DNSSEC Debugger - welcome.oda.sas.com

Domain Name:

Time: 2024-05-18 09:38:26 UTC

Analyzing DNSSEC problems for welcome.oda.sas.com

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 865 octets ;; HEADER SECTION ;; id = 54004 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to e.root-servers.net for welcome.oda.sas.com/A
	Received 1179 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 1179 octets ;; HEADER SECTION ;; id = 22516 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; welcome.oda.sas.com. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) com. 172800 IN NS a.gtld-servers.net. com. 172800 IN NS b.gtld-servers.net. com. 172800 IN NS c.gtld-servers.net. com. 172800 IN NS d.gtld-servers.net. com. 172800 IN NS e.gtld-servers.net. com. 172800 IN NS f.gtld-servers.net. com. 172800 IN NS g.gtld-servers.net. com. 172800 IN NS h.gtld-servers.net. com. 172800 IN NS i.gtld-servers.net. com. 172800 IN NS j.gtld-servers.net. com. 172800 IN NS k.gtld-servers.net. com. 172800 IN NS l.gtld-servers.net. com. 172800 IN NS m.gtld-servers.net. com. 86400 IN DS ( 19718 13 2 8acbb0cd28f41250a80a491389424d341522d946b0da0c0291f2d3d771d7805a ) com. 86400 IN RRSIG ( DS 8 1 86400 20240531050000 20240518040000 5613 . Bvol+UrCTP+RQWLSRrLXY9HwARC/aLsGTq24dmGBuy1g3T89SCJEk9KJ3Ut0LfT9366o+CzAFkAM X2RrJJISqxRgaAq7vgh/W6ZLPV2ad+CS62Lj/i8r1T1HHM4WROiCINTXd9mzzOVzGsuwyBTNgLLm +cM9VdZOJq0x6Q0uhZtfCMUI6beS6Oq9f2XW/nLetHoVAWNHuQibfZCs5h2oTHPXHKk2OHnVEpTQ dzR7y8KKNfB7GkGMvFeJAczDXNkF8yjIOcbdepFSTSeakDouVGOcJzBFkWLI5gV6C1391TV4OQkD uMvXvlLJIILYMkOvXtTAhUyZ5IwMBP7X43Eczg== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 m.gtld-servers.net. 172800 IN A 192.55.83.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; { "EDNS-VERSION": 0 }
	Query to i.root-servers.net for com/DNSKEY
	Received 1163 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 1163 octets ;; HEADER SECTION ;; id = 50151 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; com. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) com. 172800 IN NS h.gtld-servers.net. com. 172800 IN NS d.gtld-servers.net. com. 172800 IN NS k.gtld-servers.net. com. 172800 IN NS f.gtld-servers.net. com. 172800 IN NS m.gtld-servers.net. com. 172800 IN NS l.gtld-servers.net. com. 172800 IN NS j.gtld-servers.net. com. 172800 IN NS g.gtld-servers.net. com. 172800 IN NS c.gtld-servers.net. com. 172800 IN NS b.gtld-servers.net. com. 172800 IN NS e.gtld-servers.net. com. 172800 IN NS a.gtld-servers.net. com. 172800 IN NS i.gtld-servers.net. com. 86400 IN DS ( 19718 13 2 8acbb0cd28f41250a80a491389424d341522d946b0da0c0291f2d3d771d7805a ) com. 86400 IN RRSIG ( DS 8 1 86400 20240531050000 20240518040000 5613 . Bvol+UrCTP+RQWLSRrLXY9HwARC/aLsGTq24dmGBuy1g3T89SCJEk9KJ3Ut0LfT9366o+CzAFkAM X2RrJJISqxRgaAq7vgh/W6ZLPV2ad+CS62Lj/i8r1T1HHM4WROiCINTXd9mzzOVzGsuwyBTNgLLm +cM9VdZOJq0x6Q0uhZtfCMUI6beS6Oq9f2XW/nLetHoVAWNHuQibfZCs5h2oTHPXHKk2OHnVEpTQ dzR7y8KKNfB7GkGMvFeJAczDXNkF8yjIOcbdepFSTSeakDouVGOcJzBFkWLI5gV6C1391TV4OQkD uMvXvlLJIILYMkOvXtTAhUyZ5IwMBP7X43Eczg== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 a.gtld-servers.net. 172800 IN A 192.5.6.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 ;; { "EDNS-VERSION": 0 }
	Found child zone com

com

	Checking DS between . and com
	Query to d.root-servers.net for com/DS
	Received 367 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 367 octets ;; HEADER SECTION ;; id = 11728 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; com. IN DS ;; ANSWER SECTION (2 records) com. 86400 IN DS ( 19718 13 2 8acbb0cd28f41250a80a491389424d341522d946b0da0c0291f2d3d771d7805a ) com. 86400 IN RRSIG ( DS 8 1 86400 20240531050000 20240518040000 5613 . Bvol+UrCTP+RQWLSRrLXY9HwARC/aLsGTq24dmGBuy1g3T89SCJEk9KJ3Ut0LfT9366o+CzAFkAM X2RrJJISqxRgaAq7vgh/W6ZLPV2ad+CS62Lj/i8r1T1HHM4WROiCINTXd9mzzOVzGsuwyBTNgLLm +cM9VdZOJq0x6Q0uhZtfCMUI6beS6Oq9f2XW/nLetHoVAWNHuQibfZCs5h2oTHPXHKk2OHnVEpTQ dzR7y8KKNfB7GkGMvFeJAczDXNkF8yjIOcbdepFSTSeakDouVGOcJzBFkWLI5gV6C1391TV4OQkD uMvXvlLJIILYMkOvXtTAhUyZ5IwMBP7X43Eczg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for com in the . zone
	DS=19718/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`com. 86400 IN RRSIG ( DS 8 1 86400 20240531050000 20240518040000 5613 . Bvol+UrCTP+RQWLSRrLXY9HwARC/aLsGTq24dmGBuy1g3T89SCJEk9KJ3Ut0LfT9366o+CzAFkAM X2RrJJISqxRgaAq7vgh/W6ZLPV2ad+CS62Lj/i8r1T1HHM4WROiCINTXd9mzzOVzGsuwyBTNgLLm +cM9VdZOJq0x6Q0uhZtfCMUI6beS6Oq9f2XW/nLetHoVAWNHuQibfZCs5h2oTHPXHKk2OHnVEpTQ dzR7y8KKNfB7GkGMvFeJAczDXNkF8yjIOcbdepFSTSeakDouVGOcJzBFkWLI5gV6C1391TV4OQkD uMvXvlLJIILYMkOvXtTAhUyZ5IwMBP7X43Eczg== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=19718/SHA-256 is now in the chain-of-trust
	`com. 86400 IN DS ( 19718 13 2 8acbb0cd28f41250a80a491389424d341522d946b0da0c0291f2d3d771d7805a )`
	Query to i.gtld-servers.net for com/DNSKEY
	Received 291 bytes from 192.43.172.30
	;; Response received from [192.43.172.30] 291 octets ;; HEADER SECTION ;; id = 31899 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; com. IN DNSKEY ;; ANSWER SECTION (3 records) com. 86400 IN DNSKEY ( 257 3 13 tx8EZRAd2+K/DJRV0S+hbBzaRPS/G6JVNBitHzqpsGlz8huE61Ms9ANe6NSDLKJtiTBqfTJWDAyw Ep1FCsEINQ== ) ; Key ID = 19718 com. 86400 IN DNSKEY ( 256 3 13 cCRwZIITlPXwDm0yKpGVYSmWLL4OpEHxA7+Rt3jS0W1N4EMOaF8doSzrJuM7aDbgAR7jtQ9SNCvY ZCH2xSyfaQ== ) ; Key ID = 956 com. 86400 IN RRSIG ( DNSKEY 13 1 86400 20240601140235 20240517135735 19718 com. 3xQE/PGVd6/fhBGV2swH4FDArm3AdolfjBpLicfLAsTXZ6JvqclPaGsZxJuA78TUI+xeal1lT6hR WmRKA4Odrg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for com
	`com. 86400 IN DNSKEY ( 257 3 13 tx8EZRAd2+K/DJRV0S+hbBzaRPS/G6JVNBitHzqpsGlz8huE61Ms9ANe6NSDLKJtiTBqfTJWDAyw Ep1FCsEINQ== ) ; Key ID = 19718`
	`com. 86400 IN DNSKEY ( 256 3 13 cCRwZIITlPXwDm0yKpGVYSmWLL4OpEHxA7+Rt3jS0W1N4EMOaF8doSzrJuM7aDbgAR7jtQ9SNCvY ZCH2xSyfaQ== ) ; Key ID = 956`
	DNSKEY=19718/SEP is now in the chain-of-trust
	DS=19718/SHA-256 verifies DNSKEY=19718/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`com. 86400 IN RRSIG ( DNSKEY 13 1 86400 20240601140235 20240517135735 19718 com. 3xQE/PGVd6/fhBGV2swH4FDArm3AdolfjBpLicfLAsTXZ6JvqclPaGsZxJuA78TUI+xeal1lT6hR WmRKA4Odrg== )`
	RRSIG=19718 and DNSKEY=19718/SEP verifies the DNSKEY RRset
	DNSKEY=956 is now in the chain-of-trust
	Query to h.gtld-servers.net for welcome.oda.sas.com/A
	Received 480 bytes from 192.54.112.30
	;; Response received from [192.54.112.30] 480 octets ;; HEADER SECTION ;; id = 51155 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 7 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; welcome.oda.sas.com. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) sas.com. 172800 IN NS extdns01.na.sas.com. sas.com. 172800 IN NS extdns02.na.sas.com. sas.com. 172800 IN NS extdns03.na.sas.com. sas.com. 172800 IN NS extdns04.na.sas.com. sas.com. 172800 IN NS extdns05.na.sas.com. sas.com. 172800 IN NS extdns06.na.sas.com. sas.com. 86400 IN DS ( 42362 13 2 657954fa2806a8b8a2d1d40a3da52109f3e43b32cf317126c12710413d52f3c7 ) sas.com. 86400 IN DS ( 17286 13 2 4b37733bf097dc4c93ea38490d56cbcb9e6019e9e883dbbbb386f09a5a167396 ) sas.com. 86400 IN RRSIG ( DS 13 2 86400 20240522063146 20240515052146 956 com. 8R3osH3KqLL0M4jQ5M3PbqItjQEsm8ouSnmCbpgtmplD7dLwUdaFi9PWEg9XSYULiSe3Jpdb8iAi fFceVCU3yQ== ) ;; ADDITIONAL SECTION (7 records) extdns01.na.sas.com. 172800 IN A 3.33.177.68 extdns02.na.sas.com. 172800 IN A 40.120.32.101 extdns03.na.sas.com. 172800 IN A 15.197.178.251 extdns04.na.sas.com. 172800 IN A 3.33.177.68 extdns05.na.sas.com. 172800 IN A 40.120.32.101 extdns06.na.sas.com. 172800 IN A 15.197.178.251 ;; { "EDNS-VERSION": 0 }
	Query to i.gtld-servers.net for sas.com/DNSKEY
	Received 468 bytes from 192.43.172.30
	;; Response received from [192.43.172.30] 468 octets ;; HEADER SECTION ;; id = 48158 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 7 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sas.com. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) sas.com. 172800 IN NS extdns01.na.sas.com. sas.com. 172800 IN NS extdns02.na.sas.com. sas.com. 172800 IN NS extdns03.na.sas.com. sas.com. 172800 IN NS extdns04.na.sas.com. sas.com. 172800 IN NS extdns05.na.sas.com. sas.com. 172800 IN NS extdns06.na.sas.com. sas.com. 86400 IN DS ( 42362 13 2 657954fa2806a8b8a2d1d40a3da52109f3e43b32cf317126c12710413d52f3c7 ) sas.com. 86400 IN DS ( 17286 13 2 4b37733bf097dc4c93ea38490d56cbcb9e6019e9e883dbbbb386f09a5a167396 ) sas.com. 86400 IN RRSIG ( DS 13 2 86400 20240522063146 20240515052146 956 com. 8R3osH3KqLL0M4jQ5M3PbqItjQEsm8ouSnmCbpgtmplD7dLwUdaFi9PWEg9XSYULiSe3Jpdb8iAi fFceVCU3yQ== ) ;; ADDITIONAL SECTION (7 records) extdns01.na.sas.com. 172800 IN A 3.33.177.68 extdns02.na.sas.com. 172800 IN A 40.120.32.101 extdns03.na.sas.com. 172800 IN A 15.197.178.251 extdns04.na.sas.com. 172800 IN A 3.33.177.68 extdns05.na.sas.com. 172800 IN A 40.120.32.101 extdns06.na.sas.com. 172800 IN A 15.197.178.251 ;; { "EDNS-VERSION": 0 }
	Found child zone sas.com

sas.com

	Checking DS between com and sas.com
	Query to j.gtld-servers.net for sas.com/DS
	Received 1126 bytes from 192.48.79.30
	;; Response received from [192.48.79.30] 1126 octets ;; HEADER SECTION ;; id = 52944 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 14 arcount = 27 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sas.com. IN DS ;; ANSWER SECTION (3 records) sas.com. 86400 IN DS ( 42362 13 2 657954fa2806a8b8a2d1d40a3da52109f3e43b32cf317126c12710413d52f3c7 ) sas.com. 86400 IN DS ( 17286 13 2 4b37733bf097dc4c93ea38490d56cbcb9e6019e9e883dbbbb386f09a5a167396 ) sas.com. 86400 IN RRSIG ( DS 13 2 86400 20240522063146 20240515052146 956 com. 8R3osH3KqLL0M4jQ5M3PbqItjQEsm8ouSnmCbpgtmplD7dLwUdaFi9PWEg9XSYULiSe3Jpdb8iAi fFceVCU3yQ== ) ;; AUTHORITY SECTION (14 records) com. 172800 IN NS e.gtld-servers.net. com. 172800 IN NS b.gtld-servers.net. com. 172800 IN NS h.gtld-servers.net. com. 172800 IN NS d.gtld-servers.net. com. 172800 IN NS k.gtld-servers.net. com. 172800 IN NS a.gtld-servers.net. com. 172800 IN NS j.gtld-servers.net. com. 172800 IN NS m.gtld-servers.net. com. 172800 IN NS l.gtld-servers.net. com. 172800 IN NS g.gtld-servers.net. com. 172800 IN NS c.gtld-servers.net. com. 172800 IN NS f.gtld-servers.net. com. 172800 IN NS i.gtld-servers.net. com. 172800 IN RRSIG ( NS 13 1 172800 20240525042453 20240518031453 956 com. c9BoTeKS8CMTWAx1gP2e7LsXlEdA4iPahD5qOjiuJLRHsKOAVrotuafFCtGGYSKdZBoh/Rd1903+ IMXeY13IbQ== ) ;; ADDITIONAL SECTION (27 records) e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for sas.com in the com zone
	DS=42362/SHA-256 has algorithm ECDSAP256SHA256
	DS=17286/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`sas.com. 86400 IN RRSIG ( DS 13 2 86400 20240522063146 20240515052146 956 com. 8R3osH3KqLL0M4jQ5M3PbqItjQEsm8ouSnmCbpgtmplD7dLwUdaFi9PWEg9XSYULiSe3Jpdb8iAi fFceVCU3yQ== )`
	RRSIG=956 and DNSKEY=956 verifies the DS RRset
	DS=42362/SHA-256 is now in the chain-of-trust
	DS=17286/SHA-256 is now in the chain-of-trust
	`sas.com. 86400 IN DS ( 42362 13 2 657954fa2806a8b8a2d1d40a3da52109f3e43b32cf317126c12710413d52f3c7 )`
	`sas.com. 86400 IN DS ( 17286 13 2 4b37733bf097dc4c93ea38490d56cbcb9e6019e9e883dbbbb386f09a5a167396 )`
	Query to extdns04.na.sas.com for sas.com/DNSKEY
	Received 539 bytes from 3.33.177.68
	;; Response received from [3.33.177.68] 539 octets ;; HEADER SECTION ;; id = 2788 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sas.com. IN DNSKEY ;; ANSWER SECTION (6 records) sas.com. 3600 IN DNSKEY ( 257 3 13 1R2cle92f4iJeXnK1A8QanobwlZySb7zBh0W+1vip2wNTaNsuDrGJtGH8whJhGpaGoM/lMNv28j3 ltT2hIlY8w== ) ; Key ID = 42362 sas.com. 3600 IN DNSKEY ( 256 3 13 Cl0gekUXt68E6VtaeIqyAFgYHPk4Iv05g4GoXh7t9G4zCttfXfdgEI/TlFjpOzy4TQLjFEsvwAW1 eLQxGHXBvw== ) ; Key ID = 13793 sas.com. 3600 IN DNSKEY ( 256 3 13 ZUuGj1/m9eHaOCS6/C0+3oRFVhmfF+hIAaSVbkLB0S7KAhKzPCrU5ZUbDPolbjjmJ/nVhLmt6llK nO7ycVWrsw== ) ; Key ID = 29375 sas.com. 3600 IN DNSKEY ( 257 3 13 Iwf5C/C01N9mYMcvAkPJIvvH3G7mZmohUvCuk6zh5Glt+sP0JTGgzOgE3TaNNJ+DhLvV4Kyz2ISf 30+WxzAo7w== ) ; Key ID = 17286 sas.com. 3600 IN DNSKEY ( 256 3 13 NDga6JfUnETBY2nSW++s1bB80zsz1Hqwvc/Ed1tPZUq3yASvfjFKlXvnGlTApoid/HpCaHw21Gm2 UU4P75Xwgw== ) ; Key ID = 2333 sas.com. 3600 IN RRSIG ( DNSKEY 13 2 3600 20240530131113 20240430121114 42362 sas.com. 3dW0W7u6XPjA9LzMx5QhdfT+Voqxb//k7WiDQMplmPup/ajMzjnyMUDbVmFhDhdyNMTtmrMaaSVp FNQ0JMSeCA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 5 DNSKEY records for sas.com
	`sas.com. 3600 IN DNSKEY ( 257 3 13 1R2cle92f4iJeXnK1A8QanobwlZySb7zBh0W+1vip2wNTaNsuDrGJtGH8whJhGpaGoM/lMNv28j3 ltT2hIlY8w== ) ; Key ID = 42362`
	`sas.com. 3600 IN DNSKEY ( 256 3 13 Cl0gekUXt68E6VtaeIqyAFgYHPk4Iv05g4GoXh7t9G4zCttfXfdgEI/TlFjpOzy4TQLjFEsvwAW1 eLQxGHXBvw== ) ; Key ID = 13793`
	`sas.com. 3600 IN DNSKEY ( 256 3 13 ZUuGj1/m9eHaOCS6/C0+3oRFVhmfF+hIAaSVbkLB0S7KAhKzPCrU5ZUbDPolbjjmJ/nVhLmt6llK nO7ycVWrsw== ) ; Key ID = 29375`
	`sas.com. 3600 IN DNSKEY ( 257 3 13 Iwf5C/C01N9mYMcvAkPJIvvH3G7mZmohUvCuk6zh5Glt+sP0JTGgzOgE3TaNNJ+DhLvV4Kyz2ISf 30+WxzAo7w== ) ; Key ID = 17286`
	`sas.com. 3600 IN DNSKEY ( 256 3 13 NDga6JfUnETBY2nSW++s1bB80zsz1Hqwvc/Ed1tPZUq3yASvfjFKlXvnGlTApoid/HpCaHw21Gm2 UU4P75Xwgw== ) ; Key ID = 2333`
	DNSKEY=42362/SEP is now in the chain-of-trust
	DS=42362/SHA-256 verifies DNSKEY=42362/SEP
	DNSKEY=17286/SEP is now in the chain-of-trust
	DS=17286/SHA-256 verifies DNSKEY=17286/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`sas.com. 3600 IN RRSIG ( DNSKEY 13 2 3600 20240530131113 20240430121114 42362 sas.com. 3dW0W7u6XPjA9LzMx5QhdfT+Voqxb//k7WiDQMplmPup/ajMzjnyMUDbVmFhDhdyNMTtmrMaaSVp FNQ0JMSeCA== )`
	RRSIG=42362 and DNSKEY=42362/SEP verifies the DNSKEY RRset
	DNSKEY=13793 is now in the chain-of-trust
	DNSKEY=29375 is now in the chain-of-trust
	DNSKEY=2333 is now in the chain-of-trust
	Query to extdns04.na.sas.com for welcome.oda.sas.com/A
	extdns04.na.sas.com returns SERVFAIL for welcome.oda.sas.com/A
	Query to extdns03.na.sas.com for welcome.oda.sas.com/A
	Received 81 bytes from 15.197.178.251
	;; Response received from [15.197.178.251] 81 octets ;; HEADER SECTION ;; id = 47358 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; welcome.oda.sas.com. IN A ;; ANSWER SECTION (1 record) welcome.oda.sas.com. 3600 IN CNAME welcome.glb.sas.com. ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	extdns03.na.sas.com is authoritative for welcome.oda.sas.com
	Query to extdns02.na.sas.com for oda.sas.com/DNSKEY
	Received 112 bytes from 40.120.32.101
	;; Response received from [40.120.32.101] 112 octets ;; HEADER SECTION ;; id = 30241 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; oda.sas.com. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) oda.sas.com. 600 IN SOA ( dns1cxxRb321nc0.net.sas.com. dnsadmin.sas.com. 699 ;serial 1800 ;refresh 300 ;retry 604800 ;expire 600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone oda.sas.com
	Attempting to learn nameservers for oda.sas.com
	Query to extdns05.na.sas.com for oda.sas.com/NS
	Received 188 bytes from 40.120.32.101
	;; Response received from [40.120.32.101] 188 octets ;; HEADER SECTION ;; id = 46678 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; oda.sas.com. IN NS ;; ANSWER SECTION (6 records) oda.sas.com. 3600 IN NS extdns01.na.sas.com. oda.sas.com. 3600 IN NS extdns02.na.sas.com. oda.sas.com. 3600 IN NS extdns03.na.sas.com. oda.sas.com. 3600 IN NS extdns04.na.sas.com. oda.sas.com. 3600 IN NS extdns05.na.sas.com. oda.sas.com. 3600 IN NS extdns06.na.sas.com. ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found oda.sas.com nameservers: extdns01.na.sas.com, extdns02.na.sas.com, extdns03.na.sas.com, extdns04.na.sas.com, extdns05.na.sas.com, extdns06.na.sas.com

oda.sas.com

	Checking DS between sas.com and oda.sas.com
	Query to extdns05.na.sas.com for oda.sas.com/DS
	Received 400 bytes from 40.120.32.101
	;; Response received from [40.120.32.101] 400 octets ;; HEADER SECTION ;; id = 9608 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; oda.sas.com. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) sas.com. 600 IN SOA ( dns3axxD0101nc0.net.sas.com. dnsadmin.sas.com. 2077521377 ;serial 1800 ;refresh 300 ;retry 604800 ;expire 600 ;minimum ) sas.com. 600 IN RRSIG ( SOA 13 2 3600 20240617093551 20240518083551 29375 sas.com. IbUIVGcG8wmir9rI6rU/akCke9TVuZ9IVvr57W8ITN7Sg5/A7xQfP+iFrfl3F8EA7620jOgI7Xz6 nttVO/8ZOw== ) O0Q2O0AAM24IH4DHQC815FCKHML862H5.sas.com. 600 IN NSEC3 ( 1 0 100 c5295cb221b6e060 o0q4n0mrsk4mtc5dt1qcg91pkqbukd2q NS ) O0Q2O0AAM24IH4DHQC815FCKHML862H5.sas.com. 600 IN RRSIG ( NSEC3 13 3 600 20240527211403 20240427210634 13793 sas.com. axPMR8JI+6meseS0zhGDWbZQWGxd+S4k/WsFu7fYCdZKYBY6O8dyauQRmj8ei97RSO8pxm5f9eKb 3Mn1yhvmNw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for oda.sas.com in the sas.com zone
	Query to extdns01.na.sas.com for oda.sas.com/DNSKEY
	Received 112 bytes from 3.33.177.68
	;; Response received from [3.33.177.68] 112 octets ;; HEADER SECTION ;; id = 46868 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; oda.sas.com. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) oda.sas.com. 600 IN SOA ( dns1cxxRb321nc0.net.sas.com. dnsadmin.sas.com. 699 ;serial 1800 ;refresh 300 ;retry 604800 ;expire 600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to extdns01.na.sas.com for welcome.oda.sas.com/A
	Received 81 bytes from 3.33.177.68
	;; Response received from [3.33.177.68] 81 octets ;; HEADER SECTION ;; id = 3536 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; welcome.oda.sas.com. IN A ;; ANSWER SECTION (1 record) welcome.oda.sas.com. 3600 IN CNAME welcome.glb.sas.com. ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	extdns01.na.sas.com is authoritative for welcome.oda.sas.com
	Query to extdns01.na.sas.com for welcome.oda.sas.com/DNSKEY
	extdns01.na.sas.com returns SERVFAIL for welcome.oda.sas.com/DNSKEY
	Query to extdns03.na.sas.com for welcome.oda.sas.com/DNSKEY
	extdns03.na.sas.com returns SERVFAIL for welcome.oda.sas.com/DNSKEY
	Query to extdns05.na.sas.com for welcome.oda.sas.com/DNSKEY
	Received 81 bytes from 40.120.32.101
	;; Response received from [40.120.32.101] 81 octets ;; HEADER SECTION ;; id = 34968 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; welcome.oda.sas.com. IN DNSKEY ;; ANSWER SECTION (1 record) welcome.oda.sas.com. 3600 IN CNAME welcome.glb.sas.com. ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	welcome.oda.sas.com is a CNAME to welcome.glb.sas.com
	No RRSIGs found

sas.com

	Query to extdns05.na.sas.com for welcome.glb.sas.com/A
	Received 341 bytes from 40.120.32.101
	;; Response received from [40.120.32.101] 341 octets ;; HEADER SECTION ;; id = 59722 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; welcome.glb.sas.com. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) glb.sas.com. 3600 IN NS l03EXTxa102tx17.net.sas.com. glb.sas.com. 3600 IN NS l13e149dac05nc0.net.sas.com. glb.sas.com. 3600 IN NS l13e149rcm36nc0.net.sas.com. 5VU3A5OADN24A8F8A6FR78VG23Q5JHBU.sas.com. 600 IN NSEC3 ( 1 0 100 c5295cb221b6e060 5vu9v4je6m55dhu5sism7cllanauf1m2 NS ) 5VU3A5OADN24A8F8A6FR78VG23Q5JHBU.sas.com. 600 IN RRSIG ( NSEC3 13 3 600 20240609134217 20240510131100 29375 sas.com. 4sP1rV/iRloN/a0WQyZge2issJK5T8jYXgV0G74+9gsBl+v6Szc7HSmybZPTU5Sm/HUoFIHk4a/s tiAzSZiH+g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to extdns05.na.sas.com for glb.sas.com/DNSKEY
	Received 326 bytes from 40.120.32.101
	;; Response received from [40.120.32.101] 326 octets ;; HEADER SECTION ;; id = 5548 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; glb.sas.com. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) glb.sas.com. 3600 IN NS l03EXTxa102tx17.net.sas.com. glb.sas.com. 3600 IN NS l13e149dac05nc0.net.sas.com. glb.sas.com. 3600 IN NS l13e149rcm36nc0.net.sas.com. 5VU3A5OADN24A8F8A6FR78VG23Q5JHBU.sas.com. 600 IN NSEC3 ( 1 0 100 c5295cb221b6e060 5vu9v4je6m55dhu5sism7cllanauf1m2 NS ) 5VU3A5OADN24A8F8A6FR78VG23Q5JHBU.sas.com. 600 IN RRSIG ( NSEC3 13 3 600 20240609134217 20240510131100 29375 sas.com. 4sP1rV/iRloN/a0WQyZge2issJK5T8jYXgV0G74+9gsBl+v6Szc7HSmybZPTU5Sm/HUoFIHk4a/s tiAzSZiH+g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone glb.sas.com

glb.sas.com

	Checking DS between sas.com and glb.sas.com
	Query to extdns04.na.sas.com for glb.sas.com/DS
	extdns04.na.sas.com returns SERVFAIL for glb.sas.com/DS
	Query to extdns02.na.sas.com for glb.sas.com/DS
	Received 400 bytes from 40.120.32.101
	;; Response received from [40.120.32.101] 400 octets ;; HEADER SECTION ;; id = 57804 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; glb.sas.com. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) sas.com. 600 IN SOA ( dns3axxD0101nc0.net.sas.com. dnsadmin.sas.com. 2077521377 ;serial 1800 ;refresh 300 ;retry 604800 ;expire 600 ;minimum ) sas.com. 600 IN RRSIG ( SOA 13 2 3600 20240617093551 20240518083551 29375 sas.com. IbUIVGcG8wmir9rI6rU/akCke9TVuZ9IVvr57W8ITN7Sg5/A7xQfP+iFrfl3F8EA7620jOgI7Xz6 nttVO/8ZOw== ) 5VU3A5OADN24A8F8A6FR78VG23Q5JHBU.sas.com. 600 IN NSEC3 ( 1 0 100 c5295cb221b6e060 5vu9v4je6m55dhu5sism7cllanauf1m2 NS ) 5VU3A5OADN24A8F8A6FR78VG23Q5JHBU.sas.com. 600 IN RRSIG ( NSEC3 13 3 600 20240609134217 20240510131100 29375 sas.com. 4sP1rV/iRloN/a0WQyZge2issJK5T8jYXgV0G74+9gsBl+v6Szc7HSmybZPTU5Sm/HUoFIHk4a/s tiAzSZiH+g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for glb.sas.com in the sas.com zone
	Query to l13e149rcm36nc0.net.sas.com for glb.sas.com/DNSKEY
	Received 123 bytes from 149.173.0.12
	;; Response received from [149.173.0.12] 123 octets ;; HEADER SECTION ;; id = 36228 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; glb.sas.com. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) glb.sas.com. 30 IN SOA ( l13e149rcm36nc0.net.sas.com. hostmaster.l03e000rec48nc0.net.sas.com. 2024031119 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to l13e149rcm36nc0.net.sas.com for welcome.glb.sas.com/A
	Received 64 bytes from 149.173.0.12
	;; Response received from [149.173.0.12] 64 octets ;; HEADER SECTION ;; id = 18027 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; welcome.glb.sas.com. IN A ;; ANSWER SECTION (1 record) welcome.glb.sas.com. 30 IN A 35.81.92.153 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	l13e149rcm36nc0.net.sas.com is authoritative for welcome.glb.sas.com
	Query to l03EXTxa102tx17.net.sas.com for welcome.glb.sas.com/DNSKEY
	Received 131 bytes from 130.96.24.9
	;; Response received from [130.96.24.9] 131 octets ;; HEADER SECTION ;; id = 44530 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; welcome.glb.sas.com. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) glb.sas.com. 30 IN SOA ( l13e149rcm36nc0.net.sas.com. hostmaster.l03e000rec48nc0.net.sas.com. 2024031119 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to l03EXTxa102tx17.net.sas.com for glb.sas.com/SOA
	Received 229 bytes from 130.96.24.9
	;; Response received from [130.96.24.9] 229 octets ;; HEADER SECTION ;; id = 8817 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; glb.sas.com. IN SOA ;; ANSWER SECTION (1 record) glb.sas.com. 30 IN SOA ( l13e149rcm36nc0.net.sas.com. hostmaster.l03e000rec48nc0.net.sas.com. 2024031119 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (3 records) glb.sas.com. 30 IN NS l13e149dac05nc0.net.sas.com. glb.sas.com. 30 IN NS l13e149rcm36nc0.net.sas.com. glb.sas.com. 30 IN NS l03extxa102tx17.net.sas.com. ;; ADDITIONAL SECTION (3 records) l13e149rcm36nc0.net.sas.com. 30 IN A 149.173.0.12 l13e149dac05nc0.net.sas.com. 30 IN A 149.173.0.13 ;; { "EDNS-VERSION": 0 }
	Query to l13e149dac05nc0.net.sas.com for glb.sas.com/SOA
	Received 229 bytes from 149.173.0.13
	;; Response received from [149.173.0.13] 229 octets ;; HEADER SECTION ;; id = 52234 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; glb.sas.com. IN SOA ;; ANSWER SECTION (1 record) glb.sas.com. 30 IN SOA ( l13e149rcm36nc0.net.sas.com. hostmaster.l03e000rec48nc0.net.sas.com. 2024031119 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (3 records) glb.sas.com. 30 IN NS l03extxa102tx17.net.sas.com. glb.sas.com. 30 IN NS l13e149rcm36nc0.net.sas.com. glb.sas.com. 30 IN NS l13e149dac05nc0.net.sas.com. ;; ADDITIONAL SECTION (3 records) l13e149rcm36nc0.net.sas.com. 30 IN A 149.173.0.12 l13e149dac05nc0.net.sas.com. 30 IN A 149.173.0.13 ;; { "EDNS-VERSION": 0 }
	Query to l13e149rcm36nc0.net.sas.com for welcome.glb.sas.com/A
	Received 64 bytes from 149.173.0.12
	;; Response received from [149.173.0.12] 64 octets ;; HEADER SECTION ;; id = 8933 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; welcome.glb.sas.com. IN A ;; ANSWER SECTION (1 record) welcome.glb.sas.com. 30 IN A 35.81.92.153 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	welcome.glb.sas.com A RR has value 35.81.92.153
	No RRSIGs found

glb.sas.com

	Query to l13e149dac05nc0.net.sas.com for welcome.glb.sas.com/A
	Received 64 bytes from 149.173.0.13
	;; Response received from [149.173.0.13] 64 octets ;; HEADER SECTION ;; id = 45428 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; welcome.glb.sas.com. IN A ;; ANSWER SECTION (1 record) welcome.glb.sas.com. 30 IN A 35.81.92.153 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	l13e149dac05nc0.net.sas.com is authoritative for welcome.glb.sas.com
	Query to l13e149dac05nc0.net.sas.com for welcome.glb.sas.com/DNSKEY
	Received 131 bytes from 149.173.0.13
	;; Response received from [149.173.0.13] 131 octets ;; HEADER SECTION ;; id = 2418 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; welcome.glb.sas.com. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) glb.sas.com. 30 IN SOA ( l13e149rcm36nc0.net.sas.com. hostmaster.l03e000rec48nc0.net.sas.com. 2024031119 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to l13e149dac05nc0.net.sas.com for welcome.glb.sas.com/A
	Received 64 bytes from 149.173.0.13
	;; Response received from [149.173.0.13] 64 octets ;; HEADER SECTION ;; id = 36537 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; welcome.glb.sas.com. IN A ;; ANSWER SECTION (1 record) welcome.glb.sas.com. 30 IN A 35.81.92.153 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	welcome.glb.sas.com A RR has value 35.81.92.153
	No RRSIGs found

glb.sas.com

	Query to l03EXTxa102tx17.net.sas.com for welcome.glb.sas.com/A
	Received 64 bytes from 130.96.24.9
	;; Response received from [130.96.24.9] 64 octets ;; HEADER SECTION ;; id = 41744 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; welcome.glb.sas.com. IN A ;; ANSWER SECTION (1 record) welcome.glb.sas.com. 30 IN A 35.81.92.153 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	l03EXTxa102tx17.net.sas.com is authoritative for welcome.glb.sas.com
	Query to l03EXTxa102tx17.net.sas.com for welcome.glb.sas.com/DNSKEY
	Received 131 bytes from 130.96.24.9
	;; Response received from [130.96.24.9] 131 octets ;; HEADER SECTION ;; id = 29191 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; welcome.glb.sas.com. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) glb.sas.com. 30 IN SOA ( l13e149rcm36nc0.net.sas.com. hostmaster.l03e000rec48nc0.net.sas.com. 2024031119 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to l03EXTxa102tx17.net.sas.com for welcome.glb.sas.com/A
	Received 64 bytes from 130.96.24.9
	;; Response received from [130.96.24.9] 64 octets ;; HEADER SECTION ;; id = 43884 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; welcome.glb.sas.com. IN A ;; ANSWER SECTION (1 record) welcome.glb.sas.com. 30 IN A 35.81.92.153 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	welcome.glb.sas.com A RR has value 35.81.92.153
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test welcome.oda.sas.com at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: