DNSSEC Analyzer - www.usembassy.gov

Domain Name:

Time: 2023-12-04 02:14:46 UTC, NTP stratum 16

Analyzing DNSSEC problems for www.usembassy.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.33.4.12
	;; Response received from 192.33.4.12 (865 octets) ;; HEADER SECTION ;; id = 61306 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20231221000000 20231130000000 20326 . Vq+Z0sYiDdI6V+KCvfoTAYNxmsKiv703Lxyy4OREQPew0qYrrUySU54Jn+NiOlkHLm+o83YW7ZZ0 eyikQKrt42dD2Hdigy7YiOeML1W3wqkZYDg/DoHo5i8zP+B6461Z/yVrjkcTSgM6C8FZuOaDqj5X PMghMfDo0fQy0spEL6rtLzGNXDZ+j5D+hcoQPYtZu9svhm9AHqZoXLu5id7whpsVJhON4BM1pQRF 7JSlTIi0cn7SGhFpfypnj/2E5hUvJ1bRRkr+wItfi7B4+b19lDNgtLZiDs3opRMmStbaF3HEFgTh UZ+HcCRzQASdyuZ4Y8xr1SUX/MpSlct5EBFshg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20231221000000 20231130000000 20326 . Vq+Z0sYiDdI6V+KCvfoTAYNxmsKiv703Lxyy4OREQPew0qYrrUySU54Jn+NiOlkHLm+o83YW7ZZ0 eyikQKrt42dD2Hdigy7YiOeML1W3wqkZYDg/DoHo5i8zP+B6461Z/yVrjkcTSgM6C8FZuOaDqj5X PMghMfDo0fQy0spEL6rtLzGNXDZ+j5D+hcoQPYtZu9svhm9AHqZoXLu5id7whpsVJhON4BM1pQRF 7JSlTIi0cn7SGhFpfypnj/2E5hUvJ1bRRkr+wItfi7B4+b19lDNgtLZiDs3opRMmStbaF3HEFgTh UZ+HcCRzQASdyuZ4Y8xr1SUX/MpSlct5EBFshg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=46780 is now in the chain-of-trust
	Query to i.root-servers.net for www.usembassy.gov/A
	Received 678 bytes from 192.36.148.17
	;; Response received from 192.36.148.17 (678 octets) ;; HEADER SECTION ;; id = 56450 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; www.usembassy.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20231216170000 20231203160000 46780 . gLJ9+KGexBdt9T6tMYiuUeL1DN0kVog086WEE8j3hejHWhqlLEopLrFldZO/tBY8eU1JD1bDX9l2 PWaxwQRnhz/vOVvg+UVzf+8w++Nz10//EM+2sgiw64nyPeY0/cx6Bhedk2CY0zba4/p+5eRJ3m76 4dN/pOHqH++32LAjtOwus6rIrbEGlEa8XdGVV9wzOKXpKKaHPuSt51bJgewmbNB4mpnRTrTAcl3X VnhrOCZ3UUbE2HPONFV3DWXWr8pYniB0vx+JIfn0ONWZQjxhPV81/vFelT7Hv6t+PVHBZ2+H361G 3zIgiSG3DeYqARjse2JhOWEptdioMyHjR786pA== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to f.root-servers.net for gov/DNSKEY
	Received 658 bytes from 192.5.5.241
	;; Response received from 192.5.5.241 (658 octets) ;; HEADER SECTION ;; id = 19110 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20231216170000 20231203160000 46780 . gLJ9+KGexBdt9T6tMYiuUeL1DN0kVog086WEE8j3hejHWhqlLEopLrFldZO/tBY8eU1JD1bDX9l2 PWaxwQRnhz/vOVvg+UVzf+8w++Nz10//EM+2sgiw64nyPeY0/cx6Bhedk2CY0zba4/p+5eRJ3m76 4dN/pOHqH++32LAjtOwus6rIrbEGlEa8XdGVV9wzOKXpKKaHPuSt51bJgewmbNB4mpnRTrTAcl3X VnhrOCZ3UUbE2HPONFV3DWXWr8pYniB0vx+JIfn0ONWZQjxhPV81/vFelT7Hv6t+PVHBZ2+H361G 3zIgiSG3DeYqARjse2JhOWEptdioMyHjR786pA== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN A 199.33.231.1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN A 199.33.232.1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN A 199.33.233.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone gov

gov

	Checking DS between . and gov
	Query to m.root-servers.net for gov/DS
	Received 415 bytes from 202.12.27.33
	;; Response received from 202.12.27.33 (415 octets) ;; HEADER SECTION ;; id = 31431 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20231216170000 20231203160000 46780 . gLJ9+KGexBdt9T6tMYiuUeL1DN0kVog086WEE8j3hejHWhqlLEopLrFldZO/tBY8eU1JD1bDX9l2 PWaxwQRnhz/vOVvg+UVzf+8w++Nz10//EM+2sgiw64nyPeY0/cx6Bhedk2CY0zba4/p+5eRJ3m76 4dN/pOHqH++32LAjtOwus6rIrbEGlEa8XdGVV9wzOKXpKKaHPuSt51bJgewmbNB4mpnRTrTAcl3X VnhrOCZ3UUbE2HPONFV3DWXWr8pYniB0vx+JIfn0ONWZQjxhPV81/vFelT7Hv6t+PVHBZ2+H361G 3zIgiSG3DeYqARjse2JhOWEptdioMyHjR786pA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DS records for gov in the . zone
	DS=64280/SHA-256 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20231216170000 20231203160000 46780 . gLJ9+KGexBdt9T6tMYiuUeL1DN0kVog086WEE8j3hejHWhqlLEopLrFldZO/tBY8eU1JD1bDX9l2 PWaxwQRnhz/vOVvg+UVzf+8w++Nz10//EM+2sgiw64nyPeY0/cx6Bhedk2CY0zba4/p+5eRJ3m76 4dN/pOHqH++32LAjtOwus6rIrbEGlEa8XdGVV9wzOKXpKKaHPuSt51bJgewmbNB4mpnRTrTAcl3X VnhrOCZ3UUbE2HPONFV3DWXWr8pYniB0vx+JIfn0ONWZQjxhPV81/vFelT7Hv6t+PVHBZ2+H361G 3zIgiSG3DeYqARjse2JhOWEptdioMyHjR786pA== )`
	RRSIG=46780 and DNSKEY=46780 verifies the DS RRset
	DS=64280/SHA-256 is now in the chain-of-trust
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 )`
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to b.ns.gov for gov/DNSKEY
	Received 1233 bytes from 199.33.231.1
	;; Response received from 199.33.231.1 (1233 octets) ;; HEADER SECTION ;; id = 17939 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 65535 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (5 records) gov. 3600 IN DNSKEY ( 257 3 8 AwEAAZp0vliR0TOBCJXmdagY36BI5ZveSPE3OSrcXKDs8IZa86x1+gwbheJcfLB6Fw6cWYUXaNgA mFcbxqIqWc5VJSyPS9yCPdEOLEIiegwCmcWnNsEyc0snKTyypXnvJ5JNhoznpFILDqlksAqP/aiq 1/l0w8TMkRbRrViLrJ1ayaScZ0nn/ge5wNpX09T9RI+gF1OIMJDdgH1vi0a+t6smSy4pUrerFTsu y8JAL+PP85MZiOssT9yoERfWSjFKde6PrQX5vj090AxT+hztb+q2EFXnF1a2L73/3UarB19k5NR3 MT1uM7ddag64Q0lg3aTy3MglDCzP7/StUxdeyL5qIX8= ) ; Key ID = 64280 gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcbYvlY667qXEzHsDTkft9cgKy5F0S9CAP+aFK9+sJumGqvpMaOyOzsilJ+OSVFhopJ1aRFp CUpLVIcVJ3E3YATGpzB45M0D5c4oJ0RjEIUakBwcPghmSW8K1GPqj/eUs4fbVPytXwtwvUll9Lxf gUvi5DA6xD6d2ckwDyRxfcMhXYydr2hIsgfrBLmRDMi4BkxMvA23eShPd/tPvnR0gJk= ) ; Key ID = 10104 gov. 3600 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 gov. 3600 IN DNSKEY ( 256 3 8 AwEAAbT+wFfiTKtZbQlPbwFTqp9NfdYu5NVfU9blz6CHPZ2Uiy8tMVx4BcrAkHvLJcJmV+zMnuH0 kVbB9zjN9zwTJ9jfwXw9J2IGZhmo4gmed6j573ysMN5xSM13e7zDRnaQfeklEpITrM7biA9gXooU /GOZG1ex7gNh0+dpBdPqUc19mlu7O1U9V0Z53qNj4Dp/KbsAMuOyXLN3ImpXgwEYHg8= ) ; Key ID = 49735 gov. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240114223826 20231114223826 64280 gov. GcLTi+wyezkrKpy8CyIO/2WxxX3hteAiBqMWPVfp8Io1xdnIXP16NVdN8wHKe2rQ82Be6f6ozHot VDBeSwQRxwUDZJ8fDrAjwJk4eZE1Ck27tfIMIlhnI1cW5rDOuDvoYUUK+8NfuE4wCkYZwZiD08uD SXFJfHmWJBYrHWlxKzhhAvcanPpuD0haIw7pyKYF7kdqCKAIOAwgNq6NTWwWAzLwf6iDrZ3tzCiH 8YSP5biMA0zVOmqJ9Kr3bPfO8NDUr5CEeaaJM46QVmjweSjSeujtgV+eexOFIWEGaBBYUyHBiYCE XpLqr9u2rXsw4uvoKUhHXHt1WI35HSjKnNuCRQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 65535 ;; option:
	Found 4 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 8 AwEAAZp0vliR0TOBCJXmdagY36BI5ZveSPE3OSrcXKDs8IZa86x1+gwbheJcfLB6Fw6cWYUXaNgA mFcbxqIqWc5VJSyPS9yCPdEOLEIiegwCmcWnNsEyc0snKTyypXnvJ5JNhoznpFILDqlksAqP/aiq 1/l0w8TMkRbRrViLrJ1ayaScZ0nn/ge5wNpX09T9RI+gF1OIMJDdgH1vi0a+t6smSy4pUrerFTsu y8JAL+PP85MZiOssT9yoERfWSjFKde6PrQX5vj090AxT+hztb+q2EFXnF1a2L73/3UarB19k5NR3 MT1uM7ddag64Q0lg3aTy3MglDCzP7/StUxdeyL5qIX8= ) ; Key ID = 64280`
	`gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcbYvlY667qXEzHsDTkft9cgKy5F0S9CAP+aFK9+sJumGqvpMaOyOzsilJ+OSVFhopJ1aRFp CUpLVIcVJ3E3YATGpzB45M0D5c4oJ0RjEIUakBwcPghmSW8K1GPqj/eUs4fbVPytXwtwvUll9Lxf gUvi5DA6xD6d2ckwDyRxfcMhXYydr2hIsgfrBLmRDMi4BkxMvA23eShPd/tPvnR0gJk= ) ; Key ID = 10104`
	`gov. 3600 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`gov. 3600 IN DNSKEY ( 256 3 8 AwEAAbT+wFfiTKtZbQlPbwFTqp9NfdYu5NVfU9blz6CHPZ2Uiy8tMVx4BcrAkHvLJcJmV+zMnuH0 kVbB9zjN9zwTJ9jfwXw9J2IGZhmo4gmed6j573ysMN5xSM13e7zDRnaQfeklEpITrM7biA9gXooU /GOZG1ex7gNh0+dpBdPqUc19mlu7O1U9V0Z53qNj4Dp/KbsAMuOyXLN3ImpXgwEYHg8= ) ; Key ID = 49735`
	DNSKEY=64280/SEP is now in the chain-of-trust
	DS=64280/SHA-256 verifies DNSKEY=64280/SEP
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240114223826 20231114223826 64280 gov. GcLTi+wyezkrKpy8CyIO/2WxxX3hteAiBqMWPVfp8Io1xdnIXP16NVdN8wHKe2rQ82Be6f6ozHot VDBeSwQRxwUDZJ8fDrAjwJk4eZE1Ck27tfIMIlhnI1cW5rDOuDvoYUUK+8NfuE4wCkYZwZiD08uD SXFJfHmWJBYrHWlxKzhhAvcanPpuD0haIw7pyKYF7kdqCKAIOAwgNq6NTWwWAzLwf6iDrZ3tzCiH 8YSP5biMA0zVOmqJ9Kr3bPfO8NDUr5CEeaaJM46QVmjweSjSeujtgV+eexOFIWEGaBBYUyHBiYCE XpLqr9u2rXsw4uvoKUhHXHt1WI35HSjKnNuCRQ== )`
	RRSIG=64280 and DNSKEY=64280/SEP verifies the DNSKEY RRset
	DNSKEY=10104 is now in the chain-of-trust
	DNSKEY=49735 is now in the chain-of-trust
	Query to c.ns.gov for www.usembassy.gov/A
	Received 539 bytes from 199.33.232.1
	;; Response received from 199.33.232.1 (539 octets) ;; HEADER SECTION ;; id = 52031 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 11 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; www.usembassy.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) usembassy.gov. 10800 IN NS a1-63.akam.net. usembassy.gov. 10800 IN NS a14-64.akam.net. usembassy.gov. 10800 IN NS a26-65.akam.net. usembassy.gov. 10800 IN NS a3-66.akam.net. usembassy.gov. 10800 IN NS a8-67.akam.net. usembassy.gov. 10800 IN NS a9-64.akam.net. usembassy.gov. 3600 IN DS ( 39784 8 1 0b677ffbc3e0303e77b57a5bcac8c1c209fd54b1 ) usembassy.gov. 3600 IN DS ( 39784 8 2 70d37f4f71554d6c046456d43104628cf0a65d71357660f01b6f4b04dce88869 ) usembassy.gov. 3600 IN DS ( 40579 8 1 32a1124da6aecce34d5615a7fa222677b9c852d6 ) usembassy.gov. 3600 IN DS ( 40579 8 2 8f4fe710a9c0f48cdb0ca2ad168220dec4557f48053c34be39b83e6062bd6252 ) usembassy.gov. 3600 IN RRSIG ( DS 8 2 3600 20231205031446 20231203011446 10104 gov. TOQowz5Qk9XgnUPXz6OKJAt4zCluGZuD3jyg9sgrWDZjf/dUQnxB4aFzi8JXjGUOkNVbsbfd3+eT qOUxlLOd+x6jbXSMHkjEzdgv67McAOm7lvAxVTKhkg4eJm7iZDAVmX5pDtGfgbZLNh8KeJHZYAva ly7fFKRc1gwlZ0Ikhz3w8sLCSO8PIePS+hK6Ts4yCQTypHcUOsiICPy+q5WTtA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to a.ns.gov for usembassy.gov/DNSKEY
	Received 535 bytes from 199.33.230.1
	;; Response received from 199.33.230.1 (535 octets) ;; HEADER SECTION ;; id = 47083 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 11 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; usembassy.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) usembassy.gov. 10800 IN NS a1-63.akam.net. usembassy.gov. 10800 IN NS a14-64.akam.net. usembassy.gov. 10800 IN NS a26-65.akam.net. usembassy.gov. 10800 IN NS a3-66.akam.net. usembassy.gov. 10800 IN NS a8-67.akam.net. usembassy.gov. 10800 IN NS a9-64.akam.net. usembassy.gov. 3600 IN DS ( 39784 8 1 0b677ffbc3e0303e77b57a5bcac8c1c209fd54b1 ) usembassy.gov. 3600 IN DS ( 39784 8 2 70d37f4f71554d6c046456d43104628cf0a65d71357660f01b6f4b04dce88869 ) usembassy.gov. 3600 IN DS ( 40579 8 1 32a1124da6aecce34d5615a7fa222677b9c852d6 ) usembassy.gov. 3600 IN DS ( 40579 8 2 8f4fe710a9c0f48cdb0ca2ad168220dec4557f48053c34be39b83e6062bd6252 ) usembassy.gov. 3600 IN RRSIG ( DS 8 2 3600 20231205031446 20231203011446 10104 gov. TOQowz5Qk9XgnUPXz6OKJAt4zCluGZuD3jyg9sgrWDZjf/dUQnxB4aFzi8JXjGUOkNVbsbfd3+eT qOUxlLOd+x6jbXSMHkjEzdgv67McAOm7lvAxVTKhkg4eJm7iZDAVmX5pDtGfgbZLNh8KeJHZYAva ly7fFKRc1gwlZ0Ikhz3w8sLCSO8PIePS+hK6Ts4yCQTypHcUOsiICPy+q5WTtA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone usembassy.gov

usembassy.gov

	Checking DS between gov and usembassy.gov
	Query to c.ns.gov for usembassy.gov/DS
	Received 405 bytes from 199.33.232.1
	;; Response received from 199.33.232.1 (405 octets) ;; HEADER SECTION ;; id = 62097 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; usembassy.gov. IN DS ;; ANSWER SECTION (5 records) usembassy.gov. 3600 IN DS ( 39784 8 1 0b677ffbc3e0303e77b57a5bcac8c1c209fd54b1 ) usembassy.gov. 3600 IN DS ( 39784 8 2 70d37f4f71554d6c046456d43104628cf0a65d71357660f01b6f4b04dce88869 ) usembassy.gov. 3600 IN DS ( 40579 8 1 32a1124da6aecce34d5615a7fa222677b9c852d6 ) usembassy.gov. 3600 IN DS ( 40579 8 2 8f4fe710a9c0f48cdb0ca2ad168220dec4557f48053c34be39b83e6062bd6252 ) usembassy.gov. 3600 IN RRSIG ( DS 8 2 3600 20231205031446 20231203011446 10104 gov. TOQowz5Qk9XgnUPXz6OKJAt4zCluGZuD3jyg9sgrWDZjf/dUQnxB4aFzi8JXjGUOkNVbsbfd3+eT qOUxlLOd+x6jbXSMHkjEzdgv67McAOm7lvAxVTKhkg4eJm7iZDAVmX5pDtGfgbZLNh8KeJHZYAva ly7fFKRc1gwlZ0Ikhz3w8sLCSO8PIePS+hK6Ts4yCQTypHcUOsiICPy+q5WTtA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 4 DS records for usembassy.gov in the gov zone
	DS=39784/SHA-1 has algorithm RSASHA256
	DS=39784/SHA-256 has algorithm RSASHA256
	DS=40579/SHA-1 has algorithm RSASHA256
	DS=40579/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`usembassy.gov. 3600 IN RRSIG ( DS 8 2 3600 20231205031446 20231203011446 10104 gov. TOQowz5Qk9XgnUPXz6OKJAt4zCluGZuD3jyg9sgrWDZjf/dUQnxB4aFzi8JXjGUOkNVbsbfd3+eT qOUxlLOd+x6jbXSMHkjEzdgv67McAOm7lvAxVTKhkg4eJm7iZDAVmX5pDtGfgbZLNh8KeJHZYAva ly7fFKRc1gwlZ0Ikhz3w8sLCSO8PIePS+hK6Ts4yCQTypHcUOsiICPy+q5WTtA== )`
	RRSIG=10104 and DNSKEY=10104 verifies the DS RRset
	DS=39784/SHA-1 is now in the chain-of-trust
	DS=40579/SHA-1 is now in the chain-of-trust
	`usembassy.gov. 3600 IN DS ( 39784 8 1 0b677ffbc3e0303e77b57a5bcac8c1c209fd54b1 )`
	`usembassy.gov. 3600 IN DS ( 39784 8 2 70d37f4f71554d6c046456d43104628cf0a65d71357660f01b6f4b04dce88869 )`
	`usembassy.gov. 3600 IN DS ( 40579 8 1 32a1124da6aecce34d5615a7fa222677b9c852d6 )`
	`usembassy.gov. 3600 IN DS ( 40579 8 2 8f4fe710a9c0f48cdb0ca2ad168220dec4557f48053c34be39b83e6062bd6252 )`
	Query to a8-67.akam.net for usembassy.gov/DNSKEY
	Received 2325 bytes from 2.16.40.67
	;; Response received from 2.16.40.67 (2325 octets) ;; HEADER SECTION ;; id = 24090 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; usembassy.gov. IN DNSKEY ;; ANSWER SECTION (8 records) usembassy.gov. 15768000 IN DNSKEY ( 257 3 8 AwEAAbvyci5GVabc5G1KbI13MjMlIX8kCLPTVHUamZ/tdbfeUKY4+pYX3JQ4NcOQgreJuNxVhktM Al67S5Nu81BJGvQDieFSpneznx8sIrfsG3Tll7d5jtReEL2I2YsZBc4MoU4cq4Gp1F1dNFQeLCby W72SfPa1dmMkWadLz4r80hxkiPZqZNriVt/AUWiwVFbxpNl8qJh1sV+B5+5DspcuxqJPnAH/tDh8 tnwAeD+Mk2xJp63aRCD0STv0ijfSDzvYuYyDkZJKiS7ZMXJ+P+GhK7zbIeF+L8g0ToLYFYcE2Hby 7EDzDX1NBcUJBb6Ak7jHU38NvsvXm1AtolOVaXm0jqM= ) ; Key ID = 40579 usembassy.gov. 15768000 IN DNSKEY ( 257 3 8 AwEAAcUnt7FcTdzf6QktHdmX+1rzeKeAywMcaTjz3+nXT0qXmtny+9YLZS5AzT1RK1QXANi0ySBD lwvSFLojkuf+lpAFOmpG+d+L1o+H3hgzEfykJC46Gg6bARBEEfphMz9ZN3gVdfxU2Mr3+2F12/1i HD5GjTjcfPricjGcQS3lFvdkeWSE7sv35GGXLrTtBZpvHsnTKn4vd2av5AnS0mKENbbZlNSbpic2 1upKIFFXIv2Ju4W0xPacbfKWL4bjOL/cn5aagSU4o91LYYd+JX5bGT5QZ1YGLLnYJnTat+DWCwCa 3sSpVu76UEHd175diQQYd/O1avtZlS45o8DB64TgDZ8= ) ; Key ID = 39784 usembassy.gov. 15768000 IN DNSKEY ( 256 3 8 AwEAAdJd4r8OBqJZM1Vcu5mIuX9/Sf0a5zQMK5DboM0Y4yt49pRYRsc5/yFdKyT9Lm/wso754Z+5 6zVvXmYlck6S82+dgrYufogcZ/KYnEzQlWCo6SWfIVusCoq4dCNmA/86g4/7ezgFDOx+CuMXTlKw u8QtnveD2vwdRZnIPxXfzI//m1SO5PdknVFufsFp+oJIkjv6+6i2VeZkXlHSpZiR3tju0qswoh4U R1IyUtjBLx+S92GEfjvUpd1QPpdoFMENoknGyfu24aOpGymyNaf8Y3aGW5JSdfbQKiuUvr9uSZvq NAEljW6ynu7zuxpfXxk8ZNI0sWpKYHFKX4oq22vu+Ok= ) ; Key ID = 8979 usembassy.gov. 15768000 IN DNSKEY ( 256 3 8 AwEAAbiMHnw0DCkJj+AcNCPNysoJJAS17m1bqqxdnV++8+S4Scy+WbyF5ywS+jZX9HjQf67GxMWM srtlgcbPU1fx7bmUdBa7RhdC0q9zXwPy8XzpY7XsoXdvqdlCqSeE3hPfqhU7F0RemGmzl8W5Gv7O KuUJz8Perz3kM8wsvb+M9MBOzXyf4WnSk9yFjJ+8PZP08DNLlU+DIj71H2UR+g6IxRQEbDU2VZUq VoZHvW2yZX/KaJgM08/2eoZwp+PM2dfvmnUm+sRq4+QP1x7dtfubWPQHYfhdCPM8Z7MFisRD0Rkn wm7JPxc1uOAruyThZhTieCAX97v2bLqxOfN0RoGfOxc= ) ; Key ID = 19488 usembassy.gov. 15768000 IN DNSKEY ( 256 3 8 AwEAAb7OlCTFld0u81qzniS/B5dqZdHCj/s1u9aAkMIyNPsbkX7grrTvZKVTHbuZ1W9P2GResWl+ wRDDd20b4jT4njPxO/GauWbTKOVFX/HIhbo9DOQIo53opNPWlkD/x7K6X5iBExd/1krtV8A3Ti99 ZdyhZqmG7OC9HUjYKkWEjguQ5TavEWZoKgF1oiXwg4unOZx00ibkUXwEd+FIAVlZr7bjj7mKCAuO DhtWaHcQ/kuRak0gEwtH3F3SO6Imop7SSMpwtN/1Psfp34G13kubccMguBVOZWVtarp6OYy1n1jt cF4xL4rZNHpI32Y2Ar69jUJipkgtSq6ARz/gEgzVfOU= ) ; Key ID = 49278 usembassy.gov. 15768000 IN RRSIG ( DNSKEY 8 2 15768000 20241128141422 20231129131422 19488 usembassy.gov. f1e8oJgh/avestNuIVx7Vg32rE8zLgju8xx1VyP5uOZfOeor9G/1wGwVqEAqWqz9L1QKFmP7akw2 R78CpPKZXQVf3mUAO1Cvy89PQ5qZp3fwBigznhTt1rJBi3+ZgdJB8066QFJ7fdo/T6vRh10CUjU8 yFCeRDnY52+PgEDiUT8xtIIJEgxYGn6QXSYLcbRLwArq/OmNqMSvzrPpC4dv/5IAcjUllEdOVGuq FWTBG7yYFk8MHWzzireyNVe6pDEizVuVf/OksCAQjNfUnBhrHyTid0YIg6OB+daenV9Di6PA4nt6 YzLbaQwGuBykb5mhVDahGmyVP4uorlEIumsC9w== ) usembassy.gov. 15768000 IN RRSIG ( DNSKEY 8 2 15768000 20241128141422 20231129131422 39784 usembassy.gov. bh60PiHxDjrx6gR3A0DogVmvkhSnOccHjNuN43W0KFaLA+jzqUoB1BdJjq4V3/K5FU2JSJUjmVB1 vECtDfFdpQAy8v/8zAZvGavcYFO5fhv/DkNYzckCNuhZoYvv63/jsuZXvu1Oa/lQua389Ul6FLyU CDSdrbMi5WJr5bSFVCqw+835/m7h6MmsL9/IbOicnI7HG1eyiRdqW2z/T3mSgwSwO+O5td4a6AyR UZe/sNjZlwotiVBalVRhtLUp7O6KpoERAOKx6YUx2b3YM8d/DXVQC9lvjfUikgSEC24yUJ6QsKo8 SuN/SKxQA4vEZudFnRbX9VCHqNAgmu+/dNbG1g== ) usembassy.gov. 15768000 IN RRSIG ( DNSKEY 8 2 15768000 20241128141422 20231129131422 40579 usembassy.gov. hHmfh+7uhKKUACY0rzZ3/sp6ImCVvpLxOlu/EkB/r+UlHpxoLsI0W+THO/CgdN4QT4QCfrTsxfr7 7Y/uYo/CjhR81exhe4x72MXH+zORZrDJczyNtZIL3b4CmWHGaorNiDgmXGsZUO/99+83+jmHnWWO 4SLOm5wkzkpUXY/khM+rCfPJn3X1wKBNTqvFZAWr73uqPTZz1n4/P93xIRzibkytHfGulW5jpZvh b0SRVa4vwX5qJY1wX7tBey7Lmyr8qUT8eOSKVJ1mmoNVBz0sXnY0bT9AoiBeQO6H29VfuGssiuS+ H1KMlV6pl7slbG/iH2VQpP4hHGv3vBPwxauSnA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 5 DNSKEY records for usembassy.gov
	`usembassy.gov. 15768000 IN DNSKEY ( 257 3 8 AwEAAbvyci5GVabc5G1KbI13MjMlIX8kCLPTVHUamZ/tdbfeUKY4+pYX3JQ4NcOQgreJuNxVhktM Al67S5Nu81BJGvQDieFSpneznx8sIrfsG3Tll7d5jtReEL2I2YsZBc4MoU4cq4Gp1F1dNFQeLCby W72SfPa1dmMkWadLz4r80hxkiPZqZNriVt/AUWiwVFbxpNl8qJh1sV+B5+5DspcuxqJPnAH/tDh8 tnwAeD+Mk2xJp63aRCD0STv0ijfSDzvYuYyDkZJKiS7ZMXJ+P+GhK7zbIeF+L8g0ToLYFYcE2Hby 7EDzDX1NBcUJBb6Ak7jHU38NvsvXm1AtolOVaXm0jqM= ) ; Key ID = 40579`
	`usembassy.gov. 15768000 IN DNSKEY ( 257 3 8 AwEAAcUnt7FcTdzf6QktHdmX+1rzeKeAywMcaTjz3+nXT0qXmtny+9YLZS5AzT1RK1QXANi0ySBD lwvSFLojkuf+lpAFOmpG+d+L1o+H3hgzEfykJC46Gg6bARBEEfphMz9ZN3gVdfxU2Mr3+2F12/1i HD5GjTjcfPricjGcQS3lFvdkeWSE7sv35GGXLrTtBZpvHsnTKn4vd2av5AnS0mKENbbZlNSbpic2 1upKIFFXIv2Ju4W0xPacbfKWL4bjOL/cn5aagSU4o91LYYd+JX5bGT5QZ1YGLLnYJnTat+DWCwCa 3sSpVu76UEHd175diQQYd/O1avtZlS45o8DB64TgDZ8= ) ; Key ID = 39784`
	`usembassy.gov. 15768000 IN DNSKEY ( 256 3 8 AwEAAdJd4r8OBqJZM1Vcu5mIuX9/Sf0a5zQMK5DboM0Y4yt49pRYRsc5/yFdKyT9Lm/wso754Z+5 6zVvXmYlck6S82+dgrYufogcZ/KYnEzQlWCo6SWfIVusCoq4dCNmA/86g4/7ezgFDOx+CuMXTlKw u8QtnveD2vwdRZnIPxXfzI//m1SO5PdknVFufsFp+oJIkjv6+6i2VeZkXlHSpZiR3tju0qswoh4U R1IyUtjBLx+S92GEfjvUpd1QPpdoFMENoknGyfu24aOpGymyNaf8Y3aGW5JSdfbQKiuUvr9uSZvq NAEljW6ynu7zuxpfXxk8ZNI0sWpKYHFKX4oq22vu+Ok= ) ; Key ID = 8979`
	`usembassy.gov. 15768000 IN DNSKEY ( 256 3 8 AwEAAbiMHnw0DCkJj+AcNCPNysoJJAS17m1bqqxdnV++8+S4Scy+WbyF5ywS+jZX9HjQf67GxMWM srtlgcbPU1fx7bmUdBa7RhdC0q9zXwPy8XzpY7XsoXdvqdlCqSeE3hPfqhU7F0RemGmzl8W5Gv7O KuUJz8Perz3kM8wsvb+M9MBOzXyf4WnSk9yFjJ+8PZP08DNLlU+DIj71H2UR+g6IxRQEbDU2VZUq VoZHvW2yZX/KaJgM08/2eoZwp+PM2dfvmnUm+sRq4+QP1x7dtfubWPQHYfhdCPM8Z7MFisRD0Rkn wm7JPxc1uOAruyThZhTieCAX97v2bLqxOfN0RoGfOxc= ) ; Key ID = 19488`
	`usembassy.gov. 15768000 IN DNSKEY ( 256 3 8 AwEAAb7OlCTFld0u81qzniS/B5dqZdHCj/s1u9aAkMIyNPsbkX7grrTvZKVTHbuZ1W9P2GResWl+ wRDDd20b4jT4njPxO/GauWbTKOVFX/HIhbo9DOQIo53opNPWlkD/x7K6X5iBExd/1krtV8A3Ti99 ZdyhZqmG7OC9HUjYKkWEjguQ5TavEWZoKgF1oiXwg4unOZx00ibkUXwEd+FIAVlZr7bjj7mKCAuO DhtWaHcQ/kuRak0gEwtH3F3SO6Imop7SSMpwtN/1Psfp34G13kubccMguBVOZWVtarp6OYy1n1jt cF4xL4rZNHpI32Y2Ar69jUJipkgtSq6ARz/gEgzVfOU= ) ; Key ID = 49278`
	DNSKEY=40579/SEP is now in the chain-of-trust
	DS=40579/SHA-1 verifies DNSKEY=40579/SEP
	DS=40579/SHA-256 verifies DNSKEY=40579/SEP
	DNSKEY=39784/SEP is now in the chain-of-trust
	DS=39784/SHA-1 verifies DNSKEY=39784/SEP
	DS=39784/SHA-256 verifies DNSKEY=39784/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`usembassy.gov. 15768000 IN RRSIG ( DNSKEY 8 2 15768000 20241128141422 20231129131422 19488 usembassy.gov. f1e8oJgh/avestNuIVx7Vg32rE8zLgju8xx1VyP5uOZfOeor9G/1wGwVqEAqWqz9L1QKFmP7akw2 R78CpPKZXQVf3mUAO1Cvy89PQ5qZp3fwBigznhTt1rJBi3+ZgdJB8066QFJ7fdo/T6vRh10CUjU8 yFCeRDnY52+PgEDiUT8xtIIJEgxYGn6QXSYLcbRLwArq/OmNqMSvzrPpC4dv/5IAcjUllEdOVGuq FWTBG7yYFk8MHWzzireyNVe6pDEizVuVf/OksCAQjNfUnBhrHyTid0YIg6OB+daenV9Di6PA4nt6 YzLbaQwGuBykb5mhVDahGmyVP4uorlEIumsC9w== )`
	`usembassy.gov. 15768000 IN RRSIG ( DNSKEY 8 2 15768000 20241128141422 20231129131422 39784 usembassy.gov. bh60PiHxDjrx6gR3A0DogVmvkhSnOccHjNuN43W0KFaLA+jzqUoB1BdJjq4V3/K5FU2JSJUjmVB1 vECtDfFdpQAy8v/8zAZvGavcYFO5fhv/DkNYzckCNuhZoYvv63/jsuZXvu1Oa/lQua389Ul6FLyU CDSdrbMi5WJr5bSFVCqw+835/m7h6MmsL9/IbOicnI7HG1eyiRdqW2z/T3mSgwSwO+O5td4a6AyR UZe/sNjZlwotiVBalVRhtLUp7O6KpoERAOKx6YUx2b3YM8d/DXVQC9lvjfUikgSEC24yUJ6QsKo8 SuN/SKxQA4vEZudFnRbX9VCHqNAgmu+/dNbG1g== )`
	`usembassy.gov. 15768000 IN RRSIG ( DNSKEY 8 2 15768000 20241128141422 20231129131422 40579 usembassy.gov. hHmfh+7uhKKUACY0rzZ3/sp6ImCVvpLxOlu/EkB/r+UlHpxoLsI0W+THO/CgdN4QT4QCfrTsxfr7 7Y/uYo/CjhR81exhe4x72MXH+zORZrDJczyNtZIL3b4CmWHGaorNiDgmXGsZUO/99+83+jmHnWWO 4SLOm5wkzkpUXY/khM+rCfPJn3X1wKBNTqvFZAWr73uqPTZz1n4/P93xIRzibkytHfGulW5jpZvh b0SRVa4vwX5qJY1wX7tBey7Lmyr8qUT8eOSKVJ1mmoNVBz0sXnY0bT9AoiBeQO6H29VfuGssiuS+ H1KMlV6pl7slbG/iH2VQpP4hHGv3vBPwxauSnA== )`
	RRSIG=19488 and DNSKEY=19488 verifies the DNSKEY RRset
	RRSIG=39784 and DNSKEY=39784/SEP verifies the DNSKEY RRset
	RRSIG=40579 and DNSKEY=40579/SEP verifies the DNSKEY RRset
	DNSKEY=8979 is now in the chain-of-trust
	DNSKEY=19488 is now in the chain-of-trust
	DNSKEY=49278 is now in the chain-of-trust
	Query to a3-66.akam.net for www.usembassy.gov/A
	Received 390 bytes from 96.7.49.66
	;; Response received from 96.7.49.66 (390 octets) ;; HEADER SECTION ;; id = 35076 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; www.usembassy.gov. IN A ;; ANSWER SECTION (2 records) www.usembassy.gov. 10800 IN CNAME d1oj4yrmnvvraf.cloudfront.net. www.usembassy.gov. 10800 IN RRSIG ( CNAME 8 3 10800 20241128141418 20231129131418 19488 usembassy.gov. ctd4Vdn0o4uV2Ony/bbV25eUPIhvd/igR24mxzj7skZN0sofd2o0+Akqlls15mUFt1M7Jyxm5BvF opQ7fHke0Ptv+ElFJ/udgLd6R2AaYalzvt5tZEDuKJQ0bv1LLsRr5KaTJtOuWHd2mQi12lnKynvm pDRMlMzXTBMcIEbtjLOpvplMs4MgvRXlE7EkFZ9S8c1AhoQjrxdZKms6FPd6N7P+k19kdCCnkrOI ehfT6cMFbSDBnHOO4r4HD9ESKZsXU4Vj1vgUghi7XSz32k92qvYKh7oCsfQjvJE1TRbOJcLkw4j4 aaXbJOnEbqnzGe45/s4vFvuCeEhFt4btdGOJcg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	a3-66.akam.net is authoritative for www.usembassy.gov
	Query to a9-64.akam.net for www.usembassy.gov/DNSKEY
	Received 390 bytes from 184.85.248.64
	;; Response received from 184.85.248.64 (390 octets) ;; HEADER SECTION ;; id = 60456 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; www.usembassy.gov. IN DNSKEY ;; ANSWER SECTION (2 records) www.usembassy.gov. 10800 IN CNAME d1oj4yrmnvvraf.cloudfront.net. www.usembassy.gov. 10800 IN RRSIG ( CNAME 8 3 10800 20241128141418 20231129131418 19488 usembassy.gov. ctd4Vdn0o4uV2Ony/bbV25eUPIhvd/igR24mxzj7skZN0sofd2o0+Akqlls15mUFt1M7Jyxm5BvF opQ7fHke0Ptv+ElFJ/udgLd6R2AaYalzvt5tZEDuKJQ0bv1LLsRr5KaTJtOuWHd2mQi12lnKynvm pDRMlMzXTBMcIEbtjLOpvplMs4MgvRXlE7EkFZ9S8c1AhoQjrxdZKms6FPd6N7P+k19kdCCnkrOI ehfT6cMFbSDBnHOO4r4HD9ESKZsXU4Vj1vgUghi7XSz32k92qvYKh7oCsfQjvJE1TRbOJcLkw4j4 aaXbJOnEbqnzGe45/s4vFvuCeEhFt4btdGOJcg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found RRSIG signed by usembassy.gov zone
	www.usembassy.gov is a CNAME to d1oj4yrmnvvraf.cloudfront.net
	Found 1 RRSIGs over CNAME RRset
	`www.usembassy.gov. 10800 IN RRSIG ( CNAME 8 3 10800 20241128141418 20231129131418 19488 usembassy.gov. ctd4Vdn0o4uV2Ony/bbV25eUPIhvd/igR24mxzj7skZN0sofd2o0+Akqlls15mUFt1M7Jyxm5BvF opQ7fHke0Ptv+ElFJ/udgLd6R2AaYalzvt5tZEDuKJQ0bv1LLsRr5KaTJtOuWHd2mQi12lnKynvm pDRMlMzXTBMcIEbtjLOpvplMs4MgvRXlE7EkFZ9S8c1AhoQjrxdZKms6FPd6N7P+k19kdCCnkrOI ehfT6cMFbSDBnHOO4r4HD9ESKZsXU4Vj1vgUghi7XSz32k92qvYKh7oCsfQjvJE1TRbOJcLkw4j4 aaXbJOnEbqnzGe45/s4vFvuCeEhFt4btdGOJcg== )`
	RRSIG=19488 and DNSKEY=19488 verifies the CNAME RRset

	Query to g.root-servers.net for d1oj4yrmnvvraf.cloudfront.net/A
	Received 1192 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (1192 octets) ;; HEADER SECTION ;; id = 12692 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; d1oj4yrmnvvraf.cloudfront.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20231216170000 20231203160000 46780 . SZNu6S/K0yuF8lG+Y94o0K5R5KYoAQJtci8A8tRAPZMMXjeV+smcmvnoFVnTiHlzjG/t2Dmq6AiE zBZo+EsMLkNIZy2IZgnv5QLBg5xrmvLLP2YEpQHkd3D6nIEZDh1g+1prRat2Jm0Sh6ldik+htA75 KouJ14n2JfY8jBbcULv/1JMrK6zf6xTFsiJeUmwYEEgZHtF1f2plS8I87Ro0YVwLZuRktbaFEho0 ZsQYJt3I0VEeE38+OIA43Q0Dm1NWN5gAddyzzN3P5kOwQ54BFm64mi8w/fAyNJWNnL5XhfdPCy8R Oqfb4/oJAEPCESDFbApnmFfWiRtkUUuQs0LH4g== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 a.gtld-servers.net. 172800 IN A 192.5.6.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to f.root-servers.net for net/DNSKEY
	Received 1160 bytes from 192.5.5.241
	;; Response received from 192.5.5.241 (1160 octets) ;; HEADER SECTION ;; id = 21685 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20231216170000 20231203160000 46780 . SZNu6S/K0yuF8lG+Y94o0K5R5KYoAQJtci8A8tRAPZMMXjeV+smcmvnoFVnTiHlzjG/t2Dmq6AiE zBZo+EsMLkNIZy2IZgnv5QLBg5xrmvLLP2YEpQHkd3D6nIEZDh1g+1prRat2Jm0Sh6ldik+htA75 KouJ14n2JfY8jBbcULv/1JMrK6zf6xTFsiJeUmwYEEgZHtF1f2plS8I87Ro0YVwLZuRktbaFEho0 ZsQYJt3I0VEeE38+OIA43Q0Dm1NWN5gAddyzzN3P5kOwQ54BFm64mi8w/fAyNJWNnL5XhfdPCy8R Oqfb4/oJAEPCESDFbApnmFfWiRtkUUuQs0LH4g== ) ;; ADDITIONAL SECTION (27 records) e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone net

net

	Checking DS between . and net
	Query to a.root-servers.net for net/DS
	Received 367 bytes from 198.41.0.4
	;; Response received from 198.41.0.4 (367 octets) ;; HEADER SECTION ;; id = 14180 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DS ;; ANSWER SECTION (2 records) net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20231216170000 20231203160000 46780 . SZNu6S/K0yuF8lG+Y94o0K5R5KYoAQJtci8A8tRAPZMMXjeV+smcmvnoFVnTiHlzjG/t2Dmq6AiE zBZo+EsMLkNIZy2IZgnv5QLBg5xrmvLLP2YEpQHkd3D6nIEZDh1g+1prRat2Jm0Sh6ldik+htA75 KouJ14n2JfY8jBbcULv/1JMrK6zf6xTFsiJeUmwYEEgZHtF1f2plS8I87Ro0YVwLZuRktbaFEho0 ZsQYJt3I0VEeE38+OIA43Q0Dm1NWN5gAddyzzN3P5kOwQ54BFm64mi8w/fAyNJWNnL5XhfdPCy8R Oqfb4/oJAEPCESDFbApnmFfWiRtkUUuQs0LH4g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for net in the . zone
	DS=37331/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`net. 86400 IN RRSIG ( DS 8 1 86400 20231216170000 20231203160000 46780 . SZNu6S/K0yuF8lG+Y94o0K5R5KYoAQJtci8A8tRAPZMMXjeV+smcmvnoFVnTiHlzjG/t2Dmq6AiE zBZo+EsMLkNIZy2IZgnv5QLBg5xrmvLLP2YEpQHkd3D6nIEZDh1g+1prRat2Jm0Sh6ldik+htA75 KouJ14n2JfY8jBbcULv/1JMrK6zf6xTFsiJeUmwYEEgZHtF1f2plS8I87Ro0YVwLZuRktbaFEho0 ZsQYJt3I0VEeE38+OIA43Q0Dm1NWN5gAddyzzN3P5kOwQ54BFm64mi8w/fAyNJWNnL5XhfdPCy8R Oqfb4/oJAEPCESDFbApnmFfWiRtkUUuQs0LH4g== )`
	RRSIG=46780 and DNSKEY=46780 verifies the DS RRset
	DS=37331/SHA-256 is now in the chain-of-trust
	`net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b )`
	Query to i.gtld-servers.net for net/DNSKEY
	Received 291 bytes from 192.43.172.30
	;; Response received from 192.43.172.30 (291 octets) ;; HEADER SECTION ;; id = 65442 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (3 records) net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; Key ID = 37331 net. 86400 IN DNSKEY ( 256 3 13 mIGmmmfH+QUj1HRICwGPse0pJVooabAqExmT/ISf0DR3umaJRXEfjrM6hB7VR5n/3PiIk0JtfqEE dM7qz6c7cQ== ) ; Key ID = 44222 net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20231214151035 20231129150535 37331 net. vhMq1k5ReCIqy6QY8O0bfUxX7JKDumrIYbRmrKdYT7s+tSaSIP5r2eQ8TRHBHxZaXl0BSRDkCGqD xM9q9ISxCw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for net
	`net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; Key ID = 37331`
	`net. 86400 IN DNSKEY ( 256 3 13 mIGmmmfH+QUj1HRICwGPse0pJVooabAqExmT/ISf0DR3umaJRXEfjrM6hB7VR5n/3PiIk0JtfqEE dM7qz6c7cQ== ) ; Key ID = 44222`
	DNSKEY=37331/SEP is now in the chain-of-trust
	DS=37331/SHA-256 verifies DNSKEY=37331/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20231214151035 20231129150535 37331 net. vhMq1k5ReCIqy6QY8O0bfUxX7JKDumrIYbRmrKdYT7s+tSaSIP5r2eQ8TRHBHxZaXl0BSRDkCGqD xM9q9ISxCw== )`
	RRSIG=37331 and DNSKEY=37331/SEP verifies the DNSKEY RRset
	DNSKEY=44222 is now in the chain-of-trust
	Query to g.gtld-servers.net for d1oj4yrmnvvraf.cloudfront.net/A
	Received 568 bytes from 192.42.93.30
	;; Response received from 192.42.93.30 (568 octets) ;; HEADER SECTION ;; id = 19408 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 2 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; d1oj4yrmnvvraf.cloudfront.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) cloudfront.net. 172800 IN NS ns-666.awsdns-19.net. cloudfront.net. 172800 IN NS ns-418.awsdns-52.com. cloudfront.net. 172800 IN NS ns-1597.awsdns-07.co.uk. cloudfront.net. 172800 IN NS ns-1306.awsdns-35.org. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 13 2 86400 20231208090839 20231201075839 44222 net. bgZgDFHaYIdyfQibqbTsGISRuvfnVGJz3fhKgiLCCLocLp5edxdwV5phE2ga5lkrBCIUiBphr9Et QKeqGChYiw== ) FADETBE5N02D22KCTSBU3TM86MF8EACJ.net. 86400 IN NSEC3 ( 1 1 0 - fadg4mls25nqik90m8ep414g1d463o55 NS DS RRSIG ) FADETBE5N02D22KCTSBU3TM86MF8EACJ.net. 86400 IN RRSIG ( NSEC3 13 2 86400 20231207091507 20231130080507 44222 net. VK5OZN/IjY/yvLL0hVM+Dn/3xRfmOZaahEnwg/oO63pV9njPcOFwREeOkDx53dtfzCMpPBfwgKmc JVMEexNyTg== ) ;; ADDITIONAL SECTION (2 records) ns-666.awsdns-19.net. 172800 IN A 205.251.194.154 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to i.gtld-servers.net for cloudfront.net/DNSKEY
	Received 553 bytes from 192.43.172.30
	;; Response received from 192.43.172.30 (553 octets) ;; HEADER SECTION ;; id = 46301 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 2 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cloudfront.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) cloudfront.net. 172800 IN NS ns-666.awsdns-19.net. cloudfront.net. 172800 IN NS ns-418.awsdns-52.com. cloudfront.net. 172800 IN NS ns-1597.awsdns-07.co.uk. cloudfront.net. 172800 IN NS ns-1306.awsdns-35.org. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 13 2 86400 20231208090839 20231201075839 44222 net. bgZgDFHaYIdyfQibqbTsGISRuvfnVGJz3fhKgiLCCLocLp5edxdwV5phE2ga5lkrBCIUiBphr9Et QKeqGChYiw== ) FADETBE5N02D22KCTSBU3TM86MF8EACJ.net. 86400 IN NSEC3 ( 1 1 0 - fadg4mls25nqik90m8ep414g1d463o55 NS DS RRSIG ) FADETBE5N02D22KCTSBU3TM86MF8EACJ.net. 86400 IN RRSIG ( NSEC3 13 2 86400 20231207091507 20231130080507 44222 net. VK5OZN/IjY/yvLL0hVM+Dn/3xRfmOZaahEnwg/oO63pV9njPcOFwREeOkDx53dtfzCMpPBfwgKmc JVMEexNyTg== ) ;; ADDITIONAL SECTION (2 records) ns-666.awsdns-19.net. 172800 IN A 205.251.194.154 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone cloudfront.net

cloudfront.net

	Checking DS between net and cloudfront.net
	Query to h.gtld-servers.net for cloudfront.net/DS
	Received 572 bytes from 192.54.112.30
	;; Response received from 192.54.112.30 (572 octets) ;; HEADER SECTION ;; id = 56074 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cloudfront.net. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 13 2 86400 20231208090839 20231201075839 44222 net. bgZgDFHaYIdyfQibqbTsGISRuvfnVGJz3fhKgiLCCLocLp5edxdwV5phE2ga5lkrBCIUiBphr9Et QKeqGChYiw== ) net. 900 IN SOA ( a.gtld-servers.net. nstld.verisign-grs.com. 1701656074 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 86400 ;minimum ) net. 900 IN RRSIG ( SOA 13 1 900 20231211021434 20231204010434 44222 net. CjnWycdOIdgoIsHXCscMku1oUJTGfxf8gn0HjqrL38+oUklPR5JON9gdFAuGs7+Gh0l/vxDg8J5c RQybm1wFMw== ) FADETBE5N02D22KCTSBU3TM86MF8EACJ.net. 86400 IN NSEC3 ( 1 1 0 - fadg4mls25nqik90m8ep414g1d463o55 NS DS RRSIG ) FADETBE5N02D22KCTSBU3TM86MF8EACJ.net. 86400 IN RRSIG ( NSEC3 13 2 86400 20231207091507 20231130080507 44222 net. VK5OZN/IjY/yvLL0hVM+Dn/3xRfmOZaahEnwg/oO63pV9njPcOFwREeOkDx53dtfzCMpPBfwgKmc JVMEexNyTg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for cloudfront.net in the net zone
	Query to ns-666.awsdns-19.net for cloudfront.net/DNSKEY
	Received 110 bytes from 205.251.194.154
	;; Response received from 205.251.194.154 (110 octets) ;; HEADER SECTION ;; id = 33618 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cloudfront.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) cloudfront.net. 60 IN SOA ( ns-418.awsdns-52.com. hostmaster.cloudfront.net. 1377556270 ;serial 16384 ;refresh 2048 ;retry 1048576 ;expire 60 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DNSKEY records found
	Query to ns-1306.awsdns-35.org for d1oj4yrmnvvraf.cloudfront.net/A
	Received 195 bytes from 205.251.197.26
	;; Response received from 205.251.197.26 (195 octets) ;; HEADER SECTION ;; id = 56466 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; d1oj4yrmnvvraf.cloudfront.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) d1oj4yrmnvvraf.cloudfront.net. 1831 IN NS ns-1135.awsdns-13.org. d1oj4yrmnvvraf.cloudfront.net. 1831 IN NS ns-171.awsdns-21.com. d1oj4yrmnvvraf.cloudfront.net. 1831 IN NS ns-1866.awsdns-41.co.uk. d1oj4yrmnvvraf.cloudfront.net. 1831 IN NS ns-605.awsdns-11.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-1597.awsdns-07.co.uk for d1oj4yrmnvvraf.cloudfront.net/DNSKEY
	Received 195 bytes from 205.251.198.61
	;; Response received from 205.251.198.61 (195 octets) ;; HEADER SECTION ;; id = 57515 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; d1oj4yrmnvvraf.cloudfront.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) d1oj4yrmnvvraf.cloudfront.net. 1831 IN NS ns-1135.awsdns-13.org. d1oj4yrmnvvraf.cloudfront.net. 1831 IN NS ns-171.awsdns-21.com. d1oj4yrmnvvraf.cloudfront.net. 1831 IN NS ns-1866.awsdns-41.co.uk. d1oj4yrmnvvraf.cloudfront.net. 1831 IN NS ns-605.awsdns-11.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone d1oj4yrmnvvraf.cloudfront.net

d1oj4yrmnvvraf.cloudfront.net

	Checking DS between cloudfront.net and d1oj4yrmnvvraf.cloudfront.net
	Query to ns-666.awsdns-19.net for d1oj4yrmnvvraf.cloudfront.net/DS
	Received 125 bytes from 205.251.194.154
	;; Response received from 205.251.194.154 (125 octets) ;; HEADER SECTION ;; id = 45517 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; d1oj4yrmnvvraf.cloudfront.net. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) cloudfront.net. 60 IN SOA ( ns-418.awsdns-52.com. hostmaster.cloudfront.net. 1377556270 ;serial 16384 ;refresh 2048 ;retry 1048576 ;expire 60 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for d1oj4yrmnvvraf.cloudfront.net in the cloudfront.net zone
	Query to ns-1866.awsdns-41.co.uk for d1oj4yrmnvvraf.cloudfront.net/DNSKEY
	Received 143 bytes from 205.251.199.74
	;; Response received from 205.251.199.74 (143 octets) ;; HEADER SECTION ;; id = 64533 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; d1oj4yrmnvvraf.cloudfront.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) d1oj4yrmnvvraf.cloudfront.net. 60 IN SOA ( ns-1135.awsdns-13.org. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DNSKEY records found
	Query to ns-1135.awsdns-13.org for d1oj4yrmnvvraf.cloudfront.net/A
	Received 259 bytes from 205.251.196.111
	;; Response received from 205.251.196.111 (259 octets) ;; HEADER SECTION ;; id = 61831 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; d1oj4yrmnvvraf.cloudfront.net. IN A ;; ANSWER SECTION (4 records) d1oj4yrmnvvraf.cloudfront.net. 60 IN A 13.32.208.79 d1oj4yrmnvvraf.cloudfront.net. 60 IN A 13.32.208.7 d1oj4yrmnvvraf.cloudfront.net. 60 IN A 13.32.208.8 d1oj4yrmnvvraf.cloudfront.net. 60 IN A 13.32.208.83 ;; AUTHORITY SECTION (4 records) d1oj4yrmnvvraf.cloudfront.net. 172800 IN NS ns-1135.awsdns-13.org. d1oj4yrmnvvraf.cloudfront.net. 172800 IN NS ns-171.awsdns-21.com. d1oj4yrmnvvraf.cloudfront.net. 172800 IN NS ns-1866.awsdns-41.co.uk. d1oj4yrmnvvraf.cloudfront.net. 172800 IN NS ns-605.awsdns-11.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns-1135.awsdns-13.org is authoritative for d1oj4yrmnvvraf.cloudfront.net
	Query to ns-605.awsdns-11.net for d1oj4yrmnvvraf.cloudfront.net/SOA
	Received 256 bytes from 205.251.194.93
	;; Response received from 205.251.194.93 (256 octets) ;; HEADER SECTION ;; id = 56205 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; d1oj4yrmnvvraf.cloudfront.net. IN SOA ;; ANSWER SECTION (1 record) d1oj4yrmnvvraf.cloudfront.net. 60 IN SOA ( ns-1135.awsdns-13.org. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) d1oj4yrmnvvraf.cloudfront.net. 172800 IN NS ns-1135.awsdns-13.org. d1oj4yrmnvvraf.cloudfront.net. 172800 IN NS ns-171.awsdns-21.com. d1oj4yrmnvvraf.cloudfront.net. 172800 IN NS ns-1866.awsdns-41.co.uk. d1oj4yrmnvvraf.cloudfront.net. 172800 IN NS ns-605.awsdns-11.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-1866.awsdns-41.co.uk for d1oj4yrmnvvraf.cloudfront.net/SOA
	Received 256 bytes from 205.251.199.74
	;; Response received from 205.251.199.74 (256 octets) ;; HEADER SECTION ;; id = 45528 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; d1oj4yrmnvvraf.cloudfront.net. IN SOA ;; ANSWER SECTION (1 record) d1oj4yrmnvvraf.cloudfront.net. 60 IN SOA ( ns-1135.awsdns-13.org. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) d1oj4yrmnvvraf.cloudfront.net. 172800 IN NS ns-1135.awsdns-13.org. d1oj4yrmnvvraf.cloudfront.net. 172800 IN NS ns-171.awsdns-21.com. d1oj4yrmnvvraf.cloudfront.net. 172800 IN NS ns-1866.awsdns-41.co.uk. d1oj4yrmnvvraf.cloudfront.net. 172800 IN NS ns-605.awsdns-11.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-171.awsdns-21.com for d1oj4yrmnvvraf.cloudfront.net/SOA
	Received 256 bytes from 205.251.192.171
	;; Response received from 205.251.192.171 (256 octets) ;; HEADER SECTION ;; id = 40571 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; d1oj4yrmnvvraf.cloudfront.net. IN SOA ;; ANSWER SECTION (1 record) d1oj4yrmnvvraf.cloudfront.net. 60 IN SOA ( ns-1135.awsdns-13.org. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (4 records) d1oj4yrmnvvraf.cloudfront.net. 172800 IN NS ns-1135.awsdns-13.org. d1oj4yrmnvvraf.cloudfront.net. 172800 IN NS ns-171.awsdns-21.com. d1oj4yrmnvvraf.cloudfront.net. 172800 IN NS ns-1866.awsdns-41.co.uk. d1oj4yrmnvvraf.cloudfront.net. 172800 IN NS ns-605.awsdns-11.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-1135.awsdns-13.org for d1oj4yrmnvvraf.cloudfront.net/A
	Received 259 bytes from 205.251.196.111
	;; Response received from 205.251.196.111 (259 octets) ;; HEADER SECTION ;; id = 2301 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; d1oj4yrmnvvraf.cloudfront.net. IN A ;; ANSWER SECTION (4 records) d1oj4yrmnvvraf.cloudfront.net. 60 IN A 13.32.208.79 d1oj4yrmnvvraf.cloudfront.net. 60 IN A 13.32.208.83 d1oj4yrmnvvraf.cloudfront.net. 60 IN A 13.32.208.7 d1oj4yrmnvvraf.cloudfront.net. 60 IN A 13.32.208.8 ;; AUTHORITY SECTION (4 records) d1oj4yrmnvvraf.cloudfront.net. 172800 IN NS ns-1135.awsdns-13.org. d1oj4yrmnvvraf.cloudfront.net. 172800 IN NS ns-171.awsdns-21.com. d1oj4yrmnvvraf.cloudfront.net. 172800 IN NS ns-1866.awsdns-41.co.uk. d1oj4yrmnvvraf.cloudfront.net. 172800 IN NS ns-605.awsdns-11.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	d1oj4yrmnvvraf.cloudfront.net A RR has value 13.32.208.79
	d1oj4yrmnvvraf.cloudfront.net A RR has value 13.32.208.83
	d1oj4yrmnvvraf.cloudfront.net A RR has value 13.32.208.7
	d1oj4yrmnvvraf.cloudfront.net A RR has value 13.32.208.8
	No RRSIGs found

d1oj4yrmnvvraf.cloudfront.net

	Query to ns-1866.awsdns-41.co.uk for d1oj4yrmnvvraf.cloudfront.net/A
	Received 259 bytes from 205.251.199.74
	;; Response received from 205.251.199.74 (259 octets) ;; HEADER SECTION ;; id = 50881 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; d1oj4yrmnvvraf.cloudfront.net. IN A ;; ANSWER SECTION (4 records) d1oj4yrmnvvraf.cloudfront.net. 60 IN A 13.32.208.79 d1oj4yrmnvvraf.cloudfront.net. 60 IN A 13.32.208.7 d1oj4yrmnvvraf.cloudfront.net. 60 IN A 13.32.208.8 d1oj4yrmnvvraf.cloudfront.net. 60 IN A 13.32.208.83 ;; AUTHORITY SECTION (4 records) d1oj4yrmnvvraf.cloudfront.net. 172800 IN NS ns-1135.awsdns-13.org. d1oj4yrmnvvraf.cloudfront.net. 172800 IN NS ns-171.awsdns-21.com. d1oj4yrmnvvraf.cloudfront.net. 172800 IN NS ns-1866.awsdns-41.co.uk. d1oj4yrmnvvraf.cloudfront.net. 172800 IN NS ns-605.awsdns-11.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns-1866.awsdns-41.co.uk is authoritative for d1oj4yrmnvvraf.cloudfront.net
	Query to ns-1866.awsdns-41.co.uk for d1oj4yrmnvvraf.cloudfront.net/A
	Received 259 bytes from 205.251.199.74
	;; Response received from 205.251.199.74 (259 octets) ;; HEADER SECTION ;; id = 11165 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; d1oj4yrmnvvraf.cloudfront.net. IN A ;; ANSWER SECTION (4 records) d1oj4yrmnvvraf.cloudfront.net. 60 IN A 13.32.208.8 d1oj4yrmnvvraf.cloudfront.net. 60 IN A 13.32.208.7 d1oj4yrmnvvraf.cloudfront.net. 60 IN A 13.32.208.79 d1oj4yrmnvvraf.cloudfront.net. 60 IN A 13.32.208.83 ;; AUTHORITY SECTION (4 records) d1oj4yrmnvvraf.cloudfront.net. 172800 IN NS ns-1135.awsdns-13.org. d1oj4yrmnvvraf.cloudfront.net. 172800 IN NS ns-171.awsdns-21.com. d1oj4yrmnvvraf.cloudfront.net. 172800 IN NS ns-1866.awsdns-41.co.uk. d1oj4yrmnvvraf.cloudfront.net. 172800 IN NS ns-605.awsdns-11.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	d1oj4yrmnvvraf.cloudfront.net A RR has value 13.32.208.8
	d1oj4yrmnvvraf.cloudfront.net A RR has value 13.32.208.7
	d1oj4yrmnvvraf.cloudfront.net A RR has value 13.32.208.79
	d1oj4yrmnvvraf.cloudfront.net A RR has value 13.32.208.83
	No RRSIGs found

d1oj4yrmnvvraf.cloudfront.net

	Query to ns-171.awsdns-21.com for d1oj4yrmnvvraf.cloudfront.net/A
	Received 259 bytes from 205.251.192.171
	;; Response received from 205.251.192.171 (259 octets) ;; HEADER SECTION ;; id = 18318 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; d1oj4yrmnvvraf.cloudfront.net. IN A ;; ANSWER SECTION (4 records) d1oj4yrmnvvraf.cloudfront.net. 60 IN A 13.32.208.7 d1oj4yrmnvvraf.cloudfront.net. 60 IN A 13.32.208.79 d1oj4yrmnvvraf.cloudfront.net. 60 IN A 13.32.208.83 d1oj4yrmnvvraf.cloudfront.net. 60 IN A 13.32.208.8 ;; AUTHORITY SECTION (4 records) d1oj4yrmnvvraf.cloudfront.net. 172800 IN NS ns-1135.awsdns-13.org. d1oj4yrmnvvraf.cloudfront.net. 172800 IN NS ns-171.awsdns-21.com. d1oj4yrmnvvraf.cloudfront.net. 172800 IN NS ns-1866.awsdns-41.co.uk. d1oj4yrmnvvraf.cloudfront.net. 172800 IN NS ns-605.awsdns-11.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns-171.awsdns-21.com is authoritative for d1oj4yrmnvvraf.cloudfront.net
	Query to ns-171.awsdns-21.com for d1oj4yrmnvvraf.cloudfront.net/A
	Received 259 bytes from 205.251.192.171
	;; Response received from 205.251.192.171 (259 octets) ;; HEADER SECTION ;; id = 27294 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; d1oj4yrmnvvraf.cloudfront.net. IN A ;; ANSWER SECTION (4 records) d1oj4yrmnvvraf.cloudfront.net. 60 IN A 13.32.208.8 d1oj4yrmnvvraf.cloudfront.net. 60 IN A 13.32.208.7 d1oj4yrmnvvraf.cloudfront.net. 60 IN A 13.32.208.83 d1oj4yrmnvvraf.cloudfront.net. 60 IN A 13.32.208.79 ;; AUTHORITY SECTION (4 records) d1oj4yrmnvvraf.cloudfront.net. 172800 IN NS ns-1135.awsdns-13.org. d1oj4yrmnvvraf.cloudfront.net. 172800 IN NS ns-171.awsdns-21.com. d1oj4yrmnvvraf.cloudfront.net. 172800 IN NS ns-1866.awsdns-41.co.uk. d1oj4yrmnvvraf.cloudfront.net. 172800 IN NS ns-605.awsdns-11.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	d1oj4yrmnvvraf.cloudfront.net A RR has value 13.32.208.8
	d1oj4yrmnvvraf.cloudfront.net A RR has value 13.32.208.7
	d1oj4yrmnvvraf.cloudfront.net A RR has value 13.32.208.83
	d1oj4yrmnvvraf.cloudfront.net A RR has value 13.32.208.79
	No RRSIGs found

d1oj4yrmnvvraf.cloudfront.net

	Query to ns-605.awsdns-11.net for d1oj4yrmnvvraf.cloudfront.net/A
	Received 259 bytes from 205.251.194.93
	;; Response received from 205.251.194.93 (259 octets) ;; HEADER SECTION ;; id = 55834 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; d1oj4yrmnvvraf.cloudfront.net. IN A ;; ANSWER SECTION (4 records) d1oj4yrmnvvraf.cloudfront.net. 60 IN A 13.32.208.7 d1oj4yrmnvvraf.cloudfront.net. 60 IN A 13.32.208.8 d1oj4yrmnvvraf.cloudfront.net. 60 IN A 13.32.208.79 d1oj4yrmnvvraf.cloudfront.net. 60 IN A 13.32.208.83 ;; AUTHORITY SECTION (4 records) d1oj4yrmnvvraf.cloudfront.net. 172800 IN NS ns-1135.awsdns-13.org. d1oj4yrmnvvraf.cloudfront.net. 172800 IN NS ns-171.awsdns-21.com. d1oj4yrmnvvraf.cloudfront.net. 172800 IN NS ns-1866.awsdns-41.co.uk. d1oj4yrmnvvraf.cloudfront.net. 172800 IN NS ns-605.awsdns-11.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns-605.awsdns-11.net is authoritative for d1oj4yrmnvvraf.cloudfront.net
	Query to ns-605.awsdns-11.net for d1oj4yrmnvvraf.cloudfront.net/A
	Received 259 bytes from 205.251.194.93
	;; Response received from 205.251.194.93 (259 octets) ;; HEADER SECTION ;; id = 37391 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; d1oj4yrmnvvraf.cloudfront.net. IN A ;; ANSWER SECTION (4 records) d1oj4yrmnvvraf.cloudfront.net. 60 IN A 13.32.208.8 d1oj4yrmnvvraf.cloudfront.net. 60 IN A 13.32.208.79 d1oj4yrmnvvraf.cloudfront.net. 60 IN A 13.32.208.83 d1oj4yrmnvvraf.cloudfront.net. 60 IN A 13.32.208.7 ;; AUTHORITY SECTION (4 records) d1oj4yrmnvvraf.cloudfront.net. 172800 IN NS ns-1135.awsdns-13.org. d1oj4yrmnvvraf.cloudfront.net. 172800 IN NS ns-171.awsdns-21.com. d1oj4yrmnvvraf.cloudfront.net. 172800 IN NS ns-1866.awsdns-41.co.uk. d1oj4yrmnvvraf.cloudfront.net. 172800 IN NS ns-605.awsdns-11.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	d1oj4yrmnvvraf.cloudfront.net A RR has value 13.32.208.8
	d1oj4yrmnvvraf.cloudfront.net A RR has value 13.32.208.79
	d1oj4yrmnvvraf.cloudfront.net A RR has value 13.32.208.83
	d1oj4yrmnvvraf.cloudfront.net A RR has value 13.32.208.7
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test www.usembassy.gov at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: