DNSSEC Debugger

Domain Name:

Time: 2024-05-13 02:02:02 UTC

Analyzing DNSSEC problems for lbl.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 864 octets ;; HEADER SECTION ;; id = 9576 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to h.root-servers.net for lbl.gov/A
	Received 614 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 614 octets ;; HEADER SECTION ;; id = 38670 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lbl.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240525170000 20240512160000 5613 . d06thvpfZrAqRw1DNdsobk+xlRCfnpa4pqCla5uo4x3WyeC5w9fjcUp6Ln2nI8U1WrIXTOFovoB7 RbnuCfBZSZefq+RGOONIS08FFu2ScoOSaVHoCxR7KzQZ1oU+OZBNXTyOL8+FKwoVU0aevqq2tkHW d9t8C9E0uVTMtasxLeX4QB99ixYaXsBFIW6lraoqo5sAqSnzanSHo44ZUAEFtvkyB4hkz5cVkK7F g/OTExPXe05PWgQOr6DxzX3fmrg2G2GSXmByKyj50eBNVAssZeC0iRTHJQFWMGwarDAMyM3tdvlK txT1uLJktK4uuSFNjM5kM85OJX0lDQ4olualPw== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to c.root-servers.net for gov/DNSKEY
	Received 613 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 613 octets ;; HEADER SECTION ;; id = 64144 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240525170000 20240512160000 5613 . d06thvpfZrAqRw1DNdsobk+xlRCfnpa4pqCla5uo4x3WyeC5w9fjcUp6Ln2nI8U1WrIXTOFovoB7 RbnuCfBZSZefq+RGOONIS08FFu2ScoOSaVHoCxR7KzQZ1oU+OZBNXTyOL8+FKwoVU0aevqq2tkHW d9t8C9E0uVTMtasxLeX4QB99ixYaXsBFIW6lraoqo5sAqSnzanSHo44ZUAEFtvkyB4hkz5cVkK7F g/OTExPXe05PWgQOr6DxzX3fmrg2G2GSXmByKyj50eBNVAssZeC0iRTHJQFWMGwarDAMyM3tdvlK txT1uLJktK4uuSFNjM5kM85OJX0lDQ4olualPw== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to k.root-servers.net for gov/DS
	Received 367 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 367 octets ;; HEADER SECTION ;; id = 14944 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240525170000 20240512160000 5613 . d06thvpfZrAqRw1DNdsobk+xlRCfnpa4pqCla5uo4x3WyeC5w9fjcUp6Ln2nI8U1WrIXTOFovoB7 RbnuCfBZSZefq+RGOONIS08FFu2ScoOSaVHoCxR7KzQZ1oU+OZBNXTyOL8+FKwoVU0aevqq2tkHW d9t8C9E0uVTMtasxLeX4QB99ixYaXsBFIW6lraoqo5sAqSnzanSHo44ZUAEFtvkyB4hkz5cVkK7F g/OTExPXe05PWgQOr6DxzX3fmrg2G2GSXmByKyj50eBNVAssZeC0iRTHJQFWMGwarDAMyM3tdvlK txT1uLJktK4uuSFNjM5kM85OJX0lDQ4olualPw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=64280/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20240525170000 20240512160000 5613 . d06thvpfZrAqRw1DNdsobk+xlRCfnpa4pqCla5uo4x3WyeC5w9fjcUp6Ln2nI8U1WrIXTOFovoB7 RbnuCfBZSZefq+RGOONIS08FFu2ScoOSaVHoCxR7KzQZ1oU+OZBNXTyOL8+FKwoVU0aevqq2tkHW d9t8C9E0uVTMtasxLeX4QB99ixYaXsBFIW6lraoqo5sAqSnzanSHo44ZUAEFtvkyB4hkz5cVkK7F g/OTExPXe05PWgQOr6DxzX3fmrg2G2GSXmByKyj50eBNVAssZeC0iRTHJQFWMGwarDAMyM3tdvlK txT1uLJktK4uuSFNjM5kM85OJX0lDQ4olualPw== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=64280/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 )`
	Query to c.ns.gov for gov/DNSKEY
	Received 779 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 779 octets ;; HEADER SECTION ;; id = 61250 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 8 AwEAAZp0vliR0TOBCJXmdagY36BI5ZveSPE3OSrcXKDs8IZa86x1+gwbheJcfLB6Fw6cWYUXaNgA mFcbxqIqWc5VJSyPS9yCPdEOLEIiegwCmcWnNsEyc0snKTyypXnvJ5JNhoznpFILDqlksAqP/aiq 1/l0w8TMkRbRrViLrJ1ayaScZ0nn/ge5wNpX09T9RI+gF1OIMJDdgH1vi0a+t6smSy4pUrerFTsu y8JAL+PP85MZiOssT9yoERfWSjFKde6PrQX5vj090AxT+hztb+q2EFXnF1a2L73/3UarB19k5NR3 MT1uM7ddag64Q0lg3aTy3MglDCzP7/StUxdeyL5qIX8= ) ; Key ID = 64280 gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcbYvlY667qXEzHsDTkft9cgKy5F0S9CAP+aFK9+sJumGqvpMaOyOzsilJ+OSVFhopJ1aRFp CUpLVIcVJ3E3YATGpzB45M0D5c4oJ0RjEIUakBwcPghmSW8K1GPqj/eUs4fbVPytXwtwvUll9Lxf gUvi5DA6xD6d2ckwDyRxfcMhXYydr2hIsgfrBLmRDMi4BkxMvA23eShPd/tPvnR0gJk= ) ; Key ID = 10104 gov. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240623141047 20240423141047 64280 gov. GGsGHy8XGH2PGTeyVpY5iEmleVzWCH/eitEUBXIgG0ivqrcC6Pzhenn+3E9uz+C2ehYImK95B9PK juJuu0jPFw09gKBO8Xo9x+wpWM/Zdh3NxhzGmfQOxRyj/5e1g27XxQB1pqhRegDfa5/mg+8zAoFY YneUx2tnvdtycsZg49d2iq75YlRBRj9ZSl6PJJ/nzacwKPjQFCbFiuEfnn6Vn432vWr2T0AUuaDV bJCSg2c32qiMCHE18PaaUn82oWYF2/FjWhU9i/UpGd0PS8Wtvicuho7/CYbMv+UvithHF+NE7QFV VDQtgjise03ZFQWMfrZcrZE8W4/KKDeyfDAkFA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 8 AwEAAZp0vliR0TOBCJXmdagY36BI5ZveSPE3OSrcXKDs8IZa86x1+gwbheJcfLB6Fw6cWYUXaNgA mFcbxqIqWc5VJSyPS9yCPdEOLEIiegwCmcWnNsEyc0snKTyypXnvJ5JNhoznpFILDqlksAqP/aiq 1/l0w8TMkRbRrViLrJ1ayaScZ0nn/ge5wNpX09T9RI+gF1OIMJDdgH1vi0a+t6smSy4pUrerFTsu y8JAL+PP85MZiOssT9yoERfWSjFKde6PrQX5vj090AxT+hztb+q2EFXnF1a2L73/3UarB19k5NR3 MT1uM7ddag64Q0lg3aTy3MglDCzP7/StUxdeyL5qIX8= ) ; Key ID = 64280`
	`gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcbYvlY667qXEzHsDTkft9cgKy5F0S9CAP+aFK9+sJumGqvpMaOyOzsilJ+OSVFhopJ1aRFp CUpLVIcVJ3E3YATGpzB45M0D5c4oJ0RjEIUakBwcPghmSW8K1GPqj/eUs4fbVPytXwtwvUll9Lxf gUvi5DA6xD6d2ckwDyRxfcMhXYydr2hIsgfrBLmRDMi4BkxMvA23eShPd/tPvnR0gJk= ) ; Key ID = 10104`
	DNSKEY=64280/SEP is now in the chain-of-trust
	DS=64280/SHA-256 verifies DNSKEY=64280/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240623141047 20240423141047 64280 gov. GGsGHy8XGH2PGTeyVpY5iEmleVzWCH/eitEUBXIgG0ivqrcC6Pzhenn+3E9uz+C2ehYImK95B9PK juJuu0jPFw09gKBO8Xo9x+wpWM/Zdh3NxhzGmfQOxRyj/5e1g27XxQB1pqhRegDfa5/mg+8zAoFY YneUx2tnvdtycsZg49d2iq75YlRBRj9ZSl6PJJ/nzacwKPjQFCbFiuEfnn6Vn432vWr2T0AUuaDV bJCSg2c32qiMCHE18PaaUn82oWYF2/FjWhU9i/UpGd0PS8Wtvicuho7/CYbMv+UvithHF+NE7QFV VDQtgjise03ZFQWMfrZcrZE8W4/KKDeyfDAkFA== )`
	RRSIG=64280 and DNSKEY=64280/SEP verifies the DNSKEY RRset
	DNSKEY=10104 is now in the chain-of-trust
	Query to d.ns.gov for lbl.gov/A
	Received 424 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 424 octets ;; HEADER SECTION ;; id = 30646 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lbl.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) lbl.gov. 10800 IN NS adns.lbl.gov. lbl.gov. 10800 IN NS adns1.es.net. lbl.gov. 10800 IN NS adns2.es.net. lbl.gov. 3600 IN DS 33234 7 1 539882422782ac81cb9bec8478ec716ae13414a2 lbl.gov. 3600 IN DS ( 33234 7 2 ee709a53d80a59959e6a37770a51293fc986f8441bf1dc10e0dee628e9be24f4 ) lbl.gov. 3600 IN RRSIG ( DS 8 2 3600 20240514030202 20240512010202 10104 gov. RVm8+KjuHM1EJ0JyxFHwFzcVZQgluevKWbz25vvPcdEMBEHyNmOMSwEM0D5PxkkmAPD970A5K4/4 O2POfCqNOojrrYTCZlpMCHQLTA/UoEVdDxZq/VZu3cHOcu1b9McmyS5StG7LNDE+uCtouGEAyoeU qyk3cognKnzCAk/hvBD802p5GU7W7l4MD0cynzpDZg/9LKHQAQtd16P30VUGRw== ) ;; ADDITIONAL SECTION (3 records) adns.lbl.gov. 3600 IN A 131.243.5.53 adns.lbl.gov. 3600 IN AAAA 2620:83:8000:a:53::a ;; { "EDNS-VERSION": 0 }
	Query to d.ns.gov for lbl.gov/DNSKEY
	Received 424 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 424 octets ;; HEADER SECTION ;; id = 64170 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lbl.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) lbl.gov. 10800 IN NS adns.lbl.gov. lbl.gov. 10800 IN NS adns1.es.net. lbl.gov. 10800 IN NS adns2.es.net. lbl.gov. 3600 IN DS 33234 7 1 539882422782ac81cb9bec8478ec716ae13414a2 lbl.gov. 3600 IN DS ( 33234 7 2 ee709a53d80a59959e6a37770a51293fc986f8441bf1dc10e0dee628e9be24f4 ) lbl.gov. 3600 IN RRSIG ( DS 8 2 3600 20240514030202 20240512010202 10104 gov. RVm8+KjuHM1EJ0JyxFHwFzcVZQgluevKWbz25vvPcdEMBEHyNmOMSwEM0D5PxkkmAPD970A5K4/4 O2POfCqNOojrrYTCZlpMCHQLTA/UoEVdDxZq/VZu3cHOcu1b9McmyS5StG7LNDE+uCtouGEAyoeU qyk3cognKnzCAk/hvBD802p5GU7W7l4MD0cynzpDZg/9LKHQAQtd16P30VUGRw== ) ;; ADDITIONAL SECTION (3 records) adns.lbl.gov. 3600 IN A 131.243.5.53 adns.lbl.gov. 3600 IN AAAA 2620:83:8000:a:53::a ;; { "EDNS-VERSION": 0 }
	Found child zone lbl.gov

lbl.gov

	Checking DS between gov and lbl.gov
	Query to a.ns.gov for lbl.gov/DS
	Received 315 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 315 octets ;; HEADER SECTION ;; id = 28789 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lbl.gov. IN DS ;; ANSWER SECTION (3 records) lbl.gov. 3600 IN DS 33234 7 1 539882422782ac81cb9bec8478ec716ae13414a2 lbl.gov. 3600 IN DS ( 33234 7 2 ee709a53d80a59959e6a37770a51293fc986f8441bf1dc10e0dee628e9be24f4 ) lbl.gov. 3600 IN RRSIG ( DS 8 2 3600 20240514030202 20240512010202 10104 gov. RVm8+KjuHM1EJ0JyxFHwFzcVZQgluevKWbz25vvPcdEMBEHyNmOMSwEM0D5PxkkmAPD970A5K4/4 O2POfCqNOojrrYTCZlpMCHQLTA/UoEVdDxZq/VZu3cHOcu1b9McmyS5StG7LNDE+uCtouGEAyoeU qyk3cognKnzCAk/hvBD802p5GU7W7l4MD0cynzpDZg/9LKHQAQtd16P30VUGRw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for lbl.gov in the gov zone
	DS=33234/SHA-1 uses a deprecated digest algorithm
	DS=33234/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=33234/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`lbl.gov. 3600 IN RRSIG ( DS 8 2 3600 20240514030202 20240512010202 10104 gov. RVm8+KjuHM1EJ0JyxFHwFzcVZQgluevKWbz25vvPcdEMBEHyNmOMSwEM0D5PxkkmAPD970A5K4/4 O2POfCqNOojrrYTCZlpMCHQLTA/UoEVdDxZq/VZu3cHOcu1b9McmyS5StG7LNDE+uCtouGEAyoeU qyk3cognKnzCAk/hvBD802p5GU7W7l4MD0cynzpDZg/9LKHQAQtd16P30VUGRw== )`
	RRSIG=10104 and DNSKEY=10104 verifies the DS RRset
	DS=33234/SHA-1 is now in the chain-of-trust
	`lbl.gov. 3600 IN DS 33234 7 1 539882422782ac81cb9bec8478ec716ae13414a2`
	`lbl.gov. 3600 IN DS ( 33234 7 2 ee709a53d80a59959e6a37770a51293fc986f8441bf1dc10e0dee628e9be24f4 )`
	Query to adns.lbl.gov for lbl.gov/DNSKEY
	Received 922 bytes from 131.243.5.53
	;; Response received from [131.243.5.53] 922 octets ;; HEADER SECTION ;; id = 8780 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lbl.gov. IN DNSKEY ;; ANSWER SECTION (4 records) lbl.gov. 43200 IN DNSKEY ( 256 3 7 AwEAAbhWh2OUDwhfVPSSpdq3CRvEraL4eusS5J/ImHQbI+Y80n01EKd4KGgAHDTSsRXnTh7B11xV OdVzeBtWuFeD2HxMiQeR25NAS7kI1Rc6LPZ+uZK9XD6/uCAR6deaPRxvpxgdKhCLzK60Lt0MJP2/ C0UjtQ7TgoiTAdDzMOnPgw0R ) ; Key ID = 48167 lbl.gov. 43200 IN DNSKEY ( 257 3 7 AwEAAaBBmV+ocPIDzpPEVekeIGczIs1nqx4ljfK95tZ2tUcudLzT7Ha5wUQhixsu+k49BQwRMuN+ f/F5m3dUHKDHuD/ZE+yXx7Kn5c0weN/BHHWlX1QRiHBXfCdNjyfg+I28QBe1MH/JVp4cEFSuRwFD jJNpv4vB10bIj+KIOFQpZ83GNgUYjDBcMuEw2w7AvS8vNBOrHpytgyS07IFLMvGuX2UUI1bEYism j+gZqrH7XcIAdjhPW8dpBJFbNFFdEM3bcfTQ2R8WEFazdrHv/vfUqNnsDb7h4iFH6WNq8zSNW9F6 BUY89CqlMUKbovR2oJ1hxz173Pp03EtHrdwwM5ahsnk= ) ; Key ID = 33234 lbl.gov. 43200 IN RRSIG ( DNSKEY 7 2 43200 20240611022541 20240512020618 33234 lbl.gov. M0EGVO7QYXhNVMyr/YfzPDttMp834RUsNESa/0TFIRbGRJ+Ys7GHtZn4RcYdAMUxv0tLseZByyFt e6tumuZ+Gxit9Fn0IJ0by93y+PYX0/xYfcR6wQZY96w/ywelfkj7cVOwSCLZ1VDrSdrMR8ysi/JI l2sEYYVAXmTFF4jUyhojAqM0fm1GzcpHroKnN5n/7BnXQDldphJQ/gf+BvExdQyVvWwFXPqfcxyT 2hMMgERf5LMAC3lc5mHLPzLnrR7hBvlRINWqVJY3pOZ/hC1CiZKX7lI2kJ+N/6qRgRmOMtND2jn/ Tt8nT7zlPUv6pIdL1ykpjrf+hkIrnl6uKhzcTg== ) lbl.gov. 43200 IN RRSIG ( DNSKEY 7 2 43200 20240611022541 20240512020618 48167 lbl.gov. SpjlF3mkpvp8fz7GxzeGW9AShO3t4+tm/vwgpoAKc9xZdmuWZUjiB5XbNdT+pyarBGBkBaXV7wWa AhCW3keacbLSwplGw6hIi9W3LXr9y71qgUbFSXi+nQFx+TusBR+3NYPezrYAcSyY/ZCoKOKh8SBN A9VYZ+fSZADpkqd53ds= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for lbl.gov
	`lbl.gov. 43200 IN DNSKEY ( 256 3 7 AwEAAbhWh2OUDwhfVPSSpdq3CRvEraL4eusS5J/ImHQbI+Y80n01EKd4KGgAHDTSsRXnTh7B11xV OdVzeBtWuFeD2HxMiQeR25NAS7kI1Rc6LPZ+uZK9XD6/uCAR6deaPRxvpxgdKhCLzK60Lt0MJP2/ C0UjtQ7TgoiTAdDzMOnPgw0R ) ; Key ID = 48167`
	`lbl.gov. 43200 IN DNSKEY ( 257 3 7 AwEAAaBBmV+ocPIDzpPEVekeIGczIs1nqx4ljfK95tZ2tUcudLzT7Ha5wUQhixsu+k49BQwRMuN+ f/F5m3dUHKDHuD/ZE+yXx7Kn5c0weN/BHHWlX1QRiHBXfCdNjyfg+I28QBe1MH/JVp4cEFSuRwFD jJNpv4vB10bIj+KIOFQpZ83GNgUYjDBcMuEw2w7AvS8vNBOrHpytgyS07IFLMvGuX2UUI1bEYism j+gZqrH7XcIAdjhPW8dpBJFbNFFdEM3bcfTQ2R8WEFazdrHv/vfUqNnsDb7h4iFH6WNq8zSNW9F6 BUY89CqlMUKbovR2oJ1hxz173Pp03EtHrdwwM5ahsnk= ) ; Key ID = 33234`
	DNSKEY=33234/SEP is now in the chain-of-trust
	DS=33234/SHA-1 verifies DNSKEY=33234/SEP
	DS=33234/SHA-256 verifies DNSKEY=33234/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`lbl.gov. 43200 IN RRSIG ( DNSKEY 7 2 43200 20240611022541 20240512020618 33234 lbl.gov. M0EGVO7QYXhNVMyr/YfzPDttMp834RUsNESa/0TFIRbGRJ+Ys7GHtZn4RcYdAMUxv0tLseZByyFt e6tumuZ+Gxit9Fn0IJ0by93y+PYX0/xYfcR6wQZY96w/ywelfkj7cVOwSCLZ1VDrSdrMR8ysi/JI l2sEYYVAXmTFF4jUyhojAqM0fm1GzcpHroKnN5n/7BnXQDldphJQ/gf+BvExdQyVvWwFXPqfcxyT 2hMMgERf5LMAC3lc5mHLPzLnrR7hBvlRINWqVJY3pOZ/hC1CiZKX7lI2kJ+N/6qRgRmOMtND2jn/ Tt8nT7zlPUv6pIdL1ykpjrf+hkIrnl6uKhzcTg== )`
	`lbl.gov. 43200 IN RRSIG ( DNSKEY 7 2 43200 20240611022541 20240512020618 48167 lbl.gov. SpjlF3mkpvp8fz7GxzeGW9AShO3t4+tm/vwgpoAKc9xZdmuWZUjiB5XbNdT+pyarBGBkBaXV7wWa AhCW3keacbLSwplGw6hIi9W3LXr9y71qgUbFSXi+nQFx+TusBR+3NYPezrYAcSyY/ZCoKOKh8SBN A9VYZ+fSZADpkqd53ds= )`
	RRSIG=33234 and DNSKEY=33234/SEP verifies the DNSKEY RRset
	RRSIG=48167 and DNSKEY=48167 verifies the DNSKEY RRset
	DNSKEY=48167 is now in the chain-of-trust
	Query to adns2.es.net for lbl.gov/A
	Received 829 bytes from 192.188.22.52
	;; Response received from [192.188.22.52] 829 octets ;; HEADER SECTION ;; id = 30085 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lbl.gov. IN A ;; ANSWER SECTION (2 records) lbl.gov. 1800 IN A 131.243.228.58 lbl.gov. 1800 IN RRSIG ( A 7 2 1800 20240611165040 20240512160009 48167 lbl.gov. d9SKBJhF6dJq892WH7NoxMQJSpIKD6gFoz7fFPt9wimztRGZUUsuxOfj3zN1PXikdKEn3/nuC0bI MvBNLCxt/ZW2MHmdPdzNWJCGyIZNVXpklejuEuABzLCqntOXVoQSRj4ZrY16hSvZazYLwymKnMiz UV3JNou8Uvf3eVLvObk= ) ;; AUTHORITY SECTION (4 records) lbl.gov. 43200 IN NS adns1.es.net. lbl.gov. 43200 IN NS adns2.es.net. lbl.gov. 43200 IN NS adns.lbl.gov. lbl.gov. 43200 IN RRSIG ( NS 7 2 43200 20240611165040 20240512160009 48167 lbl.gov. Ct5+FdzWOfkx8fKvHMOlj2TGW3hAeV+TSZmX0t4EbZXyYvhODMWeLJYY2J3k3PGWYXKiTIIbDaZV jBpouKHGLjzMXiegvs6Xk6hwAtV96X0l/Z2Oyh0jB2GX/rg3Re+gzSEaHVaSOIwLnCAsMqv7Mihg RIDibaflXPpkW5ZFUUY= ) ;; ADDITIONAL SECTION (5 records) adns.lbl.gov. 43200 IN A 131.243.5.53 adns.lbl.gov. 43200 IN AAAA 2620:83:8000:a:53::a adns.lbl.gov. 43200 IN RRSIG ( A 7 3 43200 20240611034240 20240512030921 48167 lbl.gov. kerlyMrK6Xy2wGbMqCQypOSo07tvfk/cKWwaNqNu6SqZyqFSlLPhwkLa7E7zDSlsrpdnUtUPx0IE h7i/MEiBK3XvVjh/2XhnOYI9rYEYYf+02WyLreGKRGq6MAgFhhr9MuaLVVVemj9NoNQNvFMkJoTg ZLwwuipkx7Pbvx7+UhY= ) adns.lbl.gov. 43200 IN RRSIG ( AAAA 7 3 43200 20240611104346 20240512101520 48167 lbl.gov. jAsX6lgHxW7Fgrs+JbDsj/Bt3bMTu+gOaQCuB9n6E3MnhgZqt1FVrsUPyQuI389Byn6hKbmdCYrs iXaWt2U7VkgZjbvBYF8Nla8kmpGdek/oFmp/8CNL1UntivT9Wgwy9Ehh6kySUYDETKrXuq+turVY R8yA2IyWb0Zjh68wals= ) ;; { "EDNS-VERSION": 0 }
	adns2.es.net is authoritative for lbl.gov
	Found RRSIG signed by lbl.gov zone
	Query to adns.lbl.gov for lbl.gov/SOA
	Received 864 bytes from 131.243.5.53
	;; Response received from [131.243.5.53] 864 octets ;; HEADER SECTION ;; id = 65256 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lbl.gov. IN SOA ;; ANSWER SECTION (2 records) lbl.gov. 43200 IN SOA ( nsx.lbl.gov. hostmaster.nsx.lbl.gov. 2022296553 ;serial 14400 ;refresh 1800 ;retry 2419200 ;expire 300 ;minimum ) lbl.gov. 43200 IN RRSIG ( SOA 7 2 43200 20240612020019 20240513010019 48167 lbl.gov. oFDkdxcmNMk5abW+gSIanTLnQZjZw3M/jdKLTYD7zXvTnlWj88IkOIVF1b8p0VWOVpqbPp+YRFN4 fCpEitpzyF8swopJK4e9R9lCT4Hf5WZ9c2c5+43pcHYv9g0hoJGnfrbanKtCGQrin1ddbBRynid/ lWK9XSRUpNPgzSgimu8= ) ;; AUTHORITY SECTION (4 records) lbl.gov. 43200 IN NS adns1.es.net. lbl.gov. 43200 IN NS adns.lbl.gov. lbl.gov. 43200 IN NS adns2.es.net. lbl.gov. 43200 IN RRSIG ( NS 7 2 43200 20240611165040 20240512160009 48167 lbl.gov. Ct5+FdzWOfkx8fKvHMOlj2TGW3hAeV+TSZmX0t4EbZXyYvhODMWeLJYY2J3k3PGWYXKiTIIbDaZV jBpouKHGLjzMXiegvs6Xk6hwAtV96X0l/Z2Oyh0jB2GX/rg3Re+gzSEaHVaSOIwLnCAsMqv7Mihg RIDibaflXPpkW5ZFUUY= ) ;; ADDITIONAL SECTION (5 records) adns.lbl.gov. 43200 IN A 131.243.5.53 adns.lbl.gov. 43200 IN AAAA 2620:83:8000:a:53::a adns.lbl.gov. 43200 IN RRSIG ( A 7 3 43200 20240611034240 20240512030921 48167 lbl.gov. kerlyMrK6Xy2wGbMqCQypOSo07tvfk/cKWwaNqNu6SqZyqFSlLPhwkLa7E7zDSlsrpdnUtUPx0IE h7i/MEiBK3XvVjh/2XhnOYI9rYEYYf+02WyLreGKRGq6MAgFhhr9MuaLVVVemj9NoNQNvFMkJoTg ZLwwuipkx7Pbvx7+UhY= ) adns.lbl.gov. 43200 IN RRSIG ( AAAA 7 3 43200 20240611104346 20240512101520 48167 lbl.gov. jAsX6lgHxW7Fgrs+JbDsj/Bt3bMTu+gOaQCuB9n6E3MnhgZqt1FVrsUPyQuI389Byn6hKbmdCYrs iXaWt2U7VkgZjbvBYF8Nla8kmpGdek/oFmp/8CNL1UntivT9Wgwy9Ehh6kySUYDETKrXuq+turVY R8yA2IyWb0Zjh68wals= ) ;; { "EDNS-VERSION": 0 }
	Query to adns1.es.net for lbl.gov/SOA
	Received 254 bytes from 192.188.22.22
	;; Response received from [192.188.22.22] 254 octets ;; HEADER SECTION ;; id = 29152 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lbl.gov. IN SOA ;; ANSWER SECTION (2 records) lbl.gov. 43200 IN SOA ( nsx.lbl.gov. hostmaster.nsx.lbl.gov. 2022296553 ;serial 14400 ;refresh 1800 ;retry 2419200 ;expire 300 ;minimum ) lbl.gov. 43200 IN RRSIG ( SOA 7 2 43200 20240612020019 20240513010019 48167 lbl.gov. oFDkdxcmNMk5abW+gSIanTLnQZjZw3M/jdKLTYD7zXvTnlWj88IkOIVF1b8p0VWOVpqbPp+YRFN4 fCpEitpzyF8swopJK4e9R9lCT4Hf5WZ9c2c5+43pcHYv9g0hoJGnfrbanKtCGQrin1ddbBRynid/ lWK9XSRUpNPgzSgimu8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to adns2.es.net for lbl.gov/A
	Received 829 bytes from 192.188.22.52
	;; Response received from [192.188.22.52] 829 octets ;; HEADER SECTION ;; id = 62965 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lbl.gov. IN A ;; ANSWER SECTION (2 records) lbl.gov. 1800 IN A 131.243.228.58 lbl.gov. 1800 IN RRSIG ( A 7 2 1800 20240611165040 20240512160009 48167 lbl.gov. d9SKBJhF6dJq892WH7NoxMQJSpIKD6gFoz7fFPt9wimztRGZUUsuxOfj3zN1PXikdKEn3/nuC0bI MvBNLCxt/ZW2MHmdPdzNWJCGyIZNVXpklejuEuABzLCqntOXVoQSRj4ZrY16hSvZazYLwymKnMiz UV3JNou8Uvf3eVLvObk= ) ;; AUTHORITY SECTION (4 records) lbl.gov. 43200 IN NS adns.lbl.gov. lbl.gov. 43200 IN NS adns1.es.net. lbl.gov. 43200 IN NS adns2.es.net. lbl.gov. 43200 IN RRSIG ( NS 7 2 43200 20240611165040 20240512160009 48167 lbl.gov. Ct5+FdzWOfkx8fKvHMOlj2TGW3hAeV+TSZmX0t4EbZXyYvhODMWeLJYY2J3k3PGWYXKiTIIbDaZV jBpouKHGLjzMXiegvs6Xk6hwAtV96X0l/Z2Oyh0jB2GX/rg3Re+gzSEaHVaSOIwLnCAsMqv7Mihg RIDibaflXPpkW5ZFUUY= ) ;; ADDITIONAL SECTION (5 records) adns.lbl.gov. 43200 IN A 131.243.5.53 adns.lbl.gov. 43200 IN AAAA 2620:83:8000:a:53::a adns.lbl.gov. 43200 IN RRSIG ( A 7 3 43200 20240611034240 20240512030921 48167 lbl.gov. kerlyMrK6Xy2wGbMqCQypOSo07tvfk/cKWwaNqNu6SqZyqFSlLPhwkLa7E7zDSlsrpdnUtUPx0IE h7i/MEiBK3XvVjh/2XhnOYI9rYEYYf+02WyLreGKRGq6MAgFhhr9MuaLVVVemj9NoNQNvFMkJoTg ZLwwuipkx7Pbvx7+UhY= ) adns.lbl.gov. 43200 IN RRSIG ( AAAA 7 3 43200 20240611104346 20240512101520 48167 lbl.gov. jAsX6lgHxW7Fgrs+JbDsj/Bt3bMTu+gOaQCuB9n6E3MnhgZqt1FVrsUPyQuI389Byn6hKbmdCYrs iXaWt2U7VkgZjbvBYF8Nla8kmpGdek/oFmp/8CNL1UntivT9Wgwy9Ehh6kySUYDETKrXuq+turVY R8yA2IyWb0Zjh68wals= ) ;; { "EDNS-VERSION": 0 }
	lbl.gov A RR has value 131.243.228.58
	Found 1 RRSIGs over A RRset
	`lbl.gov. 1800 IN RRSIG ( A 7 2 1800 20240611165040 20240512160009 48167 lbl.gov. d9SKBJhF6dJq892WH7NoxMQJSpIKD6gFoz7fFPt9wimztRGZUUsuxOfj3zN1PXikdKEn3/nuC0bI MvBNLCxt/ZW2MHmdPdzNWJCGyIZNVXpklejuEuABzLCqntOXVoQSRj4ZrY16hSvZazYLwymKnMiz UV3JNou8Uvf3eVLvObk= )`
	RRSIG=48167 and DNSKEY=48167 verifies the A RRset

lbl.gov

	Query to adns.lbl.gov for lbl.gov/A
	Received 829 bytes from 131.243.5.53
	;; Response received from [131.243.5.53] 829 octets ;; HEADER SECTION ;; id = 24585 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lbl.gov. IN A ;; ANSWER SECTION (2 records) lbl.gov. 1800 IN A 131.243.228.58 lbl.gov. 1800 IN RRSIG ( A 7 2 1800 20240611165040 20240512160009 48167 lbl.gov. d9SKBJhF6dJq892WH7NoxMQJSpIKD6gFoz7fFPt9wimztRGZUUsuxOfj3zN1PXikdKEn3/nuC0bI MvBNLCxt/ZW2MHmdPdzNWJCGyIZNVXpklejuEuABzLCqntOXVoQSRj4ZrY16hSvZazYLwymKnMiz UV3JNou8Uvf3eVLvObk= ) ;; AUTHORITY SECTION (4 records) lbl.gov. 43200 IN NS adns2.es.net. lbl.gov. 43200 IN NS adns.lbl.gov. lbl.gov. 43200 IN NS adns1.es.net. lbl.gov. 43200 IN RRSIG ( NS 7 2 43200 20240611165040 20240512160009 48167 lbl.gov. Ct5+FdzWOfkx8fKvHMOlj2TGW3hAeV+TSZmX0t4EbZXyYvhODMWeLJYY2J3k3PGWYXKiTIIbDaZV jBpouKHGLjzMXiegvs6Xk6hwAtV96X0l/Z2Oyh0jB2GX/rg3Re+gzSEaHVaSOIwLnCAsMqv7Mihg RIDibaflXPpkW5ZFUUY= ) ;; ADDITIONAL SECTION (5 records) adns.lbl.gov. 43200 IN A 131.243.5.53 adns.lbl.gov. 43200 IN AAAA 2620:83:8000:a:53::a adns.lbl.gov. 43200 IN RRSIG ( A 7 3 43200 20240611034240 20240512030921 48167 lbl.gov. kerlyMrK6Xy2wGbMqCQypOSo07tvfk/cKWwaNqNu6SqZyqFSlLPhwkLa7E7zDSlsrpdnUtUPx0IE h7i/MEiBK3XvVjh/2XhnOYI9rYEYYf+02WyLreGKRGq6MAgFhhr9MuaLVVVemj9NoNQNvFMkJoTg ZLwwuipkx7Pbvx7+UhY= ) adns.lbl.gov. 43200 IN RRSIG ( AAAA 7 3 43200 20240611104346 20240512101520 48167 lbl.gov. jAsX6lgHxW7Fgrs+JbDsj/Bt3bMTu+gOaQCuB9n6E3MnhgZqt1FVrsUPyQuI389Byn6hKbmdCYrs iXaWt2U7VkgZjbvBYF8Nla8kmpGdek/oFmp/8CNL1UntivT9Wgwy9Ehh6kySUYDETKrXuq+turVY R8yA2IyWb0Zjh68wals= ) ;; { "EDNS-VERSION": 0 }
	adns.lbl.gov is authoritative for lbl.gov
	Found RRSIG signed by lbl.gov zone
	Query to adns.lbl.gov for lbl.gov/A
	Received 829 bytes from 131.243.5.53
	;; Response received from [131.243.5.53] 829 octets ;; HEADER SECTION ;; id = 228 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lbl.gov. IN A ;; ANSWER SECTION (2 records) lbl.gov. 1800 IN A 131.243.228.58 lbl.gov. 1800 IN RRSIG ( A 7 2 1800 20240611165040 20240512160009 48167 lbl.gov. d9SKBJhF6dJq892WH7NoxMQJSpIKD6gFoz7fFPt9wimztRGZUUsuxOfj3zN1PXikdKEn3/nuC0bI MvBNLCxt/ZW2MHmdPdzNWJCGyIZNVXpklejuEuABzLCqntOXVoQSRj4ZrY16hSvZazYLwymKnMiz UV3JNou8Uvf3eVLvObk= ) ;; AUTHORITY SECTION (4 records) lbl.gov. 43200 IN NS adns.lbl.gov. lbl.gov. 43200 IN NS adns1.es.net. lbl.gov. 43200 IN NS adns2.es.net. lbl.gov. 43200 IN RRSIG ( NS 7 2 43200 20240611165040 20240512160009 48167 lbl.gov. Ct5+FdzWOfkx8fKvHMOlj2TGW3hAeV+TSZmX0t4EbZXyYvhODMWeLJYY2J3k3PGWYXKiTIIbDaZV jBpouKHGLjzMXiegvs6Xk6hwAtV96X0l/Z2Oyh0jB2GX/rg3Re+gzSEaHVaSOIwLnCAsMqv7Mihg RIDibaflXPpkW5ZFUUY= ) ;; ADDITIONAL SECTION (5 records) adns.lbl.gov. 43200 IN A 131.243.5.53 adns.lbl.gov. 43200 IN AAAA 2620:83:8000:a:53::a adns.lbl.gov. 43200 IN RRSIG ( A 7 3 43200 20240611034240 20240512030921 48167 lbl.gov. kerlyMrK6Xy2wGbMqCQypOSo07tvfk/cKWwaNqNu6SqZyqFSlLPhwkLa7E7zDSlsrpdnUtUPx0IE h7i/MEiBK3XvVjh/2XhnOYI9rYEYYf+02WyLreGKRGq6MAgFhhr9MuaLVVVemj9NoNQNvFMkJoTg ZLwwuipkx7Pbvx7+UhY= ) adns.lbl.gov. 43200 IN RRSIG ( AAAA 7 3 43200 20240611104346 20240512101520 48167 lbl.gov. jAsX6lgHxW7Fgrs+JbDsj/Bt3bMTu+gOaQCuB9n6E3MnhgZqt1FVrsUPyQuI389Byn6hKbmdCYrs iXaWt2U7VkgZjbvBYF8Nla8kmpGdek/oFmp/8CNL1UntivT9Wgwy9Ehh6kySUYDETKrXuq+turVY R8yA2IyWb0Zjh68wals= ) ;; { "EDNS-VERSION": 0 }
	lbl.gov A RR has value 131.243.228.58
	Found 1 RRSIGs over A RRset
	`lbl.gov. 1800 IN RRSIG ( A 7 2 1800 20240611165040 20240512160009 48167 lbl.gov. d9SKBJhF6dJq892WH7NoxMQJSpIKD6gFoz7fFPt9wimztRGZUUsuxOfj3zN1PXikdKEn3/nuC0bI MvBNLCxt/ZW2MHmdPdzNWJCGyIZNVXpklejuEuABzLCqntOXVoQSRj4ZrY16hSvZazYLwymKnMiz UV3JNou8Uvf3eVLvObk= )`
	RRSIG=48167 and DNSKEY=48167 verifies the A RRset

lbl.gov

	Query to adns1.es.net for lbl.gov/A
	Received 219 bytes from 192.188.22.22
	;; Response received from [192.188.22.22] 219 octets ;; HEADER SECTION ;; id = 9117 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lbl.gov. IN A ;; ANSWER SECTION (2 records) lbl.gov. 1800 IN A 131.243.228.58 lbl.gov. 1800 IN RRSIG ( A 7 2 1800 20240611165040 20240512160009 48167 lbl.gov. d9SKBJhF6dJq892WH7NoxMQJSpIKD6gFoz7fFPt9wimztRGZUUsuxOfj3zN1PXikdKEn3/nuC0bI MvBNLCxt/ZW2MHmdPdzNWJCGyIZNVXpklejuEuABzLCqntOXVoQSRj4ZrY16hSvZazYLwymKnMiz UV3JNou8Uvf3eVLvObk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	adns1.es.net is authoritative for lbl.gov
	Found RRSIG signed by lbl.gov zone
	Query to adns1.es.net for lbl.gov/A
	Received 219 bytes from 192.188.22.22
	;; Response received from [192.188.22.22] 219 octets ;; HEADER SECTION ;; id = 60836 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lbl.gov. IN A ;; ANSWER SECTION (2 records) lbl.gov. 1800 IN A 131.243.228.58 lbl.gov. 1800 IN RRSIG ( A 7 2 1800 20240611165040 20240512160009 48167 lbl.gov. d9SKBJhF6dJq892WH7NoxMQJSpIKD6gFoz7fFPt9wimztRGZUUsuxOfj3zN1PXikdKEn3/nuC0bI MvBNLCxt/ZW2MHmdPdzNWJCGyIZNVXpklejuEuABzLCqntOXVoQSRj4ZrY16hSvZazYLwymKnMiz UV3JNou8Uvf3eVLvObk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	lbl.gov A RR has value 131.243.228.58
	Found 1 RRSIGs over A RRset
	`lbl.gov. 1800 IN RRSIG ( A 7 2 1800 20240611165040 20240512160009 48167 lbl.gov. d9SKBJhF6dJq892WH7NoxMQJSpIKD6gFoz7fFPt9wimztRGZUUsuxOfj3zN1PXikdKEn3/nuC0bI MvBNLCxt/ZW2MHmdPdzNWJCGyIZNVXpklejuEuABzLCqntOXVoQSRj4ZrY16hSvZazYLwymKnMiz UV3JNou8Uvf3eVLvObk= )`
	RRSIG=48167 and DNSKEY=48167 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test lbl.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: