DNSSEC Analyzer - jcrooke.net

Domain Name:

Time: 2020-07-12 20:03:24 UTC, NTP stratum 4

Analyzing DNSSEC problems for jcrooke.net

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to h.root-servers.net for ./DNSKEY
	Received 864 bytes from 198.97.190.53
	;; Answer received from 198.97.190.53 (864 bytes) ;; HEADER SECTION ;; id = 22315 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAdauOGxLhfAKFTTZwGhBXbk793QKdWIQRjiSftWdusCwkPhNyJrIjwtNffCWXGLlZAbpcs41 4RE3oS1qVwV+AdXsO92SBu5haGlxMUk0NqZO7Xlf84/wrzGZVRRouPo5pNX/CKS8Mv9UOi0olKGC u31dNfh8qCszWZcloLDgeLzSnQSkvFoGe69vNCfh7feESKedkBC2qRz0BZv9+oJI0IY/3D7WEnV0 NOlf8gSHozhfJFJ/ZAKtvw/Q3ogrVJFk0LyVaU/NVtVA5FM4pVMIRID7pfrPi78aAzG7b/Wh/Pce 4jPAIpS3dApq25YkvMuPvfB91NMf9FemKwlp78PBVcM= ) ; Key ID = 46594 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20200801000000 20200711000000 20326 . Vladon0p/7tDn7SfPe6dG6iTddTbEL++KLJCI6cjSIDo3QwyAn0uKhjsVstQE//M9DR3RaCzclwK VJ0kuRZJl+tAEimBMhT85+fh2k5aTjyE2z3ysQv0F0clHjbyydnXe6CJ0PxOfs6hLLkHXkX58EYM fN0xlR4Ch2yY3gENKSyc0kcvsgA81JO1eBc1rD7Hy8ROHltlHS7rgI/9Q7OsMvH8c25zU4iRILJS unxWGfXmCrwZOVKDmPqVuWLkufPTKrxhoNTVNoxXfPxPeiXmC/c8YGDLzjssAi5hQaoNnrDFn870 5fJRE10QKPmYZcyHlQov9ItY3qOtVclHmQ99WA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdauOGxLhfAKFTTZwGhBXbk793QKdWIQRjiSftWdusCwkPhNyJrIjwtNffCWXGLlZAbpcs41 4RE3oS1qVwV+AdXsO92SBu5haGlxMUk0NqZO7Xlf84/wrzGZVRRouPo5pNX/CKS8Mv9UOi0olKGC u31dNfh8qCszWZcloLDgeLzSnQSkvFoGe69vNCfh7feESKedkBC2qRz0BZv9+oJI0IY/3D7WEnV0 NOlf8gSHozhfJFJ/ZAKtvw/Q3ogrVJFk0LyVaU/NVtVA5FM4pVMIRID7pfrPi78aAzG7b/Wh/Pce 4jPAIpS3dApq25YkvMuPvfB91NMf9FemKwlp78PBVcM= ) ; Key ID = 46594`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20200801000000 20200711000000 20326 . Vladon0p/7tDn7SfPe6dG6iTddTbEL++KLJCI6cjSIDo3QwyAn0uKhjsVstQE//M9DR3RaCzclwK VJ0kuRZJl+tAEimBMhT85+fh2k5aTjyE2z3ysQv0F0clHjbyydnXe6CJ0PxOfs6hLLkHXkX58EYM fN0xlR4Ch2yY3gENKSyc0kcvsgA81JO1eBc1rD7Hy8ROHltlHS7rgI/9Q7OsMvH8c25zU4iRILJS unxWGfXmCrwZOVKDmPqVuWLkufPTKrxhoNTVNoxXfPxPeiXmC/c8YGDLzjssAi5hQaoNnrDFn870 5fJRE10QKPmYZcyHlQov9ItY3qOtVclHmQ99WA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=46594 is now in the chain-of-trust
	Query to h.root-servers.net for jcrooke.net/A
	Received 1168 bytes from 198.97.190.53
	;; Answer received from 198.97.190.53 (1168 bytes) ;; HEADER SECTION ;; id = 11223 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; jcrooke.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20200725170000 20200712160000 46594 . ygxgKU72YT5sVhmbpUKqbNCtlHr6YyrOLa5pCfSPe0139y9S8H/Qacs6euGt0pN5p+Btv5IXx+xW 3hYJ012jRNjri49XvUYk2wDz8dqot5dKbtZ5l/p/yBE5CIMqc0Gtz59Pg+ZMLhktUAQU2PMo2cgG FypucM2HkJnaYwh2RdfaKDms2E3EXEhg7zPrvJQE6qV6aka4aJh3sHeDl5rSeXDCaX1Y+0eu20RR ogbdlHQLGh+3DUwwwLiYQdcJgoIwe1S2nGRyPFoJnDMc/7Hz6BBEg+p+ebeZ9K8V/+umk1XXpsjF NG83UJWfDybRCWaRqj9Y3xEyhdI+zpgVMWEeug== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 m.gtld-servers.net. 172800 IN A 192.55.83.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to e.root-servers.net for net/DNSKEY
	Received 1160 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (1160 bytes) ;; HEADER SECTION ;; id = 25838 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20200725170000 20200712160000 46594 . ygxgKU72YT5sVhmbpUKqbNCtlHr6YyrOLa5pCfSPe0139y9S8H/Qacs6euGt0pN5p+Btv5IXx+xW 3hYJ012jRNjri49XvUYk2wDz8dqot5dKbtZ5l/p/yBE5CIMqc0Gtz59Pg+ZMLhktUAQU2PMo2cgG FypucM2HkJnaYwh2RdfaKDms2E3EXEhg7zPrvJQE6qV6aka4aJh3sHeDl5rSeXDCaX1Y+0eu20RR ogbdlHQLGh+3DUwwwLiYQdcJgoIwe1S2nGRyPFoJnDMc/7Hz6BBEg+p+ebeZ9K8V/+umk1XXpsjF NG83UJWfDybRCWaRqj9Y3xEyhdI+zpgVMWEeug== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 m.gtld-servers.net. 172800 IN A 192.55.83.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone net

net

	Checking DS between . and net
	Query to b.root-servers.net for net/DS
	Received 367 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (367 bytes) ;; HEADER SECTION ;; id = 51425 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DS ;; ANSWER SECTION (2 records) net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20200725170000 20200712160000 46594 . ygxgKU72YT5sVhmbpUKqbNCtlHr6YyrOLa5pCfSPe0139y9S8H/Qacs6euGt0pN5p+Btv5IXx+xW 3hYJ012jRNjri49XvUYk2wDz8dqot5dKbtZ5l/p/yBE5CIMqc0Gtz59Pg+ZMLhktUAQU2PMo2cgG FypucM2HkJnaYwh2RdfaKDms2E3EXEhg7zPrvJQE6qV6aka4aJh3sHeDl5rSeXDCaX1Y+0eu20RR ogbdlHQLGh+3DUwwwLiYQdcJgoIwe1S2nGRyPFoJnDMc/7Hz6BBEg+p+ebeZ9K8V/+umk1XXpsjF NG83UJWfDybRCWaRqj9Y3xEyhdI+zpgVMWEeug== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for net in the . zone
	DS=35886/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`net. 86400 IN RRSIG ( DS 8 1 86400 20200725170000 20200712160000 46594 . ygxgKU72YT5sVhmbpUKqbNCtlHr6YyrOLa5pCfSPe0139y9S8H/Qacs6euGt0pN5p+Btv5IXx+xW 3hYJ012jRNjri49XvUYk2wDz8dqot5dKbtZ5l/p/yBE5CIMqc0Gtz59Pg+ZMLhktUAQU2PMo2cgG FypucM2HkJnaYwh2RdfaKDms2E3EXEhg7zPrvJQE6qV6aka4aJh3sHeDl5rSeXDCaX1Y+0eu20RR ogbdlHQLGh+3DUwwwLiYQdcJgoIwe1S2nGRyPFoJnDMc/7Hz6BBEg+p+ebeZ9K8V/+umk1XXpsjF NG83UJWfDybRCWaRqj9Y3xEyhdI+zpgVMWEeug== )`
	RRSIG=46594 and DNSKEY=46594 verifies the DS RRset
	DS=35886/SHA-256 is now in the chain-of-trust
	`net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee )`
	Query to a.gtld-servers.net for net/DNSKEY
	Received 953 bytes from 192.5.6.30
	;; Answer received from 192.5.6.30 (953 bytes) ;; HEADER SECTION ;; id = 57773 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (4 records) net. 86400 IN DNSKEY ( 257 3 8 AQOYBnzqWXIEj6mlgXg4LWC0HP2n8eK8XqgHlmJ/69iuIHsa1TrHDG6TcOra/pyeGKwH0nKZhTmX SuUFGh9BCNiwVDuyyb6OBGy2Nte9Kr8NwWg4q+zhSoOf4D+gC9dEzg0yFdwT0DKEvmNPt0K4jbQD S4Yimb+uPKuF6yieWWrPYYCrv8C9KC8JMze2uT6NuWBfsl2fDUoV4l65qMww06D7n+p7RbdwWkAZ 0fA63mXVXBZF6kpDtsYD7SUB9jhhfLQE/r85bvg3FaSs5Wi2BaqN06SzGWI1DHu7axthIOeHwg00 zxlhTpoYCH0ldoQz+S65zWYi/fRJiyLSBb6JZOvn ) ; Key ID = 35886 net. 86400 IN DNSKEY ( 256 3 8 AQPeYYme8NvhAl+0XjyGqHVep4Y1T2OrRmO+L3QGULBlOe571PnxI+gRyXCQmtN7WpoJxzALFSVB PsggqwOP+wnmCx8DZ49NHrfS7WbMtoYHTtiaIvHTjZZ88leuCtNLqfIH8N1Ax68Xnf4uKobYFgZX j0M2Zi7YI84iFkCpIyZk6VIiJpvpNgyCK5mWetPF2zmO2jXC8M045JIPam38reXD ) ; Key ID = 56519 net. 86400 IN DNSKEY ( 256 3 8 AQPlC0AS+lRQ2S97U6GcXyItQZSEC9CJ1XIPOah6RkU8CtoSwvapf/M6T/qZvJhcqnLAwujEiIOM WTwwSQ8XDUDn8fiw4upqe5wg/favLI2Uc3ElQcD7qoqufLnmspGP5urK9JTqGkW9PFfMd/iPCfLL npjiZEv7qBYhR0QxjYRyyNIZ/wpGjdNs1rKmiZxHqp4hT6oEVlL2rLbjpzeZwRRf ) ; Key ID = 36059 net. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200718162830 20200703162330 35886 net. HwGbRk3HOcnxjLEQSrA1ErG50UePvVAeIG1JnCBWnk9cvs3QPLBgCQQAGNXY2/8o3DXJjD4IXIIw spNePvgNlWJfsem3JdyocA9xDUE6xLhlz5rnCHK7Y24/0qqd7bSL923kaD60g5YrMA4rori5v0SN oSdv8NO8XDdUYiRyT/B7t59cuLLpTY5m79zmyiOWzAVIihfl06hw23/acTsWVkXD+YrE+2MGxbCk hWfOPfjELFGvvnlbaT7GmS5qNRCjucGOlCKlxZgJrTW890IDJfKaThpkZGuqW4n4jORu36NvIpZ2 4LBLVLrTov1RFDr30PpgI+4m69NIhufp4rEG/g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for net
	`net. 86400 IN DNSKEY ( 257 3 8 AQOYBnzqWXIEj6mlgXg4LWC0HP2n8eK8XqgHlmJ/69iuIHsa1TrHDG6TcOra/pyeGKwH0nKZhTmX SuUFGh9BCNiwVDuyyb6OBGy2Nte9Kr8NwWg4q+zhSoOf4D+gC9dEzg0yFdwT0DKEvmNPt0K4jbQD S4Yimb+uPKuF6yieWWrPYYCrv8C9KC8JMze2uT6NuWBfsl2fDUoV4l65qMww06D7n+p7RbdwWkAZ 0fA63mXVXBZF6kpDtsYD7SUB9jhhfLQE/r85bvg3FaSs5Wi2BaqN06SzGWI1DHu7axthIOeHwg00 zxlhTpoYCH0ldoQz+S65zWYi/fRJiyLSBb6JZOvn ) ; Key ID = 35886`
	`net. 86400 IN DNSKEY ( 256 3 8 AQPeYYme8NvhAl+0XjyGqHVep4Y1T2OrRmO+L3QGULBlOe571PnxI+gRyXCQmtN7WpoJxzALFSVB PsggqwOP+wnmCx8DZ49NHrfS7WbMtoYHTtiaIvHTjZZ88leuCtNLqfIH8N1Ax68Xnf4uKobYFgZX j0M2Zi7YI84iFkCpIyZk6VIiJpvpNgyCK5mWetPF2zmO2jXC8M045JIPam38reXD ) ; Key ID = 56519`
	`net. 86400 IN DNSKEY ( 256 3 8 AQPlC0AS+lRQ2S97U6GcXyItQZSEC9CJ1XIPOah6RkU8CtoSwvapf/M6T/qZvJhcqnLAwujEiIOM WTwwSQ8XDUDn8fiw4upqe5wg/favLI2Uc3ElQcD7qoqufLnmspGP5urK9JTqGkW9PFfMd/iPCfLL npjiZEv7qBYhR0QxjYRyyNIZ/wpGjdNs1rKmiZxHqp4hT6oEVlL2rLbjpzeZwRRf ) ; Key ID = 36059`
	DNSKEY=35886/SEP is now in the chain-of-trust
	DS=35886/SHA-256 verifies DNSKEY=35886/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`net. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200718162830 20200703162330 35886 net. HwGbRk3HOcnxjLEQSrA1ErG50UePvVAeIG1JnCBWnk9cvs3QPLBgCQQAGNXY2/8o3DXJjD4IXIIw spNePvgNlWJfsem3JdyocA9xDUE6xLhlz5rnCHK7Y24/0qqd7bSL923kaD60g5YrMA4rori5v0SN oSdv8NO8XDdUYiRyT/B7t59cuLLpTY5m79zmyiOWzAVIihfl06hw23/acTsWVkXD+YrE+2MGxbCk hWfOPfjELFGvvnlbaT7GmS5qNRCjucGOlCKlxZgJrTW890IDJfKaThpkZGuqW4n4jORu36NvIpZ2 4LBLVLrTov1RFDr30PpgI+4m69NIhufp4rEG/g== )`
	RRSIG=35886 and DNSKEY=35886/SEP verifies the DNSKEY RRset
	DNSKEY=56519 is now in the chain-of-trust
	DNSKEY=36059 is now in the chain-of-trust
	Query to b.gtld-servers.net for jcrooke.net/A
	Received 404 bytes from 192.33.14.30
	;; Answer received from 192.33.14.30 (404 bytes) ;; HEADER SECTION ;; id = 2830 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; jcrooke.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) jcrooke.net. 172800 IN NS ns-cloud-d1.googledomains.com. jcrooke.net. 172800 IN NS ns-cloud-d2.googledomains.com. jcrooke.net. 172800 IN NS ns-cloud-d3.googledomains.com. jcrooke.net. 172800 IN NS ns-cloud-d4.googledomains.com. jcrooke.net. 86400 IN DS ( 48337 8 2 2930341208e8c39918267a22072b7e8490a364f913171ccc98e754aa229786fb ) jcrooke.net. 86400 IN RRSIG ( DS 8 2 86400 20200718063159 20200711052159 36059 net. cONOQ8vP6Bf53kZ3NvwcJCVVGCfqYtoDKYtMFlaRrqlPWEsGBdq2HumjOepWX+7uEKfMZ4ASR8R3 c1aj1rqROJd8lE/EHpPEY5jZrxP5xqvJMWymOm4q7ydNl4JCw0BFSzTjGDOaNheJ/7qJJLnyI46I d/wPnMj5D8x4T3ORNpxhAjEUj5nndfzItYJ7zubBjVqP/SmUMbac/xIijYLjzA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.gtld-servers.net for jcrooke.net/DNSKEY
	Received 404 bytes from 192.26.92.30
	;; Answer received from 192.26.92.30 (404 bytes) ;; HEADER SECTION ;; id = 8558 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; jcrooke.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) jcrooke.net. 172800 IN NS ns-cloud-d1.googledomains.com. jcrooke.net. 172800 IN NS ns-cloud-d2.googledomains.com. jcrooke.net. 172800 IN NS ns-cloud-d3.googledomains.com. jcrooke.net. 172800 IN NS ns-cloud-d4.googledomains.com. jcrooke.net. 86400 IN DS ( 48337 8 2 2930341208e8c39918267a22072b7e8490a364f913171ccc98e754aa229786fb ) jcrooke.net. 86400 IN RRSIG ( DS 8 2 86400 20200718063159 20200711052159 36059 net. cONOQ8vP6Bf53kZ3NvwcJCVVGCfqYtoDKYtMFlaRrqlPWEsGBdq2HumjOepWX+7uEKfMZ4ASR8R3 c1aj1rqROJd8lE/EHpPEY5jZrxP5xqvJMWymOm4q7ydNl4JCw0BFSzTjGDOaNheJ/7qJJLnyI46I d/wPnMj5D8x4T3ORNpxhAjEUj5nndfzItYJ7zubBjVqP/SmUMbac/xIijYLjzA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone jcrooke.net

jcrooke.net

	Checking DS between net and jcrooke.net
	Query to e.gtld-servers.net for jcrooke.net/DS
	Received 1271 bytes from 192.12.94.30
	;; Answer received from 192.12.94.30 (1271 bytes) ;; HEADER SECTION ;; id = 43969 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 14 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; jcrooke.net. IN DS ;; ANSWER SECTION (2 records) jcrooke.net. 86400 IN DS ( 48337 8 2 2930341208e8c39918267a22072b7e8490a364f913171ccc98e754aa229786fb ) jcrooke.net. 86400 IN RRSIG ( DS 8 2 86400 20200718063159 20200711052159 36059 net. cONOQ8vP6Bf53kZ3NvwcJCVVGCfqYtoDKYtMFlaRrqlPWEsGBdq2HumjOepWX+7uEKfMZ4ASR8R3 c1aj1rqROJd8lE/EHpPEY5jZrxP5xqvJMWymOm4q7ydNl4JCw0BFSzTjGDOaNheJ/7qJJLnyI46I d/wPnMj5D8x4T3ORNpxhAjEUj5nndfzItYJ7zubBjVqP/SmUMbac/xIijYLjzA== ) ;; AUTHORITY SECTION (14 records) net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN RRSIG ( NS 8 1 172800 20200718063930 20200711052930 36059 net. nEa5eMpXEa46kvLDjWbWerTX6aX1rT1OZ97rl3dI02xQpUXoh+97tNeSwrf6HWefuI4H8IPrjFIb XzBv/dOpyYlToK0b1EqJLZILLfbTavpFr945EtGNCdADdbO21Vy244RPiP82phoTFEnEmoq6fb6L lB75NxV0v9ODJsIGpiYprAr//WDtxui13KhVxEWCzicpzdgZc5+1iUmlRAD0jA== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for jcrooke.net in the net zone
	DS=48337/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`jcrooke.net. 86400 IN RRSIG ( DS 8 2 86400 20200718063159 20200711052159 36059 net. cONOQ8vP6Bf53kZ3NvwcJCVVGCfqYtoDKYtMFlaRrqlPWEsGBdq2HumjOepWX+7uEKfMZ4ASR8R3 c1aj1rqROJd8lE/EHpPEY5jZrxP5xqvJMWymOm4q7ydNl4JCw0BFSzTjGDOaNheJ/7qJJLnyI46I d/wPnMj5D8x4T3ORNpxhAjEUj5nndfzItYJ7zubBjVqP/SmUMbac/xIijYLjzA== )`
	RRSIG=36059 and DNSKEY=36059 verifies the DS RRset
	DS=48337/SHA-256 is now in the chain-of-trust
	`jcrooke.net. 86400 IN DS ( 48337 8 2 2930341208e8c39918267a22072b7e8490a364f913171ccc98e754aa229786fb )`
	Query to ns-cloud-d3.googledomains.com for jcrooke.net/DNSKEY
	Received 763 bytes from 216.239.36.109
	;; Answer received from 216.239.36.109 (763 bytes) ;; HEADER SECTION ;; id = 2754 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; jcrooke.net. IN DNSKEY ;; ANSWER SECTION (3 records) jcrooke.net. 300 IN DNSKEY ( 256 3 8 AwEAAYeeICIVZYDXIl9Rou2ZOOor3fZQib672LfB/ScMzQJEbrskWDPE7B2EZ4IxMDpD2tnsazOk YGlqy6gyB7Goc6EHYVRth7ZkY89cAGmEWrtze3YGmvzr7/4OMZ+VQ9DkmgNbq9IdW+C0JX/pz9Qd KtgAtFCIKpFHI/V3gcYBP9G9 ) ; Key ID = 5166 jcrooke.net. 300 IN DNSKEY ( 257 3 8 AwEAAYOC9hNfmfTD5XnXrKB6h971zLYNYqPbRjVaI8DdKPZgsLlrakaJnLjrx1lMQnFgX6Sh3e6P 7dI6XG2jPwLH0oP4BNoyxu4KpMfcE8C5J1kj39tVr39C3usFhGJcWUg89BmgORD4EH+d0jy027Af qdDfOIN8FTeLTNwnPm3rCi0jedRE/qc9LDjDMVcwC3HX6yN9f/lpFlXgEvrEXE3r3/j9BWqaik4C 1Vv1+C9ItUcIzBkbUlsIzbm8E5Wg4MAg+qecPZX+bBF2h5wBuy4a7PXAh5EMbm/NlOpS4X+O7Qib jgVCf+3DWfwc1a9dKsWHnAQiVyaRehivpCsB+z5hBsk= ) ; Key ID = 48337 jcrooke.net. 300 IN RRSIG ( DNSKEY 8 2 300 20200802143846 20200711143846 48337 jcrooke.net. Kdk3Nhlnsk/mJ6PB7xLwW+s7OsBKo3fzTjgBDiVhhn55At/DQQmj73fkq+iDAiwLp4AUDswcjjHQ igNwkIUq1U/TwF3Xctr+ZyNs8AotS4NmoxyJggOzqXpqmafeeMR2b6BWEPEv4Q9foI4s93x7bpb5 eRP9fzYcPST6ifJg0li/6fao6FpowVH5K/Oh8SfVCjBlkZijYlh0dt4EQOIZg9IcL85UCUnv416U rtkenbNHtufMTJ6dNO8B4kfDZGSOmY1sV9jzKJLSmFB7FK3mLAPg70YKyJs/G4VQyvYub0p73krh wZsajRAZFpqPROvPk7ub3p8VSVa9I18G+AzVaQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	Found 2 DNSKEY records for jcrooke.net
	`jcrooke.net. 300 IN DNSKEY ( 256 3 8 AwEAAYeeICIVZYDXIl9Rou2ZOOor3fZQib672LfB/ScMzQJEbrskWDPE7B2EZ4IxMDpD2tnsazOk YGlqy6gyB7Goc6EHYVRth7ZkY89cAGmEWrtze3YGmvzr7/4OMZ+VQ9DkmgNbq9IdW+C0JX/pz9Qd KtgAtFCIKpFHI/V3gcYBP9G9 ) ; Key ID = 5166`
	`jcrooke.net. 300 IN DNSKEY ( 257 3 8 AwEAAYOC9hNfmfTD5XnXrKB6h971zLYNYqPbRjVaI8DdKPZgsLlrakaJnLjrx1lMQnFgX6Sh3e6P 7dI6XG2jPwLH0oP4BNoyxu4KpMfcE8C5J1kj39tVr39C3usFhGJcWUg89BmgORD4EH+d0jy027Af qdDfOIN8FTeLTNwnPm3rCi0jedRE/qc9LDjDMVcwC3HX6yN9f/lpFlXgEvrEXE3r3/j9BWqaik4C 1Vv1+C9ItUcIzBkbUlsIzbm8E5Wg4MAg+qecPZX+bBF2h5wBuy4a7PXAh5EMbm/NlOpS4X+O7Qib jgVCf+3DWfwc1a9dKsWHnAQiVyaRehivpCsB+z5hBsk= ) ; Key ID = 48337`
	DNSKEY=48337/SEP is now in the chain-of-trust
	DS=48337/SHA-256 verifies DNSKEY=48337/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`jcrooke.net. 300 IN RRSIG ( DNSKEY 8 2 300 20200802143846 20200711143846 48337 jcrooke.net. Kdk3Nhlnsk/mJ6PB7xLwW+s7OsBKo3fzTjgBDiVhhn55At/DQQmj73fkq+iDAiwLp4AUDswcjjHQ igNwkIUq1U/TwF3Xctr+ZyNs8AotS4NmoxyJggOzqXpqmafeeMR2b6BWEPEv4Q9foI4s93x7bpb5 eRP9fzYcPST6ifJg0li/6fao6FpowVH5K/Oh8SfVCjBlkZijYlh0dt4EQOIZg9IcL85UCUnv416U rtkenbNHtufMTJ6dNO8B4kfDZGSOmY1sV9jzKJLSmFB7FK3mLAPg70YKyJs/G4VQyvYub0p73krh wZsajRAZFpqPROvPk7ub3p8VSVa9I18G+AzVaQ== )`
	RRSIG=48337 and DNSKEY=48337/SEP verifies the DNSKEY RRset
	DNSKEY=5166 is now in the chain-of-trust
	Query to ns-cloud-d4.googledomains.com for jcrooke.net/A
	Received 227 bytes from 216.239.38.109
	;; Answer received from 216.239.38.109 (227 bytes) ;; HEADER SECTION ;; id = 51162 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; jcrooke.net. IN A ;; ANSWER SECTION (2 records) jcrooke.net. 300 IN A 88.130.104.186 jcrooke.net. 300 IN RRSIG ( A 8 2 300 20200802143846 20200711143846 5166 jcrooke.net. H74QH9wn+hUUX4XGr5lGgNFdIaHiS/801HoOa3wnVWYkKzAIjm+v5SBUGx4AzD/dgB9qP6w3HNnT WBUvGf3gt7FBpOwGYeG/JTPFPXFQzK+fcd4Zt5FLZt/IHzwDmFOY0eQpS/PGoBkz6JzwnE5x9aUM Nna5vM8mnJSaBoRm2qI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	jcrooke.net is authoritative for jcrooke.net
	Found RRSIG signed by jcrooke.net zone
	Query to ns-cloud-d3.googledomains.com for jcrooke.net/SOA
	Received 567 bytes from 216.239.36.109
	;; Answer received from 216.239.36.109 (567 bytes) ;; HEADER SECTION ;; id = 47385 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; jcrooke.net. IN SOA ;; ANSWER SECTION (2 records) jcrooke.net. 21600 IN SOA ( ns-cloud-d1.googledomains.com. cloud-dns-hostmaster.google.com. 664 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) jcrooke.net. 21600 IN RRSIG ( SOA 8 2 21600 20200802143846 20200711143846 5166 jcrooke.net. Q5FWLdeyfzbPDxavRnE15P0up4gT/sFX847zeFxKM93HhUlrloIxyE6Sld2fmp2T6Wbc8aWx2Eci ZE2T2PES8DblT8zTb791nJkDWXRrK1Kaqd0cWkf6H7vtbGAdideHXTlrPfmEoUPL4mAHcXy3+E/w Vb38LIQ2zc0C41ZLIB8= ) ;; AUTHORITY SECTION (5 records) jcrooke.net. 21600 IN NS ns-cloud-d1.googledomains.com. jcrooke.net. 21600 IN NS ns-cloud-d2.googledomains.com. jcrooke.net. 21600 IN NS ns-cloud-d3.googledomains.com. jcrooke.net. 21600 IN NS ns-cloud-d4.googledomains.com. jcrooke.net. 21600 IN RRSIG ( NS 8 2 21600 20200802143846 20200711143846 5166 jcrooke.net. GQVC9dE2OYocFFH+0wXGfbikM2kKJ1R/9D4LrW4CBf2g4FJjVWCsC3YuBbdOMKJAOKsPjU1NjzPP Omy9G8EVVBTLVIqoqDMWe+7pIPtWK41ZsQT8K5pRyPQKM5skWrPHNF/UobnWduT0yE57UgtuSC0B noUk7D/ZXqE+fq90efs= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	Query to ns-cloud-d1.googledomains.com for jcrooke.net/SOA
	Received 567 bytes from 216.239.32.109
	;; Answer received from 216.239.32.109 (567 bytes) ;; HEADER SECTION ;; id = 54236 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; jcrooke.net. IN SOA ;; ANSWER SECTION (2 records) jcrooke.net. 21600 IN SOA ( ns-cloud-d1.googledomains.com. cloud-dns-hostmaster.google.com. 664 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) jcrooke.net. 21600 IN RRSIG ( SOA 8 2 21600 20200802143846 20200711143846 5166 jcrooke.net. Q5FWLdeyfzbPDxavRnE15P0up4gT/sFX847zeFxKM93HhUlrloIxyE6Sld2fmp2T6Wbc8aWx2Eci ZE2T2PES8DblT8zTb791nJkDWXRrK1Kaqd0cWkf6H7vtbGAdideHXTlrPfmEoUPL4mAHcXy3+E/w Vb38LIQ2zc0C41ZLIB8= ) ;; AUTHORITY SECTION (5 records) jcrooke.net. 21600 IN NS ns-cloud-d1.googledomains.com. jcrooke.net. 21600 IN NS ns-cloud-d2.googledomains.com. jcrooke.net. 21600 IN NS ns-cloud-d3.googledomains.com. jcrooke.net. 21600 IN NS ns-cloud-d4.googledomains.com. jcrooke.net. 21600 IN RRSIG ( NS 8 2 21600 20200802143846 20200711143846 5166 jcrooke.net. GQVC9dE2OYocFFH+0wXGfbikM2kKJ1R/9D4LrW4CBf2g4FJjVWCsC3YuBbdOMKJAOKsPjU1NjzPP Omy9G8EVVBTLVIqoqDMWe+7pIPtWK41ZsQT8K5pRyPQKM5skWrPHNF/UobnWduT0yE57UgtuSC0B noUk7D/ZXqE+fq90efs= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	Query to ns-cloud-d4.googledomains.com for jcrooke.net/SOA
	Received 567 bytes from 216.239.38.109
	;; Answer received from 216.239.38.109 (567 bytes) ;; HEADER SECTION ;; id = 25877 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; jcrooke.net. IN SOA ;; ANSWER SECTION (2 records) jcrooke.net. 21600 IN SOA ( ns-cloud-d1.googledomains.com. cloud-dns-hostmaster.google.com. 664 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) jcrooke.net. 21600 IN RRSIG ( SOA 8 2 21600 20200802143846 20200711143846 5166 jcrooke.net. Q5FWLdeyfzbPDxavRnE15P0up4gT/sFX847zeFxKM93HhUlrloIxyE6Sld2fmp2T6Wbc8aWx2Eci ZE2T2PES8DblT8zTb791nJkDWXRrK1Kaqd0cWkf6H7vtbGAdideHXTlrPfmEoUPL4mAHcXy3+E/w Vb38LIQ2zc0C41ZLIB8= ) ;; AUTHORITY SECTION (5 records) jcrooke.net. 21600 IN NS ns-cloud-d1.googledomains.com. jcrooke.net. 21600 IN NS ns-cloud-d2.googledomains.com. jcrooke.net. 21600 IN NS ns-cloud-d3.googledomains.com. jcrooke.net. 21600 IN NS ns-cloud-d4.googledomains.com. jcrooke.net. 21600 IN RRSIG ( NS 8 2 21600 20200802143846 20200711143846 5166 jcrooke.net. GQVC9dE2OYocFFH+0wXGfbikM2kKJ1R/9D4LrW4CBf2g4FJjVWCsC3YuBbdOMKJAOKsPjU1NjzPP Omy9G8EVVBTLVIqoqDMWe+7pIPtWK41ZsQT8K5pRyPQKM5skWrPHNF/UobnWduT0yE57UgtuSC0B noUk7D/ZXqE+fq90efs= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	Query to ns-cloud-d2.googledomains.com for jcrooke.net/SOA
	Received 567 bytes from 216.239.34.109
	;; Answer received from 216.239.34.109 (567 bytes) ;; HEADER SECTION ;; id = 24648 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; jcrooke.net. IN SOA ;; ANSWER SECTION (2 records) jcrooke.net. 21600 IN SOA ( ns-cloud-d1.googledomains.com. cloud-dns-hostmaster.google.com. 664 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) jcrooke.net. 21600 IN RRSIG ( SOA 8 2 21600 20200802143846 20200711143846 5166 jcrooke.net. Q5FWLdeyfzbPDxavRnE15P0up4gT/sFX847zeFxKM93HhUlrloIxyE6Sld2fmp2T6Wbc8aWx2Eci ZE2T2PES8DblT8zTb791nJkDWXRrK1Kaqd0cWkf6H7vtbGAdideHXTlrPfmEoUPL4mAHcXy3+E/w Vb38LIQ2zc0C41ZLIB8= ) ;; AUTHORITY SECTION (5 records) jcrooke.net. 21600 IN NS ns-cloud-d1.googledomains.com. jcrooke.net. 21600 IN NS ns-cloud-d2.googledomains.com. jcrooke.net. 21600 IN NS ns-cloud-d3.googledomains.com. jcrooke.net. 21600 IN NS ns-cloud-d4.googledomains.com. jcrooke.net. 21600 IN RRSIG ( NS 8 2 21600 20200802143846 20200711143846 5166 jcrooke.net. GQVC9dE2OYocFFH+0wXGfbikM2kKJ1R/9D4LrW4CBf2g4FJjVWCsC3YuBbdOMKJAOKsPjU1NjzPP Omy9G8EVVBTLVIqoqDMWe+7pIPtWK41ZsQT8K5pRyPQKM5skWrPHNF/UobnWduT0yE57UgtuSC0B noUk7D/ZXqE+fq90efs= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	Query to ns-cloud-d4.googledomains.com for jcrooke.net/A
	Received 227 bytes from 216.239.38.109
	;; Answer received from 216.239.38.109 (227 bytes) ;; HEADER SECTION ;; id = 215 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; jcrooke.net. IN A ;; ANSWER SECTION (2 records) jcrooke.net. 300 IN A 88.130.104.186 jcrooke.net. 300 IN RRSIG ( A 8 2 300 20200802143846 20200711143846 5166 jcrooke.net. H74QH9wn+hUUX4XGr5lGgNFdIaHiS/801HoOa3wnVWYkKzAIjm+v5SBUGx4AzD/dgB9qP6w3HNnT WBUvGf3gt7FBpOwGYeG/JTPFPXFQzK+fcd4Zt5FLZt/IHzwDmFOY0eQpS/PGoBkz6JzwnE5x9aUM Nna5vM8mnJSaBoRm2qI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	jcrooke.net A RR has value 88.130.104.186
	Found 1 RRSIGs over A RRset
	`jcrooke.net. 300 IN RRSIG ( A 8 2 300 20200802143846 20200711143846 5166 jcrooke.net. H74QH9wn+hUUX4XGr5lGgNFdIaHiS/801HoOa3wnVWYkKzAIjm+v5SBUGx4AzD/dgB9qP6w3HNnT WBUvGf3gt7FBpOwGYeG/JTPFPXFQzK+fcd4Zt5FLZt/IHzwDmFOY0eQpS/PGoBkz6JzwnE5x9aUM Nna5vM8mnJSaBoRm2qI= )`
	RRSIG=5166 and DNSKEY=5166 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test jcrooke.net at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: