DNSSEC Analyzer - gov.bc.ca

Domain Name:

Time: 2022-12-04 19:08:56 UTC, NTP stratum 16

Analyzing DNSSEC problems for gov.bc.ca

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to m.root-servers.net for ./DNSKEY
	Received 865 bytes from 202.12.27.33
	;; Response received from 202.12.27.33 (865 octets) ;; HEADER SECTION ;; id = 25330 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAeB54o2xvW6vY4qQZ0krDsEZCe6MsRWCqsXd4+cNJZMePnlV/xwDrIbbeH1SJzv742rOHzgA KM1/3SQHHSkoEIPx8XQdHAZBxfhaXl3e8c5WrE3aGXS5AeTWAkt85ccqWgKyitxjFmJEOol0BqS2 xueltaDwgWcC10nPUY+y5l/kTOYyptYQS4gg1uJNXIob/R1XIEJ10ZCurkYqZxgqyHc7tZv09N23 o9rnGdjnYiArH7FjlXD8Rvjde8YWkmfdbCEWnchrnxDK8KV2/ZvBpG/WYnRKXYPUceGCw59OJdJ5 M7utkm547RB3eEd8CVVhbXopZlsKq3GCrBwaIVe9ci0= ) ; Key ID = 18733 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20221221000000 20221130000000 20326 . EBqHCSXvacXYZX3LBW7wfHm6ObNQiH9UnraUjPzmaxaMW6//o6xiHpfz/ejt3Z74Rgqieuu8aFG/ xVFMtzOFGkceWdPVU2cUIhe4hfdIpspHG6OdYXZyLM/0bebCI8PRVeFOk66/jC2VW5gRO1mmX2fS tT1BufXAsVNBjwCW+lRi5KgOerBk1krKNJNqf9GUe8YugNikmm0T9Vgvgo2HwWXw9zT0MfFW0Q/1 U2IR3DAGcALdTx/+mXuNTjPXVmjuI2XkXzZMbZrV729d0edQIKajMyrjjEhlsug1Zo3dk0KaYBmd JgVt/eDthMKY4JheyUsPYkqBxZK10DAHRO7INA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeB54o2xvW6vY4qQZ0krDsEZCe6MsRWCqsXd4+cNJZMePnlV/xwDrIbbeH1SJzv742rOHzgA KM1/3SQHHSkoEIPx8XQdHAZBxfhaXl3e8c5WrE3aGXS5AeTWAkt85ccqWgKyitxjFmJEOol0BqS2 xueltaDwgWcC10nPUY+y5l/kTOYyptYQS4gg1uJNXIob/R1XIEJ10ZCurkYqZxgqyHc7tZv09N23 o9rnGdjnYiArH7FjlXD8Rvjde8YWkmfdbCEWnchrnxDK8KV2/ZvBpG/WYnRKXYPUceGCw59OJdJ5 M7utkm547RB3eEd8CVVhbXopZlsKq3GCrBwaIVe9ci0= ) ; Key ID = 18733`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20221221000000 20221130000000 20326 . EBqHCSXvacXYZX3LBW7wfHm6ObNQiH9UnraUjPzmaxaMW6//o6xiHpfz/ejt3Z74Rgqieuu8aFG/ xVFMtzOFGkceWdPVU2cUIhe4hfdIpspHG6OdYXZyLM/0bebCI8PRVeFOk66/jC2VW5gRO1mmX2fS tT1BufXAsVNBjwCW+lRi5KgOerBk1krKNJNqf9GUe8YugNikmm0T9Vgvgo2HwWXw9zT0MfFW0Q/1 U2IR3DAGcALdTx/+mXuNTjPXVmjuI2XkXzZMbZrV729d0edQIKajMyrjjEhlsug1Zo3dk0KaYBmd JgVt/eDthMKY4JheyUsPYkqBxZK10DAHRO7INA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=18733 is now in the chain-of-trust
	Query to g.root-servers.net for gov.bc.ca/A
	Received 630 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (630 octets) ;; HEADER SECTION ;; id = 34886 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; gov.bc.ca. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) ca. 172800 IN NS c.ca-servers.ca. ca. 172800 IN NS x.ca-servers.ca. ca. 172800 IN NS j.ca-servers.ca. ca. 172800 IN NS any.ca-servers.ca. ca. 86400 IN DS ( 43787 8 2 2af70b49c542b7dacec2d4754651598b740ef1d79e7a839b32bc7f7e96039a2c ) ca. 86400 IN RRSIG ( DS 8 1 86400 20221217050000 20221204040000 18733 . IegivecbZXNXG7ZQT7lW89kNUS10D6l4YHbf3C33bMvyAbLs12sKL+WGlS5VnDwCyQCk4jGrYdHN CiQOSnFALnyxsJpTnL34W74rfM7ol7DOT5YU/GMPE5f6UZBZjdx5o0tYOCtg3aZThabEpEONiwKW BFX7z6BTwMKbzFTzpMNIX9GFVKC0utvJowG1GTJjeIhvK8dA+TWtCgbAM7dhFwh1dg98XYb4J1vx Tw5nb1N/6tQYLBV4hMqSWiQ/+U+lGQ0NGmMoS05XGb3tELnG+s4lW+7BFzbYWPM2miYzJpkI2t5+ b86+BA8miqwDqit5mR19fPehLCawMaKydc8Wfg== ) ;; ADDITIONAL SECTION (9 records) any.ca-servers.ca. 172800 IN A 199.4.144.2 x.ca-servers.ca. 172800 IN A 199.253.250.68 j.ca-servers.ca. 172800 IN A 198.182.167.1 c.ca-servers.ca. 172800 IN A 185.159.196.2 any.ca-servers.ca. 172800 IN AAAA 2001:500:a7::2 x.ca-servers.ca. 172800 IN AAAA 2620:10a:80ba::68 j.ca-servers.ca. 172800 IN AAAA 2001:500:83::1 c.ca-servers.ca. 172800 IN AAAA 2620:10a:8053::2 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to m.root-servers.net for ca/DNSKEY
	Received 621 bytes from 202.12.27.33
	;; Response received from 202.12.27.33 (621 octets) ;; HEADER SECTION ;; id = 34965 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ca. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) ca. 172800 IN NS x.ca-servers.ca. ca. 172800 IN NS any.ca-servers.ca. ca. 172800 IN NS c.ca-servers.ca. ca. 172800 IN NS j.ca-servers.ca. ca. 86400 IN DS ( 43787 8 2 2af70b49c542b7dacec2d4754651598b740ef1d79e7a839b32bc7f7e96039a2c ) ca. 86400 IN RRSIG ( DS 8 1 86400 20221217050000 20221204040000 18733 . IegivecbZXNXG7ZQT7lW89kNUS10D6l4YHbf3C33bMvyAbLs12sKL+WGlS5VnDwCyQCk4jGrYdHN CiQOSnFALnyxsJpTnL34W74rfM7ol7DOT5YU/GMPE5f6UZBZjdx5o0tYOCtg3aZThabEpEONiwKW BFX7z6BTwMKbzFTzpMNIX9GFVKC0utvJowG1GTJjeIhvK8dA+TWtCgbAM7dhFwh1dg98XYb4J1vx Tw5nb1N/6tQYLBV4hMqSWiQ/+U+lGQ0NGmMoS05XGb3tELnG+s4lW+7BFzbYWPM2miYzJpkI2t5+ b86+BA8miqwDqit5mR19fPehLCawMaKydc8Wfg== ) ;; ADDITIONAL SECTION (9 records) any.ca-servers.ca. 172800 IN A 199.4.144.2 x.ca-servers.ca. 172800 IN A 199.253.250.68 j.ca-servers.ca. 172800 IN A 198.182.167.1 c.ca-servers.ca. 172800 IN A 185.159.196.2 any.ca-servers.ca. 172800 IN AAAA 2001:500:a7::2 x.ca-servers.ca. 172800 IN AAAA 2620:10a:80ba::68 j.ca-servers.ca. 172800 IN AAAA 2001:500:83::1 c.ca-servers.ca. 172800 IN AAAA 2620:10a:8053::2 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone ca

	Checking DS between . and ca
	Query to c.root-servers.net for ca/DS
	Received 366 bytes from 192.33.4.12
	;; Response received from 192.33.4.12 (366 octets) ;; HEADER SECTION ;; id = 52386 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ca. IN DS ;; ANSWER SECTION (2 records) ca. 86400 IN DS ( 43787 8 2 2af70b49c542b7dacec2d4754651598b740ef1d79e7a839b32bc7f7e96039a2c ) ca. 86400 IN RRSIG ( DS 8 1 86400 20221217050000 20221204040000 18733 . IegivecbZXNXG7ZQT7lW89kNUS10D6l4YHbf3C33bMvyAbLs12sKL+WGlS5VnDwCyQCk4jGrYdHN CiQOSnFALnyxsJpTnL34W74rfM7ol7DOT5YU/GMPE5f6UZBZjdx5o0tYOCtg3aZThabEpEONiwKW BFX7z6BTwMKbzFTzpMNIX9GFVKC0utvJowG1GTJjeIhvK8dA+TWtCgbAM7dhFwh1dg98XYb4J1vx Tw5nb1N/6tQYLBV4hMqSWiQ/+U+lGQ0NGmMoS05XGb3tELnG+s4lW+7BFzbYWPM2miYzJpkI2t5+ b86+BA8miqwDqit5mR19fPehLCawMaKydc8Wfg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for ca in the . zone
	DS=43787/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ca. 86400 IN RRSIG ( DS 8 1 86400 20221217050000 20221204040000 18733 . IegivecbZXNXG7ZQT7lW89kNUS10D6l4YHbf3C33bMvyAbLs12sKL+WGlS5VnDwCyQCk4jGrYdHN CiQOSnFALnyxsJpTnL34W74rfM7ol7DOT5YU/GMPE5f6UZBZjdx5o0tYOCtg3aZThabEpEONiwKW BFX7z6BTwMKbzFTzpMNIX9GFVKC0utvJowG1GTJjeIhvK8dA+TWtCgbAM7dhFwh1dg98XYb4J1vx Tw5nb1N/6tQYLBV4hMqSWiQ/+U+lGQ0NGmMoS05XGb3tELnG+s4lW+7BFzbYWPM2miYzJpkI2t5+ b86+BA8miqwDqit5mR19fPehLCawMaKydc8Wfg== )`
	RRSIG=18733 and DNSKEY=18733 verifies the DS RRset
	DS=43787/SHA-256 is now in the chain-of-trust
	`ca. 86400 IN DS ( 43787 8 2 2af70b49c542b7dacec2d4754651598b740ef1d79e7a839b32bc7f7e96039a2c )`
	Query to x.ca-servers.ca for ca/DNSKEY
	Received 745 bytes from 199.253.250.68
	;; Response received from 199.253.250.68 (745 octets) ;; HEADER SECTION ;; id = 61441 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ca. IN DNSKEY ;; ANSWER SECTION (3 records) ca. 3600 IN DNSKEY ( 256 3 8 AwEAAdDzaSsAa4o9Efrt4stZ1KuSkYPLqfaduhrI5oqsU1f0gr88qRFkNUGxeOlJYx/PeP1S5L19 KvgVSFMbzKHg8CLikNSFtpbqZrRrKlEfsRupeeYZgAnmgYfJ7UWwAYMbamvrSdg/ziXgikURNc6S oH0giDFBPvTWj3z/Dy84gVLx ) ; Key ID = 21169 ca. 3600 IN DNSKEY ( 257 3 8 AwEAAdQO5/EKPA+iGnuWbnHi0XCIzWJ2rTwDwNi95GRLq0ULKIBEoxEjZ/zP2C9m95xkO3c0URnY ontSNxOK1okOMXN+b82ckM2Fvl+ejSXaH1it3tHUAq/bJL7ojPmjLq2osyLHN3N3JyAYbZAB28fA QgCNQXbeCiyAqXp7JXcbRhWaWAl13vZ6SnSL/M4CAb6vBAaGv/GWaclKUoKQHb+L17DEnCOyG2z+ 6b6o2maJ0GQg6uuLmZ2wocZs8UensSv+O7oLbZmggRXaxA1EtDuaqzc4KSuHYpSjLv1k7gy4tyrg DXppXNE2sArVB1F0SnkLDcg081anRW+0QN2vqT+yrfk= ) ; Key ID = 43787 ca. 3600 IN RRSIG ( DNSKEY 8 1 3600 20221209012430 20221202053752 43787 ca. N97OA9fwOP/zyTAS2kdVkChfAJo6briKODOkTaWj9Vf51vOdB4aVvyROvG2ugItTDQRgP7xlD2sr k/TdTio6FVWlHz7mxOddXYMRDCYP9LxKmr6Z+nAxcK/H0cu1rwq2jWlU7KDJ573T+hq8GIeycXYO 2adS573Lc6e47oT61Xk104zYK0nMmKFJ/OutP/oCZrWY0pnYwq0tin8A3gu+AIqb+2je7oKDvC79 c9wIR7AglCp4bBAS2P8c62M4PRXGtyqPgqcyKj/c/43AqBIfxGGdhNvKG34FVNtqN/Tehe+AsTOu Y+LXm1vHfvYyepruOyjz+yKSnA7XubNsnXWVXw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for ca
	`ca. 3600 IN DNSKEY ( 256 3 8 AwEAAdDzaSsAa4o9Efrt4stZ1KuSkYPLqfaduhrI5oqsU1f0gr88qRFkNUGxeOlJYx/PeP1S5L19 KvgVSFMbzKHg8CLikNSFtpbqZrRrKlEfsRupeeYZgAnmgYfJ7UWwAYMbamvrSdg/ziXgikURNc6S oH0giDFBPvTWj3z/Dy84gVLx ) ; Key ID = 21169`
	`ca. 3600 IN DNSKEY ( 257 3 8 AwEAAdQO5/EKPA+iGnuWbnHi0XCIzWJ2rTwDwNi95GRLq0ULKIBEoxEjZ/zP2C9m95xkO3c0URnY ontSNxOK1okOMXN+b82ckM2Fvl+ejSXaH1it3tHUAq/bJL7ojPmjLq2osyLHN3N3JyAYbZAB28fA QgCNQXbeCiyAqXp7JXcbRhWaWAl13vZ6SnSL/M4CAb6vBAaGv/GWaclKUoKQHb+L17DEnCOyG2z+ 6b6o2maJ0GQg6uuLmZ2wocZs8UensSv+O7oLbZmggRXaxA1EtDuaqzc4KSuHYpSjLv1k7gy4tyrg DXppXNE2sArVB1F0SnkLDcg081anRW+0QN2vqT+yrfk= ) ; Key ID = 43787`
	DNSKEY=43787/SEP is now in the chain-of-trust
	DS=43787/SHA-256 verifies DNSKEY=43787/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ca. 3600 IN RRSIG ( DNSKEY 8 1 3600 20221209012430 20221202053752 43787 ca. N97OA9fwOP/zyTAS2kdVkChfAJo6briKODOkTaWj9Vf51vOdB4aVvyROvG2ugItTDQRgP7xlD2sr k/TdTio6FVWlHz7mxOddXYMRDCYP9LxKmr6Z+nAxcK/H0cu1rwq2jWlU7KDJ573T+hq8GIeycXYO 2adS573Lc6e47oT61Xk104zYK0nMmKFJ/OutP/oCZrWY0pnYwq0tin8A3gu+AIqb+2je7oKDvC79 c9wIR7AglCp4bBAS2P8c62M4PRXGtyqPgqcyKj/c/43AqBIfxGGdhNvKG34FVNtqN/Tehe+AsTOu Y+LXm1vHfvYyepruOyjz+yKSnA7XubNsnXWVXw== )`
	RRSIG=43787 and DNSKEY=43787/SEP verifies the DNSKEY RRset
	DNSKEY=21169 is now in the chain-of-trust
	Query to x.ca-servers.ca for gov.bc.ca/A
	Received 605 bytes from 199.253.250.68
	;; Response received from 199.253.250.68 (605 octets) ;; HEADER SECTION ;; id = 42677 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; gov.bc.ca. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov.bc.ca. 86400 IN NS pubdns-c.spanbc.ca. gov.bc.ca. 86400 IN NS pubdns-k.spanbc.ca. 4isf00u3b81maih7dfb0cpdl8g6ac164.ca. 3600 IN NSEC3 ( 1 1 0 - 4isgjaklqh26mkvanjc0ss39hd6gp8tr TXT RRSIG ) fnoqe5p7ecn5ahe717l558o5qsobh0im.ca. 3600 IN NSEC3 ( 1 1 0 - fnqkonv8prmqb1lqq94du3qr6asnmlsa NS DS RRSIG ) 4isf00u3b81maih7dfb0cpdl8g6ac164.ca. 3600 IN RRSIG ( NSEC3 8 2 3600 20221209202149 20221202183748 21169 ca. RqAEGRqithsdNaAWB6c1NIdc0vs+8zH9CjJd//4RZhsaPpj7ib0QgB7DHApNbmMvlYKQg+AirfNs xcCrh2Tf+paa/Z3u9eHdoWjik2+PW0aYWAK1Ey//vNT8TD0dKJPdpwdlQBeLC/LVTdsRUkP8g/mu L4yuKjBdFdcZ0cWBhns= ) fnoqe5p7ecn5ahe717l558o5qsobh0im.ca. 3600 IN RRSIG ( NSEC3 8 2 3600 20221208110922 20221201070754 21169 ca. NwXEKhXASVoA3Vaky1yuUIQrIrcm7R9gYvlWJccCMasDTSnFruOLMo/AgAD1Tr6NVqthRS80d4YX aoP7WWx5yLdUCg3PNDokz9VbSyglXQV/o3RMYEgtssvX9uAiPXrxytqDm3V4L6jSMp54ii8HwoiH lxtApFisMrI9Uj7huyQ= ) ;; ADDITIONAL SECTION (3 records) pubdns-c.spanbc.ca. 86400 IN A 142.34.50.57 pubdns-k.spanbc.ca. 86400 IN A 142.34.208.20 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to x.ca-servers.ca for bc.ca/DNSKEY
	Received 513 bytes from 199.253.250.68
	;; Response received from 199.253.250.68 (513 octets) ;; HEADER SECTION ;; id = 30917 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; bc.ca. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ca. 3600 IN SOA ( prd-czp-05.corp.cira.ca. admin-dns.cira.ca. 2212041830 ;serial 2100 ;refresh 900 ;retry 3456000 ;expire 3600 ;minimum ) ca. 3600 IN RRSIG ( SOA 8 1 86400 20221211142916 20221204173749 21169 ca. kKFhR4SLdJYXBXjBNWGbOBIoGwhvFyFXKV5xlz0ilx5XajMR2jAnAxXJbGmz9191Fj4hZ7lTpnNt owbHivHmB/7cpNpVGfZtS9UeqBYeyu8ToxWcjtyCQtXvRi8ZCNG2NpeF/5ZSt6YxCOEDjhZkvEYP 6iFZLXLodssyy6UVZ+w= ) 4isf00u3b81maih7dfb0cpdl8g6ac164.ca. 3600 IN NSEC3 ( 1 1 0 - 4isgjaklqh26mkvanjc0ss39hd6gp8tr TXT RRSIG ) 4isf00u3b81maih7dfb0cpdl8g6ac164.ca. 3600 IN RRSIG ( NSEC3 8 2 3600 20221209202149 20221202183748 21169 ca. RqAEGRqithsdNaAWB6c1NIdc0vs+8zH9CjJd//4RZhsaPpj7ib0QgB7DHApNbmMvlYKQg+AirfNs xcCrh2Tf+paa/Z3u9eHdoWjik2+PW0aYWAK1Ey//vNT8TD0dKJPdpwdlQBeLC/LVTdsRUkP8g/mu L4yuKjBdFdcZ0cWBhns= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to j.ca-servers.ca for gov.bc.ca/DNSKEY
	Received 605 bytes from 198.182.167.1
	;; Response received from 198.182.167.1 (605 octets) ;; HEADER SECTION ;; id = 37082 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov.bc.ca. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov.bc.ca. 86400 IN NS pubdns-k.spanbc.ca. gov.bc.ca. 86400 IN NS pubdns-c.spanbc.ca. 4isf00u3b81maih7dfb0cpdl8g6ac164.ca. 3600 IN NSEC3 ( 1 1 0 - 4isgjaklqh26mkvanjc0ss39hd6gp8tr TXT RRSIG ) 4isf00u3b81maih7dfb0cpdl8g6ac164.ca. 3600 IN RRSIG ( NSEC3 8 2 3600 20221209202149 20221202183748 21169 ca. RqAEGRqithsdNaAWB6c1NIdc0vs+8zH9CjJd//4RZhsaPpj7ib0QgB7DHApNbmMvlYKQg+AirfNs xcCrh2Tf+paa/Z3u9eHdoWjik2+PW0aYWAK1Ey//vNT8TD0dKJPdpwdlQBeLC/LVTdsRUkP8g/mu L4yuKjBdFdcZ0cWBhns= ) fnoqe5p7ecn5ahe717l558o5qsobh0im.ca. 3600 IN NSEC3 ( 1 1 0 - fnqkonv8prmqb1lqq94du3qr6asnmlsa NS DS RRSIG ) fnoqe5p7ecn5ahe717l558o5qsobh0im.ca. 3600 IN RRSIG ( NSEC3 8 2 3600 20221208110922 20221201070754 21169 ca. NwXEKhXASVoA3Vaky1yuUIQrIrcm7R9gYvlWJccCMasDTSnFruOLMo/AgAD1Tr6NVqthRS80d4YX aoP7WWx5yLdUCg3PNDokz9VbSyglXQV/o3RMYEgtssvX9uAiPXrxytqDm3V4L6jSMp54ii8HwoiH lxtApFisMrI9Uj7huyQ= ) ;; ADDITIONAL SECTION (3 records) pubdns-c.spanbc.ca. 86400 IN A 142.34.50.57 pubdns-k.spanbc.ca. 86400 IN A 142.34.208.20 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone gov.bc.ca

gov.bc.ca

	Checking DS between ca and gov.bc.ca
	Query to any.ca-servers.ca for gov.bc.ca/DS
	Received 749 bytes from 199.4.144.2
	;; Response received from 199.4.144.2 (749 octets) ;; HEADER SECTION ;; id = 12980 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; gov.bc.ca. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) ca. 3600 IN SOA ( prd-czp-05.corp.cira.ca. admin-dns.cira.ca. 2212041830 ;serial 2100 ;refresh 900 ;retry 3456000 ;expire 3600 ;minimum ) 4isf00u3b81maih7dfb0cpdl8g6ac164.ca. 3600 IN NSEC3 ( 1 1 0 - 4isgjaklqh26mkvanjc0ss39hd6gp8tr TXT RRSIG ) fnoqe5p7ecn5ahe717l558o5qsobh0im.ca. 3600 IN NSEC3 ( 1 1 0 - fnqkonv8prmqb1lqq94du3qr6asnmlsa NS DS RRSIG ) ca. 3600 IN RRSIG ( SOA 8 1 86400 20221211142916 20221204173749 21169 ca. kKFhR4SLdJYXBXjBNWGbOBIoGwhvFyFXKV5xlz0ilx5XajMR2jAnAxXJbGmz9191Fj4hZ7lTpnNt owbHivHmB/7cpNpVGfZtS9UeqBYeyu8ToxWcjtyCQtXvRi8ZCNG2NpeF/5ZSt6YxCOEDjhZkvEYP 6iFZLXLodssyy6UVZ+w= ) 4isf00u3b81maih7dfb0cpdl8g6ac164.ca. 3600 IN RRSIG ( NSEC3 8 2 3600 20221209202149 20221202183748 21169 ca. RqAEGRqithsdNaAWB6c1NIdc0vs+8zH9CjJd//4RZhsaPpj7ib0QgB7DHApNbmMvlYKQg+AirfNs xcCrh2Tf+paa/Z3u9eHdoWjik2+PW0aYWAK1Ey//vNT8TD0dKJPdpwdlQBeLC/LVTdsRUkP8g/mu L4yuKjBdFdcZ0cWBhns= ) fnoqe5p7ecn5ahe717l558o5qsobh0im.ca. 3600 IN RRSIG ( NSEC3 8 2 3600 20221208110922 20221201070754 21169 ca. NwXEKhXASVoA3Vaky1yuUIQrIrcm7R9gYvlWJccCMasDTSnFruOLMo/AgAD1Tr6NVqthRS80d4YX aoP7WWx5yLdUCg3PNDokz9VbSyglXQV/o3RMYEgtssvX9uAiPXrxytqDm3V4L6jSMp54ii8HwoiH lxtApFisMrI9Uj7huyQ= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	No DS records found for gov.bc.ca in the ca zone
	Query to pubdns-k.spanbc.ca for gov.bc.ca/DNSKEY
	Received 110 bytes from 142.34.208.20
	;; Response received from 142.34.208.20 (110 octets) ;; HEADER SECTION ;; id = 59686 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; gov.bc.ca. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) gov.bc.ca. 3600 IN SOA ( UNDISCLOSED-DNS.GOV.BC.CA. DNSREQUEST.GOV.BC.CA. 2022120026 ;serial 86400 ;refresh 7200 ;retry 3600000 ;expire 43200 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	No DNSKEY records found
	Query to pubdns-c.spanbc.ca for gov.bc.ca/A
	Received 109 bytes from 142.34.50.57
	;; Response received from 142.34.50.57 (109 octets) ;; HEADER SECTION ;; id = 31248 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; gov.bc.ca. IN A ;; ANSWER SECTION (1 record) gov.bc.ca. 900 IN A 142.34.213.59 ;; AUTHORITY SECTION (2 records) gov.bc.ca. 21600 IN NS pubdns-c.spanbc.ca. gov.bc.ca. 21600 IN NS pubdns-k.spanbc.ca. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	pubdns-c.spanbc.ca is authoritative for gov.bc.ca
	Query to pubdns-k.spanbc.ca for gov.bc.ca/SOA
	Received 165 bytes from 142.34.208.20
	;; Response received from 142.34.208.20 (165 octets) ;; HEADER SECTION ;; id = 22271 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; gov.bc.ca. IN SOA ;; ANSWER SECTION (1 record) gov.bc.ca. 3600 IN SOA ( UNDISCLOSED-DNS.GOV.BC.CA. DNSREQUEST.GOV.BC.CA. 2022120026 ;serial 86400 ;refresh 7200 ;retry 3600000 ;expire 43200 ;minimum ) ;; AUTHORITY SECTION (2 records) gov.bc.ca. 21600 IN NS pubdns-c.spanbc.ca. gov.bc.ca. 21600 IN NS pubdns-k.spanbc.ca. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to pubdns-c.spanbc.ca for gov.bc.ca/A
	Received 109 bytes from 142.34.50.57
	;; Response received from 142.34.50.57 (109 octets) ;; HEADER SECTION ;; id = 32101 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; gov.bc.ca. IN A ;; ANSWER SECTION (1 record) gov.bc.ca. 900 IN A 142.34.213.59 ;; AUTHORITY SECTION (2 records) gov.bc.ca. 21600 IN NS pubdns-c.spanbc.ca. gov.bc.ca. 21600 IN NS pubdns-k.spanbc.ca. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	gov.bc.ca A RR has value 142.34.213.59
	No RRSIGs found

gov.bc.ca

	Query to pubdns-k.spanbc.ca for gov.bc.ca/A
	Received 109 bytes from 142.34.208.20
	;; Response received from 142.34.208.20 (109 octets) ;; HEADER SECTION ;; id = 40343 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; gov.bc.ca. IN A ;; ANSWER SECTION (1 record) gov.bc.ca. 900 IN A 142.34.213.59 ;; AUTHORITY SECTION (2 records) gov.bc.ca. 21600 IN NS pubdns-k.spanbc.ca. gov.bc.ca. 21600 IN NS pubdns-c.spanbc.ca. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	pubdns-k.spanbc.ca is authoritative for gov.bc.ca
	Query to pubdns-k.spanbc.ca for gov.bc.ca/A
	Received 109 bytes from 142.34.208.20
	;; Response received from 142.34.208.20 (109 octets) ;; HEADER SECTION ;; id = 4960 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; gov.bc.ca. IN A ;; ANSWER SECTION (1 record) gov.bc.ca. 900 IN A 142.34.213.59 ;; AUTHORITY SECTION (2 records) gov.bc.ca. 21600 IN NS pubdns-c.spanbc.ca. gov.bc.ca. 21600 IN NS pubdns-k.spanbc.ca. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	gov.bc.ca A RR has value 142.34.213.59
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test gov.bc.ca at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: