DNSSEC Analyzer - ENERGYSAVER.GOV

Domain Name:

Time: 2019-12-09 07:53:09 UTC, NTP stratum 4

Analyzing DNSSEC problems for ENERGYSAVER.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (864 bytes) ;; HEADER SECTION ;; id = 63022 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20191221000000 20191130000000 20326 . Gq7w8sR2CNe4RDL05IeRsmtmsJ38wsSuTCaSgsZmBoVk0azQToi8bJ2pd6EUlav0hRwpFXhGrOeg Rutf6RcePbaDVLLChY5H1ExeT1GhJVtCctHNTbUQadziztCEPcmtjrMEoOsRGkW8cNTo8MG79DZa jdG6P3MjQselQVVxFCWiT1Eqa0A9ojd2wEgNanUafw7mJSasBMD0tco+tQMmMmLGqX/d7/K1D/3/ lFPrclzwWiOcv3yRbTLW2X45Fn4ZNpuuV4KSwxTGBylxG5jDhPsrrumwnAk2hrRrWzshGCWgbXtk R95utBYdb/ZsZaO7KuqicdE5ZItJEV8Qh4FikA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20191221000000 20191130000000 20326 . Gq7w8sR2CNe4RDL05IeRsmtmsJ38wsSuTCaSgsZmBoVk0azQToi8bJ2pd6EUlav0hRwpFXhGrOeg Rutf6RcePbaDVLLChY5H1ExeT1GhJVtCctHNTbUQadziztCEPcmtjrMEoOsRGkW8cNTo8MG79DZa jdG6P3MjQselQVVxFCWiT1Eqa0A9ojd2wEgNanUafw7mJSasBMD0tco+tQMmMmLGqX/d7/K1D/3/ lFPrclzwWiOcv3yRbTLW2X45Fn4ZNpuuV4KSwxTGBylxG5jDhPsrrumwnAk2hrRrWzshGCWgbXtk R95utBYdb/ZsZaO7KuqicdE5ZItJEV8Qh4FikA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=22545 is now in the chain-of-trust
	Query to g.root-servers.net for ENERGYSAVER.GOV/A
	Received 673 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (673 bytes) ;; HEADER SECTION ;; id = 5478 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ENERGYSAVER.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20191222050000 20191209040000 22545 . IWjC+LZFs0tHSJMsCYFhMBiqzMVwcXNWHVrtIMFWqLnmS2/HWC3PKPlXRAtzHBnOtHjbPUNpYSLg 2UE2eaBBpAGpUx98BrzlXmbzDqkwnUGqkOhgg4rBtQAYMBTFQNuNpbitG/PnZM1dox/nzC2AlMRm NvvkgqhTBuuuwohHFBEpJc3fkYGDNV1+HY7wzCoTgkZCaMd0CRHd38fRe3ATaLGkwJmbddqmL2VF o6ETQKOJihJ+jqGVJQpXws6uUmc4HvDbCe10kN+jNsU3j0taI3qCLXSe7RBGCa///wG18LEgqoj1 rqmjXQUQfBjlA3XuwY94y2FFNpbLz4e4kIndYg== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to j.root-servers.net for GOV/DNSKEY
	Received 658 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (658 bytes) ;; HEADER SECTION ;; id = 60293 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20191222050000 20191209040000 22545 . IWjC+LZFs0tHSJMsCYFhMBiqzMVwcXNWHVrtIMFWqLnmS2/HWC3PKPlXRAtzHBnOtHjbPUNpYSLg 2UE2eaBBpAGpUx98BrzlXmbzDqkwnUGqkOhgg4rBtQAYMBTFQNuNpbitG/PnZM1dox/nzC2AlMRm NvvkgqhTBuuuwohHFBEpJc3fkYGDNV1+HY7wzCoTgkZCaMd0CRHd38fRe3ATaLGkwJmbddqmL2VF o6ETQKOJihJ+jqGVJQpXws6uUmc4HvDbCe10kN+jNsU3j0taI3qCLXSe7RBGCa///wG18LEgqoj1 rqmjXQUQfBjlA3XuwY94y2FFNpbLz4e4kIndYg== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to b.root-servers.net for GOV/DS
	Error querying b.root-servers.net/2001:500:200:0:0:0:0:b for GOV/DS: 'IPv6 transport disabled'
	Received 406 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (406 bytes) ;; HEADER SECTION ;; id = 26661 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20191222050000 20191209040000 22545 . IWjC+LZFs0tHSJMsCYFhMBiqzMVwcXNWHVrtIMFWqLnmS2/HWC3PKPlXRAtzHBnOtHjbPUNpYSLg 2UE2eaBBpAGpUx98BrzlXmbzDqkwnUGqkOhgg4rBtQAYMBTFQNuNpbitG/PnZM1dox/nzC2AlMRm NvvkgqhTBuuuwohHFBEpJc3fkYGDNV1+HY7wzCoTgkZCaMd0CRHd38fRe3ATaLGkwJmbddqmL2VF o6ETQKOJihJ+jqGVJQpXws6uUmc4HvDbCe10kN+jNsU3j0taI3qCLXSe7RBGCa///wG18LEgqoj1 rqmjXQUQfBjlA3XuwY94y2FFNpbLz4e4kIndYg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20191222050000 20191209040000 22545 . IWjC+LZFs0tHSJMsCYFhMBiqzMVwcXNWHVrtIMFWqLnmS2/HWC3PKPlXRAtzHBnOtHjbPUNpYSLg 2UE2eaBBpAGpUx98BrzlXmbzDqkwnUGqkOhgg4rBtQAYMBTFQNuNpbitG/PnZM1dox/nzC2AlMRm NvvkgqhTBuuuwohHFBEpJc3fkYGDNV1+HY7wzCoTgkZCaMd0CRHd38fRe3ATaLGkwJmbddqmL2VF o6ETQKOJihJ+jqGVJQpXws6uUmc4HvDbCe10kN+jNsU3j0taI3qCLXSe7RBGCa///wG18LEgqoj1 rqmjXQUQfBjlA3XuwY94y2FFNpbLz4e4kIndYg== )`
	RRSIG=22545 and DNSKEY=22545 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to a.gov-servers.net for GOV/DNSKEY
	Error querying a.gov-servers.net/2001:500:4431:0:0:0:2:30 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 777 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (777 bytes) ;; HEADER SECTION ;; id = 18976 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAcQAVXGAbq+khqvif1NNId5wvkmsmSZEb/UXjfazqpqEeA7IUc8b/9eEIBebIcFda4Ukv8lF lnfGIvMRADLa50RVwP2asra1Md0NC9tLjrHEYN0H68WN0tTLIQ6jUF/kzYTeTOVhlUqzM+5JyyT9 x01e1FT5ANG8RkbgXIyPte2Qs8wasqNkjFGaD5oFLerVScCa0FXumybu9cBEfBbAzPU= ) ; Key ID = 14320 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20191216200254 20191201195754 7698 gov. eu0gshGgymERiO+iIcdmJ9TqP0dRgpvjyGnI2OQlkm58YEsevRvOYxpKw0K6F9PT3RvOGPbRPvO2 b6psOWhSSeu0Btc+bvHWrEBqnf9t3h+lrfkGKSb53OFDvgtgtWR9zzeUrgivuVU09zPOqozOWcmk Ox8uhvXUrK0zoscGpBDO9efoTVF/Di6gg3tR0DWhsL/Qu3uuDT2F+k1m2WAaLaJCb3QDWgEWgcGn XEy1HEmJ0Uzca8PnKWwMNBktuODiBTiSNaUwVNFnXJmDxQMEAA+PS+DbbLJJX2CcodMHFiErvO4U JQiQgu9X8g0RpG2EO2oq6gTfIPKs+KsZ6K2y7Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAcQAVXGAbq+khqvif1NNId5wvkmsmSZEb/UXjfazqpqEeA7IUc8b/9eEIBebIcFda4Ukv8lF lnfGIvMRADLa50RVwP2asra1Md0NC9tLjrHEYN0H68WN0tTLIQ6jUF/kzYTeTOVhlUqzM+5JyyT9 x01e1FT5ANG8RkbgXIyPte2Qs8wasqNkjFGaD5oFLerVScCa0FXumybu9cBEfBbAzPU= ) ; Key ID = 14320`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20191216200254 20191201195754 7698 gov. eu0gshGgymERiO+iIcdmJ9TqP0dRgpvjyGnI2OQlkm58YEsevRvOYxpKw0K6F9PT3RvOGPbRPvO2 b6psOWhSSeu0Btc+bvHWrEBqnf9t3h+lrfkGKSb53OFDvgtgtWR9zzeUrgivuVU09zPOqozOWcmk Ox8uhvXUrK0zoscGpBDO9efoTVF/Di6gg3tR0DWhsL/Qu3uuDT2F+k1m2WAaLaJCb3QDWgEWgcGn XEy1HEmJ0Uzca8PnKWwMNBktuODiBTiSNaUwVNFnXJmDxQMEAA+PS+DbbLJJX2CcodMHFiErvO4U JQiQgu9X8g0RpG2EO2oq6gTfIPKs+KsZ6K2y7Q== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=14320 is now in the chain-of-trust
	Query to a.gov-servers.net for ENERGYSAVER.GOV/A
	Received 487 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (487 bytes) ;; HEADER SECTION ;; id = 7437 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ENERGYSAVER.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ENERGYSAVER.GOV. 86400 IN NS helios.nrel.GOV. ENERGYSAVER.GOV. 86400 IN NS phaeton.nrel.GOV. ENERGYSAVER.GOV. 3600 IN DS ( 16125 7 1 83c5e66b4148bf467f997488a6820e4ffd6117ce ) ENERGYSAVER.GOV. 3600 IN DS ( 12123 7 1 0b1214cc9e3cb975e86bf03ecda8ff479de87ae0 ) ENERGYSAVER.GOV. 3600 IN DS ( 16125 7 2 ba854865aae031a41d4a5c05b78cb903cfbc2dc18b9ac6535d9deee99b87e940 ) ENERGYSAVER.GOV. 3600 IN DS ( 12123 7 2 e0733e1c57320f0833e062257243187f411f1aeeaf8a8ab16a75ec2451ae4b69 ) ENERGYSAVER.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191216041007 20191209041007 14320 gov. i1yrV0MXsmaK+ORbq4t2eRNg6PevNsFQtFKMPSMjkrAdoZ9c17eOcG5EVSxVy0ORW1AlpEeQ/ZN3 sCffHM7Y36e3qEqNDurba05L6ghOb12aLiUlN5jhi5PLk3oD/Br9c6jnIIY7dXYLbK4J6nnNVZyT UDBnr2gXLf8VJvsqSUdFa20HbPMtbjHWFvWgwiR91GZNbKq8CDAiSfQfasi6NQ== ) ;; ADDITIONAL SECTION (3 records) helios.nrel.GOV. 86400 IN A 192.174.58.2 phaeton.nrel.GOV. 86400 IN A 192.174.58.253 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.gov-servers.net for ENERGYSAVER.GOV/DNSKEY
	Received 487 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (487 bytes) ;; HEADER SECTION ;; id = 44638 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ENERGYSAVER.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ENERGYSAVER.GOV. 86400 IN NS helios.nrel.GOV. ENERGYSAVER.GOV. 86400 IN NS phaeton.nrel.GOV. ENERGYSAVER.GOV. 3600 IN DS ( 16125 7 1 83c5e66b4148bf467f997488a6820e4ffd6117ce ) ENERGYSAVER.GOV. 3600 IN DS ( 12123 7 1 0b1214cc9e3cb975e86bf03ecda8ff479de87ae0 ) ENERGYSAVER.GOV. 3600 IN DS ( 16125 7 2 ba854865aae031a41d4a5c05b78cb903cfbc2dc18b9ac6535d9deee99b87e940 ) ENERGYSAVER.GOV. 3600 IN DS ( 12123 7 2 e0733e1c57320f0833e062257243187f411f1aeeaf8a8ab16a75ec2451ae4b69 ) ENERGYSAVER.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191216041007 20191209041007 14320 gov. i1yrV0MXsmaK+ORbq4t2eRNg6PevNsFQtFKMPSMjkrAdoZ9c17eOcG5EVSxVy0ORW1AlpEeQ/ZN3 sCffHM7Y36e3qEqNDurba05L6ghOb12aLiUlN5jhi5PLk3oD/Br9c6jnIIY7dXYLbK4J6nnNVZyT UDBnr2gXLf8VJvsqSUdFa20HbPMtbjHWFvWgwiR91GZNbKq8CDAiSfQfasi6NQ== ) ;; ADDITIONAL SECTION (3 records) helios.nrel.GOV. 86400 IN A 192.174.58.2 phaeton.nrel.GOV. 86400 IN A 192.174.58.253 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone ENERGYSAVER.GOV

ENERGYSAVER.GOV

	Checking DS between GOV and ENERGYSAVER.GOV
	Query to b.gov-servers.net for ENERGYSAVER.GOV/DS
	Error querying b.gov-servers.net/2620:74:27:0:0:0:2:30 for ENERGYSAVER.GOV/DS: 'IPv6 transport disabled'
	Received 407 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (407 bytes) ;; HEADER SECTION ;; id = 51410 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ENERGYSAVER.GOV. IN DS ;; ANSWER SECTION (5 records) ENERGYSAVER.GOV. 3600 IN DS ( 16125 7 1 83c5e66b4148bf467f997488a6820e4ffd6117ce ) ENERGYSAVER.GOV. 3600 IN DS ( 12123 7 1 0b1214cc9e3cb975e86bf03ecda8ff479de87ae0 ) ENERGYSAVER.GOV. 3600 IN DS ( 16125 7 2 ba854865aae031a41d4a5c05b78cb903cfbc2dc18b9ac6535d9deee99b87e940 ) ENERGYSAVER.GOV. 3600 IN DS ( 12123 7 2 e0733e1c57320f0833e062257243187f411f1aeeaf8a8ab16a75ec2451ae4b69 ) ENERGYSAVER.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191216041007 20191209041007 14320 gov. i1yrV0MXsmaK+ORbq4t2eRNg6PevNsFQtFKMPSMjkrAdoZ9c17eOcG5EVSxVy0ORW1AlpEeQ/ZN3 sCffHM7Y36e3qEqNDurba05L6ghOb12aLiUlN5jhi5PLk3oD/Br9c6jnIIY7dXYLbK4J6nnNVZyT UDBnr2gXLf8VJvsqSUdFa20HbPMtbjHWFvWgwiR91GZNbKq8CDAiSfQfasi6NQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for ENERGYSAVER.GOV in the GOV zone
	DS=16125/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=12123/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=16125/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=12123/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`ENERGYSAVER.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191216041007 20191209041007 14320 gov. i1yrV0MXsmaK+ORbq4t2eRNg6PevNsFQtFKMPSMjkrAdoZ9c17eOcG5EVSxVy0ORW1AlpEeQ/ZN3 sCffHM7Y36e3qEqNDurba05L6ghOb12aLiUlN5jhi5PLk3oD/Br9c6jnIIY7dXYLbK4J6nnNVZyT UDBnr2gXLf8VJvsqSUdFa20HbPMtbjHWFvWgwiR91GZNbKq8CDAiSfQfasi6NQ== )`
	RRSIG=14320 and DNSKEY=14320 verifies the DS RRset
	DS=16125/SHA-1 is now in the chain-of-trust
	DS=12123/SHA-1 is now in the chain-of-trust
	`ENERGYSAVER.GOV. 3600 IN DS ( 16125 7 1 83c5e66b4148bf467f997488a6820e4ffd6117ce )`
	`ENERGYSAVER.GOV. 3600 IN DS ( 12123 7 1 0b1214cc9e3cb975e86bf03ecda8ff479de87ae0 )`
	`ENERGYSAVER.GOV. 3600 IN DS ( 16125 7 2 ba854865aae031a41d4a5c05b78cb903cfbc2dc18b9ac6535d9deee99b87e940 )`
	`ENERGYSAVER.GOV. 3600 IN DS ( 12123 7 2 e0733e1c57320f0833e062257243187f411f1aeeaf8a8ab16a75ec2451ae4b69 )`
	Query to phaeton.nrel.GOV for ENERGYSAVER.GOV/DNSKEY
	Error querying phaeton.nrel.GOV/2620:d0:8000:3:0:0:0:21 for ENERGYSAVER.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 1269 bytes from 192.174.58.253
	;; Answer received from 192.174.58.253 (1269 bytes) ;; HEADER SECTION ;; id = 49765 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ENERGYSAVER.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) ENERGYSAVER.GOV. 172800 IN DNSKEY ( 256 3 7 AwEAAZe19cI//90oqqIk7K3EOQ3guY92vT3ugQfNoyOT6775FE5rPjlDHndiK1K2nC5GmjLoPmld /HoiQJzeOAjzt9gZtBgimsIAOcJbOfY9jyq/qBYCj2pMtHxcHmUYXsY7u48CdsgrNYZSgQx2FL2y CZekg4Ctmb//vwou74YG5cPP ) ; Key ID = 26948 ENERGYSAVER.GOV. 172800 IN DNSKEY ( 257 3 7 AwEAAeYXnrPF6dW+qJhbsHJ65bXJfdemd3z7V+8nicajVUwjtDep/8kliyn7MGNs+vN7ZphmFarK Y9N2SDrK3WyCRDDGGoQp7lvXU0MoOFXJQSvs8X3Lcvyskorqfm4QjC8PbBNA00v8GfYPx5aDj366 rYSfPrpeuJijhuhkT2SdWrwMyDBQJ4lvv4pqEPIo2rHkj+aC4xL5RqAyvmLX9aUDgV/mqtXDIp+i dqxBMPzMvEgC7hw/ENJdXD2MnVXVMvHBOLa39HmkULNEkpNA9Fr+w9wIdgSoY9uqEwdtgja6xhcz EW3+0ETJo9nfC1MEOK/D5GYnqgn/J2iL8tZksuDMyWE= ) ; Key ID = 16125 ENERGYSAVER.GOV. 172800 IN DNSKEY ( 256 3 7 AwEAAdfG6VQDpVQWxtBdL+cec5OwTMFs0KR1ismXA30mEApk3vq//19t7gZS8JfjMPZWBncu3Ofl qPw8TAiw12TL31oOGcFwZVmSRSZA7KMEsoHAhyagPrdL9EnXxKtnDCljjSsgIzn12bJDXXOLISjQ 7IX47/TsEd4wjisdqx+doQjD ) ; Key ID = 61679 ENERGYSAVER.GOV. 172800 IN RRSIG ( DNSKEY 7 2 172800 20191212110921 20191208104114 16125 energysaver.gov. ons9X43CrSVW9rC6xKgUgsZVlfIscLdfyDPDcNTjJI44Bzf+hK5N4ExihxPhk9FcxQvcGSX4Jeep PZtT27nSM6+BROKFx67q8Xhsggzf8n4/29cb5E94/qxEsrtxlcH11OzssASMNPxqzU7hszWn7rPH BC3LZBIq8EPddZz05SQQU/1ixrKBLI5QPtlYv2dtmWkSNTJ0N7Xzn5i3L9jaOtYBj+xu8eghkK+T HCK8FepoH08t0+e3nzTvq8ADUs6bA8Rw18nz+7RZNiv8w9lgLmx7fDHT3eGTV1nW3JDHfw8XAO8v cA1m4yw/NDbURp+K4mc50PhjAQOBC3WqDL9kTg== ) energysaver.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20191212110921 20191208104114 26948 energysaver.gov. EFVl84W7GjrnEHiFhu3pmhYi8cqwW3gUtbB5tJChUd/W9lzPVNgQlZgZULyn/Z7E0SGAyR/WljMh i6AzeGfuZCasIWQbaxh/MWtemETKsM5pXSOw7CEbqXYTCs2wV1opfj++YOjtj4J/ojLDVAoNcg9i TfI4Ahol5DZ8XgluADA= ) energysaver.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20191212110921 20191208104114 61679 energysaver.gov. kJnpP8Q9D64eA7PwecvpMPlcimQOjcGSYfZ58Lt+aUkg+guLCjn49+urjUfutVwprOL0zo/cGZbW QIiMS/TipvHFdTMbO2hg8FEnX4qmKeU4TlltbE50EWRItIukjIoXH+0j2IcLYNbO0tVb9JHFFlRU H4NTeKsLGOH4x3CA3UI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for ENERGYSAVER.GOV
	`ENERGYSAVER.GOV. 172800 IN DNSKEY ( 256 3 7 AwEAAZe19cI//90oqqIk7K3EOQ3guY92vT3ugQfNoyOT6775FE5rPjlDHndiK1K2nC5GmjLoPmld /HoiQJzeOAjzt9gZtBgimsIAOcJbOfY9jyq/qBYCj2pMtHxcHmUYXsY7u48CdsgrNYZSgQx2FL2y CZekg4Ctmb//vwou74YG5cPP ) ; Key ID = 26948`
	`ENERGYSAVER.GOV. 172800 IN DNSKEY ( 257 3 7 AwEAAeYXnrPF6dW+qJhbsHJ65bXJfdemd3z7V+8nicajVUwjtDep/8kliyn7MGNs+vN7ZphmFarK Y9N2SDrK3WyCRDDGGoQp7lvXU0MoOFXJQSvs8X3Lcvyskorqfm4QjC8PbBNA00v8GfYPx5aDj366 rYSfPrpeuJijhuhkT2SdWrwMyDBQJ4lvv4pqEPIo2rHkj+aC4xL5RqAyvmLX9aUDgV/mqtXDIp+i dqxBMPzMvEgC7hw/ENJdXD2MnVXVMvHBOLa39HmkULNEkpNA9Fr+w9wIdgSoY9uqEwdtgja6xhcz EW3+0ETJo9nfC1MEOK/D5GYnqgn/J2iL8tZksuDMyWE= ) ; Key ID = 16125`
	`ENERGYSAVER.GOV. 172800 IN DNSKEY ( 256 3 7 AwEAAdfG6VQDpVQWxtBdL+cec5OwTMFs0KR1ismXA30mEApk3vq//19t7gZS8JfjMPZWBncu3Ofl qPw8TAiw12TL31oOGcFwZVmSRSZA7KMEsoHAhyagPrdL9EnXxKtnDCljjSsgIzn12bJDXXOLISjQ 7IX47/TsEd4wjisdqx+doQjD ) ; Key ID = 61679`
	DNSKEY=16125/SEP is now in the chain-of-trust
	DS=16125/SHA-1 verifies DNSKEY=16125/SEP
	DS=16125/SHA-256 verifies DNSKEY=16125/SEP
	DS=12123/SHA-1 is published, but a corresponding DNSKEY is not
	Found 3 RRSIGs over DNSKEY RRset
	`ENERGYSAVER.GOV. 172800 IN RRSIG ( DNSKEY 7 2 172800 20191212110921 20191208104114 16125 energysaver.gov. ons9X43CrSVW9rC6xKgUgsZVlfIscLdfyDPDcNTjJI44Bzf+hK5N4ExihxPhk9FcxQvcGSX4Jeep PZtT27nSM6+BROKFx67q8Xhsggzf8n4/29cb5E94/qxEsrtxlcH11OzssASMNPxqzU7hszWn7rPH BC3LZBIq8EPddZz05SQQU/1ixrKBLI5QPtlYv2dtmWkSNTJ0N7Xzn5i3L9jaOtYBj+xu8eghkK+T HCK8FepoH08t0+e3nzTvq8ADUs6bA8Rw18nz+7RZNiv8w9lgLmx7fDHT3eGTV1nW3JDHfw8XAO8v cA1m4yw/NDbURp+K4mc50PhjAQOBC3WqDL9kTg== )`
	`energysaver.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20191212110921 20191208104114 26948 energysaver.gov. EFVl84W7GjrnEHiFhu3pmhYi8cqwW3gUtbB5tJChUd/W9lzPVNgQlZgZULyn/Z7E0SGAyR/WljMh i6AzeGfuZCasIWQbaxh/MWtemETKsM5pXSOw7CEbqXYTCs2wV1opfj++YOjtj4J/ojLDVAoNcg9i TfI4Ahol5DZ8XgluADA= )`
	`energysaver.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20191212110921 20191208104114 61679 energysaver.gov. kJnpP8Q9D64eA7PwecvpMPlcimQOjcGSYfZ58Lt+aUkg+guLCjn49+urjUfutVwprOL0zo/cGZbW QIiMS/TipvHFdTMbO2hg8FEnX4qmKeU4TlltbE50EWRItIukjIoXH+0j2IcLYNbO0tVb9JHFFlRU H4NTeKsLGOH4x3CA3UI= )`
	RRSIG=16125 and DNSKEY=16125/SEP verifies the DNSKEY RRset
	RRSIG=26948 and DNSKEY=26948 verifies the DNSKEY RRset
	RRSIG=61679 and DNSKEY=61679 verifies the DNSKEY RRset
	DNSKEY=26948 is now in the chain-of-trust
	DNSKEY=61679 is now in the chain-of-trust
	Query to helios.nrel.GOV for ENERGYSAVER.GOV/A
	Error querying helios.nrel.GOV/2620:d0:8000:3:0:0:0:20 for ENERGYSAVER.GOV/A: 'IPv6 transport disabled'
	Received 893 bytes from 192.174.58.2
	;; Answer received from 192.174.58.2 (893 bytes) ;; HEADER SECTION ;; id = 18493 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ENERGYSAVER.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) ENERGYSAVER.GOV. 900 IN SOA ( phaeton.nrel.GOV. postmaster.nrel.GOV. 2019101181 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) ENERGYSAVER.GOV. 900 IN RRSIG ( SOA 7 2 3600 20191213040849 20191209030849 26948 energysaver.gov. Hof0mA3nVMFn/xRUHDhtTsuW8yfkxUzc8kvht42txT8WNnqlCbE/e2DyfyH55OVnPd4gjDbtVtXU tZu7wCq/O0t8hJ3J+BbRj6k0AaZlP1LSgme9ZRuTvdqEuAArTCnGBthg/t9XJv7ppDi+nxRLkcJc /wUmj7koYU08nxHum5I= ) energysaver.gov. 900 IN RRSIG ( SOA 7 2 3600 20191213040849 20191209030849 61679 energysaver.gov. wiHxXLhBjxUxqLtG7az2vqc8SvzUAi5XU0c7atqewV+VCuXAw1FnLOG29eGIXN/UaJzTefeHi3Bn 8wY40ULH7cxQgjvlZCJvlHbWXqwyN44SwafQRDjrESjs2H7xh/ozbqSLIz7ShxVCR+WR+xUUxcBi SytEiEAiBE1p52SzQnI= ) CDLIHLOHBFG0ACG6MTVFC7JUQQNGIEDH.energysaver.gov. 900 IN NSEC3 ( 1 0 10 2450794ba7248ec1bd gcmnbb1vr9nkepjq0g8ntk6ogavei53v NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) CDLIHLOHBFG0ACG6MTVFC7JUQQNGIEDH.energysaver.gov. 900 IN RRSIG ( NSEC3 7 3 900 20191212110921 20191208104114 26948 energysaver.gov. BqKhCRkIF3Xe/ZGR5zpnTZoZOvaFkjkONp+CHJLnCyHZ8n4aLX1Hy70jVnUCMBMOAh0lVxATDr1y 0Fda9RoOn6tiZs4eUK7cgkjOiTb3Gv8j69Dk468dqcEyfVSmHm1jW8UF1jcid1+e6Rl6l3z260D6 oTi9fl53evU6WoHd5kI= ) CDLIHLOHBFG0ACG6MTVFC7JUQQNGIEDH.energysaver.gov. 900 IN RRSIG ( NSEC3 7 3 900 20191212110921 20191208104114 61679 energysaver.gov. pBEIKNQdp8hwZv95iPK7YEa3r9DoLMxl2ft98qAqg3ls+6XKDI+qSrd5ZryJCyROOXUbcjxv7MRz WaXomdPjplBK1bZ6Yjg2WY+fGL7QTQKubUxwuDj1hHG4wuql63jX4OmnVrXU/V3XKRyq/ETEVcRx /7PTiGRnuaafSrXUIZk= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ENERGYSAVER.GOV is authoritative for ENERGYSAVER.GOV
	Found RRSIG signed by energysaver.gov zone
	Query to helios.nrel.GOV for ENERGYSAVER.GOV/SOA
	Received 1645 bytes from 192.174.58.2
	;; Answer received from 192.174.58.2 (1645 bytes) ;; HEADER SECTION ;; id = 20183 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ENERGYSAVER.GOV. IN SOA ;; ANSWER SECTION (3 records) ENERGYSAVER.GOV. 3600 IN SOA ( phaeton.nrel.GOV. postmaster.nrel.GOV. 2019101181 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) ENERGYSAVER.GOV. 3600 IN RRSIG ( SOA 7 2 3600 20191213040849 20191209030849 26948 energysaver.gov. Hof0mA3nVMFn/xRUHDhtTsuW8yfkxUzc8kvht42txT8WNnqlCbE/e2DyfyH55OVnPd4gjDbtVtXU tZu7wCq/O0t8hJ3J+BbRj6k0AaZlP1LSgme9ZRuTvdqEuAArTCnGBthg/t9XJv7ppDi+nxRLkcJc /wUmj7koYU08nxHum5I= ) energysaver.gov. 3600 IN RRSIG ( SOA 7 2 3600 20191213040849 20191209030849 61679 energysaver.gov. wiHxXLhBjxUxqLtG7az2vqc8SvzUAi5XU0c7atqewV+VCuXAw1FnLOG29eGIXN/UaJzTefeHi3Bn 8wY40ULH7cxQgjvlZCJvlHbWXqwyN44SwafQRDjrESjs2H7xh/ozbqSLIz7ShxVCR+WR+xUUxcBi SytEiEAiBE1p52SzQnI= ) ;; AUTHORITY SECTION (6 records) energysaver.gov. 3600 IN NS helios.nrel.GOV. energysaver.gov. 3600 IN NS adns2.es.net. energysaver.gov. 3600 IN NS phaeton.nrel.GOV. energysaver.gov. 3600 IN NS adns1.es.net. energysaver.gov. 3600 IN RRSIG ( NS 7 2 3600 20191213040213 20191209030849 26948 energysaver.gov. Lxi3ThjJ/mEzbr5gH6IkHwEcr2LJPFVA7bKAaKLNaZIhJ/PA5PzgPT/7Ze4vcol7pzfHQROdGE2V q9OVpLyuW61xgBQses4wUzHEsUJLkfXrd4GLrVrs6DDJ5p9Nq7VZLUAW71peH/PR02PtbfTWjNP0 E4JkBJ0vlsYpePrckpU= ) energysaver.gov. 3600 IN RRSIG ( NS 7 2 3600 20191213040213 20191209030849 61679 energysaver.gov. H6SEKQwj/VRPgt/pd4iPxmM/ZmyTOX6zIe+2aF7PrVQI3ng6IfpVQllk2fNCz1ZhzKe7s2S/ewYx +146bp4Lfg/PIqJb5POoSSGhkIVfiKZbPRkCWEKhxyUqvHrH1nUy6sK9kpo5Q4/qV1PwvP9nZEyr vRdbZXPAOIcL75eWuQA= ) ;; ADDITIONAL SECTION (9 records) phaeton.nrel.GOV. 3600 IN A 192.174.58.253 phaeton.nrel.GOV. 3600 IN AAAA 2620:d0:8000:3::21 helios.nrel.GOV. 3600 IN A 192.174.58.2 helios.nrel.GOV. 3600 IN AAAA 2620:d0:8000:3::20 phaeton.nrel.GOV. 3600 IN RRSIG ( A 7 3 3600 20191213070321 20191209064618 9410 nrel.gov. Mjg7imkkg4v+1JMrUrGy3gWUv85EOhrjqzv+zDUK8SEDMENX7G+jx/EGtFb1aAR0sFb5oJ4pkJjR qBfROPHgL0BpuTj7LlptkRhtexdYRcT7X0ZrYWae1syz4H1aHffAhbggRdfIISXloWeA5O6GVYfi LSsFwqgIl0+S0A1ciJI= ) phaeton.nrel.GOV. 3600 IN RRSIG ( AAAA 7 3 3600 20191213022235 20191209014423 9410 nrel.gov. lxUO1TDgrh6sXkTd/2RT5O6ckfOqAL/iTqtrG9XeWMvrpFcjC2V5JeqvSq09BcJK1Pqtz+R/Yhz8 JnWfGzqg3MmYAfFSPyvf8jf0BvPWiDHda5YzAT6tkbKedc8O6nTLKEwS1M4SmxdFR1h1Qrz7pAKV h2p2SHecLNgg6zNrpM4= ) helios.nrel.GOV. 3600 IN RRSIG ( A 7 3 3600 20191212141625 20191208132941 9410 nrel.gov. ZT2Fp6St53MhpcxMoLqAMNaIQ3J7JBpquji72uqs+UY0jXveTOMrGQcgC31rVhK7L9ooLrcPpvr0 wnn6Hyapi2WNBxbqHrV48FGd5XIcY1NNU1yT/syGbauw4tdfi9w3GD4DorowTND3jif+abRtPN9O Ojko98BMw4GbOQuERfs= ) helios.nrel.GOV. 3600 IN RRSIG ( AAAA 7 3 3600 20191212131405 20191208130345 9410 nrel.gov. Tk2cNKmQcZA702SPTS5uCitRAQ7fAfGn7+qYk0EaVNS3oEvXoqGEthZ4GKbW1DvGMR+2koqqunVK GyqpBVitp68IAjxvyp6CvVSzZBTBZvuI4+/X90HRAB795lDOZxOGWwyYImswsQolcu92RmZPaCwA TVA3zlmAlR4SzH6qWBY= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to phaeton.nrel.GOV for ENERGYSAVER.GOV/SOA
	Error querying phaeton.nrel.GOV/2620:d0:8000:3:0:0:0:21 for ENERGYSAVER.GOV/SOA: 'IPv6 transport disabled'
	Received 1645 bytes from 192.174.58.253
	;; Answer received from 192.174.58.253 (1645 bytes) ;; HEADER SECTION ;; id = 28569 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ENERGYSAVER.GOV. IN SOA ;; ANSWER SECTION (3 records) ENERGYSAVER.GOV. 3600 IN SOA ( phaeton.nrel.GOV. postmaster.nrel.GOV. 2019101181 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) ENERGYSAVER.GOV. 3600 IN RRSIG ( SOA 7 2 3600 20191213040849 20191209030849 26948 energysaver.gov. Hof0mA3nVMFn/xRUHDhtTsuW8yfkxUzc8kvht42txT8WNnqlCbE/e2DyfyH55OVnPd4gjDbtVtXU tZu7wCq/O0t8hJ3J+BbRj6k0AaZlP1LSgme9ZRuTvdqEuAArTCnGBthg/t9XJv7ppDi+nxRLkcJc /wUmj7koYU08nxHum5I= ) energysaver.gov. 3600 IN RRSIG ( SOA 7 2 3600 20191213040849 20191209030849 61679 energysaver.gov. wiHxXLhBjxUxqLtG7az2vqc8SvzUAi5XU0c7atqewV+VCuXAw1FnLOG29eGIXN/UaJzTefeHi3Bn 8wY40ULH7cxQgjvlZCJvlHbWXqwyN44SwafQRDjrESjs2H7xh/ozbqSLIz7ShxVCR+WR+xUUxcBi SytEiEAiBE1p52SzQnI= ) ;; AUTHORITY SECTION (6 records) energysaver.gov. 3600 IN NS phaeton.nrel.GOV. energysaver.gov. 3600 IN NS adns1.es.net. energysaver.gov. 3600 IN NS adns2.es.net. energysaver.gov. 3600 IN NS helios.nrel.GOV. energysaver.gov. 3600 IN RRSIG ( NS 7 2 3600 20191213040213 20191209030849 26948 energysaver.gov. Lxi3ThjJ/mEzbr5gH6IkHwEcr2LJPFVA7bKAaKLNaZIhJ/PA5PzgPT/7Ze4vcol7pzfHQROdGE2V q9OVpLyuW61xgBQses4wUzHEsUJLkfXrd4GLrVrs6DDJ5p9Nq7VZLUAW71peH/PR02PtbfTWjNP0 E4JkBJ0vlsYpePrckpU= ) energysaver.gov. 3600 IN RRSIG ( NS 7 2 3600 20191213040213 20191209030849 61679 energysaver.gov. H6SEKQwj/VRPgt/pd4iPxmM/ZmyTOX6zIe+2aF7PrVQI3ng6IfpVQllk2fNCz1ZhzKe7s2S/ewYx +146bp4Lfg/PIqJb5POoSSGhkIVfiKZbPRkCWEKhxyUqvHrH1nUy6sK9kpo5Q4/qV1PwvP9nZEyr vRdbZXPAOIcL75eWuQA= ) ;; ADDITIONAL SECTION (9 records) phaeton.nrel.GOV. 3600 IN A 192.174.58.253 phaeton.nrel.GOV. 3600 IN AAAA 2620:d0:8000:3::21 helios.nrel.GOV. 3600 IN A 192.174.58.2 helios.nrel.GOV. 3600 IN AAAA 2620:d0:8000:3::20 phaeton.nrel.GOV. 3600 IN RRSIG ( A 7 3 3600 20191213070321 20191209064618 9410 nrel.gov. Mjg7imkkg4v+1JMrUrGy3gWUv85EOhrjqzv+zDUK8SEDMENX7G+jx/EGtFb1aAR0sFb5oJ4pkJjR qBfROPHgL0BpuTj7LlptkRhtexdYRcT7X0ZrYWae1syz4H1aHffAhbggRdfIISXloWeA5O6GVYfi LSsFwqgIl0+S0A1ciJI= ) phaeton.nrel.GOV. 3600 IN RRSIG ( AAAA 7 3 3600 20191213022235 20191209014423 9410 nrel.gov. lxUO1TDgrh6sXkTd/2RT5O6ckfOqAL/iTqtrG9XeWMvrpFcjC2V5JeqvSq09BcJK1Pqtz+R/Yhz8 JnWfGzqg3MmYAfFSPyvf8jf0BvPWiDHda5YzAT6tkbKedc8O6nTLKEwS1M4SmxdFR1h1Qrz7pAKV h2p2SHecLNgg6zNrpM4= ) helios.nrel.GOV. 3600 IN RRSIG ( A 7 3 3600 20191212141625 20191208132941 9410 nrel.gov. ZT2Fp6St53MhpcxMoLqAMNaIQ3J7JBpquji72uqs+UY0jXveTOMrGQcgC31rVhK7L9ooLrcPpvr0 wnn6Hyapi2WNBxbqHrV48FGd5XIcY1NNU1yT/syGbauw4tdfi9w3GD4DorowTND3jif+abRtPN9O Ojko98BMw4GbOQuERfs= ) helios.nrel.GOV. 3600 IN RRSIG ( AAAA 7 3 3600 20191212131405 20191208130345 9410 nrel.gov. Tk2cNKmQcZA702SPTS5uCitRAQ7fAfGn7+qYk0EaVNS3oEvXoqGEthZ4GKbW1DvGMR+2koqqunVK GyqpBVitp68IAjxvyp6CvVSzZBTBZvuI4+/X90HRAB795lDOZxOGWwyYImswsQolcu92RmZPaCwA TVA3zlmAlR4SzH6qWBY= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to helios.nrel.GOV for ENERGYSAVER.GOV/A
	Received 893 bytes from 192.174.58.2
	;; Answer received from 192.174.58.2 (893 bytes) ;; HEADER SECTION ;; id = 62020 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ENERGYSAVER.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) ENERGYSAVER.GOV. 900 IN SOA ( phaeton.nrel.GOV. postmaster.nrel.GOV. 2019101181 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) ENERGYSAVER.GOV. 900 IN RRSIG ( SOA 7 2 3600 20191213040849 20191209030849 26948 energysaver.gov. Hof0mA3nVMFn/xRUHDhtTsuW8yfkxUzc8kvht42txT8WNnqlCbE/e2DyfyH55OVnPd4gjDbtVtXU tZu7wCq/O0t8hJ3J+BbRj6k0AaZlP1LSgme9ZRuTvdqEuAArTCnGBthg/t9XJv7ppDi+nxRLkcJc /wUmj7koYU08nxHum5I= ) energysaver.gov. 900 IN RRSIG ( SOA 7 2 3600 20191213040849 20191209030849 61679 energysaver.gov. wiHxXLhBjxUxqLtG7az2vqc8SvzUAi5XU0c7atqewV+VCuXAw1FnLOG29eGIXN/UaJzTefeHi3Bn 8wY40ULH7cxQgjvlZCJvlHbWXqwyN44SwafQRDjrESjs2H7xh/ozbqSLIz7ShxVCR+WR+xUUxcBi SytEiEAiBE1p52SzQnI= ) CDLIHLOHBFG0ACG6MTVFC7JUQQNGIEDH.energysaver.gov. 900 IN NSEC3 ( 1 0 10 2450794ba7248ec1bd gcmnbb1vr9nkepjq0g8ntk6ogavei53v NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) CDLIHLOHBFG0ACG6MTVFC7JUQQNGIEDH.energysaver.gov. 900 IN RRSIG ( NSEC3 7 3 900 20191212110921 20191208104114 26948 energysaver.gov. BqKhCRkIF3Xe/ZGR5zpnTZoZOvaFkjkONp+CHJLnCyHZ8n4aLX1Hy70jVnUCMBMOAh0lVxATDr1y 0Fda9RoOn6tiZs4eUK7cgkjOiTb3Gv8j69Dk468dqcEyfVSmHm1jW8UF1jcid1+e6Rl6l3z260D6 oTi9fl53evU6WoHd5kI= ) CDLIHLOHBFG0ACG6MTVFC7JUQQNGIEDH.energysaver.gov. 900 IN RRSIG ( NSEC3 7 3 900 20191212110921 20191208104114 61679 energysaver.gov. pBEIKNQdp8hwZv95iPK7YEa3r9DoLMxl2ft98qAqg3ls+6XKDI+qSrd5ZryJCyROOXUbcjxv7MRz WaXomdPjplBK1bZ6Yjg2WY+fGL7QTQKubUxwuDj1hHG4wuql63jX4OmnVrXU/V3XKRyq/ETEVcRx /7PTiGRnuaafSrXUIZk= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`ENERGYSAVER.GOV. 900 IN RRSIG ( SOA 7 2 3600 20191213040849 20191209030849 26948 energysaver.gov. Hof0mA3nVMFn/xRUHDhtTsuW8yfkxUzc8kvht42txT8WNnqlCbE/e2DyfyH55OVnPd4gjDbtVtXU tZu7wCq/O0t8hJ3J+BbRj6k0AaZlP1LSgme9ZRuTvdqEuAArTCnGBthg/t9XJv7ppDi+nxRLkcJc /wUmj7koYU08nxHum5I= )`
	`energysaver.gov. 900 IN RRSIG ( SOA 7 2 3600 20191213040849 20191209030849 61679 energysaver.gov. wiHxXLhBjxUxqLtG7az2vqc8SvzUAi5XU0c7atqewV+VCuXAw1FnLOG29eGIXN/UaJzTefeHi3Bn 8wY40ULH7cxQgjvlZCJvlHbWXqwyN44SwafQRDjrESjs2H7xh/ozbqSLIz7ShxVCR+WR+xUUxcBi SytEiEAiBE1p52SzQnI= )`
	RRSIG=26948 and DNSKEY=26948 verifies the SOA RRset
	RRSIG=61679 and DNSKEY=61679 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test ENERGYSAVER.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: