DNSSEC Analyzer - DOLETA.GOV

Domain Name:

Time: 2019-08-25 09:16:53 UTC, NTP stratum 4

Analyzing DNSSEC problems for DOLETA.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to k.root-servers.net for ./DNSKEY
	Received 864 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (864 bytes) ;; HEADER SECTION ;; id = 9490 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAcTQyaIe6nt3xSPOG2L/YfwBkOVTJN6mlnZ249O5Rtt3ZSRQHxQSW61AODYw6bvgxrrGq8ee OuenFjcSYgNAMcBYoEYYmKDW6e9EryW4ZaT/MCq+8Am06oR40xAA3fClOM6QjRcT85tP41Go946A icBGP8XOP/Aj1aI/oPRGzRnboUPUok/AzTNnW5npBU69+BuiIwYE7mQOiNBFePyvjQBdoiuYbmuD 3Py0IyjlBxzZUXbqLsRL9gYFkCqeTY29Ik7usuzMTa+JRSLz6KGS5RSJ7CTSMjZg8aNaUbN2dvGh akJPh92HnLvMA3TefFgbKJphFNPA3BWSKLZ02cRWXqM= ) ; Key ID = 59944 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190910000000 20190820000000 20326 . myqQxVqqg5Yb0Tx+BDiLM672R1pZi5zzgRAWh3SkK4mQponWEdXVglCRl6VxIDqnbi5NKabyHMBc w+k4hbBjA1TZ0f+cyJa8xxTg8m7caHrdIRDNwr1zFa16L5BO55NWCjyTCwc/IgRU+Q5zS1YX/qdy uDsWsuRxhxclK5Knxc35Z0Pj0/xlBVzatlwloBVtnSpetAHyofMq9J/ylHDdQtfDjC3B/cBE1/TA UR8cJ2hZXlBBkR0q3Nb0dc6CG8647F8Rp9NOPNn6529HFjARFOPKps2ujLqzrLD4wuKzU3B3yOBe Vqv80rPiSnz0po25KwxFuQYXhAPlNQRtVLdjDw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcTQyaIe6nt3xSPOG2L/YfwBkOVTJN6mlnZ249O5Rtt3ZSRQHxQSW61AODYw6bvgxrrGq8ee OuenFjcSYgNAMcBYoEYYmKDW6e9EryW4ZaT/MCq+8Am06oR40xAA3fClOM6QjRcT85tP41Go946A icBGP8XOP/Aj1aI/oPRGzRnboUPUok/AzTNnW5npBU69+BuiIwYE7mQOiNBFePyvjQBdoiuYbmuD 3Py0IyjlBxzZUXbqLsRL9gYFkCqeTY29Ik7usuzMTa+JRSLz6KGS5RSJ7CTSMjZg8aNaUbN2dvGh akJPh92HnLvMA3TefFgbKJphFNPA3BWSKLZ02cRWXqM= ) ; Key ID = 59944`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190910000000 20190820000000 20326 . myqQxVqqg5Yb0Tx+BDiLM672R1pZi5zzgRAWh3SkK4mQponWEdXVglCRl6VxIDqnbi5NKabyHMBc w+k4hbBjA1TZ0f+cyJa8xxTg8m7caHrdIRDNwr1zFa16L5BO55NWCjyTCwc/IgRU+Q5zS1YX/qdy uDsWsuRxhxclK5Knxc35Z0Pj0/xlBVzatlwloBVtnSpetAHyofMq9J/ylHDdQtfDjC3B/cBE1/TA UR8cJ2hZXlBBkR0q3Nb0dc6CG8647F8Rp9NOPNn6529HFjARFOPKps2ujLqzrLD4wuKzU3B3yOBe Vqv80rPiSnz0po25KwxFuQYXhAPlNQRtVLdjDw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=59944 is now in the chain-of-trust
	Query to k.root-servers.net for DOLETA.GOV/A
	Received 668 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (668 bytes) ;; HEADER SECTION ;; id = 60787 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DOLETA.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20190907050000 20190825040000 59944 . IASD7OLpbvlhllb1e0BK1l2SJWGdGO0kbd9PXavKSpXm+7ZzcQ0tpw2Lr7cYQDW7mWzTDYtcmc0l pCmdTzMohWhmZ9y8d44zBT7t3cBFi6W5Z3zs22E9QDO+zprB6sC/9q2j5YkQzDeEsy+eGaNee+Tx GoSXOjdcMmat1NyQNnAhuDJbL93AH5akMOodrdspdah8h9QQWLqjpzOWbL9Si58GuOjpeGOsEJfP BbVy3S3Gu8hT3XA+VwW+it17aIYQG1BdaqKYCAsl8b9jI31UMYdQOuilKnsaHyJRzie7tawdHoCJ 2RsE1/+Su31dlxecA2qiZP8Dpj5LYOnUebf7cQ== ) ;; ADDITIONAL SECTION (9 records) d.gov-servers.net. 172800 IN A 81.19.194.30 c.gov-servers.net. 172800 IN A 69.36.153.30 b.gov-servers.net. 172800 IN A 209.112.123.30 a.gov-servers.net. 172800 IN A 69.36.157.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.root-servers.net for GOV/DNSKEY
	Received 661 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (661 bytes) ;; HEADER SECTION ;; id = 59423 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20190907050000 20190825040000 59944 . IASD7OLpbvlhllb1e0BK1l2SJWGdGO0kbd9PXavKSpXm+7ZzcQ0tpw2Lr7cYQDW7mWzTDYtcmc0l pCmdTzMohWhmZ9y8d44zBT7t3cBFi6W5Z3zs22E9QDO+zprB6sC/9q2j5YkQzDeEsy+eGaNee+Tx GoSXOjdcMmat1NyQNnAhuDJbL93AH5akMOodrdspdah8h9QQWLqjpzOWbL9Si58GuOjpeGOsEJfP BbVy3S3Gu8hT3XA+VwW+it17aIYQG1BdaqKYCAsl8b9jI31UMYdQOuilKnsaHyJRzie7tawdHoCJ 2RsE1/+Su31dlxecA2qiZP8Dpj5LYOnUebf7cQ== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to c.root-servers.net for GOV/DS
	Received 406 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (406 bytes) ;; HEADER SECTION ;; id = 35639 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20190907050000 20190825040000 59944 . IASD7OLpbvlhllb1e0BK1l2SJWGdGO0kbd9PXavKSpXm+7ZzcQ0tpw2Lr7cYQDW7mWzTDYtcmc0l pCmdTzMohWhmZ9y8d44zBT7t3cBFi6W5Z3zs22E9QDO+zprB6sC/9q2j5YkQzDeEsy+eGaNee+Tx GoSXOjdcMmat1NyQNnAhuDJbL93AH5akMOodrdspdah8h9QQWLqjpzOWbL9Si58GuOjpeGOsEJfP BbVy3S3Gu8hT3XA+VwW+it17aIYQG1BdaqKYCAsl8b9jI31UMYdQOuilKnsaHyJRzie7tawdHoCJ 2RsE1/+Su31dlxecA2qiZP8Dpj5LYOnUebf7cQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	DS=7698/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20190907050000 20190825040000 59944 . IASD7OLpbvlhllb1e0BK1l2SJWGdGO0kbd9PXavKSpXm+7ZzcQ0tpw2Lr7cYQDW7mWzTDYtcmc0l pCmdTzMohWhmZ9y8d44zBT7t3cBFi6W5Z3zs22E9QDO+zprB6sC/9q2j5YkQzDeEsy+eGaNee+Tx GoSXOjdcMmat1NyQNnAhuDJbL93AH5akMOodrdspdah8h9QQWLqjpzOWbL9Si58GuOjpeGOsEJfP BbVy3S3Gu8hT3XA+VwW+it17aIYQG1BdaqKYCAsl8b9jI31UMYdQOuilKnsaHyJRzie7tawdHoCJ 2RsE1/+Su31dlxecA2qiZP8Dpj5LYOnUebf7cQ== )`
	RRSIG=59944 and DNSKEY=59944 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	Query to c.gov-servers.net for GOV/DNSKEY
	Received 743 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (743 bytes) ;; HEADER SECTION ;; id = 11385 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 256 3 8 AQPnviCbt0HB2CQze767dPf3TQFosiEwOIkUQaJmcSoNlVSquo3Mox7noTQGzKSdTbKAh0zfkGIb thSb6zyPceMJPpVv2RQUAj9WWTZr4yvO0J5/KllhGqr3sZndrV1lF/rrFzjnnLO8egQTS7bXHbsU 9sM71w5Xiow+isEEPrc5KQ== ) ; Key ID = 7877 GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190830214731 20190815214231 7698 gov. k1bNHuSWv2dXTQUpQqP68QRQ5fWzTY2g+HNf1z8IpZC7H3EHKv8KptrM+vQiUBR655KD9G3geI3x HbR3kKXWcQII2XFfnvCmf7gNbVmOYUli1cTCsbTNo64VS8hdwpwFPH7C8FQ7NDs5vUH6y9XvIJv0 M571C301cmbMdtczwdTVIE64YGedJOWGQMcLJnRPzdbz9IS1XdxHkfLmGsrqzUYUc1/b88hCVlbn ftGzRDh+jUq32mCd6eknCrnfmG4moYT1CVuR10K5oG3pADzMgTSnqCYyFb9xrRYaYtBmDeN0KhKp wx+MHIquJk2W6OUnoMMCX0DqxTlUHMxoxIfOwA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQPnviCbt0HB2CQze767dPf3TQFosiEwOIkUQaJmcSoNlVSquo3Mox7noTQGzKSdTbKAh0zfkGIb thSb6zyPceMJPpVv2RQUAj9WWTZr4yvO0J5/KllhGqr3sZndrV1lF/rrFzjnnLO8egQTS7bXHbsU 9sM71w5Xiow+isEEPrc5KQ== ) ; Key ID = 7877`
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190830214731 20190815214231 7698 gov. k1bNHuSWv2dXTQUpQqP68QRQ5fWzTY2g+HNf1z8IpZC7H3EHKv8KptrM+vQiUBR655KD9G3geI3x HbR3kKXWcQII2XFfnvCmf7gNbVmOYUli1cTCsbTNo64VS8hdwpwFPH7C8FQ7NDs5vUH6y9XvIJv0 M571C301cmbMdtczwdTVIE64YGedJOWGQMcLJnRPzdbz9IS1XdxHkfLmGsrqzUYUc1/b88hCVlbn ftGzRDh+jUq32mCd6eknCrnfmG4moYT1CVuR10K5oG3pADzMgTSnqCYyFb9xrRYaYtBmDeN0KhKp wx+MHIquJk2W6OUnoMMCX0DqxTlUHMxoxIfOwA== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=7877 is now in the chain-of-trust
	Query to b.gov-servers.net for DOLETA.GOV/A
	Error querying b.gov-servers.net/2620:74:27:0:0:0:2:30 for DOLETA.GOV/A: 'IPv6 transport disabled'
	Received 466 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (466 bytes) ;; HEADER SECTION ;; id = 27359 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 6 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DOLETA.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) DOLETA.GOV. 86400 IN NS ns05.dol.GOV. DOLETA.GOV. 86400 IN NS ns1.dol.GOV. DOLETA.GOV. 86400 IN NS ns06.dol.GOV. DOLETA.GOV. 86400 IN NS stlns08.dol.GOV. DOLETA.GOV. 86400 IN NS ns2.dol.GOV. DOLETA.GOV. 3600 IN DS 65431 8 1 f0b7ed744935386142fa2ed6fef6637aaf488c66 DOLETA.GOV. 3600 IN DS ( 65431 8 2 c8fbe70b173ebda38d427458ae35dbc512ae6145147ad719cf3d71f1cb98ba3d ) DOLETA.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190901041007 20190825041007 7877 gov. sLqRZ4oXraAtTwYCu6/ln6qg5osyL7bdV+oQ0xxB/w+9DuK0X/yyfdD6AnJ5ah3UjYBwEPgaWYOh LJuEio9+PU8ItgDL8InkUrPt9B94aR0GB0FXOR8VGsrjtBDR4IdavT78Np7iYxbyE+L+gRecawCb CK7vK1HYYC2hCSL1jkY= ) ;; ADDITIONAL SECTION (6 records) ns05.dol.GOV. 86400 IN A 152.180.11.239 ns1.dol.GOV. 86400 IN A 63.106.133.211 ns06.dol.GOV. 86400 IN A 152.180.11.238 stlns08.dol.GOV. 86400 IN A 152.180.20.20 ns2.dol.GOV. 86400 IN A 63.106.133.212 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.gov-servers.net for DOLETA.GOV/DNSKEY
	Received 466 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (466 bytes) ;; HEADER SECTION ;; id = 823 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 6 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DOLETA.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) DOLETA.GOV. 86400 IN NS ns05.dol.GOV. DOLETA.GOV. 86400 IN NS ns1.dol.GOV. DOLETA.GOV. 86400 IN NS ns06.dol.GOV. DOLETA.GOV. 86400 IN NS stlns08.dol.GOV. DOLETA.GOV. 86400 IN NS ns2.dol.GOV. DOLETA.GOV. 3600 IN DS 65431 8 1 f0b7ed744935386142fa2ed6fef6637aaf488c66 DOLETA.GOV. 3600 IN DS ( 65431 8 2 c8fbe70b173ebda38d427458ae35dbc512ae6145147ad719cf3d71f1cb98ba3d ) DOLETA.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190901041007 20190825041007 7877 gov. sLqRZ4oXraAtTwYCu6/ln6qg5osyL7bdV+oQ0xxB/w+9DuK0X/yyfdD6AnJ5ah3UjYBwEPgaWYOh LJuEio9+PU8ItgDL8InkUrPt9B94aR0GB0FXOR8VGsrjtBDR4IdavT78Np7iYxbyE+L+gRecawCb CK7vK1HYYC2hCSL1jkY= ) ;; ADDITIONAL SECTION (6 records) ns05.dol.GOV. 86400 IN A 152.180.11.239 ns1.dol.GOV. 86400 IN A 63.106.133.211 ns06.dol.GOV. 86400 IN A 152.180.11.238 stlns08.dol.GOV. 86400 IN A 152.180.20.20 ns2.dol.GOV. 86400 IN A 63.106.133.212 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone DOLETA.GOV

DOLETA.GOV

	Checking DS between GOV and DOLETA.GOV
	Query to b.gov-servers.net for DOLETA.GOV/DS
	Error querying b.gov-servers.net/2620:74:27:0:0:0:2:30 for DOLETA.GOV/DS: 'IPv6 transport disabled'
	Received 286 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (286 bytes) ;; HEADER SECTION ;; id = 37870 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DOLETA.GOV. IN DS ;; ANSWER SECTION (3 records) DOLETA.GOV. 3600 IN DS 65431 8 1 f0b7ed744935386142fa2ed6fef6637aaf488c66 DOLETA.GOV. 3600 IN DS ( 65431 8 2 c8fbe70b173ebda38d427458ae35dbc512ae6145147ad719cf3d71f1cb98ba3d ) DOLETA.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190901041007 20190825041007 7877 gov. sLqRZ4oXraAtTwYCu6/ln6qg5osyL7bdV+oQ0xxB/w+9DuK0X/yyfdD6AnJ5ah3UjYBwEPgaWYOh LJuEio9+PU8ItgDL8InkUrPt9B94aR0GB0FXOR8VGsrjtBDR4IdavT78Np7iYxbyE+L+gRecawCb CK7vK1HYYC2hCSL1jkY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for DOLETA.GOV in the GOV zone
	DS=65431/SHA-1 has algorithm RSASHA256
	DS=65431/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`DOLETA.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190901041007 20190825041007 7877 gov. sLqRZ4oXraAtTwYCu6/ln6qg5osyL7bdV+oQ0xxB/w+9DuK0X/yyfdD6AnJ5ah3UjYBwEPgaWYOh LJuEio9+PU8ItgDL8InkUrPt9B94aR0GB0FXOR8VGsrjtBDR4IdavT78Np7iYxbyE+L+gRecawCb CK7vK1HYYC2hCSL1jkY= )`
	RRSIG=7877 and DNSKEY=7877 verifies the DS RRset
	DS=65431/SHA-1 is now in the chain-of-trust
	`DOLETA.GOV. 3600 IN DS 65431 8 1 f0b7ed744935386142fa2ed6fef6637aaf488c66`
	`DOLETA.GOV. 3600 IN DS ( 65431 8 2 c8fbe70b173ebda38d427458ae35dbc512ae6145147ad719cf3d71f1cb98ba3d )`
	Query to ns1.dol.GOV for DOLETA.GOV/DNSKEY
	Error querying ns1.dol.GOV/2607:f250:d008:2022:65:106:133:211 for DOLETA.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 931 bytes from 63.106.133.211
	;; Answer received from 63.106.133.211 (931 bytes) ;; HEADER SECTION ;; id = 50604 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1280 ;; option: ;; QUESTION SECTION (1 record) ;; DOLETA.GOV. IN DNSKEY ;; ANSWER SECTION (4 records) DOLETA.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAaBM6FRPcnmreORyLNkYst/u0XpMqLv5ZI6Bi5dLRvWWMnu9Ib0j5IFR6iGJ3a1aiIdevhLN eyqlC6ZSg7x2F8RURk3gKgaGpGx2mNGOZD+ieImysKKRH0nV789AlcrRUGa5ts5c6AXYAY8qub6x IDTh5t9/5QFtpJ7nn/y43nxnfvoRaHOX6MyNGzDwukCZpc26mGHi3xJVZXZwMrOO7gmUv+vPxJaH 3+4JULh7Sh0eRQpwHYiAQv44yvOk7CtqN1klzC9agSCy8imRKB09NkPSqouVmhFp5fM/OL6812h0 4xwzL4MeWpda/Ze6QtSKoRMWDlipiFPR53+PoFgWo3s= ) ; Key ID = 65431 DOLETA.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAclqdFVB9fvRxFqsehEZUnuCUl8lUUaj53v4nDgA4eb/iyMUhf+LWnG7/Ut7jqVytTabh/tB 3RiEFH2ik6iuYsvKXSC3mhEPkI3B9IAVmzh6gY6aVlpG0SSgnbMXEsRerX8lUZAhzPn6kNm6Otzf 6ET5NGIuEKyM6PKgxO5l2srh ) ; Key ID = 23343 DOLETA.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190924030052 20190825030052 23343 doleta.gov. qbpjlIF4bYdok5exPmiIwoLEPnoJi6XcOUlaCE/qgOKh+ZTDiDIYFFVifd825PVQT39E+ttloIFz 2eMYBZ5x6BJWDMLjRFIpDBRXwXexaI9f7/4cS1FaWa/Bq3cpT94M9z1BzfyaMj/vdmg4JGPHEkEb 41mSJhyfJKA47vwD8ww= ) doleta.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190924030052 20190825030052 65431 doleta.gov. FsE0iW2ys1jBvMuUtvIOsst4d0v0MWWYgs5uT6/BLwhRzY6RR69ayXFIvvw6f5ZxFrGEYYQUt9ID Cyj5Cefuh3K79M7Ws8ASG6np+ey+2aWPY6mgleLgittKWwoLvmsUdmi1gyiCGS6vkKtu8xDIBRMe jjkeTmJplrfHsxqyOfhZ2VYngNVxEsLv94TiP5H7yUiIqJI0NG++uEzTHjq4yy5bZ/1VOlxYYfh4 36TnW+FVCid9n6KVtfsZRK+rGZPFcqX3eeFm/j2UvhfX198NYZ5N+OHC/UFQO/YgJ7SCtJQg5GBz /uWak2ClQ5wLMOOhWG8O7ouHLbye7eci+iMZ9A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1280 ;; option:
	Found 2 DNSKEY records for DOLETA.GOV
	`DOLETA.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAaBM6FRPcnmreORyLNkYst/u0XpMqLv5ZI6Bi5dLRvWWMnu9Ib0j5IFR6iGJ3a1aiIdevhLN eyqlC6ZSg7x2F8RURk3gKgaGpGx2mNGOZD+ieImysKKRH0nV789AlcrRUGa5ts5c6AXYAY8qub6x IDTh5t9/5QFtpJ7nn/y43nxnfvoRaHOX6MyNGzDwukCZpc26mGHi3xJVZXZwMrOO7gmUv+vPxJaH 3+4JULh7Sh0eRQpwHYiAQv44yvOk7CtqN1klzC9agSCy8imRKB09NkPSqouVmhFp5fM/OL6812h0 4xwzL4MeWpda/Ze6QtSKoRMWDlipiFPR53+PoFgWo3s= ) ; Key ID = 65431`
	`DOLETA.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAclqdFVB9fvRxFqsehEZUnuCUl8lUUaj53v4nDgA4eb/iyMUhf+LWnG7/Ut7jqVytTabh/tB 3RiEFH2ik6iuYsvKXSC3mhEPkI3B9IAVmzh6gY6aVlpG0SSgnbMXEsRerX8lUZAhzPn6kNm6Otzf 6ET5NGIuEKyM6PKgxO5l2srh ) ; Key ID = 23343`
	DNSKEY=65431/SEP is now in the chain-of-trust
	DS=65431/SHA-1 verifies DNSKEY=65431/SEP
	DS=65431/SHA-256 verifies DNSKEY=65431/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`DOLETA.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190924030052 20190825030052 23343 doleta.gov. qbpjlIF4bYdok5exPmiIwoLEPnoJi6XcOUlaCE/qgOKh+ZTDiDIYFFVifd825PVQT39E+ttloIFz 2eMYBZ5x6BJWDMLjRFIpDBRXwXexaI9f7/4cS1FaWa/Bq3cpT94M9z1BzfyaMj/vdmg4JGPHEkEb 41mSJhyfJKA47vwD8ww= )`
	`doleta.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190924030052 20190825030052 65431 doleta.gov. FsE0iW2ys1jBvMuUtvIOsst4d0v0MWWYgs5uT6/BLwhRzY6RR69ayXFIvvw6f5ZxFrGEYYQUt9ID Cyj5Cefuh3K79M7Ws8ASG6np+ey+2aWPY6mgleLgittKWwoLvmsUdmi1gyiCGS6vkKtu8xDIBRMe jjkeTmJplrfHsxqyOfhZ2VYngNVxEsLv94TiP5H7yUiIqJI0NG++uEzTHjq4yy5bZ/1VOlxYYfh4 36TnW+FVCid9n6KVtfsZRK+rGZPFcqX3eeFm/j2UvhfX198NYZ5N+OHC/UFQO/YgJ7SCtJQg5GBz /uWak2ClQ5wLMOOhWG8O7ouHLbye7eci+iMZ9A== )`
	RRSIG=23343 and DNSKEY=23343 verifies the DNSKEY RRset
	RRSIG=65431 and DNSKEY=65431/SEP verifies the DNSKEY RRset
	DNSKEY=23343 is now in the chain-of-trust
	Query to ns2.dol.GOV for DOLETA.GOV/A
	Error querying ns2.dol.GOV/2607:f250:d008:2022:65:106:133:212 for DOLETA.GOV/A: 'IPv6 transport disabled'
	Timeout querying ns2.dol.GOV/63.106.133.212 for DOLETA.GOV/A
	All Queries to ns2.dol.GOV for DOLETA.GOV/A timed out or failed
	Query to ns06.dol.GOV for DOLETA.GOV/A
	Received 1216 bytes from 152.180.11.238
	;; Answer received from 152.180.11.238 (1216 bytes) ;; HEADER SECTION ;; id = 47380 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 14 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1280 ;; option: ;; QUESTION SECTION (1 record) ;; DOLETA.GOV. IN A ;; ANSWER SECTION (2 records) DOLETA.GOV. 86400 IN A 152.180.11.154 DOLETA.GOV. 86400 IN RRSIG ( A 8 2 86400 20190923030049 20190824030049 23343 doleta.gov. oIiWl1i8Id3LMeozKQNJ/GiI1U2MwtH68YbrfigjKbr1F7+knLMwqPHvSMSdhbFoAiWu5EVUpfLj Gh0Zb3F8o49DUW0QAM7VUOAC07s/T9rSML/Kjq17dIwxB4fCkq3TRB3rZTml7/NZ8jxd7ghBd/2I e1ks/6Dfg/D4MMW0+aI= ) ;; AUTHORITY SECTION (6 records) doleta.gov. 86400 IN NS stlns08.dol.gov. doleta.gov. 86400 IN NS ns1.dol.gov. doleta.gov. 86400 IN NS ns05.dol.gov. doleta.gov. 86400 IN NS ns06.dol.gov. doleta.gov. 86400 IN NS ns2.dol.gov. doleta.gov. 86400 IN RRSIG ( NS 8 2 86400 20190923030049 20190824030049 23343 doleta.gov. kH+0r3cp0O3zMOkvEV+H/jPwYIaQgLgfraOEKB6ofaa4NhwJhdk5sPrtgsdHlsWS/IaDjamho5LO DB8Sn16kiiPgamZRCoNebmqCJMtnUgXqgZaqZ3/hddWTm/h1AgDRgVx6MrYGjJoXJy9DMXsxnU0U yj77nB8zeW5T0fk/Vuk= ) ;; ADDITIONAL SECTION (14 records) ns1.dol.gov. 86400 IN A 63.106.133.211 ns1.dol.gov. 86400 IN AAAA 2607:f250:d008:2022:65:106:133:211 ns2.dol.gov. 86400 IN A 63.106.133.212 ns2.dol.gov. 86400 IN AAAA 2607:f250:d008:2022:65:106:133:212 ns05.dol.gov. 86400 IN A 152.180.11.239 ns05.dol.gov. 86400 IN AAAA 2607:f250:d020:3001:152:180:11:239 ns06.dol.gov. 86400 IN A 152.180.11.238 ns06.dol.gov. 86400 IN AAAA 2607:f250:d020:3001:152:180:11:238 stlns08.dol.gov. 86400 IN A 152.180.20.20 stlns08.dol.gov. 86400 IN AAAA 2607:f250:d024:3001:152:180:20:20 ns1.dol.gov. 86400 IN RRSIG ( A 8 3 86400 20190924030043 20190825030043 16398 dol.gov. i0DDk2ILz3SvRBZHI/4wgANUwUmjz/a9j3Qq70n6pidQ+LV1bDyRq4c9pi2Pc+JFaHcG5WsPnh9i /EPdzzDmhyzVaIGPf2/93r/Pmm+gVPW7kVfeuM0qsSybWEMWFFlUQXQaGmX6QNDb5XmFn/XuC9M9 11pUT7sNffBdw/FHVjU= ) ns1.dol.gov. 86400 IN RRSIG ( AAAA 8 3 86400 20190924030043 20190825030043 16398 dol.gov. bZLPR2uy/rDwrvrmdEJ2L7u1FSZxTWVm0BZ9GKVCBtRt/xiWPT3uRthMk1MSDa3bIZudPgEWFcSh e6EAAMLkU45FcMNFrPlfz+n6Yhu+Td8H/WbRen4/sEZOElXRf5MNwgfVSmV1NTx1miEAKCslzOFp FH1DEEq8ZWyjamVh6io= ) ns2.dol.gov. 86400 IN RRSIG ( A 8 3 86400 20190924030043 20190825030043 16398 dol.gov. YtvNXMugtOeM45J7fyYa0BFJ5Cc69jqkFZFtxkiK9+BTD3jeqBXM9dwLpmqY4YOopJRLotObZLEI Ym0cBk5OYzDiZNQHghxVgIxmYBQstvt3jetzUUeY+STF5GDkJDRZLNGLG/m8+meiyEtmhInT7PNj RzJBnd3kNEfgJiX29Ws= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1280 ;; option:
	DOLETA.GOV is authoritative for DOLETA.GOV
	Found RRSIG signed by doleta.gov zone
	Query to ns1.dol.gov for DOLETA.GOV/SOA
	Error querying ns1.dol.gov/2607:f250:d008:2022:65:106:133:211 for DOLETA.GOV/SOA: 'IPv6 transport disabled'
	Timeout querying ns1.dol.gov/63.106.133.211 for DOLETA.GOV/SOA
	All Queries to ns1.dol.gov for DOLETA.GOV/SOA timed out or failed
	Query to ns06.dol.gov for DOLETA.GOV/SOA
	Received 1247 bytes from 152.180.11.238
	;; Answer received from 152.180.11.238 (1247 bytes) ;; HEADER SECTION ;; id = 36935 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 14 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1280 ;; option: ;; QUESTION SECTION (1 record) ;; DOLETA.GOV. IN SOA ;; ANSWER SECTION (2 records) DOLETA.GOV. 86400 IN SOA ( ns1.dol.GOV. hostmaster.dol.GOV. 2019080816 ;serial 43200 ;refresh 3600 ;retry 2419200 ;expire 86400 ;minimum ) DOLETA.GOV. 86400 IN RRSIG ( SOA 8 2 86400 20190923030049 20190824030049 23343 doleta.gov. kSZOW1fRG5aCFDgcFH+H896V0pgN9LzMPRBkYx2sNPkeyt+mTGujUURnL/aNakX37uWsBqb+hzMF 6LWpjffR8L0Y+OfblQPFWsrzMXDxZ0KQnpZeDR2qQfvY8Q7j8tSn95Ag14EG/tP3/b+roam6gtLB GFO3yQxiK+VpVbvbsCU= ) ;; AUTHORITY SECTION (6 records) doleta.gov. 86400 IN NS ns2.dol.GOV. doleta.gov. 86400 IN NS stlns08.dol.GOV. doleta.gov. 86400 IN NS ns06.dol.GOV. doleta.gov. 86400 IN NS ns05.dol.GOV. doleta.gov. 86400 IN NS ns1.dol.GOV. doleta.gov. 86400 IN RRSIG ( NS 8 2 86400 20190923030049 20190824030049 23343 doleta.gov. kH+0r3cp0O3zMOkvEV+H/jPwYIaQgLgfraOEKB6ofaa4NhwJhdk5sPrtgsdHlsWS/IaDjamho5LO DB8Sn16kiiPgamZRCoNebmqCJMtnUgXqgZaqZ3/hddWTm/h1AgDRgVx6MrYGjJoXJy9DMXsxnU0U yj77nB8zeW5T0fk/Vuk= ) ;; ADDITIONAL SECTION (14 records) ns1.dol.GOV. 86400 IN A 63.106.133.211 ns1.dol.GOV. 86400 IN AAAA 2607:f250:d008:2022:65:106:133:211 ns2.dol.GOV. 86400 IN A 63.106.133.212 ns2.dol.GOV. 86400 IN AAAA 2607:f250:d008:2022:65:106:133:212 ns05.dol.GOV. 86400 IN A 152.180.11.239 ns05.dol.GOV. 86400 IN AAAA 2607:f250:d020:3001:152:180:11:239 ns06.dol.GOV. 86400 IN A 152.180.11.238 ns06.dol.GOV. 86400 IN AAAA 2607:f250:d020:3001:152:180:11:238 stlns08.dol.GOV. 86400 IN A 152.180.20.20 stlns08.dol.GOV. 86400 IN AAAA 2607:f250:d024:3001:152:180:20:20 ns1.dol.GOV. 86400 IN RRSIG ( A 8 3 86400 20190924030043 20190825030043 16398 dol.gov. i0DDk2ILz3SvRBZHI/4wgANUwUmjz/a9j3Qq70n6pidQ+LV1bDyRq4c9pi2Pc+JFaHcG5WsPnh9i /EPdzzDmhyzVaIGPf2/93r/Pmm+gVPW7kVfeuM0qsSybWEMWFFlUQXQaGmX6QNDb5XmFn/XuC9M9 11pUT7sNffBdw/FHVjU= ) ns1.dol.GOV. 86400 IN RRSIG ( AAAA 8 3 86400 20190924030043 20190825030043 16398 dol.gov. bZLPR2uy/rDwrvrmdEJ2L7u1FSZxTWVm0BZ9GKVCBtRt/xiWPT3uRthMk1MSDa3bIZudPgEWFcSh e6EAAMLkU45FcMNFrPlfz+n6Yhu+Td8H/WbRen4/sEZOElXRf5MNwgfVSmV1NTx1miEAKCslzOFp FH1DEEq8ZWyjamVh6io= ) ns2.dol.GOV. 86400 IN RRSIG ( A 8 3 86400 20190924030043 20190825030043 16398 dol.gov. YtvNXMugtOeM45J7fyYa0BFJ5Cc69jqkFZFtxkiK9+BTD3jeqBXM9dwLpmqY4YOopJRLotObZLEI Ym0cBk5OYzDiZNQHghxVgIxmYBQstvt3jetzUUeY+STF5GDkJDRZLNGLG/m8+meiyEtmhInT7PNj RzJBnd3kNEfgJiX29Ws= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1280 ;; option:
	Query to stlns08.dol.gov for DOLETA.GOV/SOA
	Error querying stlns08.dol.gov/2607:f250:d024:3001:152:180:20:20 for DOLETA.GOV/SOA: 'IPv6 transport disabled'
	Received 2426 bytes from 152.180.20.20
	;; Answer received from 152.180.20.20 (2426 bytes) ;; HEADER SECTION ;; id = 16567 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 21 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; DOLETA.GOV. IN SOA ;; ANSWER SECTION (2 records) doleta.gov. 86400 IN SOA ( ns1.dol.gov. hostmaster.dol.gov. 2019080817 ;serial 43200 ;refresh 3600 ;retry 2419200 ;expire 86400 ;minimum ) doleta.gov. 86400 IN RRSIG ( SOA 8 2 86400 20190924030052 20190825030052 23343 doleta.gov. aj/u7st/F/id9MVSUH7mrDMzVGm3BvHdeIfi2CxWAVgINcy3P9CuUkfKga9kmukPWxjWpb+K4dhl ERvj9/YmUkbin/WKbWHAmsfcHg0RghXyji9sPpfYUuoGlRf7HBb0UsZPovPUDXzrEEmOOekgx/ty MClzGVIcKpCdNBAuTPY= ) ;; AUTHORITY SECTION (6 records) doleta.gov. 86400 IN NS ns06.dol.gov. doleta.gov. 86400 IN NS ns2.dol.gov. doleta.gov. 86400 IN NS ns05.dol.gov. doleta.gov. 86400 IN NS stlns08.dol.gov. doleta.gov. 86400 IN NS ns1.dol.gov. doleta.gov. 86400 IN RRSIG ( NS 8 2 86400 20190924030052 20190825030052 23343 doleta.gov. PiFhmBOLRy5LmyPkHKAcZq7AbbkfJ3bHGBgz+N4b505diRTRpQnJ7V3Biy+zl2heasEHTC6t0PFu Lw19sNegwC+i4sDOKPFnU9mNOnjt0Hjdpp/2v2yo6kNEX6hlf2guBt0BQ0MyMhefM/uHyLozI574 R50nHzO666i8fk1B3cg= ) ;; ADDITIONAL SECTION (21 records) ns1.dol.gov. 86400 IN A 63.106.133.211 ns1.dol.gov. 86400 IN AAAA 2607:f250:d008:2022:65:106:133:211 ns2.dol.gov. 86400 IN A 63.106.133.212 ns2.dol.gov. 86400 IN AAAA 2607:f250:d008:2022:65:106:133:212 ns05.dol.gov. 86400 IN A 152.180.11.239 ns05.dol.gov. 86400 IN AAAA 2607:f250:d020:3001:152:180:11:239 ns06.dol.gov. 86400 IN A 152.180.11.238 ns06.dol.gov. 86400 IN AAAA 2607:f250:d020:3001:152:180:11:238 stlns08.dol.gov. 86400 IN A 152.180.20.20 stlns08.dol.gov. 86400 IN AAAA 2607:f250:d024:3001:152:180:20:20 ns1.dol.gov. 86400 IN RRSIG ( A 8 3 86400 20190924030043 20190825030043 16398 dol.gov. i0DDk2ILz3SvRBZHI/4wgANUwUmjz/a9j3Qq70n6pidQ+LV1bDyRq4c9pi2Pc+JFaHcG5WsPnh9i /EPdzzDmhyzVaIGPf2/93r/Pmm+gVPW7kVfeuM0qsSybWEMWFFlUQXQaGmX6QNDb5XmFn/XuC9M9 11pUT7sNffBdw/FHVjU= ) ns1.dol.gov. 86400 IN RRSIG ( AAAA 8 3 86400 20190924030043 20190825030043 16398 dol.gov. bZLPR2uy/rDwrvrmdEJ2L7u1FSZxTWVm0BZ9GKVCBtRt/xiWPT3uRthMk1MSDa3bIZudPgEWFcSh e6EAAMLkU45FcMNFrPlfz+n6Yhu+Td8H/WbRen4/sEZOElXRf5MNwgfVSmV1NTx1miEAKCslzOFp FH1DEEq8ZWyjamVh6io= ) ns2.dol.gov. 86400 IN RRSIG ( A 8 3 86400 20190924030043 20190825030043 16398 dol.gov. YtvNXMugtOeM45J7fyYa0BFJ5Cc69jqkFZFtxkiK9+BTD3jeqBXM9dwLpmqY4YOopJRLotObZLEI Ym0cBk5OYzDiZNQHghxVgIxmYBQstvt3jetzUUeY+STF5GDkJDRZLNGLG/m8+meiyEtmhInT7PNj RzJBnd3kNEfgJiX29Ws= ) ns2.dol.gov. 86400 IN RRSIG ( AAAA 8 3 86400 20190924030043 20190825030043 16398 dol.gov. GzweGCRtMCFZjTVdyg4HvA/+xwYnuXy9nwJMUljzppQ6CYvGrttkYkEGFgbrLIknImSce5MoalW2 Dm8Sbgen/ZVXQ4OEpRI4NmHq32U26BMNmNliPzDEdbG2BuucVsnFD/cNWfxnSazoOKeJgZiTVWv1 fH673vTWIpPlcvlNAEM= ) ns05.dol.gov. 86400 IN RRSIG ( A 8 3 86400 20190924030043 20190825030043 16398 dol.gov. lgIHsiG5ZLT7EIHGPH/YEHDc4jnoHYlIGvqs+gGH5ICyoot4y5NKY4WnnNXmbvg9PXTY5lYv68/I wX6619z6CTDTeDG2wAQKhXek3IL4rvBk6EnzLt9bxs3Wm5zTAtzmgUDk2H/NnkSBNPpt2H09oD/J zinCmYX58Uk7eZ04VYo= ) ns05.dol.gov. 86400 IN RRSIG ( AAAA 8 3 86400 20190924030043 20190825030043 16398 dol.gov. mbVXBPEYgzanfMSKcZNH70X98e1wTGcUZbatzxq9cqIw+x68yuxhx5C4SCKPKJIzWOgRuHzdgdnC QFhw774JtiBjMXpp1MJvTOUMVhwiDfDhocvwatFbulw+Y/vxB1EKHFR2pBxprL7Y6UROKy3NG4WS bZABxHnFHsYsisu3T64= ) ns06.dol.gov. 86400 IN RRSIG ( A 8 3 86400 20190924030043 20190825030043 16398 dol.gov. hNlZUCTPJWKwcpr0FIMmCIlCoD4WE4U8p5o80w+pxjnKVcQ7MXhBfGXl1lFgyl6iXBe1XLE7azlL XnMAV7WjdtVaFdaSLV7lMso2ZVV3mcPZKsJY/pZz7X5zgR3SwIcmTekbAVrj13eMngtQS8CkktNa WhDCuXB8UQ/iExL/4/s= ) ns06.dol.gov. 86400 IN RRSIG ( AAAA 8 3 86400 20190924030043 20190825030043 16398 dol.gov. bCjix/l8DpbtPqJcjJVJRSLeVJJKVrDnetdoljQ1zQXMGKih04qoztS7VRI4QKb28E5RTOWtna+s 8fdumAn8VW03jbBPX+qoP60xswmdD/zSwpbUPyfAKiYGAPDsOL0tCtEJYSZsXdw5yr+CAthGiKyE Ys/8znSBDFpOAMPymEU= ) stlns08.dol.gov. 86400 IN RRSIG ( A 8 3 86400 20190924030043 20190825030043 16398 dol.gov. lUL1woUm6DLL9upcqNmNE9qL1BqYjWo/kyoqiemVkuol5AxQxTIPW5t1jVUcu9rIrj1zr4XKl292 PdKLMF5h4INQkdn6qBN3LbHtYPYaE18vLzGQJZXmmoJvKzM71+eArxB8smV7Db1iOsJvoFx69X2O m5HxlK8asAd6ygt/JNo= ) stlns08.dol.gov. 86400 IN RRSIG ( AAAA 8 3 86400 20190924030043 20190825030043 16398 dol.gov. M6LkPqpwUH6lWHbIwUxxeSOKCW2wAnUxfZTI6bgiqEe5sOwZpCwHWiGofYeSjedZFdvSd0RuAEvV KfkvaOnalx0d4E4eHgnuuzCjfdXlwQQ435Z/KWRdY5mEFo4hQChdEKvaFzFAoLf2FxoQd/a7wF2e bq3cnI4Phs6oGwfE2jg= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	stlns08.dol.gov serial (2019080817) differs from ns06.dol.gov serial (2019080816)
	Query to ns05.dol.gov for DOLETA.GOV/SOA
	Received 1247 bytes from 152.180.11.239
	;; Answer received from 152.180.11.239 (1247 bytes) ;; HEADER SECTION ;; id = 5395 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 14 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1280 ;; option: ;; QUESTION SECTION (1 record) ;; DOLETA.GOV. IN SOA ;; ANSWER SECTION (2 records) DOLETA.GOV. 86400 IN SOA ( ns1.dol.GOV. hostmaster.dol.GOV. 2019080817 ;serial 43200 ;refresh 3600 ;retry 2419200 ;expire 86400 ;minimum ) DOLETA.GOV. 86400 IN RRSIG ( SOA 8 2 86400 20190924030052 20190825030052 23343 doleta.gov. aj/u7st/F/id9MVSUH7mrDMzVGm3BvHdeIfi2CxWAVgINcy3P9CuUkfKga9kmukPWxjWpb+K4dhl ERvj9/YmUkbin/WKbWHAmsfcHg0RghXyji9sPpfYUuoGlRf7HBb0UsZPovPUDXzrEEmOOekgx/ty MClzGVIcKpCdNBAuTPY= ) ;; AUTHORITY SECTION (6 records) doleta.gov. 86400 IN NS ns05.dol.GOV. doleta.gov. 86400 IN NS ns2.dol.GOV. doleta.gov. 86400 IN NS stlns08.dol.GOV. doleta.gov. 86400 IN NS ns06.dol.GOV. doleta.gov. 86400 IN NS ns1.dol.GOV. doleta.gov. 86400 IN RRSIG ( NS 8 2 86400 20190924030052 20190825030052 23343 doleta.gov. PiFhmBOLRy5LmyPkHKAcZq7AbbkfJ3bHGBgz+N4b505diRTRpQnJ7V3Biy+zl2heasEHTC6t0PFu Lw19sNegwC+i4sDOKPFnU9mNOnjt0Hjdpp/2v2yo6kNEX6hlf2guBt0BQ0MyMhefM/uHyLozI574 R50nHzO666i8fk1B3cg= ) ;; ADDITIONAL SECTION (14 records) ns1.dol.GOV. 86400 IN A 63.106.133.211 ns1.dol.GOV. 86400 IN AAAA 2607:f250:d008:2022:65:106:133:211 ns2.dol.GOV. 86400 IN A 63.106.133.212 ns2.dol.GOV. 86400 IN AAAA 2607:f250:d008:2022:65:106:133:212 ns05.dol.GOV. 86400 IN A 152.180.11.239 ns05.dol.GOV. 86400 IN AAAA 2607:f250:d020:3001:152:180:11:239 ns06.dol.GOV. 86400 IN A 152.180.11.238 ns06.dol.GOV. 86400 IN AAAA 2607:f250:d020:3001:152:180:11:238 stlns08.dol.GOV. 86400 IN A 152.180.20.20 stlns08.dol.GOV. 86400 IN AAAA 2607:f250:d024:3001:152:180:20:20 ns1.dol.GOV. 86400 IN RRSIG ( A 8 3 86400 20190924030043 20190825030043 16398 dol.gov. i0DDk2ILz3SvRBZHI/4wgANUwUmjz/a9j3Qq70n6pidQ+LV1bDyRq4c9pi2Pc+JFaHcG5WsPnh9i /EPdzzDmhyzVaIGPf2/93r/Pmm+gVPW7kVfeuM0qsSybWEMWFFlUQXQaGmX6QNDb5XmFn/XuC9M9 11pUT7sNffBdw/FHVjU= ) ns1.dol.GOV. 86400 IN RRSIG ( AAAA 8 3 86400 20190924030043 20190825030043 16398 dol.gov. bZLPR2uy/rDwrvrmdEJ2L7u1FSZxTWVm0BZ9GKVCBtRt/xiWPT3uRthMk1MSDa3bIZudPgEWFcSh e6EAAMLkU45FcMNFrPlfz+n6Yhu+Td8H/WbRen4/sEZOElXRf5MNwgfVSmV1NTx1miEAKCslzOFp FH1DEEq8ZWyjamVh6io= ) ns2.dol.GOV. 86400 IN RRSIG ( A 8 3 86400 20190924030043 20190825030043 16398 dol.gov. YtvNXMugtOeM45J7fyYa0BFJ5Cc69jqkFZFtxkiK9+BTD3jeqBXM9dwLpmqY4YOopJRLotObZLEI Ym0cBk5OYzDiZNQHghxVgIxmYBQstvt3jetzUUeY+STF5GDkJDRZLNGLG/m8+meiyEtmhInT7PNj RzJBnd3kNEfgJiX29Ws= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1280 ;; option:
	ns05.dol.gov serial (2019080817) differs from ns06.dol.gov serial (2019080816)
	Query to ns2.dol.gov for DOLETA.GOV/SOA
	Timeout querying ns2.dol.gov/63.106.133.212 for DOLETA.GOV/SOA
	Error querying ns2.dol.gov/2607:f250:d008:2022:65:106:133:212 for DOLETA.GOV/SOA: 'IPv6 transport disabled'
	All Queries to ns2.dol.gov for DOLETA.GOV/SOA timed out or failed
	Query to ns06.dol.GOV for DOLETA.GOV/A
	Received 1216 bytes from 152.180.11.238
	;; Answer received from 152.180.11.238 (1216 bytes) ;; HEADER SECTION ;; id = 1760 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 14 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1280 ;; option: ;; QUESTION SECTION (1 record) ;; DOLETA.GOV. IN A ;; ANSWER SECTION (2 records) DOLETA.GOV. 86400 IN A 152.180.11.154 DOLETA.GOV. 86400 IN RRSIG ( A 8 2 86400 20190923030049 20190824030049 23343 doleta.gov. oIiWl1i8Id3LMeozKQNJ/GiI1U2MwtH68YbrfigjKbr1F7+knLMwqPHvSMSdhbFoAiWu5EVUpfLj Gh0Zb3F8o49DUW0QAM7VUOAC07s/T9rSML/Kjq17dIwxB4fCkq3TRB3rZTml7/NZ8jxd7ghBd/2I e1ks/6Dfg/D4MMW0+aI= ) ;; AUTHORITY SECTION (6 records) doleta.gov. 86400 IN NS ns2.dol.gov. doleta.gov. 86400 IN NS ns1.dol.gov. doleta.gov. 86400 IN NS stlns08.dol.gov. doleta.gov. 86400 IN NS ns06.dol.gov. doleta.gov. 86400 IN NS ns05.dol.gov. doleta.gov. 86400 IN RRSIG ( NS 8 2 86400 20190923030049 20190824030049 23343 doleta.gov. kH+0r3cp0O3zMOkvEV+H/jPwYIaQgLgfraOEKB6ofaa4NhwJhdk5sPrtgsdHlsWS/IaDjamho5LO DB8Sn16kiiPgamZRCoNebmqCJMtnUgXqgZaqZ3/hddWTm/h1AgDRgVx6MrYGjJoXJy9DMXsxnU0U yj77nB8zeW5T0fk/Vuk= ) ;; ADDITIONAL SECTION (14 records) ns1.dol.gov. 86400 IN A 63.106.133.211 ns1.dol.gov. 86400 IN AAAA 2607:f250:d008:2022:65:106:133:211 ns2.dol.gov. 86400 IN A 63.106.133.212 ns2.dol.gov. 86400 IN AAAA 2607:f250:d008:2022:65:106:133:212 ns05.dol.gov. 86400 IN A 152.180.11.239 ns05.dol.gov. 86400 IN AAAA 2607:f250:d020:3001:152:180:11:239 ns06.dol.gov. 86400 IN A 152.180.11.238 ns06.dol.gov. 86400 IN AAAA 2607:f250:d020:3001:152:180:11:238 stlns08.dol.gov. 86400 IN A 152.180.20.20 stlns08.dol.gov. 86400 IN AAAA 2607:f250:d024:3001:152:180:20:20 ns1.dol.gov. 86400 IN RRSIG ( A 8 3 86400 20190924030043 20190825030043 16398 dol.gov. i0DDk2ILz3SvRBZHI/4wgANUwUmjz/a9j3Qq70n6pidQ+LV1bDyRq4c9pi2Pc+JFaHcG5WsPnh9i /EPdzzDmhyzVaIGPf2/93r/Pmm+gVPW7kVfeuM0qsSybWEMWFFlUQXQaGmX6QNDb5XmFn/XuC9M9 11pUT7sNffBdw/FHVjU= ) ns1.dol.gov. 86400 IN RRSIG ( AAAA 8 3 86400 20190924030043 20190825030043 16398 dol.gov. bZLPR2uy/rDwrvrmdEJ2L7u1FSZxTWVm0BZ9GKVCBtRt/xiWPT3uRthMk1MSDa3bIZudPgEWFcSh e6EAAMLkU45FcMNFrPlfz+n6Yhu+Td8H/WbRen4/sEZOElXRf5MNwgfVSmV1NTx1miEAKCslzOFp FH1DEEq8ZWyjamVh6io= ) ns2.dol.gov. 86400 IN RRSIG ( A 8 3 86400 20190924030043 20190825030043 16398 dol.gov. YtvNXMugtOeM45J7fyYa0BFJ5Cc69jqkFZFtxkiK9+BTD3jeqBXM9dwLpmqY4YOopJRLotObZLEI Ym0cBk5OYzDiZNQHghxVgIxmYBQstvt3jetzUUeY+STF5GDkJDRZLNGLG/m8+meiyEtmhInT7PNj RzJBnd3kNEfgJiX29Ws= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1280 ;; option:
	DOLETA.GOV A RR has value 152.180.11.154
	Found 1 RRSIGs over A RRset
	`DOLETA.GOV. 86400 IN RRSIG ( A 8 2 86400 20190923030049 20190824030049 23343 doleta.gov. oIiWl1i8Id3LMeozKQNJ/GiI1U2MwtH68YbrfigjKbr1F7+knLMwqPHvSMSdhbFoAiWu5EVUpfLj Gh0Zb3F8o49DUW0QAM7VUOAC07s/T9rSML/Kjq17dIwxB4fCkq3TRB3rZTml7/NZ8jxd7ghBd/2I e1ks/6Dfg/D4MMW0+aI= )`
	RRSIG=23343 and DNSKEY=23343 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test DOLETA.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: