DNSSEC Analyzer - ENERGYSAVER.GOV

Domain Name:

Time: 2019-08-20 14:24:28 UTC, NTP stratum 4

Analyzing DNSSEC problems for ENERGYSAVER.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to e.root-servers.net for ./DNSKEY
	Error querying e.root-servers.net/2001:500:a8:0:0:0:0:e for ./DNSKEY: 'IPv6 transport disabled'
	Received 864 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (864 bytes) ;; HEADER SECTION ;; id = 59671 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAcTQyaIe6nt3xSPOG2L/YfwBkOVTJN6mlnZ249O5Rtt3ZSRQHxQSW61AODYw6bvgxrrGq8ee OuenFjcSYgNAMcBYoEYYmKDW6e9EryW4ZaT/MCq+8Am06oR40xAA3fClOM6QjRcT85tP41Go946A icBGP8XOP/Aj1aI/oPRGzRnboUPUok/AzTNnW5npBU69+BuiIwYE7mQOiNBFePyvjQBdoiuYbmuD 3Py0IyjlBxzZUXbqLsRL9gYFkCqeTY29Ik7usuzMTa+JRSLz6KGS5RSJ7CTSMjZg8aNaUbN2dvGh akJPh92HnLvMA3TefFgbKJphFNPA3BWSKLZ02cRWXqM= ) ; Key ID = 59944 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190910000000 20190820000000 20326 . myqQxVqqg5Yb0Tx+BDiLM672R1pZi5zzgRAWh3SkK4mQponWEdXVglCRl6VxIDqnbi5NKabyHMBc w+k4hbBjA1TZ0f+cyJa8xxTg8m7caHrdIRDNwr1zFa16L5BO55NWCjyTCwc/IgRU+Q5zS1YX/qdy uDsWsuRxhxclK5Knxc35Z0Pj0/xlBVzatlwloBVtnSpetAHyofMq9J/ylHDdQtfDjC3B/cBE1/TA UR8cJ2hZXlBBkR0q3Nb0dc6CG8647F8Rp9NOPNn6529HFjARFOPKps2ujLqzrLD4wuKzU3B3yOBe Vqv80rPiSnz0po25KwxFuQYXhAPlNQRtVLdjDw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcTQyaIe6nt3xSPOG2L/YfwBkOVTJN6mlnZ249O5Rtt3ZSRQHxQSW61AODYw6bvgxrrGq8ee OuenFjcSYgNAMcBYoEYYmKDW6e9EryW4ZaT/MCq+8Am06oR40xAA3fClOM6QjRcT85tP41Go946A icBGP8XOP/Aj1aI/oPRGzRnboUPUok/AzTNnW5npBU69+BuiIwYE7mQOiNBFePyvjQBdoiuYbmuD 3Py0IyjlBxzZUXbqLsRL9gYFkCqeTY29Ik7usuzMTa+JRSLz6KGS5RSJ7CTSMjZg8aNaUbN2dvGh akJPh92HnLvMA3TefFgbKJphFNPA3BWSKLZ02cRWXqM= ) ; Key ID = 59944`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190910000000 20190820000000 20326 . myqQxVqqg5Yb0Tx+BDiLM672R1pZi5zzgRAWh3SkK4mQponWEdXVglCRl6VxIDqnbi5NKabyHMBc w+k4hbBjA1TZ0f+cyJa8xxTg8m7caHrdIRDNwr1zFa16L5BO55NWCjyTCwc/IgRU+Q5zS1YX/qdy uDsWsuRxhxclK5Knxc35Z0Pj0/xlBVzatlwloBVtnSpetAHyofMq9J/ylHDdQtfDjC3B/cBE1/TA UR8cJ2hZXlBBkR0q3Nb0dc6CG8647F8Rp9NOPNn6529HFjARFOPKps2ujLqzrLD4wuKzU3B3yOBe Vqv80rPiSnz0po25KwxFuQYXhAPlNQRtVLdjDw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=59944 is now in the chain-of-trust
	Query to k.root-servers.net for ENERGYSAVER.GOV/A
	Error querying k.root-servers.net/2001:7fd:0:0:0:0:0:1 for ENERGYSAVER.GOV/A: 'IPv6 transport disabled'
	Received 670 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (670 bytes) ;; HEADER SECTION ;; id = 6135 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ENERGYSAVER.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20190902050000 20190820040000 59944 . RUqbA1seT9QkM6KjM21mq6zFMpCnbA/HPqmPHOMxHtrUCinjtW5I4Ufad48PsBNAPfO2LEbwVqe3 Tq7l6ImdQOUgNXFMBn87KMCi5JDRr2gOf+uaEcNz7l2Rb+r1hd/HgZLZSO5XDP8aJU69JwysL8FE K8qNOzZSCFDeznsNJtNsUiw7PLgECGESrefbDbR7kk4viDon8aODFeS3nKDc+B5wbEs5qCzkDbBK u0XcjMtlCYIaFzcQT348bivOa4ovXBYf6SNGgPHgwHRl8L+0HSKCB4m9mLGqoqk/9xn6agjZ+hdM KyrSS/FMZx/sAu9oCxEWWvQKNzF7xGEkhRVa/w== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to l.root-servers.net for GOV/DNSKEY
	Received 658 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (658 bytes) ;; HEADER SECTION ;; id = 50022 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20190902050000 20190820040000 59944 . RUqbA1seT9QkM6KjM21mq6zFMpCnbA/HPqmPHOMxHtrUCinjtW5I4Ufad48PsBNAPfO2LEbwVqe3 Tq7l6ImdQOUgNXFMBn87KMCi5JDRr2gOf+uaEcNz7l2Rb+r1hd/HgZLZSO5XDP8aJU69JwysL8FE K8qNOzZSCFDeznsNJtNsUiw7PLgECGESrefbDbR7kk4viDon8aODFeS3nKDc+B5wbEs5qCzkDbBK u0XcjMtlCYIaFzcQT348bivOa4ovXBYf6SNGgPHgwHRl8L+0HSKCB4m9mLGqoqk/9xn6agjZ+hdM KyrSS/FMZx/sAu9oCxEWWvQKNzF7xGEkhRVa/w== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to c.root-servers.net for GOV/DS
	Error querying c.root-servers.net/2001:500:2:0:0:0:0:c for GOV/DS: 'IPv6 transport disabled'
	Received 406 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (406 bytes) ;; HEADER SECTION ;; id = 34619 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20190902050000 20190820040000 59944 . RUqbA1seT9QkM6KjM21mq6zFMpCnbA/HPqmPHOMxHtrUCinjtW5I4Ufad48PsBNAPfO2LEbwVqe3 Tq7l6ImdQOUgNXFMBn87KMCi5JDRr2gOf+uaEcNz7l2Rb+r1hd/HgZLZSO5XDP8aJU69JwysL8FE K8qNOzZSCFDeznsNJtNsUiw7PLgECGESrefbDbR7kk4viDon8aODFeS3nKDc+B5wbEs5qCzkDbBK u0XcjMtlCYIaFzcQT348bivOa4ovXBYf6SNGgPHgwHRl8L+0HSKCB4m9mLGqoqk/9xn6agjZ+hdM KyrSS/FMZx/sAu9oCxEWWvQKNzF7xGEkhRVa/w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	DS=7698/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20190902050000 20190820040000 59944 . RUqbA1seT9QkM6KjM21mq6zFMpCnbA/HPqmPHOMxHtrUCinjtW5I4Ufad48PsBNAPfO2LEbwVqe3 Tq7l6ImdQOUgNXFMBn87KMCi5JDRr2gOf+uaEcNz7l2Rb+r1hd/HgZLZSO5XDP8aJU69JwysL8FE K8qNOzZSCFDeznsNJtNsUiw7PLgECGESrefbDbR7kk4viDon8aODFeS3nKDc+B5wbEs5qCzkDbBK u0XcjMtlCYIaFzcQT348bivOa4ovXBYf6SNGgPHgwHRl8L+0HSKCB4m9mLGqoqk/9xn6agjZ+hdM KyrSS/FMZx/sAu9oCxEWWvQKNzF7xGEkhRVa/w== )`
	RRSIG=59944 and DNSKEY=59944 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	Query to b.gov-servers.net for GOV/DNSKEY
	Error querying b.gov-servers.net/2620:74:27:0:0:0:2:30 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 743 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (743 bytes) ;; HEADER SECTION ;; id = 8187 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 256 3 8 AQPnviCbt0HB2CQze767dPf3TQFosiEwOIkUQaJmcSoNlVSquo3Mox7noTQGzKSdTbKAh0zfkGIb thSb6zyPceMJPpVv2RQUAj9WWTZr4yvO0J5/KllhGqr3sZndrV1lF/rrFzjnnLO8egQTS7bXHbsU 9sM71w5Xiow+isEEPrc5KQ== ) ; Key ID = 7877 GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190830214731 20190815214231 7698 gov. k1bNHuSWv2dXTQUpQqP68QRQ5fWzTY2g+HNf1z8IpZC7H3EHKv8KptrM+vQiUBR655KD9G3geI3x HbR3kKXWcQII2XFfnvCmf7gNbVmOYUli1cTCsbTNo64VS8hdwpwFPH7C8FQ7NDs5vUH6y9XvIJv0 M571C301cmbMdtczwdTVIE64YGedJOWGQMcLJnRPzdbz9IS1XdxHkfLmGsrqzUYUc1/b88hCVlbn ftGzRDh+jUq32mCd6eknCrnfmG4moYT1CVuR10K5oG3pADzMgTSnqCYyFb9xrRYaYtBmDeN0KhKp wx+MHIquJk2W6OUnoMMCX0DqxTlUHMxoxIfOwA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQPnviCbt0HB2CQze767dPf3TQFosiEwOIkUQaJmcSoNlVSquo3Mox7noTQGzKSdTbKAh0zfkGIb thSb6zyPceMJPpVv2RQUAj9WWTZr4yvO0J5/KllhGqr3sZndrV1lF/rrFzjnnLO8egQTS7bXHbsU 9sM71w5Xiow+isEEPrc5KQ== ) ; Key ID = 7877`
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190830214731 20190815214231 7698 gov. k1bNHuSWv2dXTQUpQqP68QRQ5fWzTY2g+HNf1z8IpZC7H3EHKv8KptrM+vQiUBR655KD9G3geI3x HbR3kKXWcQII2XFfnvCmf7gNbVmOYUli1cTCsbTNo64VS8hdwpwFPH7C8FQ7NDs5vUH6y9XvIJv0 M571C301cmbMdtczwdTVIE64YGedJOWGQMcLJnRPzdbz9IS1XdxHkfLmGsrqzUYUc1/b88hCVlbn ftGzRDh+jUq32mCd6eknCrnfmG4moYT1CVuR10K5oG3pADzMgTSnqCYyFb9xrRYaYtBmDeN0KhKp wx+MHIquJk2W6OUnoMMCX0DqxTlUHMxoxIfOwA== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=7877 is now in the chain-of-trust
	Query to a.gov-servers.net for ENERGYSAVER.GOV/A
	Received 455 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (455 bytes) ;; HEADER SECTION ;; id = 37707 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ENERGYSAVER.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ENERGYSAVER.GOV. 86400 IN NS helios.nrel.GOV. ENERGYSAVER.GOV. 86400 IN NS phaeton.nrel.GOV. ENERGYSAVER.GOV. 3600 IN DS ( 16125 7 1 83c5e66b4148bf467f997488a6820e4ffd6117ce ) ENERGYSAVER.GOV. 3600 IN DS ( 12123 7 1 0b1214cc9e3cb975e86bf03ecda8ff479de87ae0 ) ENERGYSAVER.GOV. 3600 IN DS ( 16125 7 2 ba854865aae031a41d4a5c05b78cb903cfbc2dc18b9ac6535d9deee99b87e940 ) ENERGYSAVER.GOV. 3600 IN DS ( 12123 7 2 e0733e1c57320f0833e062257243187f411f1aeeaf8a8ab16a75ec2451ae4b69 ) ENERGYSAVER.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190827101007 20190820101007 7877 gov. EKO+ZDNHIi1TQWIdaaiQD2/br28W4b5uT+HHYrn9qBf7RkOEjZw48kLBclAyHj+1FMdDfR4jAezC wjBzOGZCjqKps3p5xaDF6QhH2uYohVtBQ+gCsTHYYfJvCv4D4MWoYeJy/SYuJuaQ9xaU3ueoiS6S OPM5weAQGao5y0QDo2o= ) ;; ADDITIONAL SECTION (3 records) helios.nrel.GOV. 86400 IN A 192.174.58.2 phaeton.nrel.GOV. 86400 IN A 192.174.58.253 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.gov-servers.net for ENERGYSAVER.GOV/DNSKEY
	Error querying c.gov-servers.net/2620:74:28:0:0:0:2:30 for ENERGYSAVER.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 455 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (455 bytes) ;; HEADER SECTION ;; id = 5601 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ENERGYSAVER.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ENERGYSAVER.GOV. 86400 IN NS helios.nrel.GOV. ENERGYSAVER.GOV. 86400 IN NS phaeton.nrel.GOV. ENERGYSAVER.GOV. 3600 IN DS ( 16125 7 1 83c5e66b4148bf467f997488a6820e4ffd6117ce ) ENERGYSAVER.GOV. 3600 IN DS ( 12123 7 1 0b1214cc9e3cb975e86bf03ecda8ff479de87ae0 ) ENERGYSAVER.GOV. 3600 IN DS ( 16125 7 2 ba854865aae031a41d4a5c05b78cb903cfbc2dc18b9ac6535d9deee99b87e940 ) ENERGYSAVER.GOV. 3600 IN DS ( 12123 7 2 e0733e1c57320f0833e062257243187f411f1aeeaf8a8ab16a75ec2451ae4b69 ) ENERGYSAVER.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190827101007 20190820101007 7877 gov. EKO+ZDNHIi1TQWIdaaiQD2/br28W4b5uT+HHYrn9qBf7RkOEjZw48kLBclAyHj+1FMdDfR4jAezC wjBzOGZCjqKps3p5xaDF6QhH2uYohVtBQ+gCsTHYYfJvCv4D4MWoYeJy/SYuJuaQ9xaU3ueoiS6S OPM5weAQGao5y0QDo2o= ) ;; ADDITIONAL SECTION (3 records) helios.nrel.GOV. 86400 IN A 192.174.58.2 phaeton.nrel.GOV. 86400 IN A 192.174.58.253 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone ENERGYSAVER.GOV

ENERGYSAVER.GOV

	Checking DS between GOV and ENERGYSAVER.GOV
	Query to d.gov-servers.net for ENERGYSAVER.GOV/DS
	Error querying d.gov-servers.net/2620:74:29:0:0:0:2:30 for ENERGYSAVER.GOV/DS: 'IPv6 transport disabled'
	Received 375 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (375 bytes) ;; HEADER SECTION ;; id = 8735 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ENERGYSAVER.GOV. IN DS ;; ANSWER SECTION (5 records) ENERGYSAVER.GOV. 3600 IN DS ( 16125 7 1 83c5e66b4148bf467f997488a6820e4ffd6117ce ) ENERGYSAVER.GOV. 3600 IN DS ( 12123 7 1 0b1214cc9e3cb975e86bf03ecda8ff479de87ae0 ) ENERGYSAVER.GOV. 3600 IN DS ( 16125 7 2 ba854865aae031a41d4a5c05b78cb903cfbc2dc18b9ac6535d9deee99b87e940 ) ENERGYSAVER.GOV. 3600 IN DS ( 12123 7 2 e0733e1c57320f0833e062257243187f411f1aeeaf8a8ab16a75ec2451ae4b69 ) ENERGYSAVER.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190827101007 20190820101007 7877 gov. EKO+ZDNHIi1TQWIdaaiQD2/br28W4b5uT+HHYrn9qBf7RkOEjZw48kLBclAyHj+1FMdDfR4jAezC wjBzOGZCjqKps3p5xaDF6QhH2uYohVtBQ+gCsTHYYfJvCv4D4MWoYeJy/SYuJuaQ9xaU3ueoiS6S OPM5weAQGao5y0QDo2o= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for ENERGYSAVER.GOV in the GOV zone
	DS=16125/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=12123/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=16125/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=12123/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`ENERGYSAVER.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190827101007 20190820101007 7877 gov. EKO+ZDNHIi1TQWIdaaiQD2/br28W4b5uT+HHYrn9qBf7RkOEjZw48kLBclAyHj+1FMdDfR4jAezC wjBzOGZCjqKps3p5xaDF6QhH2uYohVtBQ+gCsTHYYfJvCv4D4MWoYeJy/SYuJuaQ9xaU3ueoiS6S OPM5weAQGao5y0QDo2o= )`
	RRSIG=7877 and DNSKEY=7877 verifies the DS RRset
	DS=16125/SHA-1 is now in the chain-of-trust
	DS=12123/SHA-1 is now in the chain-of-trust
	`ENERGYSAVER.GOV. 3600 IN DS ( 16125 7 1 83c5e66b4148bf467f997488a6820e4ffd6117ce )`
	`ENERGYSAVER.GOV. 3600 IN DS ( 12123 7 1 0b1214cc9e3cb975e86bf03ecda8ff479de87ae0 )`
	`ENERGYSAVER.GOV. 3600 IN DS ( 16125 7 2 ba854865aae031a41d4a5c05b78cb903cfbc2dc18b9ac6535d9deee99b87e940 )`
	`ENERGYSAVER.GOV. 3600 IN DS ( 12123 7 2 e0733e1c57320f0833e062257243187f411f1aeeaf8a8ab16a75ec2451ae4b69 )`
	Query to phaeton.nrel.GOV for ENERGYSAVER.GOV/DNSKEY
	Error querying phaeton.nrel.GOV/2620:d0:8000:3:0:0:0:21 for ENERGYSAVER.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 1269 bytes from 192.174.58.253
	;; Answer received from 192.174.58.253 (1269 bytes) ;; HEADER SECTION ;; id = 21766 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ENERGYSAVER.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) ENERGYSAVER.GOV. 172800 IN DNSKEY ( 257 3 7 AwEAAeYXnrPF6dW+qJhbsHJ65bXJfdemd3z7V+8nicajVUwjtDep/8kliyn7MGNs+vN7ZphmFarK Y9N2SDrK3WyCRDDGGoQp7lvXU0MoOFXJQSvs8X3Lcvyskorqfm4QjC8PbBNA00v8GfYPx5aDj366 rYSfPrpeuJijhuhkT2SdWrwMyDBQJ4lvv4pqEPIo2rHkj+aC4xL5RqAyvmLX9aUDgV/mqtXDIp+i dqxBMPzMvEgC7hw/ENJdXD2MnVXVMvHBOLa39HmkULNEkpNA9Fr+w9wIdgSoY9uqEwdtgja6xhcz EW3+0ETJo9nfC1MEOK/D5GYnqgn/J2iL8tZksuDMyWE= ) ; Key ID = 16125 ENERGYSAVER.GOV. 172800 IN DNSKEY ( 256 3 7 AwEAAdT+0xXpcgRJhP42ptpOCVE9TF+0w7omoDwNlvQCRuA27Www4R0aKuyq4MJPtbzfn86TSF+X PTxQOVKMxsx5dDXshA3GH0qdSrPOcutwVlBsxUWsY3Wd0Ym2wgbNseDyV+GD4WaHkLK7rVCa8JAv ENMJVSm3qRC0kRGGrNRwWcfz ) ; Key ID = 63977 ENERGYSAVER.GOV. 172800 IN DNSKEY ( 256 3 7 AwEAAddA737thE7RFoeOynhJgqmEMTeigKQ9eZBXgcsb5ry7Q/8QoPF5dSIPkzAkXlh1NkVosAKZ MKBQhI2w/3bHGGB6XWUXF/2zo2ON4r3QWAHMfAtShJo92Rvov4cRtwrno6jwnxIWfeo1LyEhsnLu VeUjHniTT2F6R/vtLVLip3/x ) ; Key ID = 14525 ENERGYSAVER.GOV. 172800 IN RRSIG ( DNSKEY 7 2 172800 20190824045154 20190820044249 14525 energysaver.gov. qFmxMA28dxt7GhB8p4qFsLWSaVMR95RX+dtO4z2/NQWNL9GfDAey3w6QoXKY6w/H6g87elP4h8eB drIDKwBsubv1w7lsFme2ymgMlVUscbXSZkE4oplqNfxp0Qq8WXQhROTG+Ngc2uNiKEyV1YPlm6Vw iUscx9T2CfHYtpo3h3k= ) energysaver.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20190824045154 20190820044249 16125 energysaver.gov. d8TzYUx612K0gtb7E/tX6Px6kBraaiW6yFMPjYS/FIF8dDta3fhe6inbQj0VdkFQ3iWx1BRsONbF TxdmAoHAdeBA9KC6JjS0Iht0eR5W+CsDKzesSIMvn14Wpe0DuCgR9qx3nMmix681iOHzgUF2ac2r R3WUbkrJrBi7wZogaGFMH89HrH/5poDW/DRBumt5n4d6Vu3tLbM4i3JfVywuGdXdcZWBpB733v15 495ca4NkHcs07O1IuHDdiLoou35xjs6FEWz3+wZqCjHVDRQ7O/lbQsina9r1xglY1x0fjrfNKCWb 4fZD/b3VANfhZkvW0ufVzo6pphcesRqZqdkhqw== ) energysaver.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20190824045154 20190820044249 63977 energysaver.gov. htITr7Rer0jhgBK/peUlKFoUA5CPFH3CZScNWUDmUifEMp8Z4leU/nzQE5Ja8+hwzdZjjmXg5KCg h/nkDFId+q9PfDNLV1qLLNih+V8dxFfB/JcYGOi52RndydSEkbRyYxFCNaPIFan3lCrHbgXmXdRF jPgYPqil9XggUnP4wVY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for ENERGYSAVER.GOV
	`ENERGYSAVER.GOV. 172800 IN DNSKEY ( 257 3 7 AwEAAeYXnrPF6dW+qJhbsHJ65bXJfdemd3z7V+8nicajVUwjtDep/8kliyn7MGNs+vN7ZphmFarK Y9N2SDrK3WyCRDDGGoQp7lvXU0MoOFXJQSvs8X3Lcvyskorqfm4QjC8PbBNA00v8GfYPx5aDj366 rYSfPrpeuJijhuhkT2SdWrwMyDBQJ4lvv4pqEPIo2rHkj+aC4xL5RqAyvmLX9aUDgV/mqtXDIp+i dqxBMPzMvEgC7hw/ENJdXD2MnVXVMvHBOLa39HmkULNEkpNA9Fr+w9wIdgSoY9uqEwdtgja6xhcz EW3+0ETJo9nfC1MEOK/D5GYnqgn/J2iL8tZksuDMyWE= ) ; Key ID = 16125`
	`ENERGYSAVER.GOV. 172800 IN DNSKEY ( 256 3 7 AwEAAdT+0xXpcgRJhP42ptpOCVE9TF+0w7omoDwNlvQCRuA27Www4R0aKuyq4MJPtbzfn86TSF+X PTxQOVKMxsx5dDXshA3GH0qdSrPOcutwVlBsxUWsY3Wd0Ym2wgbNseDyV+GD4WaHkLK7rVCa8JAv ENMJVSm3qRC0kRGGrNRwWcfz ) ; Key ID = 63977`
	`ENERGYSAVER.GOV. 172800 IN DNSKEY ( 256 3 7 AwEAAddA737thE7RFoeOynhJgqmEMTeigKQ9eZBXgcsb5ry7Q/8QoPF5dSIPkzAkXlh1NkVosAKZ MKBQhI2w/3bHGGB6XWUXF/2zo2ON4r3QWAHMfAtShJo92Rvov4cRtwrno6jwnxIWfeo1LyEhsnLu VeUjHniTT2F6R/vtLVLip3/x ) ; Key ID = 14525`
	DNSKEY=16125/SEP is now in the chain-of-trust
	DS=16125/SHA-1 verifies DNSKEY=16125/SEP
	DS=16125/SHA-256 verifies DNSKEY=16125/SEP
	DS=12123/SHA-1 is published, but a corresponding DNSKEY is not
	Found 3 RRSIGs over DNSKEY RRset
	`ENERGYSAVER.GOV. 172800 IN RRSIG ( DNSKEY 7 2 172800 20190824045154 20190820044249 14525 energysaver.gov. qFmxMA28dxt7GhB8p4qFsLWSaVMR95RX+dtO4z2/NQWNL9GfDAey3w6QoXKY6w/H6g87elP4h8eB drIDKwBsubv1w7lsFme2ymgMlVUscbXSZkE4oplqNfxp0Qq8WXQhROTG+Ngc2uNiKEyV1YPlm6Vw iUscx9T2CfHYtpo3h3k= )`
	`energysaver.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20190824045154 20190820044249 16125 energysaver.gov. d8TzYUx612K0gtb7E/tX6Px6kBraaiW6yFMPjYS/FIF8dDta3fhe6inbQj0VdkFQ3iWx1BRsONbF TxdmAoHAdeBA9KC6JjS0Iht0eR5W+CsDKzesSIMvn14Wpe0DuCgR9qx3nMmix681iOHzgUF2ac2r R3WUbkrJrBi7wZogaGFMH89HrH/5poDW/DRBumt5n4d6Vu3tLbM4i3JfVywuGdXdcZWBpB733v15 495ca4NkHcs07O1IuHDdiLoou35xjs6FEWz3+wZqCjHVDRQ7O/lbQsina9r1xglY1x0fjrfNKCWb 4fZD/b3VANfhZkvW0ufVzo6pphcesRqZqdkhqw== )`
	`energysaver.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20190824045154 20190820044249 63977 energysaver.gov. htITr7Rer0jhgBK/peUlKFoUA5CPFH3CZScNWUDmUifEMp8Z4leU/nzQE5Ja8+hwzdZjjmXg5KCg h/nkDFId+q9PfDNLV1qLLNih+V8dxFfB/JcYGOi52RndydSEkbRyYxFCNaPIFan3lCrHbgXmXdRF jPgYPqil9XggUnP4wVY= )`
	RRSIG=14525 and DNSKEY=14525 verifies the DNSKEY RRset
	RRSIG=16125 and DNSKEY=16125/SEP verifies the DNSKEY RRset
	RRSIG=63977 and DNSKEY=63977 verifies the DNSKEY RRset
	DNSKEY=63977 is now in the chain-of-trust
	DNSKEY=14525 is now in the chain-of-trust
	Query to helios.nrel.GOV for ENERGYSAVER.GOV/A
	Received 887 bytes from 192.174.58.2
	;; Answer received from 192.174.58.2 (887 bytes) ;; HEADER SECTION ;; id = 48898 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ENERGYSAVER.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) ENERGYSAVER.GOV. 900 IN SOA ( ns0.nrel.GOV. postmaster.nrel.GOV. 8588 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) ENERGYSAVER.GOV. 900 IN RRSIG ( SOA 7 2 3600 20190824075241 20190820065241 14525 energysaver.gov. r/5t3rtWrdI3LCf3HJ+04XoSiWzfEEnERRYID1tUyRsVH0UpodefBOfvUehW6hkJYp2PAIqXRtDM LYUjD8ps6c6XNLuya8Ysiszy6LYZ78wJGArwRiXSXGN5qe1k6vsBM5fIAuzKw/dM6HqPtBtWaRFA xvi8zj2LBb7aBiS+h0g= ) energysaver.gov. 900 IN RRSIG ( SOA 7 2 3600 20190824075241 20190820065241 63977 energysaver.gov. ew8juEFMsyqKmbUMb/RhLlRkWoNjDLHEM9PtPtbWhoM5B6LjE1ZnblWhYDS36SewhCBrqW7EJosP PIgzub3Qf1+XbHPXUu5cyNe4MAslqnCv1SI++Ubs4Va1BJXMvKoEzpE9zG63Dsc+yzDbAMamjvpz HiS8YTfoEB+Vb2F644I= ) VQAI7AIFKQ14NED08DA6092N9FFA70E3.energysaver.gov. 900 IN NSEC3 ( 1 0 10 92b339b6c8e173 1ta86nbucptgapl1itqipdug5jbvlcef NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) VQAI7AIFKQ14NED08DA6092N9FFA70E3.energysaver.gov. 900 IN RRSIG ( NSEC3 7 3 900 20190824045154 20190820044249 14525 energysaver.gov. F+ghDTdnM/eCPDtCjrAAkn9/jqP4TsLCr+LtM+6itEzaTzFWYUv9lEP8VyEIvvj5wtQ3HTjFnEU0 5Uc2HrvWMOHzZLH+kXFipr4KnVIkIDd33OpNygKv8kPe7PDBBBHkfggU3H+fUtOfhiycpSqYFOTe xIOZh5Mwu8u0/wpk2Zg= ) VQAI7AIFKQ14NED08DA6092N9FFA70E3.energysaver.gov. 900 IN RRSIG ( NSEC3 7 3 900 20190824045154 20190820044249 63977 energysaver.gov. qBqUFVj9imC4INiD24PCtShdHwljVukqqtc3CnjQ6vpghGrKU1P3S1M10FICgEKC5miDdgWscPvK solBjYMck3J4kWC/CLWBp1DHQUqhGRF+Opp/twszRtZSFVKpGGYsyxXidVvXfxQH8+rTCghLC1Wv 5mpVWWs8FH8Sk99+K3s= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ENERGYSAVER.GOV is authoritative for ENERGYSAVER.GOV
	Found RRSIG signed by energysaver.gov zone
	Query to helios.nrel.GOV for ENERGYSAVER.GOV/SOA
	Received 2339 bytes from 192.174.58.2
	;; Answer received from 192.174.58.2 (2339 bytes) ;; HEADER SECTION ;; id = 18520 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 7 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ENERGYSAVER.GOV. IN SOA ;; ANSWER SECTION (3 records) ENERGYSAVER.GOV. 3600 IN SOA ( ns0.nrel.GOV. postmaster.nrel.GOV. 8588 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) ENERGYSAVER.GOV. 3600 IN RRSIG ( SOA 7 2 3600 20190824075241 20190820065241 14525 energysaver.gov. r/5t3rtWrdI3LCf3HJ+04XoSiWzfEEnERRYID1tUyRsVH0UpodefBOfvUehW6hkJYp2PAIqXRtDM LYUjD8ps6c6XNLuya8Ysiszy6LYZ78wJGArwRiXSXGN5qe1k6vsBM5fIAuzKw/dM6HqPtBtWaRFA xvi8zj2LBb7aBiS+h0g= ) energysaver.gov. 3600 IN RRSIG ( SOA 7 2 3600 20190824075241 20190820065241 63977 energysaver.gov. ew8juEFMsyqKmbUMb/RhLlRkWoNjDLHEM9PtPtbWhoM5B6LjE1ZnblWhYDS36SewhCBrqW7EJosP PIgzub3Qf1+XbHPXUu5cyNe4MAslqnCv1SI++Ubs4Va1BJXMvKoEzpE9zG63Dsc+yzDbAMamjvpz HiS8YTfoEB+Vb2F644I= ) ;; AUTHORITY SECTION (7 records) energysaver.gov. 3600 IN NS helios.nrel.GOV. energysaver.gov. 3600 IN NS phaeton.nrel.GOV. energysaver.gov. 3600 IN NS adns2.es.net. energysaver.gov. 3600 IN NS adns1.es.net. energysaver.gov. 3600 IN NS ns1.es.net. energysaver.gov. 3600 IN RRSIG ( NS 7 2 3600 20190824072910 20190820065241 14525 energysaver.gov. tenL07Sd2ZaZJ/kHKr67epXNfbmCnmM+j48mqd3Lfl2Tb2CijGGJgtrIFinbLpIALkFDpBVoYr54 7Al3wA4zBc2njeEkCnleyD4KsYY86cgHm4V1Ol9SVYANVdLX5vcGMwyEVqm/JJFlHaMOWgcPX+gg 9y07EBbjO647Ppdw+vY= ) energysaver.gov. 3600 IN RRSIG ( NS 7 2 3600 20190824072910 20190820065241 63977 energysaver.gov. WRudQWsGfLmkYwJEpUsbiVeW50Mq/DX5Kl7hbkGxtNsws8mIn7ChtaF2peK/ANBv+lBa50fPZHC6 ZreVjABMK49+VhtmJNIjjcveMOSxpgMHLekFcYd48QSvz/fn+Esnrl9YXJjnlbRBejpm3Bg1IY2n ibFEbj12R7teLAOB9ME= ) ;; ADDITIONAL SECTION (13 records) phaeton.nrel.GOV. 3600 IN A 192.174.58.253 phaeton.nrel.GOV. 3600 IN AAAA 2620:d0:8000:3::21 helios.nrel.GOV. 3600 IN A 192.174.58.2 helios.nrel.GOV. 3600 IN AAAA 2620:d0:8000:3::20 phaeton.nrel.GOV. 3600 IN RRSIG ( A 7 3 3600 20190823152210 20190819144911 28172 nrel.gov. CcJCpFERQ5AJhFTTrNA7Pc4TEYMGH5jnpGZOTiXbaunSRvahaVvIcZYTH2SjzcLjekhF40cpei1Y cWc/ACXumRVWL6+ZZQioHas+fRCuUmXwG8GG2MnymXyi6ncEGzuVW1BCbKhgEHEabvKwkN6CTIBL i951XjcbzUpyFzbP3SE= ) phaeton.nrel.GOV. 3600 IN RRSIG ( A 7 3 3600 20190823152210 20190819144911 44762 nrel.gov. LigIh9h0FeuLLVEYraKWF92OjSpZt9iF3uLvy7Cl/NeBPn7RhahiYhl/hvV8QZfbkKCti5IPX0fz SLrS8oAcI1G5u9zwn4/kSG6oVbwjGhyyK3VxtmiXrF6Qjgg8PvVkQbPmYrUWnziMBtTlcrYJoSJq zx/mIhllF3Ed+6ExerE= ) phaeton.nrel.GOV. 3600 IN RRSIG ( AAAA 7 3 3600 20190824061557 20190820053846 28172 nrel.gov. 2Kib8DR8ZmsNpvoNyaGthEGi0ArvCWwJmFEiN8M47/xzrPeEfsKe7ruKscG1WdLRXaHT8jDij7y1 mtC1uDrU/5TNaRorHyUvu91K5kwpvpyN2jGdaoGvb7XocXIuvMo1sWNfFsyQYAniI2xKDKz9M7Le 1/sqYE+Q2AHOZltwnPE= ) phaeton.nrel.GOV. 3600 IN RRSIG ( AAAA 7 3 3600 20190824061557 20190820053846 44762 nrel.gov. UDCtPhbOQetTr4bVm+R8D8a4eS4Y/ZbluuVSGLsvb39WyAnI+GVSuLLWMypjQLpbUSfCL/bTdPV+ CnnHweOEIeI5HSxBe4C6V5Y+VqQnkwK7a244a4Tlu5XQdroTJcJSanna/lTpqjSBsx9ONUYISN8g LIdqvO399sA5JovgP3E= ) helios.nrel.GOV. 3600 IN RRSIG ( A 7 3 3600 20190823222638 20190819221927 28172 nrel.gov. HcDOxYXSUMjy/2+NQtOxmjIWcHv+D3riDm6QeB0n0r6sarCEkeCtLdkWSaYdDIEpF5rNAUIdU9ua +Kce/FuBwixGhGuzejkZY4L4RYJAen3oSoTVSVvTgUwk46KriXfFmhey+dh2HLdmSpkDYf1elok0 vWP+EV8nLKXdol/rEmI= ) helios.nrel.GOV. 3600 IN RRSIG ( A 7 3 3600 20190823222638 20190819221927 44762 nrel.gov. c0VO0LIJU4toTIj/mHoi7X/5vtQ5E3CnLaDFEmQu2mWGofoX5Z0BTGJLAzTJtVje17SPkcoX6lkj Tkjzr5PxeG1/+u3Sc8QEpdbKT2JABYNwOZK/Z/PWulnQ9yV71+FiQSyzkInBzT4DYctpX+W4mVav 8C3P66gX7XA9qGjwOYo= ) helios.nrel.GOV. 3600 IN RRSIG ( AAAA 7 3 3600 20190824021609 20190820015718 28172 nrel.gov. XJ61e9NPGod3LlNhN6c7xWkiD08wqnFTSKGM30m2X90IBQ9b2n6QZAKT0u7eYuWTb767vrbVdbo9 neXR/pDqx6VS0sv+svymRekgAxHySVB+3DiyP3mouxnVeBVt4jtw6+udphmyBx6mWt4/PeF2wge0 a1Od719QW9Tb3MGJlPM= ) helios.nrel.GOV. 3600 IN RRSIG ( AAAA 7 3 3600 20190824021609 20190820015718 44762 nrel.gov. utVgLnHqMgFFWHYJaD83TztdS6IRLauYWieWZz8vUz8G5m7Kn8hMPf9DKlYeNCzZ6kOnJypdqnWS sn8xmzIfAT5kofB3MwvT+fGrbVGHl8EM1oDW/mGJwWQxPk4xV8wL+Ez045OXLRbkeX7hTPNHqm8B ZGlGwozE+izunCx0vKE= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to phaeton.nrel.GOV for ENERGYSAVER.GOV/SOA
	Received 2339 bytes from 192.174.58.253
	;; Answer received from 192.174.58.253 (2339 bytes) ;; HEADER SECTION ;; id = 47379 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 7 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ENERGYSAVER.GOV. IN SOA ;; ANSWER SECTION (3 records) ENERGYSAVER.GOV. 3600 IN SOA ( ns0.nrel.GOV. postmaster.nrel.GOV. 8588 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) ENERGYSAVER.GOV. 3600 IN RRSIG ( SOA 7 2 3600 20190824075241 20190820065241 14525 energysaver.gov. r/5t3rtWrdI3LCf3HJ+04XoSiWzfEEnERRYID1tUyRsVH0UpodefBOfvUehW6hkJYp2PAIqXRtDM LYUjD8ps6c6XNLuya8Ysiszy6LYZ78wJGArwRiXSXGN5qe1k6vsBM5fIAuzKw/dM6HqPtBtWaRFA xvi8zj2LBb7aBiS+h0g= ) energysaver.gov. 3600 IN RRSIG ( SOA 7 2 3600 20190824075241 20190820065241 63977 energysaver.gov. ew8juEFMsyqKmbUMb/RhLlRkWoNjDLHEM9PtPtbWhoM5B6LjE1ZnblWhYDS36SewhCBrqW7EJosP PIgzub3Qf1+XbHPXUu5cyNe4MAslqnCv1SI++Ubs4Va1BJXMvKoEzpE9zG63Dsc+yzDbAMamjvpz HiS8YTfoEB+Vb2F644I= ) ;; AUTHORITY SECTION (7 records) energysaver.gov. 3600 IN NS adns1.es.net. energysaver.gov. 3600 IN NS adns2.es.net. energysaver.gov. 3600 IN NS ns1.es.net. energysaver.gov. 3600 IN NS phaeton.nrel.GOV. energysaver.gov. 3600 IN NS helios.nrel.GOV. energysaver.gov. 3600 IN RRSIG ( NS 7 2 3600 20190824072910 20190820065241 14525 energysaver.gov. tenL07Sd2ZaZJ/kHKr67epXNfbmCnmM+j48mqd3Lfl2Tb2CijGGJgtrIFinbLpIALkFDpBVoYr54 7Al3wA4zBc2njeEkCnleyD4KsYY86cgHm4V1Ol9SVYANVdLX5vcGMwyEVqm/JJFlHaMOWgcPX+gg 9y07EBbjO647Ppdw+vY= ) energysaver.gov. 3600 IN RRSIG ( NS 7 2 3600 20190824072910 20190820065241 63977 energysaver.gov. WRudQWsGfLmkYwJEpUsbiVeW50Mq/DX5Kl7hbkGxtNsws8mIn7ChtaF2peK/ANBv+lBa50fPZHC6 ZreVjABMK49+VhtmJNIjjcveMOSxpgMHLekFcYd48QSvz/fn+Esnrl9YXJjnlbRBejpm3Bg1IY2n ibFEbj12R7teLAOB9ME= ) ;; ADDITIONAL SECTION (13 records) phaeton.nrel.GOV. 3600 IN A 192.174.58.253 phaeton.nrel.GOV. 3600 IN AAAA 2620:d0:8000:3::21 helios.nrel.GOV. 3600 IN A 192.174.58.2 helios.nrel.GOV. 3600 IN AAAA 2620:d0:8000:3::20 phaeton.nrel.GOV. 3600 IN RRSIG ( A 7 3 3600 20190823152210 20190819144911 28172 nrel.gov. CcJCpFERQ5AJhFTTrNA7Pc4TEYMGH5jnpGZOTiXbaunSRvahaVvIcZYTH2SjzcLjekhF40cpei1Y cWc/ACXumRVWL6+ZZQioHas+fRCuUmXwG8GG2MnymXyi6ncEGzuVW1BCbKhgEHEabvKwkN6CTIBL i951XjcbzUpyFzbP3SE= ) phaeton.nrel.GOV. 3600 IN RRSIG ( A 7 3 3600 20190823152210 20190819144911 44762 nrel.gov. LigIh9h0FeuLLVEYraKWF92OjSpZt9iF3uLvy7Cl/NeBPn7RhahiYhl/hvV8QZfbkKCti5IPX0fz SLrS8oAcI1G5u9zwn4/kSG6oVbwjGhyyK3VxtmiXrF6Qjgg8PvVkQbPmYrUWnziMBtTlcrYJoSJq zx/mIhllF3Ed+6ExerE= ) phaeton.nrel.GOV. 3600 IN RRSIG ( AAAA 7 3 3600 20190824061557 20190820053846 28172 nrel.gov. 2Kib8DR8ZmsNpvoNyaGthEGi0ArvCWwJmFEiN8M47/xzrPeEfsKe7ruKscG1WdLRXaHT8jDij7y1 mtC1uDrU/5TNaRorHyUvu91K5kwpvpyN2jGdaoGvb7XocXIuvMo1sWNfFsyQYAniI2xKDKz9M7Le 1/sqYE+Q2AHOZltwnPE= ) phaeton.nrel.GOV. 3600 IN RRSIG ( AAAA 7 3 3600 20190824061557 20190820053846 44762 nrel.gov. UDCtPhbOQetTr4bVm+R8D8a4eS4Y/ZbluuVSGLsvb39WyAnI+GVSuLLWMypjQLpbUSfCL/bTdPV+ CnnHweOEIeI5HSxBe4C6V5Y+VqQnkwK7a244a4Tlu5XQdroTJcJSanna/lTpqjSBsx9ONUYISN8g LIdqvO399sA5JovgP3E= ) helios.nrel.GOV. 3600 IN RRSIG ( A 7 3 3600 20190823222638 20190819221927 28172 nrel.gov. HcDOxYXSUMjy/2+NQtOxmjIWcHv+D3riDm6QeB0n0r6sarCEkeCtLdkWSaYdDIEpF5rNAUIdU9ua +Kce/FuBwixGhGuzejkZY4L4RYJAen3oSoTVSVvTgUwk46KriXfFmhey+dh2HLdmSpkDYf1elok0 vWP+EV8nLKXdol/rEmI= ) helios.nrel.GOV. 3600 IN RRSIG ( A 7 3 3600 20190823222638 20190819221927 44762 nrel.gov. c0VO0LIJU4toTIj/mHoi7X/5vtQ5E3CnLaDFEmQu2mWGofoX5Z0BTGJLAzTJtVje17SPkcoX6lkj Tkjzr5PxeG1/+u3Sc8QEpdbKT2JABYNwOZK/Z/PWulnQ9yV71+FiQSyzkInBzT4DYctpX+W4mVav 8C3P66gX7XA9qGjwOYo= ) helios.nrel.GOV. 3600 IN RRSIG ( AAAA 7 3 3600 20190824021609 20190820015718 28172 nrel.gov. XJ61e9NPGod3LlNhN6c7xWkiD08wqnFTSKGM30m2X90IBQ9b2n6QZAKT0u7eYuWTb767vrbVdbo9 neXR/pDqx6VS0sv+svymRekgAxHySVB+3DiyP3mouxnVeBVt4jtw6+udphmyBx6mWt4/PeF2wge0 a1Od719QW9Tb3MGJlPM= ) helios.nrel.GOV. 3600 IN RRSIG ( AAAA 7 3 3600 20190824021609 20190820015718 44762 nrel.gov. utVgLnHqMgFFWHYJaD83TztdS6IRLauYWieWZz8vUz8G5m7Kn8hMPf9DKlYeNCzZ6kOnJypdqnWS sn8xmzIfAT5kofB3MwvT+fGrbVGHl8EM1oDW/mGJwWQxPk4xV8wL+Ez045OXLRbkeX7hTPNHqm8B ZGlGwozE+izunCx0vKE= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to helios.nrel.GOV for ENERGYSAVER.GOV/A
	Error querying helios.nrel.GOV/2620:d0:8000:3:0:0:0:20 for ENERGYSAVER.GOV/A: 'IPv6 transport disabled'
	Received 887 bytes from 192.174.58.2
	;; Answer received from 192.174.58.2 (887 bytes) ;; HEADER SECTION ;; id = 9660 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ENERGYSAVER.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) ENERGYSAVER.GOV. 900 IN SOA ( ns0.nrel.GOV. postmaster.nrel.GOV. 8588 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) ENERGYSAVER.GOV. 900 IN RRSIG ( SOA 7 2 3600 20190824075241 20190820065241 14525 energysaver.gov. r/5t3rtWrdI3LCf3HJ+04XoSiWzfEEnERRYID1tUyRsVH0UpodefBOfvUehW6hkJYp2PAIqXRtDM LYUjD8ps6c6XNLuya8Ysiszy6LYZ78wJGArwRiXSXGN5qe1k6vsBM5fIAuzKw/dM6HqPtBtWaRFA xvi8zj2LBb7aBiS+h0g= ) energysaver.gov. 900 IN RRSIG ( SOA 7 2 3600 20190824075241 20190820065241 63977 energysaver.gov. ew8juEFMsyqKmbUMb/RhLlRkWoNjDLHEM9PtPtbWhoM5B6LjE1ZnblWhYDS36SewhCBrqW7EJosP PIgzub3Qf1+XbHPXUu5cyNe4MAslqnCv1SI++Ubs4Va1BJXMvKoEzpE9zG63Dsc+yzDbAMamjvpz HiS8YTfoEB+Vb2F644I= ) VQAI7AIFKQ14NED08DA6092N9FFA70E3.energysaver.gov. 900 IN NSEC3 ( 1 0 10 92b339b6c8e173 1ta86nbucptgapl1itqipdug5jbvlcef NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) VQAI7AIFKQ14NED08DA6092N9FFA70E3.energysaver.gov. 900 IN RRSIG ( NSEC3 7 3 900 20190824045154 20190820044249 14525 energysaver.gov. F+ghDTdnM/eCPDtCjrAAkn9/jqP4TsLCr+LtM+6itEzaTzFWYUv9lEP8VyEIvvj5wtQ3HTjFnEU0 5Uc2HrvWMOHzZLH+kXFipr4KnVIkIDd33OpNygKv8kPe7PDBBBHkfggU3H+fUtOfhiycpSqYFOTe xIOZh5Mwu8u0/wpk2Zg= ) VQAI7AIFKQ14NED08DA6092N9FFA70E3.energysaver.gov. 900 IN RRSIG ( NSEC3 7 3 900 20190824045154 20190820044249 63977 energysaver.gov. qBqUFVj9imC4INiD24PCtShdHwljVukqqtc3CnjQ6vpghGrKU1P3S1M10FICgEKC5miDdgWscPvK solBjYMck3J4kWC/CLWBp1DHQUqhGRF+Opp/twszRtZSFVKpGGYsyxXidVvXfxQH8+rTCghLC1Wv 5mpVWWs8FH8Sk99+K3s= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`ENERGYSAVER.GOV. 900 IN RRSIG ( SOA 7 2 3600 20190824075241 20190820065241 14525 energysaver.gov. r/5t3rtWrdI3LCf3HJ+04XoSiWzfEEnERRYID1tUyRsVH0UpodefBOfvUehW6hkJYp2PAIqXRtDM LYUjD8ps6c6XNLuya8Ysiszy6LYZ78wJGArwRiXSXGN5qe1k6vsBM5fIAuzKw/dM6HqPtBtWaRFA xvi8zj2LBb7aBiS+h0g= )`
	`energysaver.gov. 900 IN RRSIG ( SOA 7 2 3600 20190824075241 20190820065241 63977 energysaver.gov. ew8juEFMsyqKmbUMb/RhLlRkWoNjDLHEM9PtPtbWhoM5B6LjE1ZnblWhYDS36SewhCBrqW7EJosP PIgzub3Qf1+XbHPXUu5cyNe4MAslqnCv1SI++Ubs4Va1BJXMvKoEzpE9zG63Dsc+yzDbAMamjvpz HiS8YTfoEB+Vb2F644I= )`
	RRSIG=14525 and DNSKEY=14525 verifies the SOA RRset
	RRSIG=63977 and DNSKEY=63977 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test ENERGYSAVER.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: