DNSSEC Analyzer - ENERGY.GOV

Domain Name:

Time: 2019-12-12 19:17:54 UTC, NTP stratum 4

Analyzing DNSSEC problems for ENERGY.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to k.root-servers.net for ./DNSKEY
	Received 864 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (864 bytes) ;; HEADER SECTION ;; id = 20168 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20191231000000 20191210000000 20326 . M6PHO6VOOLVi9f31412BD96l/dWG8WOE+R6Q+KYMr4aJpS/hTZjjs6EDa249B2cjO7QzSD+qxWNT s7enqC1DsEAjeVm0epe3h6TFVBjX76R0MIqYC3+LjgGjyQnpish6mPApIx0ZC8mxewn0GCvC9Gqk 9S7s7IDD8FQWosXQRChqF9M7qkG1NuKvgPvqgpAk3naii0Eajx8N3XiPo8EwVS3yWOct4wcY8B1s fZjvL7mLDAiggGouyxt5PGm9TdnG7eioZPM1LyX1YgDV4/qUKmp7BHhsVKh/nQaR46yxbcpiRz6R nADB991g/+3bgY8dSACfUI0aBFsRT0DHHnMfpg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20191231000000 20191210000000 20326 . M6PHO6VOOLVi9f31412BD96l/dWG8WOE+R6Q+KYMr4aJpS/hTZjjs6EDa249B2cjO7QzSD+qxWNT s7enqC1DsEAjeVm0epe3h6TFVBjX76R0MIqYC3+LjgGjyQnpish6mPApIx0ZC8mxewn0GCvC9Gqk 9S7s7IDD8FQWosXQRChqF9M7qkG1NuKvgPvqgpAk3naii0Eajx8N3XiPo8EwVS3yWOct4wcY8B1s fZjvL7mLDAiggGouyxt5PGm9TdnG7eioZPM1LyX1YgDV4/qUKmp7BHhsVKh/nQaR46yxbcpiRz6R nADB991g/+3bgY8dSACfUI0aBFsRT0DHHnMfpg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=22545 is now in the chain-of-trust
	Query to j.root-servers.net for ENERGY.GOV/A
	Error querying j.root-servers.net/2001:503:c27:0:0:0:2:30 for ENERGY.GOV/A: 'IPv6 transport disabled'
	Received 665 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (665 bytes) ;; HEADER SECTION ;; id = 63799 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ENERGY.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20191225170000 20191212160000 22545 . fswiGB259Rt66Inad5y/W8P8bOIM1+gDH5Ux7Ian7DWg2jyUhufHp63kIlQmEWw1V0VI/Kx4PvNC N9V8hrXTXO3zxZvRhZwzPJdfAod+JX36nVoN5pcfCXTIUIgrr4BVHSHUfXxJJcMfpmjZAnw8Swe3 URRVoSPTTMX1UpvVVUl58vlt+qiqFNNr61siawu5+la8cGcwgNUZTpb9FvVZjlqBwwh4z0mRXZNF zzO7hEFqhvfFBQa2zCe0mT7xX9OxK4jcYkc6q0Np7BLn0KL3hCCec1nySW5BAqHcnfWWBOcTrlGO 2OnESuD57YqqRfEz5eJrxztIuaH8UaCxL/9MvA== ) ;; ADDITIONAL SECTION (9 records) b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.root-servers.net for GOV/DNSKEY
	Error querying b.root-servers.net/2001:500:200:0:0:0:0:b for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 661 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (661 bytes) ;; HEADER SECTION ;; id = 41532 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20191225170000 20191212160000 22545 . fswiGB259Rt66Inad5y/W8P8bOIM1+gDH5Ux7Ian7DWg2jyUhufHp63kIlQmEWw1V0VI/Kx4PvNC N9V8hrXTXO3zxZvRhZwzPJdfAod+JX36nVoN5pcfCXTIUIgrr4BVHSHUfXxJJcMfpmjZAnw8Swe3 URRVoSPTTMX1UpvVVUl58vlt+qiqFNNr61siawu5+la8cGcwgNUZTpb9FvVZjlqBwwh4z0mRXZNF zzO7hEFqhvfFBQa2zCe0mT7xX9OxK4jcYkc6q0Np7BLn0KL3hCCec1nySW5BAqHcnfWWBOcTrlGO 2OnESuD57YqqRfEz5eJrxztIuaH8UaCxL/9MvA== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to i.root-servers.net for GOV/DS
	Received 406 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (406 bytes) ;; HEADER SECTION ;; id = 48787 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20191225170000 20191212160000 22545 . fswiGB259Rt66Inad5y/W8P8bOIM1+gDH5Ux7Ian7DWg2jyUhufHp63kIlQmEWw1V0VI/Kx4PvNC N9V8hrXTXO3zxZvRhZwzPJdfAod+JX36nVoN5pcfCXTIUIgrr4BVHSHUfXxJJcMfpmjZAnw8Swe3 URRVoSPTTMX1UpvVVUl58vlt+qiqFNNr61siawu5+la8cGcwgNUZTpb9FvVZjlqBwwh4z0mRXZNF zzO7hEFqhvfFBQa2zCe0mT7xX9OxK4jcYkc6q0Np7BLn0KL3hCCec1nySW5BAqHcnfWWBOcTrlGO 2OnESuD57YqqRfEz5eJrxztIuaH8UaCxL/9MvA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	DS=7698/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20191225170000 20191212160000 22545 . fswiGB259Rt66Inad5y/W8P8bOIM1+gDH5Ux7Ian7DWg2jyUhufHp63kIlQmEWw1V0VI/Kx4PvNC N9V8hrXTXO3zxZvRhZwzPJdfAod+JX36nVoN5pcfCXTIUIgrr4BVHSHUfXxJJcMfpmjZAnw8Swe3 URRVoSPTTMX1UpvVVUl58vlt+qiqFNNr61siawu5+la8cGcwgNUZTpb9FvVZjlqBwwh4z0mRXZNF zzO7hEFqhvfFBQa2zCe0mT7xX9OxK4jcYkc6q0Np7BLn0KL3hCCec1nySW5BAqHcnfWWBOcTrlGO 2OnESuD57YqqRfEz5eJrxztIuaH8UaCxL/9MvA== )`
	RRSIG=22545 and DNSKEY=22545 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	Query to d.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (777 bytes) ;; HEADER SECTION ;; id = 18689 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAcQAVXGAbq+khqvif1NNId5wvkmsmSZEb/UXjfazqpqEeA7IUc8b/9eEIBebIcFda4Ukv8lF lnfGIvMRADLa50RVwP2asra1Md0NC9tLjrHEYN0H68WN0tTLIQ6jUF/kzYTeTOVhlUqzM+5JyyT9 x01e1FT5ANG8RkbgXIyPte2Qs8wasqNkjFGaD5oFLerVScCa0FXumybu9cBEfBbAzPU= ) ; Key ID = 14320 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20191226200254 20191211195754 7698 gov. TSWDNaT2YWZcvYuhy1ISjgdvmxDwfuUJNhhXMnCUD62NHheC81xZR5VuepYRxTyeIeuVBrvwV0gp IOMHMMqsD4IyCZMioFUFrXKlDiuuQTsGkByQFte/wgyW4jC1pNARdNZ54FCn5N2JY3B33MOqfpKy ocq2MULAQjrUhc6TcyiyU5nH9wfBOLTbxYIdP2YWNg1hLjc9knPnQLun7Bg2XLIpqCuypNyLbUWV 6gk/OONTvBZrzGs4sWJ0E+ad7xjkUzuzUSJlhmpyp5uSoOeys8ksYwKwgMVnb3syKMCmZ4nNCAU7 4935yc7k/D/qus++bMwSFdt1/20z1RbGhH7QNw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAcQAVXGAbq+khqvif1NNId5wvkmsmSZEb/UXjfazqpqEeA7IUc8b/9eEIBebIcFda4Ukv8lF lnfGIvMRADLa50RVwP2asra1Md0NC9tLjrHEYN0H68WN0tTLIQ6jUF/kzYTeTOVhlUqzM+5JyyT9 x01e1FT5ANG8RkbgXIyPte2Qs8wasqNkjFGaD5oFLerVScCa0FXumybu9cBEfBbAzPU= ) ; Key ID = 14320`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20191226200254 20191211195754 7698 gov. TSWDNaT2YWZcvYuhy1ISjgdvmxDwfuUJNhhXMnCUD62NHheC81xZR5VuepYRxTyeIeuVBrvwV0gp IOMHMMqsD4IyCZMioFUFrXKlDiuuQTsGkByQFte/wgyW4jC1pNARdNZ54FCn5N2JY3B33MOqfpKy ocq2MULAQjrUhc6TcyiyU5nH9wfBOLTbxYIdP2YWNg1hLjc9knPnQLun7Bg2XLIpqCuypNyLbUWV 6gk/OONTvBZrzGs4sWJ0E+ad7xjkUzuzUSJlhmpyp5uSoOeys8ksYwKwgMVnb3syKMCmZ4nNCAU7 4935yc7k/D/qus++bMwSFdt1/20z1RbGhH7QNw== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=14320 is now in the chain-of-trust
	Query to c.gov-servers.net for ENERGY.GOV/A
	Error querying c.gov-servers.net/2620:74:28:0:0:0:2:30 for ENERGY.GOV/A: 'IPv6 transport disabled'
	Received 477 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (477 bytes) ;; HEADER SECTION ;; id = 20608 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ENERGY.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) ENERGY.GOV. 86400 IN NS foxbat.doe.GOV. ENERGY.GOV. 86400 IN NS ns1.es.net. ENERGY.GOV. 86400 IN NS fulcrum.doe.GOV. ENERGY.GOV. 3600 IN DS 54505 8 1 ab9371905c59f376f6e71f56eb9d91af7f64efbe ENERGY.GOV. 3600 IN DS ( 54505 8 2 3d7c33456721fff8289f48d69e482c073231211eb0fa0a063c6950fb9e722622 ) ENERGY.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191219161007 20191212161007 14320 gov. jkniuKfmaUm+v0Z/Ys2LKYLW/1hnbsjIycVzx8yB1G+5oKVu8waHQ51bfyErS2nnfPbbaZ1pl0I4 eKVuASMupj8+ciHY15Uy8rKVZNdiwk4HSIxU/GB6ncfpAq79qzWcBWd22VAiOixzcoOlcLyYOYaC Gq0vDxymj3M4L2E1pFpF5t3Z0cfqKpG+zqoCvuGfD67ZSEpwnA7C9LbW3a5TDw== ) ;; ADDITIONAL SECTION (5 records) foxbat.doe.GOV. 86400 IN A 205.254.143.110 foxbat.doe.GOV. 86400 IN AAAA 2607:f368:1000:1000::53 fulcrum.doe.GOV. 86400 IN A 205.254.144.110 fulcrum.doe.GOV. 86400 IN AAAA 2607:f368:1000:1100::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.gov-servers.net for ENERGY.GOV/DNSKEY
	Received 477 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (477 bytes) ;; HEADER SECTION ;; id = 54338 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ENERGY.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) ENERGY.GOV. 86400 IN NS foxbat.doe.GOV. ENERGY.GOV. 86400 IN NS ns1.es.net. ENERGY.GOV. 86400 IN NS fulcrum.doe.GOV. ENERGY.GOV. 3600 IN DS 54505 8 1 ab9371905c59f376f6e71f56eb9d91af7f64efbe ENERGY.GOV. 3600 IN DS ( 54505 8 2 3d7c33456721fff8289f48d69e482c073231211eb0fa0a063c6950fb9e722622 ) ENERGY.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191219161007 20191212161007 14320 gov. jkniuKfmaUm+v0Z/Ys2LKYLW/1hnbsjIycVzx8yB1G+5oKVu8waHQ51bfyErS2nnfPbbaZ1pl0I4 eKVuASMupj8+ciHY15Uy8rKVZNdiwk4HSIxU/GB6ncfpAq79qzWcBWd22VAiOixzcoOlcLyYOYaC Gq0vDxymj3M4L2E1pFpF5t3Z0cfqKpG+zqoCvuGfD67ZSEpwnA7C9LbW3a5TDw== ) ;; ADDITIONAL SECTION (5 records) foxbat.doe.GOV. 86400 IN A 205.254.143.110 foxbat.doe.GOV. 86400 IN AAAA 2607:f368:1000:1000::53 fulcrum.doe.GOV. 86400 IN A 205.254.144.110 fulcrum.doe.GOV. 86400 IN AAAA 2607:f368:1000:1100::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone ENERGY.GOV

ENERGY.GOV

	Checking DS between GOV and ENERGY.GOV
	Query to c.gov-servers.net for ENERGY.GOV/DS
	Received 318 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (318 bytes) ;; HEADER SECTION ;; id = 291 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ENERGY.GOV. IN DS ;; ANSWER SECTION (3 records) ENERGY.GOV. 3600 IN DS 54505 8 1 ab9371905c59f376f6e71f56eb9d91af7f64efbe ENERGY.GOV. 3600 IN DS ( 54505 8 2 3d7c33456721fff8289f48d69e482c073231211eb0fa0a063c6950fb9e722622 ) ENERGY.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191219161007 20191212161007 14320 gov. jkniuKfmaUm+v0Z/Ys2LKYLW/1hnbsjIycVzx8yB1G+5oKVu8waHQ51bfyErS2nnfPbbaZ1pl0I4 eKVuASMupj8+ciHY15Uy8rKVZNdiwk4HSIxU/GB6ncfpAq79qzWcBWd22VAiOixzcoOlcLyYOYaC Gq0vDxymj3M4L2E1pFpF5t3Z0cfqKpG+zqoCvuGfD67ZSEpwnA7C9LbW3a5TDw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for ENERGY.GOV in the GOV zone
	DS=54505/SHA-1 has algorithm RSASHA256
	DS=54505/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ENERGY.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191219161007 20191212161007 14320 gov. jkniuKfmaUm+v0Z/Ys2LKYLW/1hnbsjIycVzx8yB1G+5oKVu8waHQ51bfyErS2nnfPbbaZ1pl0I4 eKVuASMupj8+ciHY15Uy8rKVZNdiwk4HSIxU/GB6ncfpAq79qzWcBWd22VAiOixzcoOlcLyYOYaC Gq0vDxymj3M4L2E1pFpF5t3Z0cfqKpG+zqoCvuGfD67ZSEpwnA7C9LbW3a5TDw== )`
	RRSIG=14320 and DNSKEY=14320 verifies the DS RRset
	DS=54505/SHA-1 is now in the chain-of-trust
	`ENERGY.GOV. 3600 IN DS 54505 8 1 ab9371905c59f376f6e71f56eb9d91af7f64efbe`
	`ENERGY.GOV. 3600 IN DS ( 54505 8 2 3d7c33456721fff8289f48d69e482c073231211eb0fa0a063c6950fb9e722622 )`
	Query to foxbat.doe.GOV for ENERGY.GOV/DNSKEY
	Received 1985 bytes from 205.254.143.110
	;; Answer received from 205.254.143.110 (1985 bytes) ;; HEADER SECTION ;; id = 5745 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ENERGY.GOV. IN DNSKEY ;; ANSWER SECTION (5 records) energy.gov. 3600 IN DNSKEY ( 256 3 8 AwEAAe5awhCrYQyC104W5W+qd93Cf/6xkrDWWqLcXF/cfxgoGljLq6ELANO0wO+bWSbwBt3K83WQ 2yA1PfwsV3TZuIcwvcwjXDbG0BOGihNO2cliQgL9OfgY/L2js+LImY41IGB/OlLJ/JUR6O0p360G s0ccIx1BaLhI//iaCRj7r06oFsDUu+gzIPMWD8tH9TrB6dGjBa1uQphyZCxPlHjFs7F6Znc4iDeZ qApKxp5uIEApvg+P1Bza7WGGpDv9cKe7XCPLtvx9uWNf07NJASwDJ9RBLFCKRMrgTqt7+O390aUd I8PnL4Lc78Sqq8wTL/LFqnYq9t08SZmerHrr7IivUG0= ) ; Key ID = 58263 energy.gov. 3600 IN DNSKEY ( 256 3 8 AwEAAdJ43b+S+cw2zNKnV2md3FcL/0OQCjG7T+ttfyBuLIGvfWHYPzVsL8ldOlk2lKjMl/9LLzqa iB8udRxTkBlN8S9gbeYg6t3ZL/ZinLz1UE/nSvd/sbZCIlBWukZ1V4tCtxXmNIfNUUNq8sN8Q6m4 /xR3jPUy8D4k2gkCbRHs29GoFn00M/c/mdiWPMK5v3wFRZgQZQnHH7Gos6mUHNALHNb3Lji8K2SM XBXlM3sDum5JuiNPQmamHeAoasAJ3qotnxRVeKzc9K9z/UySPuFNqAbRETXyUF35sa7XZaLhqbas P67To1xwxJ9i/9uP/YI9Mdk14tY8oonEFJx4QrhK0K8= ) ; Key ID = 62706 energy.gov. 3600 IN DNSKEY ( 257 3 8 AwEAAeNbmIQ/1zuMYa3fod5uu6ThYjfjCGVSFFVwyK0V6zvaZk1+bG1XRP0dA0SsizMxz4mhuqsp 9G5Xy6bkF11aKbck2/ECaH4qk0KRY/TKRUuJrQs40salCP+AFIyeVqLfcV5sluxc9dsa/QPL9QUw hOqckareWXaPE3SeHaTSndc1GrAMgQgPPNjJiytC2cwSEDJiFHh8tAmVH7mwHM9Jcgok3lWTYdBV Av7+YTWWB+FTGEr0CJLzuHLau2vOyfDHIotvJzlFndfBUNVG1Cc2+UUtqghOdLQfvxsaqj92ucym 3Gq5XRw/QGsgHJ0HBJzumMK4ezGcnAoTwtV5Mc5RBnCyy4WhR8aDLtGQnNUgZSHE/NWDAFxIzUYY YK362ppfnFFvWoZG+ktvn5PUoC1HuxqGVGgL9Y7+qMSeMQgJbVVKsl3M1fpZNPJWXbE4oBs39RPZ fkSeQM8ewUswNOKj27V1y3wrGhT1ZWCl3N0Q52PATg55E4pXBoshGb/Sks+UT3yBjaeo1cq+hGuT fpQKckAv/i3qRdPx+6SGJRKqSbCoyUw5p0BdBFSKuvg3YF22ZboM1YZMp7O8ghN8Zz+gecdf4cnw kPlMofGlEBbO/NwmcSShpyZyRJoUF9uBWnc+jAhY6rAsO9ePpvUUBWLjxLJtzrYi8+FK3HyHvc7p hpJ1 ) ; Key ID = 54505 energy.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20200221233256 20191123223256 54505 energy.gov. n9ZRN87U+R+hsCQV69K2r3o14/bGPMrJ69miq/uFQqGolaL7JHRGWad+jgqq53uYOqPCw7wcJvyB ainzxBrmbVmByNtaLLGKywXWDgaP4l/P6+WtTCKxtg8O4XiTeA6BYi43ezOHFlG9k65krZRYurSO GFqo07MLz+RMNvHqgwg6rluO/IbdsmHXc3ZHdKd3seu3l1uFhRvYiRp0REPJR8/dcEatXqGqH15H qLffGHEXrHVWgkfOlZfMWCrj8Fta4EuSfTrI24VKzKs3NCqbuWX306Vlhzc6ZtaTN5MVXM3Z8wUb 0fJM3GpVEL4U1dbGJ6avvV7jAca/1YXGYY1vH4v4YjrbNzEii9qTBLUZL07irm+f90L4faOTJaJc QojmegklPPukYgtXNOIh/voCZFtagCDP/WEhH1FI48cOsIpHc2ARgMJI6RTqx7rhk2oLLINyZ2Dq KkzyiDjyKzmDk4DFhmQVBhWSWx2xptJFc3nO9OqBGHElpz7Y3DB4Dyv9p0/yKjSP8XDvGokRKb54 TjWJenExPbCzbh8Em/PAqkf4WUC0JOFCn73Ts2fX11eDuBt+1KbKp6IvtBJNvHspS6qI/zQar3Zy UTYoqNKi+vl5n1V9WZu0+81Fur8LEWDhJUGfFFKY7vMd88kO7oui979WaongLKF1w1p2iHzjmdo= ) energy.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20200221233256 20191123223256 58263 energy.gov. 2i3hauiNC9VpIi3SRjBZFzwf6TTyNfj89pL2pLm4s1ULTAiLt5T3FW0F+g50OZ2n2sFl6QmYErXI TuVZGWFkiTg1DeLLiYp0qLjzlHTxzftlaTbTM9C3dST/cOuwzB64XgP8QNuSdGZE21uaUU9KUqNU 0TE/qdwf2/OyQui8lrMFgS+1WxoPHPtprk44YXFeupNqkzPDdrzChk8S5+pAXrDr/11xehUNWVE/ uUto2IZtEIDQumkTosQ5ikZFiuu52vT7KSy/NTfV+9HTt3QXa7CzN3cAvEQz372XxsSWLXYVdaJH 7QlKAHTliqDpe/JmrL4TyYJM3rEJ9eq90xupAg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for ENERGY.GOV
	`energy.gov. 3600 IN DNSKEY ( 256 3 8 AwEAAe5awhCrYQyC104W5W+qd93Cf/6xkrDWWqLcXF/cfxgoGljLq6ELANO0wO+bWSbwBt3K83WQ 2yA1PfwsV3TZuIcwvcwjXDbG0BOGihNO2cliQgL9OfgY/L2js+LImY41IGB/OlLJ/JUR6O0p360G s0ccIx1BaLhI//iaCRj7r06oFsDUu+gzIPMWD8tH9TrB6dGjBa1uQphyZCxPlHjFs7F6Znc4iDeZ qApKxp5uIEApvg+P1Bza7WGGpDv9cKe7XCPLtvx9uWNf07NJASwDJ9RBLFCKRMrgTqt7+O390aUd I8PnL4Lc78Sqq8wTL/LFqnYq9t08SZmerHrr7IivUG0= ) ; Key ID = 58263`
	`energy.gov. 3600 IN DNSKEY ( 256 3 8 AwEAAdJ43b+S+cw2zNKnV2md3FcL/0OQCjG7T+ttfyBuLIGvfWHYPzVsL8ldOlk2lKjMl/9LLzqa iB8udRxTkBlN8S9gbeYg6t3ZL/ZinLz1UE/nSvd/sbZCIlBWukZ1V4tCtxXmNIfNUUNq8sN8Q6m4 /xR3jPUy8D4k2gkCbRHs29GoFn00M/c/mdiWPMK5v3wFRZgQZQnHH7Gos6mUHNALHNb3Lji8K2SM XBXlM3sDum5JuiNPQmamHeAoasAJ3qotnxRVeKzc9K9z/UySPuFNqAbRETXyUF35sa7XZaLhqbas P67To1xwxJ9i/9uP/YI9Mdk14tY8oonEFJx4QrhK0K8= ) ; Key ID = 62706`
	energy.gov. 3600 IN DNSKEY ( 257 3 8 AwEAAeNbmIQ/1zuMYa3fod5uu6ThYjfjCGVSFFVwyK0V6zvaZk1+bG1XRP0dA0SsizMxz4mhuqsp 9G5Xy6bkF11aKbck2/ECaH4qk0KRY/TKRUuJrQs40salCP+AFIyeVqLfcV5sluxc9dsa/QPL9QUw hOqckareWXaPE3SeHaTSndc1GrAMgQgPPNjJiytC2cwSEDJiFHh8tAmVH7mwHM9Jcgok3lWTYdBV Av7+YTWWB+FTGEr0CJLzuHLau2vOyfDHIotvJzlFndfBUNVG1Cc2+UUtqghOdLQfvxsaqj92ucym 3Gq5XRw/QGsgHJ0HBJzumMK4ezGcnAoTwtV5Mc5RBnCyy4WhR8aDLtGQnNUgZSHE/NWDAFxIzUYY YK362ppfnFFvWoZG+ktvn5PUoC1HuxqGVGgL9Y7+qMSeMQgJbVVKsl3M1fpZNPJWXbE4oBs39RPZ fkSeQM8ewUswNOKj27V1y3wrGhT1ZWCl3N0Q52PATg55E4pXBoshGb/Sks+UT3yBjaeo1cq+hGuT fpQKckAv/i3qRdPx+6SGJRKqSbCoyUw5p0BdBFSKuvg3YF22ZboM1YZMp7O8ghN8Zz+gecdf4cnw kPlMofGlEBbO/NwmcSShpyZyRJoUF9uBWnc+jAhY6rAsO9ePpvUUBWLjxLJtzrYi8+FK3HyHvc7p hpJ1 ) ; Key ID = 54505
	DNSKEY=54505/SEP is now in the chain-of-trust
	DS=54505/SHA-1 verifies DNSKEY=54505/SEP
	DS=54505/SHA-256 verifies DNSKEY=54505/SEP
	Found 2 RRSIGs over DNSKEY RRset
	energy.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20200221233256 20191123223256 54505 energy.gov. n9ZRN87U+R+hsCQV69K2r3o14/bGPMrJ69miq/uFQqGolaL7JHRGWad+jgqq53uYOqPCw7wcJvyB ainzxBrmbVmByNtaLLGKywXWDgaP4l/P6+WtTCKxtg8O4XiTeA6BYi43ezOHFlG9k65krZRYurSO GFqo07MLz+RMNvHqgwg6rluO/IbdsmHXc3ZHdKd3seu3l1uFhRvYiRp0REPJR8/dcEatXqGqH15H qLffGHEXrHVWgkfOlZfMWCrj8Fta4EuSfTrI24VKzKs3NCqbuWX306Vlhzc6ZtaTN5MVXM3Z8wUb 0fJM3GpVEL4U1dbGJ6avvV7jAca/1YXGYY1vH4v4YjrbNzEii9qTBLUZL07irm+f90L4faOTJaJc QojmegklPPukYgtXNOIh/voCZFtagCDP/WEhH1FI48cOsIpHc2ARgMJI6RTqx7rhk2oLLINyZ2Dq KkzyiDjyKzmDk4DFhmQVBhWSWx2xptJFc3nO9OqBGHElpz7Y3DB4Dyv9p0/yKjSP8XDvGokRKb54 TjWJenExPbCzbh8Em/PAqkf4WUC0JOFCn73Ts2fX11eDuBt+1KbKp6IvtBJNvHspS6qI/zQar3Zy UTYoqNKi+vl5n1V9WZu0+81Fur8LEWDhJUGfFFKY7vMd88kO7oui979WaongLKF1w1p2iHzjmdo= )
	`energy.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20200221233256 20191123223256 58263 energy.gov. 2i3hauiNC9VpIi3SRjBZFzwf6TTyNfj89pL2pLm4s1ULTAiLt5T3FW0F+g50OZ2n2sFl6QmYErXI TuVZGWFkiTg1DeLLiYp0qLjzlHTxzftlaTbTM9C3dST/cOuwzB64XgP8QNuSdGZE21uaUU9KUqNU 0TE/qdwf2/OyQui8lrMFgS+1WxoPHPtprk44YXFeupNqkzPDdrzChk8S5+pAXrDr/11xehUNWVE/ uUto2IZtEIDQumkTosQ5ikZFiuu52vT7KSy/NTfV+9HTt3QXa7CzN3cAvEQz372XxsSWLXYVdaJH 7QlKAHTliqDpe/JmrL4TyYJM3rEJ9eq90xupAg== )`
	RRSIG=54505 and DNSKEY=54505/SEP verifies the DNSKEY RRset
	RRSIG=58263 and DNSKEY=58263 verifies the DNSKEY RRset
	DNSKEY=58263 is now in the chain-of-trust
	DNSKEY=62706 is now in the chain-of-trust
	Query to ns1.es.net for ENERGY.GOV/A
	Error querying ns1.es.net/2001:400:14:2:0:0:0:10 for ENERGY.GOV/A: 'IPv6 transport disabled'
	Received 363 bytes from 198.128.2.10
	;; Answer received from 198.128.2.10 (363 bytes) ;; HEADER SECTION ;; id = 32755 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ENERGY.GOV. IN A ;; ANSWER SECTION (2 records) energy.gov. 300 IN A 199.167.76.59 energy.gov. 300 IN RRSIG ( A 8 2 300 20200221233256 20191123223256 58263 energy.gov. fzL2ZREk5qxlxARX/2SvTbsetuWHVeFZmFFH4k0M0cz47zoZYKrQd0oCoir3knOqwVDTm6MXrsFt AwPf6ZWGUseWBpmXgx3Oi4dNfQ6AH+6trsoQyZU4N9CaVu8jxSsLLc7Mz7dpIECdeCfzMKQ10aRA NZJwf7GCxEBPSncqoKPRZIkSFLyMB7lQgXTyBP/mG+icrBn9NCK7bzKU5wMqd5U+Udzxk4YCvJU6 cDTCjUZApCdg+Wu2QKp5hcFrob/sFcqFUt76CZD4r8P4DDyOFyHmldNlxUrIK4aT8hb98C9+LJ9R 1CQtISrVU/x4Lau5b7Scf0MTT8QBUpCCQNy7YA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ENERGY.GOV is authoritative for ENERGY.GOV
	Found RRSIG signed by energy.gov zone
	Query to fulcrum.doe.GOV for ENERGY.GOV/SOA
	Error querying fulcrum.doe.GOV/2607:f368:1000:1100:0:0:0:53 for ENERGY.GOV/SOA: 'IPv6 transport disabled'
	Received 409 bytes from 205.254.144.110
	;; Answer received from 205.254.144.110 (409 bytes) ;; HEADER SECTION ;; id = 12854 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ENERGY.GOV. IN SOA ;; ANSWER SECTION (2 records) energy.gov. 3600 IN SOA ( fulcrum.doe.gov. hostmaster.hq.doe.gov. 2019111404 ;serial 7200 ;refresh 3600 ;retry 2419200 ;expire 43200 ;minimum ) energy.gov. 3600 IN RRSIG ( SOA 8 2 3600 20200221233256 20191123223256 58263 energy.gov. yUICJHd25Qc+9TshLukk1REz0cMU6GDMAjAywSEC190JVXmn5mSbn16oIZagYahS7+fNscciH9Lx dHcKZpXO8vIrqo8VTZrlDRAO+0YbGsxPJW0o8Jzthn1lm+1zFYOIzk6QDlGex489StKcT8AI6L7H mr9TNmUl9asjCTuCNI/c4XIOq+cTb+cjfGQHWUCjgEKYidj0RpKPhJ0rdCIt57VThaH6mFnIips4 QPoSlSYGztGUrvnE8sukDDy9Vq8LH9H7V8nFTlCuc6F+R404sY6XVWuUcpP/4RM8ZMhrfhZeoLNq Ww4D1vgOpRkgVBQC7RM1b2Q6SnP2h6QsIDQ/lQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.es.net for ENERGY.GOV/SOA
	Received 419 bytes from 198.128.2.10
	;; Answer received from 198.128.2.10 (419 bytes) ;; HEADER SECTION ;; id = 7613 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ENERGY.GOV. IN SOA ;; ANSWER SECTION (2 records) energy.gov. 3600 IN SOA ( fulcrum.doe.gov. hostmaster.hq.doe.gov. 2019111404 ;serial 7200 ;refresh 3600 ;retry 2419200 ;expire 43200 ;minimum ) energy.gov. 3600 IN RRSIG ( SOA 8 2 3600 20200221233256 20191123223256 58263 energy.gov. yUICJHd25Qc+9TshLukk1REz0cMU6GDMAjAywSEC190JVXmn5mSbn16oIZagYahS7+fNscciH9Lx dHcKZpXO8vIrqo8VTZrlDRAO+0YbGsxPJW0o8Jzthn1lm+1zFYOIzk6QDlGex489StKcT8AI6L7H mr9TNmUl9asjCTuCNI/c4XIOq+cTb+cjfGQHWUCjgEKYidj0RpKPhJ0rdCIt57VThaH6mFnIips4 QPoSlSYGztGUrvnE8sukDDy9Vq8LH9H7V8nFTlCuc6F+R404sY6XVWuUcpP/4RM8ZMhrfhZeoLNq Ww4D1vgOpRkgVBQC7RM1b2Q6SnP2h6QsIDQ/lQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to foxbat.doe.GOV for ENERGY.GOV/SOA
	Error querying foxbat.doe.GOV/2607:f368:1000:1000:0:0:0:53 for ENERGY.GOV/SOA: 'IPv6 transport disabled'
	Received 409 bytes from 205.254.143.110
	;; Answer received from 205.254.143.110 (409 bytes) ;; HEADER SECTION ;; id = 36256 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ENERGY.GOV. IN SOA ;; ANSWER SECTION (2 records) energy.gov. 3600 IN SOA ( fulcrum.doe.gov. hostmaster.hq.doe.gov. 2019111404 ;serial 7200 ;refresh 3600 ;retry 2419200 ;expire 43200 ;minimum ) energy.gov. 3600 IN RRSIG ( SOA 8 2 3600 20200221233256 20191123223256 58263 energy.gov. yUICJHd25Qc+9TshLukk1REz0cMU6GDMAjAywSEC190JVXmn5mSbn16oIZagYahS7+fNscciH9Lx dHcKZpXO8vIrqo8VTZrlDRAO+0YbGsxPJW0o8Jzthn1lm+1zFYOIzk6QDlGex489StKcT8AI6L7H mr9TNmUl9asjCTuCNI/c4XIOq+cTb+cjfGQHWUCjgEKYidj0RpKPhJ0rdCIt57VThaH6mFnIips4 QPoSlSYGztGUrvnE8sukDDy9Vq8LH9H7V8nFTlCuc6F+R404sY6XVWuUcpP/4RM8ZMhrfhZeoLNq Ww4D1vgOpRkgVBQC7RM1b2Q6SnP2h6QsIDQ/lQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.es.net for ENERGY.GOV/A
	Error querying ns1.es.net/2001:400:14:2:0:0:0:10 for ENERGY.GOV/A: 'IPv6 transport disabled'
	Received 363 bytes from 198.128.2.10
	;; Answer received from 198.128.2.10 (363 bytes) ;; HEADER SECTION ;; id = 25813 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ENERGY.GOV. IN A ;; ANSWER SECTION (2 records) energy.gov. 300 IN A 199.167.76.59 energy.gov. 300 IN RRSIG ( A 8 2 300 20200221233256 20191123223256 58263 energy.gov. fzL2ZREk5qxlxARX/2SvTbsetuWHVeFZmFFH4k0M0cz47zoZYKrQd0oCoir3knOqwVDTm6MXrsFt AwPf6ZWGUseWBpmXgx3Oi4dNfQ6AH+6trsoQyZU4N9CaVu8jxSsLLc7Mz7dpIECdeCfzMKQ10aRA NZJwf7GCxEBPSncqoKPRZIkSFLyMB7lQgXTyBP/mG+icrBn9NCK7bzKU5wMqd5U+Udzxk4YCvJU6 cDTCjUZApCdg+Wu2QKp5hcFrob/sFcqFUt76CZD4r8P4DDyOFyHmldNlxUrIK4aT8hb98C9+LJ9R 1CQtISrVU/x4Lau5b7Scf0MTT8QBUpCCQNy7YA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ENERGY.GOV A RR has value 199.167.76.59
	Found 1 RRSIGs over A RRset
	`energy.gov. 300 IN RRSIG ( A 8 2 300 20200221233256 20191123223256 58263 energy.gov. fzL2ZREk5qxlxARX/2SvTbsetuWHVeFZmFFH4k0M0cz47zoZYKrQd0oCoir3knOqwVDTm6MXrsFt AwPf6ZWGUseWBpmXgx3Oi4dNfQ6AH+6trsoQyZU4N9CaVu8jxSsLLc7Mz7dpIECdeCfzMKQ10aRA NZJwf7GCxEBPSncqoKPRZIkSFLyMB7lQgXTyBP/mG+icrBn9NCK7bzKU5wMqd5U+Udzxk4YCvJU6 cDTCjUZApCdg+Wu2QKp5hcFrob/sFcqFUt76CZD4r8P4DDyOFyHmldNlxUrIK4aT8hb98C9+LJ9R 1CQtISrVU/x4Lau5b7Scf0MTT8QBUpCCQNy7YA== )`
	RRSIG=58263 and DNSKEY=58263 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test ENERGY.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: