DNSSEC Analyzer - AHRQ.GOV

Domain Name:

Time: 2019-06-25 15:31:04 UTC, NTP stratum 4

Analyzing DNSSEC problems for AHRQ.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to l.root-servers.net for ./DNSKEY
	Received 1139 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (1139 bytes) ;; HEADER SECTION ;; id = 54522 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAcTQyaIe6nt3xSPOG2L/YfwBkOVTJN6mlnZ249O5Rtt3ZSRQHxQSW61AODYw6bvgxrrGq8ee OuenFjcSYgNAMcBYoEYYmKDW6e9EryW4ZaT/MCq+8Am06oR40xAA3fClOM6QjRcT85tP41Go946A icBGP8XOP/Aj1aI/oPRGzRnboUPUok/AzTNnW5npBU69+BuiIwYE7mQOiNBFePyvjQBdoiuYbmuD 3Py0IyjlBxzZUXbqLsRL9gYFkCqeTY29Ik7usuzMTa+JRSLz6KGS5RSJ7CTSMjZg8aNaUbN2dvGh akJPh92HnLvMA3TefFgbKJphFNPA3BWSKLZ02cRWXqM= ) ; Key ID = 59944 . 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190711000000 20190620000000 20326 . LeNUOIxGGe+xAKxr13YIXNqMAxVH7RuDXQyVclUuxA9aENp0+yYkeIL+/lkTteEhdHXNVZqYch8Q rvcsuCpDN2gKx5D5M04gKAjR5ywgvEdsZHr9DhjCZ3uvXKvbPsi614QpjYCxxvtq/ZZE6dhm59K3 N3T8Mhm5l36b6w+fR1F3Kc+eeJqy2ZjVxNe9CClE4Qy6q78Yu6rS1vZkuzG1l2AT9Gko72StWbds U2Ry9fBk+uCJOLxej37z5Rfi5EAzFcnfwQYryqCRt2go9PuD0/AulqG8wmTVz23tnwnaxowkYKxF H2yE0d7pDiFjvOyUHdGPXYwl/+GDmjrQsN6JPQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcTQyaIe6nt3xSPOG2L/YfwBkOVTJN6mlnZ249O5Rtt3ZSRQHxQSW61AODYw6bvgxrrGq8ee OuenFjcSYgNAMcBYoEYYmKDW6e9EryW4ZaT/MCq+8Am06oR40xAA3fClOM6QjRcT85tP41Go946A icBGP8XOP/Aj1aI/oPRGzRnboUPUok/AzTNnW5npBU69+BuiIwYE7mQOiNBFePyvjQBdoiuYbmuD 3Py0IyjlBxzZUXbqLsRL9gYFkCqeTY29Ik7usuzMTa+JRSLz6KGS5RSJ7CTSMjZg8aNaUbN2dvGh akJPh92HnLvMA3TefFgbKJphFNPA3BWSKLZ02cRWXqM= ) ; Key ID = 59944`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190711000000 20190620000000 20326 . LeNUOIxGGe+xAKxr13YIXNqMAxVH7RuDXQyVclUuxA9aENp0+yYkeIL+/lkTteEhdHXNVZqYch8Q rvcsuCpDN2gKx5D5M04gKAjR5ywgvEdsZHr9DhjCZ3uvXKvbPsi614QpjYCxxvtq/ZZE6dhm59K3 N3T8Mhm5l36b6w+fR1F3Kc+eeJqy2ZjVxNe9CClE4Qy6q78Yu6rS1vZkuzG1l2AT9Gko72StWbds U2Ry9fBk+uCJOLxej37z5Rfi5EAzFcnfwQYryqCRt2go9PuD0/AulqG8wmTVz23tnwnaxowkYKxF H2yE0d7pDiFjvOyUHdGPXYwl/+GDmjrQsN6JPQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=59944 is now in the chain-of-trust
	DNSKEY=25266 is now in the chain-of-trust
	Query to c.root-servers.net for AHRQ.GOV/A
	Received 666 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (666 bytes) ;; HEADER SECTION ;; id = 39807 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; AHRQ.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20190708050000 20190625040000 25266 . CIoziR0lzYtFhky0hKQtHwTeYJuT6oXrEGIUzZFB55zjdCvIc7g3CI3b7bPQm4HhszC3sc4YqPTj ZFEKU361fhW1HMJ8C9T5MlocFz3cvIAWEUeoOIQV2p/zv/0s8uj6uLS6Rk5FpHa4hjGNon1Mwucc REvXqdEnVxZse4PbL7PMH7Vhgf1HYTGccCcGAPsd+Wjf2j4JsxJvX5B7/MVOVsCto+p03gPQxhQD NjZ6y1T/3zcWn/bAPgW0N80KHUvAJh/JzEB/fwZDdxO4xh0x565qRswED5N07Y+gycKvb7IY8PQZ GSeQKP4TF7R30aPbvYG65RwT3PX86nE3oxyLUw== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to k.root-servers.net for GOV/DNSKEY
	Received 658 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (658 bytes) ;; HEADER SECTION ;; id = 24645 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20190708050000 20190625040000 25266 . CIoziR0lzYtFhky0hKQtHwTeYJuT6oXrEGIUzZFB55zjdCvIc7g3CI3b7bPQm4HhszC3sc4YqPTj ZFEKU361fhW1HMJ8C9T5MlocFz3cvIAWEUeoOIQV2p/zv/0s8uj6uLS6Rk5FpHa4hjGNon1Mwucc REvXqdEnVxZse4PbL7PMH7Vhgf1HYTGccCcGAPsd+Wjf2j4JsxJvX5B7/MVOVsCto+p03gPQxhQD NjZ6y1T/3zcWn/bAPgW0N80KHUvAJh/JzEB/fwZDdxO4xh0x565qRswED5N07Y+gycKvb7IY8PQZ GSeQKP4TF7R30aPbvYG65RwT3PX86nE3oxyLUw== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to j.root-servers.net for GOV/DS
	Error querying j.root-servers.net/2001:503:c27:0:0:0:2:30 for GOV/DS: 'IPv6 transport disabled'
	Received 403 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (403 bytes) ;; HEADER SECTION ;; id = 61841 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20190708050000 20190625040000 25266 . CIoziR0lzYtFhky0hKQtHwTeYJuT6oXrEGIUzZFB55zjdCvIc7g3CI3b7bPQm4HhszC3sc4YqPTj ZFEKU361fhW1HMJ8C9T5MlocFz3cvIAWEUeoOIQV2p/zv/0s8uj6uLS6Rk5FpHa4hjGNon1Mwucc REvXqdEnVxZse4PbL7PMH7Vhgf1HYTGccCcGAPsd+Wjf2j4JsxJvX5B7/MVOVsCto+p03gPQxhQD NjZ6y1T/3zcWn/bAPgW0N80KHUvAJh/JzEB/fwZDdxO4xh0x565qRswED5N07Y+gycKvb7IY8PQZ GSeQKP4TF7R30aPbvYG65RwT3PX86nE3oxyLUw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20190708050000 20190625040000 25266 . CIoziR0lzYtFhky0hKQtHwTeYJuT6oXrEGIUzZFB55zjdCvIc7g3CI3b7bPQm4HhszC3sc4YqPTj ZFEKU361fhW1HMJ8C9T5MlocFz3cvIAWEUeoOIQV2p/zv/0s8uj6uLS6Rk5FpHa4hjGNon1Mwucc REvXqdEnVxZse4PbL7PMH7Vhgf1HYTGccCcGAPsd+Wjf2j4JsxJvX5B7/MVOVsCto+p03gPQxhQD NjZ6y1T/3zcWn/bAPgW0N80KHUvAJh/JzEB/fwZDdxO4xh0x565qRswED5N07Y+gycKvb7IY8PQZ GSeQKP4TF7R30aPbvYG65RwT3PX86nE3oxyLUw== )`
	RRSIG=25266 and DNSKEY=25266 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to a.gov-servers.net for GOV/DNSKEY
	Error querying a.gov-servers.net/2001:500:4431:0:0:0:2:30 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 743 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (743 bytes) ;; HEADER SECTION ;; id = 24666 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AQPO0gfZTyKZiRSwF/XvW9ta+joX/SlCfvNcTsNT4t5edmGhhiRNf45246Z4L6Cx3n93FPHtW91n F+M1gCPyxewRyAM0/UVrqBwutdPQnR8vsQ/WzdsAk50loby/jGN7UAStU/FzllD2qIq4uJ8HcLZW Qth9JV8vKuqVYXgPfhx5lw== ) ; Key ID = 43583 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190701214731 20190616214231 7698 gov. gr3SMpnqXuv1bmrBjl6FAfUBvevP1IZX6nHz+ka815FjVHQX48JOHZv7lLJ8J1JMT2TxzbvUsdcU fE0JSvtMF6Dt97g4f4t4A3dtXGzDnsipCY2uOXa7ACncWiLjOjYiXxjUhsZjqS3epq0WQExuvUFU DTwTuZdx+qsU8b9gzzWjD8DDeE3Ri8utmMaMM8+5sxfqtBlqZmI9tjRJ6a4P2yV8RXWpZzlp6bRi yheZTE2RTru+NhrZ/LFtyC1M66lpS7r7T9iy6sDnbALVuo6kRfMy8PGL0mDbWitWO1Hi+NDEkaaQ hSSCo3Iv9oidW08kEV89hTlhH9Nh8oeo86bHog== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQPO0gfZTyKZiRSwF/XvW9ta+joX/SlCfvNcTsNT4t5edmGhhiRNf45246Z4L6Cx3n93FPHtW91n F+M1gCPyxewRyAM0/UVrqBwutdPQnR8vsQ/WzdsAk50loby/jGN7UAStU/FzllD2qIq4uJ8HcLZW Qth9JV8vKuqVYXgPfhx5lw== ) ; Key ID = 43583`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190701214731 20190616214231 7698 gov. gr3SMpnqXuv1bmrBjl6FAfUBvevP1IZX6nHz+ka815FjVHQX48JOHZv7lLJ8J1JMT2TxzbvUsdcU fE0JSvtMF6Dt97g4f4t4A3dtXGzDnsipCY2uOXa7ACncWiLjOjYiXxjUhsZjqS3epq0WQExuvUFU DTwTuZdx+qsU8b9gzzWjD8DDeE3Ri8utmMaMM8+5sxfqtBlqZmI9tjRJ6a4P2yV8RXWpZzlp6bRi yheZTE2RTru+NhrZ/LFtyC1M66lpS7r7T9iy6sDnbALVuo6kRfMy8PGL0mDbWitWO1Hi+NDEkaaQ hSSCo3Iv9oidW08kEV89hTlhH9Nh8oeo86bHog== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=43583 is now in the chain-of-trust
	Query to c.gov-servers.net for AHRQ.GOV/A
	Received 649 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (649 bytes) ;; HEADER SECTION ;; id = 20637 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; AHRQ.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) AHRQ.GOV. 86400 IN NS rh202ns2.355.dhhs.GOV. AHRQ.GOV. 86400 IN NS rh120ns2.368.dhhs.GOV. AHRQ.GOV. 86400 IN NS rh202ns1.355.dhhs.GOV. AHRQ.GOV. 86400 IN NS rh120ns1.368.dhhs.GOV. AHRQ.GOV. 3600 IN DS ( 19136 8 2 1eaca0e13ce0497794cebe538475b6a9dbf50e637e68025703a3570be285989a ) AHRQ.GOV. 3600 IN DS ( 56317 8 2 d8ccbf6a4ca3aa3104d976648fc76de58f39d15d8a9877b4528e756c697c5971 ) AHRQ.GOV. 3600 IN DS 19136 8 1 840c62193b0ff5052f404e8ceaf9352fbc8b5202 AHRQ.GOV. 3600 IN DS 56317 8 1 1b16b98ae72f221883256deee7787c6d44086326 AHRQ.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190702101007 20190625101007 43583 gov. RyDPhR42CffLfsI4Unoc/tkgt7MIZ0mqRZPGUlwdz4Qc6OoDqJyH5uPf+IzoJ8wF1emUm3yXhm3T n/PmDyH5jkdkx4ejL9LpR49YqaneHozXT0ZZxwXMWiqoXzLUoMAkxuEk6k9dnn0d4Ddkri8+M6f3 bPscIoFjUInSNltxWHo= ) ;; ADDITIONAL SECTION (9 records) rh202ns2.355.dhhs.GOV. 86400 IN A 158.74.30.99 rh202ns2.355.dhhs.GOV. 86400 IN AAAA 2607:f220:0:1::2b rh120ns2.368.dhhs.GOV. 86400 IN A 158.74.30.103 rh120ns2.368.dhhs.GOV. 86400 IN AAAA 2607:f220:0:1::2d rh202ns1.355.dhhs.GOV. 86400 IN A 158.74.30.98 rh202ns1.355.dhhs.GOV. 86400 IN AAAA 2607:f220:0:1::2a rh120ns1.368.dhhs.GOV. 86400 IN A 158.74.30.102 rh120ns1.368.dhhs.GOV. 86400 IN AAAA 2607:f220:0:1::2c ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.gov-servers.net for AHRQ.GOV/DNSKEY
	Received 649 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (649 bytes) ;; HEADER SECTION ;; id = 29232 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; AHRQ.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) AHRQ.GOV. 86400 IN NS rh202ns2.355.dhhs.GOV. AHRQ.GOV. 86400 IN NS rh120ns2.368.dhhs.GOV. AHRQ.GOV. 86400 IN NS rh202ns1.355.dhhs.GOV. AHRQ.GOV. 86400 IN NS rh120ns1.368.dhhs.GOV. AHRQ.GOV. 3600 IN DS ( 19136 8 2 1eaca0e13ce0497794cebe538475b6a9dbf50e637e68025703a3570be285989a ) AHRQ.GOV. 3600 IN DS ( 56317 8 2 d8ccbf6a4ca3aa3104d976648fc76de58f39d15d8a9877b4528e756c697c5971 ) AHRQ.GOV. 3600 IN DS 19136 8 1 840c62193b0ff5052f404e8ceaf9352fbc8b5202 AHRQ.GOV. 3600 IN DS 56317 8 1 1b16b98ae72f221883256deee7787c6d44086326 AHRQ.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190702101007 20190625101007 43583 gov. RyDPhR42CffLfsI4Unoc/tkgt7MIZ0mqRZPGUlwdz4Qc6OoDqJyH5uPf+IzoJ8wF1emUm3yXhm3T n/PmDyH5jkdkx4ejL9LpR49YqaneHozXT0ZZxwXMWiqoXzLUoMAkxuEk6k9dnn0d4Ddkri8+M6f3 bPscIoFjUInSNltxWHo= ) ;; ADDITIONAL SECTION (9 records) rh202ns2.355.dhhs.GOV. 86400 IN A 158.74.30.99 rh202ns2.355.dhhs.GOV. 86400 IN AAAA 2607:f220:0:1::2b rh120ns2.368.dhhs.GOV. 86400 IN A 158.74.30.103 rh120ns2.368.dhhs.GOV. 86400 IN AAAA 2607:f220:0:1::2d rh202ns1.355.dhhs.GOV. 86400 IN A 158.74.30.98 rh202ns1.355.dhhs.GOV. 86400 IN AAAA 2607:f220:0:1::2a rh120ns1.368.dhhs.GOV. 86400 IN A 158.74.30.102 rh120ns1.368.dhhs.GOV. 86400 IN AAAA 2607:f220:0:1::2c ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone AHRQ.GOV

AHRQ.GOV

	Checking DS between GOV and AHRQ.GOV
	Query to c.gov-servers.net for AHRQ.GOV/DS
	Error querying c.gov-servers.net/2620:74:28:0:0:0:2:30 for AHRQ.GOV/DS: 'IPv6 transport disabled'
	Received 368 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (368 bytes) ;; HEADER SECTION ;; id = 20062 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; AHRQ.GOV. IN DS ;; ANSWER SECTION (5 records) AHRQ.GOV. 3600 IN DS ( 19136 8 2 1eaca0e13ce0497794cebe538475b6a9dbf50e637e68025703a3570be285989a ) AHRQ.GOV. 3600 IN DS ( 56317 8 2 d8ccbf6a4ca3aa3104d976648fc76de58f39d15d8a9877b4528e756c697c5971 ) AHRQ.GOV. 3600 IN DS 19136 8 1 840c62193b0ff5052f404e8ceaf9352fbc8b5202 AHRQ.GOV. 3600 IN DS 56317 8 1 1b16b98ae72f221883256deee7787c6d44086326 AHRQ.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190702101007 20190625101007 43583 gov. RyDPhR42CffLfsI4Unoc/tkgt7MIZ0mqRZPGUlwdz4Qc6OoDqJyH5uPf+IzoJ8wF1emUm3yXhm3T n/PmDyH5jkdkx4ejL9LpR49YqaneHozXT0ZZxwXMWiqoXzLUoMAkxuEk6k9dnn0d4Ddkri8+M6f3 bPscIoFjUInSNltxWHo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for AHRQ.GOV in the GOV zone
	DS=19136/SHA-256 has algorithm RSASHA256
	DS=56317/SHA-256 has algorithm RSASHA256
	DS=19136/SHA-1 has algorithm RSASHA256
	DS=56317/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`AHRQ.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190702101007 20190625101007 43583 gov. RyDPhR42CffLfsI4Unoc/tkgt7MIZ0mqRZPGUlwdz4Qc6OoDqJyH5uPf+IzoJ8wF1emUm3yXhm3T n/PmDyH5jkdkx4ejL9LpR49YqaneHozXT0ZZxwXMWiqoXzLUoMAkxuEk6k9dnn0d4Ddkri8+M6f3 bPscIoFjUInSNltxWHo= )`
	RRSIG=43583 and DNSKEY=43583 verifies the DS RRset
	DS=19136/SHA-256 is now in the chain-of-trust
	DS=56317/SHA-256 is now in the chain-of-trust
	`AHRQ.GOV. 3600 IN DS ( 19136 8 2 1eaca0e13ce0497794cebe538475b6a9dbf50e637e68025703a3570be285989a )`
	`AHRQ.GOV. 3600 IN DS ( 56317 8 2 d8ccbf6a4ca3aa3104d976648fc76de58f39d15d8a9877b4528e756c697c5971 )`
	`AHRQ.GOV. 3600 IN DS 19136 8 1 840c62193b0ff5052f404e8ceaf9352fbc8b5202`
	`AHRQ.GOV. 3600 IN DS 56317 8 1 1b16b98ae72f221883256deee7787c6d44086326`
	Query to rh202ns2.355.dhhs.GOV for AHRQ.GOV/DNSKEY
	Received 1517 bytes from 158.74.30.99
	;; Answer received from 158.74.30.99 (1517 bytes) ;; HEADER SECTION ;; id = 12071 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 7 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; AHRQ.GOV. IN DNSKEY ;; ANSWER SECTION (7 records) AHRQ.GOV. 900 IN DNSKEY ( 257 3 8 AwEAAcwkjhCXZiWSvNzyw5yBOq5r8NKkDZaq4YmUPm1iQG08+/8IEOViOiVf0dDxidseQyMWi4N3 jWz4vv1fqi1ZtSvfloEz1P0/h4+MNVGivfgYqlD3jBhDLWSQZtyN43WkIJ6WJ+VwEtR/yTEKRqVb k1J116Y3rLXJvdUpP9ze8weG9BshfXgdvNu2tpQi1p1wDKvz+6nFN6raiFHOskS0qy/3lWMMKWPJ Ec1wXRO9I17YEzMxK9y5KpmvTdyHrzhactHt98teQdHqholBfV4rwT2SlkDr/h7bPmg5eOfUjRdU EjqB2VBnFQPpwpmEpyisON2eSfuutw/RiwIXyXV/VtU= ) ; Key ID = 19136 AHRQ.GOV. 900 IN DNSKEY ( 256 3 8 AwEAAYoJYJ7WKNnvqpwnmV+i3+ogpu9Duk4qYuM7HSBziLx4v0+NJjSmasZ5gQNZKVsCN1XRuLlt x//d/QRfaMMKnZtWQD+E/ca2UmwSVJSAqTwOxqJxwui9lK5oM1XxiWX4NpS+KoCAdRv61iXGhp3S l5k2MDKw11+Il60+7+0z2Otv ) ; Key ID = 5629 AHRQ.GOV. 900 IN DNSKEY ( 256 3 8 AwEAAcG332d8Kab1mf/+AhvYHQFVG+En0S3zVkXzeQtxZclq9R8Hk50yiblF6B2DKeFLgvI9ZCrt GnQwXUmXZwe2CZZUknxo0gzuVsHfJX/ZGQZBSGGBH7l+Hh4mYyUPXSv93/C8tEtqLJWwYLMO5uvO VTCRXCfzeR7R3cY2HyuHsGb/ ) ; Key ID = 6250 AHRQ.GOV. 900 IN DNSKEY ( 257 3 8 AwEAAW1Mq77+o6NQRqp21MuothYkfv6paf3ndlTXcHsWeefm3F5KWC0wt+laXO+F2B65vhR1M6zS F10nIX6eaV6uSycKRDZix8p5bdTf/6qkUlhDz1deJVkX/uUROPlf4tMKxDFLE3ILDf1qtE2B0HMU vyuIfeKhD+v9TfV2JiWP9ebXpRrOnhNZV1ZuZk1zasq5Y0/VSz5awjaYRHBjAuCNsTWBUr5G6tyb tTNzGfl4N+JZSnxk+3Fxa+OhlZ785THzDtq30zaGvWrZkQUsFMRhbAxshD864rKULmh+wOK6VG8B WFPdS4EEIG4BYA9W8O8pnG0LxgaI5w2w3lwufF+P1g0= ) ; Key ID = 56317 AHRQ.GOV. 900 IN RRSIG ( DNSKEY 8 2 900 20190630000151 20190624230151 5629 ahrq.gov. BioGMk48JW/k/PC0mPdMHZE8QqW2WuhZ2Xyo4AJFK60aEOuMKV+S4vtwPMNFIosQ2ULM9byAQriW qHN4kXja2XgchdzR3MMxKtkzxRM8zUd46LTTGwmAd9lscRBJhfvSiGBcL/8ARyqcsbzaLinR7wJA XF2eJ1XW3c8jiqv9VHo= ) ahrq.gov. 900 IN RRSIG ( DNSKEY 8 2 900 20190630000151 20190624230151 6250 ahrq.gov. FB9z4spoeNK5zNdYiU9/zk/0VlVY4JrQr+SwxpZI25V3zUOqt1l9HlTZ3Y4WiMhBut3tpFQNdjmk y6afhIvcHnvW2YIcMDduPXxqMFDp8LyL4Cfl0mHkJG3l58gb+WOXOpBd0A5dQTA07jCD+28WbJx7 1au2VQFYMXyV/SF6MWs= ) ahrq.gov. 900 IN RRSIG ( DNSKEY 8 2 900 20190630000151 20190624230151 56317 ahrq.gov. av0gg3cbYjgsALtk8IKruchCWeWF8QsYKnTSIqJhss88zebHlUXYJSahV76uiUX/nZjG13tamTIc NRG1dE+TYvfbc+BPiUkhHFKnc/nCCOCs5jbVvAGZSK8Yaorm4Rbb4eB0VgzwdehAlzU31mjk7S+n ItMwMEP9aKy2BGSNbwmZ88OzKdZ+J9I0cIClviLawv02kYI8zP9PyPjglvD1kJzJjLMBxcKK2rrs 4MIxDh1KZDUJPBtba70VYxTJSYmjF/ujtvjaV4oL/YOFbVed4G2nt805jsjor8awpPKvsYqTu0Yp iudV3ZlqIZwjKMeJin/XvnH6NzGaC+UL1G3/+w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for AHRQ.GOV
	`AHRQ.GOV. 900 IN DNSKEY ( 257 3 8 AwEAAcwkjhCXZiWSvNzyw5yBOq5r8NKkDZaq4YmUPm1iQG08+/8IEOViOiVf0dDxidseQyMWi4N3 jWz4vv1fqi1ZtSvfloEz1P0/h4+MNVGivfgYqlD3jBhDLWSQZtyN43WkIJ6WJ+VwEtR/yTEKRqVb k1J116Y3rLXJvdUpP9ze8weG9BshfXgdvNu2tpQi1p1wDKvz+6nFN6raiFHOskS0qy/3lWMMKWPJ Ec1wXRO9I17YEzMxK9y5KpmvTdyHrzhactHt98teQdHqholBfV4rwT2SlkDr/h7bPmg5eOfUjRdU EjqB2VBnFQPpwpmEpyisON2eSfuutw/RiwIXyXV/VtU= ) ; Key ID = 19136`
	`AHRQ.GOV. 900 IN DNSKEY ( 256 3 8 AwEAAYoJYJ7WKNnvqpwnmV+i3+ogpu9Duk4qYuM7HSBziLx4v0+NJjSmasZ5gQNZKVsCN1XRuLlt x//d/QRfaMMKnZtWQD+E/ca2UmwSVJSAqTwOxqJxwui9lK5oM1XxiWX4NpS+KoCAdRv61iXGhp3S l5k2MDKw11+Il60+7+0z2Otv ) ; Key ID = 5629`
	`AHRQ.GOV. 900 IN DNSKEY ( 256 3 8 AwEAAcG332d8Kab1mf/+AhvYHQFVG+En0S3zVkXzeQtxZclq9R8Hk50yiblF6B2DKeFLgvI9ZCrt GnQwXUmXZwe2CZZUknxo0gzuVsHfJX/ZGQZBSGGBH7l+Hh4mYyUPXSv93/C8tEtqLJWwYLMO5uvO VTCRXCfzeR7R3cY2HyuHsGb/ ) ; Key ID = 6250`
	`AHRQ.GOV. 900 IN DNSKEY ( 257 3 8 AwEAAW1Mq77+o6NQRqp21MuothYkfv6paf3ndlTXcHsWeefm3F5KWC0wt+laXO+F2B65vhR1M6zS F10nIX6eaV6uSycKRDZix8p5bdTf/6qkUlhDz1deJVkX/uUROPlf4tMKxDFLE3ILDf1qtE2B0HMU vyuIfeKhD+v9TfV2JiWP9ebXpRrOnhNZV1ZuZk1zasq5Y0/VSz5awjaYRHBjAuCNsTWBUr5G6tyb tTNzGfl4N+JZSnxk+3Fxa+OhlZ785THzDtq30zaGvWrZkQUsFMRhbAxshD864rKULmh+wOK6VG8B WFPdS4EEIG4BYA9W8O8pnG0LxgaI5w2w3lwufF+P1g0= ) ; Key ID = 56317`
	DNSKEY=19136/SEP is now in the chain-of-trust
	DS=19136/SHA-256 verifies DNSKEY=19136/SEP
	DS=19136/SHA-1 verifies DNSKEY=19136/SEP
	DNSKEY=56317/SEP is now in the chain-of-trust
	DS=56317/SHA-256 verifies DNSKEY=56317/SEP
	DS=56317/SHA-1 verifies DNSKEY=56317/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`AHRQ.GOV. 900 IN RRSIG ( DNSKEY 8 2 900 20190630000151 20190624230151 5629 ahrq.gov. BioGMk48JW/k/PC0mPdMHZE8QqW2WuhZ2Xyo4AJFK60aEOuMKV+S4vtwPMNFIosQ2ULM9byAQriW qHN4kXja2XgchdzR3MMxKtkzxRM8zUd46LTTGwmAd9lscRBJhfvSiGBcL/8ARyqcsbzaLinR7wJA XF2eJ1XW3c8jiqv9VHo= )`
	`ahrq.gov. 900 IN RRSIG ( DNSKEY 8 2 900 20190630000151 20190624230151 6250 ahrq.gov. FB9z4spoeNK5zNdYiU9/zk/0VlVY4JrQr+SwxpZI25V3zUOqt1l9HlTZ3Y4WiMhBut3tpFQNdjmk y6afhIvcHnvW2YIcMDduPXxqMFDp8LyL4Cfl0mHkJG3l58gb+WOXOpBd0A5dQTA07jCD+28WbJx7 1au2VQFYMXyV/SF6MWs= )`
	`ahrq.gov. 900 IN RRSIG ( DNSKEY 8 2 900 20190630000151 20190624230151 56317 ahrq.gov. av0gg3cbYjgsALtk8IKruchCWeWF8QsYKnTSIqJhss88zebHlUXYJSahV76uiUX/nZjG13tamTIc NRG1dE+TYvfbc+BPiUkhHFKnc/nCCOCs5jbVvAGZSK8Yaorm4Rbb4eB0VgzwdehAlzU31mjk7S+n ItMwMEP9aKy2BGSNbwmZ88OzKdZ+J9I0cIClviLawv02kYI8zP9PyPjglvD1kJzJjLMBxcKK2rrs 4MIxDh1KZDUJPBtba70VYxTJSYmjF/ujtvjaV4oL/YOFbVed4G2nt805jsjor8awpPKvsYqTu0Yp iudV3ZlqIZwjKMeJin/XvnH6NzGaC+UL1G3/+w== )`
	RRSIG=5629 and DNSKEY=5629 verifies the DNSKEY RRset
	RRSIG=6250 and DNSKEY=6250 verifies the DNSKEY RRset
	RRSIG=56317 and DNSKEY=56317/SEP verifies the DNSKEY RRset
	DNSKEY=5629 is now in the chain-of-trust
	DNSKEY=6250 is now in the chain-of-trust
	Query to rh202ns1.355.dhhs.GOV for AHRQ.GOV/A
	Error querying rh202ns1.355.dhhs.GOV/2607:f220:0:1:0:0:0:2a for AHRQ.GOV/A: 'IPv6 transport disabled'
	Received 389 bytes from 158.74.30.98
	;; Answer received from 158.74.30.98 (389 bytes) ;; HEADER SECTION ;; id = 36730 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; AHRQ.GOV. IN A ;; ANSWER SECTION (3 records) AHRQ.GOV. 900 IN A 162.99.46.11 AHRQ.GOV. 900 IN RRSIG ( A 8 2 900 20190630000151 20190624230151 5629 ahrq.gov. Nxjyw6CxmiM8IizT4Vcw4R7eu92pKklW+WB/KOkqpniI3GFgRyqJHREwQyfHphq0kbhPtQFk0HQB hOft6q7+jZajbcCv3Dw8K/aRDKPpc6Cz7fI7AJGtykMgP5W1ED4f6FmLrZZDV7xGkTvWDVGTPKTS kxBa5ramWnGS5T3BUis= ) ahrq.gov. 900 IN RRSIG ( A 8 2 900 20190630000151 20190624230151 6250 ahrq.gov. GJ1ZTpRjpEwwI1FkGXTNpdYQJDjRCF9fJCSotcc6PsjC4xeh01SisqsY3Ur7pk1jRp9qVqHCKz1+ yxsN56PGIklCZqcp9eO4CHOYGLg6ZVTmWAzUXyY3yr90bTK/uEV86vUMTfuOwa7bAgX8FRCW9v7K PFnc9ljQSSufBuyCiJw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	AHRQ.GOV is authoritative for AHRQ.GOV
	Found RRSIG signed by ahrq.gov zone
	Query to rh202ns2.355.dhhs.GOV for AHRQ.GOV/SOA
	Received 446 bytes from 158.74.30.99
	;; Answer received from 158.74.30.99 (446 bytes) ;; HEADER SECTION ;; id = 61029 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; AHRQ.GOV. IN SOA ;; ANSWER SECTION (3 records) AHRQ.GOV. 900 IN SOA ( rh120ns1.368.dhhs.GOV. hostmaster.psc.hhs.GOV. 58799 ;serial 600 ;refresh 60 ;retry 604800 ;expire 60 ;minimum ) AHRQ.GOV. 900 IN RRSIG ( SOA 8 2 900 20190630000151 20190624230151 5629 ahrq.gov. bdbZlfaQhhAtAccilj1p3M8ulSdPgnmhFcGST6Lx5v8ZU4edxvYajsGMF2yLCLDcwJiRQ63dz0Wc LPiLI0h7HqSn+XRPu6eGw+nJxYOKkBeY22Hy0GUFQ+qsgYlkFR0U67guEnSL9is7vy4wI0TGgwHK 1njegSESpNdeaUNv0d4= ) ahrq.gov. 900 IN RRSIG ( SOA 8 2 900 20190630000151 20190624230151 6250 ahrq.gov. iJrdMXKfubGrvXyZlpjqVYaYHnkpKn3sgvSonmqmBKGY47sc3HpQkoYb1mWTv1bxGvTVMr0+YHRf /lOuW3xqebu04DHdiW5e/TtwIoertP9X+Zuvl36b145ZGJ5n/6JEfqwJDzQJ6YPAYO9eP8WMUGTJ Flnzd8jYPG2VDkTckCE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to rh120ns2.368.dhhs.GOV for AHRQ.GOV/SOA
	Error querying rh120ns2.368.dhhs.GOV/2607:f220:0:1:0:0:0:2d for AHRQ.GOV/SOA: 'IPv6 transport disabled'
	Received 446 bytes from 158.74.30.103
	;; Answer received from 158.74.30.103 (446 bytes) ;; HEADER SECTION ;; id = 19846 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; AHRQ.GOV. IN SOA ;; ANSWER SECTION (3 records) AHRQ.GOV. 900 IN SOA ( rh120ns1.368.dhhs.GOV. hostmaster.psc.hhs.GOV. 58799 ;serial 600 ;refresh 60 ;retry 604800 ;expire 60 ;minimum ) AHRQ.GOV. 900 IN RRSIG ( SOA 8 2 900 20190630000151 20190624230151 5629 ahrq.gov. bdbZlfaQhhAtAccilj1p3M8ulSdPgnmhFcGST6Lx5v8ZU4edxvYajsGMF2yLCLDcwJiRQ63dz0Wc LPiLI0h7HqSn+XRPu6eGw+nJxYOKkBeY22Hy0GUFQ+qsgYlkFR0U67guEnSL9is7vy4wI0TGgwHK 1njegSESpNdeaUNv0d4= ) ahrq.gov. 900 IN RRSIG ( SOA 8 2 900 20190630000151 20190624230151 6250 ahrq.gov. iJrdMXKfubGrvXyZlpjqVYaYHnkpKn3sgvSonmqmBKGY47sc3HpQkoYb1mWTv1bxGvTVMr0+YHRf /lOuW3xqebu04DHdiW5e/TtwIoertP9X+Zuvl36b145ZGJ5n/6JEfqwJDzQJ6YPAYO9eP8WMUGTJ Flnzd8jYPG2VDkTckCE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to rh120ns1.368.dhhs.GOV for AHRQ.GOV/SOA
	Received 446 bytes from 158.74.30.102
	;; Answer received from 158.74.30.102 (446 bytes) ;; HEADER SECTION ;; id = 5053 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; AHRQ.GOV. IN SOA ;; ANSWER SECTION (3 records) AHRQ.GOV. 900 IN SOA ( rh120ns1.368.dhhs.GOV. hostmaster.psc.hhs.GOV. 58799 ;serial 600 ;refresh 60 ;retry 604800 ;expire 60 ;minimum ) AHRQ.GOV. 900 IN RRSIG ( SOA 8 2 900 20190630000151 20190624230151 5629 ahrq.gov. bdbZlfaQhhAtAccilj1p3M8ulSdPgnmhFcGST6Lx5v8ZU4edxvYajsGMF2yLCLDcwJiRQ63dz0Wc LPiLI0h7HqSn+XRPu6eGw+nJxYOKkBeY22Hy0GUFQ+qsgYlkFR0U67guEnSL9is7vy4wI0TGgwHK 1njegSESpNdeaUNv0d4= ) ahrq.gov. 900 IN RRSIG ( SOA 8 2 900 20190630000151 20190624230151 6250 ahrq.gov. iJrdMXKfubGrvXyZlpjqVYaYHnkpKn3sgvSonmqmBKGY47sc3HpQkoYb1mWTv1bxGvTVMr0+YHRf /lOuW3xqebu04DHdiW5e/TtwIoertP9X+Zuvl36b145ZGJ5n/6JEfqwJDzQJ6YPAYO9eP8WMUGTJ Flnzd8jYPG2VDkTckCE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to rh202ns1.355.dhhs.GOV for AHRQ.GOV/SOA
	Received 446 bytes from 158.74.30.98
	;; Answer received from 158.74.30.98 (446 bytes) ;; HEADER SECTION ;; id = 16785 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; AHRQ.GOV. IN SOA ;; ANSWER SECTION (3 records) AHRQ.GOV. 900 IN SOA ( rh120ns1.368.dhhs.GOV. hostmaster.psc.hhs.GOV. 58799 ;serial 600 ;refresh 60 ;retry 604800 ;expire 60 ;minimum ) AHRQ.GOV. 900 IN RRSIG ( SOA 8 2 900 20190630000151 20190624230151 5629 ahrq.gov. bdbZlfaQhhAtAccilj1p3M8ulSdPgnmhFcGST6Lx5v8ZU4edxvYajsGMF2yLCLDcwJiRQ63dz0Wc LPiLI0h7HqSn+XRPu6eGw+nJxYOKkBeY22Hy0GUFQ+qsgYlkFR0U67guEnSL9is7vy4wI0TGgwHK 1njegSESpNdeaUNv0d4= ) ahrq.gov. 900 IN RRSIG ( SOA 8 2 900 20190630000151 20190624230151 6250 ahrq.gov. iJrdMXKfubGrvXyZlpjqVYaYHnkpKn3sgvSonmqmBKGY47sc3HpQkoYb1mWTv1bxGvTVMr0+YHRf /lOuW3xqebu04DHdiW5e/TtwIoertP9X+Zuvl36b145ZGJ5n/6JEfqwJDzQJ6YPAYO9eP8WMUGTJ Flnzd8jYPG2VDkTckCE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to rh202ns1.355.dhhs.GOV for AHRQ.GOV/A
	Received 389 bytes from 158.74.30.98
	;; Answer received from 158.74.30.98 (389 bytes) ;; HEADER SECTION ;; id = 63262 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; AHRQ.GOV. IN A ;; ANSWER SECTION (3 records) AHRQ.GOV. 900 IN A 162.99.46.11 AHRQ.GOV. 900 IN RRSIG ( A 8 2 900 20190630000151 20190624230151 5629 ahrq.gov. Nxjyw6CxmiM8IizT4Vcw4R7eu92pKklW+WB/KOkqpniI3GFgRyqJHREwQyfHphq0kbhPtQFk0HQB hOft6q7+jZajbcCv3Dw8K/aRDKPpc6Cz7fI7AJGtykMgP5W1ED4f6FmLrZZDV7xGkTvWDVGTPKTS kxBa5ramWnGS5T3BUis= ) ahrq.gov. 900 IN RRSIG ( A 8 2 900 20190630000151 20190624230151 6250 ahrq.gov. GJ1ZTpRjpEwwI1FkGXTNpdYQJDjRCF9fJCSotcc6PsjC4xeh01SisqsY3Ur7pk1jRp9qVqHCKz1+ yxsN56PGIklCZqcp9eO4CHOYGLg6ZVTmWAzUXyY3yr90bTK/uEV86vUMTfuOwa7bAgX8FRCW9v7K PFnc9ljQSSufBuyCiJw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	AHRQ.GOV A RR has value 162.99.46.11
	Found 2 RRSIGs over A RRset
	`AHRQ.GOV. 900 IN RRSIG ( A 8 2 900 20190630000151 20190624230151 5629 ahrq.gov. Nxjyw6CxmiM8IizT4Vcw4R7eu92pKklW+WB/KOkqpniI3GFgRyqJHREwQyfHphq0kbhPtQFk0HQB hOft6q7+jZajbcCv3Dw8K/aRDKPpc6Cz7fI7AJGtykMgP5W1ED4f6FmLrZZDV7xGkTvWDVGTPKTS kxBa5ramWnGS5T3BUis= )`
	`ahrq.gov. 900 IN RRSIG ( A 8 2 900 20190630000151 20190624230151 6250 ahrq.gov. GJ1ZTpRjpEwwI1FkGXTNpdYQJDjRCF9fJCSotcc6PsjC4xeh01SisqsY3Ur7pk1jRp9qVqHCKz1+ yxsN56PGIklCZqcp9eO4CHOYGLg6ZVTmWAzUXyY3yr90bTK/uEV86vUMTfuOwa7bAgX8FRCW9v7K PFnc9ljQSSufBuyCiJw= )`
	RRSIG=5629 and DNSKEY=5629 verifies the A RRset
	RRSIG=6250 and DNSKEY=6250 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test AHRQ.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: