DNSSEC Debugger

Domain Name:

Time: 2024-05-17 16:50:48 UTC

Analyzing DNSSEC problems for sba.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 865 octets ;; HEADER SECTION ;; id = 60098 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to h.root-servers.net for sba.gov/A
	Received 614 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 614 octets ;; HEADER SECTION ;; id = 27432 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sba.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240530050000 20240517040000 5613 . dpSvrVMv4ULjsedR/owZmJgcdv+r2bNx7ajQXYRo5BhQ13cO3F79QkNOjBEn277GzUBJz8yVJwfk wJI65o3V3DK3obYWPcGOYsSxg0LfWriaJCJ6RdyNjFs8hwiL/e5xBWpZDm9VtYupfe0L9ML5sTGK xuYdIrbMlIOWHcclskcB+7kx9Llk3RJcqG18b/tIoKCdmBO0evwSNxlSY4pcr0vn7nMmz+mFGp20 tSkZfysVu832mKYt2nuaQfXmc8ioOgaCgL6fSv3sSxvXg8R7W0QRqECJ5Aha47BW056eI8x8KBH5 S5uM2Nk7k0/UG/3W3sTeXsAR+RdmaXoNA1AiFQ== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to c.root-servers.net for gov/DNSKEY
	Received 613 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 613 octets ;; HEADER SECTION ;; id = 16074 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240530050000 20240517040000 5613 . dpSvrVMv4ULjsedR/owZmJgcdv+r2bNx7ajQXYRo5BhQ13cO3F79QkNOjBEn277GzUBJz8yVJwfk wJI65o3V3DK3obYWPcGOYsSxg0LfWriaJCJ6RdyNjFs8hwiL/e5xBWpZDm9VtYupfe0L9ML5sTGK xuYdIrbMlIOWHcclskcB+7kx9Llk3RJcqG18b/tIoKCdmBO0evwSNxlSY4pcr0vn7nMmz+mFGp20 tSkZfysVu832mKYt2nuaQfXmc8ioOgaCgL6fSv3sSxvXg8R7W0QRqECJ5Aha47BW056eI8x8KBH5 S5uM2Nk7k0/UG/3W3sTeXsAR+RdmaXoNA1AiFQ== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to a.root-servers.net for gov/DS
	Received 367 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 367 octets ;; HEADER SECTION ;; id = 24730 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240530050000 20240517040000 5613 . dpSvrVMv4ULjsedR/owZmJgcdv+r2bNx7ajQXYRo5BhQ13cO3F79QkNOjBEn277GzUBJz8yVJwfk wJI65o3V3DK3obYWPcGOYsSxg0LfWriaJCJ6RdyNjFs8hwiL/e5xBWpZDm9VtYupfe0L9ML5sTGK xuYdIrbMlIOWHcclskcB+7kx9Llk3RJcqG18b/tIoKCdmBO0evwSNxlSY4pcr0vn7nMmz+mFGp20 tSkZfysVu832mKYt2nuaQfXmc8ioOgaCgL6fSv3sSxvXg8R7W0QRqECJ5Aha47BW056eI8x8KBH5 S5uM2Nk7k0/UG/3W3sTeXsAR+RdmaXoNA1AiFQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=64280/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20240530050000 20240517040000 5613 . dpSvrVMv4ULjsedR/owZmJgcdv+r2bNx7ajQXYRo5BhQ13cO3F79QkNOjBEn277GzUBJz8yVJwfk wJI65o3V3DK3obYWPcGOYsSxg0LfWriaJCJ6RdyNjFs8hwiL/e5xBWpZDm9VtYupfe0L9ML5sTGK xuYdIrbMlIOWHcclskcB+7kx9Llk3RJcqG18b/tIoKCdmBO0evwSNxlSY4pcr0vn7nMmz+mFGp20 tSkZfysVu832mKYt2nuaQfXmc8ioOgaCgL6fSv3sSxvXg8R7W0QRqECJ5Aha47BW056eI8x8KBH5 S5uM2Nk7k0/UG/3W3sTeXsAR+RdmaXoNA1AiFQ== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=64280/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 )`
	Query to a.ns.gov for gov/DNSKEY
	Received 779 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 779 octets ;; HEADER SECTION ;; id = 24336 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 8 AwEAAZp0vliR0TOBCJXmdagY36BI5ZveSPE3OSrcXKDs8IZa86x1+gwbheJcfLB6Fw6cWYUXaNgA mFcbxqIqWc5VJSyPS9yCPdEOLEIiegwCmcWnNsEyc0snKTyypXnvJ5JNhoznpFILDqlksAqP/aiq 1/l0w8TMkRbRrViLrJ1ayaScZ0nn/ge5wNpX09T9RI+gF1OIMJDdgH1vi0a+t6smSy4pUrerFTsu y8JAL+PP85MZiOssT9yoERfWSjFKde6PrQX5vj090AxT+hztb+q2EFXnF1a2L73/3UarB19k5NR3 MT1uM7ddag64Q0lg3aTy3MglDCzP7/StUxdeyL5qIX8= ) ; Key ID = 64280 gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcbYvlY667qXEzHsDTkft9cgKy5F0S9CAP+aFK9+sJumGqvpMaOyOzsilJ+OSVFhopJ1aRFp CUpLVIcVJ3E3YATGpzB45M0D5c4oJ0RjEIUakBwcPghmSW8K1GPqj/eUs4fbVPytXwtwvUll9Lxf gUvi5DA6xD6d2ckwDyRxfcMhXYydr2hIsgfrBLmRDMi4BkxMvA23eShPd/tPvnR0gJk= ) ; Key ID = 10104 gov. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240623141047 20240423141047 64280 gov. GGsGHy8XGH2PGTeyVpY5iEmleVzWCH/eitEUBXIgG0ivqrcC6Pzhenn+3E9uz+C2ehYImK95B9PK juJuu0jPFw09gKBO8Xo9x+wpWM/Zdh3NxhzGmfQOxRyj/5e1g27XxQB1pqhRegDfa5/mg+8zAoFY YneUx2tnvdtycsZg49d2iq75YlRBRj9ZSl6PJJ/nzacwKPjQFCbFiuEfnn6Vn432vWr2T0AUuaDV bJCSg2c32qiMCHE18PaaUn82oWYF2/FjWhU9i/UpGd0PS8Wtvicuho7/CYbMv+UvithHF+NE7QFV VDQtgjise03ZFQWMfrZcrZE8W4/KKDeyfDAkFA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 8 AwEAAZp0vliR0TOBCJXmdagY36BI5ZveSPE3OSrcXKDs8IZa86x1+gwbheJcfLB6Fw6cWYUXaNgA mFcbxqIqWc5VJSyPS9yCPdEOLEIiegwCmcWnNsEyc0snKTyypXnvJ5JNhoznpFILDqlksAqP/aiq 1/l0w8TMkRbRrViLrJ1ayaScZ0nn/ge5wNpX09T9RI+gF1OIMJDdgH1vi0a+t6smSy4pUrerFTsu y8JAL+PP85MZiOssT9yoERfWSjFKde6PrQX5vj090AxT+hztb+q2EFXnF1a2L73/3UarB19k5NR3 MT1uM7ddag64Q0lg3aTy3MglDCzP7/StUxdeyL5qIX8= ) ; Key ID = 64280`
	`gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcbYvlY667qXEzHsDTkft9cgKy5F0S9CAP+aFK9+sJumGqvpMaOyOzsilJ+OSVFhopJ1aRFp CUpLVIcVJ3E3YATGpzB45M0D5c4oJ0RjEIUakBwcPghmSW8K1GPqj/eUs4fbVPytXwtwvUll9Lxf gUvi5DA6xD6d2ckwDyRxfcMhXYydr2hIsgfrBLmRDMi4BkxMvA23eShPd/tPvnR0gJk= ) ; Key ID = 10104`
	DNSKEY=64280/SEP is now in the chain-of-trust
	DS=64280/SHA-256 verifies DNSKEY=64280/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240623141047 20240423141047 64280 gov. GGsGHy8XGH2PGTeyVpY5iEmleVzWCH/eitEUBXIgG0ivqrcC6Pzhenn+3E9uz+C2ehYImK95B9PK juJuu0jPFw09gKBO8Xo9x+wpWM/Zdh3NxhzGmfQOxRyj/5e1g27XxQB1pqhRegDfa5/mg+8zAoFY YneUx2tnvdtycsZg49d2iq75YlRBRj9ZSl6PJJ/nzacwKPjQFCbFiuEfnn6Vn432vWr2T0AUuaDV bJCSg2c32qiMCHE18PaaUn82oWYF2/FjWhU9i/UpGd0PS8Wtvicuho7/CYbMv+UvithHF+NE7QFV VDQtgjise03ZFQWMfrZcrZE8W4/KKDeyfDAkFA== )`
	RRSIG=64280 and DNSKEY=64280/SEP verifies the DNSKEY RRset
	DNSKEY=10104 is now in the chain-of-trust
	Query to a.ns.gov for sba.gov/A
	Received 555 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 555 octets ;; HEADER SECTION ;; id = 61039 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sba.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) sba.gov. 10800 IN NS brahmaputra.sba.gov. sba.gov. 10800 IN NS dnieper.sba.gov. sba.gov. 10800 IN NS volturno.sba.gov. sba.gov. 10800 IN NS yamuna.sba.gov. sba.gov. 3600 IN DS 41222 8 1 7470eb84b4b7e52773fb8e27fb74c2339dfc1717 sba.gov. 3600 IN DS ( 41222 8 2 6b43e7e11848f0f7896f6716e3e9a8f8c57ef711d6e37c2e07b48a8ccc0ec24f ) sba.gov. 3600 IN DS 57911 8 1 530cf48ba705861ccc40ff5944412a6cba127fcb sba.gov. 3600 IN DS ( 57911 8 2 bfb4c8dd23d614693f6bb6ba3a2fccae72c8c67054b662f0c4dc6a6bc7508271 ) sba.gov. 3600 IN RRSIG ( DS 8 2 3600 20240518175049 20240516155049 10104 gov. XqNTrkrjgWjEJd5+8eRZQvCCJNSBRJ6BaMLUwe9eUFrFgBLxV5iIOdfiYEy28ZbSLutbRmkskl7w o5ziuctOxEGky5KfMYjnkD/MOszckNbSwk4W8q671zc/L+9l6oT9x2FIktlMHNICz7NDPzp/a0Ev KINWMwNJEuPK8wGnMzpX5SIL/wn42hqZHkeEp8yNF37l47it5G/4G05e1LyoQA== ) ;; ADDITIONAL SECTION (5 records) brahmaputra.sba.gov. 3600 IN A 40.80.220.233 dnieper.sba.gov. 3600 IN A 40.90.247.199 volturno.sba.gov. 3600 IN A 40.80.220.253 yamuna.sba.gov. 3600 IN A 40.90.245.130 ;; { "EDNS-VERSION": 0 }
	Query to c.ns.gov for sba.gov/DNSKEY
	Received 555 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 555 octets ;; HEADER SECTION ;; id = 3269 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sba.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) sba.gov. 10800 IN NS brahmaputra.sba.gov. sba.gov. 10800 IN NS dnieper.sba.gov. sba.gov. 10800 IN NS volturno.sba.gov. sba.gov. 10800 IN NS yamuna.sba.gov. sba.gov. 3600 IN DS 41222 8 1 7470eb84b4b7e52773fb8e27fb74c2339dfc1717 sba.gov. 3600 IN DS ( 41222 8 2 6b43e7e11848f0f7896f6716e3e9a8f8c57ef711d6e37c2e07b48a8ccc0ec24f ) sba.gov. 3600 IN DS 57911 8 1 530cf48ba705861ccc40ff5944412a6cba127fcb sba.gov. 3600 IN DS ( 57911 8 2 bfb4c8dd23d614693f6bb6ba3a2fccae72c8c67054b662f0c4dc6a6bc7508271 ) sba.gov. 3600 IN RRSIG ( DS 8 2 3600 20240518175049 20240516155049 10104 gov. XqNTrkrjgWjEJd5+8eRZQvCCJNSBRJ6BaMLUwe9eUFrFgBLxV5iIOdfiYEy28ZbSLutbRmkskl7w o5ziuctOxEGky5KfMYjnkD/MOszckNbSwk4W8q671zc/L+9l6oT9x2FIktlMHNICz7NDPzp/a0Ev KINWMwNJEuPK8wGnMzpX5SIL/wn42hqZHkeEp8yNF37l47it5G/4G05e1LyoQA== ) ;; ADDITIONAL SECTION (5 records) brahmaputra.sba.gov. 3600 IN A 40.80.220.233 dnieper.sba.gov. 3600 IN A 40.90.247.199 volturno.sba.gov. 3600 IN A 40.80.220.253 yamuna.sba.gov. 3600 IN A 40.90.245.130 ;; { "EDNS-VERSION": 0 }
	Found child zone sba.gov

sba.gov

	Checking DS between gov and sba.gov
	Query to d.ns.gov for sba.gov/DS
	Received 399 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 399 octets ;; HEADER SECTION ;; id = 42454 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sba.gov. IN DS ;; ANSWER SECTION (5 records) sba.gov. 3600 IN DS 41222 8 1 7470eb84b4b7e52773fb8e27fb74c2339dfc1717 sba.gov. 3600 IN DS ( 41222 8 2 6b43e7e11848f0f7896f6716e3e9a8f8c57ef711d6e37c2e07b48a8ccc0ec24f ) sba.gov. 3600 IN DS 57911 8 1 530cf48ba705861ccc40ff5944412a6cba127fcb sba.gov. 3600 IN DS ( 57911 8 2 bfb4c8dd23d614693f6bb6ba3a2fccae72c8c67054b662f0c4dc6a6bc7508271 ) sba.gov. 3600 IN RRSIG ( DS 8 2 3600 20240518175049 20240516155049 10104 gov. XqNTrkrjgWjEJd5+8eRZQvCCJNSBRJ6BaMLUwe9eUFrFgBLxV5iIOdfiYEy28ZbSLutbRmkskl7w o5ziuctOxEGky5KfMYjnkD/MOszckNbSwk4W8q671zc/L+9l6oT9x2FIktlMHNICz7NDPzp/a0Ev KINWMwNJEuPK8wGnMzpX5SIL/wn42hqZHkeEp8yNF37l47it5G/4G05e1LyoQA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DS records for sba.gov in the gov zone
	DS=41222/SHA-1 uses a deprecated digest algorithm
	DS=57911/SHA-1 uses a deprecated digest algorithm
	DS=41222/SHA-1 has algorithm RSASHA256
	DS=41222/SHA-256 has algorithm RSASHA256
	DS=57911/SHA-1 has algorithm RSASHA256
	DS=57911/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`sba.gov. 3600 IN RRSIG ( DS 8 2 3600 20240518175049 20240516155049 10104 gov. XqNTrkrjgWjEJd5+8eRZQvCCJNSBRJ6BaMLUwe9eUFrFgBLxV5iIOdfiYEy28ZbSLutbRmkskl7w o5ziuctOxEGky5KfMYjnkD/MOszckNbSwk4W8q671zc/L+9l6oT9x2FIktlMHNICz7NDPzp/a0Ev KINWMwNJEuPK8wGnMzpX5SIL/wn42hqZHkeEp8yNF37l47it5G/4G05e1LyoQA== )`
	RRSIG=10104 and DNSKEY=10104 verifies the DS RRset
	DS=41222/SHA-1 is now in the chain-of-trust
	DS=57911/SHA-1 is now in the chain-of-trust
	`sba.gov. 3600 IN DS 41222 8 1 7470eb84b4b7e52773fb8e27fb74c2339dfc1717`
	`sba.gov. 3600 IN DS ( 41222 8 2 6b43e7e11848f0f7896f6716e3e9a8f8c57ef711d6e37c2e07b48a8ccc0ec24f )`
	`sba.gov. 3600 IN DS 57911 8 1 530cf48ba705861ccc40ff5944412a6cba127fcb`
	`sba.gov. 3600 IN DS ( 57911 8 2 bfb4c8dd23d614693f6bb6ba3a2fccae72c8c67054b662f0c4dc6a6bc7508271 )`
	Query to brahmaputra.sba.gov for sba.gov/DNSKEY
	Received 1346 bytes from 40.80.220.233
	;; Response received from [40.80.220.233] 1346 octets ;; HEADER SECTION ;; id = 41672 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4000, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sba.gov. IN DNSKEY ;; ANSWER SECTION (6 records) sba.gov. 3600 IN DNSKEY ( 256 3 8 AwEAAbpEYIG6lgrgtGzDAh2dk0yRSAB+VvebQgmdG6GMpKEfmo0otScVFs1Px+9yJ0PBHj9y/AG2 rerBE+FJdLHc9K+D+la2dFKIuGpEd/wYGC/CMVn6FwpPKUYgS8b81aalU/NuzjEuvjQ+Cdk83lFY nhqDTp3DhQomq15FzE1R6U6D ) ; Key ID = 42456 sba.gov. 3600 IN DNSKEY ( 256 3 8 AwEAAbIwDgDcuWU5Yj02ewIVb5Ek2lCw33pnmce6Hv+qWF7ghWrGRY/gq2/Nfm4NfK/dmUROfRm5 f0RsPqsqLboWkuFm+8Lrom9Jlv2KvK9Lz+nHq+qApJ97a5wxFlVlkgue1m6K+cCRRgZuqLcnM8YB wXTrfH+R9AmM4CNA9MEZQo/9 ) ; Key ID = 19321 sba.gov. 3600 IN DNSKEY ( 257 3 8 AwEAAbEgKh+fybpMnj7vyxRLG7RI26T4b+XZxFptsiSx4fIzgoHDLEmGNxn05gfSMexej1B1cHL2 1URAQ1i3MHOTOl59rAuqOx37s52WQopJDrPyLloPaxrDgPgOlRm13arC9XzStUo8DQ7I3GLqxYFL WuAAJX6NuPYgK+MhCdF6ZaWtZsK9vM396UQMMklgTCaxD2JfUxemZ1Kc3AN5ioPcMgHhREmYv25H 2FD2KeXYnp5D7QS4tBXFgncvpP/zQTwth83fPlPp+9wkW758ivpWWtWGxcymfHKDkh80kq3RkRXu gOrjcjbsdisVHVWqYb/1mWnj6vYJbkl2VQucWrOUTUU= ) ; Key ID = 57911 sba.gov. 3600 IN DNSKEY ( 257 3 8 AwEAAbls0U9L9f7NSTB06sFYDqM8O+llXObJjbGTdyram98voO6tLHQDKYnt3F0kRiTBKgd6/ecK sNLMK/I82LOhhUGJcTxH9GNdzR66mAJdydnJkGJ8DbkyaJH1sYtU9ekjB/Tpsf+zO7UoWMFipXt3 KnAukNtHFbPHrn7jCrmwLdmime654aqtD8BJyvebR9Iwy7Hc75NuFJu5jlb3cz73BnDxzNOQFqY4 2oP+keq6wtO3smWFAlngc+as40K77CZOZiqCAhUBhNKt/tJkzykYuGn73c8C1o5s6hBkT3GRTWWS q1m7iuPwss1ak3xrpzIrWa0WbzewKraI2bykc4We4aM= ) ; Key ID = 30556 sba.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20240524010048 20240517000048 42456 sba.gov. KXjlFxFs6opQjXfeNHEVoo68Fbk/lBC9nbPiO9dSLxPgHeE59SMTE1hTb7bSJjTA+hP/sVwOWUYH PJm8Vu8VEBfewJGZ0xMKCcp5KwymhQjb6n6T6pJizi3omx3cydX3oBUCcziIt9njK9Aus38EYDHm IfB9rCtPDGff8ya+trg= ) sba.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20240524010048 20240517000048 57911 sba.gov. f1fO6kZAcnGYsnBm+j90grdQ+brziw9XjUU1p8gjixkLFSjlBAGAox4y30X12BXPyHN0ddYbQj/j WzCluYCc1vCPPv7XUrWrZpyQfnDgC/M2bynEy8Fm8p3fo/c36BVg/+bz9713zF68F0XWhXiUKHub M1suAtEzX1fH1ysFhjkCgTxJPnvN6qMgNYfbNi+N8PgjyPQ6xH8a+L298VJWKN1KJY1/182O0DpY HN4Rf7UeNDg8nGhIiR58C3tn/mfybHMmVD+PYbgNGgRVm11F+U2WKZ5tnkFbO5qHR6AqFLtgMAWX JKF5VjlsBBUsL68bbpWAn4ybH0brspPj5muqzA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for sba.gov
	`sba.gov. 3600 IN DNSKEY ( 256 3 8 AwEAAbpEYIG6lgrgtGzDAh2dk0yRSAB+VvebQgmdG6GMpKEfmo0otScVFs1Px+9yJ0PBHj9y/AG2 rerBE+FJdLHc9K+D+la2dFKIuGpEd/wYGC/CMVn6FwpPKUYgS8b81aalU/NuzjEuvjQ+Cdk83lFY nhqDTp3DhQomq15FzE1R6U6D ) ; Key ID = 42456`
	`sba.gov. 3600 IN DNSKEY ( 256 3 8 AwEAAbIwDgDcuWU5Yj02ewIVb5Ek2lCw33pnmce6Hv+qWF7ghWrGRY/gq2/Nfm4NfK/dmUROfRm5 f0RsPqsqLboWkuFm+8Lrom9Jlv2KvK9Lz+nHq+qApJ97a5wxFlVlkgue1m6K+cCRRgZuqLcnM8YB wXTrfH+R9AmM4CNA9MEZQo/9 ) ; Key ID = 19321`
	`sba.gov. 3600 IN DNSKEY ( 257 3 8 AwEAAbEgKh+fybpMnj7vyxRLG7RI26T4b+XZxFptsiSx4fIzgoHDLEmGNxn05gfSMexej1B1cHL2 1URAQ1i3MHOTOl59rAuqOx37s52WQopJDrPyLloPaxrDgPgOlRm13arC9XzStUo8DQ7I3GLqxYFL WuAAJX6NuPYgK+MhCdF6ZaWtZsK9vM396UQMMklgTCaxD2JfUxemZ1Kc3AN5ioPcMgHhREmYv25H 2FD2KeXYnp5D7QS4tBXFgncvpP/zQTwth83fPlPp+9wkW758ivpWWtWGxcymfHKDkh80kq3RkRXu gOrjcjbsdisVHVWqYb/1mWnj6vYJbkl2VQucWrOUTUU= ) ; Key ID = 57911`
	`sba.gov. 3600 IN DNSKEY ( 257 3 8 AwEAAbls0U9L9f7NSTB06sFYDqM8O+llXObJjbGTdyram98voO6tLHQDKYnt3F0kRiTBKgd6/ecK sNLMK/I82LOhhUGJcTxH9GNdzR66mAJdydnJkGJ8DbkyaJH1sYtU9ekjB/Tpsf+zO7UoWMFipXt3 KnAukNtHFbPHrn7jCrmwLdmime654aqtD8BJyvebR9Iwy7Hc75NuFJu5jlb3cz73BnDxzNOQFqY4 2oP+keq6wtO3smWFAlngc+as40K77CZOZiqCAhUBhNKt/tJkzykYuGn73c8C1o5s6hBkT3GRTWWS q1m7iuPwss1ak3xrpzIrWa0WbzewKraI2bykc4We4aM= ) ; Key ID = 30556`
	DNSKEY=57911/SEP is now in the chain-of-trust
	DS=57911/SHA-1 verifies DNSKEY=57911/SEP
	DS=57911/SHA-256 verifies DNSKEY=57911/SEP
	DS=41222/SHA-1 is published, but a corresponding DNSKEY is not
	Found 2 RRSIGs over DNSKEY RRset
	`sba.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20240524010048 20240517000048 42456 sba.gov. KXjlFxFs6opQjXfeNHEVoo68Fbk/lBC9nbPiO9dSLxPgHeE59SMTE1hTb7bSJjTA+hP/sVwOWUYH PJm8Vu8VEBfewJGZ0xMKCcp5KwymhQjb6n6T6pJizi3omx3cydX3oBUCcziIt9njK9Aus38EYDHm IfB9rCtPDGff8ya+trg= )`
	`sba.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20240524010048 20240517000048 57911 sba.gov. f1fO6kZAcnGYsnBm+j90grdQ+brziw9XjUU1p8gjixkLFSjlBAGAox4y30X12BXPyHN0ddYbQj/j WzCluYCc1vCPPv7XUrWrZpyQfnDgC/M2bynEy8Fm8p3fo/c36BVg/+bz9713zF68F0XWhXiUKHub M1suAtEzX1fH1ysFhjkCgTxJPnvN6qMgNYfbNi+N8PgjyPQ6xH8a+L298VJWKN1KJY1/182O0DpY HN4Rf7UeNDg8nGhIiR58C3tn/mfybHMmVD+PYbgNGgRVm11F+U2WKZ5tnkFbO5qHR6AqFLtgMAWX JKF5VjlsBBUsL68bbpWAn4ybH0brspPj5muqzA== )`
	RRSIG=42456 and DNSKEY=42456 verifies the DNSKEY RRset
	RRSIG=57911 and DNSKEY=57911/SEP verifies the DNSKEY RRset
	DNSKEY=42456 is now in the chain-of-trust
	DNSKEY=19321 is now in the chain-of-trust
	DNSKEY=30556/SEP is now in the chain-of-trust
	Query to volturno.sba.gov for sba.gov/A
	Timeout querying volturno.sba.gov/40.80.220.253 for sba.gov/A
	All Queries to volturno.sba.gov for sba.gov/A timed out or failed
	Query to brahmaputra.sba.gov for sba.gov/A
	Received 251 bytes from 40.80.220.233
	;; Response received from [40.80.220.233] 251 octets ;; HEADER SECTION ;; id = 48248 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4000, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sba.gov. IN A ;; ANSWER SECTION (4 records) sba.gov. 3600 IN A 3.220.200.186 sba.gov. 3600 IN A 35.153.10.75 sba.gov. 3600 IN A 54.221.219.215 sba.gov. 3600 IN RRSIG ( A 8 2 3600 20240523130011 20240513120011 42456 sba.gov. szfg+UathuNoQfF8oBnykLTaGhRV4ELzShbkcEFo9H2Y/r1ZXd3vv4wFC6V9OaYN7LFlgTl2z+7D daXoNTxmCSJoKhWWWtRGoXOx9CWV6Je+7uIHl0skUmmH0Zf88w/16XBKc1xh18r5jExpdaO4U8lI 00Oaqb+x7ZBYs2LAjzE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	brahmaputra.sba.gov is authoritative for sba.gov
	Found RRSIG signed by sba.gov zone
	Query to yamuna.sba.gov for sba.gov/SOA
	Received 445 bytes from 40.90.245.130
	;; Response received from [40.90.245.130] 445 octets ;; HEADER SECTION ;; id = 5317 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4000, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sba.gov. IN SOA ;; ANSWER SECTION (2 records) sba.gov. 300 IN SOA ( Brahmaputra.sba.gov. hostmaster.sba.gov. 3379 ;serial 10800 ;refresh 600 ;retry 1296000 ;expire 3600 ;minimum ) sba.gov. 300 IN RRSIG ( SOA 8 2 300 20240527010048 20240517000048 42456 sba.gov. CIglUT2iVuDaW1DympuJDWNEZOnD5Wi5HKcGhmt5eFHY47icjlVmkiAPXMrNAu63YRJTGxo82Ct4 f3n5s2/3BjPu9kANqnwPw0pLfG94Fp702G/XL4hv3bVI96gGgh4bDf/B7t9p5HGdvFgdxGdyQHBv szqLxzExI25GJXvxT64= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (3 records) Brahmaputra.sba.gov. 3600 IN A 40.80.220.233 Brahmaputra.sba.gov. 3600 IN RRSIG ( A 8 3 3600 20240523130012 20240513120012 42456 sba.gov. bK5FZwhbxi/BmpHituWc4YPLhaT/QiMNchKrB58uEy5LZQfzPv9bNeO/Ga0fRTVlten9K5FX86rL FRsyTl9fj5jlHyfZIuaeQwOLLK31cQxokq1iw66rMUk8G44KJFYtOZy3gA1ihgpxGynT6kIvUr2A ALARot+GKwOQ37CrXXM= ) ;; { "EDNS-VERSION": 0 }
	Query to dnieper.sba.gov for sba.gov/SOA
	Received 445 bytes from 40.90.247.199
	;; Response received from [40.90.247.199] 445 octets ;; HEADER SECTION ;; id = 62092 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4000, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sba.gov. IN SOA ;; ANSWER SECTION (2 records) sba.gov. 300 IN SOA ( Brahmaputra.sba.gov. hostmaster.sba.gov. 3379 ;serial 10800 ;refresh 600 ;retry 1296000 ;expire 3600 ;minimum ) sba.gov. 300 IN RRSIG ( SOA 8 2 300 20240527010048 20240517000048 42456 sba.gov. CIglUT2iVuDaW1DympuJDWNEZOnD5Wi5HKcGhmt5eFHY47icjlVmkiAPXMrNAu63YRJTGxo82Ct4 f3n5s2/3BjPu9kANqnwPw0pLfG94Fp702G/XL4hv3bVI96gGgh4bDf/B7t9p5HGdvFgdxGdyQHBv szqLxzExI25GJXvxT64= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (3 records) Brahmaputra.sba.gov. 3600 IN A 40.80.220.233 Brahmaputra.sba.gov. 3600 IN RRSIG ( A 8 3 3600 20240523130012 20240513120012 42456 sba.gov. bK5FZwhbxi/BmpHituWc4YPLhaT/QiMNchKrB58uEy5LZQfzPv9bNeO/Ga0fRTVlten9K5FX86rL FRsyTl9fj5jlHyfZIuaeQwOLLK31cQxokq1iw66rMUk8G44KJFYtOZy3gA1ihgpxGynT6kIvUr2A ALARot+GKwOQ37CrXXM= ) ;; { "EDNS-VERSION": 0 }
	Query to brahmaputra.sba.gov for sba.gov/A
	Received 251 bytes from 40.80.220.233
	;; Response received from [40.80.220.233] 251 octets ;; HEADER SECTION ;; id = 1895 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4000, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sba.gov. IN A ;; ANSWER SECTION (4 records) sba.gov. 3600 IN A 35.153.10.75 sba.gov. 3600 IN A 54.221.219.215 sba.gov. 3600 IN A 3.220.200.186 sba.gov. 3600 IN RRSIG ( A 8 2 3600 20240523130011 20240513120011 42456 sba.gov. szfg+UathuNoQfF8oBnykLTaGhRV4ELzShbkcEFo9H2Y/r1ZXd3vv4wFC6V9OaYN7LFlgTl2z+7D daXoNTxmCSJoKhWWWtRGoXOx9CWV6Je+7uIHl0skUmmH0Zf88w/16XBKc1xh18r5jExpdaO4U8lI 00Oaqb+x7ZBYs2LAjzE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	sba.gov A RR has value 35.153.10.75
	sba.gov A RR has value 54.221.219.215
	sba.gov A RR has value 3.220.200.186
	Found 1 RRSIGs over A RRset
	`sba.gov. 3600 IN RRSIG ( A 8 2 3600 20240523130011 20240513120011 42456 sba.gov. szfg+UathuNoQfF8oBnykLTaGhRV4ELzShbkcEFo9H2Y/r1ZXd3vv4wFC6V9OaYN7LFlgTl2z+7D daXoNTxmCSJoKhWWWtRGoXOx9CWV6Je+7uIHl0skUmmH0Zf88w/16XBKc1xh18r5jExpdaO4U8lI 00Oaqb+x7ZBYs2LAjzE= )`
	RRSIG=42456 and DNSKEY=42456 verifies the A RRset

sba.gov

	Query to yamuna.sba.gov for sba.gov/A
	Received 251 bytes from 40.90.245.130
	;; Response received from [40.90.245.130] 251 octets ;; HEADER SECTION ;; id = 20987 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4000, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sba.gov. IN A ;; ANSWER SECTION (4 records) sba.gov. 3600 IN A 54.221.219.215 sba.gov. 3600 IN A 35.153.10.75 sba.gov. 3600 IN A 3.220.200.186 sba.gov. 3600 IN RRSIG ( A 8 2 3600 20240523130011 20240513120011 42456 sba.gov. szfg+UathuNoQfF8oBnykLTaGhRV4ELzShbkcEFo9H2Y/r1ZXd3vv4wFC6V9OaYN7LFlgTl2z+7D daXoNTxmCSJoKhWWWtRGoXOx9CWV6Je+7uIHl0skUmmH0Zf88w/16XBKc1xh18r5jExpdaO4U8lI 00Oaqb+x7ZBYs2LAjzE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	yamuna.sba.gov is authoritative for sba.gov
	Found RRSIG signed by sba.gov zone
	Query to yamuna.sba.gov for sba.gov/A
	Received 251 bytes from 40.90.245.130
	;; Response received from [40.90.245.130] 251 octets ;; HEADER SECTION ;; id = 6955 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4000, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sba.gov. IN A ;; ANSWER SECTION (4 records) sba.gov. 3600 IN A 35.153.10.75 sba.gov. 3600 IN A 3.220.200.186 sba.gov. 3600 IN A 54.221.219.215 sba.gov. 3600 IN RRSIG ( A 8 2 3600 20240523130011 20240513120011 42456 sba.gov. szfg+UathuNoQfF8oBnykLTaGhRV4ELzShbkcEFo9H2Y/r1ZXd3vv4wFC6V9OaYN7LFlgTl2z+7D daXoNTxmCSJoKhWWWtRGoXOx9CWV6Je+7uIHl0skUmmH0Zf88w/16XBKc1xh18r5jExpdaO4U8lI 00Oaqb+x7ZBYs2LAjzE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	sba.gov A RR has value 35.153.10.75
	sba.gov A RR has value 3.220.200.186
	sba.gov A RR has value 54.221.219.215
	Found 1 RRSIGs over A RRset
	`sba.gov. 3600 IN RRSIG ( A 8 2 3600 20240523130011 20240513120011 42456 sba.gov. szfg+UathuNoQfF8oBnykLTaGhRV4ELzShbkcEFo9H2Y/r1ZXd3vv4wFC6V9OaYN7LFlgTl2z+7D daXoNTxmCSJoKhWWWtRGoXOx9CWV6Je+7uIHl0skUmmH0Zf88w/16XBKc1xh18r5jExpdaO4U8lI 00Oaqb+x7ZBYs2LAjzE= )`
	RRSIG=42456 and DNSKEY=42456 verifies the A RRset

sba.gov

	Query to dnieper.sba.gov for sba.gov/A
	Received 251 bytes from 40.90.247.199
	;; Response received from [40.90.247.199] 251 octets ;; HEADER SECTION ;; id = 54136 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4000, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sba.gov. IN A ;; ANSWER SECTION (4 records) sba.gov. 3600 IN A 54.221.219.215 sba.gov. 3600 IN A 3.220.200.186 sba.gov. 3600 IN A 35.153.10.75 sba.gov. 3600 IN RRSIG ( A 8 2 3600 20240523130011 20240513120011 42456 sba.gov. szfg+UathuNoQfF8oBnykLTaGhRV4ELzShbkcEFo9H2Y/r1ZXd3vv4wFC6V9OaYN7LFlgTl2z+7D daXoNTxmCSJoKhWWWtRGoXOx9CWV6Je+7uIHl0skUmmH0Zf88w/16XBKc1xh18r5jExpdaO4U8lI 00Oaqb+x7ZBYs2LAjzE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dnieper.sba.gov is authoritative for sba.gov
	Found RRSIG signed by sba.gov zone
	Query to dnieper.sba.gov for sba.gov/A
	Received 251 bytes from 40.90.247.199
	;; Response received from [40.90.247.199] 251 octets ;; HEADER SECTION ;; id = 21377 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4000, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sba.gov. IN A ;; ANSWER SECTION (4 records) sba.gov. 3600 IN A 3.220.200.186 sba.gov. 3600 IN A 35.153.10.75 sba.gov. 3600 IN A 54.221.219.215 sba.gov. 3600 IN RRSIG ( A 8 2 3600 20240523130011 20240513120011 42456 sba.gov. szfg+UathuNoQfF8oBnykLTaGhRV4ELzShbkcEFo9H2Y/r1ZXd3vv4wFC6V9OaYN7LFlgTl2z+7D daXoNTxmCSJoKhWWWtRGoXOx9CWV6Je+7uIHl0skUmmH0Zf88w/16XBKc1xh18r5jExpdaO4U8lI 00Oaqb+x7ZBYs2LAjzE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	sba.gov A RR has value 3.220.200.186
	sba.gov A RR has value 35.153.10.75
	sba.gov A RR has value 54.221.219.215
	Found 1 RRSIGs over A RRset
	`sba.gov. 3600 IN RRSIG ( A 8 2 3600 20240523130011 20240513120011 42456 sba.gov. szfg+UathuNoQfF8oBnykLTaGhRV4ELzShbkcEFo9H2Y/r1ZXd3vv4wFC6V9OaYN7LFlgTl2z+7D daXoNTxmCSJoKhWWWtRGoXOx9CWV6Je+7uIHl0skUmmH0Zf88w/16XBKc1xh18r5jExpdaO4U8lI 00Oaqb+x7ZBYs2LAjzE= )`
	RRSIG=42456 and DNSKEY=42456 verifies the A RRset

sba.gov

No response from sba.gov nameservers

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test sba.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: