DNSSEC Analyzer - UCRDATATOOL.GOV

Domain Name:

Time: 2022-08-09 09:59:38 UTC, NTP stratum 16

Analyzing DNSSEC problems for UCRDATATOOL.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to k.root-servers.net for ./DNSKEY
	Received 864 bytes from 193.0.14.129
	;; Response received from 193.0.14.129 (864 octets) ;; HEADER SECTION ;; id = 25059 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20220821000000 20220731000000 20326 . kY6CPgpR+XbMPLBGuZrMggV0UXbOovM0W7VkOgE608ohTf+F/So1KlYtv1EUK2Mq8FximolEcsaN 3znGSw3crU3iYcuqqC/K2tqK7XbHkCHyWJNgMm+zoN2IvFSvcHLBtLInEt0aJVR566ZTSOqtY8xZ CanTcD5dvx6gnVIBHAevlETpdRBXy63E4WicdRonSzmFgZH4bFcJrEIk6+RwB6yEgTCLPOB+Ns84 PAuWEpo02H8P3WYGf16ubDdsL2N8mYkqjb0v6oJ0I4u4L5cx7mwq9oCS1xvVbgGaHxoPpfWeow1e f0sHCSwOyuG3ACdtl67uyMvNfNGvHhp5cxh3fg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20220821000000 20220731000000 20326 . kY6CPgpR+XbMPLBGuZrMggV0UXbOovM0W7VkOgE608ohTf+F/So1KlYtv1EUK2Mq8FximolEcsaN 3znGSw3crU3iYcuqqC/K2tqK7XbHkCHyWJNgMm+zoN2IvFSvcHLBtLInEt0aJVR566ZTSOqtY8xZ CanTcD5dvx6gnVIBHAevlETpdRBXy63E4WicdRonSzmFgZH4bFcJrEIk6+RwB6yEgTCLPOB+Ns84 PAuWEpo02H8P3WYGf16ubDdsL2N8mYkqjb0v6oJ0I4u4L5cx7mwq9oCS1xvVbgGaHxoPpfWeow1e f0sHCSwOyuG3ACdtl67uyMvNfNGvHhp5cxh3fg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=20826 is now in the chain-of-trust
	Query to j.root-servers.net for UCRDATATOOL.GOV/A
	Received 634 bytes from 192.58.128.30
	;; Response received from 192.58.128.30 (634 octets) ;; HEADER SECTION ;; id = 48787 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; UCRDATATOOL.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20220822050000 20220809040000 20826 . U+GWGNfJyka4rPaQgzCewcWoI7NuSOWKtmXMsay6n7UMLQqJwMJWgRY68eyLB5+SRIkv/vpAkKVb tiDU54k3a1tBAu4XhZZNEwgHATen1JRNeOI48YRZ8KC55KrKzMMJFCZLZc3EUDSOB682NWYSR0sh xTiRzqPxL5DpMcChtgTQgG7ZgJkCKtROzQLZbQINciX4vIRpgNJcF5+4/MbTFpaFi0uf5wOzgNje nszxJGw3+qfYi2tQ+VGEGA3fiMnnZEGP5Tnatj6gvXDtYGVOgRBJkl+Ksm49Q7RbpHjcjFJbFGYu YKpCoMgfk1orM09bC/djJvU72/ANGgiMRo+dmA== ) ;; ADDITIONAL SECTION (9 records) b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to g.root-servers.net for GOV/DNSKEY
	Received 625 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (625 octets) ;; HEADER SECTION ;; id = 5080 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20220822050000 20220809040000 20826 . U+GWGNfJyka4rPaQgzCewcWoI7NuSOWKtmXMsay6n7UMLQqJwMJWgRY68eyLB5+SRIkv/vpAkKVb tiDU54k3a1tBAu4XhZZNEwgHATen1JRNeOI48YRZ8KC55KrKzMMJFCZLZc3EUDSOB682NWYSR0sh xTiRzqPxL5DpMcChtgTQgG7ZgJkCKtROzQLZbQINciX4vIRpgNJcF5+4/MbTFpaFi0uf5wOzgNje nszxJGw3+qfYi2tQ+VGEGA3fiMnnZEGP5Tnatj6gvXDtYGVOgRBJkl+Ksm49Q7RbpHjcjFJbFGYu YKpCoMgfk1orM09bC/djJvU72/ANGgiMRo+dmA== ) ;; ADDITIONAL SECTION (9 records) d.gov-servers.net. 172800 IN A 81.19.194.30 c.gov-servers.net. 172800 IN A 69.36.153.30 b.gov-servers.net. 172800 IN A 209.112.123.30 a.gov-servers.net. 172800 IN A 69.36.157.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to k.root-servers.net for GOV/DS
	Received 370 bytes from 193.0.14.129
	;; Response received from 193.0.14.129 (370 octets) ;; HEADER SECTION ;; id = 51032 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20220822050000 20220809040000 20826 . U+GWGNfJyka4rPaQgzCewcWoI7NuSOWKtmXMsay6n7UMLQqJwMJWgRY68eyLB5+SRIkv/vpAkKVb tiDU54k3a1tBAu4XhZZNEwgHATen1JRNeOI48YRZ8KC55KrKzMMJFCZLZc3EUDSOB682NWYSR0sh xTiRzqPxL5DpMcChtgTQgG7ZgJkCKtROzQLZbQINciX4vIRpgNJcF5+4/MbTFpaFi0uf5wOzgNje nszxJGw3+qfYi2tQ+VGEGA3fiMnnZEGP5Tnatj6gvXDtYGVOgRBJkl+Ksm49Q7RbpHjcjFJbFGYu YKpCoMgfk1orM09bC/djJvU72/ANGgiMRo+dmA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20220822050000 20220809040000 20826 . U+GWGNfJyka4rPaQgzCewcWoI7NuSOWKtmXMsay6n7UMLQqJwMJWgRY68eyLB5+SRIkv/vpAkKVb tiDU54k3a1tBAu4XhZZNEwgHATen1JRNeOI48YRZ8KC55KrKzMMJFCZLZc3EUDSOB682NWYSR0sh xTiRzqPxL5DpMcChtgTQgG7ZgJkCKtROzQLZbQINciX4vIRpgNJcF5+4/MbTFpaFi0uf5wOzgNje nszxJGw3+qfYi2tQ+VGEGA3fiMnnZEGP5Tnatj6gvXDtYGVOgRBJkl+Ksm49Q7RbpHjcjFJbFGYu YKpCoMgfk1orM09bC/djJvU72/ANGgiMRo+dmA== )`
	RRSIG=20826 and DNSKEY=20826 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to b.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 209.112.123.30
	;; Response received from 209.112.123.30 (777 octets) ;; HEADER SECTION ;; id = 32703 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbSW4ocEzPbMwUkqAURZNNLAAZ9XoKgSLoPQVtMdnKBkrDoIwWxYO0nk3n/seSHxNb4I+Shq HeLM0bydpkqpMPCesMKazwq2YfQD0t0NdN4kiApakMBOO6foEa9UKHg8YbF5ZeZ2oZzIyFVlDhZB qtVeCM7SIEfxp8VR4/TWRHaoqoOnScTAoVZA9+YknqERZeQoUecTd1xXBHV0dQawxlc= ) ; Key ID = 261 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20220822190254 20220807185754 7698 gov. dBSpBgHX0L/G2I5MJ/wkADBF0OthUgrMtPrydX0kqzyxQ9q6NGouP9nsmeBDOGrwE8zw7tL4i8fT SOopdT5cwON+mCIXEufGG3NzJq3NRDUkFe5WV3gY5YKqK6LdBcHiiRp3pUuG7KweBRaz5OoWcu9c SyZ24XyNzRfw5i0QGzAvnHXd8YDn+1pFHGbtT596srFiwAizD9ulBk8n2onBC7ITfykoxu4fEO6H 6Onjeuh0wmJx+w0kfGvuShL7+P+o88iXilvEMAxeOxTq0zWgskqQLLRpd/k/fVJUk+CelsaWz2V6 0ySOAHlvSa9XwlINoCMtuBhR3dwglLxnixqudw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbSW4ocEzPbMwUkqAURZNNLAAZ9XoKgSLoPQVtMdnKBkrDoIwWxYO0nk3n/seSHxNb4I+Shq HeLM0bydpkqpMPCesMKazwq2YfQD0t0NdN4kiApakMBOO6foEa9UKHg8YbF5ZeZ2oZzIyFVlDhZB qtVeCM7SIEfxp8VR4/TWRHaoqoOnScTAoVZA9+YknqERZeQoUecTd1xXBHV0dQawxlc= ) ; Key ID = 261`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20220822190254 20220807185754 7698 gov. dBSpBgHX0L/G2I5MJ/wkADBF0OthUgrMtPrydX0kqzyxQ9q6NGouP9nsmeBDOGrwE8zw7tL4i8fT SOopdT5cwON+mCIXEufGG3NzJq3NRDUkFe5WV3gY5YKqK6LdBcHiiRp3pUuG7KweBRaz5OoWcu9c SyZ24XyNzRfw5i0QGzAvnHXd8YDn+1pFHGbtT596srFiwAizD9ulBk8n2onBC7ITfykoxu4fEO6H 6Onjeuh0wmJx+w0kfGvuShL7+P+o88iXilvEMAxeOxTq0zWgskqQLLRpd/k/fVJUk+CelsaWz2V6 0ySOAHlvSa9XwlINoCMtuBhR3dwglLxnixqudw== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=261 is now in the chain-of-trust
	Query to a.gov-servers.net for UCRDATATOOL.GOV/A
	Received 551 bytes from 69.36.157.30
	;; Response received from 69.36.157.30 (551 octets) ;; HEADER SECTION ;; id = 58895 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; UCRDATATOOL.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) UCRDATATOOL.GOV. 86400 IN NS ns-jdcw-02.usdoj.GOV. UCRDATATOOL.GOV. 86400 IN NS ns-jdcw-01.usdoj.GOV. UCRDATATOOL.GOV. 3600 IN DS ( 15334 8 1 5cc0fc0bf9a6fa88d43a57c5bbc64f514e3f9a5d ) UCRDATATOOL.GOV. 3600 IN DS ( 15334 8 2 b56519d9590afe4a2d2c2ef956895450aa691b21c309287ad03a97dfbbecdf53 ) UCRDATATOOL.GOV. 3600 IN DS ( 2944 8 2 c53df5e7ccd1c038eb95293e59d14cc3329aa3d0b561cf4d3a1b9227ba283ad3 ) UCRDATATOOL.GOV. 3600 IN DS ( 2944 8 1 70274b4eda5a265d332bf1bfe17e6a4be70bf4d3 ) UCRDATATOOL.GOV. 3600 IN RRSIG ( DS 8 2 3600 20220815174157 20220808174157 261 gov. rmsMYOvRntpDeQg2jHb5bzR8G+emyMdQyG0bgWthBZVOxdJ8fUvPEGhA9B5diVTy1VTfJWpHXHV3 awcgEdlezuN6Om+p8fBJmuvgZe+akqe93NvtgHgk0rACarFTVOtvwug1VJdh3YQe9D+/FoNtdjog VHgk8ln/EKsGmY+TySXKZF98qGUNiWMCjmlix0ocLwLpEPzJ+Ru9P9eojo29Fg== ) ;; ADDITIONAL SECTION (5 records) ns-jdcw-01.usdoj.GOV. 86400 IN A 149.101.180.157 ns-jdcw-02.usdoj.GOV. 86400 IN A 149.101.80.157 ns-jdcw-01.usdoj.GOV. 86400 IN AAAA 2607:f330:6000:107f::86 ns-jdcw-02.usdoj.GOV. 86400 IN AAAA 2607:f330:5000:107f::86 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.gov-servers.net for UCRDATATOOL.GOV/DNSKEY
	Received 551 bytes from 69.36.153.30
	;; Response received from 69.36.153.30 (551 octets) ;; HEADER SECTION ;; id = 47508 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; UCRDATATOOL.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) UCRDATATOOL.GOV. 86400 IN NS ns-jdcw-02.usdoj.GOV. UCRDATATOOL.GOV. 86400 IN NS ns-jdcw-01.usdoj.GOV. UCRDATATOOL.GOV. 3600 IN DS ( 15334 8 2 b56519d9590afe4a2d2c2ef956895450aa691b21c309287ad03a97dfbbecdf53 ) UCRDATATOOL.GOV. 3600 IN DS ( 2944 8 2 c53df5e7ccd1c038eb95293e59d14cc3329aa3d0b561cf4d3a1b9227ba283ad3 ) UCRDATATOOL.GOV. 3600 IN DS ( 15334 8 1 5cc0fc0bf9a6fa88d43a57c5bbc64f514e3f9a5d ) UCRDATATOOL.GOV. 3600 IN DS ( 2944 8 1 70274b4eda5a265d332bf1bfe17e6a4be70bf4d3 ) UCRDATATOOL.GOV. 3600 IN RRSIG ( DS 8 2 3600 20220815174157 20220808174157 261 gov. rmsMYOvRntpDeQg2jHb5bzR8G+emyMdQyG0bgWthBZVOxdJ8fUvPEGhA9B5diVTy1VTfJWpHXHV3 awcgEdlezuN6Om+p8fBJmuvgZe+akqe93NvtgHgk0rACarFTVOtvwug1VJdh3YQe9D+/FoNtdjog VHgk8ln/EKsGmY+TySXKZF98qGUNiWMCjmlix0ocLwLpEPzJ+Ru9P9eojo29Fg== ) ;; ADDITIONAL SECTION (5 records) ns-jdcw-01.usdoj.GOV. 86400 IN A 149.101.180.157 ns-jdcw-02.usdoj.GOV. 86400 IN A 149.101.80.157 ns-jdcw-01.usdoj.GOV. 86400 IN AAAA 2607:f330:6000:107f::86 ns-jdcw-02.usdoj.GOV. 86400 IN AAAA 2607:f330:5000:107f::86 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone UCRDATATOOL.GOV

UCRDATATOOL.GOV

	Checking DS between GOV and UCRDATATOOL.GOV
	Query to b.gov-servers.net for UCRDATATOOL.GOV/DS
	Received 407 bytes from 209.112.123.30
	;; Response received from 209.112.123.30 (407 octets) ;; HEADER SECTION ;; id = 32862 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; UCRDATATOOL.GOV. IN DS ;; ANSWER SECTION (5 records) UCRDATATOOL.GOV. 3600 IN DS ( 15334 8 1 5cc0fc0bf9a6fa88d43a57c5bbc64f514e3f9a5d ) UCRDATATOOL.GOV. 3600 IN DS ( 2944 8 2 c53df5e7ccd1c038eb95293e59d14cc3329aa3d0b561cf4d3a1b9227ba283ad3 ) UCRDATATOOL.GOV. 3600 IN DS ( 2944 8 1 70274b4eda5a265d332bf1bfe17e6a4be70bf4d3 ) UCRDATATOOL.GOV. 3600 IN DS ( 15334 8 2 b56519d9590afe4a2d2c2ef956895450aa691b21c309287ad03a97dfbbecdf53 ) UCRDATATOOL.GOV. 3600 IN RRSIG ( DS 8 2 3600 20220815174157 20220808174157 261 gov. rmsMYOvRntpDeQg2jHb5bzR8G+emyMdQyG0bgWthBZVOxdJ8fUvPEGhA9B5diVTy1VTfJWpHXHV3 awcgEdlezuN6Om+p8fBJmuvgZe+akqe93NvtgHgk0rACarFTVOtvwug1VJdh3YQe9D+/FoNtdjog VHgk8ln/EKsGmY+TySXKZF98qGUNiWMCjmlix0ocLwLpEPzJ+Ru9P9eojo29Fg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for UCRDATATOOL.GOV in the GOV zone
	DS=15334/SHA-1 has algorithm RSASHA256
	DS=2944/SHA-256 has algorithm RSASHA256
	DS=2944/SHA-1 has algorithm RSASHA256
	DS=15334/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`UCRDATATOOL.GOV. 3600 IN RRSIG ( DS 8 2 3600 20220815174157 20220808174157 261 gov. rmsMYOvRntpDeQg2jHb5bzR8G+emyMdQyG0bgWthBZVOxdJ8fUvPEGhA9B5diVTy1VTfJWpHXHV3 awcgEdlezuN6Om+p8fBJmuvgZe+akqe93NvtgHgk0rACarFTVOtvwug1VJdh3YQe9D+/FoNtdjog VHgk8ln/EKsGmY+TySXKZF98qGUNiWMCjmlix0ocLwLpEPzJ+Ru9P9eojo29Fg== )`
	RRSIG=261 and DNSKEY=261 verifies the DS RRset
	DS=15334/SHA-1 is now in the chain-of-trust
	DS=2944/SHA-256 is now in the chain-of-trust
	`UCRDATATOOL.GOV. 3600 IN DS ( 15334 8 1 5cc0fc0bf9a6fa88d43a57c5bbc64f514e3f9a5d )`
	`UCRDATATOOL.GOV. 3600 IN DS ( 2944 8 2 c53df5e7ccd1c038eb95293e59d14cc3329aa3d0b561cf4d3a1b9227ba283ad3 )`
	`UCRDATATOOL.GOV. 3600 IN DS ( 2944 8 1 70274b4eda5a265d332bf1bfe17e6a4be70bf4d3 )`
	`UCRDATATOOL.GOV. 3600 IN DS ( 15334 8 2 b56519d9590afe4a2d2c2ef956895450aa691b21c309287ad03a97dfbbecdf53 )`
	Query to ns-jdcw-02.usdoj.GOV for UCRDATATOOL.GOV/DNSKEY
	Received 1848 bytes from 149.101.80.157
	;; Response received from 149.101.80.157 (1848 octets) ;; HEADER SECTION ;; id = 14393 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; UCRDATATOOL.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) UCRDATATOOL.GOV. 432000 IN DNSKEY ( 256 3 8 AwEAAepkTMdwUAZ6zYYwN89Dc5aylcfRfKlH9ySjZHUJ5zQduCKiUkPDy+yN3H1wVzoNxvE/A49T 7f2Jmpm8F2mw4YfKRrG2ciT+NE4Z8AjmbIwHQOMOKbbP1X1vjRwtJhxBIleN7Z23PcnHzJg4o/Pt /LIrKQNfYxiQccdEesG+dIPd ) ; Key ID = 35865 UCRDATATOOL.GOV. 432000 IN DNSKEY ( 257 3 8 AwEAAemwYLMcAT6i1s02naDt7hhroDzo4OYnqBMAUne7fAB0tyAf3QrjOkBq/1g8DGyopML4+C5E GAP4gN6tDHQGhNYkL9sPdoAsE60u3pHznwsP0ZjytHtR9ImzHxVO235ynkGIegvV4fCaup1pE0Fu 9ltNY/yNqUehcd5AQydgCeCTCAZVydsQ3IQtJiJE+oDDY4sa7TbkXcX6MftqlfZAyvLFdOLYmrXE SmBzSiN9QcLVVS8VlR76PKPvqosGJV1oBR6ErGYK+QlPJ3PomX0IkFHMOKxXEo3++5+i75ySDPcr LFjJJtHmlojqex/FH+JIRy/4+3zNTttHqqAw8+7Npbs= ) ; Key ID = 15334 UCRDATATOOL.GOV. 432000 IN DNSKEY ( 256 3 8 AwEAAdPul/JWrCGc+bW7ad+cRnyCSruJdVeWlzw8hh2GmA7KHr9BzuYHCG6aOagzBpCq9Z8FBUJ7 XUqH9O6OIpBNhbdU92nKGCxo6SV2VCEs5TbsivQ2AQbs1YVwkA8W5s06WLaOPYDfcBzL260ddIL1 gKvjICzQsIHB1wNJC9zAoyAJ ) ; Key ID = 26820 UCRDATATOOL.GOV. 432000 IN DNSKEY ( 257 3 8 AwEAAax+9GlS0VAXwt1qsHlwDXyaxJb79VSH/y7sEqkuXNIP1B0TZSVUlsD7F4ehmmYffQZ97ADa AnBssBNOxk9VIYt2LJFx6URMWEEUZZxiieijAeKNJXnDkc3rOVcRgy29BScJSgp2klSwZeIwm03P rmWyS68G7pRxnAkwqy1qD54IqWBq/u/OZrRjrDDnsMdfsGvtgfq6pJvzeLIQKUpdqBuAwXyLgBQu XLHNS/tc0xMnqGbofn8S5dp6a1nVPm+u+slj4oRUpLzPRCkDafelwxW88nJTs9YDzjd4G9xyKWCG ufVrmYeE0oblAWu0QdmMStBoWGTIn1NhjoJ6cJATC18= ) ; Key ID = 2944 UCRDATATOOL.GOV. 432000 IN RRSIG ( DNSKEY 8 2 432000 20220818103823 20220808100727 2944 ucrdatatool.gov. Ab3RDgQ+63cketLOdpJTh6CRgRRj64SBeLSzQ1f4nASVeuj9mQ9v6sQJYeeO3OXW6bxjSJxhO4my Z776ZDu0cVEmUW7w02f8jL/UoMJ6UpFVwXsvCsVSW3r6yTfe6w2HNwLm7fPp2Vy+sf24Wqourkqy 4tgeRMQp9xB5b3Iqqn5WmTErul2xrlvmX8Yn6CGqV9Mocb2p2vg7qwL9wJ07Vn/IAKEmklfvJ4eB cDKBfB6gmMEVnHI+yoQfk3Cy8YAPo/myesWQvB17pjXJZXrCAul3RCgBeiSoLpO9Xu3qeiNMS5sY Hl18m4EkTrPsDfkt1vOwfgEkekPbYrHVRRn7cQ== ) ucrdatatool.gov. 432000 IN RRSIG ( DNSKEY 8 2 432000 20220818103823 20220808100727 15334 ucrdatatool.gov. tYOXNqbwDje/dDg4x/0TYFaRY739A5lpSmFn8na6iUP9wDLgfi9RlY4QlsCyvnXDXEv8vCkojpQS pw8pCkP+EaaFKutd9VgNvGN71k57kkJHVpgLmKCm3kuHH7IL0v0H3DIoqpsxSubgRJalTJXxUiX1 c/DXXULslbNoz8H6+aqm82RZSmcYyYmak8uyhVOKYcSu3SvhSoZvICfV3pDRm/Sqo/iWPFHweQgO wUT6GHNAr4qEx7JVsD2NTeuQINWwGUOP1SUh6tAMxHfeZ6RzWkPfb/TK1ZzLnq6w2hUMQK2ZYScz AvgTWmnI2U69aoj9BBZhLwa1oAVuBb/BIGS5/w== ) ucrdatatool.gov. 432000 IN RRSIG ( DNSKEY 8 2 432000 20220818103823 20220808100727 26820 ucrdatatool.gov. DvEm1AsxDqOQzxaJXQjcRIvh987KZGLu4rm/gVLARERsiSdHENDJHCAVWZ8oTWre4KVS0Rkaw0Mv WYQ1aBdJZEIzQz+l0DFVQTzjfEEpKOLqN6jv/1cLsQGtxXISYakWpGmlMgOwe3aLIcGuiY4FNskM AjSOp9mZiYn8LO5ftvM= ) ucrdatatool.gov. 432000 IN RRSIG ( DNSKEY 8 2 432000 20220818103823 20220808100727 35865 ucrdatatool.gov. kyvYGAwLYl/7OgY6vyD99HMNwYQX/E8eWSEIySSVa/OLMCqi5ZqJY5gDbVnWbBQmKFtZhBljhzng z7G9yZQ9/hzf/EYWWv5VkZuiL6AfJgqxk7RidkTsSvZtl0rmltcozZeGoEI/eYQvyGHbnA6zI85S OWgXERCCBswTinOGLw8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	Found 4 DNSKEY records for UCRDATATOOL.GOV
	`UCRDATATOOL.GOV. 432000 IN DNSKEY ( 256 3 8 AwEAAepkTMdwUAZ6zYYwN89Dc5aylcfRfKlH9ySjZHUJ5zQduCKiUkPDy+yN3H1wVzoNxvE/A49T 7f2Jmpm8F2mw4YfKRrG2ciT+NE4Z8AjmbIwHQOMOKbbP1X1vjRwtJhxBIleN7Z23PcnHzJg4o/Pt /LIrKQNfYxiQccdEesG+dIPd ) ; Key ID = 35865`
	`UCRDATATOOL.GOV. 432000 IN DNSKEY ( 257 3 8 AwEAAemwYLMcAT6i1s02naDt7hhroDzo4OYnqBMAUne7fAB0tyAf3QrjOkBq/1g8DGyopML4+C5E GAP4gN6tDHQGhNYkL9sPdoAsE60u3pHznwsP0ZjytHtR9ImzHxVO235ynkGIegvV4fCaup1pE0Fu 9ltNY/yNqUehcd5AQydgCeCTCAZVydsQ3IQtJiJE+oDDY4sa7TbkXcX6MftqlfZAyvLFdOLYmrXE SmBzSiN9QcLVVS8VlR76PKPvqosGJV1oBR6ErGYK+QlPJ3PomX0IkFHMOKxXEo3++5+i75ySDPcr LFjJJtHmlojqex/FH+JIRy/4+3zNTttHqqAw8+7Npbs= ) ; Key ID = 15334`
	`UCRDATATOOL.GOV. 432000 IN DNSKEY ( 256 3 8 AwEAAdPul/JWrCGc+bW7ad+cRnyCSruJdVeWlzw8hh2GmA7KHr9BzuYHCG6aOagzBpCq9Z8FBUJ7 XUqH9O6OIpBNhbdU92nKGCxo6SV2VCEs5TbsivQ2AQbs1YVwkA8W5s06WLaOPYDfcBzL260ddIL1 gKvjICzQsIHB1wNJC9zAoyAJ ) ; Key ID = 26820`
	`UCRDATATOOL.GOV. 432000 IN DNSKEY ( 257 3 8 AwEAAax+9GlS0VAXwt1qsHlwDXyaxJb79VSH/y7sEqkuXNIP1B0TZSVUlsD7F4ehmmYffQZ97ADa AnBssBNOxk9VIYt2LJFx6URMWEEUZZxiieijAeKNJXnDkc3rOVcRgy29BScJSgp2klSwZeIwm03P rmWyS68G7pRxnAkwqy1qD54IqWBq/u/OZrRjrDDnsMdfsGvtgfq6pJvzeLIQKUpdqBuAwXyLgBQu XLHNS/tc0xMnqGbofn8S5dp6a1nVPm+u+slj4oRUpLzPRCkDafelwxW88nJTs9YDzjd4G9xyKWCG ufVrmYeE0oblAWu0QdmMStBoWGTIn1NhjoJ6cJATC18= ) ; Key ID = 2944`
	DNSKEY=15334/SEP is now in the chain-of-trust
	DS=15334/SHA-1 verifies DNSKEY=15334/SEP
	DS=15334/SHA-256 verifies DNSKEY=15334/SEP
	DNSKEY=2944/SEP is now in the chain-of-trust
	DS=2944/SHA-256 verifies DNSKEY=2944/SEP
	DS=2944/SHA-1 verifies DNSKEY=2944/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`UCRDATATOOL.GOV. 432000 IN RRSIG ( DNSKEY 8 2 432000 20220818103823 20220808100727 2944 ucrdatatool.gov. Ab3RDgQ+63cketLOdpJTh6CRgRRj64SBeLSzQ1f4nASVeuj9mQ9v6sQJYeeO3OXW6bxjSJxhO4my Z776ZDu0cVEmUW7w02f8jL/UoMJ6UpFVwXsvCsVSW3r6yTfe6w2HNwLm7fPp2Vy+sf24Wqourkqy 4tgeRMQp9xB5b3Iqqn5WmTErul2xrlvmX8Yn6CGqV9Mocb2p2vg7qwL9wJ07Vn/IAKEmklfvJ4eB cDKBfB6gmMEVnHI+yoQfk3Cy8YAPo/myesWQvB17pjXJZXrCAul3RCgBeiSoLpO9Xu3qeiNMS5sY Hl18m4EkTrPsDfkt1vOwfgEkekPbYrHVRRn7cQ== )`
	`ucrdatatool.gov. 432000 IN RRSIG ( DNSKEY 8 2 432000 20220818103823 20220808100727 15334 ucrdatatool.gov. tYOXNqbwDje/dDg4x/0TYFaRY739A5lpSmFn8na6iUP9wDLgfi9RlY4QlsCyvnXDXEv8vCkojpQS pw8pCkP+EaaFKutd9VgNvGN71k57kkJHVpgLmKCm3kuHH7IL0v0H3DIoqpsxSubgRJalTJXxUiX1 c/DXXULslbNoz8H6+aqm82RZSmcYyYmak8uyhVOKYcSu3SvhSoZvICfV3pDRm/Sqo/iWPFHweQgO wUT6GHNAr4qEx7JVsD2NTeuQINWwGUOP1SUh6tAMxHfeZ6RzWkPfb/TK1ZzLnq6w2hUMQK2ZYScz AvgTWmnI2U69aoj9BBZhLwa1oAVuBb/BIGS5/w== )`
	`ucrdatatool.gov. 432000 IN RRSIG ( DNSKEY 8 2 432000 20220818103823 20220808100727 26820 ucrdatatool.gov. DvEm1AsxDqOQzxaJXQjcRIvh987KZGLu4rm/gVLARERsiSdHENDJHCAVWZ8oTWre4KVS0Rkaw0Mv WYQ1aBdJZEIzQz+l0DFVQTzjfEEpKOLqN6jv/1cLsQGtxXISYakWpGmlMgOwe3aLIcGuiY4FNskM AjSOp9mZiYn8LO5ftvM= )`
	`ucrdatatool.gov. 432000 IN RRSIG ( DNSKEY 8 2 432000 20220818103823 20220808100727 35865 ucrdatatool.gov. kyvYGAwLYl/7OgY6vyD99HMNwYQX/E8eWSEIySSVa/OLMCqi5ZqJY5gDbVnWbBQmKFtZhBljhzng z7G9yZQ9/hzf/EYWWv5VkZuiL6AfJgqxk7RidkTsSvZtl0rmltcozZeGoEI/eYQvyGHbnA6zI85S OWgXERCCBswTinOGLw8= )`
	RRSIG=2944 and DNSKEY=2944/SEP verifies the DNSKEY RRset
	RRSIG=15334 and DNSKEY=15334/SEP verifies the DNSKEY RRset
	RRSIG=26820 and DNSKEY=26820 verifies the DNSKEY RRset
	RRSIG=35865 and DNSKEY=35865 verifies the DNSKEY RRset
	DNSKEY=35865 is now in the chain-of-trust
	DNSKEY=26820 is now in the chain-of-trust
	Query to ns-jdcw-02.usdoj.GOV for UCRDATATOOL.GOV/A
	Received 898 bytes from 149.101.80.157
	;; Response received from 149.101.80.157 (898 octets) ;; HEADER SECTION ;; id = 5046 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; UCRDATATOOL.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) UCRDATATOOL.GOV. 600 IN SOA ( dnsgm-dc2.admin.oss.doj.GOV. root.usdoj.GOV. 2008120393 ;serial 10800 ;refresh 1080 ;retry 2592000 ;expire 600 ;minimum ) UCRDATATOOL.GOV. 600 IN RRSIG ( SOA 8 2 600 20220818221059 20220808211059 26820 ucrdatatool.gov. v1h1UFlg5iIKbGahpZcbY6JIRyYJ9qhqM5tpyF+oeBH/3G7euLQnckREXbn3jYDCXOx/Z9oY4nll Xsaa01aNkbdNsa6AQA2wFOXDIMI8yfmgAn1ashWPCYUKUgsIlFCGIHfIRXkSH5sI8UAVp5+PJ1s4 dcGijTU0pFni2AbcpLw= ) ucrdatatool.gov. 600 IN RRSIG ( SOA 8 2 600 20220818221059 20220808211059 35865 ucrdatatool.gov. gnltWxmsvQQufUb2oNEOjzH1sKlKHY4gafZQ8eDidyaxoe9/WAZoWl1nX77O8oS+5Yow2GyPvx+w e2s9cCDdNV4j52+1fD/9RurSSHQHXpV9qBumGYfCvRwX3lbXEdpJSv9BpdXOUd7Z+T5oLLRPaLbM tYiD06vGYUd3UPVUHao= ) QTR7K6OP3N34STMECR6KK387HEF8P6SQ.ucrdatatool.gov. 600 IN NSEC3 ( 1 0 10 9c3f15 c25jj4p272oqm58jvvommq8ff455hi3q NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) QTR7K6OP3N34STMECR6KK387HEF8P6SQ.ucrdatatool.gov. 600 IN RRSIG ( NSEC3 8 3 600 20220818103823 20220808100727 26820 ucrdatatool.gov. f6HcOIdcO+GnV+2zUYRsXRtdIdo+eyRHN4FQkJ4rkZ+EOD+8H0SSk6pMWqP7s+Lqv8gaLXI0frGX 4FyuU69cHIKfRmJ8zN3vtjguKrfh+GVtxeX9wN8KmahHAUu90ZbQ1bNNJkMeKn0gJBi0ytda9GnV GDtzJg4QNB2CRiCEGY4= ) QTR7K6OP3N34STMECR6KK387HEF8P6SQ.ucrdatatool.gov. 600 IN RRSIG ( NSEC3 8 3 600 20220818103823 20220808100727 35865 ucrdatatool.gov. qtFPM6i6SvQVwtN+FILYB9DSd0qq4nUOBaPn+YRspAW4ialhrsvsP7FmnRaWBzYA2/Vz+vo2/X7p gpjgXsSS++I7tRYwWNe0qDAx+ucl7vc3WJxbe2RNHfZXbmAa8zDJ8K5gxuNezTyQSkHtsOY3rtXb ebHR3b5m5TW01THWjvM= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	ns-jdcw-02.usdoj.GOV is authoritative for UCRDATATOOL.GOV
	Found RRSIG signed by ucrdatatool.gov zone
	Query to ns-jdcw-01.usdoj.GOV for UCRDATATOOL.GOV/SOA
	Received 465 bytes from 149.101.180.157
	;; Response received from 149.101.180.157 (465 octets) ;; HEADER SECTION ;; id = 9710 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; UCRDATATOOL.GOV. IN SOA ;; ANSWER SECTION (3 records) UCRDATATOOL.GOV. 600 IN SOA ( dnsgm-dc2.admin.oss.doj.GOV. root.usdoj.GOV. 2008120393 ;serial 10800 ;refresh 1080 ;retry 2592000 ;expire 600 ;minimum ) UCRDATATOOL.GOV. 600 IN RRSIG ( SOA 8 2 600 20220818221059 20220808211059 26820 ucrdatatool.gov. v1h1UFlg5iIKbGahpZcbY6JIRyYJ9qhqM5tpyF+oeBH/3G7euLQnckREXbn3jYDCXOx/Z9oY4nll Xsaa01aNkbdNsa6AQA2wFOXDIMI8yfmgAn1ashWPCYUKUgsIlFCGIHfIRXkSH5sI8UAVp5+PJ1s4 dcGijTU0pFni2AbcpLw= ) ucrdatatool.gov. 600 IN RRSIG ( SOA 8 2 600 20220818221059 20220808211059 35865 ucrdatatool.gov. gnltWxmsvQQufUb2oNEOjzH1sKlKHY4gafZQ8eDidyaxoe9/WAZoWl1nX77O8oS+5Yow2GyPvx+w e2s9cCDdNV4j52+1fD/9RurSSHQHXpV9qBumGYfCvRwX3lbXEdpJSv9BpdXOUd7Z+T5oLLRPaLbM tYiD06vGYUd3UPVUHao= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	Query to ns-jdcw-02.usdoj.GOV for UCRDATATOOL.GOV/A
	Received 898 bytes from 149.101.80.157
	;; Response received from 149.101.80.157 (898 octets) ;; HEADER SECTION ;; id = 18993 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; UCRDATATOOL.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) UCRDATATOOL.GOV. 600 IN SOA ( dnsgm-dc2.admin.oss.doj.GOV. root.usdoj.GOV. 2008120393 ;serial 10800 ;refresh 1080 ;retry 2592000 ;expire 600 ;minimum ) UCRDATATOOL.GOV. 600 IN RRSIG ( SOA 8 2 600 20220818221059 20220808211059 26820 ucrdatatool.gov. v1h1UFlg5iIKbGahpZcbY6JIRyYJ9qhqM5tpyF+oeBH/3G7euLQnckREXbn3jYDCXOx/Z9oY4nll Xsaa01aNkbdNsa6AQA2wFOXDIMI8yfmgAn1ashWPCYUKUgsIlFCGIHfIRXkSH5sI8UAVp5+PJ1s4 dcGijTU0pFni2AbcpLw= ) ucrdatatool.gov. 600 IN RRSIG ( SOA 8 2 600 20220818221059 20220808211059 35865 ucrdatatool.gov. gnltWxmsvQQufUb2oNEOjzH1sKlKHY4gafZQ8eDidyaxoe9/WAZoWl1nX77O8oS+5Yow2GyPvx+w e2s9cCDdNV4j52+1fD/9RurSSHQHXpV9qBumGYfCvRwX3lbXEdpJSv9BpdXOUd7Z+T5oLLRPaLbM tYiD06vGYUd3UPVUHao= ) QTR7K6OP3N34STMECR6KK387HEF8P6SQ.ucrdatatool.gov. 600 IN NSEC3 ( 1 0 10 9c3f15 c25jj4p272oqm58jvvommq8ff455hi3q NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) QTR7K6OP3N34STMECR6KK387HEF8P6SQ.ucrdatatool.gov. 600 IN RRSIG ( NSEC3 8 3 600 20220818103823 20220808100727 26820 ucrdatatool.gov. f6HcOIdcO+GnV+2zUYRsXRtdIdo+eyRHN4FQkJ4rkZ+EOD+8H0SSk6pMWqP7s+Lqv8gaLXI0frGX 4FyuU69cHIKfRmJ8zN3vtjguKrfh+GVtxeX9wN8KmahHAUu90ZbQ1bNNJkMeKn0gJBi0ytda9GnV GDtzJg4QNB2CRiCEGY4= ) QTR7K6OP3N34STMECR6KK387HEF8P6SQ.ucrdatatool.gov. 600 IN RRSIG ( NSEC3 8 3 600 20220818103823 20220808100727 35865 ucrdatatool.gov. qtFPM6i6SvQVwtN+FILYB9DSd0qq4nUOBaPn+YRspAW4ialhrsvsP7FmnRaWBzYA2/Vz+vo2/X7p gpjgXsSS++I7tRYwWNe0qDAx+ucl7vc3WJxbe2RNHfZXbmAa8zDJ8K5gxuNezTyQSkHtsOY3rtXb ebHR3b5m5TW01THWjvM= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`UCRDATATOOL.GOV. 600 IN RRSIG ( SOA 8 2 600 20220818221059 20220808211059 26820 ucrdatatool.gov. v1h1UFlg5iIKbGahpZcbY6JIRyYJ9qhqM5tpyF+oeBH/3G7euLQnckREXbn3jYDCXOx/Z9oY4nll Xsaa01aNkbdNsa6AQA2wFOXDIMI8yfmgAn1ashWPCYUKUgsIlFCGIHfIRXkSH5sI8UAVp5+PJ1s4 dcGijTU0pFni2AbcpLw= )`
	`ucrdatatool.gov. 600 IN RRSIG ( SOA 8 2 600 20220818221059 20220808211059 35865 ucrdatatool.gov. gnltWxmsvQQufUb2oNEOjzH1sKlKHY4gafZQ8eDidyaxoe9/WAZoWl1nX77O8oS+5Yow2GyPvx+w e2s9cCDdNV4j52+1fD/9RurSSHQHXpV9qBumGYfCvRwX3lbXEdpJSv9BpdXOUd7Z+T5oLLRPaLbM tYiD06vGYUd3UPVUHao= )`
	RRSIG=26820 and DNSKEY=26820 verifies the SOA RRset
	RRSIG=35865 and DNSKEY=35865 verifies the SOA RRset

UCRDATATOOL.GOV

	Query to ns-jdcw-01.usdoj.GOV for UCRDATATOOL.GOV/A
	Received 898 bytes from 149.101.180.157
	;; Response received from 149.101.180.157 (898 octets) ;; HEADER SECTION ;; id = 34243 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; UCRDATATOOL.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) UCRDATATOOL.GOV. 600 IN SOA ( dnsgm-dc2.admin.oss.doj.GOV. root.usdoj.GOV. 2008120393 ;serial 10800 ;refresh 1080 ;retry 2592000 ;expire 600 ;minimum ) UCRDATATOOL.GOV. 600 IN RRSIG ( SOA 8 2 600 20220818221059 20220808211059 26820 ucrdatatool.gov. v1h1UFlg5iIKbGahpZcbY6JIRyYJ9qhqM5tpyF+oeBH/3G7euLQnckREXbn3jYDCXOx/Z9oY4nll Xsaa01aNkbdNsa6AQA2wFOXDIMI8yfmgAn1ashWPCYUKUgsIlFCGIHfIRXkSH5sI8UAVp5+PJ1s4 dcGijTU0pFni2AbcpLw= ) ucrdatatool.gov. 600 IN RRSIG ( SOA 8 2 600 20220818221059 20220808211059 35865 ucrdatatool.gov. gnltWxmsvQQufUb2oNEOjzH1sKlKHY4gafZQ8eDidyaxoe9/WAZoWl1nX77O8oS+5Yow2GyPvx+w e2s9cCDdNV4j52+1fD/9RurSSHQHXpV9qBumGYfCvRwX3lbXEdpJSv9BpdXOUd7Z+T5oLLRPaLbM tYiD06vGYUd3UPVUHao= ) QTR7K6OP3N34STMECR6KK387HEF8P6SQ.ucrdatatool.gov. 600 IN NSEC3 ( 1 0 10 9c3f15 c25jj4p272oqm58jvvommq8ff455hi3q NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) QTR7K6OP3N34STMECR6KK387HEF8P6SQ.ucrdatatool.gov. 600 IN RRSIG ( NSEC3 8 3 600 20220818103823 20220808100727 26820 ucrdatatool.gov. f6HcOIdcO+GnV+2zUYRsXRtdIdo+eyRHN4FQkJ4rkZ+EOD+8H0SSk6pMWqP7s+Lqv8gaLXI0frGX 4FyuU69cHIKfRmJ8zN3vtjguKrfh+GVtxeX9wN8KmahHAUu90ZbQ1bNNJkMeKn0gJBi0ytda9GnV GDtzJg4QNB2CRiCEGY4= ) QTR7K6OP3N34STMECR6KK387HEF8P6SQ.ucrdatatool.gov. 600 IN RRSIG ( NSEC3 8 3 600 20220818103823 20220808100727 35865 ucrdatatool.gov. qtFPM6i6SvQVwtN+FILYB9DSd0qq4nUOBaPn+YRspAW4ialhrsvsP7FmnRaWBzYA2/Vz+vo2/X7p gpjgXsSS++I7tRYwWNe0qDAx+ucl7vc3WJxbe2RNHfZXbmAa8zDJ8K5gxuNezTyQSkHtsOY3rtXb ebHR3b5m5TW01THWjvM= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	ns-jdcw-01.usdoj.GOV is authoritative for UCRDATATOOL.GOV
	Found RRSIG signed by ucrdatatool.gov zone
	Query to ns-jdcw-01.usdoj.GOV for UCRDATATOOL.GOV/A
	Received 898 bytes from 149.101.180.157
	;; Response received from 149.101.180.157 (898 octets) ;; HEADER SECTION ;; id = 28066 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; UCRDATATOOL.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) UCRDATATOOL.GOV. 600 IN SOA ( dnsgm-dc2.admin.oss.doj.GOV. root.usdoj.GOV. 2008120393 ;serial 10800 ;refresh 1080 ;retry 2592000 ;expire 600 ;minimum ) UCRDATATOOL.GOV. 600 IN RRSIG ( SOA 8 2 600 20220818221059 20220808211059 26820 ucrdatatool.gov. v1h1UFlg5iIKbGahpZcbY6JIRyYJ9qhqM5tpyF+oeBH/3G7euLQnckREXbn3jYDCXOx/Z9oY4nll Xsaa01aNkbdNsa6AQA2wFOXDIMI8yfmgAn1ashWPCYUKUgsIlFCGIHfIRXkSH5sI8UAVp5+PJ1s4 dcGijTU0pFni2AbcpLw= ) ucrdatatool.gov. 600 IN RRSIG ( SOA 8 2 600 20220818221059 20220808211059 35865 ucrdatatool.gov. gnltWxmsvQQufUb2oNEOjzH1sKlKHY4gafZQ8eDidyaxoe9/WAZoWl1nX77O8oS+5Yow2GyPvx+w e2s9cCDdNV4j52+1fD/9RurSSHQHXpV9qBumGYfCvRwX3lbXEdpJSv9BpdXOUd7Z+T5oLLRPaLbM tYiD06vGYUd3UPVUHao= ) QTR7K6OP3N34STMECR6KK387HEF8P6SQ.ucrdatatool.gov. 600 IN NSEC3 ( 1 0 10 9c3f15 c25jj4p272oqm58jvvommq8ff455hi3q NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) QTR7K6OP3N34STMECR6KK387HEF8P6SQ.ucrdatatool.gov. 600 IN RRSIG ( NSEC3 8 3 600 20220818103823 20220808100727 26820 ucrdatatool.gov. f6HcOIdcO+GnV+2zUYRsXRtdIdo+eyRHN4FQkJ4rkZ+EOD+8H0SSk6pMWqP7s+Lqv8gaLXI0frGX 4FyuU69cHIKfRmJ8zN3vtjguKrfh+GVtxeX9wN8KmahHAUu90ZbQ1bNNJkMeKn0gJBi0ytda9GnV GDtzJg4QNB2CRiCEGY4= ) QTR7K6OP3N34STMECR6KK387HEF8P6SQ.ucrdatatool.gov. 600 IN RRSIG ( NSEC3 8 3 600 20220818103823 20220808100727 35865 ucrdatatool.gov. qtFPM6i6SvQVwtN+FILYB9DSd0qq4nUOBaPn+YRspAW4ialhrsvsP7FmnRaWBzYA2/Vz+vo2/X7p gpjgXsSS++I7tRYwWNe0qDAx+ucl7vc3WJxbe2RNHfZXbmAa8zDJ8K5gxuNezTyQSkHtsOY3rtXb ebHR3b5m5TW01THWjvM= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`UCRDATATOOL.GOV. 600 IN RRSIG ( SOA 8 2 600 20220818221059 20220808211059 26820 ucrdatatool.gov. v1h1UFlg5iIKbGahpZcbY6JIRyYJ9qhqM5tpyF+oeBH/3G7euLQnckREXbn3jYDCXOx/Z9oY4nll Xsaa01aNkbdNsa6AQA2wFOXDIMI8yfmgAn1ashWPCYUKUgsIlFCGIHfIRXkSH5sI8UAVp5+PJ1s4 dcGijTU0pFni2AbcpLw= )`
	`ucrdatatool.gov. 600 IN RRSIG ( SOA 8 2 600 20220818221059 20220808211059 35865 ucrdatatool.gov. gnltWxmsvQQufUb2oNEOjzH1sKlKHY4gafZQ8eDidyaxoe9/WAZoWl1nX77O8oS+5Yow2GyPvx+w e2s9cCDdNV4j52+1fD/9RurSSHQHXpV9qBumGYfCvRwX3lbXEdpJSv9BpdXOUd7Z+T5oLLRPaLbM tYiD06vGYUd3UPVUHao= )`
	RRSIG=26820 and DNSKEY=26820 verifies the SOA RRset
	RRSIG=35865 and DNSKEY=35865 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test UCRDATATOOL.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: