DNSSEC Analyzer - DOCLINE.GOV

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2019-02-21 01:38:40 UTC, NTP stratum 4

Analyzing DNSSEC problems for DOCLINE.GOV

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Received 1425 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (1425 bytes) ;; HEADER SECTION ;; id = 43879 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAcH+axCdUOsTc9o+jmyVq5rsGTh1EcatSumPqEfsPBT+whyj0/UhD7cWeixV9Wqzj/cnqs8i WELqhdzGX41ZtaNQUfWNfOriASnWmX2D9m/EunplHu8nMSlDnDcT7+llE9tjk5HI1Sr7d9N16ZTI rbVALf65VB2ABbBG39dyAb7tz21PICJbSp2cd77UF7NFqEVkqohl/LkDw+7Apalmp0qAQT1Mgwi2 cVxZMKUiciA6EqS+KNajf0A6olO2oEhZnGGY6b1LTg34/YfHdiIIZQqAfqbieruCGHRiSscC2ZE7 iNreL/76f4JyIEUNkt6bQA29JsegxorLzQkpF7NKqZc= ) ; Key ID = 16749 . 172800 IN DNSKEY ( 385 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19164 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190313000000 20190220000000 19164 . eyvOQiC637051ggBwNwq0Kle0vatTO4HrfxgLlRcVDWGZeYVoDRGkqPiCyC1K1HvUrRQHB8vbXfd hrVfXJpjh9e1+Uf403++n6J94wMi2UlAmUkNwo6ROE9JcT4QFpQrUj1TPqY9DpdRrRUYgAPl/PNC vKwIvbwSt4I070PLGGPeumOIPCeZr7YMt8ewiCS3uwOUJB6bk8qUo4tQeL5pkPpmFgozw2v7JT/8 nTZfbu6T0+9GmqRDxvizFVZ8lQRKZZif+Ilyb+Lz7j2XHiI0JszLEQ5vQKLKEtBtyHwcL7ZPgbN/ mpN9ik8h/Jx0H1hjhaS+jSCBBulq+hde8GFH0A== ) . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190313000000 20190220000000 20326 . bKvs4iBtsS7x4UItBsNxJnGzKUowmON76AJt6DQlUjcDXdmNUGW0DNfwz91UCnfonlNeG09mCbRF zhfrgNiE2Niu0Qxh+EcygOjuy1uObcPgFBUsKp201u0WFQwrUl4O0NQfPY5Fa01e44v1u+L/yj2W K4gW2BKfW+5d9GIJhWRAPYWphOiG0+G1MUlWQ45cS07wu2X90+UDREw0prI0c4yJ9OiI6OnSvUvD hoyIgf5oHHYPieU7qu/aaiY8MdyJgfIelmFA65VzLDsTAHGoaagxJEolJehWSJl6AhY0mIs6lF2W XVCtEQbdLocsuCXln3w/n8jO2oJBotQ7S6E4bQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcH+axCdUOsTc9o+jmyVq5rsGTh1EcatSumPqEfsPBT+whyj0/UhD7cWeixV9Wqzj/cnqs8i WELqhdzGX41ZtaNQUfWNfOriASnWmX2D9m/EunplHu8nMSlDnDcT7+llE9tjk5HI1Sr7d9N16ZTI rbVALf65VB2ABbBG39dyAb7tz21PICJbSp2cd77UF7NFqEVkqohl/LkDw+7Apalmp0qAQT1Mgwi2 cVxZMKUiciA6EqS+KNajf0A6olO2oEhZnGGY6b1LTg34/YfHdiIIZQqAfqbieruCGHRiSscC2ZE7 iNreL/76f4JyIEUNkt6bQA29JsegxorLzQkpF7NKqZc= ) ; Key ID = 16749`
	`. 172800 IN DNSKEY ( 385 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19164`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DS=19036/SHA-256 is published, but a corresponding DNSKEY is not
	DNSKEY=19164/SEP is revoked
	Found 2 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190313000000 20190220000000 19164 . eyvOQiC637051ggBwNwq0Kle0vatTO4HrfxgLlRcVDWGZeYVoDRGkqPiCyC1K1HvUrRQHB8vbXfd hrVfXJpjh9e1+Uf403++n6J94wMi2UlAmUkNwo6ROE9JcT4QFpQrUj1TPqY9DpdRrRUYgAPl/PNC vKwIvbwSt4I070PLGGPeumOIPCeZr7YMt8ewiCS3uwOUJB6bk8qUo4tQeL5pkPpmFgozw2v7JT/8 nTZfbu6T0+9GmqRDxvizFVZ8lQRKZZif+Ilyb+Lz7j2XHiI0JszLEQ5vQKLKEtBtyHwcL7ZPgbN/ mpN9ik8h/Jx0H1hjhaS+jSCBBulq+hde8GFH0A== )`
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190313000000 20190220000000 20326 . bKvs4iBtsS7x4UItBsNxJnGzKUowmON76AJt6DQlUjcDXdmNUGW0DNfwz91UCnfonlNeG09mCbRF zhfrgNiE2Niu0Qxh+EcygOjuy1uObcPgFBUsKp201u0WFQwrUl4O0NQfPY5Fa01e44v1u+L/yj2W K4gW2BKfW+5d9GIJhWRAPYWphOiG0+G1MUlWQ45cS07wu2X90+UDREw0prI0c4yJ9OiI6OnSvUvD hoyIgf5oHHYPieU7qu/aaiY8MdyJgfIelmFA65VzLDsTAHGoaagxJEolJehWSJl6AhY0mIs6lF2W XVCtEQbdLocsuCXln3w/n8jO2oJBotQ7S6E4bQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=16749 is now in the chain-of-trust
	DNSKEY=19164/SEP is now in the chain-of-trust
	Query to f.root-servers.net for DOCLINE.GOV/A
	Received 669 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (669 bytes) ;; HEADER SECTION ;; id = 54913 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; DOCLINE.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20190305180000 20190220170000 16749 . XsODmZ3YdxNtbyeglsPmnxKUvS/qfExJwMBOwTftSEph5QoYQ+qRh3IZ6SY6DNOYU01GK7QM1GQz Lx9V0ywQfMkzd9E/VfREaKy/8kMDaBL/mpRk5UmDFMgfrkkkx3UF7nzz4vKI05ghpxkbUV/Y4yc6 swRfwVSKRBeKMnVZ+YU7NX5TusF3S33GvyRMwCznhlhVfd0V9uYrPeWyhAUFxPW5eTXP0hLymUv9 +8nUby0yKsMAq9S8aXGTMh1Ac+ma5JEQEhcJgX86vjMFU67CV/N5B1Aqciq3mGjoTY28KVZv7la6 HCY7ZCO5QgFO2ylwdSrkMo60w83hp56dJ9yudg== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to i.root-servers.net for GOV/DNSKEY
	Error querying i.root-servers.net/2001:7fe:0:0:0:0:0:53 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 661 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (661 bytes) ;; HEADER SECTION ;; id = 15157 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20190305180000 20190220170000 16749 . XsODmZ3YdxNtbyeglsPmnxKUvS/qfExJwMBOwTftSEph5QoYQ+qRh3IZ6SY6DNOYU01GK7QM1GQz Lx9V0ywQfMkzd9E/VfREaKy/8kMDaBL/mpRk5UmDFMgfrkkkx3UF7nzz4vKI05ghpxkbUV/Y4yc6 swRfwVSKRBeKMnVZ+YU7NX5TusF3S33GvyRMwCznhlhVfd0V9uYrPeWyhAUFxPW5eTXP0hLymUv9 +8nUby0yKsMAq9S8aXGTMh1Ac+ma5JEQEhcJgX86vjMFU67CV/N5B1Aqciq3mGjoTY28KVZv7la6 HCY7ZCO5QgFO2ylwdSrkMo60w83hp56dJ9yudg== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to f.root-servers.net for GOV/DS
	Error querying f.root-servers.net/2001:500:2f:0:0:0:0:f for GOV/DS: 'IPv6 transport disabled'
	Received 406 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (406 bytes) ;; HEADER SECTION ;; id = 28679 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20190305180000 20190220170000 16749 . XsODmZ3YdxNtbyeglsPmnxKUvS/qfExJwMBOwTftSEph5QoYQ+qRh3IZ6SY6DNOYU01GK7QM1GQz Lx9V0ywQfMkzd9E/VfREaKy/8kMDaBL/mpRk5UmDFMgfrkkkx3UF7nzz4vKI05ghpxkbUV/Y4yc6 swRfwVSKRBeKMnVZ+YU7NX5TusF3S33GvyRMwCznhlhVfd0V9uYrPeWyhAUFxPW5eTXP0hLymUv9 +8nUby0yKsMAq9S8aXGTMh1Ac+ma5JEQEhcJgX86vjMFU67CV/N5B1Aqciq3mGjoTY28KVZv7la6 HCY7ZCO5QgFO2ylwdSrkMo60w83hp56dJ9yudg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20190305180000 20190220170000 16749 . XsODmZ3YdxNtbyeglsPmnxKUvS/qfExJwMBOwTftSEph5QoYQ+qRh3IZ6SY6DNOYU01GK7QM1GQz Lx9V0ywQfMkzd9E/VfREaKy/8kMDaBL/mpRk5UmDFMgfrkkkx3UF7nzz4vKI05ghpxkbUV/Y4yc6 swRfwVSKRBeKMnVZ+YU7NX5TusF3S33GvyRMwCznhlhVfd0V9uYrPeWyhAUFxPW5eTXP0hLymUv9 +8nUby0yKsMAq9S8aXGTMh1Ac+ma5JEQEhcJgX86vjMFU67CV/N5B1Aqciq3mGjoTY28KVZv7la6 HCY7ZCO5QgFO2ylwdSrkMo60w83hp56dJ9yudg== )`
	RRSIG=16749 and DNSKEY=16749 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to a.gov-servers.net for GOV/DNSKEY
	Received 743 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (743 bytes) ;; HEADER SECTION ;; id = 40263 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 256 3 8 AQO1oAFyB/QSuf32vdl3Yp+o83rKLBdvjsz13AdVp8EooKwa6DL4D8G+e3PanKAJyWEiRpNQIAl2 Ra6JuC7DCiEPBziclmFygf2XGdY4qirPqVemcHHKNoVIMNUteughuiPaqlFY8gTZajQ02ZizqiYK +LRxpPs/ePcbETPT3oB9Ew== ) ; Key ID = 28157 GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190303224731 20190216224231 7698 gov. IJNwadcbltKxKxpP+0War8mfKnzLNyIo0YNGrdFE9Fn7taZx50JinEvHHTS03gEoZqEm8G1JnFFr sWxiQlUZOVR3J+jdKiZ9UM+RC6Fxo2rXJ2T+PCGz6S2C8/Xl9YCPiV17a/HiPZhuwF4U+n6Np1ox bSfY1/GRL4oN5r6OMlEfqZAdoZh58axSBByvbDNcxC7j40RUFGYzvvpUYsj4DLcJlw+LS0zt0hVs iVfQmnQXiHx5ku0riOJQf8zMtnQ/R1ZiwdsBuDvrM7I5GndEBZFlb6O16eLs84ibjD2+R+4QE1lw INZzWsKg5G7B3qRnULzqjEbmY4adUMCN5CGMwg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQO1oAFyB/QSuf32vdl3Yp+o83rKLBdvjsz13AdVp8EooKwa6DL4D8G+e3PanKAJyWEiRpNQIAl2 Ra6JuC7DCiEPBziclmFygf2XGdY4qirPqVemcHHKNoVIMNUteughuiPaqlFY8gTZajQ02ZizqiYK +LRxpPs/ePcbETPT3oB9Ew== ) ; Key ID = 28157`
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190303224731 20190216224231 7698 gov. IJNwadcbltKxKxpP+0War8mfKnzLNyIo0YNGrdFE9Fn7taZx50JinEvHHTS03gEoZqEm8G1JnFFr sWxiQlUZOVR3J+jdKiZ9UM+RC6Fxo2rXJ2T+PCGz6S2C8/Xl9YCPiV17a/HiPZhuwF4U+n6Np1ox bSfY1/GRL4oN5r6OMlEfqZAdoZh58axSBByvbDNcxC7j40RUFGYzvvpUYsj4DLcJlw+LS0zt0hVs iVfQmnQXiHx5ku0riOJQf8zMtnQ/R1ZiwdsBuDvrM7I5GndEBZFlb6O16eLs84ibjD2+R+4QE1lw INZzWsKg5G7B3qRnULzqjEbmY4adUMCN5CGMwg== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=28157 is now in the chain-of-trust
	Query to b.gov-servers.net for DOCLINE.GOV/A
	Error querying b.gov-servers.net/2620:74:27:0:0:0:2:30 for DOCLINE.GOV/A: 'IPv6 transport disabled'
	Received 406 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (406 bytes) ;; HEADER SECTION ;; id = 4671 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; DOCLINE.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) DOCLINE.GOV. 86400 IN NS gslb01.nlm.nih.GOV. DOCLINE.GOV. 86400 IN NS gslb02.nlm.nih.GOV. DOCLINE.GOV. 86400 IN NS gslb03.nlm.nih.GOV. DOCLINE.GOV. 3600 IN DS 59154 7 1 7cf12793ed148845350249d00cff9bf356816442 DOCLINE.GOV. 3600 IN DS ( 59154 7 2 fbaef09795db3ae3f18bc30bd5c5a58b69eb4985d59724cdc45d359d7b82b679 ) DOCLINE.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190227221007 20190220221007 28157 gov. c6IoezrOoT0saN7EUh4hTejpkGoT5ylMuJN+xszZ6oEBQ0d4WDy9zXKEZQF2TPztAozg5pEN20TI 52sJc4rVfiuQiBcrVZTwo6OGp4LoCMi6L6Prg/aOv3SGzMn0RPL+0JQwVG0DFNY/3Jb1jgfJr+4o ftvli3Nbl/THBH2hKHc= ) ;; ADDITIONAL SECTION (4 records) gslb01.nlm.nih.GOV. 86400 IN A 130.14.252.50 gslb02.nlm.nih.GOV. 86400 IN A 165.112.6.3 gslb03.nlm.nih.GOV. 86400 IN A 130.14.252.53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to a.gov-servers.net for DOCLINE.GOV/DNSKEY
	Error querying a.gov-servers.net/2001:500:4431:0:0:0:2:30 for DOCLINE.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 406 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (406 bytes) ;; HEADER SECTION ;; id = 20164 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; DOCLINE.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) DOCLINE.GOV. 86400 IN NS gslb01.nlm.nih.GOV. DOCLINE.GOV. 86400 IN NS gslb02.nlm.nih.GOV. DOCLINE.GOV. 86400 IN NS gslb03.nlm.nih.GOV. DOCLINE.GOV. 3600 IN DS 59154 7 1 7cf12793ed148845350249d00cff9bf356816442 DOCLINE.GOV. 3600 IN DS ( 59154 7 2 fbaef09795db3ae3f18bc30bd5c5a58b69eb4985d59724cdc45d359d7b82b679 ) DOCLINE.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190227221007 20190220221007 28157 gov. c6IoezrOoT0saN7EUh4hTejpkGoT5ylMuJN+xszZ6oEBQ0d4WDy9zXKEZQF2TPztAozg5pEN20TI 52sJc4rVfiuQiBcrVZTwo6OGp4LoCMi6L6Prg/aOv3SGzMn0RPL+0JQwVG0DFNY/3Jb1jgfJr+4o ftvli3Nbl/THBH2hKHc= ) ;; ADDITIONAL SECTION (4 records) gslb01.nlm.nih.GOV. 86400 IN A 130.14.252.50 gslb02.nlm.nih.GOV. 86400 IN A 165.112.6.3 gslb03.nlm.nih.GOV. 86400 IN A 130.14.252.53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone DOCLINE.GOV

DOCLINE.GOV

	Checking DS between GOV and DOCLINE.GOV
	Query to b.gov-servers.net for DOCLINE.GOV/DS
	Received 287 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (287 bytes) ;; HEADER SECTION ;; id = 8027 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; DOCLINE.GOV. IN DS ;; ANSWER SECTION (3 records) DOCLINE.GOV. 3600 IN DS 59154 7 1 7cf12793ed148845350249d00cff9bf356816442 DOCLINE.GOV. 3600 IN DS ( 59154 7 2 fbaef09795db3ae3f18bc30bd5c5a58b69eb4985d59724cdc45d359d7b82b679 ) DOCLINE.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190227221007 20190220221007 28157 gov. c6IoezrOoT0saN7EUh4hTejpkGoT5ylMuJN+xszZ6oEBQ0d4WDy9zXKEZQF2TPztAozg5pEN20TI 52sJc4rVfiuQiBcrVZTwo6OGp4LoCMi6L6Prg/aOv3SGzMn0RPL+0JQwVG0DFNY/3Jb1jgfJr+4o ftvli3Nbl/THBH2hKHc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DS records for DOCLINE.GOV in the GOV zone
	DS=59154/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=59154/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`DOCLINE.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190227221007 20190220221007 28157 gov. c6IoezrOoT0saN7EUh4hTejpkGoT5ylMuJN+xszZ6oEBQ0d4WDy9zXKEZQF2TPztAozg5pEN20TI 52sJc4rVfiuQiBcrVZTwo6OGp4LoCMi6L6Prg/aOv3SGzMn0RPL+0JQwVG0DFNY/3Jb1jgfJr+4o ftvli3Nbl/THBH2hKHc= )`
	RRSIG=28157 and DNSKEY=28157 verifies the DS RRset
	DS=59154/SHA-1 is now in the chain-of-trust
	`DOCLINE.GOV. 3600 IN DS 59154 7 1 7cf12793ed148845350249d00cff9bf356816442`
	`DOCLINE.GOV. 3600 IN DS ( 59154 7 2 fbaef09795db3ae3f18bc30bd5c5a58b69eb4985d59724cdc45d359d7b82b679 )`
	Query to gslb01.nlm.nih.GOV for DOCLINE.GOV/DNSKEY
	Error querying gslb01.nlm.nih.GOV/2607:f220:41e:252:0:0:0:50 for DOCLINE.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 1190 bytes from 130.14.252.50
	;; Answer received from 130.14.252.50 (1190 bytes) ;; HEADER SECTION ;; id = 28316 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DOCLINE.GOV. IN DNSKEY ;; ANSWER SECTION (4 records) DOCLINE.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAaOAYYmSm91BfepYEbUgRr6U5/sa2lEoIhAUVYIhJla5bSrwogifit0DTNNScP11NaJ5u6Ys ur/11Dn/XI42V/yu2KZzag8BaIU7rTFHSRXReYnxcpmdATsn9rqT0JxyYrvZHSaAK9saIKU1zDLU nZwEDKhBfiz5/xMkEwaI5RI3sjiMLRIWuhEuQ/gTIL3jGncWDtSlCdmFmCQUjaYi7p2TCcIg9gl6 baIjxWWr01W7ViUKac9AvfklljJ8bRzWgAlRoJN9TcWlVEP430rOiOLrCGgyXRAFH7y2hLUt3B7s vc8Lod5P+weyRr+m93OUtF4N1SBzkgS/yOeGam94KsE= ) ; Key ID = 59154 DOCLINE.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAdKTrybsmNcXBSw5EUSqLNQAdnmlRISQKHqIhn6d+2GQRtRooNjXzPHS+SoMAlqGggBPi2nL +MkO2Halixj2+xvBcu2lUTOme7HdyJrGo73SnkEvXpkZyNF4fylF7ozdCwpbDCGgKqOMnhxDsJbJ BnO8GgfHbs7GuyZ0xMSLXeH09JFvVrTi8/dTRIzJnocHKy+iPVRmqsb+rVNuodpVAFmRh1mdEPjD asUYd2oyE1F9GLYCqekXVxlVIYTtovLQcd2k5mYfoPiiwtMgJH4UpWuANh0XQ+oUaGS67ryRAPWk PRXtRMcPn0d3ddfJfKYKGIzkwiNAHhuLlAsBdozYi2M= ) ; Key ID = 1373 DOCLINE.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20190312072739 20190219072739 59154 docline.gov. KZlYYRQrRU4GTjVdPBdquemfDJglBTQgdkLNjvBZk/H1Oe8S/KwjzuUzXKorNkoOq4m8YZqRyXrr uWly7HluT6YRCDA09SESmr/M3zeELXnq0ZqKhNwK+WhEXVpONrE4Sw45FanVRR9ajWg+3AH0Al1m nWbfhKWfUZ5loe+rhQgA82cEJkLM9BmuCX0QPsx3nV3OozPxxPQ9zY8TY1Eq2U2shCyN2UqrXxus 9gDBPsjoaB4NOL3KXOmGvuNwz/IJVOBFKcPpIikhlyPcoQp1WcR9ekU105hZTrBxiRrAarp6EnvQ tDZMUYNpyOFh7Hmt0PA6UA51qPkiCbsHTtVsiQ== ) DOCLINE.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20190311232303 20190218232303 1373 docline.gov. t6PbeMzWd7emuHzamnvfYtKJ4lFYnAW78NUcB5xFC+Hf2TMpt4qhvdEbLXRmC4DJ/BWusk3eyYcX ZIJ6EPPIsVIMFu2iVEGMKVncY9BBOjuEP5cGC/k+BCeMOosmMcd3GBpVerJQoOsIqoHZW1CdtXbB hJX8/b7TMa4Rp2L8jE8rw9pflSnMBLEYOkWKbUe3j3G5+IWFdGPmyO1NiFYrCdN1+Zl6EaiSGV56 8qDb2JaRjyeTzSJUU654e8y0Gfsh1Rd0MKBjsNfdJ70AQ+98UX66GHmU6dx5WoUBzVIuyugrVNjH xdJ3dO8lun+JuJqPkRwcQ8+6NcEHgGyxDuf/7Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for DOCLINE.GOV
	`DOCLINE.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAaOAYYmSm91BfepYEbUgRr6U5/sa2lEoIhAUVYIhJla5bSrwogifit0DTNNScP11NaJ5u6Ys ur/11Dn/XI42V/yu2KZzag8BaIU7rTFHSRXReYnxcpmdATsn9rqT0JxyYrvZHSaAK9saIKU1zDLU nZwEDKhBfiz5/xMkEwaI5RI3sjiMLRIWuhEuQ/gTIL3jGncWDtSlCdmFmCQUjaYi7p2TCcIg9gl6 baIjxWWr01W7ViUKac9AvfklljJ8bRzWgAlRoJN9TcWlVEP430rOiOLrCGgyXRAFH7y2hLUt3B7s vc8Lod5P+weyRr+m93OUtF4N1SBzkgS/yOeGam94KsE= ) ; Key ID = 59154`
	`DOCLINE.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAdKTrybsmNcXBSw5EUSqLNQAdnmlRISQKHqIhn6d+2GQRtRooNjXzPHS+SoMAlqGggBPi2nL +MkO2Halixj2+xvBcu2lUTOme7HdyJrGo73SnkEvXpkZyNF4fylF7ozdCwpbDCGgKqOMnhxDsJbJ BnO8GgfHbs7GuyZ0xMSLXeH09JFvVrTi8/dTRIzJnocHKy+iPVRmqsb+rVNuodpVAFmRh1mdEPjD asUYd2oyE1F9GLYCqekXVxlVIYTtovLQcd2k5mYfoPiiwtMgJH4UpWuANh0XQ+oUaGS67ryRAPWk PRXtRMcPn0d3ddfJfKYKGIzkwiNAHhuLlAsBdozYi2M= ) ; Key ID = 1373`
	DNSKEY=59154/SEP is now in the chain-of-trust
	DS=59154/SHA-1 verifies DNSKEY=59154/SEP
	DS=59154/SHA-256 verifies DNSKEY=59154/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`DOCLINE.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20190312072739 20190219072739 59154 docline.gov. KZlYYRQrRU4GTjVdPBdquemfDJglBTQgdkLNjvBZk/H1Oe8S/KwjzuUzXKorNkoOq4m8YZqRyXrr uWly7HluT6YRCDA09SESmr/M3zeELXnq0ZqKhNwK+WhEXVpONrE4Sw45FanVRR9ajWg+3AH0Al1m nWbfhKWfUZ5loe+rhQgA82cEJkLM9BmuCX0QPsx3nV3OozPxxPQ9zY8TY1Eq2U2shCyN2UqrXxus 9gDBPsjoaB4NOL3KXOmGvuNwz/IJVOBFKcPpIikhlyPcoQp1WcR9ekU105hZTrBxiRrAarp6EnvQ tDZMUYNpyOFh7Hmt0PA6UA51qPkiCbsHTtVsiQ== )`
	`DOCLINE.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20190311232303 20190218232303 1373 docline.gov. t6PbeMzWd7emuHzamnvfYtKJ4lFYnAW78NUcB5xFC+Hf2TMpt4qhvdEbLXRmC4DJ/BWusk3eyYcX ZIJ6EPPIsVIMFu2iVEGMKVncY9BBOjuEP5cGC/k+BCeMOosmMcd3GBpVerJQoOsIqoHZW1CdtXbB hJX8/b7TMa4Rp2L8jE8rw9pflSnMBLEYOkWKbUe3j3G5+IWFdGPmyO1NiFYrCdN1+Zl6EaiSGV56 8qDb2JaRjyeTzSJUU654e8y0Gfsh1Rd0MKBjsNfdJ70AQ+98UX66GHmU6dx5WoUBzVIuyugrVNjH xdJ3dO8lun+JuJqPkRwcQ8+6NcEHgGyxDuf/7Q== )`
	RRSIG=59154 and DNSKEY=59154/SEP verifies the DNSKEY RRset
	RRSIG=1373 and DNSKEY=1373 verifies the DNSKEY RRset
	DNSKEY=1373 is now in the chain-of-trust
	Query to gslb02.nlm.nih.GOV for DOCLINE.GOV/A
	Error querying gslb02.nlm.nih.GOV/2607:f220:41f:1405:0:0:0:3 for DOCLINE.GOV/A: 'IPv6 transport disabled'
	Received 355 bytes from 165.112.6.3
	;; Answer received from 165.112.6.3 (355 bytes) ;; HEADER SECTION ;; id = 20485 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DOCLINE.GOV. IN A ;; ANSWER SECTION (2 records) DOCLINE.GOV. 30 IN A 130.14.16.170 DOCLINE.GOV. 30 IN RRSIG ( A 7 2 30 20190306143927 20190213143927 1373 docline.gov. K8/dBumw9Wany9jf0OzfvPgZiHklKDjzqOI9D+Col8cEAIphgkzUegK/RAVnoIa1xGa4vkf986xf os4ARLar1z4ip3znz+IVTPqOlKb9W/6uUcsk4QyBA7+FbN9qe35Bl1HXGOKR2ADQRqD/r7J8yaQh wZ5eMPHf6/yo817TT98K1kP0UpqM3X/3eqBEC4sDzibOtTCFgXsuaHzw1DDVz4EgdeJItqNKXfSS mmk5zRnx11Ugeer+ZwpDVna/hpFx/f33pl0rtjFiQFRHxk7HI59Ib/C1LA1WIftaUVsDeSpoU1mb veLbA/aKGAM+e9g5Q9rYkBKLQYWAZivuqzmhJw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	DOCLINE.GOV is authoritative for DOCLINE.GOV
	Found RRSIG signed by docline.gov zone
	Query to gslb03.nlm.nih.GOV for DOCLINE.GOV/SOA
	Error querying gslb03.nlm.nih.GOV/2607:f220:41e:252:0:0:0:53 for DOCLINE.GOV/SOA: 'IPv6 transport disabled'
	Received 755 bytes from 130.14.252.53
	;; Answer received from 130.14.252.53 (755 bytes) ;; HEADER SECTION ;; id = 2961 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DOCLINE.GOV. IN SOA ;; ANSWER SECTION (2 records) DOCLINE.GOV. 60 IN SOA ( gslb01.nlm.nih.GOV. leeb.mail.nlm.nih.GOV. 2018122012 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) DOCLINE.GOV. 60 IN RRSIG ( SOA 7 2 60 20190305004125 20190212004125 1373 docline.gov. uzZ1tloZyQnMJ3uay8QSyiU6Wr9zK5xF5xGCKDcHAgUJqy6zy8mPsBMv196gb2KDavulYcYHltBd 8M+9Wc17C1Sus43wyLRe/aBrXwCFeLrOy7+CTT9C6Pp/F+ihwZfZxiLU4IhqtHk09bjtjfI4qRaH 2oKrDw6sg+7kjNZ0qg02gihXYCyfwq4zsjN4wnPS6OZ9TsTHesjSwthPoDYYtTU1ka8WBR5IY0T2 bFMKtGe9DzQG/e3GzuT0LAfUz+EhED7unMx7VMFVZen8Ih54mFuc0Ooi9aec7C5/hqZO4FDqxfxA jRPRFnjo36PjvqcddRKwKZpnHC1fNSWglpzhmg== ) ;; AUTHORITY SECTION (4 records) DOCLINE.GOV. 60 IN NS gslb02.nlm.nih.GOV. DOCLINE.GOV. 60 IN NS gslb01.nlm.nih.GOV. DOCLINE.GOV. 60 IN NS gslb03.nlm.nih.GOV. DOCLINE.GOV. 60 IN RRSIG ( NS 7 2 60 20190304235234 20190211235234 1373 docline.gov. l8WytpjiUTYqQ0GxA69npWrrGoDFT5KCCdtdzpOgQtno4ezrhR4u2EtkdrdRVb8uhly0++dK9VtR cadP89MPwJvxLRDh+4EoLVeC3SJ9xj2BfpONh6D5Aby8aYJTKaMHZFRcC6ObFXGsugaQQF83fgBI +0qcPc0mDB5Fl87Ig+amoKcMeq5SNH3wMLHIAYzDhl2HBpXy+KNUyA4EKw9V7uoym2HA+WoLROFk ZK14XbNYyvbu5II+QNb8MY2pCeEY/G84oFfgCr9mPN6ZNspUcSx2Zp7MeZGF+fwOpdtizTsLVyUL VNYbHPZDxzkh8ryKhA6QdApL8G9ojxQd8sQCJw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to gslb02.nlm.nih.GOV for DOCLINE.GOV/SOA
	Received 755 bytes from 165.112.6.3
	;; Answer received from 165.112.6.3 (755 bytes) ;; HEADER SECTION ;; id = 38828 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DOCLINE.GOV. IN SOA ;; ANSWER SECTION (2 records) DOCLINE.GOV. 60 IN SOA ( gslb01.nlm.nih.GOV. leeb.mail.nlm.nih.GOV. 2018122012 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) DOCLINE.GOV. 60 IN RRSIG ( SOA 7 2 60 20190309235446 20190216235446 1373 docline.gov. UHvQaLKGRKnyUkIgivovsI6mcnnmK4kKb/1x/GmY5bivkFcWHiYb6xqY3rrU4VX2W3HHDiyJIZ2V eyA2hl9Pb53xZXCfHdJP+bf/8G3ar0OvUStT45iwnyrFtIHnZssF2laxPbtboLk4fE+Oliyo5rbX R3L8CYPbR4HSNDQfyNi0EIBdiNWvZ5xFhINVbFSfsMHWKNGLbj7ZgbswogXbgRK5VGk2JY/Y2oZX w9z4roUoTd5HseLT7PggnCjwJbPfOasyCEhc4by4pYrcyBgmkSTz1GNTDDgnUKn7AFclXs6bjsWc wXQm1BJCf+bWSPrVG77F3Doj5Xf50HxxIVjsXg== ) ;; AUTHORITY SECTION (4 records) DOCLINE.GOV. 60 IN NS gslb03.nlm.nih.GOV. DOCLINE.GOV. 60 IN NS gslb02.nlm.nih.GOV. DOCLINE.GOV. 60 IN NS gslb01.nlm.nih.GOV. DOCLINE.GOV. 60 IN RRSIG ( NS 7 2 60 20190305033729 20190212033729 1373 docline.gov. Yom6qyLFCM6VWHpLvD6vmCRfCeNAxM0VRDMOi2hafGQGWE0rCoEabx1fcwAdBOX5mFNptK10OHZy VnW4HmZsK1S3oO9PxSa5BX8uGJ5WQlzMkOzxommHPMt4I40xp1VYZdkFTy+mdVsb/Ryd8TAKEYy0 MulhxKhpvXY+EyfgbPtHAXb3DQysGnrIQKQoLJgNjJJ+d+54NQtHZBcdNpEXcvSe8Hs4q8adnE7L vgiZdeFlkYuaEMUWm9pP11O0Sg0Y16b11VvDjPUrNMQ9lwKxblrknsvVazaJECLTkNxagmNGQUUp x4DKSAqPmskHu9rbl0xy9CYNZ6iCM5OCwWRFNw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to gslb01.nlm.nih.GOV for DOCLINE.GOV/SOA
	Error querying gslb01.nlm.nih.GOV/2607:f220:41e:252:0:0:0:50 for DOCLINE.GOV/SOA: 'IPv6 transport disabled'
	Received 755 bytes from 130.14.252.50
	;; Answer received from 130.14.252.50 (755 bytes) ;; HEADER SECTION ;; id = 9048 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DOCLINE.GOV. IN SOA ;; ANSWER SECTION (2 records) DOCLINE.GOV. 60 IN SOA ( gslb01.nlm.nih.GOV. leeb.mail.nlm.nih.GOV. 2018122012 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) DOCLINE.GOV. 60 IN RRSIG ( SOA 7 2 60 20190309225449 20190216225449 1373 docline.gov. vyH8wUjf/Zd3twTJ1WqpQK9EjSzqAmY5SEytz51mggkuyDNOaKiHO2Npa5NdKDgksHl3GNIgXGkM 4BHYdNbcppxJTUYasp53LFHQbHGnKrY2LsNqF++Zcwsp3mfYMuI9JoxSNKRlkz17h1feTNHTemOG UMNindQg9G08ZHYFbxsQ0uNQoKMDgwNkyvtP1ZfDjPPoW7xMVPilVyJXL6T8c6LwMx9rPSF5ez14 IxUzONAZFskukba3c1QQe2RoDRThhQmDZz4U+BZmQQZHVouqqkJNto60FnOotBVpa5TCxa/gb8fb VPXF7yQOBA5yZ9ASLjN1YxsFZdFj40PClUFm6A== ) ;; AUTHORITY SECTION (4 records) DOCLINE.GOV. 60 IN NS gslb02.nlm.nih.GOV. DOCLINE.GOV. 60 IN NS gslb03.nlm.nih.GOV. DOCLINE.GOV. 60 IN NS gslb01.nlm.nih.GOV. DOCLINE.GOV. 60 IN RRSIG ( NS 7 2 60 20190305015325 20190212015325 1373 docline.gov. pNJCmRC00ARQLKChaRe/VJ3BhnSGtV1b1MsuuQPAk4gf9wxuzw+6Lz3Imwr8Bb2HqMZv7Rb+X6jX LXX5JMRZhMDDzdeVIfgIOJ9PUtnLkP93sM33eAvV2xEhOL+HHvWkQqBN9UMSeDhfpQVcNPOb4n1t 1XwCUAHANNRDQwKp3wsSJfOgcscSIrcGH6leu8akSgduLZXNh8rDTl9E2V+tj0QUevYCPb+f1JGG lixpEJxxwGOfrYPfsI7Fnc1WxoRFdxp2X03+DCpTmeXGu5bIJ8Pk6nO7PoSH2zAW1tmO2bWNgmcK ub581QCM84+mx8S9yUwV/e2/QILniCob4d+Dgw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to gslb02.nlm.nih.GOV for DOCLINE.GOV/A
	Error querying gslb02.nlm.nih.GOV/2607:f220:41f:1405:0:0:0:3 for DOCLINE.GOV/A: 'IPv6 transport disabled'
	Received 355 bytes from 165.112.6.3
	;; Answer received from 165.112.6.3 (355 bytes) ;; HEADER SECTION ;; id = 53714 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DOCLINE.GOV. IN A ;; ANSWER SECTION (2 records) DOCLINE.GOV. 30 IN A 165.112.140.170 DOCLINE.GOV. 30 IN RRSIG ( A 7 2 30 20190305151340 20190212151340 1373 docline.gov. K9No22O+oaBlxUds4ZbIBUrlbUfSAlecNg19pSCfmLNVsNamq/3PNcd3Crd61BIrEtw9Ce6DhJ80 wamlVrC46eGMRUGJiDcXtN749HSjP8Z/b5Z7tGvt7P2FTm7rnGzT8QpEPFPopvTyx9UOCEv5gnm1 tMwtNvc5frbQah+UXsZJGlZcD6WasKH0tdX62/dIsVhI4lGK1olJ4Utr8gVAFkNOBfg/2kOdELSf KNpBP7WqkUgj+Dtm4InBpfgahfuHkmW3VAv12boTycWV8X4mRLIj/tqf22DPgkf1/+Za4zI/8usO fTg877KqvQ3ff3bBFZqdIlc8ElqswbAZ5cGMrA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	DOCLINE.GOV A RR has value 165.112.140.170
	Found 1 RRSIGs over A RRset
	`DOCLINE.GOV. 30 IN RRSIG ( A 7 2 30 20190305151340 20190212151340 1373 docline.gov. K9No22O+oaBlxUds4ZbIBUrlbUfSAlecNg19pSCfmLNVsNamq/3PNcd3Crd61BIrEtw9Ce6DhJ80 wamlVrC46eGMRUGJiDcXtN749HSjP8Z/b5Z7tGvt7P2FTm7rnGzT8QpEPFPopvTyx9UOCEv5gnm1 tMwtNvc5frbQah+UXsZJGlZcD6WasKH0tdX62/dIsVhI4lGK1olJ4Utr8gVAFkNOBfg/2kOdELSf KNpBP7WqkUgj+Dtm4InBpfgahfuHkmW3VAv12boTycWV8X4mRLIj/tqf22DPgkf1/+Za4zI/8usO fTg877KqvQ3ff3bBFZqdIlc8ElqswbAZ5cGMrA== )`
	RRSIG=1373 and DNSKEY=1373 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test DOCLINE.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: