DNSSEC Analyzer - comcast.net

Domain Name:

Time: 2023-12-04 04:03:54 UTC, NTP stratum 16

Analyzing DNSSEC problems for comcast.net

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.5.5.241
	;; Response received from 192.5.5.241 (864 octets) ;; HEADER SECTION ;; id = 58410 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20231221000000 20231130000000 20326 . Vq+Z0sYiDdI6V+KCvfoTAYNxmsKiv703Lxyy4OREQPew0qYrrUySU54Jn+NiOlkHLm+o83YW7ZZ0 eyikQKrt42dD2Hdigy7YiOeML1W3wqkZYDg/DoHo5i8zP+B6461Z/yVrjkcTSgM6C8FZuOaDqj5X PMghMfDo0fQy0spEL6rtLzGNXDZ+j5D+hcoQPYtZu9svhm9AHqZoXLu5id7whpsVJhON4BM1pQRF 7JSlTIi0cn7SGhFpfypnj/2E5hUvJ1bRRkr+wItfi7B4+b19lDNgtLZiDs3opRMmStbaF3HEFgTh UZ+HcCRzQASdyuZ4Y8xr1SUX/MpSlct5EBFshg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20231221000000 20231130000000 20326 . Vq+Z0sYiDdI6V+KCvfoTAYNxmsKiv703Lxyy4OREQPew0qYrrUySU54Jn+NiOlkHLm+o83YW7ZZ0 eyikQKrt42dD2Hdigy7YiOeML1W3wqkZYDg/DoHo5i8zP+B6461Z/yVrjkcTSgM6C8FZuOaDqj5X PMghMfDo0fQy0spEL6rtLzGNXDZ+j5D+hcoQPYtZu9svhm9AHqZoXLu5id7whpsVJhON4BM1pQRF 7JSlTIi0cn7SGhFpfypnj/2E5hUvJ1bRRkr+wItfi7B4+b19lDNgtLZiDs3opRMmStbaF3HEFgTh UZ+HcCRzQASdyuZ4Y8xr1SUX/MpSlct5EBFshg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=46780 is now in the chain-of-trust
	Query to m.root-servers.net for comcast.net/A
	Received 1171 bytes from 202.12.27.33
	;; Response received from 202.12.27.33 (1171 octets) ;; HEADER SECTION ;; id = 63873 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; comcast.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20231216170000 20231203160000 46780 . SZNu6S/K0yuF8lG+Y94o0K5R5KYoAQJtci8A8tRAPZMMXjeV+smcmvnoFVnTiHlzjG/t2Dmq6AiE zBZo+EsMLkNIZy2IZgnv5QLBg5xrmvLLP2YEpQHkd3D6nIEZDh1g+1prRat2Jm0Sh6ldik+htA75 KouJ14n2JfY8jBbcULv/1JMrK6zf6xTFsiJeUmwYEEgZHtF1f2plS8I87Ro0YVwLZuRktbaFEho0 ZsQYJt3I0VEeE38+OIA43Q0Dm1NWN5gAddyzzN3P5kOwQ54BFm64mi8w/fAyNJWNnL5XhfdPCy8R Oqfb4/oJAEPCESDFbApnmFfWiRtkUUuQs0LH4g== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 a.gtld-servers.net. 172800 IN A 192.5.6.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to f.root-servers.net for net/DNSKEY
	Received 1160 bytes from 192.5.5.241
	;; Response received from 192.5.5.241 (1160 octets) ;; HEADER SECTION ;; id = 55072 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20231216170000 20231203160000 46780 . SZNu6S/K0yuF8lG+Y94o0K5R5KYoAQJtci8A8tRAPZMMXjeV+smcmvnoFVnTiHlzjG/t2Dmq6AiE zBZo+EsMLkNIZy2IZgnv5QLBg5xrmvLLP2YEpQHkd3D6nIEZDh1g+1prRat2Jm0Sh6ldik+htA75 KouJ14n2JfY8jBbcULv/1JMrK6zf6xTFsiJeUmwYEEgZHtF1f2plS8I87Ro0YVwLZuRktbaFEho0 ZsQYJt3I0VEeE38+OIA43Q0Dm1NWN5gAddyzzN3P5kOwQ54BFm64mi8w/fAyNJWNnL5XhfdPCy8R Oqfb4/oJAEPCESDFbApnmFfWiRtkUUuQs0LH4g== ) ;; ADDITIONAL SECTION (27 records) e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone net

net

	Checking DS between . and net
	Query to b.root-servers.net for net/DS
	Received 367 bytes from 170.247.170.2
	;; Response received from 170.247.170.2 (367 octets) ;; HEADER SECTION ;; id = 60400 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DS ;; ANSWER SECTION (2 records) net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20231216170000 20231203160000 46780 . SZNu6S/K0yuF8lG+Y94o0K5R5KYoAQJtci8A8tRAPZMMXjeV+smcmvnoFVnTiHlzjG/t2Dmq6AiE zBZo+EsMLkNIZy2IZgnv5QLBg5xrmvLLP2YEpQHkd3D6nIEZDh1g+1prRat2Jm0Sh6ldik+htA75 KouJ14n2JfY8jBbcULv/1JMrK6zf6xTFsiJeUmwYEEgZHtF1f2plS8I87Ro0YVwLZuRktbaFEho0 ZsQYJt3I0VEeE38+OIA43Q0Dm1NWN5gAddyzzN3P5kOwQ54BFm64mi8w/fAyNJWNnL5XhfdPCy8R Oqfb4/oJAEPCESDFbApnmFfWiRtkUUuQs0LH4g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for net in the . zone
	DS=37331/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`net. 86400 IN RRSIG ( DS 8 1 86400 20231216170000 20231203160000 46780 . SZNu6S/K0yuF8lG+Y94o0K5R5KYoAQJtci8A8tRAPZMMXjeV+smcmvnoFVnTiHlzjG/t2Dmq6AiE zBZo+EsMLkNIZy2IZgnv5QLBg5xrmvLLP2YEpQHkd3D6nIEZDh1g+1prRat2Jm0Sh6ldik+htA75 KouJ14n2JfY8jBbcULv/1JMrK6zf6xTFsiJeUmwYEEgZHtF1f2plS8I87Ro0YVwLZuRktbaFEho0 ZsQYJt3I0VEeE38+OIA43Q0Dm1NWN5gAddyzzN3P5kOwQ54BFm64mi8w/fAyNJWNnL5XhfdPCy8R Oqfb4/oJAEPCESDFbApnmFfWiRtkUUuQs0LH4g== )`
	RRSIG=46780 and DNSKEY=46780 verifies the DS RRset
	DS=37331/SHA-256 is now in the chain-of-trust
	`net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b )`
	Query to f.gtld-servers.net for net/DNSKEY
	Received 291 bytes from 192.35.51.30
	;; Response received from 192.35.51.30 (291 octets) ;; HEADER SECTION ;; id = 10921 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (3 records) net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; Key ID = 37331 net. 86400 IN DNSKEY ( 256 3 13 mIGmmmfH+QUj1HRICwGPse0pJVooabAqExmT/ISf0DR3umaJRXEfjrM6hB7VR5n/3PiIk0JtfqEE dM7qz6c7cQ== ) ; Key ID = 44222 net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20231214151035 20231129150535 37331 net. vhMq1k5ReCIqy6QY8O0bfUxX7JKDumrIYbRmrKdYT7s+tSaSIP5r2eQ8TRHBHxZaXl0BSRDkCGqD xM9q9ISxCw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for net
	`net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; Key ID = 37331`
	`net. 86400 IN DNSKEY ( 256 3 13 mIGmmmfH+QUj1HRICwGPse0pJVooabAqExmT/ISf0DR3umaJRXEfjrM6hB7VR5n/3PiIk0JtfqEE dM7qz6c7cQ== ) ; Key ID = 44222`
	DNSKEY=37331/SEP is now in the chain-of-trust
	DS=37331/SHA-256 verifies DNSKEY=37331/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20231214151035 20231129150535 37331 net. vhMq1k5ReCIqy6QY8O0bfUxX7JKDumrIYbRmrKdYT7s+tSaSIP5r2eQ8TRHBHxZaXl0BSRDkCGqD xM9q9ISxCw== )`
	RRSIG=37331 and DNSKEY=37331/SEP verifies the DNSKEY RRset
	DNSKEY=44222 is now in the chain-of-trust
	Query to d.gtld-servers.net for comcast.net/A
	Received 548 bytes from 192.31.80.30
	;; Response received from 192.31.80.30 (548 octets) ;; HEADER SECTION ;; id = 60164 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; comcast.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) comcast.net. 172800 IN NS dns101.comcast.net. comcast.net. 172800 IN NS dns102.comcast.net. comcast.net. 172800 IN NS dns103.comcast.net. comcast.net. 172800 IN NS dns104.comcast.net. comcast.net. 172800 IN NS dns105.comcast.net. comcast.net. 86400 IN DS ( 40909 5 2 30c0f50e68dcc9a2f279a994c07cf22ced97aadf44c2b1fe38a1b32ba1a34174 ) comcast.net. 86400 IN DS 40909 5 1 ddc19733884ee533b35b4b57717bea9b0ef2c4d1 comcast.net. 86400 IN RRSIG ( DS 13 2 86400 20231208090201 20231201075201 44222 net. ia+LtDw+LySXdNlCiG3XE4IQSVvx2mT/SJwJ1wdiZYUI8Iryek+51H06JBhjDKg+JeibokclSZpq TcbH02LJaQ== ) ;; ADDITIONAL SECTION (11 records) dns101.comcast.net. 172800 IN AAAA 2001:558:fe23:8:69:252:250:103 dns101.comcast.net. 172800 IN A 69.252.250.103 dns102.comcast.net. 172800 IN AAAA 2001:558:1004:7:68:87:85:132 dns102.comcast.net. 172800 IN A 68.87.85.132 dns103.comcast.net. 172800 IN AAAA 2001:558:1014:c:68:87:76:228 dns103.comcast.net. 172800 IN A 68.87.76.228 dns104.comcast.net. 172800 IN AAAA 2001:558:100a:5:68:87:68:244 dns104.comcast.net. 172800 IN A 68.87.68.244 dns105.comcast.net. 172800 IN AAAA 2001:558:100e:5:68:87:72:244 dns105.comcast.net. 172800 IN A 68.87.72.244 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to m.gtld-servers.net for comcast.net/DNSKEY
	Received 548 bytes from 192.55.83.30
	;; Response received from 192.55.83.30 (548 octets) ;; HEADER SECTION ;; id = 30999 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; comcast.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) comcast.net. 172800 IN NS dns101.comcast.net. comcast.net. 172800 IN NS dns102.comcast.net. comcast.net. 172800 IN NS dns103.comcast.net. comcast.net. 172800 IN NS dns104.comcast.net. comcast.net. 172800 IN NS dns105.comcast.net. comcast.net. 86400 IN DS ( 40909 5 2 30c0f50e68dcc9a2f279a994c07cf22ced97aadf44c2b1fe38a1b32ba1a34174 ) comcast.net. 86400 IN DS 40909 5 1 ddc19733884ee533b35b4b57717bea9b0ef2c4d1 comcast.net. 86400 IN RRSIG ( DS 13 2 86400 20231208090201 20231201075201 44222 net. ia+LtDw+LySXdNlCiG3XE4IQSVvx2mT/SJwJ1wdiZYUI8Iryek+51H06JBhjDKg+JeibokclSZpq TcbH02LJaQ== ) ;; ADDITIONAL SECTION (11 records) dns101.comcast.net. 172800 IN AAAA 2001:558:fe23:8:69:252:250:103 dns101.comcast.net. 172800 IN A 69.252.250.103 dns102.comcast.net. 172800 IN AAAA 2001:558:1004:7:68:87:85:132 dns102.comcast.net. 172800 IN A 68.87.85.132 dns103.comcast.net. 172800 IN AAAA 2001:558:1014:c:68:87:76:228 dns103.comcast.net. 172800 IN A 68.87.76.228 dns104.comcast.net. 172800 IN AAAA 2001:558:100a:5:68:87:68:244 dns104.comcast.net. 172800 IN A 68.87.68.244 dns105.comcast.net. 172800 IN AAAA 2001:558:100e:5:68:87:72:244 dns105.comcast.net. 172800 IN A 68.87.72.244 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone comcast.net

comcast.net

	Checking DS between net and comcast.net
	Query to f.gtld-servers.net for comcast.net/DS
	Received 1115 bytes from 192.35.51.30
	;; Response received from 192.35.51.30 (1115 octets) ;; HEADER SECTION ;; id = 52306 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 14 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; comcast.net. IN DS ;; ANSWER SECTION (3 records) comcast.net. 86400 IN DS ( 40909 5 2 30c0f50e68dcc9a2f279a994c07cf22ced97aadf44c2b1fe38a1b32ba1a34174 ) comcast.net. 86400 IN DS 40909 5 1 ddc19733884ee533b35b4b57717bea9b0ef2c4d1 comcast.net. 86400 IN RRSIG ( DS 13 2 86400 20231208090201 20231201075201 44222 net. ia+LtDw+LySXdNlCiG3XE4IQSVvx2mT/SJwJ1wdiZYUI8Iryek+51H06JBhjDKg+JeibokclSZpq TcbH02LJaQ== ) ;; AUTHORITY SECTION (14 records) net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN RRSIG ( NS 13 1 172800 20231210091229 20231203080229 44222 net. Q+7NtZhj7X/ih9Bo2ejJX6KpPv4g9iw1P3tt5CMYee7R4p3wu/Lr+WMN1F/IVsTO8pX7IdRkwVKy ZBhqpxzbMw== ) ;; ADDITIONAL SECTION (27 records) b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for comcast.net in the net zone
	DS=40909/SHA-256 has algorithm RSASHA1
	DS=40909/SHA-1 has algorithm RSASHA1
	Found 1 RRSIGs over DS RRset
	`comcast.net. 86400 IN RRSIG ( DS 13 2 86400 20231208090201 20231201075201 44222 net. ia+LtDw+LySXdNlCiG3XE4IQSVvx2mT/SJwJ1wdiZYUI8Iryek+51H06JBhjDKg+JeibokclSZpq TcbH02LJaQ== )`
	RRSIG=44222 and DNSKEY=44222 verifies the DS RRset
	DS=40909/SHA-256 is now in the chain-of-trust
	`comcast.net. 86400 IN DS ( 40909 5 2 30c0f50e68dcc9a2f279a994c07cf22ced97aadf44c2b1fe38a1b32ba1a34174 )`
	`comcast.net. 86400 IN DS 40909 5 1 ddc19733884ee533b35b4b57717bea9b0ef2c4d1`
	Query to dns105.comcast.net for comcast.net/DNSKEY
	Received 934 bytes from 68.87.72.244
	;; Response received from 68.87.72.244 (934 octets) ;; HEADER SECTION ;; id = 39824 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; comcast.net. IN DNSKEY ;; ANSWER SECTION (4 records) comcast.net. 3600 IN DNSKEY ( 257 3 5 AwEAAcdTwXuKIERUoEaOHCEafPCgHW8Dq8OftDPD1sZCwCUH7VjfSXQpgvkYUG+6FN9INP2uHybz Re/m4EG8HD8zkKtaIBzrYZIcbchuXKZ5biwkj1hIMTGlDG0jD0j3rjiJkk3dDkygKvV8FswEJo9X 7+CWbtf4WKgXqnd/2JcsliDK4XujFsw27eWpXlHZt5SuQb0N1jmMazESXwYJYtGXce5vi4pBhlE9 OUgCQlkxPxedvaelT5hKxYP3lIH4vjBrKMzQE7OzoB4lOsJVhbvDF1VZUzC6n42w8WWvjBDY3Til OvsC9Je7DOD3yQlgcmiQ80PM4zknfQJ76APxYrrowTE= ) ; Key ID = 40909 comcast.net. 3600 IN DNSKEY ( 256 3 5 AwEAAbEO9O0+NybzFSgdaG+ExZkMKYpZc9w5VdEJ9vUABIjFftKjd/l8Mo53OIrU7XC81WTsSI8R QqaQqccbWDoP3afbdLR0xJw6auIEsDo6kJ7ZaSoFCAeSlMTPvdHAlcFbHL1zF4/HzaaoOL3psKfe Me2/2j7saEOKQlxIPa5R5mgx ) ; Key ID = 26550 comcast.net. 3600 IN RRSIG ( DNSKEY 5 2 3600 20240303144430 20231104104430 40909 comcast.net. QRZGphO9B4AHVhqM05e+kJ2QR3qQid3CGmhBbP+YsMuEQlzoL4S+3vQBUXXTcP98EYX8hBHfMqN4 2t3fXG+YHxKoJ3P6GUhq7KJCKq8ZKBjYD4uWgx7eDsl+o/bZwxUwDqFpszKCI1US8JCl7BaI6QPZ 1fzntK64Eef263FnO2EWI01iQCf2Nkzvx2JnPuZjxDAX7kAUhVIybLEjJuxcCPpnuPjxfx08KGq9 47fcdaHaBkdOscBQ1FTVsf30+l0iYAj2TsYE+69H3dDXuZLtcwBANbXqdEgb9MYZ8Rs9pxvR9vMQ l3uLVA8lOrAPK25xiidOUlkOaEcnk3TKTBd0JQ== ) comcast.net. 3600 IN RRSIG ( DNSKEY 5 2 3600 20231219144430 20231202143930 26550 comcast.net. K/P8kgbFJvLXHXmpZgzSwa8fWRMdlwEz0fx4zo6uunsPBCoIVSQ4Sp2riBMYxslBxx2H252NS7DI /WNXRZ0gsjf9ivUOZrfRQIwzrEV1Sni4YTCh3wjnwfp+eEiE5A4mAP0mRMSsS6OnQd2zng+ZBspJ 1Mph0syJaXTteSBT64A= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for comcast.net
	`comcast.net. 3600 IN DNSKEY ( 257 3 5 AwEAAcdTwXuKIERUoEaOHCEafPCgHW8Dq8OftDPD1sZCwCUH7VjfSXQpgvkYUG+6FN9INP2uHybz Re/m4EG8HD8zkKtaIBzrYZIcbchuXKZ5biwkj1hIMTGlDG0jD0j3rjiJkk3dDkygKvV8FswEJo9X 7+CWbtf4WKgXqnd/2JcsliDK4XujFsw27eWpXlHZt5SuQb0N1jmMazESXwYJYtGXce5vi4pBhlE9 OUgCQlkxPxedvaelT5hKxYP3lIH4vjBrKMzQE7OzoB4lOsJVhbvDF1VZUzC6n42w8WWvjBDY3Til OvsC9Je7DOD3yQlgcmiQ80PM4zknfQJ76APxYrrowTE= ) ; Key ID = 40909`
	`comcast.net. 3600 IN DNSKEY ( 256 3 5 AwEAAbEO9O0+NybzFSgdaG+ExZkMKYpZc9w5VdEJ9vUABIjFftKjd/l8Mo53OIrU7XC81WTsSI8R QqaQqccbWDoP3afbdLR0xJw6auIEsDo6kJ7ZaSoFCAeSlMTPvdHAlcFbHL1zF4/HzaaoOL3psKfe Me2/2j7saEOKQlxIPa5R5mgx ) ; Key ID = 26550`
	DNSKEY=40909/SEP is now in the chain-of-trust
	DS=40909/SHA-256 verifies DNSKEY=40909/SEP
	DS=40909/SHA-1 verifies DNSKEY=40909/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`comcast.net. 3600 IN RRSIG ( DNSKEY 5 2 3600 20240303144430 20231104104430 40909 comcast.net. QRZGphO9B4AHVhqM05e+kJ2QR3qQid3CGmhBbP+YsMuEQlzoL4S+3vQBUXXTcP98EYX8hBHfMqN4 2t3fXG+YHxKoJ3P6GUhq7KJCKq8ZKBjYD4uWgx7eDsl+o/bZwxUwDqFpszKCI1US8JCl7BaI6QPZ 1fzntK64Eef263FnO2EWI01iQCf2Nkzvx2JnPuZjxDAX7kAUhVIybLEjJuxcCPpnuPjxfx08KGq9 47fcdaHaBkdOscBQ1FTVsf30+l0iYAj2TsYE+69H3dDXuZLtcwBANbXqdEgb9MYZ8Rs9pxvR9vMQ l3uLVA8lOrAPK25xiidOUlkOaEcnk3TKTBd0JQ== )`
	`comcast.net. 3600 IN RRSIG ( DNSKEY 5 2 3600 20231219144430 20231202143930 26550 comcast.net. K/P8kgbFJvLXHXmpZgzSwa8fWRMdlwEz0fx4zo6uunsPBCoIVSQ4Sp2riBMYxslBxx2H252NS7DI /WNXRZ0gsjf9ivUOZrfRQIwzrEV1Sni4YTCh3wjnwfp+eEiE5A4mAP0mRMSsS6OnQd2zng+ZBspJ 1Mph0syJaXTteSBT64A= )`
	RRSIG=40909 and DNSKEY=40909/SEP verifies the DNSKEY RRset
	RRSIG=26550 and DNSKEY=26550 verifies the DNSKEY RRset
	DNSKEY=26550 is now in the chain-of-trust
	Query to dns105.comcast.net for comcast.net/A
	Received 227 bytes from 68.87.72.244
	;; Response received from 68.87.72.244 (227 octets) ;; HEADER SECTION ;; id = 29773 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; comcast.net. IN A ;; ANSWER SECTION (2 records) comcast.net. 300 IN A 96.99.227.0 comcast.net. 300 IN RRSIG ( A 5 2 300 20231219144430 20231202143930 26550 comcast.net. BTyqC5/4vDHJAUuMB6GY8da56In0MeXMJ5PNOUJKcxCId96t7uCU5tEKI6Y7y+brdbHF1KTVK6rG DUh/MZdqhsFy+92G8HFXLHXR/+LINZIAgEjsTTi9GaJMUaCz7WmXRG4WO1S1hY+4/ZCu9tqLhR2r +7ZLvS+uZxWlcpIiTT4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns105.comcast.net is authoritative for comcast.net
	Found RRSIG signed by comcast.net zone
	Query to dns102.comcast.net for comcast.net/SOA
	Received 282 bytes from 68.87.85.132
	;; Response received from 68.87.85.132 (282 octets) ;; HEADER SECTION ;; id = 19804 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; comcast.net. IN SOA ;; ANSWER SECTION (2 records) comcast.net. 7200 IN SOA ( dns101.comcast.net. domregtech.comcastonline.com. 2008254780 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 900 ;minimum ) comcast.net. 7200 IN RRSIG ( SOA 5 2 7200 20231219144430 20231202143930 26550 comcast.net. C6HNs8h+NO1LUvghL+nr3oyBxE6+VlZXi4YMucJJ1O0XX9x+p3868Fxce4BDn91VuIA8II2N2pUO Dzgr4UIABCW/nZkM8eBW6afmI+5DTg2w4kFCWeqbjCsYtnJ6TEQLH0SNmRBNlIefHMc7njSvwrUz tuQ8C8M2vPRorqoERBo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns101.comcast.net for comcast.net/SOA
	Received 282 bytes from 69.252.250.103
	;; Response received from 69.252.250.103 (282 octets) ;; HEADER SECTION ;; id = 12330 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; comcast.net. IN SOA ;; ANSWER SECTION (2 records) comcast.net. 7200 IN SOA ( dns101.comcast.net. domregtech.comcastonline.com. 2008254780 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 900 ;minimum ) comcast.net. 7200 IN RRSIG ( SOA 5 2 7200 20231219144430 20231202143930 26550 comcast.net. C6HNs8h+NO1LUvghL+nr3oyBxE6+VlZXi4YMucJJ1O0XX9x+p3868Fxce4BDn91VuIA8II2N2pUO Dzgr4UIABCW/nZkM8eBW6afmI+5DTg2w4kFCWeqbjCsYtnJ6TEQLH0SNmRBNlIefHMc7njSvwrUz tuQ8C8M2vPRorqoERBo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns104.comcast.net for comcast.net/SOA
	Received 282 bytes from 68.87.68.244
	;; Response received from 68.87.68.244 (282 octets) ;; HEADER SECTION ;; id = 41899 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; comcast.net. IN SOA ;; ANSWER SECTION (2 records) comcast.net. 7200 IN SOA ( dns101.comcast.net. domregtech.comcastonline.com. 2008254780 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 900 ;minimum ) comcast.net. 7200 IN RRSIG ( SOA 5 2 7200 20231219144430 20231202143930 26550 comcast.net. C6HNs8h+NO1LUvghL+nr3oyBxE6+VlZXi4YMucJJ1O0XX9x+p3868Fxce4BDn91VuIA8II2N2pUO Dzgr4UIABCW/nZkM8eBW6afmI+5DTg2w4kFCWeqbjCsYtnJ6TEQLH0SNmRBNlIefHMc7njSvwrUz tuQ8C8M2vPRorqoERBo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns103.comcast.net for comcast.net/SOA
	Received 282 bytes from 68.87.76.228
	;; Response received from 68.87.76.228 (282 octets) ;; HEADER SECTION ;; id = 47594 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; comcast.net. IN SOA ;; ANSWER SECTION (2 records) comcast.net. 7200 IN SOA ( dns101.comcast.net. domregtech.comcastonline.com. 2008254780 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 900 ;minimum ) comcast.net. 7200 IN RRSIG ( SOA 5 2 7200 20231219144430 20231202143930 26550 comcast.net. C6HNs8h+NO1LUvghL+nr3oyBxE6+VlZXi4YMucJJ1O0XX9x+p3868Fxce4BDn91VuIA8II2N2pUO Dzgr4UIABCW/nZkM8eBW6afmI+5DTg2w4kFCWeqbjCsYtnJ6TEQLH0SNmRBNlIefHMc7njSvwrUz tuQ8C8M2vPRorqoERBo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns105.comcast.net for comcast.net/A
	Received 227 bytes from 68.87.72.244
	;; Response received from 68.87.72.244 (227 octets) ;; HEADER SECTION ;; id = 41228 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; comcast.net. IN A ;; ANSWER SECTION (2 records) comcast.net. 300 IN A 96.99.227.0 comcast.net. 300 IN RRSIG ( A 5 2 300 20231219144430 20231202143930 26550 comcast.net. BTyqC5/4vDHJAUuMB6GY8da56In0MeXMJ5PNOUJKcxCId96t7uCU5tEKI6Y7y+brdbHF1KTVK6rG DUh/MZdqhsFy+92G8HFXLHXR/+LINZIAgEjsTTi9GaJMUaCz7WmXRG4WO1S1hY+4/ZCu9tqLhR2r +7ZLvS+uZxWlcpIiTT4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	comcast.net A RR has value 96.99.227.0
	Found 1 RRSIGs over A RRset
	`comcast.net. 300 IN RRSIG ( A 5 2 300 20231219144430 20231202143930 26550 comcast.net. BTyqC5/4vDHJAUuMB6GY8da56In0MeXMJ5PNOUJKcxCId96t7uCU5tEKI6Y7y+brdbHF1KTVK6rG DUh/MZdqhsFy+92G8HFXLHXR/+LINZIAgEjsTTi9GaJMUaCz7WmXRG4WO1S1hY+4/ZCu9tqLhR2r +7ZLvS+uZxWlcpIiTT4= )`
	RRSIG=26550 and DNSKEY=26550 verifies the A RRset

comcast.net

	Query to dns101.comcast.net for comcast.net/A
	Received 227 bytes from 69.252.250.103
	;; Response received from 69.252.250.103 (227 octets) ;; HEADER SECTION ;; id = 37314 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; comcast.net. IN A ;; ANSWER SECTION (2 records) comcast.net. 300 IN A 96.99.227.0 comcast.net. 300 IN RRSIG ( A 5 2 300 20231219144430 20231202143930 26550 comcast.net. BTyqC5/4vDHJAUuMB6GY8da56In0MeXMJ5PNOUJKcxCId96t7uCU5tEKI6Y7y+brdbHF1KTVK6rG DUh/MZdqhsFy+92G8HFXLHXR/+LINZIAgEjsTTi9GaJMUaCz7WmXRG4WO1S1hY+4/ZCu9tqLhR2r +7ZLvS+uZxWlcpIiTT4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns101.comcast.net is authoritative for comcast.net
	Found RRSIG signed by comcast.net zone
	Query to dns101.comcast.net for comcast.net/A
	Received 227 bytes from 69.252.250.103
	;; Response received from 69.252.250.103 (227 octets) ;; HEADER SECTION ;; id = 11395 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; comcast.net. IN A ;; ANSWER SECTION (2 records) comcast.net. 300 IN A 96.99.227.0 comcast.net. 300 IN RRSIG ( A 5 2 300 20231219144430 20231202143930 26550 comcast.net. BTyqC5/4vDHJAUuMB6GY8da56In0MeXMJ5PNOUJKcxCId96t7uCU5tEKI6Y7y+brdbHF1KTVK6rG DUh/MZdqhsFy+92G8HFXLHXR/+LINZIAgEjsTTi9GaJMUaCz7WmXRG4WO1S1hY+4/ZCu9tqLhR2r +7ZLvS+uZxWlcpIiTT4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	comcast.net A RR has value 96.99.227.0
	Found 1 RRSIGs over A RRset
	`comcast.net. 300 IN RRSIG ( A 5 2 300 20231219144430 20231202143930 26550 comcast.net. BTyqC5/4vDHJAUuMB6GY8da56In0MeXMJ5PNOUJKcxCId96t7uCU5tEKI6Y7y+brdbHF1KTVK6rG DUh/MZdqhsFy+92G8HFXLHXR/+LINZIAgEjsTTi9GaJMUaCz7WmXRG4WO1S1hY+4/ZCu9tqLhR2r +7ZLvS+uZxWlcpIiTT4= )`
	RRSIG=26550 and DNSKEY=26550 verifies the A RRset

comcast.net

	Query to dns104.comcast.net for comcast.net/A
	Received 227 bytes from 68.87.68.244
	;; Response received from 68.87.68.244 (227 octets) ;; HEADER SECTION ;; id = 8087 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; comcast.net. IN A ;; ANSWER SECTION (2 records) comcast.net. 300 IN A 96.99.227.0 comcast.net. 300 IN RRSIG ( A 5 2 300 20231219144430 20231202143930 26550 comcast.net. BTyqC5/4vDHJAUuMB6GY8da56In0MeXMJ5PNOUJKcxCId96t7uCU5tEKI6Y7y+brdbHF1KTVK6rG DUh/MZdqhsFy+92G8HFXLHXR/+LINZIAgEjsTTi9GaJMUaCz7WmXRG4WO1S1hY+4/ZCu9tqLhR2r +7ZLvS+uZxWlcpIiTT4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns104.comcast.net is authoritative for comcast.net
	Found RRSIG signed by comcast.net zone
	Query to dns104.comcast.net for comcast.net/A
	Received 227 bytes from 68.87.68.244
	;; Response received from 68.87.68.244 (227 octets) ;; HEADER SECTION ;; id = 23366 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; comcast.net. IN A ;; ANSWER SECTION (2 records) comcast.net. 300 IN A 96.99.227.0 comcast.net. 300 IN RRSIG ( A 5 2 300 20231219144430 20231202143930 26550 comcast.net. BTyqC5/4vDHJAUuMB6GY8da56In0MeXMJ5PNOUJKcxCId96t7uCU5tEKI6Y7y+brdbHF1KTVK6rG DUh/MZdqhsFy+92G8HFXLHXR/+LINZIAgEjsTTi9GaJMUaCz7WmXRG4WO1S1hY+4/ZCu9tqLhR2r +7ZLvS+uZxWlcpIiTT4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	comcast.net A RR has value 96.99.227.0
	Found 1 RRSIGs over A RRset
	`comcast.net. 300 IN RRSIG ( A 5 2 300 20231219144430 20231202143930 26550 comcast.net. BTyqC5/4vDHJAUuMB6GY8da56In0MeXMJ5PNOUJKcxCId96t7uCU5tEKI6Y7y+brdbHF1KTVK6rG DUh/MZdqhsFy+92G8HFXLHXR/+LINZIAgEjsTTi9GaJMUaCz7WmXRG4WO1S1hY+4/ZCu9tqLhR2r +7ZLvS+uZxWlcpIiTT4= )`
	RRSIG=26550 and DNSKEY=26550 verifies the A RRset

comcast.net

	Query to dns102.comcast.net for comcast.net/A
	Received 227 bytes from 68.87.85.132
	;; Response received from 68.87.85.132 (227 octets) ;; HEADER SECTION ;; id = 46590 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; comcast.net. IN A ;; ANSWER SECTION (2 records) comcast.net. 300 IN A 96.99.227.0 comcast.net. 300 IN RRSIG ( A 5 2 300 20231219144430 20231202143930 26550 comcast.net. BTyqC5/4vDHJAUuMB6GY8da56In0MeXMJ5PNOUJKcxCId96t7uCU5tEKI6Y7y+brdbHF1KTVK6rG DUh/MZdqhsFy+92G8HFXLHXR/+LINZIAgEjsTTi9GaJMUaCz7WmXRG4WO1S1hY+4/ZCu9tqLhR2r +7ZLvS+uZxWlcpIiTT4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns102.comcast.net is authoritative for comcast.net
	Found RRSIG signed by comcast.net zone
	Query to dns102.comcast.net for comcast.net/A
	Received 227 bytes from 68.87.85.132
	;; Response received from 68.87.85.132 (227 octets) ;; HEADER SECTION ;; id = 49279 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; comcast.net. IN A ;; ANSWER SECTION (2 records) comcast.net. 300 IN A 96.99.227.0 comcast.net. 300 IN RRSIG ( A 5 2 300 20231219144430 20231202143930 26550 comcast.net. BTyqC5/4vDHJAUuMB6GY8da56In0MeXMJ5PNOUJKcxCId96t7uCU5tEKI6Y7y+brdbHF1KTVK6rG DUh/MZdqhsFy+92G8HFXLHXR/+LINZIAgEjsTTi9GaJMUaCz7WmXRG4WO1S1hY+4/ZCu9tqLhR2r +7ZLvS+uZxWlcpIiTT4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	comcast.net A RR has value 96.99.227.0
	Found 1 RRSIGs over A RRset
	`comcast.net. 300 IN RRSIG ( A 5 2 300 20231219144430 20231202143930 26550 comcast.net. BTyqC5/4vDHJAUuMB6GY8da56In0MeXMJ5PNOUJKcxCId96t7uCU5tEKI6Y7y+brdbHF1KTVK6rG DUh/MZdqhsFy+92G8HFXLHXR/+LINZIAgEjsTTi9GaJMUaCz7WmXRG4WO1S1hY+4/ZCu9tqLhR2r +7ZLvS+uZxWlcpIiTT4= )`
	RRSIG=26550 and DNSKEY=26550 verifies the A RRset

comcast.net

	Query to dns103.comcast.net for comcast.net/A
	Received 227 bytes from 68.87.76.228
	;; Response received from 68.87.76.228 (227 octets) ;; HEADER SECTION ;; id = 17320 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; comcast.net. IN A ;; ANSWER SECTION (2 records) comcast.net. 300 IN A 96.99.227.0 comcast.net. 300 IN RRSIG ( A 5 2 300 20231219144430 20231202143930 26550 comcast.net. BTyqC5/4vDHJAUuMB6GY8da56In0MeXMJ5PNOUJKcxCId96t7uCU5tEKI6Y7y+brdbHF1KTVK6rG DUh/MZdqhsFy+92G8HFXLHXR/+LINZIAgEjsTTi9GaJMUaCz7WmXRG4WO1S1hY+4/ZCu9tqLhR2r +7ZLvS+uZxWlcpIiTT4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns103.comcast.net is authoritative for comcast.net
	Found RRSIG signed by comcast.net zone
	Query to dns103.comcast.net for comcast.net/A
	Received 227 bytes from 68.87.76.228
	;; Response received from 68.87.76.228 (227 octets) ;; HEADER SECTION ;; id = 13122 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; comcast.net. IN A ;; ANSWER SECTION (2 records) comcast.net. 300 IN A 96.99.227.0 comcast.net. 300 IN RRSIG ( A 5 2 300 20231219144430 20231202143930 26550 comcast.net. BTyqC5/4vDHJAUuMB6GY8da56In0MeXMJ5PNOUJKcxCId96t7uCU5tEKI6Y7y+brdbHF1KTVK6rG DUh/MZdqhsFy+92G8HFXLHXR/+LINZIAgEjsTTi9GaJMUaCz7WmXRG4WO1S1hY+4/ZCu9tqLhR2r +7ZLvS+uZxWlcpIiTT4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	comcast.net A RR has value 96.99.227.0
	Found 1 RRSIGs over A RRset
	`comcast.net. 300 IN RRSIG ( A 5 2 300 20231219144430 20231202143930 26550 comcast.net. BTyqC5/4vDHJAUuMB6GY8da56In0MeXMJ5PNOUJKcxCId96t7uCU5tEKI6Y7y+brdbHF1KTVK6rG DUh/MZdqhsFy+92G8HFXLHXR/+LINZIAgEjsTTi9GaJMUaCz7WmXRG4WO1S1hY+4/ZCu9tqLhR2r +7ZLvS+uZxWlcpIiTT4= )`
	RRSIG=26550 and DNSKEY=26550 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test comcast.net at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: