DNSSEC Debugger

Domain Name:

Time: 2024-05-13 14:03:40 UTC

Analyzing DNSSEC problems for bpa.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to i.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 865 octets ;; HEADER SECTION ;; id = 63581 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to g.root-servers.net for bpa.gov/A
	Received 617 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 617 octets ;; HEADER SECTION ;; id = 14592 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240526050000 20240513040000 5613 . XE5rqigSd+1GkumiU1wV0aQObwBO5Pf6wuhfESwlDBzaN9p61jrp5b0vkR4HEa+vSYv63YujIInO QnIjgSYC2mD2uVnQszhq71FcfL/Vqb6ObGU6NFYhSSEdQr1VplF7tEYMIpQMjnVwddT1mKPoKNbC LgdX9kb0E030Bdg591wmZMMQIOiCmRdpVd30dR6DySg2ORQHfRea5XL03WTABsQkhmIRLSrc6lZo +6qy2C8ZeqA4gufiLI+KQQ1PlhGCivuturrjVlSB78PtJmSbPQV9D84t8baiof+XUMvdCQOtpvY/ puQP7aofGvqL++yb2E7ALFevIdlt3JWd2I6OQg== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Query to h.root-servers.net for gov/DNSKEY
	Received 610 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 610 octets ;; HEADER SECTION ;; id = 45906 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240526050000 20240513040000 5613 . XE5rqigSd+1GkumiU1wV0aQObwBO5Pf6wuhfESwlDBzaN9p61jrp5b0vkR4HEa+vSYv63YujIInO QnIjgSYC2mD2uVnQszhq71FcfL/Vqb6ObGU6NFYhSSEdQr1VplF7tEYMIpQMjnVwddT1mKPoKNbC LgdX9kb0E030Bdg591wmZMMQIOiCmRdpVd30dR6DySg2ORQHfRea5XL03WTABsQkhmIRLSrc6lZo +6qy2C8ZeqA4gufiLI+KQQ1PlhGCivuturrjVlSB78PtJmSbPQV9D84t8baiof+XUMvdCQOtpvY/ puQP7aofGvqL++yb2E7ALFevIdlt3JWd2I6OQg== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to a.root-servers.net for gov/DS
	Received 367 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 367 octets ;; HEADER SECTION ;; id = 34227 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240526050000 20240513040000 5613 . XE5rqigSd+1GkumiU1wV0aQObwBO5Pf6wuhfESwlDBzaN9p61jrp5b0vkR4HEa+vSYv63YujIInO QnIjgSYC2mD2uVnQszhq71FcfL/Vqb6ObGU6NFYhSSEdQr1VplF7tEYMIpQMjnVwddT1mKPoKNbC LgdX9kb0E030Bdg591wmZMMQIOiCmRdpVd30dR6DySg2ORQHfRea5XL03WTABsQkhmIRLSrc6lZo +6qy2C8ZeqA4gufiLI+KQQ1PlhGCivuturrjVlSB78PtJmSbPQV9D84t8baiof+XUMvdCQOtpvY/ puQP7aofGvqL++yb2E7ALFevIdlt3JWd2I6OQg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=64280/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20240526050000 20240513040000 5613 . XE5rqigSd+1GkumiU1wV0aQObwBO5Pf6wuhfESwlDBzaN9p61jrp5b0vkR4HEa+vSYv63YujIInO QnIjgSYC2mD2uVnQszhq71FcfL/Vqb6ObGU6NFYhSSEdQr1VplF7tEYMIpQMjnVwddT1mKPoKNbC LgdX9kb0E030Bdg591wmZMMQIOiCmRdpVd30dR6DySg2ORQHfRea5XL03WTABsQkhmIRLSrc6lZo +6qy2C8ZeqA4gufiLI+KQQ1PlhGCivuturrjVlSB78PtJmSbPQV9D84t8baiof+XUMvdCQOtpvY/ puQP7aofGvqL++yb2E7ALFevIdlt3JWd2I6OQg== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=64280/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 )`
	Query to b.ns.gov for gov/DNSKEY
	Received 779 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 779 octets ;; HEADER SECTION ;; id = 29914 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 8 AwEAAZp0vliR0TOBCJXmdagY36BI5ZveSPE3OSrcXKDs8IZa86x1+gwbheJcfLB6Fw6cWYUXaNgA mFcbxqIqWc5VJSyPS9yCPdEOLEIiegwCmcWnNsEyc0snKTyypXnvJ5JNhoznpFILDqlksAqP/aiq 1/l0w8TMkRbRrViLrJ1ayaScZ0nn/ge5wNpX09T9RI+gF1OIMJDdgH1vi0a+t6smSy4pUrerFTsu y8JAL+PP85MZiOssT9yoERfWSjFKde6PrQX5vj090AxT+hztb+q2EFXnF1a2L73/3UarB19k5NR3 MT1uM7ddag64Q0lg3aTy3MglDCzP7/StUxdeyL5qIX8= ) ; Key ID = 64280 gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcbYvlY667qXEzHsDTkft9cgKy5F0S9CAP+aFK9+sJumGqvpMaOyOzsilJ+OSVFhopJ1aRFp CUpLVIcVJ3E3YATGpzB45M0D5c4oJ0RjEIUakBwcPghmSW8K1GPqj/eUs4fbVPytXwtwvUll9Lxf gUvi5DA6xD6d2ckwDyRxfcMhXYydr2hIsgfrBLmRDMi4BkxMvA23eShPd/tPvnR0gJk= ) ; Key ID = 10104 gov. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240623141047 20240423141047 64280 gov. GGsGHy8XGH2PGTeyVpY5iEmleVzWCH/eitEUBXIgG0ivqrcC6Pzhenn+3E9uz+C2ehYImK95B9PK juJuu0jPFw09gKBO8Xo9x+wpWM/Zdh3NxhzGmfQOxRyj/5e1g27XxQB1pqhRegDfa5/mg+8zAoFY YneUx2tnvdtycsZg49d2iq75YlRBRj9ZSl6PJJ/nzacwKPjQFCbFiuEfnn6Vn432vWr2T0AUuaDV bJCSg2c32qiMCHE18PaaUn82oWYF2/FjWhU9i/UpGd0PS8Wtvicuho7/CYbMv+UvithHF+NE7QFV VDQtgjise03ZFQWMfrZcrZE8W4/KKDeyfDAkFA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 8 AwEAAZp0vliR0TOBCJXmdagY36BI5ZveSPE3OSrcXKDs8IZa86x1+gwbheJcfLB6Fw6cWYUXaNgA mFcbxqIqWc5VJSyPS9yCPdEOLEIiegwCmcWnNsEyc0snKTyypXnvJ5JNhoznpFILDqlksAqP/aiq 1/l0w8TMkRbRrViLrJ1ayaScZ0nn/ge5wNpX09T9RI+gF1OIMJDdgH1vi0a+t6smSy4pUrerFTsu y8JAL+PP85MZiOssT9yoERfWSjFKde6PrQX5vj090AxT+hztb+q2EFXnF1a2L73/3UarB19k5NR3 MT1uM7ddag64Q0lg3aTy3MglDCzP7/StUxdeyL5qIX8= ) ; Key ID = 64280`
	`gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcbYvlY667qXEzHsDTkft9cgKy5F0S9CAP+aFK9+sJumGqvpMaOyOzsilJ+OSVFhopJ1aRFp CUpLVIcVJ3E3YATGpzB45M0D5c4oJ0RjEIUakBwcPghmSW8K1GPqj/eUs4fbVPytXwtwvUll9Lxf gUvi5DA6xD6d2ckwDyRxfcMhXYydr2hIsgfrBLmRDMi4BkxMvA23eShPd/tPvnR0gJk= ) ; Key ID = 10104`
	DNSKEY=64280/SEP is now in the chain-of-trust
	DS=64280/SHA-256 verifies DNSKEY=64280/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240623141047 20240423141047 64280 gov. GGsGHy8XGH2PGTeyVpY5iEmleVzWCH/eitEUBXIgG0ivqrcC6Pzhenn+3E9uz+C2ehYImK95B9PK juJuu0jPFw09gKBO8Xo9x+wpWM/Zdh3NxhzGmfQOxRyj/5e1g27XxQB1pqhRegDfa5/mg+8zAoFY YneUx2tnvdtycsZg49d2iq75YlRBRj9ZSl6PJJ/nzacwKPjQFCbFiuEfnn6Vn432vWr2T0AUuaDV bJCSg2c32qiMCHE18PaaUn82oWYF2/FjWhU9i/UpGd0PS8Wtvicuho7/CYbMv+UvithHF+NE7QFV VDQtgjise03ZFQWMfrZcrZE8W4/KKDeyfDAkFA== )`
	RRSIG=64280 and DNSKEY=64280/SEP verifies the DNSKEY RRset
	DNSKEY=10104 is now in the chain-of-trust
	Query to a.ns.gov for bpa.gov/A
	Received 395 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 395 octets ;; HEADER SECTION ;; id = 34153 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) bpa.gov. 10800 IN NS ns1.bpa.gov. bpa.gov. 10800 IN NS ns2.bpa.gov. bpa.gov. 3600 IN DS ( 16399 8 2 2602a2d73b485a5ffca736cc03e0f1bc8d6a23497be8b860c0099a00589b1934 ) bpa.gov. 3600 IN DS ( 49754 8 2 4c8771fa2d0364aa76eaadecde082c12eab45843652488382c66799f3a675513 ) bpa.gov. 3600 IN RRSIG ( DS 8 2 3600 20240514150340 20240512130340 10104 gov. CY50HTk7uv4O0kyr7eI6Zm2/eicOjxaJhUSIGlk8jjmO7hsB5yTndUufU6XQ3vVpTirn5Pnnvfay enB5QSvcxxGj5F+Ygc9wZh6EL2G4LkUkLjxkqDo5wPf7h3BqB8tChqEYjFG53zCruIrP60kARr8a Iw9C2HndYhgbYkfFOGvgmXJRhwP2nhTrNC4H3OxYb9jJ3yTlsXzJJc4swFe8Og== ) ;; ADDITIONAL SECTION (3 records) ns1.bpa.gov. 3600 IN A 170.160.36.10 ns2.bpa.gov. 3600 IN A 170.160.100.10 ;; { "EDNS-VERSION": 0 }
	Query to d.ns.gov for bpa.gov/DNSKEY
	Received 395 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 395 octets ;; HEADER SECTION ;; id = 62167 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) bpa.gov. 10800 IN NS ns1.bpa.gov. bpa.gov. 10800 IN NS ns2.bpa.gov. bpa.gov. 3600 IN DS ( 16399 8 2 2602a2d73b485a5ffca736cc03e0f1bc8d6a23497be8b860c0099a00589b1934 ) bpa.gov. 3600 IN DS ( 49754 8 2 4c8771fa2d0364aa76eaadecde082c12eab45843652488382c66799f3a675513 ) bpa.gov. 3600 IN RRSIG ( DS 8 2 3600 20240514150340 20240512130340 10104 gov. CY50HTk7uv4O0kyr7eI6Zm2/eicOjxaJhUSIGlk8jjmO7hsB5yTndUufU6XQ3vVpTirn5Pnnvfay enB5QSvcxxGj5F+Ygc9wZh6EL2G4LkUkLjxkqDo5wPf7h3BqB8tChqEYjFG53zCruIrP60kARr8a Iw9C2HndYhgbYkfFOGvgmXJRhwP2nhTrNC4H3OxYb9jJ3yTlsXzJJc4swFe8Og== ) ;; ADDITIONAL SECTION (3 records) ns1.bpa.gov. 3600 IN A 170.160.36.10 ns2.bpa.gov. 3600 IN A 170.160.100.10 ;; { "EDNS-VERSION": 0 }
	Found child zone bpa.gov

bpa.gov

	Checking DS between gov and bpa.gov
	Query to c.ns.gov for bpa.gov/DS
	Received 327 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 327 octets ;; HEADER SECTION ;; id = 52462 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN DS ;; ANSWER SECTION (3 records) bpa.gov. 3600 IN DS ( 16399 8 2 2602a2d73b485a5ffca736cc03e0f1bc8d6a23497be8b860c0099a00589b1934 ) bpa.gov. 3600 IN DS ( 49754 8 2 4c8771fa2d0364aa76eaadecde082c12eab45843652488382c66799f3a675513 ) bpa.gov. 3600 IN RRSIG ( DS 8 2 3600 20240514150340 20240512130340 10104 gov. CY50HTk7uv4O0kyr7eI6Zm2/eicOjxaJhUSIGlk8jjmO7hsB5yTndUufU6XQ3vVpTirn5Pnnvfay enB5QSvcxxGj5F+Ygc9wZh6EL2G4LkUkLjxkqDo5wPf7h3BqB8tChqEYjFG53zCruIrP60kARr8a Iw9C2HndYhgbYkfFOGvgmXJRhwP2nhTrNC4H3OxYb9jJ3yTlsXzJJc4swFe8Og== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for bpa.gov in the gov zone
	DS=16399/SHA-256 has algorithm RSASHA256
	DS=49754/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`bpa.gov. 3600 IN RRSIG ( DS 8 2 3600 20240514150340 20240512130340 10104 gov. CY50HTk7uv4O0kyr7eI6Zm2/eicOjxaJhUSIGlk8jjmO7hsB5yTndUufU6XQ3vVpTirn5Pnnvfay enB5QSvcxxGj5F+Ygc9wZh6EL2G4LkUkLjxkqDo5wPf7h3BqB8tChqEYjFG53zCruIrP60kARr8a Iw9C2HndYhgbYkfFOGvgmXJRhwP2nhTrNC4H3OxYb9jJ3yTlsXzJJc4swFe8Og== )`
	RRSIG=10104 and DNSKEY=10104 verifies the DS RRset
	DS=16399/SHA-256 is now in the chain-of-trust
	DS=49754/SHA-256 is now in the chain-of-trust
	`bpa.gov. 3600 IN DS ( 16399 8 2 2602a2d73b485a5ffca736cc03e0f1bc8d6a23497be8b860c0099a00589b1934 )`
	`bpa.gov. 3600 IN DS ( 49754 8 2 4c8771fa2d0364aa76eaadecde082c12eab45843652488382c66799f3a675513 )`
	Query to ns1.bpa.gov for bpa.gov/DNSKEY
	Received 2320 bytes from 170.160.36.10
	;; Response received from [170.160.36.10] 2320 octets ;; HEADER SECTION ;; id = 42736 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN DNSKEY ;; ANSWER SECTION (8 records) bpa.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAc434F4QXjWA9ydXl+DCd1cgb58Ep7Phle0S5+K0jM4KD8bb2r9WmtGdrpmEOXV5sCR8QugI 1sjZMhfqpssk8SAl0P2PNP1z+cgl+/tPmO0qHFoqWvwVwsATgJwIM/Lp1FqmGl1x6kx4Nx+PQIBM etCb2vFL1f1Jpu3wW8V92ru2tPsZ1S9VYhXg+Aw6hnBdHqS1iVEN3lTXu/8WYMBFdO8V4RyTwyFl s8EQDya4SYcdcQ3cPItXxZxQrJKAcnblZhtM2g5bWMcrdkjfRf9N6VtJfBdhYqweTbFeLs02rREt xbKvZHoQtTVcTze8SBkcVVo/i1uaRIKt9oAr/+U+4Y0= ) ; Key ID = 16399 bpa.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAcOcCF8kWXibbaTkQ43q2vnJOr2m6wmKdZuS+vSnu9wmFqAH3zLNg0F3tO1bTV4y+yV6AyDt eOvroRGR4+rbISfLVPINnkTzOJtYazoCQrXERWSvot6A0e7/AS66yXMZpZWh6UF6vpe+LXVqVlFS 3c+ctwnBCLiCsMSfAAjjOCm4GSOYEYL5dvzS0hI7jgavtobuRUJbTTRV8VTRc6lm8QMtRboDo84n ygvEvxrZRuGgAXbFQy8H9H8PdnEMd1TupmkkXWQMGhwDRBZPHmK38i6IY/KeAZZjxLA56Ae1REpz 94Qvs4dQtwJ31UTH9oY/68fVzEP2VuaWRsd9ynGohvM= ) ; Key ID = 49754 bpa.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAb6uXRFMDeyEEkUzBMqveRJI200BXuymUVDqLvT654R53DwCpBM92SSh+BzSKCxV3psieq6K MIXz9/OujHkCsK9iym4Fo/FJWVOqekdQgRSZUZWrbJvxj2jLTBWGY1Z0U33Tl4D6pz8K/Apja7BG /uPFJ+pxhwi8PEUPcPUu/IRQZdbwcovsOl+8i7k0yiht1T1Ws7o2SQAMUceEgKfJn/2R3Wd1A33Y AcCCmmcmZLltiit1KGWtYgoJ3dlu+zABpvOA2QmyRhbeiQDIK7Jgysme9Ax9qU/eVYQ71rFkeh5H v1LMz67qOr88wd0Nyz8xt4TxHWhmnqBDY08iKcA7d9c= ) ; Key ID = 14214 bpa.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAZfEUS7CMtsK5w8gR9YS8YUSSKaQpnTfTNRX62epM1IbZbFo8vsntTZdTHOj/5rzq8cMYlRk 4i/Fkyw2ZT/5k3vNaseI0sHP0ZIN+c+6XMsml48VSlkU6Mv2PndEv3ZuhOgLczBA9GtkYJnHeXOt lrOGfG7oYQET4cN8xAFzMl8mYn9q/cR+m+m8uSrbnMh/b/ShIj6bnRJGCGOLNm1Pei1q7eUP5AKb UB2QnWt09+nGOzsPh8eRZ3yj7Axgq6W2ne+fzXIqR3aR09wYcJ0tpiQdClFrswREs6iBzHCEazLU Y0sGMHk/DtXEGy9wOPm0SmX3W+hxTJ/rlRDSgmJBwWE= ) ; Key ID = 64756 bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20240516022323 20240509012323 16399 bpa.gov. fYWCpCbujnWeuNCH52UNF/hiXoNMpqqZrK/z7U9OFqrzdmExR2Ry0qEE0Ur4fKz+xCeDEYCfk8tg PWixXp5ehDBUVsC/tF0xJal+fKAGBAm79gDzSoJQA7oSg0lwfYT13x2N6SUtdem0IKKMHnjSJVB4 z7F4PvA/+MNL2VpKjpFwBeE0MMxZYPY/PFzSVONy3LBxhKVl7/8RqwL3EhJUMMdRy6QQ91WzU3rS 7DjJDiaR0s6mstD/WupbKQorVOJEvnsJpQ6iN3+pzNJd4QRf/x2FYcBZG8xYZZXBN2WF6wxHnYRH v4jFZDiAWsL8D4c1mWUNxrHvuAAb0Xmb83cdgQ== ) bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20240516022323 20240509012323 49754 bpa.gov. FMJ1Ln1/fvBlzJ0p0qZ6k+kba+A8qoGDvY3zpOjkNwr4kBUhPtfWwc6jptrynBt5j8k6BNtnOJnp eHeuLCgHL5rdXcGkYKjwghS8O4O7QpPrQrSFKOsK/XjAQah7xYrq8K7eBi35eFe7UhhFWuAciH3K /FYfz9mLBvEZdotAs++t4Hdc1Vvy4IkCwjcuwfLGxuCz0dcBc8W+oAyobvuNEIDLVBasX1+8q/RH fp958PMI9TIuOAdghGm07rLJEM/W/t/vNC3GKfLZSsaH79TmVOkN+tYhj4+C+kVIJCqD9sUINrnj YqgGYriXJQxkdY5xJG3uBa4g7a0ucMNbs2bh/g== ) bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20240516022323 20240509012323 14214 bpa.gov. LpSaNwFkwKqLrCtoJ7XcbpuDhReE4jNa9okLuLdzBiDeK469rr2crScEVafoojEqovVkojvLpzb/ 64SQs4k3tTbLAXwAxFkOsjXWNv0v4Lm2VOR8ZRZbNAPhnak7IASlqx9GnA3IZ2KLqUfHea8ltcgD x54i4C9hmbmXEtRue+dbFFjS/0D2nmHhXe66eiVGzQRajP49xrQ/ZlFUsTNIdQl+k9GGzrPnC3Sp YfoRGjKgwP2CzpUGQZrVg8xPMtqVQvEdt6fIq1brIxb6nZlxjsk64QXTgr2/o6/FHFhyOl4BI4UQ mEPPjsJOQZqFRxrtgsTUaFYRL5SkxjQphpA8tA== ) bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20240516022323 20240509012323 64756 bpa.gov. DSFHNRJ9f6Z12bxBelM1Qy7srXE5SGrzTuHnZr5ftDM3fribX9b6VyuL1aakEOqsze3oJhLYF3sy bHk3xLLPG9l2IireoDmLJGg7NExzc2eMhLQ3uehNz+hW5FuzCRB3i87hXYFWuEue8sJwoEDJ9lMr O3tY9nmESVbp2PYrtOKRpZcc+SP57cNtGGkiphDIoHesEMGdmv94c1jezdGGwNiEwpEglO756xZb jZrAuVotv3Lg9L+A0e62InCIM+qKIgG66/awynrA3GW/i9wAqbFHBrC3qGJyRdiDMuy9vuF+74dY JECW2vNmBZ5Rm1ik2YwcCpafIclUEncwP5bR7g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for bpa.gov
	`bpa.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAc434F4QXjWA9ydXl+DCd1cgb58Ep7Phle0S5+K0jM4KD8bb2r9WmtGdrpmEOXV5sCR8QugI 1sjZMhfqpssk8SAl0P2PNP1z+cgl+/tPmO0qHFoqWvwVwsATgJwIM/Lp1FqmGl1x6kx4Nx+PQIBM etCb2vFL1f1Jpu3wW8V92ru2tPsZ1S9VYhXg+Aw6hnBdHqS1iVEN3lTXu/8WYMBFdO8V4RyTwyFl s8EQDya4SYcdcQ3cPItXxZxQrJKAcnblZhtM2g5bWMcrdkjfRf9N6VtJfBdhYqweTbFeLs02rREt xbKvZHoQtTVcTze8SBkcVVo/i1uaRIKt9oAr/+U+4Y0= ) ; Key ID = 16399`
	`bpa.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAcOcCF8kWXibbaTkQ43q2vnJOr2m6wmKdZuS+vSnu9wmFqAH3zLNg0F3tO1bTV4y+yV6AyDt eOvroRGR4+rbISfLVPINnkTzOJtYazoCQrXERWSvot6A0e7/AS66yXMZpZWh6UF6vpe+LXVqVlFS 3c+ctwnBCLiCsMSfAAjjOCm4GSOYEYL5dvzS0hI7jgavtobuRUJbTTRV8VTRc6lm8QMtRboDo84n ygvEvxrZRuGgAXbFQy8H9H8PdnEMd1TupmkkXWQMGhwDRBZPHmK38i6IY/KeAZZjxLA56Ae1REpz 94Qvs4dQtwJ31UTH9oY/68fVzEP2VuaWRsd9ynGohvM= ) ; Key ID = 49754`
	`bpa.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAb6uXRFMDeyEEkUzBMqveRJI200BXuymUVDqLvT654R53DwCpBM92SSh+BzSKCxV3psieq6K MIXz9/OujHkCsK9iym4Fo/FJWVOqekdQgRSZUZWrbJvxj2jLTBWGY1Z0U33Tl4D6pz8K/Apja7BG /uPFJ+pxhwi8PEUPcPUu/IRQZdbwcovsOl+8i7k0yiht1T1Ws7o2SQAMUceEgKfJn/2R3Wd1A33Y AcCCmmcmZLltiit1KGWtYgoJ3dlu+zABpvOA2QmyRhbeiQDIK7Jgysme9Ax9qU/eVYQ71rFkeh5H v1LMz67qOr88wd0Nyz8xt4TxHWhmnqBDY08iKcA7d9c= ) ; Key ID = 14214`
	`bpa.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAZfEUS7CMtsK5w8gR9YS8YUSSKaQpnTfTNRX62epM1IbZbFo8vsntTZdTHOj/5rzq8cMYlRk 4i/Fkyw2ZT/5k3vNaseI0sHP0ZIN+c+6XMsml48VSlkU6Mv2PndEv3ZuhOgLczBA9GtkYJnHeXOt lrOGfG7oYQET4cN8xAFzMl8mYn9q/cR+m+m8uSrbnMh/b/ShIj6bnRJGCGOLNm1Pei1q7eUP5AKb UB2QnWt09+nGOzsPh8eRZ3yj7Axgq6W2ne+fzXIqR3aR09wYcJ0tpiQdClFrswREs6iBzHCEazLU Y0sGMHk/DtXEGy9wOPm0SmX3W+hxTJ/rlRDSgmJBwWE= ) ; Key ID = 64756`
	DNSKEY=16399/SEP is now in the chain-of-trust
	DS=16399/SHA-256 verifies DNSKEY=16399/SEP
	DNSKEY=49754/SEP is now in the chain-of-trust
	DS=49754/SHA-256 verifies DNSKEY=49754/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20240516022323 20240509012323 16399 bpa.gov. fYWCpCbujnWeuNCH52UNF/hiXoNMpqqZrK/z7U9OFqrzdmExR2Ry0qEE0Ur4fKz+xCeDEYCfk8tg PWixXp5ehDBUVsC/tF0xJal+fKAGBAm79gDzSoJQA7oSg0lwfYT13x2N6SUtdem0IKKMHnjSJVB4 z7F4PvA/+MNL2VpKjpFwBeE0MMxZYPY/PFzSVONy3LBxhKVl7/8RqwL3EhJUMMdRy6QQ91WzU3rS 7DjJDiaR0s6mstD/WupbKQorVOJEvnsJpQ6iN3+pzNJd4QRf/x2FYcBZG8xYZZXBN2WF6wxHnYRH v4jFZDiAWsL8D4c1mWUNxrHvuAAb0Xmb83cdgQ== )`
	`bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20240516022323 20240509012323 49754 bpa.gov. FMJ1Ln1/fvBlzJ0p0qZ6k+kba+A8qoGDvY3zpOjkNwr4kBUhPtfWwc6jptrynBt5j8k6BNtnOJnp eHeuLCgHL5rdXcGkYKjwghS8O4O7QpPrQrSFKOsK/XjAQah7xYrq8K7eBi35eFe7UhhFWuAciH3K /FYfz9mLBvEZdotAs++t4Hdc1Vvy4IkCwjcuwfLGxuCz0dcBc8W+oAyobvuNEIDLVBasX1+8q/RH fp958PMI9TIuOAdghGm07rLJEM/W/t/vNC3GKfLZSsaH79TmVOkN+tYhj4+C+kVIJCqD9sUINrnj YqgGYriXJQxkdY5xJG3uBa4g7a0ucMNbs2bh/g== )`
	`bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20240516022323 20240509012323 14214 bpa.gov. LpSaNwFkwKqLrCtoJ7XcbpuDhReE4jNa9okLuLdzBiDeK469rr2crScEVafoojEqovVkojvLpzb/ 64SQs4k3tTbLAXwAxFkOsjXWNv0v4Lm2VOR8ZRZbNAPhnak7IASlqx9GnA3IZ2KLqUfHea8ltcgD x54i4C9hmbmXEtRue+dbFFjS/0D2nmHhXe66eiVGzQRajP49xrQ/ZlFUsTNIdQl+k9GGzrPnC3Sp YfoRGjKgwP2CzpUGQZrVg8xPMtqVQvEdt6fIq1brIxb6nZlxjsk64QXTgr2/o6/FHFhyOl4BI4UQ mEPPjsJOQZqFRxrtgsTUaFYRL5SkxjQphpA8tA== )`
	`bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20240516022323 20240509012323 64756 bpa.gov. DSFHNRJ9f6Z12bxBelM1Qy7srXE5SGrzTuHnZr5ftDM3fribX9b6VyuL1aakEOqsze3oJhLYF3sy bHk3xLLPG9l2IireoDmLJGg7NExzc2eMhLQ3uehNz+hW5FuzCRB3i87hXYFWuEue8sJwoEDJ9lMr O3tY9nmESVbp2PYrtOKRpZcc+SP57cNtGGkiphDIoHesEMGdmv94c1jezdGGwNiEwpEglO756xZb jZrAuVotv3Lg9L+A0e62InCIM+qKIgG66/awynrA3GW/i9wAqbFHBrC3qGJyRdiDMuy9vuF+74dY JECW2vNmBZ5Rm1ik2YwcCpafIclUEncwP5bR7g== )`
	RRSIG=16399 and DNSKEY=16399/SEP verifies the DNSKEY RRset
	RRSIG=49754 and DNSKEY=49754/SEP verifies the DNSKEY RRset
	RRSIG=14214 and DNSKEY=14214 verifies the DNSKEY RRset
	RRSIG=64756 and DNSKEY=64756 verifies the DNSKEY RRset
	DNSKEY=14214 is now in the chain-of-trust
	DNSKEY=64756 is now in the chain-of-trust
	Query to ns2.bpa.gov for bpa.gov/A
	Received 2480 bytes from 170.160.100.10
	;; Response received from [170.160.100.10] 2480 octets ;; HEADER SECTION ;; id = 26439 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 7 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN A ;; ANSWER SECTION (3 records) bpa.gov. 300 IN A 20.42.128.100 bpa.gov. 300 IN RRSIG ( A 8 2 300 20240519182516 20240512172516 14214 bpa.gov. cncF2XWYYyd3DMq485UUU4Gsb+5AfWn03Aw1u/DikZ7OiqM/nHRLtE95z9LRcvhtJ3WSyQS7ffM4 E2oEzVLiY9GVukOoVhe6SWtJ87lp3hfa6phxGcQ7UIn+Gd8IzAZxVPlFe3l2iJhIZBtiH49JC3lZ dfiiZ/QPC32TAoz43B+cZgppVWJLGPWkxpBeB9N47Zx8MGE7MkqSn3j9h49XyoZMGms321Q9O3ZL E5zrxYEhgMQljo4T4Q1IvKmHiyGyfzAQuch8ZK1WygBlYROSY/rSxQJtEgp5Y9HcuhfTNfJVKz6+ ZGm5QMoXKOmc4awCy/ixO8D8hvoCw3RKRitkaw== ) bpa.gov. 300 IN RRSIG ( A 8 2 300 20240516022335 20240509012335 64756 bpa.gov. Y27Rcvqy2JquZGCP7hVA2S3M+a3xYLQ12Ycj+afNivrNHtRErV0nwZUETrLMAVMJ3GJX3EGwDDnq 8Q1U6aRdJcMqFCruwAhxyf1oQrn9HZLmTquQp72n1I+oWlUly1dBzeyJH/A+Ne6FefV/hRMtRYdh f1TuUFsbarH3rIYPuV8TJ1IPZrbMtjvPEF32MtewJfaK/xvvKrReiz9OeJVyGVQqnvBZaZoccqei 2zZMxRt83X4PALlkmq0pfaUpudySutJqj7YU+BtSfJgm2i8BewgpAiMVwLr4ZNPMvUBwt6w9/PQV Zr4t1JkGli26J4CNW2FC/6gmcjgzE5xE/BK0HQ== ) ;; AUTHORITY SECTION (4 records) bpa.gov. 86400 IN NS ns2.bpa.gov. bpa.gov. 86400 IN NS ns1.bpa.gov. bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20240519182346 20240512172346 14214 bpa.gov. Nm8M/aY/Y7JoxpsF3GiQ4vKimUuc6Nyi1fdt1GB70lDdqEIBHsFBNrFXfYEODVWo8VcpTvKPvFf1 qQd7KnWmgH7TYzYPx0/NiBPaW56mhu9JrHgmHtmWGUVAMET9CFp2oeD6+7HwvmeJa/V6Ndyogx1n ZJrMktn9uqvH/YYPGcaW5li6kw8hFv8QvJx4RfxbSiibtfTo4T/UUyf/ck5mjiRSqQ1rNnInrNjL EqY5mR4GOlOeOTEMfpLCjiDpWeaKLgN19wwYG5IxsPkt9rO+KdZdPz9AMb4YdwI3syetZRKVid3v tZcmgFF3TodYAvllDC0zcrvfYbzWL/kqjn78nw== ) bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20240516022325 20240509012325 64756 bpa.gov. SZO+Xh603ulU5tQQ+Xkb/XxcfCinKxx0ar28uODHbNDqxmMFoFviQvaG8YnKhRO+66qezbGX6DdS NY2Kx52/vHShkU7Q7HOFvnvhf5Q95MjXWPMbB08YpQkWXAO8b0dz/0LNVqhgWCsOOF5XAkb0EUCT jVVKRIjMx1I0XtPUnLztpyxRtn1y3SVUxKisMa2SjpZflKoFdq8Tk2UKSsr7QqPZEupuPQrlVQ9M c/ER6J0mJIQoERbtnsgaTUZP1k+jIrFO8zJSmUHhhR0ax3agwss9CW0xC6tGKwr4pfY6iFyMAzZ8 3R1JryX4Qej/0AK7G0Lf38DEUjyhsMzApvKU0g== ) ;; ADDITIONAL SECTION (7 records) ns1.bpa.gov. 86400 IN A 170.160.36.10 ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20240519182346 20240512172346 14214 bpa.gov. u6/vgQdpF3s76riwjDOWs6/e8pU2TLSh4C09sVSSdES81t2e3tYIQRDRHD4/K/0CiNNh8MWYp1IQ +J8lvTyRKFBLZfWHLBmOnHcY3dOSBAlzPupGmkt2cLNGAHLBB8x1lQsJRbee7AoYrltdxfCEiAUG jD4jJTmBscV+XtLtev1ZbzRooRieNlqi3A9kxA/XzNTW+H06CskPXYCbOiDtsUwsN/K2ohi5gEMJ u7P4pGPZpm5YqCQ0fKDb1cP55qZvFvYrLzKje+fND2EC7l374QIoaNZlXpXyuKPN9BOMDkUKBZ4P TKE0LrfxdqzKW4PlDF65TVFZ4SGFGSvqI52sEg== ) ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20240516022325 20240509012325 64756 bpa.gov. P5dN9I3oiwvdrK7q1epZ8eg91l8OuLCq2UXJuWFaG+4ECz+reO/3iWqMbsPwU2SK3ckz+TPvmyXf sDtCNGvI1rgA93s/N2TbVPvfH3RWKockH1rPUHSOELZ4Z4MiUa5RpdFx/8xNbI6150HGamyzV5pp HdqF0cKXZ1yDKWzmkP9if4WJXipW7D01sKOF2Tv4kw5snw6KarG49cuMKb5G8ovOz0Xpu/eCwVY5 zSc40UBskViZRxr4UsqkKPZtbFnPnit/PeMaAGpRlhbHjA1sjvhUjygdpKgGjYPARaUxSd8eJMPq hg5boE/85sBzvwRJ/2O06FwbPjbI16tkH7kTAA== ) ns2.bpa.gov. 86400 IN A 170.160.100.10 ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20240519182346 20240512172346 14214 bpa.gov. J6C70WYIG/Yh+WeY9U2BO9qopQDUBJy5frc0n0f30LDinP3T2WNpsKxyGa37JvkBw2xu8cohoDdr 36Ds8oF5DznQBN/kcuurC7gXq0/+/PbI7L7XtUu7t1576k6tv6bAgEEoT1Oxgmdpi/+g5XRXFe9V +vbv5RYwQsOikfS7sQorcKosW99U0wHuP+eCVJZQ7za1athDEneD/5fE+FSVuv7YVb1LWk8/A58D pcDcnK9P2iXoo+3F4oY2dBDdQ2HWLA32kUkh/j6h2+6paXzNFV9gZegT1s4Cywz1cV/GRLkNIvJn U5J7zl85Bv/g1VNrfAmrp7GEePq759DM/n3pLA== ) ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20240516022325 20240509012325 64756 bpa.gov. a3xJB0sBKqq5xyrFeR7PJsFyNHG9Q/7NDoJegohD99n4gEptrca+LLqVUrOSiZIxD9jcycut84AB WllW9/nXVwc68tG+shNmn8llVCES6DheLvRkrDH9/lUCxki19+5yBbqSvnDRN7E2/xdLOQgV3pm4 HFoF9zGNXRky+rI9xq8o9IOvEBFqZo37LBiv+T7GQa8rnPEV9BickdukCFupDjYA+RPySXV8dIDx 0yoh9uap4hrmhhy9ltLANiotADR7cqXtEQ0t4DInz4pPAP/yymEYjsyMznPFzPsVl4Slff2ihmOg YNJkg9GHbapAMkC+hiQuM8r7k3satAXqQuvPDA== ) ;; { "EDNS-VERSION": 0 }
	ns2.bpa.gov is authoritative for bpa.gov
	Found RRSIG signed by bpa.gov zone
	Query to ns1.bpa.gov for bpa.gov/SOA
	Received 2511 bytes from 170.160.36.10
	;; Response received from [170.160.36.10] 2511 octets ;; HEADER SECTION ;; id = 30117 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 7 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN SOA ;; ANSWER SECTION (3 records) bpa.gov. 43200 IN SOA ( ns1.bpa.gov. hostmaster.bpa.gov. 2024051101 ;serial 43200 ;refresh 3600 ;retry 1209600 ;expire 3600 ;minimum ) bpa.gov. 43200 IN RRSIG ( SOA 8 2 43200 20240518214650 20240511204650 14214 bpa.gov. eBPui2qAuM8/W61CIguS/McrmeDV6YwjwFUQeXxWnknoRUAWDu5AVLaL8Ioi5Cas/HhA2nresmzk +iU9ApeJgX1MmNzjyUMsh6X7a3jm39vG1M+hS7JrSm1Xljxt3LdAikQm3F9oI2lSPhhd9+0uXiN8 U5p9apE2+vXDaTnUyR1sfbZzlweV5VGb6MbtF9OMfFSiTtBn+wsM7PCVq/hIHyiNxvvYhtSC4/MR YpS9w2fGtZkQ/gylpBc+eKyqDNfKTI64eK6+ZnNf8Kdc9ATs2wcGm3pJdlyS7Soxn0L6PxqE5Vua Ro4kfkIn5E3u3aIfKeS2GikqnC7HzRw1TKFTlw== ) bpa.gov. 43200 IN RRSIG ( SOA 8 2 43200 20240518214650 20240511204650 64756 bpa.gov. BX92gCquwmzZ/HYvjpzg8VpBSQorLtHaDLXen3OBg+ZYa5M63cQ9P9PgK+hYABpF4Cz+PRVZw0Dm ArO0HeHh66h27kvwXlCbgtV6HfRZoq22RmQgLauG6pb93szUJu2r05VL+mG1n1Cl12ItONs1CmkV 4WyJ52CnKHOWHe7dYxtg8yvg9T/t0PU/uj1cdXfHXUDwofJSgBS4rAQUMXro8v1oCPPMp3OgxPRy y0AezJ/o6zIgGaMztIp38lNWc8oVrQEWMzNK7MNSIb7EcQm7RCCD95oCB4dzp55LujDHXwA0yUrY bGYFmzPyzhHQBkUayhX8sdJzA4+N0tIBZxiRLQ== ) ;; AUTHORITY SECTION (4 records) bpa.gov. 86400 IN NS ns1.bpa.gov. bpa.gov. 86400 IN NS ns2.bpa.gov. bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20240519182358 20240512172358 14214 bpa.gov. gbOUj2cs+WoCocJpGo0MqoZwNG/I1Rhmbw5KBjRJgmPeibZl29fy3GiqSgPlhow2SJyYS3LdEin4 nZsqPHo50X3wEAQLHIJeIdjtY8o5xLNaJdPLRnTovgSLYSEbCs+aSQonsjfQEoaphl4+WF+WnRpn uR9QLuGRuJimtJvNxw1YZfNji8IY0G7sjk3OyyB7yiOzkt4Dt5E0fZl2eaDLe2aIH4iyiPXZtbQr e3Kx1UJcxYQeH/m8/4eZDUf3eZM/EsOZPlXpX4xsGEGaeOMto5WA3scv5oQs57YcgsU82/0VH80L gyLkyEQpmAFp4bnHIx11+l0qVhRf6ToiTJY4ZQ== ) bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20240516022324 20240509012324 64756 bpa.gov. XCYNVxqFnM4WGOcQGIiXAN0GQ4yyp8Fbb5yjbkAogILGdi+k8Ib/2pTr1nfwALi9yJYLHTm/fnEM jDCtmtk+OsbI3yjAOhCgBZkvJyT83OH95tvd02mVEj9iTQwnLljmAVjIfOH+EdvyhRQacpLpYNqu GdqvMFeXq3vEOkbAkz1eqH/f1EO17aAZlQ6eb+j99PBO78viApEP/VdFAo3ldW0Vu7ndM//5rqXX G28Yk2eG7cu9fNmWLTxwpP295bocwqa9cCXTWGiYFTpYT3C4oBoWPC+vqxTLLMK92d3Pz6NdZ6Ha 36ZQBU3TbxMJjrDBk/HrnYvwZ+sELBkKJEQjPA== ) ;; ADDITIONAL SECTION (7 records) ns1.bpa.gov. 86400 IN A 170.160.36.10 ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20240519182358 20240512172358 14214 bpa.gov. du0JCzgFOfYkEVcmWgf1XzFQz7ffD4HMIGskUoMsnfgId2Kszt1HjvbWnuQJtKzD4rnGBePacqVy 0ayLGr22llTuGpc/NUoOq8R9IbVI60QJozwP6FcKJoaOw0ktskmj39FZPZ9+Xm9PcRqGWRE/LH7Q fpXFlkphn1MZlADDhR/PaeeW48V6zJWA6hZkc0ovcz3W5qHd6wVFikyfmBM1j/8MTPDhBAOPXemr vBHRFXLTSKAXOFxertJ5gFP43rDjP74c0Rxaz7bdFEUUFU8EYXcreZf/VcV0YdzkPIpofFpDERp3 jv+xHEuBgEUoDwZcYr6WX7gpwQU88oLxW2g4UQ== ) ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20240516022324 20240509012324 64756 bpa.gov. Ejkv4m+2UVIqwrwyPC/OYDitaB5x5G5au15X2u8foaN64w7iIbs2ELdqXWqPFNRDLSmaY2xmmo6q ++NEBktdPU2m+zZTrPEORZAGfYuuPUbFD9iQQATvsCeYP9+sHCfkqyoxrGNzwNuoSHMDtULMSHkb xtFqkGkZoyiauCKTaq/0q2SJboIWqy9XyusRDwhtGzFX2MrhNYWstenziTgAqA+PtSSJBpeTOmc0 zYNjJYvzpNaHLguP9ecjDzDHFqHvRDjhXjAyDPy9BocQZ0EpnImM/4SRZvLXkamttsQg8u32fFIS SdRdr+Q5CRNVYO68EnqYzY7o4H+VrZ++uvEzNQ== ) ns2.bpa.gov. 86400 IN A 170.160.100.10 ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20240519182358 20240512172358 14214 bpa.gov. Wg7dogoGmNaugzdCZ0vmszL9xTS1yWRn5qbQWpUQV4aKJHf+pTzwk2LOBcue6BTO8N3z6mMWZTmu cBzMLvk06KDfP+GjrG+y7HyrhLALnS9Gn4hyGI0iSoZE94W2bfMo0Ef+4sUm9NroLKamZ2K4L0Cp oi8kfTtnT6Y/sKZ6TjCLnCgQOsGU36k3XpqMISLdP4Xltfaiw6yvNhhD+/zN7jB4BHRAGGjtxeJS iJp8YwdM/mP5QNp1RPmj0kv19y6PUHQKyDmvtuOnVannKRqklhT/eeViz+JbAMo60C5VUJquAlqs nTWa2w/1T744OnJTmCBFqPMcfiWLEJ/KEUJhsA== ) ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20240516022324 20240509012324 64756 bpa.gov. iEiv7ne9ZNdSpTfKh4iPymFn6GWbYrPIe+lZDJU1FgnLFPrFVgkO3Va8WPE4biyTYtUz7uE7ejRy uspDcq3ofb84TYDonerXKj6rHMajAOKlGyUuV/VKVR2KXFSdNh+vesy3gPP+TYlu61nl+49WNKlu DxbbUq7F46ggjvAd89oxsilThVqcT57RDiL3WQSEIRvVu4UU3GuULxMm/H0Fz9fLItccAtXOSOt0 g8fa+Zxpaypblwyy00ygqre0N7v7p9Cm3dksCV70jUKO389+dTKZAUDL1W4sSuBpdjVxNKSX7GMV 0kPA7ECbgK1ZwI6+sMmW0DxTsIy8QwejDhSiyA== ) ;; { "EDNS-VERSION": 0 }
	Query to ns2.bpa.gov for bpa.gov/A
	Received 2480 bytes from 170.160.100.10
	;; Response received from [170.160.100.10] 2480 octets ;; HEADER SECTION ;; id = 51894 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 7 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN A ;; ANSWER SECTION (3 records) bpa.gov. 300 IN A 20.42.128.100 bpa.gov. 300 IN RRSIG ( A 8 2 300 20240519182516 20240512172516 14214 bpa.gov. cncF2XWYYyd3DMq485UUU4Gsb+5AfWn03Aw1u/DikZ7OiqM/nHRLtE95z9LRcvhtJ3WSyQS7ffM4 E2oEzVLiY9GVukOoVhe6SWtJ87lp3hfa6phxGcQ7UIn+Gd8IzAZxVPlFe3l2iJhIZBtiH49JC3lZ dfiiZ/QPC32TAoz43B+cZgppVWJLGPWkxpBeB9N47Zx8MGE7MkqSn3j9h49XyoZMGms321Q9O3ZL E5zrxYEhgMQljo4T4Q1IvKmHiyGyfzAQuch8ZK1WygBlYROSY/rSxQJtEgp5Y9HcuhfTNfJVKz6+ ZGm5QMoXKOmc4awCy/ixO8D8hvoCw3RKRitkaw== ) bpa.gov. 300 IN RRSIG ( A 8 2 300 20240516022336 20240509012336 64756 bpa.gov. KoHvkdk54m2Jp5US4M4YFam2NCCUl3CSgqydD/6KfX64TI5tmMRqPqVp9V/+NBiZA+u53qGSDu3S bSo7qp8CYwRERncsTqsbjTTvXZrRjDkzaFxkhxYfeuxeQfN8BACsDvVZe5c1RGFNq6rJqivA9pJO EMlLHsFPoV79mnKnawCMXziHCCNqPT9Kw7sIDXXg+veEfb7mygqL6Y4v/ZGe3yTrFME75GNDbue0 3EVJvw5ETSLsZQUOXF0hTXTV4Cu3R2lhgXG3qDvl4KK+09qbrGSD5ArsXobGKIsW4xtl86YnU8SY xOOQDug2lMuTUUTBA8zOWWDgqlHLJaKBEj/pwA== ) ;; AUTHORITY SECTION (4 records) bpa.gov. 86400 IN NS ns2.bpa.gov. bpa.gov. 86400 IN NS ns1.bpa.gov. bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20240519182349 20240512172349 14214 bpa.gov. d5iiqwfuVNkquEAlLE6CGppKQhLSRjfyvpzQV336Yauw+C9pmVwusfg57VvxwoM5J3CivrH9lI/+ 9PkO240LSkTIfp5c32iR3gkWnD1evBolTPo4wemjLmC77+dMmja/0MorVYcyzeIBhkkAFtKoK+bA 8H4WFK/1pEgT6A0iXDxPCQk6gFUIZkhRcruaeRVScJLaI00ICwXNKB8znNADw3fI7wyaChpz33eJ fYdGUACrtF61XEhZtumVbukrcabdjiaukGCnTAWoCf9S3rMBXxVmLyJoNiDKZx6nHg8qLicCheCh g6b7YRe+FGeXOWokB2JS/yCZoqMNYMo7BzNI2A== ) bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20240516022325 20240509012325 64756 bpa.gov. SZO+Xh603ulU5tQQ+Xkb/XxcfCinKxx0ar28uODHbNDqxmMFoFviQvaG8YnKhRO+66qezbGX6DdS NY2Kx52/vHShkU7Q7HOFvnvhf5Q95MjXWPMbB08YpQkWXAO8b0dz/0LNVqhgWCsOOF5XAkb0EUCT jVVKRIjMx1I0XtPUnLztpyxRtn1y3SVUxKisMa2SjpZflKoFdq8Tk2UKSsr7QqPZEupuPQrlVQ9M c/ER6J0mJIQoERbtnsgaTUZP1k+jIrFO8zJSmUHhhR0ax3agwss9CW0xC6tGKwr4pfY6iFyMAzZ8 3R1JryX4Qej/0AK7G0Lf38DEUjyhsMzApvKU0g== ) ;; ADDITIONAL SECTION (7 records) ns1.bpa.gov. 86400 IN A 170.160.36.10 ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20240519182349 20240512172349 14214 bpa.gov. gw3ANqaP6iJ9nmrV/aRf/Bw6OTFmx++cTj/LFr05Q96Jum9wMKiRyUSSGG6BIXn2JRmQ2pmTSZJg eNAD2sylAYAvsmmX3psmCDDy/CNTx1K1t8RsMOrkO0YP/zt/Gg6xcbX5dfOdocqKBbzuq/suzsI4 LjWpCu7L7E7e3vq3QjU3OYJV73sF+Tt3BPXPiuCXc9I7KtoipM7MTJdMcm/qxqjpNCQftP7lmYN0 Nxfqzu8rbp/O5zEzSQc5afNYkCZDW9f0FpL8Y8B7gOJCZYvWJk5GuLHQufrglJrumpvynaSpORDR JPdCIpq3G88GcPzCONbf/Hqct/J1tViln9fYnQ== ) ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20240516022325 20240509012325 64756 bpa.gov. P5dN9I3oiwvdrK7q1epZ8eg91l8OuLCq2UXJuWFaG+4ECz+reO/3iWqMbsPwU2SK3ckz+TPvmyXf sDtCNGvI1rgA93s/N2TbVPvfH3RWKockH1rPUHSOELZ4Z4MiUa5RpdFx/8xNbI6150HGamyzV5pp HdqF0cKXZ1yDKWzmkP9if4WJXipW7D01sKOF2Tv4kw5snw6KarG49cuMKb5G8ovOz0Xpu/eCwVY5 zSc40UBskViZRxr4UsqkKPZtbFnPnit/PeMaAGpRlhbHjA1sjvhUjygdpKgGjYPARaUxSd8eJMPq hg5boE/85sBzvwRJ/2O06FwbPjbI16tkH7kTAA== ) ns2.bpa.gov. 86400 IN A 170.160.100.10 ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20240519182349 20240512172349 14214 bpa.gov. h9I2h1usk3nNx6m+7TK7uLlmq3B8p/8LINBagNLCkNJHItdawRPw1ng8g2Z003ApsbPMom59/IWQ RnemQh5BI+tiOhyozBVQg4k3JaB5/GG4YLwxHSdEkFT6i4Y+vr/qMBkTHztG7PA1dibLS8k5X4Ep 60vwi5gfSfFarFHPw+WXKgUm7Z4zHKqbrWBC3WNsHrfnxaQwD2uyJJ+UU1ZHlPFf7BvKDob7pTu3 GV0tL+FoQWR1Lb2Bv5mw2CfyEaRTOtV8JxD9MdPv0/58NCLfd/AwwbRaySejMQfz/lb+Axa7IOec kCXV2mM/UlcjKDIcFY7+sJQXWcjXCmziL7EXeA== ) ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20240516022325 20240509012325 64756 bpa.gov. a3xJB0sBKqq5xyrFeR7PJsFyNHG9Q/7NDoJegohD99n4gEptrca+LLqVUrOSiZIxD9jcycut84AB WllW9/nXVwc68tG+shNmn8llVCES6DheLvRkrDH9/lUCxki19+5yBbqSvnDRN7E2/xdLOQgV3pm4 HFoF9zGNXRky+rI9xq8o9IOvEBFqZo37LBiv+T7GQa8rnPEV9BickdukCFupDjYA+RPySXV8dIDx 0yoh9uap4hrmhhy9ltLANiotADR7cqXtEQ0t4DInz4pPAP/yymEYjsyMznPFzPsVl4Slff2ihmOg YNJkg9GHbapAMkC+hiQuM8r7k3satAXqQuvPDA== ) ;; { "EDNS-VERSION": 0 }
	bpa.gov A RR has value 20.42.128.100
	Found 2 RRSIGs over A RRset
	`bpa.gov. 300 IN RRSIG ( A 8 2 300 20240519182516 20240512172516 14214 bpa.gov. cncF2XWYYyd3DMq485UUU4Gsb+5AfWn03Aw1u/DikZ7OiqM/nHRLtE95z9LRcvhtJ3WSyQS7ffM4 E2oEzVLiY9GVukOoVhe6SWtJ87lp3hfa6phxGcQ7UIn+Gd8IzAZxVPlFe3l2iJhIZBtiH49JC3lZ dfiiZ/QPC32TAoz43B+cZgppVWJLGPWkxpBeB9N47Zx8MGE7MkqSn3j9h49XyoZMGms321Q9O3ZL E5zrxYEhgMQljo4T4Q1IvKmHiyGyfzAQuch8ZK1WygBlYROSY/rSxQJtEgp5Y9HcuhfTNfJVKz6+ ZGm5QMoXKOmc4awCy/ixO8D8hvoCw3RKRitkaw== )`
	`bpa.gov. 300 IN RRSIG ( A 8 2 300 20240516022336 20240509012336 64756 bpa.gov. KoHvkdk54m2Jp5US4M4YFam2NCCUl3CSgqydD/6KfX64TI5tmMRqPqVp9V/+NBiZA+u53qGSDu3S bSo7qp8CYwRERncsTqsbjTTvXZrRjDkzaFxkhxYfeuxeQfN8BACsDvVZe5c1RGFNq6rJqivA9pJO EMlLHsFPoV79mnKnawCMXziHCCNqPT9Kw7sIDXXg+veEfb7mygqL6Y4v/ZGe3yTrFME75GNDbue0 3EVJvw5ETSLsZQUOXF0hTXTV4Cu3R2lhgXG3qDvl4KK+09qbrGSD5ArsXobGKIsW4xtl86YnU8SY xOOQDug2lMuTUUTBA8zOWWDgqlHLJaKBEj/pwA== )`
	RRSIG=14214 and DNSKEY=14214 verifies the A RRset
	RRSIG=64756 and DNSKEY=64756 verifies the A RRset

bpa.gov

	Query to ns1.bpa.gov for bpa.gov/A
	Received 2480 bytes from 170.160.36.10
	;; Response received from [170.160.36.10] 2480 octets ;; HEADER SECTION ;; id = 24818 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 7 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN A ;; ANSWER SECTION (3 records) bpa.gov. 300 IN A 20.42.128.100 bpa.gov. 300 IN RRSIG ( A 8 2 300 20240519182515 20240512172515 14214 bpa.gov. HAMrqvPcCGLZZUCixKGNsTltlBz7DWtS0NRcZtMAdpZIgtk3InQDhahEaHf7F80bkhk99B9xzWs8 Zo+9SX5+REibNRd4TeJq/1Kv2d6T2s8sZIyzObYrZeD7WjK5Nl9rlFInuL83XH4NvOVcRNfyK1Lo KHZ6tbETqkvf4EXUY2h1zAB7tm4X2/tAGjNmRaPDWi8ubuhimrG+J5MhkQzKVMOeWMmmnQMNI8cv +CYdRIZ8stcm96mbTB+NMFJOAoXc39f9Kp9+HjFEADRXnK711SjJ5zbwnW6R5je4sTF1Q/I6wn/7 5tF+/1XiR4maj33WXt9meBBY2VXbAQ1jb4ekUQ== ) bpa.gov. 300 IN RRSIG ( A 8 2 300 20240516022419 20240509012419 64756 bpa.gov. iPKnIExB6zqaBXFfXbRtB8DyBB5fddAKo7I9iQj3Vls7/JWXmuqhte8CyxsdUJf6M1dHrSOyNAgr /8gnpxRiyaO1Fv0zCQDAHDlxMF60QFudySOopwfsTVVVG+ERzG85ezTHhbDbo6y2HeT7LIVty5O8 1ZEa2B8GIoLHK08h9hibB0eTLAGE775ctDvNToFSKBDMaah6G6gPwB2yVjjesHwceI0iKg72Y3BE rBNtlUasxFhQ48bmg7NRPA8di27O+jgtkJhFknyQWuHno232i+u99N7posjmxnHZ30Vkoxg8V1d7 rGydyPsSSOnn6skp1FvGEJi24JqI2fTWL7cdnw== ) ;; AUTHORITY SECTION (4 records) bpa.gov. 86400 IN NS ns2.bpa.gov. bpa.gov. 86400 IN NS ns1.bpa.gov. bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20240519182358 20240512172358 14214 bpa.gov. gbOUj2cs+WoCocJpGo0MqoZwNG/I1Rhmbw5KBjRJgmPeibZl29fy3GiqSgPlhow2SJyYS3LdEin4 nZsqPHo50X3wEAQLHIJeIdjtY8o5xLNaJdPLRnTovgSLYSEbCs+aSQonsjfQEoaphl4+WF+WnRpn uR9QLuGRuJimtJvNxw1YZfNji8IY0G7sjk3OyyB7yiOzkt4Dt5E0fZl2eaDLe2aIH4iyiPXZtbQr e3Kx1UJcxYQeH/m8/4eZDUf3eZM/EsOZPlXpX4xsGEGaeOMto5WA3scv5oQs57YcgsU82/0VH80L gyLkyEQpmAFp4bnHIx11+l0qVhRf6ToiTJY4ZQ== ) bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20240516022324 20240509012324 64756 bpa.gov. XCYNVxqFnM4WGOcQGIiXAN0GQ4yyp8Fbb5yjbkAogILGdi+k8Ib/2pTr1nfwALi9yJYLHTm/fnEM jDCtmtk+OsbI3yjAOhCgBZkvJyT83OH95tvd02mVEj9iTQwnLljmAVjIfOH+EdvyhRQacpLpYNqu GdqvMFeXq3vEOkbAkz1eqH/f1EO17aAZlQ6eb+j99PBO78viApEP/VdFAo3ldW0Vu7ndM//5rqXX G28Yk2eG7cu9fNmWLTxwpP295bocwqa9cCXTWGiYFTpYT3C4oBoWPC+vqxTLLMK92d3Pz6NdZ6Ha 36ZQBU3TbxMJjrDBk/HrnYvwZ+sELBkKJEQjPA== ) ;; ADDITIONAL SECTION (7 records) ns1.bpa.gov. 86400 IN A 170.160.36.10 ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20240519182358 20240512172358 14214 bpa.gov. du0JCzgFOfYkEVcmWgf1XzFQz7ffD4HMIGskUoMsnfgId2Kszt1HjvbWnuQJtKzD4rnGBePacqVy 0ayLGr22llTuGpc/NUoOq8R9IbVI60QJozwP6FcKJoaOw0ktskmj39FZPZ9+Xm9PcRqGWRE/LH7Q fpXFlkphn1MZlADDhR/PaeeW48V6zJWA6hZkc0ovcz3W5qHd6wVFikyfmBM1j/8MTPDhBAOPXemr vBHRFXLTSKAXOFxertJ5gFP43rDjP74c0Rxaz7bdFEUUFU8EYXcreZf/VcV0YdzkPIpofFpDERp3 jv+xHEuBgEUoDwZcYr6WX7gpwQU88oLxW2g4UQ== ) ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20240516022324 20240509012324 64756 bpa.gov. Ejkv4m+2UVIqwrwyPC/OYDitaB5x5G5au15X2u8foaN64w7iIbs2ELdqXWqPFNRDLSmaY2xmmo6q ++NEBktdPU2m+zZTrPEORZAGfYuuPUbFD9iQQATvsCeYP9+sHCfkqyoxrGNzwNuoSHMDtULMSHkb xtFqkGkZoyiauCKTaq/0q2SJboIWqy9XyusRDwhtGzFX2MrhNYWstenziTgAqA+PtSSJBpeTOmc0 zYNjJYvzpNaHLguP9ecjDzDHFqHvRDjhXjAyDPy9BocQZ0EpnImM/4SRZvLXkamttsQg8u32fFIS SdRdr+Q5CRNVYO68EnqYzY7o4H+VrZ++uvEzNQ== ) ns2.bpa.gov. 86400 IN A 170.160.100.10 ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20240519182358 20240512172358 14214 bpa.gov. Wg7dogoGmNaugzdCZ0vmszL9xTS1yWRn5qbQWpUQV4aKJHf+pTzwk2LOBcue6BTO8N3z6mMWZTmu cBzMLvk06KDfP+GjrG+y7HyrhLALnS9Gn4hyGI0iSoZE94W2bfMo0Ef+4sUm9NroLKamZ2K4L0Cp oi8kfTtnT6Y/sKZ6TjCLnCgQOsGU36k3XpqMISLdP4Xltfaiw6yvNhhD+/zN7jB4BHRAGGjtxeJS iJp8YwdM/mP5QNp1RPmj0kv19y6PUHQKyDmvtuOnVannKRqklhT/eeViz+JbAMo60C5VUJquAlqs nTWa2w/1T744OnJTmCBFqPMcfiWLEJ/KEUJhsA== ) ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20240516022324 20240509012324 64756 bpa.gov. iEiv7ne9ZNdSpTfKh4iPymFn6GWbYrPIe+lZDJU1FgnLFPrFVgkO3Va8WPE4biyTYtUz7uE7ejRy uspDcq3ofb84TYDonerXKj6rHMajAOKlGyUuV/VKVR2KXFSdNh+vesy3gPP+TYlu61nl+49WNKlu DxbbUq7F46ggjvAd89oxsilThVqcT57RDiL3WQSEIRvVu4UU3GuULxMm/H0Fz9fLItccAtXOSOt0 g8fa+Zxpaypblwyy00ygqre0N7v7p9Cm3dksCV70jUKO389+dTKZAUDL1W4sSuBpdjVxNKSX7GMV 0kPA7ECbgK1ZwI6+sMmW0DxTsIy8QwejDhSiyA== ) ;; { "EDNS-VERSION": 0 }
	ns1.bpa.gov is authoritative for bpa.gov
	Found RRSIG signed by bpa.gov zone
	Query to ns1.bpa.gov for bpa.gov/A
	Received 2480 bytes from 170.160.36.10
	;; Response received from [170.160.36.10] 2480 octets ;; HEADER SECTION ;; id = 45901 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 7 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN A ;; ANSWER SECTION (3 records) bpa.gov. 300 IN A 20.42.128.100 bpa.gov. 300 IN RRSIG ( A 8 2 300 20240519182422 20240512172422 14214 bpa.gov. GCMPbqPzMvQyrmn3bTv7ACA+FFT/9LensF7yeiAF+pqr6spXBEH2xZEonXRSHOL3QJELzi2lj9d9 iJFRhnOyqfF81Ve7QWoT3ZFn5JaN8IvjtkV+0fCvJvTcB7SovrKkIu0Iuk8iFpIPd2q4IZNWDRRs x6+qPwBSz96DaKXNx4GKQdbiN1wD+2fWbTM1PU+ROYRfDwPjNLzA6a+aBMk7koAV4HEs/pdBXTrE YlkRHT7KNgP/KbLIpa+mDR6I/0GnAfvy4Vs8dsLNFwaxBWuzHQSpfmsVvfn7Lo8dlAuS68qMhnjs dZbxNhEAkyDg+NMQdJRpWdzDVu8IlsGImeloSA== ) bpa.gov. 300 IN RRSIG ( A 8 2 300 20240516022349 20240509012349 64756 bpa.gov. G3efvokdInq0QdnY+zQ1MmcUkIqmAI3AeRBd+9MlD1zUPMq51DhyJ9K3KEnjtVI0Op0oEXcf9OdO GdGbzpiaMHJEfh2Y1Z2Lfe6KmYWeKSFcEc4h4p1w4g5l0hKH5AV0guhLWfVWXdpCeIluIHRKIT6s 5Nmvz6H3D/2jkJncpwvXwIG0RzycGjWrXx0d7a5gNpg8PiJzfLmudCAnDIyHY8NwuCqpk0eU/5UK t9jIG69Ee8U+6iA4ENLPFXrfXJWaGaoRqqzPiqW9tMwerdfV1+6mV9dx4XSwV1W8bsEL67Yjz+Jo FTrC43haMG+vQ5z9h9/V+Yqi7od5uxElSACBhg== ) ;; AUTHORITY SECTION (4 records) bpa.gov. 86400 IN NS ns2.bpa.gov. bpa.gov. 86400 IN NS ns1.bpa.gov. bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20240519182342 20240512172342 14214 bpa.gov. PIifhEj/SH6UeZt4f9VT3TqES1TUVztXWxWk8Fv3PiH/Z5Lh6QkpiU8Q1T5PH4RmrTYzHz5aX4V2 BLmInRDkg4vA03iNiQABIm7EycXpn57AR8Pz+Y9NgFdYoLLrAL4BeP9crlJHV1gb9btL/ORC6QCI ysjk8NZ41rPBPop5DFNUE/1Lvd1697xeRb3TgAJ6h/RRlGRp6Z0j9n5jYZTtAQrsBPyrTf6wbXbO 1UxKoBellvt6WX9Cn2Ce3ejfRaCYzc472RB0IF6HuwqIEbwEZkIwypoa3mIJiL+SyPKnX730rOBE bqcy3jLg4khTj6y96eWG0CrVBmHCgn9q8WKESw== ) bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20240516022323 20240509012323 64756 bpa.gov. hYIdN6wOM3EX+M//xkbv99dvHDWs20MZzoxKMm240yLyevProip7dVcPu9QoQhe+zifiRWbLVcJN ZlHtTYeugk8JWQkiHvPsdx9I9t5YZ6rub+fSadoUJ0IB0z2EnavvEgHt1DJNr83YVf2xNkjtE7FQ RT/XKdAzYYbZAmIhKVRXGP8G65xzKFP7I9RBbJFSHMlVHOSef9v5XD5m1AtDsnw5GbvWD+uo23m/ te7+BOUzCiqFvcizI8v0PRq9pnieP2zoWvv0bTgdmSo8GxT/YssxJhm9mgO9y/Q/jByL5IOw7zGl vDSZHnAvHpMq6YcyVia9p+dldhdNvDkT4qjjnw== ) ;; ADDITIONAL SECTION (7 records) ns1.bpa.gov. 86400 IN A 170.160.36.10 ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20240519182342 20240512172342 14214 bpa.gov. ONeX3mkIUOAbxku5tKSY+gYcWxjqsV4k0LwSORaeNBtxwUhjHVc5JG6ZciK30vkeXymLRS23ja3M bPU2zfbfuYwbZBYOHYlMGAQPM6JBxN07U/g1nIyVfasRAYQ/aFOamf+QkldSfDuZKrGyjc4GHJrI drHnHh7iZ2Hk//uQFBXcPAgBkt49WXBdbmfhT60SN2+iOBQH2qjHEEMFzaM+ZIGPMaXlh0ScC+aY vZx0NQhZvcBffqAHppUKyZ56BP/MMaxKy1vzWsNPxfxp33zczq2OFXZRn/ZspKOwiRAuLxyyBXze AQd6ihABtqYYr2/4IEOXVIIm+PDdzYV47gjp2A== ) ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20240516022323 20240509012323 64756 bpa.gov. Jz5LDfjzXoq07RXDMnKp4AccuyOnCKDJymu9e96cKJ8UIY1UAQ53tzmnmdlqD3dfMXUUli8ws7QZ o+ibLmhCaj6kwMTN9Z3jZn/9+27YLhrjgF81H25OmGBFYHrnDgPT9Asya0VzKeixDlkQ0JKr6ngB d1VUroTPPQ8IZL6KuOgJYFD3yOB0rMqgSuSqfXveNHtQASvR7ed1cwY6EMxaUjlaJS9v1VB4B7B7 5XI9YNkMN5YnON7Xh966sL0IgsHYbjvBD3pJwOI4u/ufnBfLA0kmW8Rwoo7zQzn1R3X+lDgCKqmu b/AxyRpaMvnE3Zc5q7arqO1rGJguCYd8phEbOw== ) ns2.bpa.gov. 86400 IN A 170.160.100.10 ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20240519182342 20240512172342 14214 bpa.gov. C48RqdwWin+PaeyOdY+dfEmjAwNBVuJrO1xSLJeDWPr5eZl2Xit2Ehp8+wypQdvGzuOmH3ZElEyI sTZiMHOjcLNhAZTrRW8Rj6LvmIFmrYTqG64BoSXZEl1D1NV4cdPn/MxG9RwABREDbPHUzcFfYUBZ b7cpVSS7LVGDrwPcyR8vGhXblcQ5Fi/Sv/nxg6wtoJRoda+6niTackYbr2rJAIee3Goo8aeRqu1T o1TahtdpFpYVOeOnZFtkE8FwlVxSnUGMlYin9wvYynZm7geaxi6VeC/fwsdfeN9AzTfhstptyYg4 heU47JNoBG1vMfi6JENwhF+fdF5yTQ5kkbWBbw== ) ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20240516022323 20240509012323 64756 bpa.gov. N0KCbjwx5cL2nxnYV3wZYz8v/wG43GUdMOYE+M9uBoQMZThByCwgRXO7Qjs4xEk5K+WO5rPKrCdO TtXJv0WheNaMwnGXVJD0VnADPe4X28KXoYrKgmlr8PCkXeIkLrB5yfbsVCNPm9FIZPvQUbcFaQxt Bj1miGB89nojNgAxvS+mxM+muDHWoUECh684gx590KUxQ0K0Tl84Vj5FdNh12pS8VOrP8Po2QLje d6aefSfhUS2NHZpiYAQpJRQ2pkAkdPHb7OEH08vK0nOdRqKQtcU0N1mMuxYtLZd5RlnzHxhMOjVM k+f/iY3bzjZcZ3f9rDNLEGKav/f3t/cAQnTg0Q== ) ;; { "EDNS-VERSION": 0 }
	bpa.gov A RR has value 20.42.128.100
	Found 2 RRSIGs over A RRset
	`bpa.gov. 300 IN RRSIG ( A 8 2 300 20240519182422 20240512172422 14214 bpa.gov. GCMPbqPzMvQyrmn3bTv7ACA+FFT/9LensF7yeiAF+pqr6spXBEH2xZEonXRSHOL3QJELzi2lj9d9 iJFRhnOyqfF81Ve7QWoT3ZFn5JaN8IvjtkV+0fCvJvTcB7SovrKkIu0Iuk8iFpIPd2q4IZNWDRRs x6+qPwBSz96DaKXNx4GKQdbiN1wD+2fWbTM1PU+ROYRfDwPjNLzA6a+aBMk7koAV4HEs/pdBXTrE YlkRHT7KNgP/KbLIpa+mDR6I/0GnAfvy4Vs8dsLNFwaxBWuzHQSpfmsVvfn7Lo8dlAuS68qMhnjs dZbxNhEAkyDg+NMQdJRpWdzDVu8IlsGImeloSA== )`
	`bpa.gov. 300 IN RRSIG ( A 8 2 300 20240516022349 20240509012349 64756 bpa.gov. G3efvokdInq0QdnY+zQ1MmcUkIqmAI3AeRBd+9MlD1zUPMq51DhyJ9K3KEnjtVI0Op0oEXcf9OdO GdGbzpiaMHJEfh2Y1Z2Lfe6KmYWeKSFcEc4h4p1w4g5l0hKH5AV0guhLWfVWXdpCeIluIHRKIT6s 5Nmvz6H3D/2jkJncpwvXwIG0RzycGjWrXx0d7a5gNpg8PiJzfLmudCAnDIyHY8NwuCqpk0eU/5UK t9jIG69Ee8U+6iA4ENLPFXrfXJWaGaoRqqzPiqW9tMwerdfV1+6mV9dx4XSwV1W8bsEL67Yjz+Jo FTrC43haMG+vQ5z9h9/V+Yqi7od5uxElSACBhg== )`
	RRSIG=14214 and DNSKEY=14214 verifies the A RRset
	RRSIG=64756 and DNSKEY=64756 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test bpa.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: