DNSSEC Analyzer

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2018-12-12 05:41:25 UTC, NTP stratum 4

Analyzing DNSSEC problems for UCE.GOV

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Error querying j.root-servers.net/2001:503:c27:0:0:0:2:30 for ./DNSKEY: 'IPv6 transport disabled'
	Received 1139 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (1139 bytes) ;; HEADER SECTION ;; id = 16520 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19036 . 172800 IN DNSKEY ( 256 3 8 AwEAAdp440E6Mz7c+Vl4sPd0lTv2Qnc85dTW64j0RDD7sS/zwxWDJ3QRES2VKDO0OXLMqVJSs2YC CSDKuZXpDPuf++YfAu0j7lzYYdWTGwyNZhEaXtMQJIKYB96pW6cRkiG2Dn8S2vvo/PxW9PKQsyLb td8PcwWglHgReBVp7kEv/Dd+3b3YMukt4jnWgDUddAySg558Zld+c9eGWkgWoOiuhg4rQRkFstMX 1pRyOSHcZuH38o1WcsT4y3eT0U/SR6TOSLIB/8Ftirux/h297oS7tCcwSPt0wwry5OFNTlfMo8v7 WGurogfk8hPipf7TTKHIi20LWen5RCsvYsQBkYGpF78= ) ; Key ID = 2134 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20181231000000 20181210000000 20326 . oZ1v3JnBSPHWf2HXeAyoqW/lTUP0FAs1tcEQOM47KD3Rb1qHySTbGhh0rTclRlm86GKUlPSiPaF3 zkJ5h46Nazo3r5iAqorjQ1FQD69AgLXpdEIrnzkC3tTTZv+h+Qi2/UosrzoPQnWj3pIdvZvcP5W2 T6nlP7PN5EP2LSeQzLxT8sOUGsBt0iDiGtqm+bN0mKxKdV4599g0+83FtubMG5oYWUBpMJ/os956 uvW/Vg2cwv3/m9X/cX38svYEcAbniXnyqT88+wqPBMA782tUu1AU1tb9QyMt0LcmsDgjrBWl38SG r/LvaNxHMrfU7ymNuEj6NeLBhNfuDEaz0zBRtQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19036`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdp440E6Mz7c+Vl4sPd0lTv2Qnc85dTW64j0RDD7sS/zwxWDJ3QRES2VKDO0OXLMqVJSs2YC CSDKuZXpDPuf++YfAu0j7lzYYdWTGwyNZhEaXtMQJIKYB96pW6cRkiG2Dn8S2vvo/PxW9PKQsyLb td8PcwWglHgReBVp7kEv/Dd+3b3YMukt4jnWgDUddAySg558Zld+c9eGWkgWoOiuhg4rQRkFstMX 1pRyOSHcZuH38o1WcsT4y3eT0U/SR6TOSLIB/8Ftirux/h297oS7tCcwSPt0wwry5OFNTlfMo8v7 WGurogfk8hPipf7TTKHIi20LWen5RCsvYsQBkYGpF78= ) ; Key ID = 2134`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=19036/SEP is now in the chain-of-trust
	DS=19036/SHA-256 verifies DNSKEY=19036/SEP
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20181231000000 20181210000000 20326 . oZ1v3JnBSPHWf2HXeAyoqW/lTUP0FAs1tcEQOM47KD3Rb1qHySTbGhh0rTclRlm86GKUlPSiPaF3 zkJ5h46Nazo3r5iAqorjQ1FQD69AgLXpdEIrnzkC3tTTZv+h+Qi2/UosrzoPQnWj3pIdvZvcP5W2 T6nlP7PN5EP2LSeQzLxT8sOUGsBt0iDiGtqm+bN0mKxKdV4599g0+83FtubMG5oYWUBpMJ/os956 uvW/Vg2cwv3/m9X/cX38svYEcAbniXnyqT88+wqPBMA782tUu1AU1tb9QyMt0LcmsDgjrBWl38SG r/LvaNxHMrfU7ymNuEj6NeLBhNfuDEaz0zBRtQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=2134 is now in the chain-of-trust
	Query to k.root-servers.net for UCE.GOV/A
	Error querying k.root-servers.net/2001:7fd:0:0:0:0:0:1 for UCE.GOV/A: 'IPv6 transport disabled'
	Received 665 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (665 bytes) ;; HEADER SECTION ;; id = 13850 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; UCE.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20181225050000 20181212040000 2134 . kuk93F9H0MwwcbwiiT79qnkeA/QM5Vtfpszt6l/w7cx2aJx4zxNfy1TUd8KnET1LGTYNxe2mpsc5 cxGuJXVUrOi7lLgz2hJT4FHu/kMFzrD7fMJKvsTJE6iIGsdDYc2sYvVPqGNuADTsSpn34l76Xh20 cwLxFKZC79eZLEJ/6jpJr9vTvAIdmCQWFdkvA3a0xgHykvnanoNG1kCi7cyCLXQJYKAWwUYADSZt LybR67EFnw4fIhvdkVu8zHF/CLlaTx9DCGOXJSQzPXY7jp8DKxzQTjnxgErkxEXWRX5MR/NpfufW yjIr1qY0YunEWC3aPVTFrVf0WJpi1j990SNqew== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to g.root-servers.net for GOV/DNSKEY
	Error querying g.root-servers.net/2001:500:12:0:0:0:0:d0d for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 661 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (661 bytes) ;; HEADER SECTION ;; id = 8182 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20181225050000 20181212040000 2134 . kuk93F9H0MwwcbwiiT79qnkeA/QM5Vtfpszt6l/w7cx2aJx4zxNfy1TUd8KnET1LGTYNxe2mpsc5 cxGuJXVUrOi7lLgz2hJT4FHu/kMFzrD7fMJKvsTJE6iIGsdDYc2sYvVPqGNuADTsSpn34l76Xh20 cwLxFKZC79eZLEJ/6jpJr9vTvAIdmCQWFdkvA3a0xgHykvnanoNG1kCi7cyCLXQJYKAWwUYADSZt LybR67EFnw4fIhvdkVu8zHF/CLlaTx9DCGOXJSQzPXY7jp8DKxzQTjnxgErkxEXWRX5MR/NpfufW yjIr1qY0YunEWC3aPVTFrVf0WJpi1j990SNqew== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to k.root-servers.net for GOV/DS
	Received 406 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (406 bytes) ;; HEADER SECTION ;; id = 13942 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20181225050000 20181212040000 2134 . kuk93F9H0MwwcbwiiT79qnkeA/QM5Vtfpszt6l/w7cx2aJx4zxNfy1TUd8KnET1LGTYNxe2mpsc5 cxGuJXVUrOi7lLgz2hJT4FHu/kMFzrD7fMJKvsTJE6iIGsdDYc2sYvVPqGNuADTsSpn34l76Xh20 cwLxFKZC79eZLEJ/6jpJr9vTvAIdmCQWFdkvA3a0xgHykvnanoNG1kCi7cyCLXQJYKAWwUYADSZt LybR67EFnw4fIhvdkVu8zHF/CLlaTx9DCGOXJSQzPXY7jp8DKxzQTjnxgErkxEXWRX5MR/NpfufW yjIr1qY0YunEWC3aPVTFrVf0WJpi1j990SNqew== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20181225050000 20181212040000 2134 . kuk93F9H0MwwcbwiiT79qnkeA/QM5Vtfpszt6l/w7cx2aJx4zxNfy1TUd8KnET1LGTYNxe2mpsc5 cxGuJXVUrOi7lLgz2hJT4FHu/kMFzrD7fMJKvsTJE6iIGsdDYc2sYvVPqGNuADTsSpn34l76Xh20 cwLxFKZC79eZLEJ/6jpJr9vTvAIdmCQWFdkvA3a0xgHykvnanoNG1kCi7cyCLXQJYKAWwUYADSZt LybR67EFnw4fIhvdkVu8zHF/CLlaTx9DCGOXJSQzPXY7jp8DKxzQTjnxgErkxEXWRX5MR/NpfufW yjIr1qY0YunEWC3aPVTFrVf0WJpi1j990SNqew== )`
	RRSIG=2134 and DNSKEY=2134 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to c.gov-servers.net for GOV/DNSKEY
	Received 743 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (743 bytes) ;; HEADER SECTION ;; id = 23846 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 256 3 8 AQOzQCL1fIfPdHz2b/lMEAyj5l7JieIaa1GJ1/KDBE80I/FgASeN5ekMXj8XwPdLS38aXq4M67zu locw3A3YjP8qGvR8EZTClRKoFWfQSFyroyXq5w2GN2ir8gxXMwRcIcSg5AVK+3uGMLNRdwVXZB27 GlaqF75saOfj2hP7t2bs6Q== ) ; Key ID = 40499 GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20181223224731 20181208224231 7698 gov. Il/96qUKHNn0ZAOoV2App1UfZY1xcWWeHbsbv5fP6NDWPYyMAXR53AvffkiU6HPQtAciq1hHHgln aZ8jfWnDvffBADBaTioeblHVk9JboOUnoVITbsDBTCfZQG7EIn/nfhMy6h/1HJpdkuWshZ7eH+93 c2csPFAPAbF/8qfgixdkl4juvcDdugrXFmWC7A6ns3cjRZeCUd/RLt1SiNG7RjOndb/GGoQcAEDS X+2tJEurPUgMosqtvLk9HHvv3eLAJxy6i184vnN+jMsm1/WEkiK9nW4LCGSamux+LLBvTqfEhQE1 2zZ946dysmZh8czhq4myhgq6pZD08A4Nb7eGnw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQOzQCL1fIfPdHz2b/lMEAyj5l7JieIaa1GJ1/KDBE80I/FgASeN5ekMXj8XwPdLS38aXq4M67zu locw3A3YjP8qGvR8EZTClRKoFWfQSFyroyXq5w2GN2ir8gxXMwRcIcSg5AVK+3uGMLNRdwVXZB27 GlaqF75saOfj2hP7t2bs6Q== ) ; Key ID = 40499`
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20181223224731 20181208224231 7698 gov. Il/96qUKHNn0ZAOoV2App1UfZY1xcWWeHbsbv5fP6NDWPYyMAXR53AvffkiU6HPQtAciq1hHHgln aZ8jfWnDvffBADBaTioeblHVk9JboOUnoVITbsDBTCfZQG7EIn/nfhMy6h/1HJpdkuWshZ7eH+93 c2csPFAPAbF/8qfgixdkl4juvcDdugrXFmWC7A6ns3cjRZeCUd/RLt1SiNG7RjOndb/GGoQcAEDS X+2tJEurPUgMosqtvLk9HHvv3eLAJxy6i184vnN+jMsm1/WEkiK9nW4LCGSamux+LLBvTqfEhQE1 2zZ946dysmZh8czhq4myhgq6pZD08A4Nb7eGnw== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=40499 is now in the chain-of-trust
	Query to b.gov-servers.net for UCE.GOV/A
	Error querying b.gov-servers.net/2620:74:27:0:0:0:2:30 for UCE.GOV/A: 'IPv6 transport disabled'
	Received 331 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (331 bytes) ;; HEADER SECTION ;; id = 54879 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; UCE.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) UCE.GOV. 86400 IN NS dns1.l-secb.net. UCE.GOV. 86400 IN NS dns3.l-secb.net. UCE.GOV. 3600 IN DS 4024 8 1 73dcd43d70ae194ba4050ee99d3a31dded3c0ff3 UCE.GOV. 3600 IN DS ( 4024 8 2 43189e4f87cc4e4eaf86bad20c9f3ce0f56173d5ce7e98a02f1fc20c1587baac ) UCE.GOV. 3600 IN RRSIG ( DS 8 2 3600 20181219041007 20181212041007 40499 gov. MAxzzrXV/Z/OpV7cy+z6X2eFwB42Fh9hjBcL+B3iJhUznRi5inQ/kLGzFC362H1Exli21GNFKzfU WhCPr2s/npM6jR06GZSM0Nl2h0O3qn8HQlGd/zIhXffqa/9zkEH3RD73EVBQgiMFvk//MqyRF7SC /uAHjdTyUCx3ROgQjHo= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to b.gov-servers.net for UCE.GOV/DNSKEY
	Received 331 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (331 bytes) ;; HEADER SECTION ;; id = 64678 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; UCE.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) UCE.GOV. 86400 IN NS dns1.l-secb.net. UCE.GOV. 86400 IN NS dns3.l-secb.net. UCE.GOV. 3600 IN DS 4024 8 1 73dcd43d70ae194ba4050ee99d3a31dded3c0ff3 UCE.GOV. 3600 IN DS ( 4024 8 2 43189e4f87cc4e4eaf86bad20c9f3ce0f56173d5ce7e98a02f1fc20c1587baac ) UCE.GOV. 3600 IN RRSIG ( DS 8 2 3600 20181219041007 20181212041007 40499 gov. MAxzzrXV/Z/OpV7cy+z6X2eFwB42Fh9hjBcL+B3iJhUznRi5inQ/kLGzFC362H1Exli21GNFKzfU WhCPr2s/npM6jR06GZSM0Nl2h0O3qn8HQlGd/zIhXffqa/9zkEH3RD73EVBQgiMFvk//MqyRF7SC /uAHjdTyUCx3ROgQjHo= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone UCE.GOV

UCE.GOV

	Checking DS between GOV and UCE.GOV
	Query to b.gov-servers.net for UCE.GOV/DS
	Error querying b.gov-servers.net/2620:74:27:0:0:0:2:30 for UCE.GOV/DS: 'IPv6 transport disabled'
	Received 283 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (283 bytes) ;; HEADER SECTION ;; id = 1634 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; UCE.GOV. IN DS ;; ANSWER SECTION (3 records) UCE.GOV. 3600 IN DS 4024 8 1 73dcd43d70ae194ba4050ee99d3a31dded3c0ff3 UCE.GOV. 3600 IN DS ( 4024 8 2 43189e4f87cc4e4eaf86bad20c9f3ce0f56173d5ce7e98a02f1fc20c1587baac ) UCE.GOV. 3600 IN RRSIG ( DS 8 2 3600 20181219041007 20181212041007 40499 gov. MAxzzrXV/Z/OpV7cy+z6X2eFwB42Fh9hjBcL+B3iJhUznRi5inQ/kLGzFC362H1Exli21GNFKzfU WhCPr2s/npM6jR06GZSM0Nl2h0O3qn8HQlGd/zIhXffqa/9zkEH3RD73EVBQgiMFvk//MqyRF7SC /uAHjdTyUCx3ROgQjHo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DS records for UCE.GOV in the GOV zone
	DS=4024/SHA-1 has algorithm RSASHA256
	DS=4024/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`UCE.GOV. 3600 IN RRSIG ( DS 8 2 3600 20181219041007 20181212041007 40499 gov. MAxzzrXV/Z/OpV7cy+z6X2eFwB42Fh9hjBcL+B3iJhUznRi5inQ/kLGzFC362H1Exli21GNFKzfU WhCPr2s/npM6jR06GZSM0Nl2h0O3qn8HQlGd/zIhXffqa/9zkEH3RD73EVBQgiMFvk//MqyRF7SC /uAHjdTyUCx3ROgQjHo= )`
	RRSIG=40499 and DNSKEY=40499 verifies the DS RRset
	DS=4024/SHA-1 is now in the chain-of-trust
	`UCE.GOV. 3600 IN DS 4024 8 1 73dcd43d70ae194ba4050ee99d3a31dded3c0ff3`
	`UCE.GOV. 3600 IN DS ( 4024 8 2 43189e4f87cc4e4eaf86bad20c9f3ce0f56173d5ce7e98a02f1fc20c1587baac )`
	Query to dns1.l-secb.net for UCE.GOV/DNSKEY
	Error querying dns1.l-secb.net/2001:1900:2268:770:198:77:70:37 for UCE.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 1237 bytes from 198.77.70.37
	;; Answer received from 198.77.70.37 (1237 bytes) ;; HEADER SECTION ;; id = 46647 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; UCE.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) UCE.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbr9dMAvI8HU2Mxtzev0QnF6EupR0DC7TxFrOINrnbKTwSFsJwWEZpzJkPvs7ugrIUjp9uyx ubLeMrHZLOxtHEg1maoi6X0L5NiJ/qPSsVUdRmHZbMqe0RqDAZsEO2G6tUo2RxoCjI+HZlFivjD0 ZVxZfrwbJsXnKCyhDPTtUNAN ) ; Key ID = 26553 UCE.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAac358yWTQJ+3jpGM/vlxCxekNPWQsMQnRO9LQ0tNkRnsp5N0CusZxeIb/6ZZetktWTDJgFS lMnaFn8lFkWWnCVUiXO3354o08htvXTwRvhKddl8v/wZnXfZCetBd+Zh4vY+KA5zKus+iokwosVh U/aCUDZ/H2yYDFo2hc0PqosJ ) ; Key ID = 39564 UCE.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAb4MNVGQ/lqP4lTZrsX9WTM+UkavuJ+kOtKGpjHXOefN1uZxXeosLp9tEq69q3WQUHYtYrzX inJXbq5uwDmrFba9+ORtwOA7N8KFJ1o9gsvQVbXUehnmz/Xa7rLvT0kZGjlkKW7l0qu4egw8Zigk yzdPUo/CUa174dF3oYCUp4dikCzkGrXoTg28R5P70Nl1XyLoZqMh0MRBgIQ7wQPCGVIDa9w1Y57f 1gOtD/tAXwhz7sLtOXvC3VOv0Rh0ulWy0LQMdGA/Mg0Osqmju75bc8Yu3oMhf3YfE9LxJErKVcph WQI4L75dPrEPzvibX2JcubhoaAhCxghKAOVV9qVK4Pk= ) ; Key ID = 4024 UCE.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20181218113737 20181211113737 26553 uce.gov. aULxXY9h7uLpZO3zajou5NfAla/lXZhxi3cEBujGPHmZJNJDXzxQPGJORRRq+xedqoNHnrJ9f54f OrtwMRSjS2lwxxxZeu1JNaogfj4gdCv9bdr4GkrnmMSa9GmD/8KIak+K7TkVNh36egykFM5esu83 uYUyZIvWeLDJqKkGP2o= ) UCE.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20181218113737 20181211113737 39564 uce.gov. gPY16gRz2ppjMcepG+RWooGX2Vle6AHE80xjqm7Vx5xvWVh5AvdDjK74rD3/d8zt3JR2QOqEbQW/ 7u0e3R2FmvxFJ4E1xv876sEGe1lsX2Pt0nsElb5McvobL6P90DjIFihCO8pPU8EjK40JT0rraF0U vHy8ipLU6SFt+pY2wQk= ) UCE.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20181218113737 20181211113737 4024 uce.gov. Rh4qT2fM7Hb65kT5uo0mUJj17YaayASG1wsBZSHaVNOLw7yeOlgDM4fLmq9IXxAPcpyvABrjVg5O 64PaJX2VW1uaB8uoA2Lg3HZHiJRRBBQhk+PGI2/QQzqMQoNJur+V7aP2GL+Af/pOcy9FUiqq8moN zjPEGtVmcItLNdk1J57l49h6PqrTg0DAMjdpknUFaoKuV5KeqEg9uLUvnBhpE2hpodraQcCwvdL1 ZRMy0SOMhwWJZQyse6+T9b5sAxOM86hLxnmL+s19zdpbymaWSSokW/VA0pV0wGKG4I4TsZmzzoa+ pcoX15dAAq/XthjBDAjlEGnOkD5WtwylehQ5Mw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for UCE.GOV
	`UCE.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbr9dMAvI8HU2Mxtzev0QnF6EupR0DC7TxFrOINrnbKTwSFsJwWEZpzJkPvs7ugrIUjp9uyx ubLeMrHZLOxtHEg1maoi6X0L5NiJ/qPSsVUdRmHZbMqe0RqDAZsEO2G6tUo2RxoCjI+HZlFivjD0 ZVxZfrwbJsXnKCyhDPTtUNAN ) ; Key ID = 26553`
	`UCE.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAac358yWTQJ+3jpGM/vlxCxekNPWQsMQnRO9LQ0tNkRnsp5N0CusZxeIb/6ZZetktWTDJgFS lMnaFn8lFkWWnCVUiXO3354o08htvXTwRvhKddl8v/wZnXfZCetBd+Zh4vY+KA5zKus+iokwosVh U/aCUDZ/H2yYDFo2hc0PqosJ ) ; Key ID = 39564`
	`UCE.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAb4MNVGQ/lqP4lTZrsX9WTM+UkavuJ+kOtKGpjHXOefN1uZxXeosLp9tEq69q3WQUHYtYrzX inJXbq5uwDmrFba9+ORtwOA7N8KFJ1o9gsvQVbXUehnmz/Xa7rLvT0kZGjlkKW7l0qu4egw8Zigk yzdPUo/CUa174dF3oYCUp4dikCzkGrXoTg28R5P70Nl1XyLoZqMh0MRBgIQ7wQPCGVIDa9w1Y57f 1gOtD/tAXwhz7sLtOXvC3VOv0Rh0ulWy0LQMdGA/Mg0Osqmju75bc8Yu3oMhf3YfE9LxJErKVcph WQI4L75dPrEPzvibX2JcubhoaAhCxghKAOVV9qVK4Pk= ) ; Key ID = 4024`
	DNSKEY=4024/SEP is now in the chain-of-trust
	DS=4024/SHA-1 verifies DNSKEY=4024/SEP
	DS=4024/SHA-256 verifies DNSKEY=4024/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`UCE.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20181218113737 20181211113737 26553 uce.gov. aULxXY9h7uLpZO3zajou5NfAla/lXZhxi3cEBujGPHmZJNJDXzxQPGJORRRq+xedqoNHnrJ9f54f OrtwMRSjS2lwxxxZeu1JNaogfj4gdCv9bdr4GkrnmMSa9GmD/8KIak+K7TkVNh36egykFM5esu83 uYUyZIvWeLDJqKkGP2o= )`
	`UCE.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20181218113737 20181211113737 39564 uce.gov. gPY16gRz2ppjMcepG+RWooGX2Vle6AHE80xjqm7Vx5xvWVh5AvdDjK74rD3/d8zt3JR2QOqEbQW/ 7u0e3R2FmvxFJ4E1xv876sEGe1lsX2Pt0nsElb5McvobL6P90DjIFihCO8pPU8EjK40JT0rraF0U vHy8ipLU6SFt+pY2wQk= )`
	`UCE.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20181218113737 20181211113737 4024 uce.gov. Rh4qT2fM7Hb65kT5uo0mUJj17YaayASG1wsBZSHaVNOLw7yeOlgDM4fLmq9IXxAPcpyvABrjVg5O 64PaJX2VW1uaB8uoA2Lg3HZHiJRRBBQhk+PGI2/QQzqMQoNJur+V7aP2GL+Af/pOcy9FUiqq8moN zjPEGtVmcItLNdk1J57l49h6PqrTg0DAMjdpknUFaoKuV5KeqEg9uLUvnBhpE2hpodraQcCwvdL1 ZRMy0SOMhwWJZQyse6+T9b5sAxOM86hLxnmL+s19zdpbymaWSSokW/VA0pV0wGKG4I4TsZmzzoa+ pcoX15dAAq/XthjBDAjlEGnOkD5WtwylehQ5Mw== )`
	RRSIG=26553 and DNSKEY=26553 verifies the DNSKEY RRset
	RRSIG=39564 and DNSKEY=39564 verifies the DNSKEY RRset
	RRSIG=4024 and DNSKEY=4024/SEP verifies the DNSKEY RRset
	DNSKEY=26553 is now in the chain-of-trust
	DNSKEY=39564 is now in the chain-of-trust
	Query to dns3.l-secb.net for UCE.GOV/A
	Received 854 bytes from 35.163.67.210
	;; Answer received from 35.163.67.210 (854 bytes) ;; HEADER SECTION ;; id = 35125 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; UCE.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) UCE.GOV. 900 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2018011201 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20181217113525 20181210113525 26553 uce.gov. BIN28imxlLOWoNcr7+cTGZWviuAJr30fpMG2JC35rWw64iaX7rJcri+BGP/exXAdtSzTGk+/Xv1j wfMOZDk4sNeRur7rwFudY2C3BeYs8f77JrntjaIIEmg7HSLvGfA34ZxMYPzU8X9M+TSWK3I6f1UL 5EqMhBpxcRUwkEK8OGo= ) UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20181218113531 20181211113531 39564 uce.gov. gs9utcBWbnOZHtOlqj2OsLbYg2Oy/5UIcAD2RKMbLt6qJr1KPv0rUfxPlrn71kJnmZQgidjPVQG4 7jNPDcZEU8ajwKEAaYxTPaCwz8EDmioARDYdy3nlxI665U6Kh/fmUpZPIZUGP2ynKL9HWU2XnKru 0PSecd+vyxFZkNC66Mw= ) et7skc1e8pjoahp80s7727v550o24mrg.UCE.GOV. 900 IN NSEC3 ( 1 0 1 8c7dacd5bdf0fa69 et7skc1e8pjoahp80s7727v550o24mrh NS SOA RRSIG DNSKEY NSEC3PARAM ) et7skc1e8pjoahp80s7727v550o24mrg.UCE.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20181215115540 20181208115540 26553 uce.gov. GLZ6fKR5LNuR33BeDFqjUrVWLaidCe//9i3NeWERGUdmeIliL2L8Ul+HNConTNHWfjljzXVPES/o PblJeCrFl1gJSWz5U6ymMDfjuDZMwqrtsyqPt7rE5DPG7rFaRJLu4BRNVgR6KKvnyj4Z27CbQ9eP cWHe7j3TbGODSuazTAI= ) et7skc1e8pjoahp80s7727v550o24mrg.UCE.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20181218114000 20181211114000 39564 uce.gov. fMPwiYh6MJy6lut089LcT1561TMaM/O+TdfOLoXhjEZ4W3wlEwJMVYu025uFMNiI2aSt84MbWqGJ 1+F/CQHhrDrYcYkH5sSK6z69wXX5R+bLC5nipr/DmhXxJI0U7UXnBro6/Rd2YUVOJMvBBJr13UJl gSNY6Aa47pTfK3zrXmQ= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	UCE.GOV is authoritative for UCE.GOV
	Found RRSIG signed by uce.gov zone
	Query to dns3.l-secb.net for UCE.GOV/SOA
	Received 887 bytes from 35.163.67.210
	;; Answer received from 35.163.67.210 (887 bytes) ;; HEADER SECTION ;; id = 38182 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; UCE.GOV. IN SOA ;; ANSWER SECTION (3 records) UCE.GOV. 1800 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2018011201 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) UCE.GOV. 1800 IN RRSIG ( SOA 8 2 1800 20181217131946 20181210131946 26553 uce.gov. tUVK3hSYiVl0//PLyhAGsuC09HdTKu0y6Tb0grBtNtrzcFqhOqUARroJ9VMgZgZqROq+VBHqjk6J dar1/TiGQkV0C4hO+bvhJqdk59qXtJ0cYGS7G9Am+PULxgrWm13dvAzM39ZTCWV7B3SrUZxm3BgP hhCgjFELjWdqLPyvv9o= ) UCE.GOV. 1800 IN RRSIG ( SOA 8 2 1800 20181218121401 20181211121401 39564 uce.gov. IiDXK7FVOagOtiX6b1l0gAWr1n29WGWVircBHVvFCQrmVrOIqubIuOl8aDIy5mYcvS00Drzja3CD KfjElHGUGwiRsCbbMS/oFHiiGj8+6zQ4N1yG+TlMraU4BkmK/BOeuAfbg2CZQb8VRdrERsjMo5QF dVrO0O9d/Tqh01l/HhI= ) ;; AUTHORITY SECTION (4 records) UCE.GOV. 1800 IN NS dns3.l-secb.net. UCE.GOV. 1800 IN NS dns1.l-secb.net. UCE.GOV. 1800 IN RRSIG ( NS 8 2 1800 20181217113400 20181210113400 26553 uce.gov. OkwJnmUo845VvC3gln13htq9zl2kgis9hwaUU/1tZTB3fSRN7aIe9neidbA+4xxnvq5oO+QDqeJg mPpFJxveTlgrt3e83KGdcYzcqEban4J6ueUL1gQ6w9YzGyAo5Ja5wbqz0fiM4Eg5605W+qi9Z/g5 7UW4wTZfjGywDyBDUxc= ) UCE.GOV. 1800 IN RRSIG ( NS 8 2 1800 20181218113413 20181211113413 39564 uce.gov. Tyz8+GvX5d+h132ANJIWMTLF0IjzznCkoLfQz/c3DUB6vCM+ZzzFexcAOJtVdMcU8Yn0Fszh3dUa l8e/a92KsGClaWPOe7Qgdb44uuUlkSRrbuKibQ+0mnIAQSLxtbE1ryWvrj0Y1U/FbaYv330rx6Gy hZhzRnccGwuqeTfJNLI= ) ;; ADDITIONAL SECTION (5 records) dns1.l-secb.net. 43200 IN A 198.77.70.37 dns3.l-secb.net. 43200 IN A 35.163.67.210 dns1.l-secb.net. 43200 IN AAAA 2001:1900:2268:770:198:77:70:37 dns3.l-secb.net. 43200 IN AAAA 2600:1f14:a2e:4b00:35:163:67:210 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns1.l-secb.net for UCE.GOV/SOA
	Received 887 bytes from 198.77.70.37
	;; Answer received from 198.77.70.37 (887 bytes) ;; HEADER SECTION ;; id = 59676 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; UCE.GOV. IN SOA ;; ANSWER SECTION (3 records) UCE.GOV. 1800 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2018011201 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) UCE.GOV. 1800 IN RRSIG ( SOA 8 2 1800 20181217125334 20181210125334 26553 uce.gov. UyyPr6zQX/sTssY8CYucajVNHkfM9vp9imWj5Vbzhn9tbBlNUBOpuUNtJV7+fo2a4IMbMufYofUf I2LZlqkY0saovqC09ix0Ndu1ve1N2z9xzAyblh75eC73NUeq+fvBy9IB60wt+t01kgnARAEnQF2j Zxf6fTyC2XNLt0YPMFA= ) UCE.GOV. 1800 IN RRSIG ( SOA 8 2 1800 20181218124623 20181211124623 39564 uce.gov. B6XdWrywURgyeLtMtYTyxGA3iPltfSZAfAc06DGTKGD1eA3AtiNyeDo7dR0zvfEjankJLHNuiNIE e07vky0heCvTFzd+un9eUORO1Jd732e140UkW1V7G7Ngf/hyfPr71e9ZliupNMJwkal0vO/Ttihx byNAPUsbN2lZRPMKqP8= ) ;; AUTHORITY SECTION (4 records) UCE.GOV. 1800 IN NS dns3.l-secb.net. UCE.GOV. 1800 IN NS dns1.l-secb.net. UCE.GOV. 1800 IN RRSIG ( NS 8 2 1800 20181217113452 20181210113452 26553 uce.gov. U74ie+gU/DeF828MdwAXu+k/dyXrDHCzZ52v2nFsKYGDWMBeotUmfHpRulIxK/W8zMcJPazMplO/ nJcuanSM5JbwV7rnxQOCNnMKaeltuZyhj4VlvALtJa4K6wgYYRYnzGZw73dNvuiIZfB7SMh+o7qZ X5U3NLTCnGVgu8NIlwI= ) UCE.GOV. 1800 IN RRSIG ( NS 8 2 1800 20181218113352 20181211113352 39564 uce.gov. binAu47QUY410lqYNVaLmTXdzp0ARBxDMl8ek3OW1XAPoouxSlkqRPuncLZsUnfSBNClWVQJGpf/ 0tlEsFpfMD8m2wLbdA1qzjZrw9y0/0SLgQJqpShjo4SmWnSZIaRHw/8NEaHWKYiv/p0pAFKFvzL8 SSDCjX4x4NVVQrtjbrE= ) ;; ADDITIONAL SECTION (5 records) dns1.l-secb.net. 43200 IN A 198.77.70.37 dns3.l-secb.net. 43200 IN A 35.163.67.210 dns1.l-secb.net. 43200 IN AAAA 2001:1900:2268:770:198:77:70:37 dns3.l-secb.net. 43200 IN AAAA 2600:1f14:a2e:4b00:35:163:67:210 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns3.l-secb.net for UCE.GOV/A
	Error querying dns3.l-secb.net/2600:1f14:a2e:4b00:35:163:67:210 for UCE.GOV/A: 'IPv6 transport disabled'
	Received 854 bytes from 35.163.67.210
	;; Answer received from 35.163.67.210 (854 bytes) ;; HEADER SECTION ;; id = 32094 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; UCE.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) UCE.GOV. 900 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2018011201 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20181217113525 20181210113525 26553 uce.gov. BIN28imxlLOWoNcr7+cTGZWviuAJr30fpMG2JC35rWw64iaX7rJcri+BGP/exXAdtSzTGk+/Xv1j wfMOZDk4sNeRur7rwFudY2C3BeYs8f77JrntjaIIEmg7HSLvGfA34ZxMYPzU8X9M+TSWK3I6f1UL 5EqMhBpxcRUwkEK8OGo= ) UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20181218113531 20181211113531 39564 uce.gov. gs9utcBWbnOZHtOlqj2OsLbYg2Oy/5UIcAD2RKMbLt6qJr1KPv0rUfxPlrn71kJnmZQgidjPVQG4 7jNPDcZEU8ajwKEAaYxTPaCwz8EDmioARDYdy3nlxI665U6Kh/fmUpZPIZUGP2ynKL9HWU2XnKru 0PSecd+vyxFZkNC66Mw= ) et7skc1e8pjoahp80s7727v550o24mrg.UCE.GOV. 900 IN NSEC3 ( 1 0 1 8c7dacd5bdf0fa69 et7skc1e8pjoahp80s7727v550o24mrh NS SOA RRSIG DNSKEY NSEC3PARAM ) et7skc1e8pjoahp80s7727v550o24mrg.UCE.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20181215115540 20181208115540 26553 uce.gov. GLZ6fKR5LNuR33BeDFqjUrVWLaidCe//9i3NeWERGUdmeIliL2L8Ul+HNConTNHWfjljzXVPES/o PblJeCrFl1gJSWz5U6ymMDfjuDZMwqrtsyqPt7rE5DPG7rFaRJLu4BRNVgR6KKvnyj4Z27CbQ9eP cWHe7j3TbGODSuazTAI= ) et7skc1e8pjoahp80s7727v550o24mrg.UCE.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20181218114000 20181211114000 39564 uce.gov. fMPwiYh6MJy6lut089LcT1561TMaM/O+TdfOLoXhjEZ4W3wlEwJMVYu025uFMNiI2aSt84MbWqGJ 1+F/CQHhrDrYcYkH5sSK6z69wXX5R+bLC5nipr/DmhXxJI0U7UXnBro6/Rd2YUVOJMvBBJr13UJl gSNY6Aa47pTfK3zrXmQ= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20181217113525 20181210113525 26553 uce.gov. BIN28imxlLOWoNcr7+cTGZWviuAJr30fpMG2JC35rWw64iaX7rJcri+BGP/exXAdtSzTGk+/Xv1j wfMOZDk4sNeRur7rwFudY2C3BeYs8f77JrntjaIIEmg7HSLvGfA34ZxMYPzU8X9M+TSWK3I6f1UL 5EqMhBpxcRUwkEK8OGo= )`
	`UCE.GOV. 900 IN RRSIG ( SOA 8 2 900 20181218113531 20181211113531 39564 uce.gov. gs9utcBWbnOZHtOlqj2OsLbYg2Oy/5UIcAD2RKMbLt6qJr1KPv0rUfxPlrn71kJnmZQgidjPVQG4 7jNPDcZEU8ajwKEAaYxTPaCwz8EDmioARDYdy3nlxI665U6Kh/fmUpZPIZUGP2ynKL9HWU2XnKru 0PSecd+vyxFZkNC66Mw= )`
	RRSIG=26553 and DNSKEY=26553 verifies the SOA RRset
	RRSIG=39564 and DNSKEY=39564 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test UCE.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: