249 10338 uce.gov. PSN8y9FwEG82W040EhgJmoNCbs1J3sGioK5KzNeV2V9OI2LZWQ9XXg4rTD/zdcsCueoPhnwcC4Bq KZQyT4NDgIl+UMw8FIjDf837gBb4LBiqSOrVIKiJPbAtaIpDeh8tIfk4zuMGegzbfl2VJfisVvYQ rYIMOpo9D9M7O+Zlxu8= ) kq2ugtvm6qgg881is3bh5ej9qrt9esbj.UCE.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20210427182249 20210420182249 38385 uce.gov. RzRcctVac0XCvWG6STF9HKqFJTeiyI1OhjZjocMpul3Y5ONL4oTl/AzdY/KHtF4TopRyo+QrXGVQ 5WJZLD0bMhsJw2iIL3WxFRJonOzilBAjkqhvIsfOeDflLQXuPmJTVpOaifI/vfgeDkRkxj7drft7 QWjkFpwlPS8kzuFrODE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20210425033553 20210418033553 10338 uce.gov. hq5DAmYuwEKL0TEHuk1wT6rXNobBkCLUVTTvrrFwLO3zbfWXKV5Q2twheOqLbMBuUiyuvR+rVnX2 Sjd5GGHnxFofDrHjb9N6l1GGjPh9Jz2ckz39Z22E8pmNAlGo4dem5ZrkuLvvMS9CdenKozdpVX42 l3XVAB1ZHbJp4FXuogo= )`
	`UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20210426033548 20210419033548 38385 uce.gov. FqCbd7PzCls/uj4Vasi8dRw3yOli57l9cUkxyYURoLL6Y2j3LRWUSZyjCnqZ4sC2QoAU2vNUCiv4 J9TCRMPGTWQryV1s1aIQvGQ7R7NJPj5JR3gPRIxpAPrxyaBbu8Zw5EbL1P/oXyuuxNsa0MHy51ID 44B64xEgYeJy+pv72eU= )`
	RRSIG=10338 and DNSKEY=10338 verifies the SOA RRset
	RRSIG=38385 and DNSKEY=38385 verifies the SOA RRset

UCE.GOV

	Query to dns1.l-secb.net for UCE.GOV/A
	Received 854 bytes from 198.77.70.37
	;; Answer received from 198.77.70.37 (854 bytes) ;; HEADER SECTION ;; id = 42455 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; UCE.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) UCE.GOV. 900 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2019102101 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20210425033556 20210418033556 10338 uce.gov. ouxOaZuU57NJcYvLZZSrEDqKZAAmM5dKmcJ9nmfPUWCuUM3LYTqu6r+IwV0BCZlk8EySWXTAk+Xm F4K92r902/wS5+VvbXaQvz6pf6ZIaISJrcALw7UUNhwvFYBkPLU29NYZW4jOtfZBWs9fp88eGe13 QIQ+korNlGDcuKfRYk8= ) UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20210426033626 20210419033626 38385 uce.gov. w9SBs+F3KI+VGjhtpjg4ToYfc8nEruEjIzWqJq67z/YogECv1bQqjPw0d0+idl38KKQLGSLpKnoc gx6aQq5YABEZckkBAGqvbLXdX3H3EuPrdzlbmXHDngHW4aKTdCoTtlvue5u6R0f7ywU/QAKK3kJu Uqn5rt4F3oviGuTAfKM= ) 5g1lq1c6l4dc0c43l5noeb61igbufms4.UCE.GOV. 900 IN NSEC3 ( 1 0 1 e1278f2b5b1fafe0 5g1lq1c6l4dc0c43l5noeb61igbufms5 NS SOA RRSIG DNSKEY NSEC3PARAM ) 5g1lq1c6l4dc0c43l5noeb61igbufms4.UCE.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20210426033734 20210419033734 10338 uce.gov. cH0c3YOZ+9O8llc9XEwOkmj1JTZ34s/dnx5ghdCT+5YrOk39kUz2XeTehM+mLjKnsFDWzz76FHc6 JDqmivyYg6NyUGNkoUpJTP0n+ksNKAi/9FCaYVja0ooXtcFH29IB81z21jShxWWwlWUbnFlWiw5G gmkbGwhP1HOKhLSGuzA= ) 5g1lq1c6l4dc0c43l5noeb61igbufms4.UCE.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20210426033734 20210419033734 38385 uce.gov. vc37JEFsH+zCkKPnWx14+mtvAZXJnKbt2D1tzhsWhdwzuSfTvSajLIsVsUTgfQvZQdGnrw3yV0YP fZeYg2rw/1bdYmXSS0FQeWp9kGqWT0jv4GPqUvYkD3I4sR+SracOOwk2ocCFki+pNI6xHT1eKjfs 8ZddCu7ljgkL8SqQTwA= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns1.l-secb.net is authoritative for UCE.GOV
	Found RRSIG signed by uce.gov zone
	Query to dns1.l-secb.net for UCE.GOV/A
	Received 854 bytes from 198.77.70.37
	;; Answer received from 198.77.70.37 (854 bytes) ;; HEADER SECTION ;; id = 13437 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; UCE.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) UCE.GOV. 900 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2019102101 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20210425033848 20210418033848 10338 uce.gov. A/Ht2xbmlygrmnqJN2UcbMzx045rRil4vdntdJCbhnwgi621lHezJIU5K1ZGhejQxdrnaR/4aSiu 4/O517nyoibrWfC/PD8Dy8jyvf772CI9oTSKLisSWcbCHygID+F1h36Y9Df/szIEkhdD66Hs+3PZ I15A95v95xIX2qq2R1A= ) UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20210426033614 20210419033614 38385 uce.gov. E0FSG0hS0fRv4xCRIgs8w2lU/IhZSpC569rxbYoTUEfOWoAZ/dQBJLRTMESF+e4gBX5eFfajAclK FdwO5NnMJWNi4Yjn0N+EVqn79Z7zY9ATMhlJGTHcOPSk7QWWXcMa2UgpjLQ860t/i3EYh4ZyEqbn BhxmsIJwKLI2327jRBw= ) 989541k9k019vrlib6gada11bnatcrd0.UCE.GOV. 900 IN NSEC3 ( 1 0 1 a73fe26dc93e5ddc 989541k9k019vrlib6gada11bnatcrd1 NS SOA RRSIG DNSKEY NSEC3PARAM ) 989541k9k019vrlib6gada11bnatcrd0.UCE.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20210426094719 20210419094719 10338 uce.gov. OcBQnlpi4GLC5GdiudkkYxMIwVNQ0liSeMi69OSnTGR5VX63hpZCrwDcqXqljLKKQmQ4Soc2fAZM jduFA63AAdBW9QnbaxDvJ4XPyQ3gx/i3UBHnyKfkHJajtAbW2gQzYRBGqtTdalvayOBPHkytVKQ4 Vxi/ykMPfqw0mLRQfqY= ) 989541k9k019vrlib6gada11bnatcrd0.UCE.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20210426094719 20210419094719 38385 uce.gov. u1/eVAENkzMaAgaR7D+s+vMCNvqmhYTT9Qs0b2/KILdrZX5sILo6BVswpV/sy4o29hX/MFKsYpAe NUpSyf4AuMFOyWIZrkKIcOlXUlNsYELCGtBUXCmQwMbKNkW6Qqou5b92ZmZ0yyRX29SQq48B2itl RRJuJQPxVPrurNH9uTQ= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20210425033556 20210418033556 10338 uce.gov. ouxOaZuU57NJcYvLZZSrEDqKZAAmM5dKmcJ9nmfPUWCuUM3LYTqu6r+IwV0BCZlk8EySWXTAk+Xm F4K92r902/wS5+VvbXaQvz6pf6ZIaISJrcALw7UUNhwvFYBkPLU29NYZW4jOtfZBWs9fp88eGe13 QIQ+korNlGDcuKfRYk8= )`
	`UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20210426033626 20210419033626 38385 uce.gov. w9SBs+F3KI+VGjhtpjg4ToYfc8nEruEjIzWqJq67z/YogECv1bQqjPw0d0+idl38KKQLGSLpKnoc gx6aQq5YABEZckkBAGqvbLXdX3H3EuPrdzlbmXHDngHW4aKTdCoTtlvue5u6R0f7ywU/QAKK3kJu Uqn5rt4F3oviGuTAfKM= )`
	RRSIG=10338 and DNSKEY=10338 verifies the SOA RRset
	RRSIG=38385 and DNSKEY=38385 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test UCE.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: