DNSSEC Analyzer - BFEM.GOV

Domain Name:

Time: 2021-01-19 03:36:29 UTC, NTP stratum 4

Analyzing DNSSEC problems for BFEM.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (864 bytes) ;; HEADER SECTION ;; id = 55155 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbKGKkqc1VAvQr48iPf9Nd39f337MitggxF0AB9kLKRNSuq9joOEPC/R6PD/4lTzUms8U9oP +aiF0rVC2rGOKSdOLxPHRLA3ameMFT2/3bmVCFsRsn03IVTdN5VUAfczjqjmA0t9NM7bbN5oVzuQ L3P1FyQb1q6HX4M1qg+htMNEd9PdlPLMFcrUg5fcYtTr2llVkO1Xo3lAdrjmmxfGeIyQnskpwPyW 88J527DEytmgPo5KzLBYLMoL2Q41PK0ul0rs7yN+g5IG4LnJOcjew1yrmHXrp/OzrpsO4FkicufY t/ygfQKkT5HYbr/yFgeZAfaF80nYyc7wgDYxOeHdiRk= ) ; Key ID = 42351 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210201000000 20210111000000 20326 . nPlFYAyI+iUNytZu71KcMwdvR1ubjVRP6Hp7E/owRaLhHhOON4gJsezf4UoBeq75yeDBkzRA2pwD 7g6XVY/qsQM9WDuzTYQJWqvSGDj0BYF5bS482kH8Y3N/Ly/jlQCSFIlCbTjAUBHTdYZji6esQDqi Wk2SzB38ZLsxgey439JkhxUzMh5520zLCiOnuZs9Iy0KLoy4ss7R/GiQjcYEIi0zScXZXcDBr3qd 2HB/BL98F2MDeshzQ/VRimxsZ3RH3ERNPS1GurmjY/mTUZxX3ITj1C57PI2bgurv1b7dyp1zLpmZ lIz/21lQwvT3wESGF44J1YmBDheYoG44GY9RVg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbKGKkqc1VAvQr48iPf9Nd39f337MitggxF0AB9kLKRNSuq9joOEPC/R6PD/4lTzUms8U9oP +aiF0rVC2rGOKSdOLxPHRLA3ameMFT2/3bmVCFsRsn03IVTdN5VUAfczjqjmA0t9NM7bbN5oVzuQ L3P1FyQb1q6HX4M1qg+htMNEd9PdlPLMFcrUg5fcYtTr2llVkO1Xo3lAdrjmmxfGeIyQnskpwPyW 88J527DEytmgPo5KzLBYLMoL2Q41PK0ul0rs7yN+g5IG4LnJOcjew1yrmHXrp/OzrpsO4FkicufY t/ygfQKkT5HYbr/yFgeZAfaF80nYyc7wgDYxOeHdiRk= ) ; Key ID = 42351`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210201000000 20210111000000 20326 . nPlFYAyI+iUNytZu71KcMwdvR1ubjVRP6Hp7E/owRaLhHhOON4gJsezf4UoBeq75yeDBkzRA2pwD 7g6XVY/qsQM9WDuzTYQJWqvSGDj0BYF5bS482kH8Y3N/Ly/jlQCSFIlCbTjAUBHTdYZji6esQDqi Wk2SzB38ZLsxgey439JkhxUzMh5520zLCiOnuZs9Iy0KLoy4ss7R/GiQjcYEIi0zScXZXcDBr3qd 2HB/BL98F2MDeshzQ/VRimxsZ3RH3ERNPS1GurmjY/mTUZxX3ITj1C57PI2bgurv1b7dyp1zLpmZ lIz/21lQwvT3wESGF44J1YmBDheYoG44GY9RVg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=42351 is now in the chain-of-trust
	Query to c.root-servers.net for BFEM.GOV/A
	Received 666 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (666 bytes) ;; HEADER SECTION ;; id = 19164 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; BFEM.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20210131170000 20210118160000 42351 . HAAVEkzpunSwDVhgNZ2fCuH3Vb/FqnagCd1fOrt2XPZA8NAiT2gpKJSIZ/efYQ8i9+rGd0aJuX3w UzLbZ4vx6GyVum+H2OoPhF0l3cXsa8kXCP1q6L82zYUHBUC7ETQNMHPZhOUddvI2FsdAIC3X3Bbn BCKoOi4b7uWABiLiaZXEqvaU2hSibgD/seuG/fRfI5IwV/rn8uMpSctg4jQoqyYNKjmrxJWiK3gJ 95uTAyKCfBW27nr9AWoeScA5HpfBOb8yaLUwDOGS9uO+yCbzpXPEL+zxURJ0lC0oHQIb7Z1CPJNu UkV9h1LzDOHTikayNEWDaQLdhMy68zhnZudIzQ== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to c.root-servers.net for GOV/DNSKEY
	Received 661 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (661 bytes) ;; HEADER SECTION ;; id = 21117 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20210131170000 20210118160000 42351 . HAAVEkzpunSwDVhgNZ2fCuH3Vb/FqnagCd1fOrt2XPZA8NAiT2gpKJSIZ/efYQ8i9+rGd0aJuX3w UzLbZ4vx6GyVum+H2OoPhF0l3cXsa8kXCP1q6L82zYUHBUC7ETQNMHPZhOUddvI2FsdAIC3X3Bbn BCKoOi4b7uWABiLiaZXEqvaU2hSibgD/seuG/fRfI5IwV/rn8uMpSctg4jQoqyYNKjmrxJWiK3gJ 95uTAyKCfBW27nr9AWoeScA5HpfBOb8yaLUwDOGS9uO+yCbzpXPEL+zxURJ0lC0oHQIb7Z1CPJNu UkV9h1LzDOHTikayNEWDaQLdhMy68zhnZudIzQ== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to k.root-servers.net for GOV/DS
	Received 403 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (403 bytes) ;; HEADER SECTION ;; id = 39181 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20210131170000 20210118160000 42351 . HAAVEkzpunSwDVhgNZ2fCuH3Vb/FqnagCd1fOrt2XPZA8NAiT2gpKJSIZ/efYQ8i9+rGd0aJuX3w UzLbZ4vx6GyVum+H2OoPhF0l3cXsa8kXCP1q6L82zYUHBUC7ETQNMHPZhOUddvI2FsdAIC3X3Bbn BCKoOi4b7uWABiLiaZXEqvaU2hSibgD/seuG/fRfI5IwV/rn8uMpSctg4jQoqyYNKjmrxJWiK3gJ 95uTAyKCfBW27nr9AWoeScA5HpfBOb8yaLUwDOGS9uO+yCbzpXPEL+zxURJ0lC0oHQIb7Z1CPJNu UkV9h1LzDOHTikayNEWDaQLdhMy68zhnZudIzQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20210131170000 20210118160000 42351 . HAAVEkzpunSwDVhgNZ2fCuH3Vb/FqnagCd1fOrt2XPZA8NAiT2gpKJSIZ/efYQ8i9+rGd0aJuX3w UzLbZ4vx6GyVum+H2OoPhF0l3cXsa8kXCP1q6L82zYUHBUC7ETQNMHPZhOUddvI2FsdAIC3X3Bbn BCKoOi4b7uWABiLiaZXEqvaU2hSibgD/seuG/fRfI5IwV/rn8uMpSctg4jQoqyYNKjmrxJWiK3gJ 95uTAyKCfBW27nr9AWoeScA5HpfBOb8yaLUwDOGS9uO+yCbzpXPEL+zxURJ0lC0oHQIb7Z1CPJNu UkV9h1LzDOHTikayNEWDaQLdhMy68zhnZudIzQ== )`
	RRSIG=42351 and DNSKEY=42351 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to d.gov-servers.net for GOV/DNSKEY
	Received 957 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (957 bytes) ;; HEADER SECTION ;; id = 43425 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (4 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAaQup5BwKqvn1In1x+PzsLpFav6zsLaW7fivUq9PpXUzXn++rcjtYBS15NXm1hMAZb5FChUp 35qd7hVqdwNuT/NGFNHfEykaeWjkqBKX2mCBSiyIsK4i4TQu7CS2CgqfqR43wXFITyItTPP5wijo 9Jt4dsVTjAtNJKaXOKZ31tLaeM5C2bYqAofxX6oK3TVAZ7vFsjPqjJZtZUBMZq28BiU= ) ; Key ID = 27306 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAeFoiC01j4zIdBfR1vxBGp7WmV8q6IgTQ/pvbQJhCd9+sE16txuz6M81FPFkWhTk1nsXR4tI UZLQZpvgme+q3dqWuqtFA2amB99IM9B9iq6kwSrkZNVFv6zav3eP+5BlL/OA9FNFQHXCj5qj2noA j2le7j8umVcc+4zH677ytdtIImoAY45H8wWxVrGR4kxqM54O10fPHXEPu84irfaZGrM= ) ; Key ID = 15489 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210129200254 20210114195754 7698 gov. CGhz32kgAD2TX5Lg2j23jXXUv+RTgGyMxbh/yobXObSvJneaSKa75D5Vo/iCVbvVvp3lntOGoKnQ AD+e8tEVlaKiG2bX1u9asLn9azwmk+M5i/4vCydP31wJ4503w+7bZe1c5qg26RqVN5pudzmgUUUK msaHry0zXHrpcC941eZZhuemdKlF4XT3E6JkkAL+HyCLvqIk4rBqlShTiqUwzKj6+GbhQvuJzU+B 4ZsiuoNu1FBU2ipWi+FJ88xawWmBc+yEDZkPJFJZpdPNtonI1Cjd3H61PSXe6JRrtsLcLX/G9F+J nQo6IN7tiEONh5QAEo2RBBc1yL29N3BRDW8qMg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAaQup5BwKqvn1In1x+PzsLpFav6zsLaW7fivUq9PpXUzXn++rcjtYBS15NXm1hMAZb5FChUp 35qd7hVqdwNuT/NGFNHfEykaeWjkqBKX2mCBSiyIsK4i4TQu7CS2CgqfqR43wXFITyItTPP5wijo 9Jt4dsVTjAtNJKaXOKZ31tLaeM5C2bYqAofxX6oK3TVAZ7vFsjPqjJZtZUBMZq28BiU= ) ; Key ID = 27306`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAeFoiC01j4zIdBfR1vxBGp7WmV8q6IgTQ/pvbQJhCd9+sE16txuz6M81FPFkWhTk1nsXR4tI UZLQZpvgme+q3dqWuqtFA2amB99IM9B9iq6kwSrkZNVFv6zav3eP+5BlL/OA9FNFQHXCj5qj2noA j2le7j8umVcc+4zH677ytdtIImoAY45H8wWxVrGR4kxqM54O10fPHXEPu84irfaZGrM= ) ; Key ID = 15489`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210129200254 20210114195754 7698 gov. CGhz32kgAD2TX5Lg2j23jXXUv+RTgGyMxbh/yobXObSvJneaSKa75D5Vo/iCVbvVvp3lntOGoKnQ AD+e8tEVlaKiG2bX1u9asLn9azwmk+M5i/4vCydP31wJ4503w+7bZe1c5qg26RqVN5pudzmgUUUK msaHry0zXHrpcC941eZZhuemdKlF4XT3E6JkkAL+HyCLvqIk4rBqlShTiqUwzKj6+GbhQvuJzU+B 4ZsiuoNu1FBU2ipWi+FJ88xawWmBc+yEDZkPJFJZpdPNtonI1Cjd3H61PSXe6JRrtsLcLX/G9F+J nQo6IN7tiEONh5QAEo2RBBc1yL29N3BRDW8qMg== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=27306 is now in the chain-of-trust
	DNSKEY=15489 is now in the chain-of-trust
	Query to a.gov-servers.net for BFEM.GOV/A
	Received 580 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (580 bytes) ;; HEADER SECTION ;; id = 55258 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; BFEM.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) BFEM.GOV. 86400 IN NS pydns1.epa.GOV. BFEM.GOV. 86400 IN NS rtpns1.epa.GOV. BFEM.GOV. 86400 IN NS pydns2.epa.GOV. BFEM.GOV. 86400 IN NS rtpns2.epa.GOV. BFEM.GOV. 3600 IN DS 40162 8 1 183dbd2ae39d1f9eba5b56ecd75419b9e115951e BFEM.GOV. 3600 IN DS ( 40162 8 2 4f716752aafb7693b02e002f019d45fd898458d81c15ab7a4ae3b7f09c6255d4 ) BFEM.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210126011008 20210119011008 27306 gov. n0DXcCjPoADNksCDAd6U+KY7V7Psbp9RyBFop2sMdox6SOkCYf4ya6qZiXhl0W8C26/GwqP5Y1uA 56Y7xiHR2+/B1UOIWYVNj78J8CsVi5wvfrMDyJnfOX+lZhD5eeMk8MEibUYs8p7pBzWAfnR4OnGb AmnWTU4RcWdnImrqi7aB9Uej7tD7EAOixX6HGNGy0XO+O9Oso42USouRs1GkgA== ) ;; ADDITIONAL SECTION (9 records) pydns1.epa.GOV. 86400 IN A 161.80.212.10 pydns1.epa.GOV. 86400 IN AAAA 2620:117:5071:d4::f00a rtpns1.epa.GOV. 86400 IN A 134.67.12.10 rtpns1.epa.GOV. 86400 IN AAAA 2620:117:506f:c::f00a pydns2.epa.GOV. 86400 IN A 161.80.212.12 pydns2.epa.GOV. 86400 IN AAAA 2620:117:5071:d4::f00c rtpns2.epa.GOV. 86400 IN A 134.67.12.12 rtpns2.epa.GOV. 86400 IN AAAA 2620:117:506f:c::f00c ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.gov-servers.net for BFEM.GOV/DNSKEY
	Received 580 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (580 bytes) ;; HEADER SECTION ;; id = 50876 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; BFEM.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) BFEM.GOV. 86400 IN NS pydns1.epa.GOV. BFEM.GOV. 86400 IN NS rtpns1.epa.GOV. BFEM.GOV. 86400 IN NS pydns2.epa.GOV. BFEM.GOV. 86400 IN NS rtpns2.epa.GOV. BFEM.GOV. 3600 IN DS 40162 8 1 183dbd2ae39d1f9eba5b56ecd75419b9e115951e BFEM.GOV. 3600 IN DS ( 40162 8 2 4f716752aafb7693b02e002f019d45fd898458d81c15ab7a4ae3b7f09c6255d4 ) BFEM.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210126011008 20210119011008 27306 gov. n0DXcCjPoADNksCDAd6U+KY7V7Psbp9RyBFop2sMdox6SOkCYf4ya6qZiXhl0W8C26/GwqP5Y1uA 56Y7xiHR2+/B1UOIWYVNj78J8CsVi5wvfrMDyJnfOX+lZhD5eeMk8MEibUYs8p7pBzWAfnR4OnGb AmnWTU4RcWdnImrqi7aB9Uej7tD7EAOixX6HGNGy0XO+O9Oso42USouRs1GkgA== ) ;; ADDITIONAL SECTION (9 records) pydns1.epa.GOV. 86400 IN A 161.80.212.10 pydns1.epa.GOV. 86400 IN AAAA 2620:117:5071:d4::f00a rtpns1.epa.GOV. 86400 IN A 134.67.12.10 rtpns1.epa.GOV. 86400 IN AAAA 2620:117:506f:c::f00a pydns2.epa.GOV. 86400 IN A 161.80.212.12 pydns2.epa.GOV. 86400 IN AAAA 2620:117:5071:d4::f00c rtpns2.epa.GOV. 86400 IN A 134.67.12.12 rtpns2.epa.GOV. 86400 IN AAAA 2620:117:506f:c::f00c ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone BFEM.GOV

BFEM.GOV

	Checking DS between GOV and BFEM.GOV
	Query to a.gov-servers.net for BFEM.GOV/DS
	Received 316 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (316 bytes) ;; HEADER SECTION ;; id = 28134 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; BFEM.GOV. IN DS ;; ANSWER SECTION (3 records) BFEM.GOV. 3600 IN DS 40162 8 1 183dbd2ae39d1f9eba5b56ecd75419b9e115951e BFEM.GOV. 3600 IN DS ( 40162 8 2 4f716752aafb7693b02e002f019d45fd898458d81c15ab7a4ae3b7f09c6255d4 ) BFEM.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210126011008 20210119011008 27306 gov. n0DXcCjPoADNksCDAd6U+KY7V7Psbp9RyBFop2sMdox6SOkCYf4ya6qZiXhl0W8C26/GwqP5Y1uA 56Y7xiHR2+/B1UOIWYVNj78J8CsVi5wvfrMDyJnfOX+lZhD5eeMk8MEibUYs8p7pBzWAfnR4OnGb AmnWTU4RcWdnImrqi7aB9Uej7tD7EAOixX6HGNGy0XO+O9Oso42USouRs1GkgA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for BFEM.GOV in the GOV zone
	DS=40162/SHA-1 has algorithm RSASHA256
	DS=40162/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`BFEM.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210126011008 20210119011008 27306 gov. n0DXcCjPoADNksCDAd6U+KY7V7Psbp9RyBFop2sMdox6SOkCYf4ya6qZiXhl0W8C26/GwqP5Y1uA 56Y7xiHR2+/B1UOIWYVNj78J8CsVi5wvfrMDyJnfOX+lZhD5eeMk8MEibUYs8p7pBzWAfnR4OnGb AmnWTU4RcWdnImrqi7aB9Uej7tD7EAOixX6HGNGy0XO+O9Oso42USouRs1GkgA== )`
	RRSIG=27306 and DNSKEY=27306 verifies the DS RRset
	DS=40162/SHA-1 is now in the chain-of-trust
	`BFEM.GOV. 3600 IN DS 40162 8 1 183dbd2ae39d1f9eba5b56ecd75419b9e115951e`
	`BFEM.GOV. 3600 IN DS ( 40162 8 2 4f716752aafb7693b02e002f019d45fd898458d81c15ab7a4ae3b7f09c6255d4 )`
	Query to rtpns1.epa.GOV for BFEM.GOV/DNSKEY
	Received 1081 bytes from 134.67.12.10
	;; Answer received from 134.67.12.10 (1081 bytes) ;; HEADER SECTION ;; id = 19686 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; BFEM.GOV. IN DNSKEY ;; ANSWER SECTION (5 records) bfem.gov. 1296000 IN DNSKEY ( 256 3 8 AwEAAbwMH+cvgSfLp6R/1QTaihRtyt4+ad2lwYYaIKteKVIJna9CTrrGrhtB87+917xL/7fPjTFm J7i5tA0nQnnNBC1JbIDCVn+6qczM/KcMq2SuZ5IYnKBkitcGbC5cz/JC6OhPbc0OpvghcEgC1YTp GMQcXfw9FIPBr4f3gaf1VeLv ) ; Key ID = 5733 bfem.gov. 1296000 IN DNSKEY ( 256 3 8 AwEAAcBOoq+64XdFV3JFHcQk2RIXUv7IysEq9XC9fpY9gb4Z96Qxip3WpT2xG17/lYm0QKHcRlnw 8Bj3nD00SWWbLeffU2DIEnSYtAjPtx4wN2Yc1bF3KZJqJC5oUEWO54BPBnVN+/ls2x8k8uEQy8jW 40wdpOITraXzqz9Y1Mml7/bd ) ; Key ID = 4473 bfem.gov. 1296000 IN DNSKEY ( 257 3 8 AwEAAbwIrppwhbO0mJ0XVmjKaMmt6c3zs26Ygt/0eaBceb7ukMEWJXdb8BrfxWBAXoM8n5ipbDHM /nO9oUuwSwQJV4V4l5X9vNXpWtaPLQZvAhSnzSzxAaeGDleJfHjDfUybDYpYpj+87qDJ1eq4Y29D fFartSD/hpBiy8lSl8DEvuZrlCiMUu5nzgLriuDIoyTPDPWBqSJgO6rwx0cF0YxGk3/0X7+BoO92 csmeKhhTq6OCCeA5EF0pW2skxheHFvhigX3w1YCfWKpi+oqr3+/1omviW9DFsjKbxB2erx9z7N6S Gt4kxt80p0GFc8hixC4azF97OQuR6NOzv259TNxzvRM= ) ; Key ID = 40162 bfem.gov. 1296000 IN RRSIG ( DNSKEY 8 2 1296000 20210214194207 20210115184207 4473 bfem.gov. YLprQfiO3Vp67OnvDp4epHeT5naRG8Wh9z5J7jODxC5zC0/gXlXuoEpZ94nrc6o17R82m+NpVEgx S3yBo5n5HDIwDYw2a7/iB3onRgp9Z6KNrX3L0OoGZQYNuB/NfVV95InC2CLPFPy/InQ2H2q7AEPp qDXXIHmUVhoPmkC+xzE= ) bfem.gov. 1296000 IN RRSIG ( DNSKEY 8 2 1296000 20210214194207 20210115184207 40162 bfem.gov. G0AueU4TKBvfWfqt93Pq1T/4t0BmE+tU6FhdRFVix54n+W1Cxqtx/JvTyxVSC0d9nMHNzqUqxbAA Q4knVjuVc+ttXwjlgMItsaGv/+A3i/fjME+1/U1/WtK9tuqix2QMEPoa8so+UxHaYfgRUIeGr+Un MplTaZRO76an9zg1E1lonserkolYeLML4RTReqMZEziuSJObIsaZ3h8m5k2KHezwUjDiiZcK5L01 B/oDvhi63/K3Y6z9QNcMKjQdXqBOsYVzeMVUjIOt3BBaxty1uDpu1bkvHXaNvkNCbEA9LDsezq/5 v06n9kOOD2oQVyoFMvrmNdLiIVxqkWoDp9EJTg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for BFEM.GOV
	`bfem.gov. 1296000 IN DNSKEY ( 256 3 8 AwEAAbwMH+cvgSfLp6R/1QTaihRtyt4+ad2lwYYaIKteKVIJna9CTrrGrhtB87+917xL/7fPjTFm J7i5tA0nQnnNBC1JbIDCVn+6qczM/KcMq2SuZ5IYnKBkitcGbC5cz/JC6OhPbc0OpvghcEgC1YTp GMQcXfw9FIPBr4f3gaf1VeLv ) ; Key ID = 5733`
	`bfem.gov. 1296000 IN DNSKEY ( 256 3 8 AwEAAcBOoq+64XdFV3JFHcQk2RIXUv7IysEq9XC9fpY9gb4Z96Qxip3WpT2xG17/lYm0QKHcRlnw 8Bj3nD00SWWbLeffU2DIEnSYtAjPtx4wN2Yc1bF3KZJqJC5oUEWO54BPBnVN+/ls2x8k8uEQy8jW 40wdpOITraXzqz9Y1Mml7/bd ) ; Key ID = 4473`
	`bfem.gov. 1296000 IN DNSKEY ( 257 3 8 AwEAAbwIrppwhbO0mJ0XVmjKaMmt6c3zs26Ygt/0eaBceb7ukMEWJXdb8BrfxWBAXoM8n5ipbDHM /nO9oUuwSwQJV4V4l5X9vNXpWtaPLQZvAhSnzSzxAaeGDleJfHjDfUybDYpYpj+87qDJ1eq4Y29D fFartSD/hpBiy8lSl8DEvuZrlCiMUu5nzgLriuDIoyTPDPWBqSJgO6rwx0cF0YxGk3/0X7+BoO92 csmeKhhTq6OCCeA5EF0pW2skxheHFvhigX3w1YCfWKpi+oqr3+/1omviW9DFsjKbxB2erx9z7N6S Gt4kxt80p0GFc8hixC4azF97OQuR6NOzv259TNxzvRM= ) ; Key ID = 40162`
	DNSKEY=40162/SEP is now in the chain-of-trust
	DS=40162/SHA-1 verifies DNSKEY=40162/SEP
	DS=40162/SHA-256 verifies DNSKEY=40162/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`bfem.gov. 1296000 IN RRSIG ( DNSKEY 8 2 1296000 20210214194207 20210115184207 4473 bfem.gov. YLprQfiO3Vp67OnvDp4epHeT5naRG8Wh9z5J7jODxC5zC0/gXlXuoEpZ94nrc6o17R82m+NpVEgx S3yBo5n5HDIwDYw2a7/iB3onRgp9Z6KNrX3L0OoGZQYNuB/NfVV95InC2CLPFPy/InQ2H2q7AEPp qDXXIHmUVhoPmkC+xzE= )`
	`bfem.gov. 1296000 IN RRSIG ( DNSKEY 8 2 1296000 20210214194207 20210115184207 40162 bfem.gov. G0AueU4TKBvfWfqt93Pq1T/4t0BmE+tU6FhdRFVix54n+W1Cxqtx/JvTyxVSC0d9nMHNzqUqxbAA Q4knVjuVc+ttXwjlgMItsaGv/+A3i/fjME+1/U1/WtK9tuqix2QMEPoa8so+UxHaYfgRUIeGr+Un MplTaZRO76an9zg1E1lonserkolYeLML4RTReqMZEziuSJObIsaZ3h8m5k2KHezwUjDiiZcK5L01 B/oDvhi63/K3Y6z9QNcMKjQdXqBOsYVzeMVUjIOt3BBaxty1uDpu1bkvHXaNvkNCbEA9LDsezq/5 v06n9kOOD2oQVyoFMvrmNdLiIVxqkWoDp9EJTg== )`
	RRSIG=4473 and DNSKEY=4473 verifies the DNSKEY RRset
	RRSIG=40162 and DNSKEY=40162/SEP verifies the DNSKEY RRset
	DNSKEY=5733 is now in the chain-of-trust
	DNSKEY=4473 is now in the chain-of-trust
	Query to pydns1.epa.GOV for BFEM.GOV/A
	Received 229 bytes from 161.80.212.10
	;; Answer received from 161.80.212.10 (229 bytes) ;; HEADER SECTION ;; id = 52436 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; BFEM.GOV. IN A ;; ANSWER SECTION (2 records) bfem.gov. 600 IN A 134.67.99.21 bfem.gov. 600 IN RRSIG ( A 8 2 600 20210214113249 20210115110415 4473 bfem.gov. aSeGnF4pTbLh4pZyCeeRZY2jKFhkKl5oybgYBJmjypE/yK9wdz2nj6TlFKAdBRc17i1sfjtZCTaH u1gVBLGOpOUG0k/9WvTU/IFBWUWsE1H0E5RRSFHVHtXcbhmgTXbE1+HogwxXqw/8jhbS25ddpxBn +rVlqZgA8FMV7ACbFJc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	BFEM.GOV is authoritative for BFEM.GOV
	Found RRSIG signed by bfem.gov zone
	Query to rtpns2.epa.GOV for BFEM.GOV/SOA
	Received 269 bytes from 134.67.12.12
	;; Answer received from 134.67.12.12 (269 bytes) ;; HEADER SECTION ;; id = 34351 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; BFEM.GOV. IN SOA ;; ANSWER SECTION (2 records) bfem.gov. 600 IN SOA ( rtpns2.epa.gov. dnsadmin.epa.gov. 832 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 600 ;minimum ) bfem.gov. 600 IN RRSIG ( SOA 8 2 600 20210214210943 20210115200943 4473 bfem.gov. cePLXDI4mlz6IMdS2OvuHtUsr7Tjenmh3p+7tA81mEmmBIm13ZSk4imVtLoj+hx0/oWfFqnso1eH rg1EdJ11ewlOIhUFxll+KcUQSUBxWKDrlTNIOiyQkJZZbmekxyRAGFo/z57JvR6DKCblA1feL8Os tTK1PO2E7rEhChd87cI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to pydns2.epa.GOV for BFEM.GOV/SOA
	Received 269 bytes from 161.80.212.12
	;; Answer received from 161.80.212.12 (269 bytes) ;; HEADER SECTION ;; id = 13759 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; BFEM.GOV. IN SOA ;; ANSWER SECTION (2 records) bfem.gov. 600 IN SOA ( pydns2.epa.gov. dnsadmin.epa.gov. 837 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 600 ;minimum ) bfem.gov. 600 IN RRSIG ( SOA 8 2 600 20210214213547 20210115203547 4473 bfem.gov. iLbt9PSmCyoWs+1xL13D0skI5anrtkNV+HSfzFqmV9YyvNEV7WWeDNsi6wZtZYajNWxphVimKtAm RnIwyJ4ypU8p+ibCLlScBtmKJANm40Rm6CRxKBh2UlE8ly2/X3IgJvurTtqXGpTw57w9XH6+r9kt rH5HAHf7/QJy7UxgBac= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	pydns2.epa.GOV serial (837) differs from rtpns2.epa.GOV serial (832)
	Query to rtpns1.epa.GOV for BFEM.GOV/SOA
	Received 269 bytes from 134.67.12.10
	;; Answer received from 134.67.12.10 (269 bytes) ;; HEADER SECTION ;; id = 57434 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; BFEM.GOV. IN SOA ;; ANSWER SECTION (2 records) bfem.gov. 600 IN SOA ( rtpns1.epa.gov. dnsadmin.epa.gov. 937 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 600 ;minimum ) bfem.gov. 600 IN RRSIG ( SOA 8 2 600 20210214210702 20210115200702 4473 bfem.gov. HEzFWdo//6PRdDcL6dGeaGYJI6TbgLGmoDZDfLHZDXVBznGR2k08SsY0lzfvGIwqGXnApiCuh1L8 CZNq02koIGI0d/Ha7D0qQJ0exOdY9SunpsneULgdy5H9iOWbWwchWsiRan5h5DjV5prPzVSot0hB O4jYruihD5YmdHrpHMU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	rtpns1.epa.GOV serial (937) differs from rtpns2.epa.GOV serial (832)
	Query to pydns1.epa.GOV for BFEM.GOV/SOA
	Received 269 bytes from 161.80.212.10
	;; Answer received from 161.80.212.10 (269 bytes) ;; HEADER SECTION ;; id = 27987 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; BFEM.GOV. IN SOA ;; ANSWER SECTION (2 records) bfem.gov. 600 IN SOA ( pydns1.epa.gov. dnsadmin.epa.gov. 844 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 600 ;minimum ) bfem.gov. 600 IN RRSIG ( SOA 8 2 600 20210214211839 20210115201839 4473 bfem.gov. h40liAaH2YxrzD+5oTWofBa3rO2sccUVbT5ib93IWznpxa4nXNXNigOLwkY+S7lSmH7SK/AHiIcs rN+4BTHmYi6uherX6Bmio6VCAtunH4BIwiYkKQhO3T+JNN2xu+RRcDDoHUl+5K1s9SRYHjAmvMxj cFjCx91Ru3gCo/hkkrw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	pydns1.epa.GOV serial (844) differs from rtpns2.epa.GOV serial (832)
	Query to pydns1.epa.GOV for BFEM.GOV/A
	Received 229 bytes from 161.80.212.10
	;; Answer received from 161.80.212.10 (229 bytes) ;; HEADER SECTION ;; id = 43348 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; BFEM.GOV. IN A ;; ANSWER SECTION (2 records) bfem.gov. 600 IN A 134.67.99.21 bfem.gov. 600 IN RRSIG ( A 8 2 600 20210214113249 20210115110415 4473 bfem.gov. aSeGnF4pTbLh4pZyCeeRZY2jKFhkKl5oybgYBJmjypE/yK9wdz2nj6TlFKAdBRc17i1sfjtZCTaH u1gVBLGOpOUG0k/9WvTU/IFBWUWsE1H0E5RRSFHVHtXcbhmgTXbE1+HogwxXqw/8jhbS25ddpxBn +rVlqZgA8FMV7ACbFJc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	BFEM.GOV A RR has value 134.67.99.21
	Found 1 RRSIGs over A RRset
	`bfem.gov. 600 IN RRSIG ( A 8 2 600 20210214113249 20210115110415 4473 bfem.gov. aSeGnF4pTbLh4pZyCeeRZY2jKFhkKl5oybgYBJmjypE/yK9wdz2nj6TlFKAdBRc17i1sfjtZCTaH u1gVBLGOpOUG0k/9WvTU/IFBWUWsE1H0E5RRSFHVHtXcbhmgTXbE1+HogwxXqw/8jhbS25ddpxBn +rVlqZgA8FMV7ACbFJc= )`
	RRSIG=4473 and DNSKEY=4473 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test BFEM.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: