DNSSEC Analyzer - comcast.net

Domain Name:

Time: 2023-06-08 16:02:00 UTC, NTP stratum 4

Analyzing DNSSEC problems for comcast.net

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to h.root-servers.net for ./DNSKEY
	Received 864 bytes from 198.97.190.53
	;; Response received from 198.97.190.53 (864 octets) ;; HEADER SECTION ;; id = 49461 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbF1LAxEQPtClEQno48k6u7JjCOfVfwdENOxQUrX0JbpN5DnKGMAKIfdiWa5oDeKQ3OoQ58y CC8vjtaaGFDgpJxoLwqzhBYHPGFgins5HIERcCQPGAJKWu/ku4XLh+Fu7UyBubDCelxKTbnj26Ew bochltRqGIE8hbwSXEzRNo4g+NXkaRMq2FFbaBtEE82yTmZUgFRYAFUvfGTPWblyZGtkepVuHyNb 0w/u24dpsz+uyCZZR04cHfRrWOKvqD3lDOwC4+sqd6f7F841R0N2tqSh/WDUZzWdvPBaBOz0FWFL b9porIeZ3Jm08tAMHa+3SGRXfK4RAmxVCmIQQypGabE= ) ; Key ID = 60955 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20230621000000 20230531000000 20326 . bC9VON7LUBuG73L7Qqabp/zJnNzehkDqnd9LFtmz7zoMXKsxuZLh8a/78/MpcXsvjoSOZ55D+CA8 k8s+n3mKo7zWv79KiapARBRTQqDMavu/Pa9zrvzNp+sa3tZ/9GFyxj28xdwA9z7ziDPW+zst2UEs LHCquxuG83V89rPRq+U7UvO7CjEjjTyYSGitfrR9jA0tqsF1RLa8QSILegUTPBp5xv7hBHabdwzR rTHCOMFkCGlzhB0e3Hjaur2XxGSI/r5p/FLD4NB/0n7L2NHjMvYQOqDvyWNtuaZ+cmeTqV5FuJmx ls0+5us3MnTG/ZPWTZFa5iye45ohMBJ6sEFfgA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbF1LAxEQPtClEQno48k6u7JjCOfVfwdENOxQUrX0JbpN5DnKGMAKIfdiWa5oDeKQ3OoQ58y CC8vjtaaGFDgpJxoLwqzhBYHPGFgins5HIERcCQPGAJKWu/ku4XLh+Fu7UyBubDCelxKTbnj26Ew bochltRqGIE8hbwSXEzRNo4g+NXkaRMq2FFbaBtEE82yTmZUgFRYAFUvfGTPWblyZGtkepVuHyNb 0w/u24dpsz+uyCZZR04cHfRrWOKvqD3lDOwC4+sqd6f7F841R0N2tqSh/WDUZzWdvPBaBOz0FWFL b9porIeZ3Jm08tAMHa+3SGRXfK4RAmxVCmIQQypGabE= ) ; Key ID = 60955`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20230621000000 20230531000000 20326 . bC9VON7LUBuG73L7Qqabp/zJnNzehkDqnd9LFtmz7zoMXKsxuZLh8a/78/MpcXsvjoSOZ55D+CA8 k8s+n3mKo7zWv79KiapARBRTQqDMavu/Pa9zrvzNp+sa3tZ/9GFyxj28xdwA9z7ziDPW+zst2UEs LHCquxuG83V89rPRq+U7UvO7CjEjjTyYSGitfrR9jA0tqsF1RLa8QSILegUTPBp5xv7hBHabdwzR rTHCOMFkCGlzhB0e3Hjaur2XxGSI/r5p/FLD4NB/0n7L2NHjMvYQOqDvyWNtuaZ+cmeTqV5FuJmx ls0+5us3MnTG/ZPWTZFa5iye45ohMBJ6sEFfgA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=60955 is now in the chain-of-trust
	Query to d.root-servers.net for comcast.net/A
	Received 1168 bytes from 199.7.91.13
	;; Response received from 199.7.91.13 (1168 octets) ;; HEADER SECTION ;; id = 43393 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; comcast.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20230621050000 20230608040000 60955 . nnO7wBJ0dv7HT9quMJu4/+/Ddo16vzZvTeWzrLd+5fm/YoqH5jbskYHnCt/V/Y/jzzhjE5N9RIOZ 21POx8YQbI+8T9hbeKnNi3iggiFLOsYhtJlVPB6OItUjJSQa1Sr/9QX4S7i604Z5olEtdOzWM67s yBtIPRLxkZbfBuRseFgeRTKKnCDZyl9Pe7EKwkvxQzu9rcbas/4QP7n01ysdxFY5SOGCZGUE57hU 7wyomJ7ccR1QVNhgoS0b18prM2o1JY7ba8A7TdwOGEtwQdwI9hvSxgT8LowA2jDxHgX38Y3QJ0Hz G1AGUxINzoRjb9YtSUrr/o9QyqIkoAsse4BmrQ== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 m.gtld-servers.net. 172800 IN A 192.55.83.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Query to d.root-servers.net for net/DNSKEY
	Received 1160 bytes from 199.7.91.13
	;; Response received from 199.7.91.13 (1160 octets) ;; HEADER SECTION ;; id = 51 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20230621050000 20230608040000 60955 . nnO7wBJ0dv7HT9quMJu4/+/Ddo16vzZvTeWzrLd+5fm/YoqH5jbskYHnCt/V/Y/jzzhjE5N9RIOZ 21POx8YQbI+8T9hbeKnNi3iggiFLOsYhtJlVPB6OItUjJSQa1Sr/9QX4S7i604Z5olEtdOzWM67s yBtIPRLxkZbfBuRseFgeRTKKnCDZyl9Pe7EKwkvxQzu9rcbas/4QP7n01ysdxFY5SOGCZGUE57hU 7wyomJ7ccR1QVNhgoS0b18prM2o1JY7ba8A7TdwOGEtwQdwI9hvSxgT8LowA2jDxHgX38Y3QJ0Hz G1AGUxINzoRjb9YtSUrr/o9QyqIkoAsse4BmrQ== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 m.gtld-servers.net. 172800 IN A 192.55.83.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found child zone net

net

	Checking DS between . and net
	Query to e.root-servers.net for net/DS
	Received 367 bytes from 192.203.230.10
	;; Response received from 192.203.230.10 (367 octets) ;; HEADER SECTION ;; id = 39013 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DS ;; ANSWER SECTION (2 records) net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20230621050000 20230608040000 60955 . nnO7wBJ0dv7HT9quMJu4/+/Ddo16vzZvTeWzrLd+5fm/YoqH5jbskYHnCt/V/Y/jzzhjE5N9RIOZ 21POx8YQbI+8T9hbeKnNi3iggiFLOsYhtJlVPB6OItUjJSQa1Sr/9QX4S7i604Z5olEtdOzWM67s yBtIPRLxkZbfBuRseFgeRTKKnCDZyl9Pe7EKwkvxQzu9rcbas/4QP7n01ysdxFY5SOGCZGUE57hU 7wyomJ7ccR1QVNhgoS0b18prM2o1JY7ba8A7TdwOGEtwQdwI9hvSxgT8LowA2jDxHgX38Y3QJ0Hz G1AGUxINzoRjb9YtSUrr/o9QyqIkoAsse4BmrQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 1 DS records for net in the . zone
	DS=35886/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`net. 86400 IN RRSIG ( DS 8 1 86400 20230621050000 20230608040000 60955 . nnO7wBJ0dv7HT9quMJu4/+/Ddo16vzZvTeWzrLd+5fm/YoqH5jbskYHnCt/V/Y/jzzhjE5N9RIOZ 21POx8YQbI+8T9hbeKnNi3iggiFLOsYhtJlVPB6OItUjJSQa1Sr/9QX4S7i604Z5olEtdOzWM67s yBtIPRLxkZbfBuRseFgeRTKKnCDZyl9Pe7EKwkvxQzu9rcbas/4QP7n01ysdxFY5SOGCZGUE57hU 7wyomJ7ccR1QVNhgoS0b18prM2o1JY7ba8A7TdwOGEtwQdwI9hvSxgT8LowA2jDxHgX38Y3QJ0Hz G1AGUxINzoRjb9YtSUrr/o9QyqIkoAsse4BmrQ== )`
	RRSIG=60955 and DNSKEY=60955 verifies the DS RRset
	DS=35886/SHA-256 is now in the chain-of-trust
	`net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee )`
	Query to a.gtld-servers.net for net/DNSKEY
	Received 775 bytes from 192.5.6.30
	;; Response received from 192.5.6.30 (775 octets) ;; HEADER SECTION ;; id = 42626 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (3 records) net. 86400 IN DNSKEY ( 257 3 8 AQOYBnzqWXIEj6mlgXg4LWC0HP2n8eK8XqgHlmJ/69iuIHsa1TrHDG6TcOra/pyeGKwH0nKZhTmX SuUFGh9BCNiwVDuyyb6OBGy2Nte9Kr8NwWg4q+zhSoOf4D+gC9dEzg0yFdwT0DKEvmNPt0K4jbQD S4Yimb+uPKuF6yieWWrPYYCrv8C9KC8JMze2uT6NuWBfsl2fDUoV4l65qMww06D7n+p7RbdwWkAZ 0fA63mXVXBZF6kpDtsYD7SUB9jhhfLQE/r85bvg3FaSs5Wi2BaqN06SzGWI1DHu7axthIOeHwg00 zxlhTpoYCH0ldoQz+S65zWYi/fRJiyLSBb6JZOvn ) ; Key ID = 35886 net. 86400 IN DNSKEY ( 256 3 8 AQOz5FEr0vaIuMtw+2zifoZftVKKYRg8FFUUtJnMH6zWpjwHFriry/RyUCt6sNkQpPpTWjErRkuc LIN03AhLdFuqIRuUnIgZsxHv7kx/+eNX5sSDCVG06+5GoewVwzlNr9lewP0TZYsnVvWQ9nJfF+Ob Bv6cI92FUAy4qKZadPPQg6ZLKOq4w5kLTcJejUloYrOiPGNMvCkiI7E+ZfjUp7TJ ) ; Key ID = 27554 net. 86400 IN RRSIG ( DNSKEY 8 1 86400 20230613162830 20230529162330 35886 net. DUJ4Q4bhAzQQHujpv1uh7fgib2eVWiKIOWdM41wf47lOCJBLxPbXDFlf5/1EFr2ZGWcBAHDggyhw UqJV7SIXC4I+dJKvVllRHFjJQ/AoxBp+nEdWYDJ1J81cu9hG75SN7+H14/SaqZCkzyR8t1GSlcs2 FqtaoJg7NZIJPQxAeeOjUaFBq0v34bUeL0o7T9dWHBp/n6xfvFSF9go4kD5YIMU7Rw0JHgilXHtu r0UjKNX40cml11+PJTk7cqd65pl9AE+BJ1sOQRF4PFA+xpdcAc4aas6d/rAWSwoUjOEC447+fpYd QjFb1EL/tCzeeJSd9Rl2GaSs0d0mC2ssJd8bVA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for net
	`net. 86400 IN DNSKEY ( 257 3 8 AQOYBnzqWXIEj6mlgXg4LWC0HP2n8eK8XqgHlmJ/69iuIHsa1TrHDG6TcOra/pyeGKwH0nKZhTmX SuUFGh9BCNiwVDuyyb6OBGy2Nte9Kr8NwWg4q+zhSoOf4D+gC9dEzg0yFdwT0DKEvmNPt0K4jbQD S4Yimb+uPKuF6yieWWrPYYCrv8C9KC8JMze2uT6NuWBfsl2fDUoV4l65qMww06D7n+p7RbdwWkAZ 0fA63mXVXBZF6kpDtsYD7SUB9jhhfLQE/r85bvg3FaSs5Wi2BaqN06SzGWI1DHu7axthIOeHwg00 zxlhTpoYCH0ldoQz+S65zWYi/fRJiyLSBb6JZOvn ) ; Key ID = 35886`
	`net. 86400 IN DNSKEY ( 256 3 8 AQOz5FEr0vaIuMtw+2zifoZftVKKYRg8FFUUtJnMH6zWpjwHFriry/RyUCt6sNkQpPpTWjErRkuc LIN03AhLdFuqIRuUnIgZsxHv7kx/+eNX5sSDCVG06+5GoewVwzlNr9lewP0TZYsnVvWQ9nJfF+Ob Bv6cI92FUAy4qKZadPPQg6ZLKOq4w5kLTcJejUloYrOiPGNMvCkiI7E+ZfjUp7TJ ) ; Key ID = 27554`
	DNSKEY=35886/SEP is now in the chain-of-trust
	DS=35886/SHA-256 verifies DNSKEY=35886/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`net. 86400 IN RRSIG ( DNSKEY 8 1 86400 20230613162830 20230529162330 35886 net. DUJ4Q4bhAzQQHujpv1uh7fgib2eVWiKIOWdM41wf47lOCJBLxPbXDFlf5/1EFr2ZGWcBAHDggyhw UqJV7SIXC4I+dJKvVllRHFjJQ/AoxBp+nEdWYDJ1J81cu9hG75SN7+H14/SaqZCkzyR8t1GSlcs2 FqtaoJg7NZIJPQxAeeOjUaFBq0v34bUeL0o7T9dWHBp/n6xfvFSF9go4kD5YIMU7Rw0JHgilXHtu r0UjKNX40cml11+PJTk7cqd65pl9AE+BJ1sOQRF4PFA+xpdcAc4aas6d/rAWSwoUjOEC447+fpYd QjFb1EL/tCzeeJSd9Rl2GaSs0d0mC2ssJd8bVA== )`
	RRSIG=35886 and DNSKEY=35886/SEP verifies the DNSKEY RRset
	DNSKEY=27554 is now in the chain-of-trust
	Query to e.gtld-servers.net for comcast.net/A
	Received 644 bytes from 192.12.94.30
	;; Response received from 192.12.94.30 (644 octets) ;; HEADER SECTION ;; id = 11951 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; comcast.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) comcast.net. 172800 IN NS dns101.comcast.net. comcast.net. 172800 IN NS dns102.comcast.net. comcast.net. 172800 IN NS dns103.comcast.net. comcast.net. 172800 IN NS dns104.comcast.net. comcast.net. 172800 IN NS dns105.comcast.net. comcast.net. 86400 IN DS ( 40909 5 2 30c0f50e68dcc9a2f279a994c07cf22ced97aadf44c2b1fe38a1b32ba1a34174 ) comcast.net. 86400 IN DS 40909 5 1 ddc19733884ee533b35b4b57717bea9b0ef2c4d1 comcast.net. 86400 IN RRSIG ( DS 8 2 86400 20230615065316 20230608054316 27554 net. NQO1DVeF1CXBDOG5xMICkRGDeM5ce8gocUL/Roel37VSYsn67FOURuxNszVUrXWlidVxeTgSEFQI WLUwcPq34WO2NqsdH4vVwedLG9/xt3rSJ2V9/BPdsNOytnT4SKBERNOzKJ1QSCU1+SZMfN0XUOcm gfu0CtdevJhRVVSj/3hFyhv/vIe3JJGyTSF3TaqWofTNloDbkG2DPQSU/CnxoA== ) ;; ADDITIONAL SECTION (11 records) dns101.comcast.net. 172800 IN AAAA 2001:558:fe23:8:69:252:250:103 dns101.comcast.net. 172800 IN A 69.252.250.103 dns102.comcast.net. 172800 IN AAAA 2001:558:1004:7:68:87:85:132 dns102.comcast.net. 172800 IN A 68.87.85.132 dns103.comcast.net. 172800 IN AAAA 2001:558:1014:c:68:87:76:228 dns103.comcast.net. 172800 IN A 68.87.76.228 dns104.comcast.net. 172800 IN AAAA 2001:558:100a:5:68:87:68:244 dns104.comcast.net. 172800 IN A 68.87.68.244 dns105.comcast.net. 172800 IN AAAA 2001:558:100e:5:68:87:72:244 dns105.comcast.net. 172800 IN A 68.87.72.244 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.gtld-servers.net for comcast.net/DNSKEY
	Received 644 bytes from 192.33.14.30
	;; Response received from 192.33.14.30 (644 octets) ;; HEADER SECTION ;; id = 44975 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; comcast.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) comcast.net. 172800 IN NS dns101.comcast.net. comcast.net. 172800 IN NS dns102.comcast.net. comcast.net. 172800 IN NS dns103.comcast.net. comcast.net. 172800 IN NS dns104.comcast.net. comcast.net. 172800 IN NS dns105.comcast.net. comcast.net. 86400 IN DS ( 40909 5 2 30c0f50e68dcc9a2f279a994c07cf22ced97aadf44c2b1fe38a1b32ba1a34174 ) comcast.net. 86400 IN DS 40909 5 1 ddc19733884ee533b35b4b57717bea9b0ef2c4d1 comcast.net. 86400 IN RRSIG ( DS 8 2 86400 20230615065316 20230608054316 27554 net. NQO1DVeF1CXBDOG5xMICkRGDeM5ce8gocUL/Roel37VSYsn67FOURuxNszVUrXWlidVxeTgSEFQI WLUwcPq34WO2NqsdH4vVwedLG9/xt3rSJ2V9/BPdsNOytnT4SKBERNOzKJ1QSCU1+SZMfN0XUOcm gfu0CtdevJhRVVSj/3hFyhv/vIe3JJGyTSF3TaqWofTNloDbkG2DPQSU/CnxoA== ) ;; ADDITIONAL SECTION (11 records) dns101.comcast.net. 172800 IN AAAA 2001:558:fe23:8:69:252:250:103 dns101.comcast.net. 172800 IN A 69.252.250.103 dns102.comcast.net. 172800 IN AAAA 2001:558:1004:7:68:87:85:132 dns102.comcast.net. 172800 IN A 68.87.85.132 dns103.comcast.net. 172800 IN AAAA 2001:558:1014:c:68:87:76:228 dns103.comcast.net. 172800 IN A 68.87.76.228 dns104.comcast.net. 172800 IN AAAA 2001:558:100a:5:68:87:68:244 dns104.comcast.net. 172800 IN A 68.87.68.244 dns105.comcast.net. 172800 IN AAAA 2001:558:100e:5:68:87:72:244 dns105.comcast.net. 172800 IN A 68.87.72.244 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone comcast.net

comcast.net

	Checking DS between net and comcast.net
	Query to h.gtld-servers.net for comcast.net/DS
	Received 1191 bytes from 192.54.112.30
	;; Response received from 192.54.112.30 (1191 octets) ;; HEADER SECTION ;; id = 36275 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 14 arcount = 22 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; comcast.net. IN DS ;; ANSWER SECTION (3 records) comcast.net. 86400 IN DS ( 40909 5 2 30c0f50e68dcc9a2f279a994c07cf22ced97aadf44c2b1fe38a1b32ba1a34174 ) comcast.net. 86400 IN DS 40909 5 1 ddc19733884ee533b35b4b57717bea9b0ef2c4d1 comcast.net. 86400 IN RRSIG ( DS 8 2 86400 20230615065316 20230608054316 27554 net. NQO1DVeF1CXBDOG5xMICkRGDeM5ce8gocUL/Roel37VSYsn67FOURuxNszVUrXWlidVxeTgSEFQI WLUwcPq34WO2NqsdH4vVwedLG9/xt3rSJ2V9/BPdsNOytnT4SKBERNOzKJ1QSCU1+SZMfN0XUOcm gfu0CtdevJhRVVSj/3hFyhv/vIe3JJGyTSF3TaqWofTNloDbkG2DPQSU/CnxoA== ) ;; AUTHORITY SECTION (14 records) net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN RRSIG ( NS 8 1 172800 20230613070620 20230606055620 27554 net. bbu3Tocf3LbNL+ihW/wPX5zpbJc+q5mrSKWq8MJdEzfvi0YLIey1lVTrhKoymhkOO7EjkzRW+i/v w1QyhyfUeVPcM951M5PPKPn/4C8dlZ/5Q7c07rz+0D3XD9yx0EpI5Y+8w3anpNvX0KuToGIbJoYa Q35DNI6i0nZlUv59sUKj/KQTuY9M4m/gQH8J+fn4V918WIQRx29oNGci+h38KQ== ) ;; ADDITIONAL SECTION (22 records) j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for comcast.net in the net zone
	DS=40909/SHA-256 has algorithm RSASHA1
	DS=40909/SHA-1 has algorithm RSASHA1
	Found 1 RRSIGs over DS RRset
	`comcast.net. 86400 IN RRSIG ( DS 8 2 86400 20230615065316 20230608054316 27554 net. NQO1DVeF1CXBDOG5xMICkRGDeM5ce8gocUL/Roel37VSYsn67FOURuxNszVUrXWlidVxeTgSEFQI WLUwcPq34WO2NqsdH4vVwedLG9/xt3rSJ2V9/BPdsNOytnT4SKBERNOzKJ1QSCU1+SZMfN0XUOcm gfu0CtdevJhRVVSj/3hFyhv/vIe3JJGyTSF3TaqWofTNloDbkG2DPQSU/CnxoA== )`
	RRSIG=27554 and DNSKEY=27554 verifies the DS RRset
	DS=40909/SHA-256 is now in the chain-of-trust
	`comcast.net. 86400 IN DS ( 40909 5 2 30c0f50e68dcc9a2f279a994c07cf22ced97aadf44c2b1fe38a1b32ba1a34174 )`
	`comcast.net. 86400 IN DS 40909 5 1 ddc19733884ee533b35b4b57717bea9b0ef2c4d1`
	Query to dns102.comcast.net for comcast.net/DNSKEY
	Received 934 bytes from 68.87.85.132
	;; Response received from 68.87.85.132 (934 octets) ;; HEADER SECTION ;; id = 34530 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; comcast.net. IN DNSKEY ;; ANSWER SECTION (4 records) comcast.net. 3600 IN DNSKEY ( 256 3 5 AwEAAbEO9O0+NybzFSgdaG+ExZkMKYpZc9w5VdEJ9vUABIjFftKjd/l8Mo53OIrU7XC81WTsSI8R QqaQqccbWDoP3afbdLR0xJw6auIEsDo6kJ7ZaSoFCAeSlMTPvdHAlcFbHL1zF4/HzaaoOL3psKfe Me2/2j7saEOKQlxIPa5R5mgx ) ; Key ID = 26550 comcast.net. 3600 IN DNSKEY ( 257 3 5 AwEAAcdTwXuKIERUoEaOHCEafPCgHW8Dq8OftDPD1sZCwCUH7VjfSXQpgvkYUG+6FN9INP2uHybz Re/m4EG8HD8zkKtaIBzrYZIcbchuXKZ5biwkj1hIMTGlDG0jD0j3rjiJkk3dDkygKvV8FswEJo9X 7+CWbtf4WKgXqnd/2JcsliDK4XujFsw27eWpXlHZt5SuQb0N1jmMazESXwYJYtGXce5vi4pBhlE9 OUgCQlkxPxedvaelT5hKxYP3lIH4vjBrKMzQE7OzoB4lOsJVhbvDF1VZUzC6n42w8WWvjBDY3Til OvsC9Je7DOD3yQlgcmiQ80PM4zknfQJ76APxYrrowTE= ) ; Key ID = 40909 comcast.net. 3600 IN RRSIG ( DNSKEY 5 2 3600 20231002144431 20230604104431 40909 comcast.net. EFAjLd5Y1TNOw/v7ONwIO6ZRlt17snbjooUSn9eNBCzkK3KoLitp2m/lQcX0Znj7JqOTwM4aYXbf b4FjBYEHaQu/Up8zsVGF44ngYxVpqEkKojyc3hX9EMs7iswsxj+c3YuQYa4Ih01kum1gmdcfMtIX HF5di0DLdhrTSCCrqZcCP8iTuOBbjtRtgaKSuQO+RCnbBALNFWGSoj4aolhReLdWdupzU2bfhLef CQsL8ZQyjKWDhtOyKdlZzXRXMItl/kbG21CD7VWPnc4B4FShvBxLhwWdUqOOgrj73vIoEQiF7uoO nGdHGL/Olz9lV4vPibMKnups839fghp/9H6G7Q== ) comcast.net. 3600 IN RRSIG ( DNSKEY 5 2 3600 20230621144431 20230604143931 26550 comcast.net. FkJywoQH7i9wsqWAP4MOszt22g6a2jc9vyJ6upIXjg9wsgXNCdH9SBEWWb679BLJ5phXIzPr45SN VXpMly+1Ys3YNrnoCgn9i/EVvg6iLJMi/zrc9nK7jj1G9XoNPSzWEDS2VNPRsLmxXLMopO0YYJan 6iNrsnqwi7WTIN/x6lM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for comcast.net
	`comcast.net. 3600 IN DNSKEY ( 256 3 5 AwEAAbEO9O0+NybzFSgdaG+ExZkMKYpZc9w5VdEJ9vUABIjFftKjd/l8Mo53OIrU7XC81WTsSI8R QqaQqccbWDoP3afbdLR0xJw6auIEsDo6kJ7ZaSoFCAeSlMTPvdHAlcFbHL1zF4/HzaaoOL3psKfe Me2/2j7saEOKQlxIPa5R5mgx ) ; Key ID = 26550`
	`comcast.net. 3600 IN DNSKEY ( 257 3 5 AwEAAcdTwXuKIERUoEaOHCEafPCgHW8Dq8OftDPD1sZCwCUH7VjfSXQpgvkYUG+6FN9INP2uHybz Re/m4EG8HD8zkKtaIBzrYZIcbchuXKZ5biwkj1hIMTGlDG0jD0j3rjiJkk3dDkygKvV8FswEJo9X 7+CWbtf4WKgXqnd/2JcsliDK4XujFsw27eWpXlHZt5SuQb0N1jmMazESXwYJYtGXce5vi4pBhlE9 OUgCQlkxPxedvaelT5hKxYP3lIH4vjBrKMzQE7OzoB4lOsJVhbvDF1VZUzC6n42w8WWvjBDY3Til OvsC9Je7DOD3yQlgcmiQ80PM4zknfQJ76APxYrrowTE= ) ; Key ID = 40909`
	DNSKEY=40909/SEP is now in the chain-of-trust
	DS=40909/SHA-256 verifies DNSKEY=40909/SEP
	DS=40909/SHA-1 verifies DNSKEY=40909/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`comcast.net. 3600 IN RRSIG ( DNSKEY 5 2 3600 20231002144431 20230604104431 40909 comcast.net. EFAjLd5Y1TNOw/v7ONwIO6ZRlt17snbjooUSn9eNBCzkK3KoLitp2m/lQcX0Znj7JqOTwM4aYXbf b4FjBYEHaQu/Up8zsVGF44ngYxVpqEkKojyc3hX9EMs7iswsxj+c3YuQYa4Ih01kum1gmdcfMtIX HF5di0DLdhrTSCCrqZcCP8iTuOBbjtRtgaKSuQO+RCnbBALNFWGSoj4aolhReLdWdupzU2bfhLef CQsL8ZQyjKWDhtOyKdlZzXRXMItl/kbG21CD7VWPnc4B4FShvBxLhwWdUqOOgrj73vIoEQiF7uoO nGdHGL/Olz9lV4vPibMKnups839fghp/9H6G7Q== )`
	`comcast.net. 3600 IN RRSIG ( DNSKEY 5 2 3600 20230621144431 20230604143931 26550 comcast.net. FkJywoQH7i9wsqWAP4MOszt22g6a2jc9vyJ6upIXjg9wsgXNCdH9SBEWWb679BLJ5phXIzPr45SN VXpMly+1Ys3YNrnoCgn9i/EVvg6iLJMi/zrc9nK7jj1G9XoNPSzWEDS2VNPRsLmxXLMopO0YYJan 6iNrsnqwi7WTIN/x6lM= )`
	RRSIG=40909 and DNSKEY=40909/SEP verifies the DNSKEY RRset
	RRSIG=26550 and DNSKEY=26550 verifies the DNSKEY RRset
	DNSKEY=26550 is now in the chain-of-trust
	Query to dns105.comcast.net for comcast.net/A
	Received 227 bytes from 68.87.72.244
	;; Response received from 68.87.72.244 (227 octets) ;; HEADER SECTION ;; id = 60609 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; comcast.net. IN A ;; ANSWER SECTION (2 records) comcast.net. 300 IN A 96.99.227.0 comcast.net. 300 IN RRSIG ( A 5 2 300 20230621144431 20230604143931 26550 comcast.net. Px2CSgwjbX2oNbvhDftkPsPBoFuLu8ATx1391/eYgZiQ/CfAvQKuEfmo2B8ntZ0AI5/ISypYnjJa h5RKYrvQ7eDPOIxTmQfMxTfFvpEECzQVFLFMVubrx8iOZrC+RVlMjDhh6ICizFt1P3A0YcfUj1cZ lVQ4PM96ZfJnxyCUteo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns105.comcast.net is authoritative for comcast.net
	Found RRSIG signed by comcast.net zone
	Query to dns102.comcast.net for comcast.net/SOA
	Received 282 bytes from 68.87.85.132
	;; Response received from 68.87.85.132 (282 octets) ;; HEADER SECTION ;; id = 38861 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; comcast.net. IN SOA ;; ANSWER SECTION (2 records) comcast.net. 7200 IN SOA ( dns101.comcast.net. domregtech.comcastonline.com. 2008253972 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 900 ;minimum ) comcast.net. 7200 IN RRSIG ( SOA 5 2 7200 20230621144431 20230604143931 26550 comcast.net. ktzqHRL3kvk0SJXhssNIrrQ+BIktDPirqckoGJNdmLAklaMPibf0Q5tfN9jAYCXvBIu96lLITB6H UWP60oEEK9hU1/kn7WDvC2BH4PnqWTKTZna5M38egYbwXR9HDX7EJg9IOEpzIjaDMDndkpfqp6tS 4HTH2HB3VN/uVeGiZG0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns101.comcast.net for comcast.net/SOA
	Received 282 bytes from 69.252.250.103
	;; Response received from 69.252.250.103 (282 octets) ;; HEADER SECTION ;; id = 10639 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; comcast.net. IN SOA ;; ANSWER SECTION (2 records) comcast.net. 7200 IN SOA ( dns101.comcast.net. domregtech.comcastonline.com. 2008253972 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 900 ;minimum ) comcast.net. 7200 IN RRSIG ( SOA 5 2 7200 20230621144431 20230604143931 26550 comcast.net. ktzqHRL3kvk0SJXhssNIrrQ+BIktDPirqckoGJNdmLAklaMPibf0Q5tfN9jAYCXvBIu96lLITB6H UWP60oEEK9hU1/kn7WDvC2BH4PnqWTKTZna5M38egYbwXR9HDX7EJg9IOEpzIjaDMDndkpfqp6tS 4HTH2HB3VN/uVeGiZG0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns104.comcast.net for comcast.net/SOA
	Received 282 bytes from 68.87.68.244
	;; Response received from 68.87.68.244 (282 octets) ;; HEADER SECTION ;; id = 35060 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; comcast.net. IN SOA ;; ANSWER SECTION (2 records) comcast.net. 7200 IN SOA ( dns101.comcast.net. domregtech.comcastonline.com. 2008253972 ;serial 7200 ;refresh 3600 ;retry 1209600 ;expire 900 ;minimum ) comcast.net. 7200 IN RRSIG ( SOA 5 2 7200 20230621144431 20230604143931 26550 comcast.net. ktzqHRL3kvk0SJXhssNIrrQ+BIktDPirqckoGJNdmLAklaMPibf0Q5tfN9jAYCXvBIu96lLITB6H UWP60oEEK9hU1/kn7WDvC2BH4PnqWTKTZna5M38egYbwXR9HDX7EJg9IOEpzIjaDMDndkpfqp6tS 4HTH2HB3VN/uVeGiZG0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns103.comcast.net for comcast.net/SOA
	Timeout querying dns103.comcast.net/68.87.76.228 for comcast.net/SOA
	All Queries to dns103.comcast.net for comcast.net/SOA timed out or failed
	Query to dns105.comcast.net for comcast.net/A
	Received 227 bytes from 68.87.72.244
	;; Response received from 68.87.72.244 (227 octets) ;; HEADER SECTION ;; id = 29288 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; comcast.net. IN A ;; ANSWER SECTION (2 records) comcast.net. 300 IN A 96.99.227.0 comcast.net. 300 IN RRSIG ( A 5 2 300 20230621144431 20230604143931 26550 comcast.net. Px2CSgwjbX2oNbvhDftkPsPBoFuLu8ATx1391/eYgZiQ/CfAvQKuEfmo2B8ntZ0AI5/ISypYnjJa h5RKYrvQ7eDPOIxTmQfMxTfFvpEECzQVFLFMVubrx8iOZrC+RVlMjDhh6ICizFt1P3A0YcfUj1cZ lVQ4PM96ZfJnxyCUteo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	comcast.net A RR has value 96.99.227.0
	Found 1 RRSIGs over A RRset
	`comcast.net. 300 IN RRSIG ( A 5 2 300 20230621144431 20230604143931 26550 comcast.net. Px2CSgwjbX2oNbvhDftkPsPBoFuLu8ATx1391/eYgZiQ/CfAvQKuEfmo2B8ntZ0AI5/ISypYnjJa h5RKYrvQ7eDPOIxTmQfMxTfFvpEECzQVFLFMVubrx8iOZrC+RVlMjDhh6ICizFt1P3A0YcfUj1cZ lVQ4PM96ZfJnxyCUteo= )`
	RRSIG=26550 and DNSKEY=26550 verifies the A RRset

comcast.net

	Query to dns102.comcast.net for comcast.net/A
	Received 227 bytes from 68.87.85.132
	;; Response received from 68.87.85.132 (227 octets) ;; HEADER SECTION ;; id = 33997 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; comcast.net. IN A ;; ANSWER SECTION (2 records) comcast.net. 300 IN A 96.99.227.0 comcast.net. 300 IN RRSIG ( A 5 2 300 20230621144431 20230604143931 26550 comcast.net. Px2CSgwjbX2oNbvhDftkPsPBoFuLu8ATx1391/eYgZiQ/CfAvQKuEfmo2B8ntZ0AI5/ISypYnjJa h5RKYrvQ7eDPOIxTmQfMxTfFvpEECzQVFLFMVubrx8iOZrC+RVlMjDhh6ICizFt1P3A0YcfUj1cZ lVQ4PM96ZfJnxyCUteo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns102.comcast.net is authoritative for comcast.net
	Found RRSIG signed by comcast.net zone
	Query to dns102.comcast.net for comcast.net/A
	Received 227 bytes from 68.87.85.132
	;; Response received from 68.87.85.132 (227 octets) ;; HEADER SECTION ;; id = 31230 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; comcast.net. IN A ;; ANSWER SECTION (2 records) comcast.net. 300 IN A 96.99.227.0 comcast.net. 300 IN RRSIG ( A 5 2 300 20230621144431 20230604143931 26550 comcast.net. Px2CSgwjbX2oNbvhDftkPsPBoFuLu8ATx1391/eYgZiQ/CfAvQKuEfmo2B8ntZ0AI5/ISypYnjJa h5RKYrvQ7eDPOIxTmQfMxTfFvpEECzQVFLFMVubrx8iOZrC+RVlMjDhh6ICizFt1P3A0YcfUj1cZ lVQ4PM96ZfJnxyCUteo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	comcast.net A RR has value 96.99.227.0
	Found 1 RRSIGs over A RRset
	`comcast.net. 300 IN RRSIG ( A 5 2 300 20230621144431 20230604143931 26550 comcast.net. Px2CSgwjbX2oNbvhDftkPsPBoFuLu8ATx1391/eYgZiQ/CfAvQKuEfmo2B8ntZ0AI5/ISypYnjJa h5RKYrvQ7eDPOIxTmQfMxTfFvpEECzQVFLFMVubrx8iOZrC+RVlMjDhh6ICizFt1P3A0YcfUj1cZ lVQ4PM96ZfJnxyCUteo= )`
	RRSIG=26550 and DNSKEY=26550 verifies the A RRset

comcast.net

	Query to dns101.comcast.net for comcast.net/A
	Received 227 bytes from 69.252.250.103
	;; Response received from 69.252.250.103 (227 octets) ;; HEADER SECTION ;; id = 55035 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; comcast.net. IN A ;; ANSWER SECTION (2 records) comcast.net. 300 IN A 96.99.227.0 comcast.net. 300 IN RRSIG ( A 5 2 300 20230621144431 20230604143931 26550 comcast.net. Px2CSgwjbX2oNbvhDftkPsPBoFuLu8ATx1391/eYgZiQ/CfAvQKuEfmo2B8ntZ0AI5/ISypYnjJa h5RKYrvQ7eDPOIxTmQfMxTfFvpEECzQVFLFMVubrx8iOZrC+RVlMjDhh6ICizFt1P3A0YcfUj1cZ lVQ4PM96ZfJnxyCUteo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns101.comcast.net is authoritative for comcast.net
	Found RRSIG signed by comcast.net zone
	Query to dns101.comcast.net for comcast.net/A
	Received 227 bytes from 69.252.250.103
	;; Response received from 69.252.250.103 (227 octets) ;; HEADER SECTION ;; id = 11973 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; comcast.net. IN A ;; ANSWER SECTION (2 records) comcast.net. 300 IN A 96.99.227.0 comcast.net. 300 IN RRSIG ( A 5 2 300 20230621144431 20230604143931 26550 comcast.net. Px2CSgwjbX2oNbvhDftkPsPBoFuLu8ATx1391/eYgZiQ/CfAvQKuEfmo2B8ntZ0AI5/ISypYnjJa h5RKYrvQ7eDPOIxTmQfMxTfFvpEECzQVFLFMVubrx8iOZrC+RVlMjDhh6ICizFt1P3A0YcfUj1cZ lVQ4PM96ZfJnxyCUteo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	comcast.net A RR has value 96.99.227.0
	Found 1 RRSIGs over A RRset
	`comcast.net. 300 IN RRSIG ( A 5 2 300 20230621144431 20230604143931 26550 comcast.net. Px2CSgwjbX2oNbvhDftkPsPBoFuLu8ATx1391/eYgZiQ/CfAvQKuEfmo2B8ntZ0AI5/ISypYnjJa h5RKYrvQ7eDPOIxTmQfMxTfFvpEECzQVFLFMVubrx8iOZrC+RVlMjDhh6ICizFt1P3A0YcfUj1cZ lVQ4PM96ZfJnxyCUteo= )`
	RRSIG=26550 and DNSKEY=26550 verifies the A RRset

comcast.net

	Query to dns104.comcast.net for comcast.net/A
	Received 227 bytes from 68.87.68.244
	;; Response received from 68.87.68.244 (227 octets) ;; HEADER SECTION ;; id = 5421 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; comcast.net. IN A ;; ANSWER SECTION (2 records) comcast.net. 300 IN A 96.99.227.0 comcast.net. 300 IN RRSIG ( A 5 2 300 20230621144431 20230604143931 26550 comcast.net. Px2CSgwjbX2oNbvhDftkPsPBoFuLu8ATx1391/eYgZiQ/CfAvQKuEfmo2B8ntZ0AI5/ISypYnjJa h5RKYrvQ7eDPOIxTmQfMxTfFvpEECzQVFLFMVubrx8iOZrC+RVlMjDhh6ICizFt1P3A0YcfUj1cZ lVQ4PM96ZfJnxyCUteo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns104.comcast.net is authoritative for comcast.net
	Found RRSIG signed by comcast.net zone
	Query to dns104.comcast.net for comcast.net/A
	Received 227 bytes from 68.87.68.244
	;; Response received from 68.87.68.244 (227 octets) ;; HEADER SECTION ;; id = 19703 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; comcast.net. IN A ;; ANSWER SECTION (2 records) comcast.net. 300 IN A 96.99.227.0 comcast.net. 300 IN RRSIG ( A 5 2 300 20230621144431 20230604143931 26550 comcast.net. Px2CSgwjbX2oNbvhDftkPsPBoFuLu8ATx1391/eYgZiQ/CfAvQKuEfmo2B8ntZ0AI5/ISypYnjJa h5RKYrvQ7eDPOIxTmQfMxTfFvpEECzQVFLFMVubrx8iOZrC+RVlMjDhh6ICizFt1P3A0YcfUj1cZ lVQ4PM96ZfJnxyCUteo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	comcast.net A RR has value 96.99.227.0
	Found 1 RRSIGs over A RRset
	`comcast.net. 300 IN RRSIG ( A 5 2 300 20230621144431 20230604143931 26550 comcast.net. Px2CSgwjbX2oNbvhDftkPsPBoFuLu8ATx1391/eYgZiQ/CfAvQKuEfmo2B8ntZ0AI5/ISypYnjJa h5RKYrvQ7eDPOIxTmQfMxTfFvpEECzQVFLFMVubrx8iOZrC+RVlMjDhh6ICizFt1P3A0YcfUj1cZ lVQ4PM96ZfJnxyCUteo= )`
	RRSIG=26550 and DNSKEY=26550 verifies the A RRset

comcast.net

No response from comcast.net nameservers

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test comcast.net at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: