DNSSEC Analyzer - jcrooke.net

Domain Name:

Time: 2019-10-19 05:14:31 UTC, NTP stratum 4

Analyzing DNSSEC problems for jcrooke.net

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to a.root-servers.net for ./DNSKEY
	Received 864 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (864 bytes) ;; HEADER SECTION ;; id = 41096 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20191101000000 20191011000000 20326 . m7mvEdeqXKN9sp0nUBhJUWTdurOlW0ruL9Ot1xceZaaYAV5Yz0UbwAWwcu6Sjf9rtridZ4jOuVmU FHaVeRJtA5v8jhU6mPveHVSppdtMQjGqeCQnq683EArww37WBaULfIb6Rr5BE1Gwgk93O2WwFRWH MW2csoFTIhYDNQ1SfIUkYSp3VR04r4o5mtuwhwvjAgvFpRN9qpwIYG7lWhThrJW1hTyqEoP9YY5n zs3jEYYJJ3JNU+SopJSoQ/5/vIerMovD28y4d8IHs/A0gqlSaW7Dg3kQvh0gZU6u117tjz20QuJu nD6J+MraIGpYBMgaPZvEDbCmbCGOtqKqsrX5tw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20191101000000 20191011000000 20326 . m7mvEdeqXKN9sp0nUBhJUWTdurOlW0ruL9Ot1xceZaaYAV5Yz0UbwAWwcu6Sjf9rtridZ4jOuVmU FHaVeRJtA5v8jhU6mPveHVSppdtMQjGqeCQnq683EArww37WBaULfIb6Rr5BE1Gwgk93O2WwFRWH MW2csoFTIhYDNQ1SfIUkYSp3VR04r4o5mtuwhwvjAgvFpRN9qpwIYG7lWhThrJW1hTyqEoP9YY5n zs3jEYYJJ3JNU+SopJSoQ/5/vIerMovD28y4d8IHs/A0gqlSaW7Dg3kQvh0gZU6u117tjz20QuJu nD6J+MraIGpYBMgaPZvEDbCmbCGOtqKqsrX5tw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=22545 is now in the chain-of-trust
	Query to c.root-servers.net for jcrooke.net/A
	Received 1168 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (1168 bytes) ;; HEADER SECTION ;; id = 20890 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; jcrooke.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20191031170000 20191018160000 22545 . dufYtRpj3LeFu1Xm56jxJVXSQxFaFdyg4JGylbotfKHpImsu67a0xJndDZCfRKDsVBhpTuB9XucS BeTFqu1OmUtU2ALXuylEWIH0/FH22QlOVmXlGlRS19hHTjQCRmpZTj2HtKG0mE+rQt82ZfCsSHDw a0VUIteGhqtcY4eFQU/1NNBee1vfmbvjygCCf2L3HFcWSG3weI87W6cQtdDsfQJLoQ6k9DFgFDeb uNoDn4XV12864EO9LbL9LpBE7xm/HCRMnrIByoABLOX0aOhbKb+UeSL+n1EL6x3z+v7ADkJFlh6f z8KsQeocFuLLLGQ9xLtPTRVHo1/34aKgpyu4eg== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 m.gtld-servers.net. 172800 IN A 192.55.83.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to m.root-servers.net for net/DNSKEY
	Received 1160 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (1160 bytes) ;; HEADER SECTION ;; id = 14698 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20191031170000 20191018160000 22545 . dufYtRpj3LeFu1Xm56jxJVXSQxFaFdyg4JGylbotfKHpImsu67a0xJndDZCfRKDsVBhpTuB9XucS BeTFqu1OmUtU2ALXuylEWIH0/FH22QlOVmXlGlRS19hHTjQCRmpZTj2HtKG0mE+rQt82ZfCsSHDw a0VUIteGhqtcY4eFQU/1NNBee1vfmbvjygCCf2L3HFcWSG3weI87W6cQtdDsfQJLoQ6k9DFgFDeb uNoDn4XV12864EO9LbL9LpBE7xm/HCRMnrIByoABLOX0aOhbKb+UeSL+n1EL6x3z+v7ADkJFlh6f z8KsQeocFuLLLGQ9xLtPTRVHo1/34aKgpyu4eg== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 m.gtld-servers.net. 172800 IN A 192.55.83.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone net

net

	Checking DS between . and net
	Query to d.root-servers.net for net/DS
	Error querying d.root-servers.net/2001:500:2d:0:0:0:0:d for net/DS: 'IPv6 transport disabled'
	Received 367 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (367 bytes) ;; HEADER SECTION ;; id = 5203 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DS ;; ANSWER SECTION (2 records) net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20191031170000 20191018160000 22545 . dufYtRpj3LeFu1Xm56jxJVXSQxFaFdyg4JGylbotfKHpImsu67a0xJndDZCfRKDsVBhpTuB9XucS BeTFqu1OmUtU2ALXuylEWIH0/FH22QlOVmXlGlRS19hHTjQCRmpZTj2HtKG0mE+rQt82ZfCsSHDw a0VUIteGhqtcY4eFQU/1NNBee1vfmbvjygCCf2L3HFcWSG3weI87W6cQtdDsfQJLoQ6k9DFgFDeb uNoDn4XV12864EO9LbL9LpBE7xm/HCRMnrIByoABLOX0aOhbKb+UeSL+n1EL6x3z+v7ADkJFlh6f z8KsQeocFuLLLGQ9xLtPTRVHo1/34aKgpyu4eg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found 1 DS records for net in the . zone
	DS=35886/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`net. 86400 IN RRSIG ( DS 8 1 86400 20191031170000 20191018160000 22545 . dufYtRpj3LeFu1Xm56jxJVXSQxFaFdyg4JGylbotfKHpImsu67a0xJndDZCfRKDsVBhpTuB9XucS BeTFqu1OmUtU2ALXuylEWIH0/FH22QlOVmXlGlRS19hHTjQCRmpZTj2HtKG0mE+rQt82ZfCsSHDw a0VUIteGhqtcY4eFQU/1NNBee1vfmbvjygCCf2L3HFcWSG3weI87W6cQtdDsfQJLoQ6k9DFgFDeb uNoDn4XV12864EO9LbL9LpBE7xm/HCRMnrIByoABLOX0aOhbKb+UeSL+n1EL6x3z+v7ADkJFlh6f z8KsQeocFuLLLGQ9xLtPTRVHo1/34aKgpyu4eg== )`
	RRSIG=22545 and DNSKEY=22545 verifies the DS RRset
	DS=35886/SHA-256 is now in the chain-of-trust
	`net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee )`
	Query to l.gtld-servers.net for net/DNSKEY
	Received 953 bytes from 192.41.162.30
	;; Answer received from 192.41.162.30 (953 bytes) ;; HEADER SECTION ;; id = 9910 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (4 records) net. 86400 IN DNSKEY ( 257 3 8 AQOYBnzqWXIEj6mlgXg4LWC0HP2n8eK8XqgHlmJ/69iuIHsa1TrHDG6TcOra/pyeGKwH0nKZhTmX SuUFGh9BCNiwVDuyyb6OBGy2Nte9Kr8NwWg4q+zhSoOf4D+gC9dEzg0yFdwT0DKEvmNPt0K4jbQD S4Yimb+uPKuF6yieWWrPYYCrv8C9KC8JMze2uT6NuWBfsl2fDUoV4l65qMww06D7n+p7RbdwWkAZ 0fA63mXVXBZF6kpDtsYD7SUB9jhhfLQE/r85bvg3FaSs5Wi2BaqN06SzGWI1DHu7axthIOeHwg00 zxlhTpoYCH0ldoQz+S65zWYi/fRJiyLSBb6JZOvn ) ; Key ID = 35886 net. 86400 IN DNSKEY ( 256 3 8 AQPMuG9B6RzrpKkDY2hioZbpNGxdpEoyQ0ghHw138VY4csqkK4C3n0T+Q96bXi/M+onoyHOY5K9a ZHtgXkghOXLDPqVuNnX6t0WmEmGn9LZ2zVnJTrd3R7nB0wiByDace6JLh3c9eQzSPso8EBm1YL7f kGE1A6t/LFoMDcuZ6ZJcvkau15qU4FNOPIrF6ATKFqQdKj71rxfwNwwv1gJ3ITYx ) ; Key ID = 36407 net. 86400 IN DNSKEY ( 256 3 8 AQPFatGYYq6lmu+wGZlm199qhiLT+qjHuz8Az2coMrhZjXdltPEwtF8PNzJ9clvP4ydyHRhrH62Q rWbTkpu1Uk3WN3KZ814QoYIQCZdO3sQJ8iwchhvgOE4WKtQzt1LtEfQteXc+Vm0Ccnwog+zhKvMQ NpPuRA9AhWGVJ2XGyNJk1oe6bO+Z30ICoRUiFQo3CZqoAebXgJUJBhXxNncvHWan ) ; Key ID = 59540 net. 86400 IN RRSIG ( DNSKEY 8 1 86400 20191101162830 20191017162330 35886 net. EbE/R+UsUVMbQvIusPckPCv8CsedOv2FyOxYKMWVazvlUZfAMAw9FtenSUdnQhudWR3q9xkBB1qi MQL9hNZzvMaK0EwWPQc4NSvLbo77ZFiB0tJiYUpvK6fVqnsmgYDJsfABkObpM749gSaFf1k4Ec4L ndoB9IBOM2wsJ7QsYpJpFbxaoz8TQbiynaI0KDfWYe9GBq5B4hVNse2XGPsNCaJOS8qyG5E5cWp9 wMAYvObEsApyufoqcOU54CZj5RmuK1f5HKUGuevOYAyxrtZ2oJgOUaNnGAh9Av6Vo3c+B7LQXeSv 0OubZ/y3p/JCN9Nn+T/+fmVJ4jhA8I4sRFHzEw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for net
	`net. 86400 IN DNSKEY ( 257 3 8 AQOYBnzqWXIEj6mlgXg4LWC0HP2n8eK8XqgHlmJ/69iuIHsa1TrHDG6TcOra/pyeGKwH0nKZhTmX SuUFGh9BCNiwVDuyyb6OBGy2Nte9Kr8NwWg4q+zhSoOf4D+gC9dEzg0yFdwT0DKEvmNPt0K4jbQD S4Yimb+uPKuF6yieWWrPYYCrv8C9KC8JMze2uT6NuWBfsl2fDUoV4l65qMww06D7n+p7RbdwWkAZ 0fA63mXVXBZF6kpDtsYD7SUB9jhhfLQE/r85bvg3FaSs5Wi2BaqN06SzGWI1DHu7axthIOeHwg00 zxlhTpoYCH0ldoQz+S65zWYi/fRJiyLSBb6JZOvn ) ; Key ID = 35886`
	`net. 86400 IN DNSKEY ( 256 3 8 AQPMuG9B6RzrpKkDY2hioZbpNGxdpEoyQ0ghHw138VY4csqkK4C3n0T+Q96bXi/M+onoyHOY5K9a ZHtgXkghOXLDPqVuNnX6t0WmEmGn9LZ2zVnJTrd3R7nB0wiByDace6JLh3c9eQzSPso8EBm1YL7f kGE1A6t/LFoMDcuZ6ZJcvkau15qU4FNOPIrF6ATKFqQdKj71rxfwNwwv1gJ3ITYx ) ; Key ID = 36407`
	`net. 86400 IN DNSKEY ( 256 3 8 AQPFatGYYq6lmu+wGZlm199qhiLT+qjHuz8Az2coMrhZjXdltPEwtF8PNzJ9clvP4ydyHRhrH62Q rWbTkpu1Uk3WN3KZ814QoYIQCZdO3sQJ8iwchhvgOE4WKtQzt1LtEfQteXc+Vm0Ccnwog+zhKvMQ NpPuRA9AhWGVJ2XGyNJk1oe6bO+Z30ICoRUiFQo3CZqoAebXgJUJBhXxNncvHWan ) ; Key ID = 59540`
	DNSKEY=35886/SEP is now in the chain-of-trust
	DS=35886/SHA-256 verifies DNSKEY=35886/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`net. 86400 IN RRSIG ( DNSKEY 8 1 86400 20191101162830 20191017162330 35886 net. EbE/R+UsUVMbQvIusPckPCv8CsedOv2FyOxYKMWVazvlUZfAMAw9FtenSUdnQhudWR3q9xkBB1qi MQL9hNZzvMaK0EwWPQc4NSvLbo77ZFiB0tJiYUpvK6fVqnsmgYDJsfABkObpM749gSaFf1k4Ec4L ndoB9IBOM2wsJ7QsYpJpFbxaoz8TQbiynaI0KDfWYe9GBq5B4hVNse2XGPsNCaJOS8qyG5E5cWp9 wMAYvObEsApyufoqcOU54CZj5RmuK1f5HKUGuevOYAyxrtZ2oJgOUaNnGAh9Av6Vo3c+B7LQXeSv 0OubZ/y3p/JCN9Nn+T/+fmVJ4jhA8I4sRFHzEw== )`
	RRSIG=35886 and DNSKEY=35886/SEP verifies the DNSKEY RRset
	DNSKEY=36407 is now in the chain-of-trust
	DNSKEY=59540 is now in the chain-of-trust
	Query to h.gtld-servers.net for jcrooke.net/A
	Received 404 bytes from 192.54.112.30
	;; Answer received from 192.54.112.30 (404 bytes) ;; HEADER SECTION ;; id = 320 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; jcrooke.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) jcrooke.net. 172800 IN NS ns-cloud-d1.googledomains.com. jcrooke.net. 172800 IN NS ns-cloud-d2.googledomains.com. jcrooke.net. 172800 IN NS ns-cloud-d3.googledomains.com. jcrooke.net. 172800 IN NS ns-cloud-d4.googledomains.com. jcrooke.net. 86400 IN DS ( 48337 8 2 2930341208e8c39918267a22072b7e8490a364f913171ccc98e754aa229786fb ) jcrooke.net. 86400 IN RRSIG ( DS 8 2 86400 20191024060856 20191017045856 36407 net. CK+hIyoEhdCNFdf0sb+rbIfgSz9BxmVnechfO42ENdnOkvnYap2GVTfMtZSfLa6L3pgcBh5hIq4f WEQyQU5JTqS+IL9yzaRUIaGjxuFRYMlrjCFmd8xzwqTq4BtJi6KkUk7q6BpH8OMO6gEWJqlf/J1F LapwLucq+AnEr0kpli/1lFbNUMxFFVqSjAQtAWVB5RVSoopcz54GIOnOqBE4yA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to h.gtld-servers.net for jcrooke.net/DNSKEY
	Error querying h.gtld-servers.net/2001:502:8cc:0:0:0:0:30 for jcrooke.net/DNSKEY: 'IPv6 transport disabled'
	Received 404 bytes from 192.54.112.30
	;; Answer received from 192.54.112.30 (404 bytes) ;; HEADER SECTION ;; id = 47057 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; jcrooke.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) jcrooke.net. 172800 IN NS ns-cloud-d1.googledomains.com. jcrooke.net. 172800 IN NS ns-cloud-d2.googledomains.com. jcrooke.net. 172800 IN NS ns-cloud-d3.googledomains.com. jcrooke.net. 172800 IN NS ns-cloud-d4.googledomains.com. jcrooke.net. 86400 IN DS ( 48337 8 2 2930341208e8c39918267a22072b7e8490a364f913171ccc98e754aa229786fb ) jcrooke.net. 86400 IN RRSIG ( DS 8 2 86400 20191024060856 20191017045856 36407 net. CK+hIyoEhdCNFdf0sb+rbIfgSz9BxmVnechfO42ENdnOkvnYap2GVTfMtZSfLa6L3pgcBh5hIq4f WEQyQU5JTqS+IL9yzaRUIaGjxuFRYMlrjCFmd8xzwqTq4BtJi6KkUk7q6BpH8OMO6gEWJqlf/J1F LapwLucq+AnEr0kpli/1lFbNUMxFFVqSjAQtAWVB5RVSoopcz54GIOnOqBE4yA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone jcrooke.net

jcrooke.net

	Checking DS between net and jcrooke.net
	Query to l.gtld-servers.net for jcrooke.net/DS
	Received 1271 bytes from 192.41.162.30
	;; Answer received from 192.41.162.30 (1271 bytes) ;; HEADER SECTION ;; id = 29272 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 14 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; jcrooke.net. IN DS ;; ANSWER SECTION (2 records) jcrooke.net. 86400 IN DS ( 48337 8 2 2930341208e8c39918267a22072b7e8490a364f913171ccc98e754aa229786fb ) jcrooke.net. 86400 IN RRSIG ( DS 8 2 86400 20191024060856 20191017045856 36407 net. CK+hIyoEhdCNFdf0sb+rbIfgSz9BxmVnechfO42ENdnOkvnYap2GVTfMtZSfLa6L3pgcBh5hIq4f WEQyQU5JTqS+IL9yzaRUIaGjxuFRYMlrjCFmd8xzwqTq4BtJi6KkUk7q6BpH8OMO6gEWJqlf/J1F LapwLucq+AnEr0kpli/1lFbNUMxFFVqSjAQtAWVB5RVSoopcz54GIOnOqBE4yA== ) ;; AUTHORITY SECTION (14 records) net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN RRSIG ( NS 8 1 172800 20191024061046 20191017050046 36407 net. DLiJJPZVJJt3o0ONNB1yw5dpjiF8ozID14WXx617OHNMKt0NmiQewOUZL/fR24BBpsrZYee0jVdF 5+p6gs5l7enzHwga5Lmkvz4r0OAq1wt4jP/aLkGXJAIbj/Mbi+MDMaZXPDMTvLOee+PXJhxn+LeE Z3brpp8yUiDT+/lySu4PuxhKu/9Qv1OiU+wiXkSoK8A8gQd63ZcpWMgDS0BDbg== ) ;; ADDITIONAL SECTION (27 records) d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for jcrooke.net in the net zone
	DS=48337/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`jcrooke.net. 86400 IN RRSIG ( DS 8 2 86400 20191024060856 20191017045856 36407 net. CK+hIyoEhdCNFdf0sb+rbIfgSz9BxmVnechfO42ENdnOkvnYap2GVTfMtZSfLa6L3pgcBh5hIq4f WEQyQU5JTqS+IL9yzaRUIaGjxuFRYMlrjCFmd8xzwqTq4BtJi6KkUk7q6BpH8OMO6gEWJqlf/J1F LapwLucq+AnEr0kpli/1lFbNUMxFFVqSjAQtAWVB5RVSoopcz54GIOnOqBE4yA== )`
	RRSIG=36407 and DNSKEY=36407 verifies the DS RRset
	DS=48337/SHA-256 is now in the chain-of-trust
	`jcrooke.net. 86400 IN DS ( 48337 8 2 2930341208e8c39918267a22072b7e8490a364f913171ccc98e754aa229786fb )`
	Query to ns-cloud-d2.googledomains.com for jcrooke.net/DNSKEY
	Received 911 bytes from 216.239.34.109
	;; Answer received from 216.239.34.109 (911 bytes) ;; HEADER SECTION ;; id = 43055 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; jcrooke.net. IN DNSKEY ;; ANSWER SECTION (4 records) jcrooke.net. 300 IN DNSKEY ( 256 3 8 AwEAAY8ZhCiT4LJa4piE6V5VuXWWx3ZVFiLSXDCgTCgnHEwvSJDsLGPF6ZXeWHJCU8HBqMCggWfW TX4lXrWevzHaTg7oSX8/z0aKRZD5hyaKPrnwz+ETeNrQ937LOUko9V4fcJJnnNUy8g07YxpTaKC0 oXcFYHSYC5wpzmKaVziOjROF ) ; Key ID = 12573 jcrooke.net. 300 IN DNSKEY ( 256 3 8 AwEAAaL54MyjJj7/7YNKxfx/Sv28QywvzjIYvNcmySmFDptBYesPvlwVYl7ar62mZEatHCoesQMg wAdgKF/CkMN0pS0ZiX47b6zHmwxuzh30d4Ys20NexkwexdDP5X/5CqOpqZdpPOslHQrHYtNXK8Mn Ld666NKOYQP6O5HcXfx2XsCp ) ; Key ID = 53410 jcrooke.net. 300 IN DNSKEY ( 257 3 8 AwEAAYOC9hNfmfTD5XnXrKB6h971zLYNYqPbRjVaI8DdKPZgsLlrakaJnLjrx1lMQnFgX6Sh3e6P 7dI6XG2jPwLH0oP4BNoyxu4KpMfcE8C5J1kj39tVr39C3usFhGJcWUg89BmgORD4EH+d0jy027Af qdDfOIN8FTeLTNwnPm3rCi0jedRE/qc9LDjDMVcwC3HX6yN9f/lpFlXgEvrEXE3r3/j9BWqaik4C 1Vv1+C9ItUcIzBkbUlsIzbm8E5Wg4MAg+qecPZX+bBF2h5wBuy4a7PXAh5EMbm/NlOpS4X+O7Qib jgVCf+3DWfwc1a9dKsWHnAQiVyaRehivpCsB+z5hBsk= ) ; Key ID = 48337 jcrooke.net. 300 IN RRSIG ( DNSKEY 8 2 300 20191106152219 20191015152219 48337 jcrooke.net. VYEW+WPAvUh44C3Tyfklndhb/eG0Gt96aWQkP4xOGCcAENc6RUc4ob/tOJuqXNJU6GlMR3r2xFlD lNuoqZ8itnTRJq19ZNqZyR2RQ0eBYKphosmjlRQ/1KAwJWSPqBaMRea60yUm2hpwkB/rnM3KylvK OYOZiGQ+fiBxMevV2lfifIC4gv+xmZLYostA5yOCC0QnfQcjkI6OkmE7wLw5ZYyE2lBG8LAxBmma Up2mmn7o06m2D2gIf7rcxLXLaTzyW6Ejum1sw8lY32HWYfHgILWIABwxAN1Bm4xETlE9ukP0Z1bD aTkiY2LI3koT0bKr4pXzh0PHM1Z5txkdixDuRg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	Found 3 DNSKEY records for jcrooke.net
	`jcrooke.net. 300 IN DNSKEY ( 256 3 8 AwEAAY8ZhCiT4LJa4piE6V5VuXWWx3ZVFiLSXDCgTCgnHEwvSJDsLGPF6ZXeWHJCU8HBqMCggWfW TX4lXrWevzHaTg7oSX8/z0aKRZD5hyaKPrnwz+ETeNrQ937LOUko9V4fcJJnnNUy8g07YxpTaKC0 oXcFYHSYC5wpzmKaVziOjROF ) ; Key ID = 12573`
	`jcrooke.net. 300 IN DNSKEY ( 256 3 8 AwEAAaL54MyjJj7/7YNKxfx/Sv28QywvzjIYvNcmySmFDptBYesPvlwVYl7ar62mZEatHCoesQMg wAdgKF/CkMN0pS0ZiX47b6zHmwxuzh30d4Ys20NexkwexdDP5X/5CqOpqZdpPOslHQrHYtNXK8Mn Ld666NKOYQP6O5HcXfx2XsCp ) ; Key ID = 53410`
	`jcrooke.net. 300 IN DNSKEY ( 257 3 8 AwEAAYOC9hNfmfTD5XnXrKB6h971zLYNYqPbRjVaI8DdKPZgsLlrakaJnLjrx1lMQnFgX6Sh3e6P 7dI6XG2jPwLH0oP4BNoyxu4KpMfcE8C5J1kj39tVr39C3usFhGJcWUg89BmgORD4EH+d0jy027Af qdDfOIN8FTeLTNwnPm3rCi0jedRE/qc9LDjDMVcwC3HX6yN9f/lpFlXgEvrEXE3r3/j9BWqaik4C 1Vv1+C9ItUcIzBkbUlsIzbm8E5Wg4MAg+qecPZX+bBF2h5wBuy4a7PXAh5EMbm/NlOpS4X+O7Qib jgVCf+3DWfwc1a9dKsWHnAQiVyaRehivpCsB+z5hBsk= ) ; Key ID = 48337`
	DNSKEY=48337/SEP is now in the chain-of-trust
	DS=48337/SHA-256 verifies DNSKEY=48337/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`jcrooke.net. 300 IN RRSIG ( DNSKEY 8 2 300 20191106152219 20191015152219 48337 jcrooke.net. VYEW+WPAvUh44C3Tyfklndhb/eG0Gt96aWQkP4xOGCcAENc6RUc4ob/tOJuqXNJU6GlMR3r2xFlD lNuoqZ8itnTRJq19ZNqZyR2RQ0eBYKphosmjlRQ/1KAwJWSPqBaMRea60yUm2hpwkB/rnM3KylvK OYOZiGQ+fiBxMevV2lfifIC4gv+xmZLYostA5yOCC0QnfQcjkI6OkmE7wLw5ZYyE2lBG8LAxBmma Up2mmn7o06m2D2gIf7rcxLXLaTzyW6Ejum1sw8lY32HWYfHgILWIABwxAN1Bm4xETlE9ukP0Z1bD aTkiY2LI3koT0bKr4pXzh0PHM1Z5txkdixDuRg== )`
	RRSIG=48337 and DNSKEY=48337/SEP verifies the DNSKEY RRset
	DNSKEY=12573 is now in the chain-of-trust
	DNSKEY=53410 is now in the chain-of-trust
	Query to ns-cloud-d1.googledomains.com for jcrooke.net/A
	Received 227 bytes from 216.239.32.109
	;; Answer received from 216.239.32.109 (227 bytes) ;; HEADER SECTION ;; id = 26176 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; jcrooke.net. IN A ;; ANSWER SECTION (2 records) jcrooke.net. 300 IN A 87.122.96.249 jcrooke.net. 300 IN RRSIG ( A 8 2 300 20191106152219 20191015152219 12573 jcrooke.net. GTygpReKZ3yzeRhSSlDTeC2I0kVsL2eJd7eVIY61GqmVYdeB+gfmz2Wq2j/BdCR0c07jk77/2KaB by71bnP+x9KU038YlLgYXGzeAyOwUNt4ZzyYwog6iCaRqj5uHcS31rNxh2geisQ5UZAE2G4JEkc8 GZ5zJDbvFLCEjPWX34U= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	jcrooke.net is authoritative for jcrooke.net
	Found RRSIG signed by jcrooke.net zone
	Query to ns-cloud-d3.googledomains.com for jcrooke.net/SOA
	Received 567 bytes from 216.239.36.109
	;; Answer received from 216.239.36.109 (567 bytes) ;; HEADER SECTION ;; id = 18817 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; jcrooke.net. IN SOA ;; ANSWER SECTION (2 records) jcrooke.net. 21600 IN SOA ( ns-cloud-d1.googledomains.com. cloud-dns-hostmaster.google.com. 323 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) jcrooke.net. 21600 IN RRSIG ( SOA 8 2 21600 20191106152219 20191015152219 12573 jcrooke.net. HYXzRFph9shQ/QquzcycsQmZB1IuhsdZXIJgOJYM8n56FtBoOoEwi2FxNnnUitet4xlExl3qbRD0 gGyAi8wyMvQyx9G/W32c0ka9IKsvXMXpyx1UFbJauz9rZDfr9EkjQp9JhwGfKpqgnzxY7wBmdFl2 fOnUsmPTD+RncIY887k= ) ;; AUTHORITY SECTION (5 records) jcrooke.net. 21600 IN NS ns-cloud-d1.googledomains.com. jcrooke.net. 21600 IN NS ns-cloud-d2.googledomains.com. jcrooke.net. 21600 IN NS ns-cloud-d3.googledomains.com. jcrooke.net. 21600 IN NS ns-cloud-d4.googledomains.com. jcrooke.net. 21600 IN RRSIG ( NS 8 2 21600 20191106152219 20191015152219 12573 jcrooke.net. VpRnFlr86D9tdNIpqC1LyAZ5O5zhwm4JI1BcFvA8J+FHwNOQStGseY1IgjI+oTzyc9dFAz7BG9N0 TzQGCGv9GIq0y2VT+v+f68u/623O1Udk+8rDxCy4flqMtnZ+8PHiheIaBTx2CvZSfmS3l40GMp0A /sKmM/CuDoxWt7LOVSY= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	Query to ns-cloud-d1.googledomains.com for jcrooke.net/SOA
	Received 567 bytes from 216.239.32.109
	;; Answer received from 216.239.32.109 (567 bytes) ;; HEADER SECTION ;; id = 19512 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; jcrooke.net. IN SOA ;; ANSWER SECTION (2 records) jcrooke.net. 21600 IN SOA ( ns-cloud-d1.googledomains.com. cloud-dns-hostmaster.google.com. 323 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) jcrooke.net. 21600 IN RRSIG ( SOA 8 2 21600 20191106152219 20191015152219 12573 jcrooke.net. HYXzRFph9shQ/QquzcycsQmZB1IuhsdZXIJgOJYM8n56FtBoOoEwi2FxNnnUitet4xlExl3qbRD0 gGyAi8wyMvQyx9G/W32c0ka9IKsvXMXpyx1UFbJauz9rZDfr9EkjQp9JhwGfKpqgnzxY7wBmdFl2 fOnUsmPTD+RncIY887k= ) ;; AUTHORITY SECTION (5 records) jcrooke.net. 21600 IN NS ns-cloud-d1.googledomains.com. jcrooke.net. 21600 IN NS ns-cloud-d2.googledomains.com. jcrooke.net. 21600 IN NS ns-cloud-d3.googledomains.com. jcrooke.net. 21600 IN NS ns-cloud-d4.googledomains.com. jcrooke.net. 21600 IN RRSIG ( NS 8 2 21600 20191106152219 20191015152219 12573 jcrooke.net. VpRnFlr86D9tdNIpqC1LyAZ5O5zhwm4JI1BcFvA8J+FHwNOQStGseY1IgjI+oTzyc9dFAz7BG9N0 TzQGCGv9GIq0y2VT+v+f68u/623O1Udk+8rDxCy4flqMtnZ+8PHiheIaBTx2CvZSfmS3l40GMp0A /sKmM/CuDoxWt7LOVSY= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	Query to ns-cloud-d4.googledomains.com for jcrooke.net/SOA
	Error querying ns-cloud-d4.googledomains.com/2001:4860:4802:38:0:0:0:6d for jcrooke.net/SOA: 'IPv6 transport disabled'
	Received 567 bytes from 216.239.38.109
	;; Answer received from 216.239.38.109 (567 bytes) ;; HEADER SECTION ;; id = 35643 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; jcrooke.net. IN SOA ;; ANSWER SECTION (2 records) jcrooke.net. 21600 IN SOA ( ns-cloud-d1.googledomains.com. cloud-dns-hostmaster.google.com. 323 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) jcrooke.net. 21600 IN RRSIG ( SOA 8 2 21600 20191106152219 20191015152219 12573 jcrooke.net. HYXzRFph9shQ/QquzcycsQmZB1IuhsdZXIJgOJYM8n56FtBoOoEwi2FxNnnUitet4xlExl3qbRD0 gGyAi8wyMvQyx9G/W32c0ka9IKsvXMXpyx1UFbJauz9rZDfr9EkjQp9JhwGfKpqgnzxY7wBmdFl2 fOnUsmPTD+RncIY887k= ) ;; AUTHORITY SECTION (5 records) jcrooke.net. 21600 IN NS ns-cloud-d1.googledomains.com. jcrooke.net. 21600 IN NS ns-cloud-d2.googledomains.com. jcrooke.net. 21600 IN NS ns-cloud-d3.googledomains.com. jcrooke.net. 21600 IN NS ns-cloud-d4.googledomains.com. jcrooke.net. 21600 IN RRSIG ( NS 8 2 21600 20191106152219 20191015152219 12573 jcrooke.net. VpRnFlr86D9tdNIpqC1LyAZ5O5zhwm4JI1BcFvA8J+FHwNOQStGseY1IgjI+oTzyc9dFAz7BG9N0 TzQGCGv9GIq0y2VT+v+f68u/623O1Udk+8rDxCy4flqMtnZ+8PHiheIaBTx2CvZSfmS3l40GMp0A /sKmM/CuDoxWt7LOVSY= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	Query to ns-cloud-d2.googledomains.com for jcrooke.net/SOA
	Error querying ns-cloud-d2.googledomains.com/2001:4860:4802:34:0:0:0:6d for jcrooke.net/SOA: 'IPv6 transport disabled'
	Received 567 bytes from 216.239.34.109
	;; Answer received from 216.239.34.109 (567 bytes) ;; HEADER SECTION ;; id = 23668 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; jcrooke.net. IN SOA ;; ANSWER SECTION (2 records) jcrooke.net. 21600 IN SOA ( ns-cloud-d1.googledomains.com. cloud-dns-hostmaster.google.com. 323 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) jcrooke.net. 21600 IN RRSIG ( SOA 8 2 21600 20191106152219 20191015152219 12573 jcrooke.net. HYXzRFph9shQ/QquzcycsQmZB1IuhsdZXIJgOJYM8n56FtBoOoEwi2FxNnnUitet4xlExl3qbRD0 gGyAi8wyMvQyx9G/W32c0ka9IKsvXMXpyx1UFbJauz9rZDfr9EkjQp9JhwGfKpqgnzxY7wBmdFl2 fOnUsmPTD+RncIY887k= ) ;; AUTHORITY SECTION (5 records) jcrooke.net. 21600 IN NS ns-cloud-d1.googledomains.com. jcrooke.net. 21600 IN NS ns-cloud-d2.googledomains.com. jcrooke.net. 21600 IN NS ns-cloud-d3.googledomains.com. jcrooke.net. 21600 IN NS ns-cloud-d4.googledomains.com. jcrooke.net. 21600 IN RRSIG ( NS 8 2 21600 20191106152219 20191015152219 12573 jcrooke.net. VpRnFlr86D9tdNIpqC1LyAZ5O5zhwm4JI1BcFvA8J+FHwNOQStGseY1IgjI+oTzyc9dFAz7BG9N0 TzQGCGv9GIq0y2VT+v+f68u/623O1Udk+8rDxCy4flqMtnZ+8PHiheIaBTx2CvZSfmS3l40GMp0A /sKmM/CuDoxWt7LOVSY= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	Query to ns-cloud-d1.googledomains.com for jcrooke.net/A
	Error querying ns-cloud-d1.googledomains.com/2001:4860:4802:32:0:0:0:6d for jcrooke.net/A: 'IPv6 transport disabled'
	Received 227 bytes from 216.239.32.109
	;; Answer received from 216.239.32.109 (227 bytes) ;; HEADER SECTION ;; id = 17315 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; jcrooke.net. IN A ;; ANSWER SECTION (2 records) jcrooke.net. 300 IN A 87.122.96.249 jcrooke.net. 300 IN RRSIG ( A 8 2 300 20191106152219 20191015152219 12573 jcrooke.net. GTygpReKZ3yzeRhSSlDTeC2I0kVsL2eJd7eVIY61GqmVYdeB+gfmz2Wq2j/BdCR0c07jk77/2KaB by71bnP+x9KU038YlLgYXGzeAyOwUNt4ZzyYwog6iCaRqj5uHcS31rNxh2geisQ5UZAE2G4JEkc8 GZ5zJDbvFLCEjPWX34U= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	jcrooke.net A RR has value 87.122.96.249
	Found 1 RRSIGs over A RRset
	`jcrooke.net. 300 IN RRSIG ( A 8 2 300 20191106152219 20191015152219 12573 jcrooke.net. GTygpReKZ3yzeRhSSlDTeC2I0kVsL2eJd7eVIY61GqmVYdeB+gfmz2Wq2j/BdCR0c07jk77/2KaB by71bnP+x9KU038YlLgYXGzeAyOwUNt4ZzyYwog6iCaRqj5uHcS31rNxh2geisQ5UZAE2G4JEkc8 GZ5zJDbvFLCEjPWX34U= )`
	RRSIG=12573 and DNSKEY=12573 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test jcrooke.net at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: