DNSSEC Analyzer - DHHS.GOV

Domain Name:

Time: 2019-12-09 08:08:17 UTC, NTP stratum 4

Analyzing DNSSEC problems for DHHS.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Error querying j.root-servers.net/2001:503:c27:0:0:0:2:30 for ./DNSKEY: 'IPv6 transport disabled'
	Received 864 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (864 bytes) ;; HEADER SECTION ;; id = 47036 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20191221000000 20191130000000 20326 . Gq7w8sR2CNe4RDL05IeRsmtmsJ38wsSuTCaSgsZmBoVk0azQToi8bJ2pd6EUlav0hRwpFXhGrOeg Rutf6RcePbaDVLLChY5H1ExeT1GhJVtCctHNTbUQadziztCEPcmtjrMEoOsRGkW8cNTo8MG79DZa jdG6P3MjQselQVVxFCWiT1Eqa0A9ojd2wEgNanUafw7mJSasBMD0tco+tQMmMmLGqX/d7/K1D/3/ lFPrclzwWiOcv3yRbTLW2X45Fn4ZNpuuV4KSwxTGBylxG5jDhPsrrumwnAk2hrRrWzshGCWgbXtk R95utBYdb/ZsZaO7KuqicdE5ZItJEV8Qh4FikA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20191221000000 20191130000000 20326 . Gq7w8sR2CNe4RDL05IeRsmtmsJ38wsSuTCaSgsZmBoVk0azQToi8bJ2pd6EUlav0hRwpFXhGrOeg Rutf6RcePbaDVLLChY5H1ExeT1GhJVtCctHNTbUQadziztCEPcmtjrMEoOsRGkW8cNTo8MG79DZa jdG6P3MjQselQVVxFCWiT1Eqa0A9ojd2wEgNanUafw7mJSasBMD0tco+tQMmMmLGqX/d7/K1D/3/ lFPrclzwWiOcv3yRbTLW2X45Fn4ZNpuuV4KSwxTGBylxG5jDhPsrrumwnAk2hrRrWzshGCWgbXtk R95utBYdb/ZsZaO7KuqicdE5ZItJEV8Qh4FikA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=22545 is now in the chain-of-trust
	Query to b.root-servers.net for DHHS.GOV/A
	Error querying b.root-servers.net/2001:500:200:0:0:0:0:b for DHHS.GOV/A: 'IPv6 transport disabled'
	Received 666 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (666 bytes) ;; HEADER SECTION ;; id = 41193 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DHHS.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20191222050000 20191209040000 22545 . IWjC+LZFs0tHSJMsCYFhMBiqzMVwcXNWHVrtIMFWqLnmS2/HWC3PKPlXRAtzHBnOtHjbPUNpYSLg 2UE2eaBBpAGpUx98BrzlXmbzDqkwnUGqkOhgg4rBtQAYMBTFQNuNpbitG/PnZM1dox/nzC2AlMRm NvvkgqhTBuuuwohHFBEpJc3fkYGDNV1+HY7wzCoTgkZCaMd0CRHd38fRe3ATaLGkwJmbddqmL2VF o6ETQKOJihJ+jqGVJQpXws6uUmc4HvDbCe10kN+jNsU3j0taI3qCLXSe7RBGCa///wG18LEgqoj1 rqmjXQUQfBjlA3XuwY94y2FFNpbLz4e4kIndYg== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to j.root-servers.net for GOV/DNSKEY
	Received 658 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (658 bytes) ;; HEADER SECTION ;; id = 45093 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20191222050000 20191209040000 22545 . IWjC+LZFs0tHSJMsCYFhMBiqzMVwcXNWHVrtIMFWqLnmS2/HWC3PKPlXRAtzHBnOtHjbPUNpYSLg 2UE2eaBBpAGpUx98BrzlXmbzDqkwnUGqkOhgg4rBtQAYMBTFQNuNpbitG/PnZM1dox/nzC2AlMRm NvvkgqhTBuuuwohHFBEpJc3fkYGDNV1+HY7wzCoTgkZCaMd0CRHd38fRe3ATaLGkwJmbddqmL2VF o6ETQKOJihJ+jqGVJQpXws6uUmc4HvDbCe10kN+jNsU3j0taI3qCLXSe7RBGCa///wG18LEgqoj1 rqmjXQUQfBjlA3XuwY94y2FFNpbLz4e4kIndYg== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to c.root-servers.net for GOV/DS
	Received 406 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (406 bytes) ;; HEADER SECTION ;; id = 19477 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20191222050000 20191209040000 22545 . IWjC+LZFs0tHSJMsCYFhMBiqzMVwcXNWHVrtIMFWqLnmS2/HWC3PKPlXRAtzHBnOtHjbPUNpYSLg 2UE2eaBBpAGpUx98BrzlXmbzDqkwnUGqkOhgg4rBtQAYMBTFQNuNpbitG/PnZM1dox/nzC2AlMRm NvvkgqhTBuuuwohHFBEpJc3fkYGDNV1+HY7wzCoTgkZCaMd0CRHd38fRe3ATaLGkwJmbddqmL2VF o6ETQKOJihJ+jqGVJQpXws6uUmc4HvDbCe10kN+jNsU3j0taI3qCLXSe7RBGCa///wG18LEgqoj1 rqmjXQUQfBjlA3XuwY94y2FFNpbLz4e4kIndYg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	DS=7698/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20191222050000 20191209040000 22545 . IWjC+LZFs0tHSJMsCYFhMBiqzMVwcXNWHVrtIMFWqLnmS2/HWC3PKPlXRAtzHBnOtHjbPUNpYSLg 2UE2eaBBpAGpUx98BrzlXmbzDqkwnUGqkOhgg4rBtQAYMBTFQNuNpbitG/PnZM1dox/nzC2AlMRm NvvkgqhTBuuuwohHFBEpJc3fkYGDNV1+HY7wzCoTgkZCaMd0CRHd38fRe3ATaLGkwJmbddqmL2VF o6ETQKOJihJ+jqGVJQpXws6uUmc4HvDbCe10kN+jNsU3j0taI3qCLXSe7RBGCa///wG18LEgqoj1 rqmjXQUQfBjlA3XuwY94y2FFNpbLz4e4kIndYg== )`
	RRSIG=22545 and DNSKEY=22545 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	Query to a.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (777 bytes) ;; HEADER SECTION ;; id = 39715 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAcQAVXGAbq+khqvif1NNId5wvkmsmSZEb/UXjfazqpqEeA7IUc8b/9eEIBebIcFda4Ukv8lF lnfGIvMRADLa50RVwP2asra1Md0NC9tLjrHEYN0H68WN0tTLIQ6jUF/kzYTeTOVhlUqzM+5JyyT9 x01e1FT5ANG8RkbgXIyPte2Qs8wasqNkjFGaD5oFLerVScCa0FXumybu9cBEfBbAzPU= ) ; Key ID = 14320 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20191216200254 20191201195754 7698 gov. eu0gshGgymERiO+iIcdmJ9TqP0dRgpvjyGnI2OQlkm58YEsevRvOYxpKw0K6F9PT3RvOGPbRPvO2 b6psOWhSSeu0Btc+bvHWrEBqnf9t3h+lrfkGKSb53OFDvgtgtWR9zzeUrgivuVU09zPOqozOWcmk Ox8uhvXUrK0zoscGpBDO9efoTVF/Di6gg3tR0DWhsL/Qu3uuDT2F+k1m2WAaLaJCb3QDWgEWgcGn XEy1HEmJ0Uzca8PnKWwMNBktuODiBTiSNaUwVNFnXJmDxQMEAA+PS+DbbLJJX2CcodMHFiErvO4U JQiQgu9X8g0RpG2EO2oq6gTfIPKs+KsZ6K2y7Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAcQAVXGAbq+khqvif1NNId5wvkmsmSZEb/UXjfazqpqEeA7IUc8b/9eEIBebIcFda4Ukv8lF lnfGIvMRADLa50RVwP2asra1Md0NC9tLjrHEYN0H68WN0tTLIQ6jUF/kzYTeTOVhlUqzM+5JyyT9 x01e1FT5ANG8RkbgXIyPte2Qs8wasqNkjFGaD5oFLerVScCa0FXumybu9cBEfBbAzPU= ) ; Key ID = 14320`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20191216200254 20191201195754 7698 gov. eu0gshGgymERiO+iIcdmJ9TqP0dRgpvjyGnI2OQlkm58YEsevRvOYxpKw0K6F9PT3RvOGPbRPvO2 b6psOWhSSeu0Btc+bvHWrEBqnf9t3h+lrfkGKSb53OFDvgtgtWR9zzeUrgivuVU09zPOqozOWcmk Ox8uhvXUrK0zoscGpBDO9efoTVF/Di6gg3tR0DWhsL/Qu3uuDT2F+k1m2WAaLaJCb3QDWgEWgcGn XEy1HEmJ0Uzca8PnKWwMNBktuODiBTiSNaUwVNFnXJmDxQMEAA+PS+DbbLJJX2CcodMHFiErvO4U JQiQgu9X8g0RpG2EO2oq6gTfIPKs+KsZ6K2y7Q== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=14320 is now in the chain-of-trust
	Query to d.gov-servers.net for DHHS.GOV/A
	Error querying d.gov-servers.net/2620:74:29:0:0:0:2:30 for DHHS.GOV/A: 'IPv6 transport disabled'
	Received 676 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (676 bytes) ;; HEADER SECTION ;; id = 48976 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DHHS.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) DHHS.GOV. 86400 IN NS rh120ns2.368.DHHS.GOV. DHHS.GOV. 86400 IN NS rh202ns2.355.DHHS.GOV. DHHS.GOV. 86400 IN NS rh120ns1.368.DHHS.GOV. DHHS.GOV. 86400 IN NS rh202ns1.355.DHHS.GOV. DHHS.GOV. 3600 IN DS ( 19309 8 2 739dd8335ace5302049145e12c11195d9c6ae74ad88d7dc825c9a2a04b6d4997 ) DHHS.GOV. 3600 IN DS ( 58697 8 2 2f0a48d82818045606a4c4be490b7c23b39ce7172815973034a82f73bd691e5f ) DHHS.GOV. 3600 IN DS 58697 8 1 22285b929a7a6e48d3876d2228cea40de736ee5c DHHS.GOV. 3600 IN DS 19309 8 1 ba152e46110ee97b0d9c6cc57b8f0556e9ca1752 DHHS.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191216041007 20191209041007 14320 gov. DcX/Jb1s9KWTpW+wlC5Jt0ZE85IGZMT7lWm1jt5B8riVLH5i/sMKlrfwMnksGDTU9Ikz4GFfq+zk K03i1AZhD9HOqHLIWSZqOPYOrFwGDzVFIkUuNy1sOrClx/jsb70ntUBt+ciHEo2pkXSMmnjyekt+ NXKOSCD3ccAo1XLaq3FhVv6khhu8cuEHOnmtn0rzFfoF2voEgnvzy5gUMjuZnA== ) ;; ADDITIONAL SECTION (9 records) rh120ns2.368.DHHS.GOV. 86400 IN A 158.74.30.103 rh120ns2.368.DHHS.GOV. 86400 IN AAAA 2607:f220:0:1::2d rh202ns2.355.DHHS.GOV. 86400 IN A 158.74.30.99 rh202ns2.355.DHHS.GOV. 86400 IN AAAA 2607:f220:0:1::2b rh120ns1.368.DHHS.GOV. 86400 IN A 158.74.30.102 rh120ns1.368.DHHS.GOV. 86400 IN AAAA 2607:f220:0:1::2c rh202ns1.355.DHHS.GOV. 86400 IN A 158.74.30.98 rh202ns1.355.DHHS.GOV. 86400 IN AAAA 2607:f220:0:1::2a ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.gov-servers.net for DHHS.GOV/DNSKEY
	Received 676 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (676 bytes) ;; HEADER SECTION ;; id = 13935 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DHHS.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) DHHS.GOV. 86400 IN NS rh120ns2.368.DHHS.GOV. DHHS.GOV. 86400 IN NS rh202ns2.355.DHHS.GOV. DHHS.GOV. 86400 IN NS rh120ns1.368.DHHS.GOV. DHHS.GOV. 86400 IN NS rh202ns1.355.DHHS.GOV. DHHS.GOV. 3600 IN DS ( 19309 8 2 739dd8335ace5302049145e12c11195d9c6ae74ad88d7dc825c9a2a04b6d4997 ) DHHS.GOV. 3600 IN DS ( 58697 8 2 2f0a48d82818045606a4c4be490b7c23b39ce7172815973034a82f73bd691e5f ) DHHS.GOV. 3600 IN DS 58697 8 1 22285b929a7a6e48d3876d2228cea40de736ee5c DHHS.GOV. 3600 IN DS 19309 8 1 ba152e46110ee97b0d9c6cc57b8f0556e9ca1752 DHHS.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191216041007 20191209041007 14320 gov. DcX/Jb1s9KWTpW+wlC5Jt0ZE85IGZMT7lWm1jt5B8riVLH5i/sMKlrfwMnksGDTU9Ikz4GFfq+zk K03i1AZhD9HOqHLIWSZqOPYOrFwGDzVFIkUuNy1sOrClx/jsb70ntUBt+ciHEo2pkXSMmnjyekt+ NXKOSCD3ccAo1XLaq3FhVv6khhu8cuEHOnmtn0rzFfoF2voEgnvzy5gUMjuZnA== ) ;; ADDITIONAL SECTION (9 records) rh120ns2.368.DHHS.GOV. 86400 IN A 158.74.30.103 rh120ns2.368.DHHS.GOV. 86400 IN AAAA 2607:f220:0:1::2d rh202ns2.355.DHHS.GOV. 86400 IN A 158.74.30.99 rh202ns2.355.DHHS.GOV. 86400 IN AAAA 2607:f220:0:1::2b rh120ns1.368.DHHS.GOV. 86400 IN A 158.74.30.102 rh120ns1.368.DHHS.GOV. 86400 IN AAAA 2607:f220:0:1::2c rh202ns1.355.DHHS.GOV. 86400 IN A 158.74.30.98 rh202ns1.355.DHHS.GOV. 86400 IN AAAA 2607:f220:0:1::2a ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone DHHS.GOV

DHHS.GOV

	Checking DS between GOV and DHHS.GOV
	Query to b.gov-servers.net for DHHS.GOV/DS
	Received 400 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (400 bytes) ;; HEADER SECTION ;; id = 33460 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DHHS.GOV. IN DS ;; ANSWER SECTION (5 records) DHHS.GOV. 3600 IN DS ( 19309 8 2 739dd8335ace5302049145e12c11195d9c6ae74ad88d7dc825c9a2a04b6d4997 ) DHHS.GOV. 3600 IN DS ( 58697 8 2 2f0a48d82818045606a4c4be490b7c23b39ce7172815973034a82f73bd691e5f ) DHHS.GOV. 3600 IN DS 58697 8 1 22285b929a7a6e48d3876d2228cea40de736ee5c DHHS.GOV. 3600 IN DS 19309 8 1 ba152e46110ee97b0d9c6cc57b8f0556e9ca1752 DHHS.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191216041007 20191209041007 14320 gov. DcX/Jb1s9KWTpW+wlC5Jt0ZE85IGZMT7lWm1jt5B8riVLH5i/sMKlrfwMnksGDTU9Ikz4GFfq+zk K03i1AZhD9HOqHLIWSZqOPYOrFwGDzVFIkUuNy1sOrClx/jsb70ntUBt+ciHEo2pkXSMmnjyekt+ NXKOSCD3ccAo1XLaq3FhVv6khhu8cuEHOnmtn0rzFfoF2voEgnvzy5gUMjuZnA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for DHHS.GOV in the GOV zone
	DS=19309/SHA-256 has algorithm RSASHA256
	DS=58697/SHA-256 has algorithm RSASHA256
	DS=58697/SHA-1 has algorithm RSASHA256
	DS=19309/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`DHHS.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191216041007 20191209041007 14320 gov. DcX/Jb1s9KWTpW+wlC5Jt0ZE85IGZMT7lWm1jt5B8riVLH5i/sMKlrfwMnksGDTU9Ikz4GFfq+zk K03i1AZhD9HOqHLIWSZqOPYOrFwGDzVFIkUuNy1sOrClx/jsb70ntUBt+ciHEo2pkXSMmnjyekt+ NXKOSCD3ccAo1XLaq3FhVv6khhu8cuEHOnmtn0rzFfoF2voEgnvzy5gUMjuZnA== )`
	RRSIG=14320 and DNSKEY=14320 verifies the DS RRset
	DS=19309/SHA-256 is now in the chain-of-trust
	DS=58697/SHA-256 is now in the chain-of-trust
	`DHHS.GOV. 3600 IN DS ( 19309 8 2 739dd8335ace5302049145e12c11195d9c6ae74ad88d7dc825c9a2a04b6d4997 )`
	`DHHS.GOV. 3600 IN DS ( 58697 8 2 2f0a48d82818045606a4c4be490b7c23b39ce7172815973034a82f73bd691e5f )`
	`DHHS.GOV. 3600 IN DS 58697 8 1 22285b929a7a6e48d3876d2228cea40de736ee5c`
	`DHHS.GOV. 3600 IN DS 19309 8 1 ba152e46110ee97b0d9c6cc57b8f0556e9ca1752`
	Query to rh120ns1.368.DHHS.GOV for DHHS.GOV/DNSKEY
	Received 1517 bytes from 158.74.30.102
	;; Answer received from 158.74.30.102 (1517 bytes) ;; HEADER SECTION ;; id = 52571 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 7 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DHHS.GOV. IN DNSKEY ;; ANSWER SECTION (7 records) DHHS.GOV. 900 IN DNSKEY ( 256 3 8 AwEAAYvXrnRQCkvHVPEoBscIfiUgMg1WYmmLVyykxyiEJ0ouzSgtbVYddjQ7yQyEQPup1QaIMK4o 1sisvnVtyBExwwkUUNmXIkDWebdNgeEy041jDe/i3oeH7j33nizSMHPD02hUIq0QBKlf7Nt94qC7 sjTbZdC2L5zLhWH14AlgJfP/ ) ; Key ID = 16060 DHHS.GOV. 900 IN DNSKEY ( 256 3 8 AwEAAaakTCsnGpKcikyVG1nS6iFXg2N6fDbilpeTvT9JuEq/lHls1f9w+rz+kL5PEi3sg35UiKbI Z+S4LPP9PiPH96eQ/RW5vIFGW+fpPP+PW2FcSet5dorjju8GkBD0I216hkT03H2ggAF21xV07XXr fKtOa9L/NNyf4mtPvqCiCsaJ ) ; Key ID = 42849 DHHS.GOV. 900 IN DNSKEY ( 257 3 8 AwEAAZY/RcgtgSd5mfL1h6lsK9C1HRLqcDcolGcsG7+204ZsQFbQqpZXkUO4EqUuFOsdBv2ZNu64 /A4LPI39/i962HksPZehepCqIsjCC6QWHUhYC8bPizvlKShp0adb8dko9gNea4LnwSXFCxatshx/ PVDANo/pvw72lMrm0gIBU0MfEFyxOGlCYIGc/6vs2bbeNgiDjvba+m9KYO9A2cFmCQhBXg8gMpPG JH1kwKSGf7y2I2rhP0aAx8ramdakauxF7PGIsCFu0r1W87AQJRdsnXPiP6kjVC3qI5xNQC8yQZt+ m1jWYwhVj0D1ufu9O3noJSK9pA5x9qIX3nHnTmqR5gE= ) ; Key ID = 58697 DHHS.GOV. 900 IN DNSKEY ( 257 3 8 AwEAAaJMMd/2o7bUC+BL+zRz/RussEt6SKooD1+PJsqsdM7EJfj4gAov/PDwglUzlYvCawFkdok3 meUa5FtHm4oi/uWiYt+Z6f8AP2dRGlF6Ka3YdDmEeRyKNo9t85DExmtvFOzMIBZYSZkdzJw00zWp ymDXJ1xKeoUfr6ajK8D56Z3KTBuLg81ZhcoBTjzcMgzsPYuvV2fQftJzHJIDjgDb/XYPfJEpusZn zKpIZd6zk8u3wKyIUj7fYEf/Fq10caDjocSl5sptV+iExID41TKObc8OLkdXaF+pyLTfQAvUuvHe qUWdRbigeAgE0qq/a6162ZxzA2WRa/7PzO43FqvCHN0= ) ; Key ID = 19309 DHHS.GOV. 900 IN RRSIG ( DNSKEY 8 2 900 20191214000132 20191208230132 16060 dhhs.gov. hp/1sUgbxaTlsg5B+dSiaZ2tiv1sMuOSByh1obajqFDj8CFkiYhztB/XeFgzmBIEsosb9Sek1bHR 7AuCO5U2TGeBuRnDUyc9kGlAKTfI83qdoxeF1+ZYUEI1dWvZnmQgI4BjtOeUtb1Mk1LgK0xsECUY 8ZHbr8rujSwOje1vHPc= ) dhhs.gov. 900 IN RRSIG ( DNSKEY 8 2 900 20191214000132 20191208230132 19309 dhhs.gov. HYhtBYzSFm9s33QyU10NhCutubBaRudDvhsNTsgQb+Ah3iY0pJs863h4PK0G76cLfZvtCwm9AS6b CVS9BzbSVVBdcEXci50pxHPyZ89AZ/bNeGRrGon6Cwg6fH0gVLrlfoB9Fqn9kjcpLoD0alqYBhFf t935P6A6SkpfdEmbpY/73vH+AOIUipbnKA2ru6Sdbd5sonmzu6bxtliXpbtqDH7bqAd+VytBbpVD zCSSZmiAYKhlQJJTuvTi+A1TZXBVXSUYdMFLFDqplQYTYE4ZKcfOW5v+uBR917It7BbEfcgnKn6L grMcpdmJz3H9eGHi2HHu+Cjh5sGgh9iDUKjB+A== ) dhhs.gov. 900 IN RRSIG ( DNSKEY 8 2 900 20191214000132 20191208230132 42849 dhhs.gov. HkSlibocm8QeQ/dSCWNMH9xUD85GvLG5pIsJ5/TZxhB60SUTLmxVfiEI2k+3ypGdTVBAn3gmNb+o d7YoGSj42/LdibYohKt1gj2svn4MNF1xYRo5IkGXRREoQ/CJu2onPsPR2vtB+fKvecuNMtC47gVl jxO3zbTHwSbBRRqWOMQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for DHHS.GOV
	`DHHS.GOV. 900 IN DNSKEY ( 256 3 8 AwEAAYvXrnRQCkvHVPEoBscIfiUgMg1WYmmLVyykxyiEJ0ouzSgtbVYddjQ7yQyEQPup1QaIMK4o 1sisvnVtyBExwwkUUNmXIkDWebdNgeEy041jDe/i3oeH7j33nizSMHPD02hUIq0QBKlf7Nt94qC7 sjTbZdC2L5zLhWH14AlgJfP/ ) ; Key ID = 16060`
	`DHHS.GOV. 900 IN DNSKEY ( 256 3 8 AwEAAaakTCsnGpKcikyVG1nS6iFXg2N6fDbilpeTvT9JuEq/lHls1f9w+rz+kL5PEi3sg35UiKbI Z+S4LPP9PiPH96eQ/RW5vIFGW+fpPP+PW2FcSet5dorjju8GkBD0I216hkT03H2ggAF21xV07XXr fKtOa9L/NNyf4mtPvqCiCsaJ ) ; Key ID = 42849`
	`DHHS.GOV. 900 IN DNSKEY ( 257 3 8 AwEAAZY/RcgtgSd5mfL1h6lsK9C1HRLqcDcolGcsG7+204ZsQFbQqpZXkUO4EqUuFOsdBv2ZNu64 /A4LPI39/i962HksPZehepCqIsjCC6QWHUhYC8bPizvlKShp0adb8dko9gNea4LnwSXFCxatshx/ PVDANo/pvw72lMrm0gIBU0MfEFyxOGlCYIGc/6vs2bbeNgiDjvba+m9KYO9A2cFmCQhBXg8gMpPG JH1kwKSGf7y2I2rhP0aAx8ramdakauxF7PGIsCFu0r1W87AQJRdsnXPiP6kjVC3qI5xNQC8yQZt+ m1jWYwhVj0D1ufu9O3noJSK9pA5x9qIX3nHnTmqR5gE= ) ; Key ID = 58697`
	`DHHS.GOV. 900 IN DNSKEY ( 257 3 8 AwEAAaJMMd/2o7bUC+BL+zRz/RussEt6SKooD1+PJsqsdM7EJfj4gAov/PDwglUzlYvCawFkdok3 meUa5FtHm4oi/uWiYt+Z6f8AP2dRGlF6Ka3YdDmEeRyKNo9t85DExmtvFOzMIBZYSZkdzJw00zWp ymDXJ1xKeoUfr6ajK8D56Z3KTBuLg81ZhcoBTjzcMgzsPYuvV2fQftJzHJIDjgDb/XYPfJEpusZn zKpIZd6zk8u3wKyIUj7fYEf/Fq10caDjocSl5sptV+iExID41TKObc8OLkdXaF+pyLTfQAvUuvHe qUWdRbigeAgE0qq/a6162ZxzA2WRa/7PzO43FqvCHN0= ) ; Key ID = 19309`
	DNSKEY=58697/SEP is now in the chain-of-trust
	DS=58697/SHA-256 verifies DNSKEY=58697/SEP
	DS=58697/SHA-1 verifies DNSKEY=58697/SEP
	DNSKEY=19309/SEP is now in the chain-of-trust
	DS=19309/SHA-256 verifies DNSKEY=19309/SEP
	DS=19309/SHA-1 verifies DNSKEY=19309/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`DHHS.GOV. 900 IN RRSIG ( DNSKEY 8 2 900 20191214000132 20191208230132 16060 dhhs.gov. hp/1sUgbxaTlsg5B+dSiaZ2tiv1sMuOSByh1obajqFDj8CFkiYhztB/XeFgzmBIEsosb9Sek1bHR 7AuCO5U2TGeBuRnDUyc9kGlAKTfI83qdoxeF1+ZYUEI1dWvZnmQgI4BjtOeUtb1Mk1LgK0xsECUY 8ZHbr8rujSwOje1vHPc= )`
	`dhhs.gov. 900 IN RRSIG ( DNSKEY 8 2 900 20191214000132 20191208230132 19309 dhhs.gov. HYhtBYzSFm9s33QyU10NhCutubBaRudDvhsNTsgQb+Ah3iY0pJs863h4PK0G76cLfZvtCwm9AS6b CVS9BzbSVVBdcEXci50pxHPyZ89AZ/bNeGRrGon6Cwg6fH0gVLrlfoB9Fqn9kjcpLoD0alqYBhFf t935P6A6SkpfdEmbpY/73vH+AOIUipbnKA2ru6Sdbd5sonmzu6bxtliXpbtqDH7bqAd+VytBbpVD zCSSZmiAYKhlQJJTuvTi+A1TZXBVXSUYdMFLFDqplQYTYE4ZKcfOW5v+uBR917It7BbEfcgnKn6L grMcpdmJz3H9eGHi2HHu+Cjh5sGgh9iDUKjB+A== )`
	`dhhs.gov. 900 IN RRSIG ( DNSKEY 8 2 900 20191214000132 20191208230132 42849 dhhs.gov. HkSlibocm8QeQ/dSCWNMH9xUD85GvLG5pIsJ5/TZxhB60SUTLmxVfiEI2k+3ypGdTVBAn3gmNb+o d7YoGSj42/LdibYohKt1gj2svn4MNF1xYRo5IkGXRREoQ/CJu2onPsPR2vtB+fKvecuNMtC47gVl jxO3zbTHwSbBRRqWOMQ= )`
	RRSIG=16060 and DNSKEY=16060 verifies the DNSKEY RRset
	RRSIG=19309 and DNSKEY=19309/SEP verifies the DNSKEY RRset
	RRSIG=42849 and DNSKEY=42849 verifies the DNSKEY RRset
	DNSKEY=16060 is now in the chain-of-trust
	DNSKEY=42849 is now in the chain-of-trust
	Query to rh120ns1.368.DHHS.GOV for DHHS.GOV/A
	Error querying rh120ns1.368.DHHS.GOV/2607:f220:0:1:0:0:0:2c for DHHS.GOV/A: 'IPv6 transport disabled'
	Received 389 bytes from 158.74.30.102
	;; Answer received from 158.74.30.102 (389 bytes) ;; HEADER SECTION ;; id = 8166 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DHHS.GOV. IN A ;; ANSWER SECTION (3 records) DHHS.GOV. 900 IN A 52.7.111.176 DHHS.GOV. 900 IN RRSIG ( A 8 2 900 20191214000132 20191208230132 16060 dhhs.gov. HAxcwa490G6eOlVcTuUkBOGlPlkQ7RIGZqQcnTfZDYlFjgonZAC7ldFmWLwfCLt7hiPlYt0MP5e+ QtdwfJ4JntJLSkePWHsvLOYT51P6CSYy8UGk+Z+K5c1DGx9Kd5KMAfTaHen1ghMrfw6Ee+6Q1cJE rkYCZU3Jmiurk3CNXTE= ) dhhs.gov. 900 IN RRSIG ( A 8 2 900 20191214000132 20191208230132 42849 dhhs.gov. ohxUoPa/QNxiiEWOeW7DAnkoJPAZ4ZgpU7+BZA3FvhfSE6UIf0YdmU2I4pLZ96YbsXjyUzBmRfUd vIfn5xGv3+zIyseQAda+krFemYpJnRBl5xUpoIPcxIo48bBEjdN1NMG6JYnLzXk8dzltZHXXnwMF nkAdI4t8hB0B4Ogll8M= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	DHHS.GOV is authoritative for DHHS.GOV
	Found RRSIG signed by dhhs.gov zone
	Query to rh202ns2.355.DHHS.GOV for DHHS.GOV/SOA
	Received 441 bytes from 158.74.30.99
	;; Answer received from 158.74.30.99 (441 bytes) ;; HEADER SECTION ;; id = 61268 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DHHS.GOV. IN SOA ;; ANSWER SECTION (3 records) DHHS.GOV. 900 IN SOA ( rh120ns1.368.DHHS.GOV. hostmaster.psc.hhs.GOV. 100006192 ;serial 600 ;refresh 60 ;retry 604800 ;expire 60 ;minimum ) DHHS.GOV. 900 IN RRSIG ( SOA 8 2 900 20191214000132 20191208230132 16060 dhhs.gov. HCXMiuMsoLtIHYl+6Gnnf5So7brW9jHbVxwuPRKaJGi1vqA9JprA2UfL9K3ez8KZ7/lxAItc9Ke7 U9HFXFHFw7OTkwSwRqueeancsf9yv98ToSEx0jT8k2H824XCpgK8kWiJZKhVUfQ8T7vPZvS2Rib5 sQKgrubBl8pghvLyebQ= ) dhhs.gov. 900 IN RRSIG ( SOA 8 2 900 20191214000132 20191208230132 42849 dhhs.gov. aLgpjkHLb7wE+e85RbtX0fdfab6K6vE+j6nOxAU01tTeAYZ0m+PikgibJoypfOmjgt6igEQq4f6n TCeRgO87GziX1Y3wnICi0EwKz0j0PKv1NbJQ96UbMegaxRhTL3NHarDdNQidjhj28KouqDOXFykr rpn7FMXeLdMVdOpdBIo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to rh120ns2.368.DHHS.GOV for DHHS.GOV/SOA
	Received 441 bytes from 158.74.30.103
	;; Answer received from 158.74.30.103 (441 bytes) ;; HEADER SECTION ;; id = 44660 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DHHS.GOV. IN SOA ;; ANSWER SECTION (3 records) DHHS.GOV. 900 IN SOA ( rh120ns1.368.DHHS.GOV. hostmaster.psc.hhs.GOV. 100006192 ;serial 600 ;refresh 60 ;retry 604800 ;expire 60 ;minimum ) DHHS.GOV. 900 IN RRSIG ( SOA 8 2 900 20191214000132 20191208230132 16060 dhhs.gov. HCXMiuMsoLtIHYl+6Gnnf5So7brW9jHbVxwuPRKaJGi1vqA9JprA2UfL9K3ez8KZ7/lxAItc9Ke7 U9HFXFHFw7OTkwSwRqueeancsf9yv98ToSEx0jT8k2H824XCpgK8kWiJZKhVUfQ8T7vPZvS2Rib5 sQKgrubBl8pghvLyebQ= ) dhhs.gov. 900 IN RRSIG ( SOA 8 2 900 20191214000132 20191208230132 42849 dhhs.gov. aLgpjkHLb7wE+e85RbtX0fdfab6K6vE+j6nOxAU01tTeAYZ0m+PikgibJoypfOmjgt6igEQq4f6n TCeRgO87GziX1Y3wnICi0EwKz0j0PKv1NbJQ96UbMegaxRhTL3NHarDdNQidjhj28KouqDOXFykr rpn7FMXeLdMVdOpdBIo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to rh120ns1.368.DHHS.GOV for DHHS.GOV/SOA
	Error querying rh120ns1.368.DHHS.GOV/2607:f220:0:1:0:0:0:2c for DHHS.GOV/SOA: 'IPv6 transport disabled'
	Received 441 bytes from 158.74.30.102
	;; Answer received from 158.74.30.102 (441 bytes) ;; HEADER SECTION ;; id = 31107 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DHHS.GOV. IN SOA ;; ANSWER SECTION (3 records) DHHS.GOV. 900 IN SOA ( rh120ns1.368.DHHS.GOV. hostmaster.psc.hhs.GOV. 100006192 ;serial 600 ;refresh 60 ;retry 604800 ;expire 60 ;minimum ) DHHS.GOV. 900 IN RRSIG ( SOA 8 2 900 20191214000132 20191208230132 16060 dhhs.gov. HCXMiuMsoLtIHYl+6Gnnf5So7brW9jHbVxwuPRKaJGi1vqA9JprA2UfL9K3ez8KZ7/lxAItc9Ke7 U9HFXFHFw7OTkwSwRqueeancsf9yv98ToSEx0jT8k2H824XCpgK8kWiJZKhVUfQ8T7vPZvS2Rib5 sQKgrubBl8pghvLyebQ= ) dhhs.gov. 900 IN RRSIG ( SOA 8 2 900 20191214000132 20191208230132 42849 dhhs.gov. aLgpjkHLb7wE+e85RbtX0fdfab6K6vE+j6nOxAU01tTeAYZ0m+PikgibJoypfOmjgt6igEQq4f6n TCeRgO87GziX1Y3wnICi0EwKz0j0PKv1NbJQ96UbMegaxRhTL3NHarDdNQidjhj28KouqDOXFykr rpn7FMXeLdMVdOpdBIo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to rh202ns1.355.DHHS.GOV for DHHS.GOV/SOA
	Error querying rh202ns1.355.DHHS.GOV/2607:f220:0:1:0:0:0:2a for DHHS.GOV/SOA: 'IPv6 transport disabled'
	Received 441 bytes from 158.74.30.98
	;; Answer received from 158.74.30.98 (441 bytes) ;; HEADER SECTION ;; id = 23698 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DHHS.GOV. IN SOA ;; ANSWER SECTION (3 records) DHHS.GOV. 900 IN SOA ( rh120ns1.368.DHHS.GOV. hostmaster.psc.hhs.GOV. 100006192 ;serial 600 ;refresh 60 ;retry 604800 ;expire 60 ;minimum ) DHHS.GOV. 900 IN RRSIG ( SOA 8 2 900 20191214000132 20191208230132 16060 dhhs.gov. HCXMiuMsoLtIHYl+6Gnnf5So7brW9jHbVxwuPRKaJGi1vqA9JprA2UfL9K3ez8KZ7/lxAItc9Ke7 U9HFXFHFw7OTkwSwRqueeancsf9yv98ToSEx0jT8k2H824XCpgK8kWiJZKhVUfQ8T7vPZvS2Rib5 sQKgrubBl8pghvLyebQ= ) dhhs.gov. 900 IN RRSIG ( SOA 8 2 900 20191214000132 20191208230132 42849 dhhs.gov. aLgpjkHLb7wE+e85RbtX0fdfab6K6vE+j6nOxAU01tTeAYZ0m+PikgibJoypfOmjgt6igEQq4f6n TCeRgO87GziX1Y3wnICi0EwKz0j0PKv1NbJQ96UbMegaxRhTL3NHarDdNQidjhj28KouqDOXFykr rpn7FMXeLdMVdOpdBIo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to rh120ns1.368.DHHS.GOV for DHHS.GOV/A
	Error querying rh120ns1.368.DHHS.GOV/2607:f220:0:1:0:0:0:2c for DHHS.GOV/A: 'IPv6 transport disabled'
	Received 389 bytes from 158.74.30.102
	;; Answer received from 158.74.30.102 (389 bytes) ;; HEADER SECTION ;; id = 2511 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DHHS.GOV. IN A ;; ANSWER SECTION (3 records) DHHS.GOV. 900 IN A 52.7.111.176 DHHS.GOV. 900 IN RRSIG ( A 8 2 900 20191214000132 20191208230132 16060 dhhs.gov. HAxcwa490G6eOlVcTuUkBOGlPlkQ7RIGZqQcnTfZDYlFjgonZAC7ldFmWLwfCLt7hiPlYt0MP5e+ QtdwfJ4JntJLSkePWHsvLOYT51P6CSYy8UGk+Z+K5c1DGx9Kd5KMAfTaHen1ghMrfw6Ee+6Q1cJE rkYCZU3Jmiurk3CNXTE= ) dhhs.gov. 900 IN RRSIG ( A 8 2 900 20191214000132 20191208230132 42849 dhhs.gov. ohxUoPa/QNxiiEWOeW7DAnkoJPAZ4ZgpU7+BZA3FvhfSE6UIf0YdmU2I4pLZ96YbsXjyUzBmRfUd vIfn5xGv3+zIyseQAda+krFemYpJnRBl5xUpoIPcxIo48bBEjdN1NMG6JYnLzXk8dzltZHXXnwMF nkAdI4t8hB0B4Ogll8M= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	DHHS.GOV A RR has value 52.7.111.176
	Found 2 RRSIGs over A RRset
	`DHHS.GOV. 900 IN RRSIG ( A 8 2 900 20191214000132 20191208230132 16060 dhhs.gov. HAxcwa490G6eOlVcTuUkBOGlPlkQ7RIGZqQcnTfZDYlFjgonZAC7ldFmWLwfCLt7hiPlYt0MP5e+ QtdwfJ4JntJLSkePWHsvLOYT51P6CSYy8UGk+Z+K5c1DGx9Kd5KMAfTaHen1ghMrfw6Ee+6Q1cJE rkYCZU3Jmiurk3CNXTE= )`
	`dhhs.gov. 900 IN RRSIG ( A 8 2 900 20191214000132 20191208230132 42849 dhhs.gov. ohxUoPa/QNxiiEWOeW7DAnkoJPAZ4ZgpU7+BZA3FvhfSE6UIf0YdmU2I4pLZ96YbsXjyUzBmRfUd vIfn5xGv3+zIyseQAda+krFemYpJnRBl5xUpoIPcxIo48bBEjdN1NMG6JYnLzXk8dzltZHXXnwMF nkAdI4t8hB0B4Ogll8M= )`
	RRSIG=16060 and DNSKEY=16060 verifies the A RRset
	RRSIG=42849 and DNSKEY=42849 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test DHHS.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: