DNSSEC Analyzer - USCG.GOV

Domain Name:

Time: 2022-08-16 04:39:43 UTC, NTP stratum 16

Analyzing DNSSEC problems for USCG.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.33.4.12
	;; Response received from 192.33.4.12 (865 octets) ;; HEADER SECTION ;; id = 52687 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20220831000000 20220810000000 20326 . FJNYHZUipwrjUsDOPlE6hwUza6fRp2vwI294cL6vn5P9B5V2NT4Uf/wWoJvJlUdKPYhLSu2mfTM+ 2ufpNU9sHB+0Z1YXBj2zK8qQlT9S/BW5v4trLo1sZzK8uvl0hXKOwBsoOiNWdvqqtfqBTpz+mzWO bVSoCnNSUyIJkDyydvbJ9W2zqP+EY448BC87+BOGn+rY0yYy9dp5NYbrAOTQDF0pudHp43LHYedc AfDtjwVREPVEWYkisVpJoT3EZbF31h1Gb/+P7v84UHi6Mykq5hgQ1fV0PIMczp53moxgJxfzr1Y8 TIQnMy3xxmDxIiLXbaeUtkyBU2iMA1JJfWExyg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20220831000000 20220810000000 20326 . FJNYHZUipwrjUsDOPlE6hwUza6fRp2vwI294cL6vn5P9B5V2NT4Uf/wWoJvJlUdKPYhLSu2mfTM+ 2ufpNU9sHB+0Z1YXBj2zK8qQlT9S/BW5v4trLo1sZzK8uvl0hXKOwBsoOiNWdvqqtfqBTpz+mzWO bVSoCnNSUyIJkDyydvbJ9W2zqP+EY448BC87+BOGn+rY0yYy9dp5NYbrAOTQDF0pudHp43LHYedc AfDtjwVREPVEWYkisVpJoT3EZbF31h1Gb/+P7v84UHi6Mykq5hgQ1fV0PIMczp53moxgJxfzr1Y8 TIQnMy3xxmDxIiLXbaeUtkyBU2iMA1JJfWExyg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=20826 is now in the chain-of-trust
	Query to l.root-servers.net for USCG.GOV/A
	Received 627 bytes from 199.7.83.42
	;; Response received from 199.7.83.42 (627 octets) ;; HEADER SECTION ;; id = 18305 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; USCG.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20220828170000 20220815160000 20826 . jOWpAgmoMQaEDIy501972EmC6Y2o50emV1u0OGOfSoqMcLg1emE+wJNSI0p8+tWUjAcYKUPX/hZf 8zLCjMieK0bCR3gAwph8KYGEcPkriaM7+jTH8/xlqd7mV5WaYzr/EnCBuOl+jQNE31Ul7fnEZm6l WJjnMRotz/CJqwUFJnF8SBmaWYrC15zp0VppqtUK3hja/zjG+0sZwKLNwFMHf01zuXYbJCqATE+K AeqpGWbPBHs8gHOHKYumuxTDaVhf8yI+PKiPDJ+dZv6XdT+2ZfO8+YxWwH4iJthcFqM7+OsLXOeP fUQnl0JFK6FRlxPRUHVNr5gKVvAJkXme44bwDw== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to k.root-servers.net for GOV/DNSKEY
	Received 622 bytes from 193.0.14.129
	;; Response received from 193.0.14.129 (622 octets) ;; HEADER SECTION ;; id = 50306 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20220828170000 20220815160000 20826 . jOWpAgmoMQaEDIy501972EmC6Y2o50emV1u0OGOfSoqMcLg1emE+wJNSI0p8+tWUjAcYKUPX/hZf 8zLCjMieK0bCR3gAwph8KYGEcPkriaM7+jTH8/xlqd7mV5WaYzr/EnCBuOl+jQNE31Ul7fnEZm6l WJjnMRotz/CJqwUFJnF8SBmaWYrC15zp0VppqtUK3hja/zjG+0sZwKLNwFMHf01zuXYbJCqATE+K AeqpGWbPBHs8gHOHKYumuxTDaVhf8yI+PKiPDJ+dZv6XdT+2ZfO8+YxWwH4iJthcFqM7+OsLXOeP fUQnl0JFK6FRlxPRUHVNr5gKVvAJkXme44bwDw== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to i.root-servers.net for GOV/DS
	Received 370 bytes from 192.36.148.17
	;; Response received from 192.36.148.17 (370 octets) ;; HEADER SECTION ;; id = 36372 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20220828170000 20220815160000 20826 . jOWpAgmoMQaEDIy501972EmC6Y2o50emV1u0OGOfSoqMcLg1emE+wJNSI0p8+tWUjAcYKUPX/hZf 8zLCjMieK0bCR3gAwph8KYGEcPkriaM7+jTH8/xlqd7mV5WaYzr/EnCBuOl+jQNE31Ul7fnEZm6l WJjnMRotz/CJqwUFJnF8SBmaWYrC15zp0VppqtUK3hja/zjG+0sZwKLNwFMHf01zuXYbJCqATE+K AeqpGWbPBHs8gHOHKYumuxTDaVhf8yI+PKiPDJ+dZv6XdT+2ZfO8+YxWwH4iJthcFqM7+OsLXOeP fUQnl0JFK6FRlxPRUHVNr5gKVvAJkXme44bwDw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20220828170000 20220815160000 20826 . jOWpAgmoMQaEDIy501972EmC6Y2o50emV1u0OGOfSoqMcLg1emE+wJNSI0p8+tWUjAcYKUPX/hZf 8zLCjMieK0bCR3gAwph8KYGEcPkriaM7+jTH8/xlqd7mV5WaYzr/EnCBuOl+jQNE31Ul7fnEZm6l WJjnMRotz/CJqwUFJnF8SBmaWYrC15zp0VppqtUK3hja/zjG+0sZwKLNwFMHf01zuXYbJCqATE+K AeqpGWbPBHs8gHOHKYumuxTDaVhf8yI+PKiPDJ+dZv6XdT+2ZfO8+YxWwH4iJthcFqM7+OsLXOeP fUQnl0JFK6FRlxPRUHVNr5gKVvAJkXme44bwDw== )`
	RRSIG=20826 and DNSKEY=20826 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to d.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 81.19.194.30
	;; Response received from 81.19.194.30 (777 octets) ;; HEADER SECTION ;; id = 53564 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbSW4ocEzPbMwUkqAURZNNLAAZ9XoKgSLoPQVtMdnKBkrDoIwWxYO0nk3n/seSHxNb4I+Shq HeLM0bydpkqpMPCesMKazwq2YfQD0t0NdN4kiApakMBOO6foEa9UKHg8YbF5ZeZ2oZzIyFVlDhZB qtVeCM7SIEfxp8VR4/TWRHaoqoOnScTAoVZA9+YknqERZeQoUecTd1xXBHV0dQawxlc= ) ; Key ID = 261 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20220822190254 20220807185754 7698 gov. dBSpBgHX0L/G2I5MJ/wkADBF0OthUgrMtPrydX0kqzyxQ9q6NGouP9nsmeBDOGrwE8zw7tL4i8fT SOopdT5cwON+mCIXEufGG3NzJq3NRDUkFe5WV3gY5YKqK6LdBcHiiRp3pUuG7KweBRaz5OoWcu9c SyZ24XyNzRfw5i0QGzAvnHXd8YDn+1pFHGbtT596srFiwAizD9ulBk8n2onBC7ITfykoxu4fEO6H 6Onjeuh0wmJx+w0kfGvuShL7+P+o88iXilvEMAxeOxTq0zWgskqQLLRpd/k/fVJUk+CelsaWz2V6 0ySOAHlvSa9XwlINoCMtuBhR3dwglLxnixqudw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbSW4ocEzPbMwUkqAURZNNLAAZ9XoKgSLoPQVtMdnKBkrDoIwWxYO0nk3n/seSHxNb4I+Shq HeLM0bydpkqpMPCesMKazwq2YfQD0t0NdN4kiApakMBOO6foEa9UKHg8YbF5ZeZ2oZzIyFVlDhZB qtVeCM7SIEfxp8VR4/TWRHaoqoOnScTAoVZA9+YknqERZeQoUecTd1xXBHV0dQawxlc= ) ; Key ID = 261`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20220822190254 20220807185754 7698 gov. dBSpBgHX0L/G2I5MJ/wkADBF0OthUgrMtPrydX0kqzyxQ9q6NGouP9nsmeBDOGrwE8zw7tL4i8fT SOopdT5cwON+mCIXEufGG3NzJq3NRDUkFe5WV3gY5YKqK6LdBcHiiRp3pUuG7KweBRaz5OoWcu9c SyZ24XyNzRfw5i0QGzAvnHXd8YDn+1pFHGbtT596srFiwAizD9ulBk8n2onBC7ITfykoxu4fEO6H 6Onjeuh0wmJx+w0kfGvuShL7+P+o88iXilvEMAxeOxTq0zWgskqQLLRpd/k/fVJUk+CelsaWz2V6 0ySOAHlvSa9XwlINoCMtuBhR3dwglLxnixqudw== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=261 is now in the chain-of-trust
	Query to d.gov-servers.net for USCG.GOV/A
	Received 508 bytes from 81.19.194.30
	;; Response received from 81.19.194.30 (508 octets) ;; HEADER SECTION ;; id = 33329 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; USCG.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) USCG.GOV. 86400 IN NS cgns1.USCG.GOV. USCG.GOV. 86400 IN NS cgns4.USCG.GOV. USCG.GOV. 86400 IN NS cgns5.USCG.GOV. USCG.GOV. 3600 IN DS 34503 7 1 2455fdb2ab3e5705db3ec39a95dc1755a692bbf5 USCG.GOV. 3600 IN DS 64494 7 1 d0c59601ee07bf6a0aa887690ab3ce8da8649d96 USCG.GOV. 3600 IN DS ( 34503 7 2 d71a040976b8dea16caf0e94856c77a6e34b65eb17218ca0fc10d516bf04856f ) USCG.GOV. 3600 IN DS ( 64494 7 2 bd175f1c0875c01b8ada37d56317fedcc428cf3e39c87b18155802185768a51f ) USCG.GOV. 3600 IN RRSIG ( DS 8 2 3600 20220822134040 20220815134040 261 gov. LX4UwrdIsI+OB/7h2CmT/HOReWs1MYVdJXbo4UcKB8AYI8QHI2yHRKRmH9JrSX/VN6c4uaFUN5Fz CtzAo/FczMbpITAkjo05Q2KH8VIrf7Ua82OeHKPSY+XN3RcJX0ST+nNQVmqy/JxQuAHRnDR5tyHo fd+xKUWUHew8h3Q3R5UxJdB7UPQIv2jKtZpdI/xXq2GZOuTVtm7airmk4yDG2A== ) ;; ADDITIONAL SECTION (4 records) cgns5.USCG.GOV. 86400 IN A 152.121.50.3 cgns1.USCG.GOV. 86400 IN A 152.121.2.19 cgns4.USCG.GOV. 86400 IN A 152.121.33.3 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.gov-servers.net for USCG.GOV/DNSKEY
	Received 508 bytes from 69.36.157.30
	;; Response received from 69.36.157.30 (508 octets) ;; HEADER SECTION ;; id = 24176 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; USCG.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) USCG.GOV. 86400 IN NS cgns1.USCG.GOV. USCG.GOV. 86400 IN NS cgns4.USCG.GOV. USCG.GOV. 86400 IN NS cgns5.USCG.GOV. USCG.GOV. 3600 IN DS ( 64494 7 2 bd175f1c0875c01b8ada37d56317fedcc428cf3e39c87b18155802185768a51f ) USCG.GOV. 3600 IN DS ( 34503 7 2 d71a040976b8dea16caf0e94856c77a6e34b65eb17218ca0fc10d516bf04856f ) USCG.GOV. 3600 IN DS 64494 7 1 d0c59601ee07bf6a0aa887690ab3ce8da8649d96 USCG.GOV. 3600 IN DS 34503 7 1 2455fdb2ab3e5705db3ec39a95dc1755a692bbf5 USCG.GOV. 3600 IN RRSIG ( DS 8 2 3600 20220822134040 20220815134040 261 gov. LX4UwrdIsI+OB/7h2CmT/HOReWs1MYVdJXbo4UcKB8AYI8QHI2yHRKRmH9JrSX/VN6c4uaFUN5Fz CtzAo/FczMbpITAkjo05Q2KH8VIrf7Ua82OeHKPSY+XN3RcJX0ST+nNQVmqy/JxQuAHRnDR5tyHo fd+xKUWUHew8h3Q3R5UxJdB7UPQIv2jKtZpdI/xXq2GZOuTVtm7airmk4yDG2A== ) ;; ADDITIONAL SECTION (4 records) cgns5.USCG.GOV. 86400 IN A 152.121.50.3 cgns1.USCG.GOV. 86400 IN A 152.121.2.19 cgns4.USCG.GOV. 86400 IN A 152.121.33.3 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone USCG.GOV

USCG.GOV

	Checking DS between GOV and USCG.GOV
	Query to b.gov-servers.net for USCG.GOV/DS
	Received 400 bytes from 209.112.123.30
	;; Response received from 209.112.123.30 (400 octets) ;; HEADER SECTION ;; id = 39833 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; USCG.GOV. IN DS ;; ANSWER SECTION (5 records) USCG.GOV. 3600 IN DS ( 64494 7 2 bd175f1c0875c01b8ada37d56317fedcc428cf3e39c87b18155802185768a51f ) USCG.GOV. 3600 IN DS ( 34503 7 2 d71a040976b8dea16caf0e94856c77a6e34b65eb17218ca0fc10d516bf04856f ) USCG.GOV. 3600 IN DS 34503 7 1 2455fdb2ab3e5705db3ec39a95dc1755a692bbf5 USCG.GOV. 3600 IN DS 64494 7 1 d0c59601ee07bf6a0aa887690ab3ce8da8649d96 USCG.GOV. 3600 IN RRSIG ( DS 8 2 3600 20220822134040 20220815134040 261 gov. LX4UwrdIsI+OB/7h2CmT/HOReWs1MYVdJXbo4UcKB8AYI8QHI2yHRKRmH9JrSX/VN6c4uaFUN5Fz CtzAo/FczMbpITAkjo05Q2KH8VIrf7Ua82OeHKPSY+XN3RcJX0ST+nNQVmqy/JxQuAHRnDR5tyHo fd+xKUWUHew8h3Q3R5UxJdB7UPQIv2jKtZpdI/xXq2GZOuTVtm7airmk4yDG2A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for USCG.GOV in the GOV zone
	DS=64494/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=34503/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=34503/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=64494/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`USCG.GOV. 3600 IN RRSIG ( DS 8 2 3600 20220822134040 20220815134040 261 gov. LX4UwrdIsI+OB/7h2CmT/HOReWs1MYVdJXbo4UcKB8AYI8QHI2yHRKRmH9JrSX/VN6c4uaFUN5Fz CtzAo/FczMbpITAkjo05Q2KH8VIrf7Ua82OeHKPSY+XN3RcJX0ST+nNQVmqy/JxQuAHRnDR5tyHo fd+xKUWUHew8h3Q3R5UxJdB7UPQIv2jKtZpdI/xXq2GZOuTVtm7airmk4yDG2A== )`
	RRSIG=261 and DNSKEY=261 verifies the DS RRset
	DS=64494/SHA-256 is now in the chain-of-trust
	DS=34503/SHA-256 is now in the chain-of-trust
	`USCG.GOV. 3600 IN DS ( 64494 7 2 bd175f1c0875c01b8ada37d56317fedcc428cf3e39c87b18155802185768a51f )`
	`USCG.GOV. 3600 IN DS ( 34503 7 2 d71a040976b8dea16caf0e94856c77a6e34b65eb17218ca0fc10d516bf04856f )`
	`USCG.GOV. 3600 IN DS 34503 7 1 2455fdb2ab3e5705db3ec39a95dc1755a692bbf5`
	`USCG.GOV. 3600 IN DS 64494 7 1 d0c59601ee07bf6a0aa887690ab3ce8da8649d96`
	Query to cgns1.USCG.GOV for USCG.GOV/DNSKEY
	Received 1497 bytes from 152.121.2.19
	;; Response received from 152.121.2.19 (1497 octets) ;; HEADER SECTION ;; id = 404 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; USCG.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) USCG.GOV. 119122 IN DNSKEY ( 256 3 7 AwEAAeqOajFcMqlHBaZ2CyoE1WrvKo+T0i7DSEUGLRYV5IYzZoKETl0L67NfIWiIj+lgPAQrGFGl yo74W1009fjAgRmoIE5SmH6OXwHmXDess6WfmHKmALdw/hSBz85SzEBMosdn7cwtj2D88TZsSCv5 F+BShA+rqgF981wICywm7osD ) ; Key ID = 63677 USCG.GOV. 119122 IN DNSKEY ( 257 3 7 AwEAAbFCFsqfJ6iNz6DX/kGc5Xbr/atc8sqspzcWJ+46D7cHF0RPt6NnwJLGrQenUnS8CPGFeOdD TPYeSPwVP5j51ncV4nL+76iDFkZTYuStZoMHTeALeGC+EHLD9hOc/AOzxXDtiN8lBKEaclzESw4m Q70XSUCdaAOYiI05ygcJQwNtmfD/pKM1wtcJ5yWofdiPYLHo+N54kcL0VtJKkf9+GZ+YCql2ubsv 4B2BWyz+1jX14wmwBYrGodACCggbncZS8UhPZ717LHZ/MzfPxH875SFi/ZjKsQxmVCqoEWPuYMW5 28wOCIDhJm7PQoqka2TWXqxIpVlXoT9FBibynjGJjdc= ) ; Key ID = 64494 USCG.GOV. 119122 IN DNSKEY ( 257 3 7 AwEAAbpuLTTn9keuqBRob26v/YkMYpXRbp2ClS+P38PjILWFCZHWgduIqtKQ0OoJZGbv7SjQ5mVR dP0X0kcpyqX/+vLBLpC6ydFHJTA7G5aAhlEZNqGtd9rRZYZd7lt1weFmbGq4oOl6gZOUqIxLYCg0 JABsVCLT5hsW+VWtC5sf7kxInIi58SB0CG9RF+iwv9XS/qNke8K/0EPKWWcSDKkyLDV5RWNzkHai oZMGk+fIphGjg1Iw8kzH0x6tflAH124clGqoIAjJvsGh9ypxD4qZnlXUv5rns68Uu/KTVEKjvTar s1LjIPSCQDOED/mLZAAi+b/vZlLJgBU7tF9gvfcd3hE= ) ; Key ID = 34503 USCG.GOV. 119122 IN RRSIG ( DNSKEY 7 2 172800 20220819073242 20220815073115 34503 uscg.gov. Q5rTvxnB6Tmf7tFVXsla6QYl8Ka4UpGvIB3gBo92oM5Nin2L8KtS76RtFh3prQ8TZfkksiVXxDPE k2dT/vPRQ17URgkN5cTnXMzRQX57lSawfksrho7rWN7EdOl3N+NU+7ACp5XQX5KgLXis5aFxozaQ wcxFpHxaeZzPd6xJ4jJt5AYhsR2sUL02FnkMJjt23EJuzIu9odWoIhz1AYjrvL9G3P+RMxXptwt1 yxs34rtVElAmHfQ/IK9yPhiOHCtUrNS8uMoedYrAA+XoS76gCpToEKsS34ITlV5H5vKqKrSMuOXH +K9KQOpe8z3uthlsMqwH8nl+msv9Mh8nG2CQBw== ) USCG.GOV. 119122 IN RRSIG ( DNSKEY 7 2 172800 20220819073242 20220815073115 63677 uscg.gov. JrLXVxlgV8dPYAbhWgl38z9pclJWjKuoXvX7CSSEKFktx93b2VigDFxSZLEYDHHq1UEVBG13XWXt aoAzbN2+C6ii231TM8/qZodGoJOHdbMZClpbD5AE2BdHRdT3G2hhBWJuIb+cXbI/YOWfSf3jsrqr yuYIXVK+8CRFX5JvprQ= ) USCG.GOV. 119122 IN RRSIG ( DNSKEY 7 2 172800 20220819073242 20220815073115 64494 uscg.gov. KZPd3uG8XqFJ/vaYTuYmw+3nT1KUJYxxeUEZ+pmE4K/TvTDpY4mqvl7cDIdsAIqBnqVfaWRJuAER QCE1AweRZLRNFqazq+YUiAd1aJlK3AyRCFzWY+R5TeH6rteXrtS1a0VGos2xVXHtGqq4p8KkMCWH XMgx6nyS/NIbS2lFd0FbBC/mWYO1Xsqrz5wac+QwpJT6bzpYpMkbD+VOO++miiAmoumMVMv6sec8 h31dWohq4o3lUWpLpIdUwJRHc4cKt4hdp1JuEaI7YC8Rh8zZi2BqgNZMAmcQZYzuZRE6IuLDq8FN uGmI684zdklwBGPsdHwNI0DhCOayXcTm93GpLA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for USCG.GOV
	`USCG.GOV. 119122 IN DNSKEY ( 256 3 7 AwEAAeqOajFcMqlHBaZ2CyoE1WrvKo+T0i7DSEUGLRYV5IYzZoKETl0L67NfIWiIj+lgPAQrGFGl yo74W1009fjAgRmoIE5SmH6OXwHmXDess6WfmHKmALdw/hSBz85SzEBMosdn7cwtj2D88TZsSCv5 F+BShA+rqgF981wICywm7osD ) ; Key ID = 63677`
	`USCG.GOV. 119122 IN DNSKEY ( 257 3 7 AwEAAbFCFsqfJ6iNz6DX/kGc5Xbr/atc8sqspzcWJ+46D7cHF0RPt6NnwJLGrQenUnS8CPGFeOdD TPYeSPwVP5j51ncV4nL+76iDFkZTYuStZoMHTeALeGC+EHLD9hOc/AOzxXDtiN8lBKEaclzESw4m Q70XSUCdaAOYiI05ygcJQwNtmfD/pKM1wtcJ5yWofdiPYLHo+N54kcL0VtJKkf9+GZ+YCql2ubsv 4B2BWyz+1jX14wmwBYrGodACCggbncZS8UhPZ717LHZ/MzfPxH875SFi/ZjKsQxmVCqoEWPuYMW5 28wOCIDhJm7PQoqka2TWXqxIpVlXoT9FBibynjGJjdc= ) ; Key ID = 64494`
	`USCG.GOV. 119122 IN DNSKEY ( 257 3 7 AwEAAbpuLTTn9keuqBRob26v/YkMYpXRbp2ClS+P38PjILWFCZHWgduIqtKQ0OoJZGbv7SjQ5mVR dP0X0kcpyqX/+vLBLpC6ydFHJTA7G5aAhlEZNqGtd9rRZYZd7lt1weFmbGq4oOl6gZOUqIxLYCg0 JABsVCLT5hsW+VWtC5sf7kxInIi58SB0CG9RF+iwv9XS/qNke8K/0EPKWWcSDKkyLDV5RWNzkHai oZMGk+fIphGjg1Iw8kzH0x6tflAH124clGqoIAjJvsGh9ypxD4qZnlXUv5rns68Uu/KTVEKjvTar s1LjIPSCQDOED/mLZAAi+b/vZlLJgBU7tF9gvfcd3hE= ) ; Key ID = 34503`
	DNSKEY=64494/SEP is now in the chain-of-trust
	DS=64494/SHA-256 verifies DNSKEY=64494/SEP
	DS=64494/SHA-1 verifies DNSKEY=64494/SEP
	DNSKEY=34503/SEP is now in the chain-of-trust
	DS=34503/SHA-256 verifies DNSKEY=34503/SEP
	DS=34503/SHA-1 verifies DNSKEY=34503/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`USCG.GOV. 119122 IN RRSIG ( DNSKEY 7 2 172800 20220819073242 20220815073115 34503 uscg.gov. Q5rTvxnB6Tmf7tFVXsla6QYl8Ka4UpGvIB3gBo92oM5Nin2L8KtS76RtFh3prQ8TZfkksiVXxDPE k2dT/vPRQ17URgkN5cTnXMzRQX57lSawfksrho7rWN7EdOl3N+NU+7ACp5XQX5KgLXis5aFxozaQ wcxFpHxaeZzPd6xJ4jJt5AYhsR2sUL02FnkMJjt23EJuzIu9odWoIhz1AYjrvL9G3P+RMxXptwt1 yxs34rtVElAmHfQ/IK9yPhiOHCtUrNS8uMoedYrAA+XoS76gCpToEKsS34ITlV5H5vKqKrSMuOXH +K9KQOpe8z3uthlsMqwH8nl+msv9Mh8nG2CQBw== )`
	`USCG.GOV. 119122 IN RRSIG ( DNSKEY 7 2 172800 20220819073242 20220815073115 63677 uscg.gov. JrLXVxlgV8dPYAbhWgl38z9pclJWjKuoXvX7CSSEKFktx93b2VigDFxSZLEYDHHq1UEVBG13XWXt aoAzbN2+C6ii231TM8/qZodGoJOHdbMZClpbD5AE2BdHRdT3G2hhBWJuIb+cXbI/YOWfSf3jsrqr yuYIXVK+8CRFX5JvprQ= )`
	`USCG.GOV. 119122 IN RRSIG ( DNSKEY 7 2 172800 20220819073242 20220815073115 64494 uscg.gov. KZPd3uG8XqFJ/vaYTuYmw+3nT1KUJYxxeUEZ+pmE4K/TvTDpY4mqvl7cDIdsAIqBnqVfaWRJuAER QCE1AweRZLRNFqazq+YUiAd1aJlK3AyRCFzWY+R5TeH6rteXrtS1a0VGos2xVXHtGqq4p8KkMCWH XMgx6nyS/NIbS2lFd0FbBC/mWYO1Xsqrz5wac+QwpJT6bzpYpMkbD+VOO++miiAmoumMVMv6sec8 h31dWohq4o3lUWpLpIdUwJRHc4cKt4hdp1JuEaI7YC8Rh8zZi2BqgNZMAmcQZYzuZRE6IuLDq8FN uGmI684zdklwBGPsdHwNI0DhCOayXcTm93GpLA== )`
	RRSIG=34503 and DNSKEY=34503/SEP verifies the DNSKEY RRset
	RRSIG=63677 and DNSKEY=63677 verifies the DNSKEY RRset
	RRSIG=64494 and DNSKEY=64494/SEP verifies the DNSKEY RRset
	DNSKEY=63677 is now in the chain-of-trust
	Query to cgns5.USCG.GOV for USCG.GOV/A
	Received 528 bytes from 152.121.50.3
	;; Response received from 152.121.50.3 (528 octets) ;; HEADER SECTION ;; id = 16694 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; USCG.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) USCG.GOV. 600 IN SOA ( cgns1.USCG.GOV. hostmaster.uscg.mil. 2012075851 ;serial 10800 ;refresh 1080 ;retry 604800 ;expire 900 ;minimum ) USCG.GOV. 600 IN RRSIG ( SOA 7 2 600 20220820043646 20220816033646 63677 uscg.gov. V80efMXpnLYr9CFAK486hrYXcFjAhlvRunEQkW1qqw0TIReI9wIng67ebxXt8OmM2pKWYIugc6ES pb26+qM+2JP0FscFbyH/Oo9N8nLFycESXNB9wdQ/zfh1CX977R/kJcldbctVgucZj4XumrL+VVMS thixNzCawTVO7dlA364= ) LNMACT8CLSG1NCTQQO5LBTFEAN9N95DN.USCG.GOV. 600 IN RRSIG ( NSEC3 7 3 900 20220819044335 20220815035919 63677 uscg.gov. Ts2iZEr0MmKJuXTb3TBYtInchgcqHRnm551W8HqlwWJ4sQlmyNJsJKgHrlXmg7vOjAQWPb899l5t 1Ny8v/VtwaKx57n0zRz6ZMLgTWjxaQv3ZaMEqrhnh0NPdm/HbUzpN1m8hv+X6kuH5dtIh0/bY5Oq mehZ4OUQuQWsJlVlnw4= ) LNMACT8CLSG1NCTQQO5LBTFEAN9N95DN.USCG.GOV. 600 IN NSEC3 ( 1 0 10 45695ca52db4ccae4e89aaee25cf lrivvd7qmq9jv1sog35p8bultebji2t6 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	cgns5.USCG.GOV is authoritative for USCG.GOV
	Found RRSIG signed by uscg.gov zone
	Query to cgns4.USCG.GOV for USCG.GOV/SOA
	Received 266 bytes from 152.121.33.3
	;; Response received from 152.121.33.3 (266 octets) ;; HEADER SECTION ;; id = 49298 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; USCG.GOV. IN SOA ;; ANSWER SECTION (2 records) USCG.GOV. 600 IN SOA ( cgns1.USCG.GOV. hostmaster.uscg.mil. 2012075851 ;serial 10800 ;refresh 1080 ;retry 604800 ;expire 900 ;minimum ) USCG.GOV. 600 IN RRSIG ( SOA 7 2 600 20220820043646 20220816033646 63677 uscg.gov. V80efMXpnLYr9CFAK486hrYXcFjAhlvRunEQkW1qqw0TIReI9wIng67ebxXt8OmM2pKWYIugc6ES pb26+qM+2JP0FscFbyH/Oo9N8nLFycESXNB9wdQ/zfh1CX977R/kJcldbctVgucZj4XumrL+VVMS thixNzCawTVO7dlA364= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to cgns1.USCG.GOV for USCG.GOV/SOA
	Received 266 bytes from 152.121.2.19
	;; Response received from 152.121.2.19 (266 octets) ;; HEADER SECTION ;; id = 62891 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; USCG.GOV. IN SOA ;; ANSWER SECTION (2 records) USCG.GOV. 600 IN SOA ( cgns1.USCG.GOV. hostmaster.uscg.mil. 2012075851 ;serial 10800 ;refresh 1080 ;retry 604800 ;expire 900 ;minimum ) USCG.GOV. 600 IN RRSIG ( SOA 7 2 600 20220820043646 20220816033646 63677 uscg.gov. V80efMXpnLYr9CFAK486hrYXcFjAhlvRunEQkW1qqw0TIReI9wIng67ebxXt8OmM2pKWYIugc6ES pb26+qM+2JP0FscFbyH/Oo9N8nLFycESXNB9wdQ/zfh1CX977R/kJcldbctVgucZj4XumrL+VVMS thixNzCawTVO7dlA364= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to cgns5.USCG.GOV for USCG.GOV/A
	Received 528 bytes from 152.121.50.3
	;; Response received from 152.121.50.3 (528 octets) ;; HEADER SECTION ;; id = 34807 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; USCG.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) USCG.GOV. 560 IN SOA ( cgns1.USCG.GOV. hostmaster.uscg.mil. 2012075851 ;serial 10800 ;refresh 1080 ;retry 604800 ;expire 900 ;minimum ) USCG.GOV. 560 IN RRSIG ( SOA 7 2 600 20220820043646 20220816033646 63677 uscg.gov. V80efMXpnLYr9CFAK486hrYXcFjAhlvRunEQkW1qqw0TIReI9wIng67ebxXt8OmM2pKWYIugc6ES pb26+qM+2JP0FscFbyH/Oo9N8nLFycESXNB9wdQ/zfh1CX977R/kJcldbctVgucZj4XumrL+VVMS thixNzCawTVO7dlA364= ) LNMACT8CLSG1NCTQQO5LBTFEAN9N95DN.USCG.GOV. 560 IN RRSIG ( NSEC3 7 3 900 20220819044335 20220815035919 63677 uscg.gov. Ts2iZEr0MmKJuXTb3TBYtInchgcqHRnm551W8HqlwWJ4sQlmyNJsJKgHrlXmg7vOjAQWPb899l5t 1Ny8v/VtwaKx57n0zRz6ZMLgTWjxaQv3ZaMEqrhnh0NPdm/HbUzpN1m8hv+X6kuH5dtIh0/bY5Oq mehZ4OUQuQWsJlVlnw4= ) LNMACT8CLSG1NCTQQO5LBTFEAN9N95DN.USCG.GOV. 560 IN NSEC3 ( 1 0 10 45695ca52db4ccae4e89aaee25cf lrivvd7qmq9jv1sog35p8bultebji2t6 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`USCG.GOV. 600 IN RRSIG ( SOA 7 2 600 20220820043646 20220816033646 63677 uscg.gov. V80efMXpnLYr9CFAK486hrYXcFjAhlvRunEQkW1qqw0TIReI9wIng67ebxXt8OmM2pKWYIugc6ES pb26+qM+2JP0FscFbyH/Oo9N8nLFycESXNB9wdQ/zfh1CX977R/kJcldbctVgucZj4XumrL+VVMS thixNzCawTVO7dlA364= )`
	RRSIG=63677 and DNSKEY=63677 verifies the SOA RRset

USCG.GOV

	Query to cgns4.USCG.GOV for USCG.GOV/A
	Received 528 bytes from 152.121.33.3
	;; Response received from 152.121.33.3 (528 octets) ;; HEADER SECTION ;; id = 23418 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; USCG.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) USCG.GOV. 10 IN SOA ( cgns1.USCG.GOV. hostmaster.uscg.mil. 2012075850 ;serial 10800 ;refresh 1080 ;retry 604800 ;expire 900 ;minimum ) USCG.GOV. 10 IN RRSIG ( SOA 7 2 600 20220820041954 20220816031954 63677 uscg.gov. x7uc1ayZ3RmkdjN0vKVCdDL5H9gVdb3PE9cRTue/TUh60LxqocQIDSb57QAe1z4MM6mm0PtRqYTU PQy5RsS2ly7U6Li4r053lTA22E7M+THoyIyZjYt7fyf32F/emFEI+m0Dl1/Nt7jprZxPTErP9YQ9 hx2z1VBeNnduC9S8SbM= ) LNMACT8CLSG1NCTQQO5LBTFEAN9N95DN.USCG.GOV. 10 IN RRSIG ( NSEC3 7 3 900 20220819044335 20220815035919 63677 uscg.gov. Ts2iZEr0MmKJuXTb3TBYtInchgcqHRnm551W8HqlwWJ4sQlmyNJsJKgHrlXmg7vOjAQWPb899l5t 1Ny8v/VtwaKx57n0zRz6ZMLgTWjxaQv3ZaMEqrhnh0NPdm/HbUzpN1m8hv+X6kuH5dtIh0/bY5Oq mehZ4OUQuQWsJlVlnw4= ) LNMACT8CLSG1NCTQQO5LBTFEAN9N95DN.USCG.GOV. 10 IN NSEC3 ( 1 0 10 45695ca52db4ccae4e89aaee25cf lrivvd7qmq9jv1sog35p8bultebji2t6 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	cgns4.USCG.GOV is authoritative for USCG.GOV
	Found RRSIG signed by uscg.gov zone
	Query to cgns4.USCG.GOV for USCG.GOV/A
	Received 528 bytes from 152.121.33.3
	;; Response received from 152.121.33.3 (528 octets) ;; HEADER SECTION ;; id = 53885 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; USCG.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) USCG.GOV. 56 IN SOA ( cgns1.USCG.GOV. hostmaster.uscg.mil. 2012075850 ;serial 10800 ;refresh 1080 ;retry 604800 ;expire 900 ;minimum ) USCG.GOV. 56 IN RRSIG ( SOA 7 2 600 20220820041954 20220816031954 63677 uscg.gov. x7uc1ayZ3RmkdjN0vKVCdDL5H9gVdb3PE9cRTue/TUh60LxqocQIDSb57QAe1z4MM6mm0PtRqYTU PQy5RsS2ly7U6Li4r053lTA22E7M+THoyIyZjYt7fyf32F/emFEI+m0Dl1/Nt7jprZxPTErP9YQ9 hx2z1VBeNnduC9S8SbM= ) LNMACT8CLSG1NCTQQO5LBTFEAN9N95DN.USCG.GOV. 56 IN RRSIG ( NSEC3 7 3 900 20220819044335 20220815035919 63677 uscg.gov. Ts2iZEr0MmKJuXTb3TBYtInchgcqHRnm551W8HqlwWJ4sQlmyNJsJKgHrlXmg7vOjAQWPb899l5t 1Ny8v/VtwaKx57n0zRz6ZMLgTWjxaQv3ZaMEqrhnh0NPdm/HbUzpN1m8hv+X6kuH5dtIh0/bY5Oq mehZ4OUQuQWsJlVlnw4= ) LNMACT8CLSG1NCTQQO5LBTFEAN9N95DN.USCG.GOV. 56 IN NSEC3 ( 1 0 10 45695ca52db4ccae4e89aaee25cf lrivvd7qmq9jv1sog35p8bultebji2t6 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`USCG.GOV. 10 IN RRSIG ( SOA 7 2 600 20220820041954 20220816031954 63677 uscg.gov. x7uc1ayZ3RmkdjN0vKVCdDL5H9gVdb3PE9cRTue/TUh60LxqocQIDSb57QAe1z4MM6mm0PtRqYTU PQy5RsS2ly7U6Li4r053lTA22E7M+THoyIyZjYt7fyf32F/emFEI+m0Dl1/Nt7jprZxPTErP9YQ9 hx2z1VBeNnduC9S8SbM= )`
	RRSIG=63677 and DNSKEY=63677 verifies the SOA RRset

USCG.GOV

	Query to cgns1.USCG.GOV for USCG.GOV/A
	Received 528 bytes from 152.121.2.19
	;; Response received from 152.121.2.19 (528 octets) ;; HEADER SECTION ;; id = 65069 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; USCG.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) USCG.GOV. 17 IN SOA ( cgns1.USCG.GOV. hostmaster.uscg.mil. 2012075850 ;serial 10800 ;refresh 1080 ;retry 604800 ;expire 900 ;minimum ) USCG.GOV. 17 IN RRSIG ( SOA 7 2 600 20220820041954 20220816031954 63677 uscg.gov. x7uc1ayZ3RmkdjN0vKVCdDL5H9gVdb3PE9cRTue/TUh60LxqocQIDSb57QAe1z4MM6mm0PtRqYTU PQy5RsS2ly7U6Li4r053lTA22E7M+THoyIyZjYt7fyf32F/emFEI+m0Dl1/Nt7jprZxPTErP9YQ9 hx2z1VBeNnduC9S8SbM= ) LNMACT8CLSG1NCTQQO5LBTFEAN9N95DN.USCG.GOV. 17 IN RRSIG ( NSEC3 7 3 900 20220819044335 20220815035919 63677 uscg.gov. Ts2iZEr0MmKJuXTb3TBYtInchgcqHRnm551W8HqlwWJ4sQlmyNJsJKgHrlXmg7vOjAQWPb899l5t 1Ny8v/VtwaKx57n0zRz6ZMLgTWjxaQv3ZaMEqrhnh0NPdm/HbUzpN1m8hv+X6kuH5dtIh0/bY5Oq mehZ4OUQuQWsJlVlnw4= ) LNMACT8CLSG1NCTQQO5LBTFEAN9N95DN.USCG.GOV. 17 IN NSEC3 ( 1 0 10 45695ca52db4ccae4e89aaee25cf lrivvd7qmq9jv1sog35p8bultebji2t6 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	cgns1.USCG.GOV is authoritative for USCG.GOV
	Found RRSIG signed by uscg.gov zone
	Query to cgns1.USCG.GOV for USCG.GOV/A
	Received 528 bytes from 152.121.2.19
	;; Response received from 152.121.2.19 (528 octets) ;; HEADER SECTION ;; id = 50243 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; USCG.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) USCG.GOV. 17 IN SOA ( cgns1.USCG.GOV. hostmaster.uscg.mil. 2012075850 ;serial 10800 ;refresh 1080 ;retry 604800 ;expire 900 ;minimum ) USCG.GOV. 17 IN RRSIG ( SOA 7 2 600 20220820041954 20220816031954 63677 uscg.gov. x7uc1ayZ3RmkdjN0vKVCdDL5H9gVdb3PE9cRTue/TUh60LxqocQIDSb57QAe1z4MM6mm0PtRqYTU PQy5RsS2ly7U6Li4r053lTA22E7M+THoyIyZjYt7fyf32F/emFEI+m0Dl1/Nt7jprZxPTErP9YQ9 hx2z1VBeNnduC9S8SbM= ) LNMACT8CLSG1NCTQQO5LBTFEAN9N95DN.USCG.GOV. 17 IN RRSIG ( NSEC3 7 3 900 20220819044335 20220815035919 63677 uscg.gov. Ts2iZEr0MmKJuXTb3TBYtInchgcqHRnm551W8HqlwWJ4sQlmyNJsJKgHrlXmg7vOjAQWPb899l5t 1Ny8v/VtwaKx57n0zRz6ZMLgTWjxaQv3ZaMEqrhnh0NPdm/HbUzpN1m8hv+X6kuH5dtIh0/bY5Oq mehZ4OUQuQWsJlVlnw4= ) LNMACT8CLSG1NCTQQO5LBTFEAN9N95DN.USCG.GOV. 17 IN NSEC3 ( 1 0 10 45695ca52db4ccae4e89aaee25cf lrivvd7qmq9jv1sog35p8bultebji2t6 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`USCG.GOV. 17 IN RRSIG ( SOA 7 2 600 20220820041954 20220816031954 63677 uscg.gov. x7uc1ayZ3RmkdjN0vKVCdDL5H9gVdb3PE9cRTue/TUh60LxqocQIDSb57QAe1z4MM6mm0PtRqYTU PQy5RsS2ly7U6Li4r053lTA22E7M+THoyIyZjYt7fyf32F/emFEI+m0Dl1/Nt7jprZxPTErP9YQ9 hx2z1VBeNnduC9S8SbM= )`
	RRSIG=63677 and DNSKEY=63677 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test USCG.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: