DNSSEC Analyzer - CLINICALTRIALS.GOV

Domain Name:

Time: 2022-08-09 10:24:01 UTC, NTP stratum 16

Analyzing DNSSEC problems for CLINICALTRIALS.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to a.root-servers.net for ./DNSKEY
	Received 864 bytes from 198.41.0.4
	;; Response received from 198.41.0.4 (864 octets) ;; HEADER SECTION ;; id = 63107 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20220821000000 20220731000000 20326 . kY6CPgpR+XbMPLBGuZrMggV0UXbOovM0W7VkOgE608ohTf+F/So1KlYtv1EUK2Mq8FximolEcsaN 3znGSw3crU3iYcuqqC/K2tqK7XbHkCHyWJNgMm+zoN2IvFSvcHLBtLInEt0aJVR566ZTSOqtY8xZ CanTcD5dvx6gnVIBHAevlETpdRBXy63E4WicdRonSzmFgZH4bFcJrEIk6+RwB6yEgTCLPOB+Ns84 PAuWEpo02H8P3WYGf16ubDdsL2N8mYkqjb0v6oJ0I4u4L5cx7mwq9oCS1xvVbgGaHxoPpfWeow1e f0sHCSwOyuG3ACdtl67uyMvNfNGvHhp5cxh3fg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20220821000000 20220731000000 20326 . kY6CPgpR+XbMPLBGuZrMggV0UXbOovM0W7VkOgE608ohTf+F/So1KlYtv1EUK2Mq8FximolEcsaN 3znGSw3crU3iYcuqqC/K2tqK7XbHkCHyWJNgMm+zoN2IvFSvcHLBtLInEt0aJVR566ZTSOqtY8xZ CanTcD5dvx6gnVIBHAevlETpdRBXy63E4WicdRonSzmFgZH4bFcJrEIk6+RwB6yEgTCLPOB+Ns84 PAuWEpo02H8P3WYGf16ubDdsL2N8mYkqjb0v6oJ0I4u4L5cx7mwq9oCS1xvVbgGaHxoPpfWeow1e f0sHCSwOyuG3ACdtl67uyMvNfNGvHhp5cxh3fg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=20826 is now in the chain-of-trust
	Query to c.root-servers.net for CLINICALTRIALS.GOV/A
	Received 640 bytes from 192.33.4.12
	;; Response received from 192.33.4.12 (640 octets) ;; HEADER SECTION ;; id = 4192 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; CLINICALTRIALS.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20220822050000 20220809040000 20826 . U+GWGNfJyka4rPaQgzCewcWoI7NuSOWKtmXMsay6n7UMLQqJwMJWgRY68eyLB5+SRIkv/vpAkKVb tiDU54k3a1tBAu4XhZZNEwgHATen1JRNeOI48YRZ8KC55KrKzMMJFCZLZc3EUDSOB682NWYSR0sh xTiRzqPxL5DpMcChtgTQgG7ZgJkCKtROzQLZbQINciX4vIRpgNJcF5+4/MbTFpaFi0uf5wOzgNje nszxJGw3+qfYi2tQ+VGEGA3fiMnnZEGP5Tnatj6gvXDtYGVOgRBJkl+Ksm49Q7RbpHjcjFJbFGYu YKpCoMgfk1orM09bC/djJvU72/ANGgiMRo+dmA== ) ;; ADDITIONAL SECTION (9 records) d.gov-servers.net. 172800 IN A 81.19.194.30 c.gov-servers.net. 172800 IN A 69.36.153.30 b.gov-servers.net. 172800 IN A 209.112.123.30 a.gov-servers.net. 172800 IN A 69.36.157.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to f.root-servers.net for GOV/DNSKEY
	Received 622 bytes from 192.5.5.241
	;; Response received from 192.5.5.241 (622 octets) ;; HEADER SECTION ;; id = 26124 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20220822050000 20220809040000 20826 . U+GWGNfJyka4rPaQgzCewcWoI7NuSOWKtmXMsay6n7UMLQqJwMJWgRY68eyLB5+SRIkv/vpAkKVb tiDU54k3a1tBAu4XhZZNEwgHATen1JRNeOI48YRZ8KC55KrKzMMJFCZLZc3EUDSOB682NWYSR0sh xTiRzqPxL5DpMcChtgTQgG7ZgJkCKtROzQLZbQINciX4vIRpgNJcF5+4/MbTFpaFi0uf5wOzgNje nszxJGw3+qfYi2tQ+VGEGA3fiMnnZEGP5Tnatj6gvXDtYGVOgRBJkl+Ksm49Q7RbpHjcjFJbFGYu YKpCoMgfk1orM09bC/djJvU72/ANGgiMRo+dmA== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to k.root-servers.net for GOV/DS
	Received 370 bytes from 193.0.14.129
	;; Response received from 193.0.14.129 (370 octets) ;; HEADER SECTION ;; id = 45981 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20220822050000 20220809040000 20826 . U+GWGNfJyka4rPaQgzCewcWoI7NuSOWKtmXMsay6n7UMLQqJwMJWgRY68eyLB5+SRIkv/vpAkKVb tiDU54k3a1tBAu4XhZZNEwgHATen1JRNeOI48YRZ8KC55KrKzMMJFCZLZc3EUDSOB682NWYSR0sh xTiRzqPxL5DpMcChtgTQgG7ZgJkCKtROzQLZbQINciX4vIRpgNJcF5+4/MbTFpaFi0uf5wOzgNje nszxJGw3+qfYi2tQ+VGEGA3fiMnnZEGP5Tnatj6gvXDtYGVOgRBJkl+Ksm49Q7RbpHjcjFJbFGYu YKpCoMgfk1orM09bC/djJvU72/ANGgiMRo+dmA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20220822050000 20220809040000 20826 . U+GWGNfJyka4rPaQgzCewcWoI7NuSOWKtmXMsay6n7UMLQqJwMJWgRY68eyLB5+SRIkv/vpAkKVb tiDU54k3a1tBAu4XhZZNEwgHATen1JRNeOI48YRZ8KC55KrKzMMJFCZLZc3EUDSOB682NWYSR0sh xTiRzqPxL5DpMcChtgTQgG7ZgJkCKtROzQLZbQINciX4vIRpgNJcF5+4/MbTFpaFi0uf5wOzgNje nszxJGw3+qfYi2tQ+VGEGA3fiMnnZEGP5Tnatj6gvXDtYGVOgRBJkl+Ksm49Q7RbpHjcjFJbFGYu YKpCoMgfk1orM09bC/djJvU72/ANGgiMRo+dmA== )`
	RRSIG=20826 and DNSKEY=20826 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to d.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 81.19.194.30
	;; Response received from 81.19.194.30 (777 octets) ;; HEADER SECTION ;; id = 12177 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbSW4ocEzPbMwUkqAURZNNLAAZ9XoKgSLoPQVtMdnKBkrDoIwWxYO0nk3n/seSHxNb4I+Shq HeLM0bydpkqpMPCesMKazwq2YfQD0t0NdN4kiApakMBOO6foEa9UKHg8YbF5ZeZ2oZzIyFVlDhZB qtVeCM7SIEfxp8VR4/TWRHaoqoOnScTAoVZA9+YknqERZeQoUecTd1xXBHV0dQawxlc= ) ; Key ID = 261 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20220822190254 20220807185754 7698 gov. dBSpBgHX0L/G2I5MJ/wkADBF0OthUgrMtPrydX0kqzyxQ9q6NGouP9nsmeBDOGrwE8zw7tL4i8fT SOopdT5cwON+mCIXEufGG3NzJq3NRDUkFe5WV3gY5YKqK6LdBcHiiRp3pUuG7KweBRaz5OoWcu9c SyZ24XyNzRfw5i0QGzAvnHXd8YDn+1pFHGbtT596srFiwAizD9ulBk8n2onBC7ITfykoxu4fEO6H 6Onjeuh0wmJx+w0kfGvuShL7+P+o88iXilvEMAxeOxTq0zWgskqQLLRpd/k/fVJUk+CelsaWz2V6 0ySOAHlvSa9XwlINoCMtuBhR3dwglLxnixqudw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbSW4ocEzPbMwUkqAURZNNLAAZ9XoKgSLoPQVtMdnKBkrDoIwWxYO0nk3n/seSHxNb4I+Shq HeLM0bydpkqpMPCesMKazwq2YfQD0t0NdN4kiApakMBOO6foEa9UKHg8YbF5ZeZ2oZzIyFVlDhZB qtVeCM7SIEfxp8VR4/TWRHaoqoOnScTAoVZA9+YknqERZeQoUecTd1xXBHV0dQawxlc= ) ; Key ID = 261`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20220822190254 20220807185754 7698 gov. dBSpBgHX0L/G2I5MJ/wkADBF0OthUgrMtPrydX0kqzyxQ9q6NGouP9nsmeBDOGrwE8zw7tL4i8fT SOopdT5cwON+mCIXEufGG3NzJq3NRDUkFe5WV3gY5YKqK6LdBcHiiRp3pUuG7KweBRaz5OoWcu9c SyZ24XyNzRfw5i0QGzAvnHXd8YDn+1pFHGbtT596srFiwAizD9ulBk8n2onBC7ITfykoxu4fEO6H 6Onjeuh0wmJx+w0kfGvuShL7+P+o88iXilvEMAxeOxTq0zWgskqQLLRpd/k/fVJUk+CelsaWz2V6 0ySOAHlvSa9XwlINoCMtuBhR3dwglLxnixqudw== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=261 is now in the chain-of-trust
	Query to a.gov-servers.net for CLINICALTRIALS.GOV/A
	Received 493 bytes from 69.36.157.30
	;; Response received from 69.36.157.30 (493 octets) ;; HEADER SECTION ;; id = 37161 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CLINICALTRIALS.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) CLINICALTRIALS.GOV. 86400 IN NS gslb02.nlm.nih.GOV. CLINICALTRIALS.GOV. 86400 IN NS gslb03.nlm.nih.GOV. CLINICALTRIALS.GOV. 86400 IN NS gslb01.nlm.nih.GOV. CLINICALTRIALS.GOV. 3600 IN DS ( 5749 8 2 bb4d17c892b91aa828e48c0fd92029e258f82cb3d945951ac1bc4238c731d8a1 ) CLINICALTRIALS.GOV. 3600 IN RRSIG ( DS 8 2 3600 20220814154009 20220807154009 261 gov. syQ71N8ZiTiVnsbnOsdoaWNsgZT9NzRzs+T6g6pEYvmK0/B8URQi1EoYasIfsNyX5JlrSvYDSCi9 20sJK6RB9mxWKcvwXpYNsbJHExVdt3WozEAU3WT+vfOua7jJcCrkERMDs8FUeQpQ33PiqSyjHOKa FgpsDljIzCUsau5/a8vVEA8ANweMUK0wA4tKO/KuiROIQdow38juQomxfH1iPg== ) ;; ADDITIONAL SECTION (7 records) gslb01.nlm.nih.GOV. 86400 IN A 130.14.252.50 gslb02.nlm.nih.GOV. 86400 IN A 165.112.6.3 gslb03.nlm.nih.GOV. 86400 IN A 130.14.252.53 gslb01.nlm.nih.GOV. 86400 IN AAAA 2607:f220:41e:252::50 gslb02.nlm.nih.GOV. 86400 IN AAAA 2607:f220:41f:1405::3 gslb03.nlm.nih.GOV. 86400 IN AAAA 2607:f220:41e:252::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.gov-servers.net for CLINICALTRIALS.GOV/DNSKEY
	Received 493 bytes from 69.36.153.30
	;; Response received from 69.36.153.30 (493 octets) ;; HEADER SECTION ;; id = 21640 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CLINICALTRIALS.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) CLINICALTRIALS.GOV. 86400 IN NS gslb03.nlm.nih.GOV. CLINICALTRIALS.GOV. 86400 IN NS gslb01.nlm.nih.GOV. CLINICALTRIALS.GOV. 86400 IN NS gslb02.nlm.nih.GOV. CLINICALTRIALS.GOV. 3600 IN DS ( 5749 8 2 bb4d17c892b91aa828e48c0fd92029e258f82cb3d945951ac1bc4238c731d8a1 ) CLINICALTRIALS.GOV. 3600 IN RRSIG ( DS 8 2 3600 20220814154009 20220807154009 261 gov. syQ71N8ZiTiVnsbnOsdoaWNsgZT9NzRzs+T6g6pEYvmK0/B8URQi1EoYasIfsNyX5JlrSvYDSCi9 20sJK6RB9mxWKcvwXpYNsbJHExVdt3WozEAU3WT+vfOua7jJcCrkERMDs8FUeQpQ33PiqSyjHOKa FgpsDljIzCUsau5/a8vVEA8ANweMUK0wA4tKO/KuiROIQdow38juQomxfH1iPg== ) ;; ADDITIONAL SECTION (7 records) gslb01.nlm.nih.GOV. 86400 IN A 130.14.252.50 gslb02.nlm.nih.GOV. 86400 IN A 165.112.6.3 gslb03.nlm.nih.GOV. 86400 IN A 130.14.252.53 gslb01.nlm.nih.GOV. 86400 IN AAAA 2607:f220:41e:252::50 gslb02.nlm.nih.GOV. 86400 IN AAAA 2607:f220:41f:1405::3 gslb03.nlm.nih.GOV. 86400 IN AAAA 2607:f220:41e:252::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone CLINICALTRIALS.GOV

CLINICALTRIALS.GOV

	Checking DS between GOV and CLINICALTRIALS.GOV
	Query to b.gov-servers.net for CLINICALTRIALS.GOV/DS
	Received 290 bytes from 209.112.123.30
	;; Response received from 209.112.123.30 (290 octets) ;; HEADER SECTION ;; id = 35129 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CLINICALTRIALS.GOV. IN DS ;; ANSWER SECTION (2 records) CLINICALTRIALS.GOV. 3600 IN DS ( 5749 8 2 bb4d17c892b91aa828e48c0fd92029e258f82cb3d945951ac1bc4238c731d8a1 ) CLINICALTRIALS.GOV. 3600 IN RRSIG ( DS 8 2 3600 20220814154009 20220807154009 261 gov. syQ71N8ZiTiVnsbnOsdoaWNsgZT9NzRzs+T6g6pEYvmK0/B8URQi1EoYasIfsNyX5JlrSvYDSCi9 20sJK6RB9mxWKcvwXpYNsbJHExVdt3WozEAU3WT+vfOua7jJcCrkERMDs8FUeQpQ33PiqSyjHOKa FgpsDljIzCUsau5/a8vVEA8ANweMUK0wA4tKO/KuiROIQdow38juQomxfH1iPg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for CLINICALTRIALS.GOV in the GOV zone
	DS=5749/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`CLINICALTRIALS.GOV. 3600 IN RRSIG ( DS 8 2 3600 20220814154009 20220807154009 261 gov. syQ71N8ZiTiVnsbnOsdoaWNsgZT9NzRzs+T6g6pEYvmK0/B8URQi1EoYasIfsNyX5JlrSvYDSCi9 20sJK6RB9mxWKcvwXpYNsbJHExVdt3WozEAU3WT+vfOua7jJcCrkERMDs8FUeQpQ33PiqSyjHOKa FgpsDljIzCUsau5/a8vVEA8ANweMUK0wA4tKO/KuiROIQdow38juQomxfH1iPg== )`
	RRSIG=261 and DNSKEY=261 verifies the DS RRset
	DS=5749/SHA-256 is now in the chain-of-trust
	`CLINICALTRIALS.GOV. 3600 IN DS ( 5749 8 2 bb4d17c892b91aa828e48c0fd92029e258f82cb3d945951ac1bc4238c731d8a1 )`
	Query to gslb03.nlm.nih.GOV for CLINICALTRIALS.GOV/DNSKEY
	Received 1211 bytes from 130.14.252.53
	;; Response received from 130.14.252.53 (1211 octets) ;; HEADER SECTION ;; id = 55180 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CLINICALTRIALS.GOV. IN DNSKEY ;; ANSWER SECTION (4 records) CLINICALTRIALS.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAabCAvM9FYMWfFigi/+HhWCj9P2fbFRGwn1I4Ka29X1nSnKJU5BpTEhMwj+50vDOhMso2ch6 wgSL1BeXoZihraQz6j/7HPIdxOPfkZR7s83aTzW4QwMVmK0RE0RAEqQqC0AWepjyYBDyqNwsJFCT 56nsAS5ounLzivhci6TXONe9iuL/7cbZrvdI9THU1w0BKldKb+1ctz2WcwXiKWxYi4WbOoB7mxvL MiDlmo01Lu6B4Zz9PN+IymDXSEs2fwyVCrqy7+ZKbjIYhjEV9Lny0NjkCeIgysGUgAnOxlDfYzJK TLAr15zEVcaM9MwnFlg+UNq2ttbUZNJ3Ul5e2dWiroE= ) ; Key ID = 5749 CLINICALTRIALS.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAby43tJTQaJcCfR0r3tc1rocEitB13oX4HmkaBVgh53TQnWhimWiPCbYQcMcf+y7Jk112FMG cNubpgo9Fb73askewe+8ddQxvD65Q1YGtnbfWhDgWcYdiuTB/py462/paai1p91unSbA9IMYbCKn sYVSYQInORfoHiNbZ71lV7u1cq8QIJOdaBHx6htRnAM3RYWU8wVTpcY1zPvM4pYBhHVcqrSsyxCV TGS6PFOJOMXyaKlqE+pOXoeQtEgrfWdGEnMdkkg+I2ou9PfncXOLl4s6ZZZIFDZNfYZMT2zliPiG +WgDxkz6CydF4om3XVvujl5ybWfk5Fv1P89MUgyu61M= ) ; Key ID = 35580 CLINICALTRIALS.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20220812130047 20220805120047 5749 clinicaltrials.gov. kw75307uzzq8NIR3gYos3RTzyrDFgQd7n75epG558QqHBEJePSo68MfuJwxSRgqTuRGCu8J7U2sM lzSCmct06TC+Lww6ekUPTeiZE01XjgFKwrbMxGxqQCIC9pOWo1uRXKdbZ4vMyr1YoEgP3wk1kDmA EPLFfgnagZXb1C1G5njvmrGgjOL13llY5EvGye3y/42PO4TPeHx6VBQxjt70BD4Dk8RmuR32qeRy PoB/hT5FF097rMiOO76NCB5nZfqS/FyEQ1mbxF/oVwwOWElRdIrS+wzwiNxB/B2bdNs/fbQ4tIko v2rc8rir6BOrdyAMfW4OVHTMsuK7ZpJbnc1i8Q== ) CLINICALTRIALS.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20220812130047 20220805120047 35580 clinicaltrials.gov. hemw0arZpj63c34t2Y4KqUerrv7Cl/Kq1LZOLsIK3NrFq7Vp0kV3XBXZ2xsfyFN/Y0EXznTYbLHL dkVRCBr2Qt/q6t6mwUDvyJbysDP8fVSPSqn1g/SBQpAXtYJ5mrfERk5uYBY/zNfGw7eYLeFdiA1G SZXqE/Sxt+6dyRdaXvOp3QSS3gVkPVDieA9MZCMhpTTZUcGYfQJoQLwRp4/+/gqTgb2JWurMOVLM RyeJ2HqrGw6iU35hjfJcBTKvSzo1uGtepBEgmahf1RWZcmRLdw1ufNvj6h5xE+Kfqwe9Z1qplVqU 3LUpg6egIK2B1ARbi0nHkdfENrelIi/FeQJxgQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for CLINICALTRIALS.GOV
	`CLINICALTRIALS.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAabCAvM9FYMWfFigi/+HhWCj9P2fbFRGwn1I4Ka29X1nSnKJU5BpTEhMwj+50vDOhMso2ch6 wgSL1BeXoZihraQz6j/7HPIdxOPfkZR7s83aTzW4QwMVmK0RE0RAEqQqC0AWepjyYBDyqNwsJFCT 56nsAS5ounLzivhci6TXONe9iuL/7cbZrvdI9THU1w0BKldKb+1ctz2WcwXiKWxYi4WbOoB7mxvL MiDlmo01Lu6B4Zz9PN+IymDXSEs2fwyVCrqy7+ZKbjIYhjEV9Lny0NjkCeIgysGUgAnOxlDfYzJK TLAr15zEVcaM9MwnFlg+UNq2ttbUZNJ3Ul5e2dWiroE= ) ; Key ID = 5749`
	`CLINICALTRIALS.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAby43tJTQaJcCfR0r3tc1rocEitB13oX4HmkaBVgh53TQnWhimWiPCbYQcMcf+y7Jk112FMG cNubpgo9Fb73askewe+8ddQxvD65Q1YGtnbfWhDgWcYdiuTB/py462/paai1p91unSbA9IMYbCKn sYVSYQInORfoHiNbZ71lV7u1cq8QIJOdaBHx6htRnAM3RYWU8wVTpcY1zPvM4pYBhHVcqrSsyxCV TGS6PFOJOMXyaKlqE+pOXoeQtEgrfWdGEnMdkkg+I2ou9PfncXOLl4s6ZZZIFDZNfYZMT2zliPiG +WgDxkz6CydF4om3XVvujl5ybWfk5Fv1P89MUgyu61M= ) ; Key ID = 35580`
	DNSKEY=5749/SEP is now in the chain-of-trust
	DS=5749/SHA-256 verifies DNSKEY=5749/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`CLINICALTRIALS.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20220812130047 20220805120047 5749 clinicaltrials.gov. kw75307uzzq8NIR3gYos3RTzyrDFgQd7n75epG558QqHBEJePSo68MfuJwxSRgqTuRGCu8J7U2sM lzSCmct06TC+Lww6ekUPTeiZE01XjgFKwrbMxGxqQCIC9pOWo1uRXKdbZ4vMyr1YoEgP3wk1kDmA EPLFfgnagZXb1C1G5njvmrGgjOL13llY5EvGye3y/42PO4TPeHx6VBQxjt70BD4Dk8RmuR32qeRy PoB/hT5FF097rMiOO76NCB5nZfqS/FyEQ1mbxF/oVwwOWElRdIrS+wzwiNxB/B2bdNs/fbQ4tIko v2rc8rir6BOrdyAMfW4OVHTMsuK7ZpJbnc1i8Q== )`
	`CLINICALTRIALS.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20220812130047 20220805120047 35580 clinicaltrials.gov. hemw0arZpj63c34t2Y4KqUerrv7Cl/Kq1LZOLsIK3NrFq7Vp0kV3XBXZ2xsfyFN/Y0EXznTYbLHL dkVRCBr2Qt/q6t6mwUDvyJbysDP8fVSPSqn1g/SBQpAXtYJ5mrfERk5uYBY/zNfGw7eYLeFdiA1G SZXqE/Sxt+6dyRdaXvOp3QSS3gVkPVDieA9MZCMhpTTZUcGYfQJoQLwRp4/+/gqTgb2JWurMOVLM RyeJ2HqrGw6iU35hjfJcBTKvSzo1uGtepBEgmahf1RWZcmRLdw1ufNvj6h5xE+Kfqwe9Z1qplVqU 3LUpg6egIK2B1ARbi0nHkdfENrelIi/FeQJxgQ== )`
	RRSIG=5749 and DNSKEY=5749/SEP verifies the DNSKEY RRset
	RRSIG=35580 and DNSKEY=35580 verifies the DNSKEY RRset
	DNSKEY=35580 is now in the chain-of-trust
	Query to gslb01.nlm.nih.GOV for CLINICALTRIALS.GOV/A
	Received 385 bytes from 130.14.252.50
	;; Response received from 130.14.252.50 (385 octets) ;; HEADER SECTION ;; id = 58415 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CLINICALTRIALS.GOV. IN A ;; ANSWER SECTION (3 records) CLINICALTRIALS.GOV. 30 IN A 130.14.29.113 CLINICALTRIALS.GOV. 30 IN A 165.112.7.20 CLINICALTRIALS.GOV. 30 IN RRSIG ( A 8 2 30 20220816054208 20220809044208 35580 clinicaltrials.gov. fEfD5y5UmePrm6tWNTViCVObicZEjR9aq92+w3j3dpulPkdjj7c6AL8SURynEsJ0bk2cxi8PhQIv jC9CmySveGBbsdktWRHTIJvA1AEWdZZ/S/Puq6FYs3SPj1Q51fMzdFvKfLsdfrmDmINOnMyQnAYD RfAdcddVB59sRCBq2/1tx48khUeR3pTrE6xpkuB/PnHxQpsAcEML7B6L1ztTxRptuVxSb8HH6HLa NtMIx8gCrrCcBFuqluBsr935Mkgcy1I/mr7oidOrRDuEKxzY/VfxX03+RIjqrgq6AICcrQdCnZg5 ILuji/INwYg2bdXUKI5etexplxAUrSvduLNYmg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	gslb01.nlm.nih.GOV is authoritative for CLINICALTRIALS.GOV
	Found RRSIG signed by clinicaltrials.gov zone
	Query to gslb03.nlm.nih.GOV for CLINICALTRIALS.GOV/SOA
	Received 788 bytes from 130.14.252.53
	;; Response received from 130.14.252.53 (788 octets) ;; HEADER SECTION ;; id = 17849 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CLINICALTRIALS.GOV. IN SOA ;; ANSWER SECTION (2 records) CLINICALTRIALS.GOV. 60 IN SOA ( gslb01.nlm.nih.GOV. nlmdnshostmaster.mail.nih.GOV. 2022080504 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) CLINICALTRIALS.GOV. 60 IN RRSIG ( SOA 8 2 60 20220813030159 20220806020159 35580 clinicaltrials.gov. TqVutnT6BmA/FaKutIeXWHHPkxHzNZd2Q+dvqD08Kr7qXwG15C1L686s/YxXgOFdRFPukIIfKKho ZBl9zJayy/2V0eEKnx5F5bgfC6558kQzwEyrYidxdOTozoV75lM5+V5XTmfGAusH6N+qe+OYoIKZ gAa3m9Aa1OTsm22C6OSoA1ePWJAGrTChYaRDMZJv40b2QZ4TKPXxlm02HfvbG9BeOy4112pWGwbO q5gxEHOdc7pCJVzhw4fd8SsKmHoOZOukQeua/H1iz8a/yNPy0YXLXxy1V5AQDiyNPnzYeD7vhCIq MqH90dXmXf0Tv9I76zS7P9d9Hkmf6I7Jf6Rm0w== ) ;; AUTHORITY SECTION (4 records) CLINICALTRIALS.GOV. 60 IN NS gslb03.nlm.nih.GOV. CLINICALTRIALS.GOV. 60 IN NS gslb02.nlm.nih.GOV. CLINICALTRIALS.GOV. 60 IN NS gslb01.nlm.nih.GOV. CLINICALTRIALS.GOV. 60 IN RRSIG ( NS 8 2 60 20220816054309 20220809044309 35580 clinicaltrials.gov. WVFhI+0oCUt3S7MMH2mYHuYjwZ52phVTMuqI2wTMyayKfpoJuJhzNr8nN9ybIxwOCe/v36A+d18b c3iHL72yj7M00LzY8WfphTRS0n2mVPV8gR1KrGUTy8DkYpyDf/XTeD5t+pWYChAWKmQhKhmpWwMx Ad54OUGxAlAnt6TscoKpuCVTp8rpXKgXtAnserY3zFEEJzlnc/Cj6FRkwqmm/+9Bm8E7TLh9ap8w AMn7aYs+YfSQO6TpzpxMal1d3qBNeEbiyQ7QkhPfbEQfquNNmlRDMhhiQMi/om6FJO+nQu97d1Eh kQ4Oe/F+3TfDK074DdrG5HV6zTGOXXPx24vubg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to gslb02.nlm.nih.GOV for CLINICALTRIALS.GOV/SOA
	Received 788 bytes from 165.112.6.3
	;; Response received from 165.112.6.3 (788 octets) ;; HEADER SECTION ;; id = 45722 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CLINICALTRIALS.GOV. IN SOA ;; ANSWER SECTION (2 records) CLINICALTRIALS.GOV. 60 IN SOA ( gslb01.nlm.nih.GOV. nlmdnshostmaster.mail.nih.GOV. 2022080504 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) CLINICALTRIALS.GOV. 60 IN RRSIG ( SOA 8 2 60 20220813030212 20220806020212 35580 clinicaltrials.gov. kL/x+th8rpGFimBzdnSJxZL6OIa1Tcf0cR+BgRiJEx5MlMmgWm56PqJ6MHq7j6SmPBO+VvgcstsJ nEbxH6KpiWee1UP612cp7Hh724VXIgnQcggWxJOD2o773lwC9c/AqbDjIUqvA563aZ4PmpifmO1H 54UZxVV1Nfm41tEkM5dNli8XLEmTgUfeD1uw2nd775K60T2RKle9/rR76UsxNLfix9vgEDnCnSCv xWlzXaWdRDkt0Ee0HyEvEmPqRZ1L8PZwxOtlD1l9n+cBdnEDIvWXTXd+kQeWL7YKS7B752NosNF9 bi/HP8DSJuKiS323rqFO/otXrmepG9lhdG4JWw== ) ;; AUTHORITY SECTION (4 records) CLINICALTRIALS.GOV. 60 IN NS gslb01.nlm.nih.GOV. CLINICALTRIALS.GOV. 60 IN NS gslb02.nlm.nih.GOV. CLINICALTRIALS.GOV. 60 IN NS gslb03.nlm.nih.GOV. CLINICALTRIALS.GOV. 60 IN RRSIG ( NS 8 2 60 20220816054250 20220809044250 35580 clinicaltrials.gov. QBMCMMaN6JAVs2flHplNHwtisrZy1Wi/d6KDNdunM1Z6oSKMtHkpNni5/G2ohKdz7v+6RQuCoe6o 0fPoBFUX/1u++jX7YwQ9rUb0AwZSTNt7w4fWal5atgNHyax8dxZgTh5FgBhNlqKv02/kLAQdi8w9 4KG+o/HoDy0PYp17W9059JGGRzekkdA80K05JzYj9L2KbFYLHEexowv801q0519ogr7jLcU/Heqj L5nHBGKUFjwy2PhUZ3vE7uu+Ljc6NwTW9EDVLqrrYFuPtD9h5xG/MZaYCxMx2iTW/84FP0gzD5i8 x3t+/K6Ik10lLcDIO91VT8yls6y5lsmd29651A== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to gslb01.nlm.nih.GOV for CLINICALTRIALS.GOV/A
	Received 385 bytes from 130.14.252.50
	;; Response received from 130.14.252.50 (385 octets) ;; HEADER SECTION ;; id = 34028 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CLINICALTRIALS.GOV. IN A ;; ANSWER SECTION (3 records) CLINICALTRIALS.GOV. 30 IN A 130.14.29.113 CLINICALTRIALS.GOV. 30 IN A 165.112.7.20 CLINICALTRIALS.GOV. 30 IN RRSIG ( A 8 2 30 20220816054208 20220809044208 35580 clinicaltrials.gov. fEfD5y5UmePrm6tWNTViCVObicZEjR9aq92+w3j3dpulPkdjj7c6AL8SURynEsJ0bk2cxi8PhQIv jC9CmySveGBbsdktWRHTIJvA1AEWdZZ/S/Puq6FYs3SPj1Q51fMzdFvKfLsdfrmDmINOnMyQnAYD RfAdcddVB59sRCBq2/1tx48khUeR3pTrE6xpkuB/PnHxQpsAcEML7B6L1ztTxRptuVxSb8HH6HLa NtMIx8gCrrCcBFuqluBsr935Mkgcy1I/mr7oidOrRDuEKxzY/VfxX03+RIjqrgq6AICcrQdCnZg5 ILuji/INwYg2bdXUKI5etexplxAUrSvduLNYmg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	CLINICALTRIALS.GOV A RR has value 130.14.29.113
	CLINICALTRIALS.GOV A RR has value 165.112.7.20
	Found 1 RRSIGs over A RRset
	`CLINICALTRIALS.GOV. 30 IN RRSIG ( A 8 2 30 20220816054208 20220809044208 35580 clinicaltrials.gov. fEfD5y5UmePrm6tWNTViCVObicZEjR9aq92+w3j3dpulPkdjj7c6AL8SURynEsJ0bk2cxi8PhQIv jC9CmySveGBbsdktWRHTIJvA1AEWdZZ/S/Puq6FYs3SPj1Q51fMzdFvKfLsdfrmDmINOnMyQnAYD RfAdcddVB59sRCBq2/1tx48khUeR3pTrE6xpkuB/PnHxQpsAcEML7B6L1ztTxRptuVxSb8HH6HLa NtMIx8gCrrCcBFuqluBsr935Mkgcy1I/mr7oidOrRDuEKxzY/VfxX03+RIjqrgq6AICcrQdCnZg5 ILuji/INwYg2bdXUKI5etexplxAUrSvduLNYmg== )`
	RRSIG=35580 and DNSKEY=35580 verifies the A RRset

CLINICALTRIALS.GOV

	Query to gslb03.nlm.nih.GOV for CLINICALTRIALS.GOV/A
	Received 385 bytes from 130.14.252.53
	;; Response received from 130.14.252.53 (385 octets) ;; HEADER SECTION ;; id = 50109 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CLINICALTRIALS.GOV. IN A ;; ANSWER SECTION (3 records) CLINICALTRIALS.GOV. 30 IN A 130.14.29.113 CLINICALTRIALS.GOV. 30 IN A 165.112.7.20 CLINICALTRIALS.GOV. 30 IN RRSIG ( A 8 2 30 20220816054208 20220809044208 35580 clinicaltrials.gov. fEfD5y5UmePrm6tWNTViCVObicZEjR9aq92+w3j3dpulPkdjj7c6AL8SURynEsJ0bk2cxi8PhQIv jC9CmySveGBbsdktWRHTIJvA1AEWdZZ/S/Puq6FYs3SPj1Q51fMzdFvKfLsdfrmDmINOnMyQnAYD RfAdcddVB59sRCBq2/1tx48khUeR3pTrE6xpkuB/PnHxQpsAcEML7B6L1ztTxRptuVxSb8HH6HLa NtMIx8gCrrCcBFuqluBsr935Mkgcy1I/mr7oidOrRDuEKxzY/VfxX03+RIjqrgq6AICcrQdCnZg5 ILuji/INwYg2bdXUKI5etexplxAUrSvduLNYmg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	gslb03.nlm.nih.GOV is authoritative for CLINICALTRIALS.GOV
	Found RRSIG signed by clinicaltrials.gov zone
	Query to gslb03.nlm.nih.GOV for CLINICALTRIALS.GOV/A
	Received 385 bytes from 130.14.252.53
	;; Response received from 130.14.252.53 (385 octets) ;; HEADER SECTION ;; id = 49982 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CLINICALTRIALS.GOV. IN A ;; ANSWER SECTION (3 records) CLINICALTRIALS.GOV. 30 IN A 130.14.29.113 CLINICALTRIALS.GOV. 30 IN A 165.112.7.20 CLINICALTRIALS.GOV. 30 IN RRSIG ( A 8 2 30 20220816054208 20220809044208 35580 clinicaltrials.gov. fEfD5y5UmePrm6tWNTViCVObicZEjR9aq92+w3j3dpulPkdjj7c6AL8SURynEsJ0bk2cxi8PhQIv jC9CmySveGBbsdktWRHTIJvA1AEWdZZ/S/Puq6FYs3SPj1Q51fMzdFvKfLsdfrmDmINOnMyQnAYD RfAdcddVB59sRCBq2/1tx48khUeR3pTrE6xpkuB/PnHxQpsAcEML7B6L1ztTxRptuVxSb8HH6HLa NtMIx8gCrrCcBFuqluBsr935Mkgcy1I/mr7oidOrRDuEKxzY/VfxX03+RIjqrgq6AICcrQdCnZg5 ILuji/INwYg2bdXUKI5etexplxAUrSvduLNYmg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	CLINICALTRIALS.GOV A RR has value 130.14.29.113
	CLINICALTRIALS.GOV A RR has value 165.112.7.20
	Found 1 RRSIGs over A RRset
	`CLINICALTRIALS.GOV. 30 IN RRSIG ( A 8 2 30 20220816054208 20220809044208 35580 clinicaltrials.gov. fEfD5y5UmePrm6tWNTViCVObicZEjR9aq92+w3j3dpulPkdjj7c6AL8SURynEsJ0bk2cxi8PhQIv jC9CmySveGBbsdktWRHTIJvA1AEWdZZ/S/Puq6FYs3SPj1Q51fMzdFvKfLsdfrmDmINOnMyQnAYD RfAdcddVB59sRCBq2/1tx48khUeR3pTrE6xpkuB/PnHxQpsAcEML7B6L1ztTxRptuVxSb8HH6HLa NtMIx8gCrrCcBFuqluBsr935Mkgcy1I/mr7oidOrRDuEKxzY/VfxX03+RIjqrgq6AICcrQdCnZg5 ILuji/INwYg2bdXUKI5etexplxAUrSvduLNYmg== )`
	RRSIG=35580 and DNSKEY=35580 verifies the A RRset

CLINICALTRIALS.GOV

	Query to gslb02.nlm.nih.GOV for CLINICALTRIALS.GOV/A
	Received 385 bytes from 165.112.6.3
	;; Response received from 165.112.6.3 (385 octets) ;; HEADER SECTION ;; id = 29120 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CLINICALTRIALS.GOV. IN A ;; ANSWER SECTION (3 records) CLINICALTRIALS.GOV. 30 IN A 130.14.29.113 CLINICALTRIALS.GOV. 30 IN A 165.112.7.20 CLINICALTRIALS.GOV. 30 IN RRSIG ( A 8 2 30 20220816054208 20220809044208 35580 clinicaltrials.gov. fEfD5y5UmePrm6tWNTViCVObicZEjR9aq92+w3j3dpulPkdjj7c6AL8SURynEsJ0bk2cxi8PhQIv jC9CmySveGBbsdktWRHTIJvA1AEWdZZ/S/Puq6FYs3SPj1Q51fMzdFvKfLsdfrmDmINOnMyQnAYD RfAdcddVB59sRCBq2/1tx48khUeR3pTrE6xpkuB/PnHxQpsAcEML7B6L1ztTxRptuVxSb8HH6HLa NtMIx8gCrrCcBFuqluBsr935Mkgcy1I/mr7oidOrRDuEKxzY/VfxX03+RIjqrgq6AICcrQdCnZg5 ILuji/INwYg2bdXUKI5etexplxAUrSvduLNYmg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	gslb02.nlm.nih.GOV is authoritative for CLINICALTRIALS.GOV
	Found RRSIG signed by clinicaltrials.gov zone
	Query to gslb02.nlm.nih.GOV for CLINICALTRIALS.GOV/A
	Received 385 bytes from 165.112.6.3
	;; Response received from 165.112.6.3 (385 octets) ;; HEADER SECTION ;; id = 53211 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CLINICALTRIALS.GOV. IN A ;; ANSWER SECTION (3 records) CLINICALTRIALS.GOV. 30 IN A 130.14.29.113 CLINICALTRIALS.GOV. 30 IN A 165.112.7.20 CLINICALTRIALS.GOV. 30 IN RRSIG ( A 8 2 30 20220816054208 20220809044208 35580 clinicaltrials.gov. fEfD5y5UmePrm6tWNTViCVObicZEjR9aq92+w3j3dpulPkdjj7c6AL8SURynEsJ0bk2cxi8PhQIv jC9CmySveGBbsdktWRHTIJvA1AEWdZZ/S/Puq6FYs3SPj1Q51fMzdFvKfLsdfrmDmINOnMyQnAYD RfAdcddVB59sRCBq2/1tx48khUeR3pTrE6xpkuB/PnHxQpsAcEML7B6L1ztTxRptuVxSb8HH6HLa NtMIx8gCrrCcBFuqluBsr935Mkgcy1I/mr7oidOrRDuEKxzY/VfxX03+RIjqrgq6AICcrQdCnZg5 ILuji/INwYg2bdXUKI5etexplxAUrSvduLNYmg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	CLINICALTRIALS.GOV A RR has value 130.14.29.113
	CLINICALTRIALS.GOV A RR has value 165.112.7.20
	Found 1 RRSIGs over A RRset
	`CLINICALTRIALS.GOV. 30 IN RRSIG ( A 8 2 30 20220816054208 20220809044208 35580 clinicaltrials.gov. fEfD5y5UmePrm6tWNTViCVObicZEjR9aq92+w3j3dpulPkdjj7c6AL8SURynEsJ0bk2cxi8PhQIv jC9CmySveGBbsdktWRHTIJvA1AEWdZZ/S/Puq6FYs3SPj1Q51fMzdFvKfLsdfrmDmINOnMyQnAYD RfAdcddVB59sRCBq2/1tx48khUeR3pTrE6xpkuB/PnHxQpsAcEML7B6L1ztTxRptuVxSb8HH6HLa NtMIx8gCrrCcBFuqluBsr935Mkgcy1I/mr7oidOrRDuEKxzY/VfxX03+RIjqrgq6AICcrQdCnZg5 ILuji/INwYg2bdXUKI5etexplxAUrSvduLNYmg== )`
	RRSIG=35580 and DNSKEY=35580 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test CLINICALTRIALS.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: