DNSSEC Debugger - pppl.gov

Domain Name:

Time: 2024-05-21 12:42:12 UTC

Analyzing DNSSEC problems for pppl.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 864 octets ;; HEADER SECTION ;; id = 34535 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240611000000 20240521000000 20326 . W/Hsuxwei6HE8IzojCIwmIP/lrqd6TZmm1cv7VEm7bjqgUyc5FBDUSNxWfIQiwLTn+Xqk8ZVG/68 0XZptzkT2ZxyXwK7AGFAvGrKiFBertupXxU7I5uYs27GPOnnKwlA5ZrUJW0AK66XIKMb+qVMHa7C 2agO1VOsAUSDeZtR8XJmJbzIMZN2GBlSowjWe90CX0jU+ncr58MOYEiI6N2JsWJi4gU546OrmhJd hEnPGDX/gPF5OjrgDZER2+PyjSEGdxdP0nbqlBcC39aLm3lfHNNJDzC+dxgL04qt1RiTTPhDbuMp hE2l6WxjC9N8wWzM+h0IKgDMc2oVSc4B+U5Kjw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240611000000 20240521000000 20326 . W/Hsuxwei6HE8IzojCIwmIP/lrqd6TZmm1cv7VEm7bjqgUyc5FBDUSNxWfIQiwLTn+Xqk8ZVG/68 0XZptzkT2ZxyXwK7AGFAvGrKiFBertupXxU7I5uYs27GPOnnKwlA5ZrUJW0AK66XIKMb+qVMHa7C 2agO1VOsAUSDeZtR8XJmJbzIMZN2GBlSowjWe90CX0jU+ncr58MOYEiI6N2JsWJi4gU546OrmhJd hEnPGDX/gPF5OjrgDZER2+PyjSEGdxdP0nbqlBcC39aLm3lfHNNJDzC+dxgL04qt1RiTTPhDbuMp hE2l6WxjC9N8wWzM+h0IKgDMc2oVSc4B+U5Kjw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to c.root-servers.net for pppl.gov/A
	Received 618 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 618 octets ;; HEADER SECTION ;; id = 3976 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pppl.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . HkjAMJYmN4oPjLcWSF0xFsqkEolggIPopPTUc1EsM6JuSztvW49iRZD29pR3bC4cTvX2x0SH3Oxx Kze+Dv4C4ufyFrMwkROa9GNenMlqyogXoILfff4sG1rs5ehbD4KtwjQtoUXZXnJ1obV+mw8BJNSy KiIaLxI/rqtDN/3Z4hxTtDVMUUZqvOW+cOBu7lqrOS6UfdOVp414pqeseJs9w5kah05Lxr38vVGB 2KuMbAXQ9naJy9n32laXvSXak2Jq4hDvZkI9Af0+AVgYiqoJl3aAzRNixWcTbrN9I/v5oAZaM8JO 07nISxKw7Qfq7cxuSa8u4N3SyX8Jo6Nz4/oUWQ== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Query to l.root-servers.net for gov/DNSKEY
	Received 610 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 610 octets ;; HEADER SECTION ;; id = 5602 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240603050000 20240521040000 5613 . dYJXY4aL39kLPN/9bJeMtSxboBM+0iOqgHcp3vDaIxbQzWzar3nRnr/BWYmoT4s0RlIJIQBSlMNO xNfWLJvtxhrNh9ZeJd6ukf1quT81r5P1OSOO9G0I12pfg2iXcrE7fgdbxWD4SVu3LXBPLI5Rl8MY TaCrOWFg1ZmvcsmzoEiJUxxTkIL2Qz/sWEQjEB7rTTXGXBLCme4sPNLry4YqQfvOvL6S0fZ4ef1J CpNuZj7PYQTaBo9BGdJhTtCG6HpQQPlWwNKK6618H2bhvzQVTE02IqMdz2+uOIUxcShtS1uAw3R2 snblBafWSM5vzU60gKOD0xxLVqNCuGgQ+/xM2Q== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to c.root-servers.net for gov/DS
	Received 367 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 367 octets ;; HEADER SECTION ;; id = 33070 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . HkjAMJYmN4oPjLcWSF0xFsqkEolggIPopPTUc1EsM6JuSztvW49iRZD29pR3bC4cTvX2x0SH3Oxx Kze+Dv4C4ufyFrMwkROa9GNenMlqyogXoILfff4sG1rs5ehbD4KtwjQtoUXZXnJ1obV+mw8BJNSy KiIaLxI/rqtDN/3Z4hxTtDVMUUZqvOW+cOBu7lqrOS6UfdOVp414pqeseJs9w5kah05Lxr38vVGB 2KuMbAXQ9naJy9n32laXvSXak2Jq4hDvZkI9Af0+AVgYiqoJl3aAzRNixWcTbrN9I/v5oAZaM8JO 07nISxKw7Qfq7cxuSa8u4N3SyX8Jo6Nz4/oUWQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=64280/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . HkjAMJYmN4oPjLcWSF0xFsqkEolggIPopPTUc1EsM6JuSztvW49iRZD29pR3bC4cTvX2x0SH3Oxx Kze+Dv4C4ufyFrMwkROa9GNenMlqyogXoILfff4sG1rs5ehbD4KtwjQtoUXZXnJ1obV+mw8BJNSy KiIaLxI/rqtDN/3Z4hxTtDVMUUZqvOW+cOBu7lqrOS6UfdOVp414pqeseJs9w5kah05Lxr38vVGB 2KuMbAXQ9naJy9n32laXvSXak2Jq4hDvZkI9Af0+AVgYiqoJl3aAzRNixWcTbrN9I/v5oAZaM8JO 07nISxKw7Qfq7cxuSa8u4N3SyX8Jo6Nz4/oUWQ== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=64280/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 )`
	Query to b.ns.gov for gov/DNSKEY
	Received 779 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 779 octets ;; HEADER SECTION ;; id = 14429 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 8 AwEAAZp0vliR0TOBCJXmdagY36BI5ZveSPE3OSrcXKDs8IZa86x1+gwbheJcfLB6Fw6cWYUXaNgA mFcbxqIqWc5VJSyPS9yCPdEOLEIiegwCmcWnNsEyc0snKTyypXnvJ5JNhoznpFILDqlksAqP/aiq 1/l0w8TMkRbRrViLrJ1ayaScZ0nn/ge5wNpX09T9RI+gF1OIMJDdgH1vi0a+t6smSy4pUrerFTsu y8JAL+PP85MZiOssT9yoERfWSjFKde6PrQX5vj090AxT+hztb+q2EFXnF1a2L73/3UarB19k5NR3 MT1uM7ddag64Q0lg3aTy3MglDCzP7/StUxdeyL5qIX8= ) ; Key ID = 64280 gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcbYvlY667qXEzHsDTkft9cgKy5F0S9CAP+aFK9+sJumGqvpMaOyOzsilJ+OSVFhopJ1aRFp CUpLVIcVJ3E3YATGpzB45M0D5c4oJ0RjEIUakBwcPghmSW8K1GPqj/eUs4fbVPytXwtwvUll9Lxf gUvi5DA6xD6d2ckwDyRxfcMhXYydr2hIsgfrBLmRDMi4BkxMvA23eShPd/tPvnR0gJk= ) ; Key ID = 10104 gov. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240719084940 20240519084940 64280 gov. Ze2lrjOFpX0Jf17NDWolzeRxyJQlyhuqTIBrZ0JHj8wWMOLho5MgqXKL9mtD5buxEZWUZJmvvzyH EHii547xpG/Q1GXv6XSwzKqFvuy1GpfN0044rfqSCjCEvNv2mT/tllzeTIEXLF8Kkccot4Ruc3Ii shNMdGV/ZqHIaprqP5a1y9xwDfRswNoJwAiTywjBv3uV8fMJaHm3RVeV9Y5JcYuHbUc4OdHDLjUs nSyRyi5dt6zfoEB7t2OhsTV5KD12tMgGa0RsPlux9hRUdKkuU0e+5+0uXoMZlcP4EBDeJZlbCZT0 ZCkIpcmTzJWH6QDRb9ETZssXk/a2TWAz9gSqWw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 8 AwEAAZp0vliR0TOBCJXmdagY36BI5ZveSPE3OSrcXKDs8IZa86x1+gwbheJcfLB6Fw6cWYUXaNgA mFcbxqIqWc5VJSyPS9yCPdEOLEIiegwCmcWnNsEyc0snKTyypXnvJ5JNhoznpFILDqlksAqP/aiq 1/l0w8TMkRbRrViLrJ1ayaScZ0nn/ge5wNpX09T9RI+gF1OIMJDdgH1vi0a+t6smSy4pUrerFTsu y8JAL+PP85MZiOssT9yoERfWSjFKde6PrQX5vj090AxT+hztb+q2EFXnF1a2L73/3UarB19k5NR3 MT1uM7ddag64Q0lg3aTy3MglDCzP7/StUxdeyL5qIX8= ) ; Key ID = 64280`
	`gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcbYvlY667qXEzHsDTkft9cgKy5F0S9CAP+aFK9+sJumGqvpMaOyOzsilJ+OSVFhopJ1aRFp CUpLVIcVJ3E3YATGpzB45M0D5c4oJ0RjEIUakBwcPghmSW8K1GPqj/eUs4fbVPytXwtwvUll9Lxf gUvi5DA6xD6d2ckwDyRxfcMhXYydr2hIsgfrBLmRDMi4BkxMvA23eShPd/tPvnR0gJk= ) ; Key ID = 10104`
	DNSKEY=64280/SEP is now in the chain-of-trust
	DS=64280/SHA-256 verifies DNSKEY=64280/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240719084940 20240519084940 64280 gov. Ze2lrjOFpX0Jf17NDWolzeRxyJQlyhuqTIBrZ0JHj8wWMOLho5MgqXKL9mtD5buxEZWUZJmvvzyH EHii547xpG/Q1GXv6XSwzKqFvuy1GpfN0044rfqSCjCEvNv2mT/tllzeTIEXLF8Kkccot4Ruc3Ii shNMdGV/ZqHIaprqP5a1y9xwDfRswNoJwAiTywjBv3uV8fMJaHm3RVeV9Y5JcYuHbUc4OdHDLjUs nSyRyi5dt6zfoEB7t2OhsTV5KD12tMgGa0RsPlux9hRUdKkuU0e+5+0uXoMZlcP4EBDeJZlbCZT0 ZCkIpcmTzJWH6QDRb9ETZssXk/a2TWAz9gSqWw== )`
	RRSIG=64280 and DNSKEY=64280/SEP verifies the DNSKEY RRset
	DNSKEY=10104 is now in the chain-of-trust
	Query to c.ns.gov for pppl.gov/A
	Received 564 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 564 octets ;; HEADER SECTION ;; id = 13177 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 2 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pppl.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) pppl.gov. 10800 IN NS ns-aoa.es.net. pppl.gov. 10800 IN NS ns-lvk.es.net. pppl.gov. 10800 IN NS ns1.es.net. pppl.gov. 10800 IN NS xdns.pppl.gov. pppl.gov. 3600 IN DS 27921 7 1 1806456844b5b2d3aa6dc45afceb8106746b111b pppl.gov. 3600 IN DS ( 27921 7 2 fbfac75327f933782dfa397ec639faf79c0608b8437199a5c31dbb926d207045 ) pppl.gov. 3600 IN DS ( 56010 7 2 f5bf1c98dff7d8494e5b4961cdd055c1bc7bece2cac4230d13195780310a9992 ) pppl.gov. 3600 IN RRSIG ( DS 8 2 3600 20240522134212 20240520114212 10104 gov. l9rp8a7DqBl0f23OUcSRZswlw3WWzcLhwR/C9MF0q8vIlz7Jg+CMhiPzRt4J6JiOEGaxfEOxNaE0 m+WroP3k13grW4rZW7plI1QY/8Gmem2nTpmlyV769KD3BmjICvuK+ZyT2vkaIIMUkPZJvOTv3D9W 4fQnpdpUsOw6m2yFg84p6Io09zaJzMhsdeEdj8K0qCoQvCPmyFPXq4M8BDiJmQ== ) pppl.gov. 3600 IN RRSIG ( DS 13 2 3600 20240522134212 20240520114212 35496 gov. ngc1MOdX40xeMx6duCY80HMnTUMy2tudPy9TrsPVNrtpQ9oeelM1E9bjv6Cl8i6anLElNoacydH1 VLFh6LmtZg== ) ;; ADDITIONAL SECTION (2 records) xdns.pppl.gov. 3600 IN A 192.188.106.232 ;; { "EDNS-VERSION": 0 }
	Query to d.ns.gov for pppl.gov/DNSKEY
	Received 564 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 564 octets ;; HEADER SECTION ;; id = 46927 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 2 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pppl.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) pppl.gov. 10800 IN NS ns-aoa.es.net. pppl.gov. 10800 IN NS ns-lvk.es.net. pppl.gov. 10800 IN NS ns1.es.net. pppl.gov. 10800 IN NS xdns.pppl.gov. pppl.gov. 3600 IN DS 27921 7 1 1806456844b5b2d3aa6dc45afceb8106746b111b pppl.gov. 3600 IN DS ( 27921 7 2 fbfac75327f933782dfa397ec639faf79c0608b8437199a5c31dbb926d207045 ) pppl.gov. 3600 IN DS ( 56010 7 2 f5bf1c98dff7d8494e5b4961cdd055c1bc7bece2cac4230d13195780310a9992 ) pppl.gov. 3600 IN RRSIG ( DS 8 2 3600 20240522134212 20240520114212 10104 gov. l9rp8a7DqBl0f23OUcSRZswlw3WWzcLhwR/C9MF0q8vIlz7Jg+CMhiPzRt4J6JiOEGaxfEOxNaE0 m+WroP3k13grW4rZW7plI1QY/8Gmem2nTpmlyV769KD3BmjICvuK+ZyT2vkaIIMUkPZJvOTv3D9W 4fQnpdpUsOw6m2yFg84p6Io09zaJzMhsdeEdj8K0qCoQvCPmyFPXq4M8BDiJmQ== ) pppl.gov. 3600 IN RRSIG ( DS 13 2 3600 20240522134212 20240520114212 35496 gov. JQ10xJeSFRtzkTztCxJ28+SQ2XtnSSE/nHNf9W9ApZijlEGbfWGo/DLj4BLIFtmRmK/mslLU9OYp vLKs4dxxWQ== ) ;; ADDITIONAL SECTION (2 records) xdns.pppl.gov. 3600 IN A 192.188.106.232 ;; { "EDNS-VERSION": 0 }
	Found child zone pppl.gov

pppl.gov

	Checking DS between gov and pppl.gov
	Query to b.ns.gov for pppl.gov/DS
	Received 463 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 463 octets ;; HEADER SECTION ;; id = 49219 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pppl.gov. IN DS ;; ANSWER SECTION (5 records) pppl.gov. 3600 IN DS 27921 7 1 1806456844b5b2d3aa6dc45afceb8106746b111b pppl.gov. 3600 IN DS ( 27921 7 2 fbfac75327f933782dfa397ec639faf79c0608b8437199a5c31dbb926d207045 ) pppl.gov. 3600 IN DS ( 56010 7 2 f5bf1c98dff7d8494e5b4961cdd055c1bc7bece2cac4230d13195780310a9992 ) pppl.gov. 3600 IN RRSIG ( DS 8 2 3600 20240522134212 20240520114212 10104 gov. l9rp8a7DqBl0f23OUcSRZswlw3WWzcLhwR/C9MF0q8vIlz7Jg+CMhiPzRt4J6JiOEGaxfEOxNaE0 m+WroP3k13grW4rZW7plI1QY/8Gmem2nTpmlyV769KD3BmjICvuK+ZyT2vkaIIMUkPZJvOTv3D9W 4fQnpdpUsOw6m2yFg84p6Io09zaJzMhsdeEdj8K0qCoQvCPmyFPXq4M8BDiJmQ== ) pppl.gov. 3600 IN RRSIG ( DS 13 2 3600 20240522134212 20240520114212 35496 gov. 9iAnOXFICllOwKe1hp4h9/YowK+vjwXzvkve0pCMmGXjcsLStwWXP4VLzzds42PyiLh8GntDkU8a EJLR2RArRg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DS records for pppl.gov in the gov zone
	DS=27921/SHA-1 uses a deprecated digest algorithm
	DS=27921/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=27921/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=56010/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 2 RRSIGs over DS RRset
	`pppl.gov. 3600 IN RRSIG ( DS 8 2 3600 20240522134212 20240520114212 10104 gov. l9rp8a7DqBl0f23OUcSRZswlw3WWzcLhwR/C9MF0q8vIlz7Jg+CMhiPzRt4J6JiOEGaxfEOxNaE0 m+WroP3k13grW4rZW7plI1QY/8Gmem2nTpmlyV769KD3BmjICvuK+ZyT2vkaIIMUkPZJvOTv3D9W 4fQnpdpUsOw6m2yFg84p6Io09zaJzMhsdeEdj8K0qCoQvCPmyFPXq4M8BDiJmQ== )`
	`pppl.gov. 3600 IN RRSIG ( DS 13 2 3600 20240522134212 20240520114212 35496 gov. 9iAnOXFICllOwKe1hp4h9/YowK+vjwXzvkve0pCMmGXjcsLStwWXP4VLzzds42PyiLh8GntDkU8a EJLR2RArRg== )`
	RRSIG=10104 and DNSKEY=10104 verifies the DS RRset
	DS=27921/SHA-1 is now in the chain-of-trust
	DS=56010/SHA-256 is now in the chain-of-trust
	`pppl.gov. 3600 IN DS 27921 7 1 1806456844b5b2d3aa6dc45afceb8106746b111b`
	`pppl.gov. 3600 IN DS ( 27921 7 2 fbfac75327f933782dfa397ec639faf79c0608b8437199a5c31dbb926d207045 )`
	`pppl.gov. 3600 IN DS ( 56010 7 2 f5bf1c98dff7d8494e5b4961cdd055c1bc7bece2cac4230d13195780310a9992 )`
	Query to ns-aoa.es.net for pppl.gov/DNSKEY
	Received 1241 bytes from 198.124.252.22
	;; Response received from [198.124.252.22] 1241 octets ;; HEADER SECTION ;; id = 40820 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pppl.gov. IN DNSKEY ;; ANSWER SECTION (6 records) pppl.gov. 648000 IN DNSKEY ( 256 3 7 AwEAAd/n/vxGYUVSJNkkMVt/UCqF7DyujNZbusxCFOlXfalC2j3k5tJdmCF+We1pCnfL54y5ue89 3OuA8PXX4wTQ+09aR1uDv7zXDkx3F1ce1NZXl14jgBVjfcDx/NOD/ieSwdudHisLFIIEX2VMgYuM RqCFYaZeUhY8isbPRdK9q4rf ) ; Key ID = 63155 pppl.gov. 648000 IN DNSKEY ( 256 3 7 AwEAAe1HLBVzeZ9UEJnjkyxPzQjf664rTtzH9OXrZ+nrZ1y7ife82r0TzEp02E2mprZahrdJQFxO ehNfgjvLWGOOJ1UOBXzweVZWmc/fD+nU7nPbM1zCfsYlgNOvOVpfrVfPyHS4VCJhOvqcXUx3BqZh ARd3p8PnpXrQc560/pPbfzP1 ) ; Key ID = 26429 pppl.gov. 648000 IN DNSKEY ( 257 3 7 AwEAAbbMWHv9dpIZ7LfH7wIq1Y4Bh+lKqCLjAYXcJyCg5STnl8nclTAhkMNT8GlkA4tbwiY8qqOt C22ad54lAvI+QHo1tyR6iWOEvXAHyC2HBbj5EkWFApE2PFBp3lURcTTxc4i5OTB+eSjCAEbZkyoW PZ+7YS2LCHreVIY/aceNar4TVybbFhdgSL/z1JWK/BduBT9kOJb0fTLQIqpUVnuy3r4AhPXBIVVF XkxI06epWjhn81ka3y8JHFRrFZx5D8ZLd+lRiQCoVkKL7PiInGa5IyGDCO6RfHZtI9bNv0vtvL2G aS6BIBjVNU5e77YcUkOEf6xl1nz1ewdhBz8iyTYkhxk= ) ; Key ID = 56010 pppl.gov. 648000 IN RRSIG ( DNSKEY 7 2 648000 20240603072144 20240519065745 26429 pppl.gov. r7xguzsjZ0isemBUfOF6yJu95AspxplPT+/YKLzm2z9mKi9a9bTf4cKNdsBneFS1Ga7Pi1TRw9tP UNhFtPMepy55TO9BWFrmInmdmg1MMgeGdtmcpsxmn4WAI5RNK1cv0TevIFhYGLJXDjwPe2eDZttb n3YItbKo4XKXf4Pi3dg= ) pppl.gov. 648000 IN RRSIG ( DNSKEY 7 2 648000 20240603072144 20240519065745 56010 pppl.gov. f5VAwWm3nvhwwQ44f8GN24pxfe7pQpOEc4gk5bmz0Wdglux9p6mlZBcMsKPCl+T2SgtIJ37bn24N IaMjTY3kC3GQ0M1WGiBXE+v/4FaCdcCj0xyZPK2FhNZvF8C2s56JKVDSB5e27eigOsxS3HXMvqhn NLTp2luUqz9T/d2txhQLLHsRrxzQfVykGhjsXMIEAjTGl2LOiYCpiVgmMoVVhyxtOd5fLYpyIkL4 322Pf5hB29kQ761Fu8qS8kB2fKFkjTrAX1nIq0sbUakUJ90CkhS5mMVny5fteUTyR9B72JuG8nUT cW2RmzbUv7+jXfa9/aqYL+TO3bauduzr+xmqig== ) pppl.gov. 648000 IN RRSIG ( DNSKEY 7 2 648000 20240603072144 20240519065745 63155 pppl.gov. gKTwbvKFmbvvvJjnpyYPKERi4N1t9KKhNcruO66slFrJuU12pv6dC6HltozxVkKZYCeVgPGELZgU UkmUIedrRy+l8ws+V7Zhzr59NGlFfMyykbKONfYeAOwqCNdR4nLZnItoDCWitMDkXwWBDKrV+D6M bIEMnPGYeBKmQksyk+c= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for pppl.gov
	`pppl.gov. 648000 IN DNSKEY ( 256 3 7 AwEAAd/n/vxGYUVSJNkkMVt/UCqF7DyujNZbusxCFOlXfalC2j3k5tJdmCF+We1pCnfL54y5ue89 3OuA8PXX4wTQ+09aR1uDv7zXDkx3F1ce1NZXl14jgBVjfcDx/NOD/ieSwdudHisLFIIEX2VMgYuM RqCFYaZeUhY8isbPRdK9q4rf ) ; Key ID = 63155`
	`pppl.gov. 648000 IN DNSKEY ( 256 3 7 AwEAAe1HLBVzeZ9UEJnjkyxPzQjf664rTtzH9OXrZ+nrZ1y7ife82r0TzEp02E2mprZahrdJQFxO ehNfgjvLWGOOJ1UOBXzweVZWmc/fD+nU7nPbM1zCfsYlgNOvOVpfrVfPyHS4VCJhOvqcXUx3BqZh ARd3p8PnpXrQc560/pPbfzP1 ) ; Key ID = 26429`
	`pppl.gov. 648000 IN DNSKEY ( 257 3 7 AwEAAbbMWHv9dpIZ7LfH7wIq1Y4Bh+lKqCLjAYXcJyCg5STnl8nclTAhkMNT8GlkA4tbwiY8qqOt C22ad54lAvI+QHo1tyR6iWOEvXAHyC2HBbj5EkWFApE2PFBp3lURcTTxc4i5OTB+eSjCAEbZkyoW PZ+7YS2LCHreVIY/aceNar4TVybbFhdgSL/z1JWK/BduBT9kOJb0fTLQIqpUVnuy3r4AhPXBIVVF XkxI06epWjhn81ka3y8JHFRrFZx5D8ZLd+lRiQCoVkKL7PiInGa5IyGDCO6RfHZtI9bNv0vtvL2G aS6BIBjVNU5e77YcUkOEf6xl1nz1ewdhBz8iyTYkhxk= ) ; Key ID = 56010`
	DNSKEY=56010/SEP is now in the chain-of-trust
	DS=56010/SHA-256 verifies DNSKEY=56010/SEP
	DS=27921/SHA-1 is published, but a corresponding DNSKEY is not
	Found 3 RRSIGs over DNSKEY RRset
	`pppl.gov. 648000 IN RRSIG ( DNSKEY 7 2 648000 20240603072144 20240519065745 26429 pppl.gov. r7xguzsjZ0isemBUfOF6yJu95AspxplPT+/YKLzm2z9mKi9a9bTf4cKNdsBneFS1Ga7Pi1TRw9tP UNhFtPMepy55TO9BWFrmInmdmg1MMgeGdtmcpsxmn4WAI5RNK1cv0TevIFhYGLJXDjwPe2eDZttb n3YItbKo4XKXf4Pi3dg= )`
	`pppl.gov. 648000 IN RRSIG ( DNSKEY 7 2 648000 20240603072144 20240519065745 56010 pppl.gov. f5VAwWm3nvhwwQ44f8GN24pxfe7pQpOEc4gk5bmz0Wdglux9p6mlZBcMsKPCl+T2SgtIJ37bn24N IaMjTY3kC3GQ0M1WGiBXE+v/4FaCdcCj0xyZPK2FhNZvF8C2s56JKVDSB5e27eigOsxS3HXMvqhn NLTp2luUqz9T/d2txhQLLHsRrxzQfVykGhjsXMIEAjTGl2LOiYCpiVgmMoVVhyxtOd5fLYpyIkL4 322Pf5hB29kQ761Fu8qS8kB2fKFkjTrAX1nIq0sbUakUJ90CkhS5mMVny5fteUTyR9B72JuG8nUT cW2RmzbUv7+jXfa9/aqYL+TO3bauduzr+xmqig== )`
	`pppl.gov. 648000 IN RRSIG ( DNSKEY 7 2 648000 20240603072144 20240519065745 63155 pppl.gov. gKTwbvKFmbvvvJjnpyYPKERi4N1t9KKhNcruO66slFrJuU12pv6dC6HltozxVkKZYCeVgPGELZgU UkmUIedrRy+l8ws+V7Zhzr59NGlFfMyykbKONfYeAOwqCNdR4nLZnItoDCWitMDkXwWBDKrV+D6M bIEMnPGYeBKmQksyk+c= )`
	RRSIG=26429 and DNSKEY=26429 verifies the DNSKEY RRset
	RRSIG=56010 and DNSKEY=56010/SEP verifies the DNSKEY RRset
	RRSIG=63155 and DNSKEY=63155 verifies the DNSKEY RRset
	DNSKEY=63155 is now in the chain-of-trust
	DNSKEY=26429 is now in the chain-of-trust
	Query to xdns.pppl.gov for pppl.gov/A
	Received 437 bytes from 192.188.106.232
	;; Response received from [192.188.106.232] 437 octets ;; HEADER SECTION ;; id = 22833 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pppl.gov. IN A ;; ANSWER SECTION (6 records) pppl.gov. 21600 IN A 198.125.224.220 pppl.gov. 21600 IN A 198.125.224.191 pppl.gov. 21600 IN A 198.125.224.166 pppl.gov. 21600 IN A 198.125.224.212 pppl.gov. 21600 IN RRSIG ( A 7 2 21600 20240601140252 20240517134502 26429 pppl.gov. mOzwye/JGxgoBKuttIpJK1TVqztKW7ZMGf0Y06CNboICUrYzVPeoiTUuMTp0/MhdKPYj8MfqsgQr vsE3OcpRtXkj/KkXGnYTCmZLeXxm6/AGLFyeI9dgg9TvurDjWghq+e3A6cvYj/E1g4xIix7LcSV6 aBekVq177gtF08OOu18= ) pppl.gov. 21600 IN RRSIG ( A 7 2 21600 20240601140252 20240517134502 63155 pppl.gov. tvuGAx0wvPRqpzqtDy5UqND04AjEYBgihlmNpsD2mWAiUir6pKZZvN++/IMQnJ2ko+3MgRfwfrrk vBpfY77PCTO3L8Gtr0jjzzviT8iKFiDu8A3h/6P7coUIjovyaKSMmlkRdioT1f1Cz+wiO+677gn9 vPs/H56df+BhgcsM/8Y= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	xdns.pppl.gov is authoritative for pppl.gov
	Found RRSIG signed by pppl.gov zone
	Query to ns-aoa.es.net for pppl.gov/SOA
	Received 422 bytes from 198.124.252.22
	;; Response received from [198.124.252.22] 422 octets ;; HEADER SECTION ;; id = 49697 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pppl.gov. IN SOA ;; ANSWER SECTION (3 records) pppl.gov. 21600 IN SOA ( gm.pppl.gov. unixadmin.pppl.gov. 20447354 ;serial 10800 ;refresh 1080 ;retry 2592000 ;expire 900 ;minimum ) pppl.gov. 21600 IN RRSIG ( SOA 7 2 21600 20240605124001 20240521114001 26429 pppl.gov. 3j9L7ndifBIXhEouLo5+5PWwxklrmx56bvt0GzE9aAZMFyWHBj3pdnEIbODm6GluDpeMuR3d1b+Q jXrzJjTCH+ZxdAJkruWg9z/sZ3eVBtFiMPJ0hMkXmQOL5iLU2Em33hurAeeP5E7tzWm9cFiK0gzY +zSBX9alyqNsZGigSxU= ) pppl.gov. 21600 IN RRSIG ( SOA 7 2 21600 20240605124001 20240521114001 63155 pppl.gov. bXuO57NX6hQreVri1C83IGorWOzFz6owCclutYsNtRU1D01gpudGsb2lA09E7+UZH5ooWaoVzp09 p4/Ag3LS6glf0B0y9GwV5aaqvH42Pcui7Zo7K/jpRJsdncEXI2JBjJbN/ByioTLUcqaI6o6k2+MN Tm7QV8sDQbL7ca/4/a8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1.es.net for pppl.gov/SOA
	Received 422 bytes from 198.128.2.10
	;; Response received from [198.128.2.10] 422 octets ;; HEADER SECTION ;; id = 20895 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pppl.gov. IN SOA ;; ANSWER SECTION (3 records) pppl.gov. 21600 IN SOA ( gm.pppl.gov. unixadmin.pppl.gov. 20447354 ;serial 10800 ;refresh 1080 ;retry 2592000 ;expire 900 ;minimum ) pppl.gov. 21600 IN RRSIG ( SOA 7 2 21600 20240605124001 20240521114001 26429 pppl.gov. 3j9L7ndifBIXhEouLo5+5PWwxklrmx56bvt0GzE9aAZMFyWHBj3pdnEIbODm6GluDpeMuR3d1b+Q jXrzJjTCH+ZxdAJkruWg9z/sZ3eVBtFiMPJ0hMkXmQOL5iLU2Em33hurAeeP5E7tzWm9cFiK0gzY +zSBX9alyqNsZGigSxU= ) pppl.gov. 21600 IN RRSIG ( SOA 7 2 21600 20240605124001 20240521114001 63155 pppl.gov. bXuO57NX6hQreVri1C83IGorWOzFz6owCclutYsNtRU1D01gpudGsb2lA09E7+UZH5ooWaoVzp09 p4/Ag3LS6glf0B0y9GwV5aaqvH42Pcui7Zo7K/jpRJsdncEXI2JBjJbN/ByioTLUcqaI6o6k2+MN Tm7QV8sDQbL7ca/4/a8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-lvk.es.net for pppl.gov/SOA
	Received 422 bytes from 192.188.22.22
	;; Response received from [192.188.22.22] 422 octets ;; HEADER SECTION ;; id = 13741 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pppl.gov. IN SOA ;; ANSWER SECTION (3 records) pppl.gov. 21600 IN SOA ( gm.pppl.gov. unixadmin.pppl.gov. 20447354 ;serial 10800 ;refresh 1080 ;retry 2592000 ;expire 900 ;minimum ) pppl.gov. 21600 IN RRSIG ( SOA 7 2 21600 20240605124001 20240521114001 26429 pppl.gov. 3j9L7ndifBIXhEouLo5+5PWwxklrmx56bvt0GzE9aAZMFyWHBj3pdnEIbODm6GluDpeMuR3d1b+Q jXrzJjTCH+ZxdAJkruWg9z/sZ3eVBtFiMPJ0hMkXmQOL5iLU2Em33hurAeeP5E7tzWm9cFiK0gzY +zSBX9alyqNsZGigSxU= ) pppl.gov. 21600 IN RRSIG ( SOA 7 2 21600 20240605124001 20240521114001 63155 pppl.gov. bXuO57NX6hQreVri1C83IGorWOzFz6owCclutYsNtRU1D01gpudGsb2lA09E7+UZH5ooWaoVzp09 p4/Ag3LS6glf0B0y9GwV5aaqvH42Pcui7Zo7K/jpRJsdncEXI2JBjJbN/ByioTLUcqaI6o6k2+MN Tm7QV8sDQbL7ca/4/a8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to xdns.pppl.gov for pppl.gov/A
	Received 437 bytes from 192.188.106.232
	;; Response received from [192.188.106.232] 437 octets ;; HEADER SECTION ;; id = 32133 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pppl.gov. IN A ;; ANSWER SECTION (6 records) pppl.gov. 21600 IN A 198.125.224.191 pppl.gov. 21600 IN A 198.125.224.166 pppl.gov. 21600 IN A 198.125.224.212 pppl.gov. 21600 IN A 198.125.224.220 pppl.gov. 21600 IN RRSIG ( A 7 2 21600 20240601140252 20240517134502 26429 pppl.gov. mOzwye/JGxgoBKuttIpJK1TVqztKW7ZMGf0Y06CNboICUrYzVPeoiTUuMTp0/MhdKPYj8MfqsgQr vsE3OcpRtXkj/KkXGnYTCmZLeXxm6/AGLFyeI9dgg9TvurDjWghq+e3A6cvYj/E1g4xIix7LcSV6 aBekVq177gtF08OOu18= ) pppl.gov. 21600 IN RRSIG ( A 7 2 21600 20240601140252 20240517134502 63155 pppl.gov. tvuGAx0wvPRqpzqtDy5UqND04AjEYBgihlmNpsD2mWAiUir6pKZZvN++/IMQnJ2ko+3MgRfwfrrk vBpfY77PCTO3L8Gtr0jjzzviT8iKFiDu8A3h/6P7coUIjovyaKSMmlkRdioT1f1Cz+wiO+677gn9 vPs/H56df+BhgcsM/8Y= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	pppl.gov A RR has value 198.125.224.191
	pppl.gov A RR has value 198.125.224.166
	pppl.gov A RR has value 198.125.224.212
	pppl.gov A RR has value 198.125.224.220
	Found 2 RRSIGs over A RRset
	`pppl.gov. 21600 IN RRSIG ( A 7 2 21600 20240601140252 20240517134502 26429 pppl.gov. mOzwye/JGxgoBKuttIpJK1TVqztKW7ZMGf0Y06CNboICUrYzVPeoiTUuMTp0/MhdKPYj8MfqsgQr vsE3OcpRtXkj/KkXGnYTCmZLeXxm6/AGLFyeI9dgg9TvurDjWghq+e3A6cvYj/E1g4xIix7LcSV6 aBekVq177gtF08OOu18= )`
	`pppl.gov. 21600 IN RRSIG ( A 7 2 21600 20240601140252 20240517134502 63155 pppl.gov. tvuGAx0wvPRqpzqtDy5UqND04AjEYBgihlmNpsD2mWAiUir6pKZZvN++/IMQnJ2ko+3MgRfwfrrk vBpfY77PCTO3L8Gtr0jjzzviT8iKFiDu8A3h/6P7coUIjovyaKSMmlkRdioT1f1Cz+wiO+677gn9 vPs/H56df+BhgcsM/8Y= )`
	RRSIG=26429 and DNSKEY=26429 verifies the A RRset
	RRSIG=63155 and DNSKEY=63155 verifies the A RRset

pppl.gov

	Query to ns-lvk.es.net for pppl.gov/A
	Received 437 bytes from 192.188.22.22
	;; Response received from [192.188.22.22] 437 octets ;; HEADER SECTION ;; id = 37423 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pppl.gov. IN A ;; ANSWER SECTION (6 records) pppl.gov. 21600 IN A 198.125.224.166 pppl.gov. 21600 IN A 198.125.224.191 pppl.gov. 21600 IN A 198.125.224.212 pppl.gov. 21600 IN A 198.125.224.220 pppl.gov. 21600 IN RRSIG ( A 7 2 21600 20240601140252 20240517134502 26429 pppl.gov. mOzwye/JGxgoBKuttIpJK1TVqztKW7ZMGf0Y06CNboICUrYzVPeoiTUuMTp0/MhdKPYj8MfqsgQr vsE3OcpRtXkj/KkXGnYTCmZLeXxm6/AGLFyeI9dgg9TvurDjWghq+e3A6cvYj/E1g4xIix7LcSV6 aBekVq177gtF08OOu18= ) pppl.gov. 21600 IN RRSIG ( A 7 2 21600 20240601140252 20240517134502 63155 pppl.gov. tvuGAx0wvPRqpzqtDy5UqND04AjEYBgihlmNpsD2mWAiUir6pKZZvN++/IMQnJ2ko+3MgRfwfrrk vBpfY77PCTO3L8Gtr0jjzzviT8iKFiDu8A3h/6P7coUIjovyaKSMmlkRdioT1f1Cz+wiO+677gn9 vPs/H56df+BhgcsM/8Y= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-lvk.es.net is authoritative for pppl.gov
	Found RRSIG signed by pppl.gov zone
	Query to ns-lvk.es.net for pppl.gov/A
	Received 437 bytes from 192.188.22.22
	;; Response received from [192.188.22.22] 437 octets ;; HEADER SECTION ;; id = 61718 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pppl.gov. IN A ;; ANSWER SECTION (6 records) pppl.gov. 21600 IN A 198.125.224.166 pppl.gov. 21600 IN A 198.125.224.191 pppl.gov. 21600 IN A 198.125.224.212 pppl.gov. 21600 IN A 198.125.224.220 pppl.gov. 21600 IN RRSIG ( A 7 2 21600 20240601140252 20240517134502 26429 pppl.gov. mOzwye/JGxgoBKuttIpJK1TVqztKW7ZMGf0Y06CNboICUrYzVPeoiTUuMTp0/MhdKPYj8MfqsgQr vsE3OcpRtXkj/KkXGnYTCmZLeXxm6/AGLFyeI9dgg9TvurDjWghq+e3A6cvYj/E1g4xIix7LcSV6 aBekVq177gtF08OOu18= ) pppl.gov. 21600 IN RRSIG ( A 7 2 21600 20240601140252 20240517134502 63155 pppl.gov. tvuGAx0wvPRqpzqtDy5UqND04AjEYBgihlmNpsD2mWAiUir6pKZZvN++/IMQnJ2ko+3MgRfwfrrk vBpfY77PCTO3L8Gtr0jjzzviT8iKFiDu8A3h/6P7coUIjovyaKSMmlkRdioT1f1Cz+wiO+677gn9 vPs/H56df+BhgcsM/8Y= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	pppl.gov A RR has value 198.125.224.166
	pppl.gov A RR has value 198.125.224.191
	pppl.gov A RR has value 198.125.224.212
	pppl.gov A RR has value 198.125.224.220
	Found 2 RRSIGs over A RRset
	`pppl.gov. 21600 IN RRSIG ( A 7 2 21600 20240601140252 20240517134502 26429 pppl.gov. mOzwye/JGxgoBKuttIpJK1TVqztKW7ZMGf0Y06CNboICUrYzVPeoiTUuMTp0/MhdKPYj8MfqsgQr vsE3OcpRtXkj/KkXGnYTCmZLeXxm6/AGLFyeI9dgg9TvurDjWghq+e3A6cvYj/E1g4xIix7LcSV6 aBekVq177gtF08OOu18= )`
	`pppl.gov. 21600 IN RRSIG ( A 7 2 21600 20240601140252 20240517134502 63155 pppl.gov. tvuGAx0wvPRqpzqtDy5UqND04AjEYBgihlmNpsD2mWAiUir6pKZZvN++/IMQnJ2ko+3MgRfwfrrk vBpfY77PCTO3L8Gtr0jjzzviT8iKFiDu8A3h/6P7coUIjovyaKSMmlkRdioT1f1Cz+wiO+677gn9 vPs/H56df+BhgcsM/8Y= )`
	RRSIG=26429 and DNSKEY=26429 verifies the A RRset
	RRSIG=63155 and DNSKEY=63155 verifies the A RRset

pppl.gov

	Query to ns-aoa.es.net for pppl.gov/A
	Received 437 bytes from 198.124.252.22
	;; Response received from [198.124.252.22] 437 octets ;; HEADER SECTION ;; id = 24271 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pppl.gov. IN A ;; ANSWER SECTION (6 records) pppl.gov. 21600 IN A 198.125.224.166 pppl.gov. 21600 IN A 198.125.224.191 pppl.gov. 21600 IN A 198.125.224.212 pppl.gov. 21600 IN A 198.125.224.220 pppl.gov. 21600 IN RRSIG ( A 7 2 21600 20240601140252 20240517134502 26429 pppl.gov. mOzwye/JGxgoBKuttIpJK1TVqztKW7ZMGf0Y06CNboICUrYzVPeoiTUuMTp0/MhdKPYj8MfqsgQr vsE3OcpRtXkj/KkXGnYTCmZLeXxm6/AGLFyeI9dgg9TvurDjWghq+e3A6cvYj/E1g4xIix7LcSV6 aBekVq177gtF08OOu18= ) pppl.gov. 21600 IN RRSIG ( A 7 2 21600 20240601140252 20240517134502 63155 pppl.gov. tvuGAx0wvPRqpzqtDy5UqND04AjEYBgihlmNpsD2mWAiUir6pKZZvN++/IMQnJ2ko+3MgRfwfrrk vBpfY77PCTO3L8Gtr0jjzzviT8iKFiDu8A3h/6P7coUIjovyaKSMmlkRdioT1f1Cz+wiO+677gn9 vPs/H56df+BhgcsM/8Y= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-aoa.es.net is authoritative for pppl.gov
	Found RRSIG signed by pppl.gov zone
	Query to ns-aoa.es.net for pppl.gov/A
	Received 437 bytes from 198.124.252.22
	;; Response received from [198.124.252.22] 437 octets ;; HEADER SECTION ;; id = 50732 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pppl.gov. IN A ;; ANSWER SECTION (6 records) pppl.gov. 21600 IN A 198.125.224.166 pppl.gov. 21600 IN A 198.125.224.191 pppl.gov. 21600 IN A 198.125.224.212 pppl.gov. 21600 IN A 198.125.224.220 pppl.gov. 21600 IN RRSIG ( A 7 2 21600 20240601140252 20240517134502 26429 pppl.gov. mOzwye/JGxgoBKuttIpJK1TVqztKW7ZMGf0Y06CNboICUrYzVPeoiTUuMTp0/MhdKPYj8MfqsgQr vsE3OcpRtXkj/KkXGnYTCmZLeXxm6/AGLFyeI9dgg9TvurDjWghq+e3A6cvYj/E1g4xIix7LcSV6 aBekVq177gtF08OOu18= ) pppl.gov. 21600 IN RRSIG ( A 7 2 21600 20240601140252 20240517134502 63155 pppl.gov. tvuGAx0wvPRqpzqtDy5UqND04AjEYBgihlmNpsD2mWAiUir6pKZZvN++/IMQnJ2ko+3MgRfwfrrk vBpfY77PCTO3L8Gtr0jjzzviT8iKFiDu8A3h/6P7coUIjovyaKSMmlkRdioT1f1Cz+wiO+677gn9 vPs/H56df+BhgcsM/8Y= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	pppl.gov A RR has value 198.125.224.166
	pppl.gov A RR has value 198.125.224.191
	pppl.gov A RR has value 198.125.224.212
	pppl.gov A RR has value 198.125.224.220
	Found 2 RRSIGs over A RRset
	`pppl.gov. 21600 IN RRSIG ( A 7 2 21600 20240601140252 20240517134502 26429 pppl.gov. mOzwye/JGxgoBKuttIpJK1TVqztKW7ZMGf0Y06CNboICUrYzVPeoiTUuMTp0/MhdKPYj8MfqsgQr vsE3OcpRtXkj/KkXGnYTCmZLeXxm6/AGLFyeI9dgg9TvurDjWghq+e3A6cvYj/E1g4xIix7LcSV6 aBekVq177gtF08OOu18= )`
	`pppl.gov. 21600 IN RRSIG ( A 7 2 21600 20240601140252 20240517134502 63155 pppl.gov. tvuGAx0wvPRqpzqtDy5UqND04AjEYBgihlmNpsD2mWAiUir6pKZZvN++/IMQnJ2ko+3MgRfwfrrk vBpfY77PCTO3L8Gtr0jjzzviT8iKFiDu8A3h/6P7coUIjovyaKSMmlkRdioT1f1Cz+wiO+677gn9 vPs/H56df+BhgcsM/8Y= )`
	RRSIG=26429 and DNSKEY=26429 verifies the A RRset
	RRSIG=63155 and DNSKEY=63155 verifies the A RRset

pppl.gov

	Query to ns1.es.net for pppl.gov/A
	Received 437 bytes from 198.128.2.10
	;; Response received from [198.128.2.10] 437 octets ;; HEADER SECTION ;; id = 21085 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pppl.gov. IN A ;; ANSWER SECTION (6 records) pppl.gov. 21600 IN A 198.125.224.166 pppl.gov. 21600 IN A 198.125.224.191 pppl.gov. 21600 IN A 198.125.224.212 pppl.gov. 21600 IN A 198.125.224.220 pppl.gov. 21600 IN RRSIG ( A 7 2 21600 20240601140252 20240517134502 26429 pppl.gov. mOzwye/JGxgoBKuttIpJK1TVqztKW7ZMGf0Y06CNboICUrYzVPeoiTUuMTp0/MhdKPYj8MfqsgQr vsE3OcpRtXkj/KkXGnYTCmZLeXxm6/AGLFyeI9dgg9TvurDjWghq+e3A6cvYj/E1g4xIix7LcSV6 aBekVq177gtF08OOu18= ) pppl.gov. 21600 IN RRSIG ( A 7 2 21600 20240601140252 20240517134502 63155 pppl.gov. tvuGAx0wvPRqpzqtDy5UqND04AjEYBgihlmNpsD2mWAiUir6pKZZvN++/IMQnJ2ko+3MgRfwfrrk vBpfY77PCTO3L8Gtr0jjzzviT8iKFiDu8A3h/6P7coUIjovyaKSMmlkRdioT1f1Cz+wiO+677gn9 vPs/H56df+BhgcsM/8Y= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.es.net is authoritative for pppl.gov
	Found RRSIG signed by pppl.gov zone
	Query to ns1.es.net for pppl.gov/A
	Received 437 bytes from 198.128.2.10
	;; Response received from [198.128.2.10] 437 octets ;; HEADER SECTION ;; id = 55501 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pppl.gov. IN A ;; ANSWER SECTION (6 records) pppl.gov. 21600 IN A 198.125.224.166 pppl.gov. 21600 IN A 198.125.224.191 pppl.gov. 21600 IN A 198.125.224.212 pppl.gov. 21600 IN A 198.125.224.220 pppl.gov. 21600 IN RRSIG ( A 7 2 21600 20240601140252 20240517134502 26429 pppl.gov. mOzwye/JGxgoBKuttIpJK1TVqztKW7ZMGf0Y06CNboICUrYzVPeoiTUuMTp0/MhdKPYj8MfqsgQr vsE3OcpRtXkj/KkXGnYTCmZLeXxm6/AGLFyeI9dgg9TvurDjWghq+e3A6cvYj/E1g4xIix7LcSV6 aBekVq177gtF08OOu18= ) pppl.gov. 21600 IN RRSIG ( A 7 2 21600 20240601140252 20240517134502 63155 pppl.gov. tvuGAx0wvPRqpzqtDy5UqND04AjEYBgihlmNpsD2mWAiUir6pKZZvN++/IMQnJ2ko+3MgRfwfrrk vBpfY77PCTO3L8Gtr0jjzzviT8iKFiDu8A3h/6P7coUIjovyaKSMmlkRdioT1f1Cz+wiO+677gn9 vPs/H56df+BhgcsM/8Y= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	pppl.gov A RR has value 198.125.224.166
	pppl.gov A RR has value 198.125.224.191
	pppl.gov A RR has value 198.125.224.212
	pppl.gov A RR has value 198.125.224.220
	Found 2 RRSIGs over A RRset
	`pppl.gov. 21600 IN RRSIG ( A 7 2 21600 20240601140252 20240517134502 26429 pppl.gov. mOzwye/JGxgoBKuttIpJK1TVqztKW7ZMGf0Y06CNboICUrYzVPeoiTUuMTp0/MhdKPYj8MfqsgQr vsE3OcpRtXkj/KkXGnYTCmZLeXxm6/AGLFyeI9dgg9TvurDjWghq+e3A6cvYj/E1g4xIix7LcSV6 aBekVq177gtF08OOu18= )`
	`pppl.gov. 21600 IN RRSIG ( A 7 2 21600 20240601140252 20240517134502 63155 pppl.gov. tvuGAx0wvPRqpzqtDy5UqND04AjEYBgihlmNpsD2mWAiUir6pKZZvN++/IMQnJ2ko+3MgRfwfrrk vBpfY77PCTO3L8Gtr0jjzzviT8iKFiDu8A3h/6P7coUIjovyaKSMmlkRdioT1f1Cz+wiO+677gn9 vPs/H56df+BhgcsM/8Y= )`
	RRSIG=26429 and DNSKEY=26429 verifies the A RRset
	RRSIG=63155 and DNSKEY=63155 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test pppl.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: