DNSSEC Analyzer - EVALUATION.GOV

Domain Name:

Time: 2021-09-22 11:29:48 UTC, NTP stratum 16

Analyzing DNSSEC problems for EVALUATION.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to k.root-servers.net for ./DNSKEY
	Received 1139 bytes from 193.0.14.129
	;; Response received from 193.0.14.129 (1139 octets) ;; HEADER SECTION ;; id = 48175 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbDEyqdwu2fqAwinPCFwALUCWfYYaLrNhnOrMxDorLBYMipEE1btlK1XnigTRMeb0YQ8/LCo pb3CN73hYDhCHFsNk+GtukBB+gWLcg+2FZXbhLXIheQm8x2VfOHy2yYQG+18wjx3HY9Mj/ZEhXbZ NrDMvpFKKVihWXa0/cHNg4ZcIHD9KkMlKzK+my1K/vz8fq5cFCFOu7wgM+kKbOikdcRBm7Uf/wRX ZItFg2uhUijUb56gEN8uCUgmuEw6wQ5ZBuR7UT/FLyyAUeAH87oxF4im2DXK6J+JA7IAs2UHJ16u TqvdserUU8NIosislaXIZCvz+NTDb3SJcxs6bvCikeU= ) ; Key ID = 26838 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAY+oUaY0b7Z45vRD1ef/GykZqgHJtfdzRcnQNvGVQAqlH22QChtG+n1EMugw7T/6uDBAGlRI kXASdtHXhxStb9lPpyQe5/JIuMIlg+NhxKxEJ5e3J9SSPCavvDhH/BPrBCJwn8b68QAWRjVW6Rgd x63pUm7lfsimiWGMfplHNvcZWgVbKA9OI2o2lU8rT8n7zuwtlZPNpDLSI5GzrJgIiKR2Id16fmAg TJBOw14Xye/t4/BxTdxeMiiVFwA4KUV2VeqspHKSHFOz+lUIIqBRknEmYpSvnxnyi0n1n4tGnGP8 z6ZwRACi1Rw0nCu7BGOU9M6LpInRoW/W4KXLODr6xqU= ) ; Key ID = 14748 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20211010000000 20210919000000 20326 . Sr5anUGJStj+Ve2zr83JMQrEmbkf88Ri52nFderay/sSIad8vWAxiPoxdaJ1iWkyhJSWeOR0Sw4l RsphPIj54s3yqpPfXUg8rPoIVeYYYkTFO5W5BF3gLsMfu2ZHaHLpNOsy6GCgPwXCxq49lJ/xcLyS 0tjGkSH8IW3sAT15sXDhLkMjMISJQ776Z2LSonXcNvNeGrkXuzCmcOwdduWnaSFsmKoPWQbb3a4k ANk0I0GRtDIp8XApb6WnNAmKTPRaH/VoX9M6b8CZyp5TuAbNPnW8nVFaCRMpnWCWYYOUhLm7jYEy NSr+V+/ygD+OUyrx4R/WzIGSHaiHGQB1KU4eyw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbDEyqdwu2fqAwinPCFwALUCWfYYaLrNhnOrMxDorLBYMipEE1btlK1XnigTRMeb0YQ8/LCo pb3CN73hYDhCHFsNk+GtukBB+gWLcg+2FZXbhLXIheQm8x2VfOHy2yYQG+18wjx3HY9Mj/ZEhXbZ NrDMvpFKKVihWXa0/cHNg4ZcIHD9KkMlKzK+my1K/vz8fq5cFCFOu7wgM+kKbOikdcRBm7Uf/wRX ZItFg2uhUijUb56gEN8uCUgmuEw6wQ5ZBuR7UT/FLyyAUeAH87oxF4im2DXK6J+JA7IAs2UHJ16u TqvdserUU8NIosislaXIZCvz+NTDb3SJcxs6bvCikeU= ) ; Key ID = 26838`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAY+oUaY0b7Z45vRD1ef/GykZqgHJtfdzRcnQNvGVQAqlH22QChtG+n1EMugw7T/6uDBAGlRI kXASdtHXhxStb9lPpyQe5/JIuMIlg+NhxKxEJ5e3J9SSPCavvDhH/BPrBCJwn8b68QAWRjVW6Rgd x63pUm7lfsimiWGMfplHNvcZWgVbKA9OI2o2lU8rT8n7zuwtlZPNpDLSI5GzrJgIiKR2Id16fmAg TJBOw14Xye/t4/BxTdxeMiiVFwA4KUV2VeqspHKSHFOz+lUIIqBRknEmYpSvnxnyi0n1n4tGnGP8 z6ZwRACi1Rw0nCu7BGOU9M6LpInRoW/W4KXLODr6xqU= ) ; Key ID = 14748`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20211010000000 20210919000000 20326 . Sr5anUGJStj+Ve2zr83JMQrEmbkf88Ri52nFderay/sSIad8vWAxiPoxdaJ1iWkyhJSWeOR0Sw4l RsphPIj54s3yqpPfXUg8rPoIVeYYYkTFO5W5BF3gLsMfu2ZHaHLpNOsy6GCgPwXCxq49lJ/xcLyS 0tjGkSH8IW3sAT15sXDhLkMjMISJQ776Z2LSonXcNvNeGrkXuzCmcOwdduWnaSFsmKoPWQbb3a4k ANk0I0GRtDIp8XApb6WnNAmKTPRaH/VoX9M6b8CZyp5TuAbNPnW8nVFaCRMpnWCWYYOUhLm7jYEy NSr+V+/ygD+OUyrx4R/WzIGSHaiHGQB1KU4eyw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=26838 is now in the chain-of-trust
	DNSKEY=14748 is now in the chain-of-trust
	Query to f.root-servers.net for EVALUATION.GOV/A
	Received 633 bytes from 192.5.5.241
	;; Response received from 192.5.5.241 (633 octets) ;; HEADER SECTION ;; id = 35842 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; EVALUATION.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20211005050000 20210922040000 26838 . Zc1mguJ/cqTgkkKefoGKiSj7fdajsOQtEqmUO1FUmqSjcT2SOOy+3jTNd7NB3jaCIF/oT/yOu+Gc 59cKUVhc1AOAA5ECQeFC/e5gBTQeSMYAR5vdVLMmQym5fxdk5GweEsqiW8Q8bDOiTumjokkDV250 LicBacW/p/gI208/c8R+cfgDZyGNImJ+/c3OA23sqJpn0j6KBw7m64lT6R6KO9bWcAVaFwefr77c OO1CJgJFnKd5uN9zXV4rjI4XPoEX5Jxo4wZfWKU9yO0gaaIcX1WIvaB9b9aYK21tz8ORGiAGuWFj GBHIY+md96nzH2IzNkqg1URmcDUDfhpi5D/LdA== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to j.root-servers.net for GOV/DNSKEY
	Received 622 bytes from 192.58.128.30
	;; Response received from 192.58.128.30 (622 octets) ;; HEADER SECTION ;; id = 28505 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20211005050000 20210922040000 26838 . Zc1mguJ/cqTgkkKefoGKiSj7fdajsOQtEqmUO1FUmqSjcT2SOOy+3jTNd7NB3jaCIF/oT/yOu+Gc 59cKUVhc1AOAA5ECQeFC/e5gBTQeSMYAR5vdVLMmQym5fxdk5GweEsqiW8Q8bDOiTumjokkDV250 LicBacW/p/gI208/c8R+cfgDZyGNImJ+/c3OA23sqJpn0j6KBw7m64lT6R6KO9bWcAVaFwefr77c OO1CJgJFnKd5uN9zXV4rjI4XPoEX5Jxo4wZfWKU9yO0gaaIcX1WIvaB9b9aYK21tz8ORGiAGuWFj GBHIY+md96nzH2IzNkqg1URmcDUDfhpi5D/LdA== ) ;; ADDITIONAL SECTION (9 records) b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to h.root-servers.net for GOV/DS
	Received 367 bytes from 198.97.190.53
	;; Response received from 198.97.190.53 (367 octets) ;; HEADER SECTION ;; id = 33168 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20211005050000 20210922040000 26838 . Zc1mguJ/cqTgkkKefoGKiSj7fdajsOQtEqmUO1FUmqSjcT2SOOy+3jTNd7NB3jaCIF/oT/yOu+Gc 59cKUVhc1AOAA5ECQeFC/e5gBTQeSMYAR5vdVLMmQym5fxdk5GweEsqiW8Q8bDOiTumjokkDV250 LicBacW/p/gI208/c8R+cfgDZyGNImJ+/c3OA23sqJpn0j6KBw7m64lT6R6KO9bWcAVaFwefr77c OO1CJgJFnKd5uN9zXV4rjI4XPoEX5Jxo4wZfWKU9yO0gaaIcX1WIvaB9b9aYK21tz8ORGiAGuWFj GBHIY+md96nzH2IzNkqg1URmcDUDfhpi5D/LdA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20211005050000 20210922040000 26838 . Zc1mguJ/cqTgkkKefoGKiSj7fdajsOQtEqmUO1FUmqSjcT2SOOy+3jTNd7NB3jaCIF/oT/yOu+Gc 59cKUVhc1AOAA5ECQeFC/e5gBTQeSMYAR5vdVLMmQym5fxdk5GweEsqiW8Q8bDOiTumjokkDV250 LicBacW/p/gI208/c8R+cfgDZyGNImJ+/c3OA23sqJpn0j6KBw7m64lT6R6KO9bWcAVaFwefr77c OO1CJgJFnKd5uN9zXV4rjI4XPoEX5Jxo4wZfWKU9yO0gaaIcX1WIvaB9b9aYK21tz8ORGiAGuWFj GBHIY+md96nzH2IzNkqg1URmcDUDfhpi5D/LdA== )`
	RRSIG=26838 and DNSKEY=26838 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to a.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 69.36.157.30
	;; Response received from 69.36.157.30 (777 octets) ;; HEADER SECTION ;; id = 37099 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAdfjPT+uxmm9v6KKrQxtXTaa8msI9el/N3dzk2ReFJban378/fN3Pxc0DDq6zw6iBkTdzTsN NDtRvTbdK7uYfrSiPrZ8sPd2jeugzdNw7zpGzW8+cGmjA+0lETYgbE+0ivR+NDheYbcM+zOW9M8f +qTaer6tmgWxqLFNI32TP6RdFr/yfMCTDoEe+JuedI2yi0X3zVDMqV/wnedEeKrWsvc= ) ; Key ID = 57735 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20211001190254 20210916185754 7698 gov. MqQ7a3miv210c0eU01hhTvQxhNgn1alx1sm3ma1NOY0U1k6uY5IKrCYjLHvlUIsqbSijtXwhbDal Omy6osEEDGBXuQL0zIHeVZhDLXINyH/FWdp99ctgG2P3o+xpkt5oDBLjwnr2WnQIrYb4rI/Yoexl ghPQFBVbTvxDbDjL6UY8ZCdLGvOiqL15i1wg4tf0GJwoFgtgLrPSZ36AuT4K64f+LzsW8u0fcKt8 fC8Mjp+DCeFj/lWpJdE34pRl1YV+w5yhXWunXBZFhYsXeBc9Hqv//BV5HE7bj3Lo6Xq5lHjTm1OZ /tyQRvctosbKce3vDn3Yo+BNCmLjebLL7tg9YQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAdfjPT+uxmm9v6KKrQxtXTaa8msI9el/N3dzk2ReFJban378/fN3Pxc0DDq6zw6iBkTdzTsN NDtRvTbdK7uYfrSiPrZ8sPd2jeugzdNw7zpGzW8+cGmjA+0lETYgbE+0ivR+NDheYbcM+zOW9M8f +qTaer6tmgWxqLFNI32TP6RdFr/yfMCTDoEe+JuedI2yi0X3zVDMqV/wnedEeKrWsvc= ) ; Key ID = 57735`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20211001190254 20210916185754 7698 gov. MqQ7a3miv210c0eU01hhTvQxhNgn1alx1sm3ma1NOY0U1k6uY5IKrCYjLHvlUIsqbSijtXwhbDal Omy6osEEDGBXuQL0zIHeVZhDLXINyH/FWdp99ctgG2P3o+xpkt5oDBLjwnr2WnQIrYb4rI/Yoexl ghPQFBVbTvxDbDjL6UY8ZCdLGvOiqL15i1wg4tf0GJwoFgtgLrPSZ36AuT4K64f+LzsW8u0fcKt8 fC8Mjp+DCeFj/lWpJdE34pRl1YV+w5yhXWunXBZFhYsXeBc9Hqv//BV5HE7bj3Lo6Xq5lHjTm1OZ /tyQRvctosbKce3vDn3Yo+BNCmLjebLL7tg9YQ== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=57735 is now in the chain-of-trust
	Query to b.gov-servers.net for EVALUATION.GOV/A
	Received 552 bytes from 209.112.123.30
	;; Response received from 209.112.123.30 (552 octets) ;; HEADER SECTION ;; id = 8268 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 8 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; EVALUATION.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) EVALUATION.GOV. 86400 IN NS dns5.gsa.GOV. EVALUATION.GOV. 86400 IN NS dns3.gsa.GOV. EVALUATION.GOV. 86400 IN NS dns2.gsa.GOV. EVALUATION.GOV. 86400 IN NS dns4.gsa.GOV. EVALUATION.GOV. 86400 IN NS dns.gsa.GOV. 477O4O9IM4H09O3E43JSPDMBL7STPE3S.GOV. 86400 IN NSEC3 ( 1 0 8 4c44934802d3 478t9rgr0h4j2tf568ctqt6h3d7jt0rh NS ) 477O4O9IM4H09O3E43JSPDMBL7STPE3S.GOV. 86400 IN RRSIG ( NSEC3 8 2 86400 20210929034048 20210922034048 57735 gov. apOGQP6C8A2mjc+G9liFV8/tbX0nF3ZJFbQxf/SnRDxeXau9sgmVl+IZnLz1wemGoQydSoXMRtnt kZxxlU8F/qIuZeqj/8U5URoD8jLGZngaq5kBaEeZC8rxngcRTmXKu9+xbhBR9KGbNgJROEbUIKvm pS43I3JTn1yPqkftWqfx4mA+ghYlThOBi5FRMKD0WkffUUMuo3z/XSjsZHZPLQ== ) ;; ADDITIONAL SECTION (8 records) dns5.gsa.GOV. 86400 IN A 76.223.9.162 dns3.gsa.GOV. 86400 IN A 13.248.144.182 dns2.gsa.GOV. 86400 IN A 159.142.150.68 dns4.gsa.GOV. 86400 IN A 13.248.149.147 dns4.gsa.GOV. 86400 IN AAAA 2600:1f14:653:bb00:1:: dns.gsa.GOV. 86400 IN A 13.248.142.184 dns.gsa.GOV. 86400 IN AAAA 2600:1f16:8f2:d500:1:: ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.gov-servers.net for EVALUATION.GOV/DNSKEY
	Received 552 bytes from 69.36.153.30
	;; Response received from 69.36.153.30 (552 octets) ;; HEADER SECTION ;; id = 39249 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 8 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; EVALUATION.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) EVALUATION.GOV. 86400 IN NS dns5.gsa.GOV. EVALUATION.GOV. 86400 IN NS dns3.gsa.GOV. EVALUATION.GOV. 86400 IN NS dns2.gsa.GOV. EVALUATION.GOV. 86400 IN NS dns4.gsa.GOV. EVALUATION.GOV. 86400 IN NS dns.gsa.GOV. 477O4O9IM4H09O3E43JSPDMBL7STPE3S.GOV. 86400 IN NSEC3 ( 1 0 8 4c44934802d3 478t9rgr0h4j2tf568ctqt6h3d7jt0rh NS ) 477O4O9IM4H09O3E43JSPDMBL7STPE3S.GOV. 86400 IN RRSIG ( NSEC3 8 2 86400 20210929034048 20210922034048 57735 gov. apOGQP6C8A2mjc+G9liFV8/tbX0nF3ZJFbQxf/SnRDxeXau9sgmVl+IZnLz1wemGoQydSoXMRtnt kZxxlU8F/qIuZeqj/8U5URoD8jLGZngaq5kBaEeZC8rxngcRTmXKu9+xbhBR9KGbNgJROEbUIKvm pS43I3JTn1yPqkftWqfx4mA+ghYlThOBi5FRMKD0WkffUUMuo3z/XSjsZHZPLQ== ) ;; ADDITIONAL SECTION (8 records) dns5.gsa.GOV. 86400 IN A 76.223.9.162 dns3.gsa.GOV. 86400 IN A 13.248.144.182 dns2.gsa.GOV. 86400 IN A 159.142.150.68 dns4.gsa.GOV. 86400 IN A 13.248.149.147 dns4.gsa.GOV. 86400 IN AAAA 2600:1f14:653:bb00:1:: dns.gsa.GOV. 86400 IN A 13.248.142.184 dns.gsa.GOV. 86400 IN AAAA 2600:1f16:8f2:d500:1:: ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone EVALUATION.GOV

EVALUATION.GOV

	Checking DS between GOV and EVALUATION.GOV
	Query to b.gov-servers.net for EVALUATION.GOV/DS
	Received 587 bytes from 209.112.123.30
	;; Response received from 209.112.123.30 (587 octets) ;; HEADER SECTION ;; id = 27744 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; EVALUATION.GOV. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) GOV. 86400 IN SOA ( a.gov-servers.net. info.verisign-grs.com. 1632310070 ;serial 3600 ;refresh 900 ;retry 1814400 ;expire 86400 ;minimum ) GOV. 86400 IN RRSIG ( SOA 8 1 86400 20210929091750 20210922091750 57735 gov. AzJjdHjOcQh7aEWdNONICtUZsOy7znjJ4kmaUpuIXwMwCax37aUY1GgciPa/9kYYxAVlcrRf7tFW 7T8osgzLBqGrRcxnOQk1t80/a8bi1aRwdkxE2rX4mfzFQPTpSoc12pSpZnFGH2Gtl9mwybVy6yeO h9HtrdUb4aut78KQ/9a0rbIahDehWtpeYZ7ucp1S6FEgo3ArkMl5y+8WtbZLlw== ) 477O4O9IM4H09O3E43JSPDMBL7STPE3S.GOV. 86400 IN NSEC3 ( 1 0 8 4c44934802d3 478t9rgr0h4j2tf568ctqt6h3d7jt0rh NS ) 477O4O9IM4H09O3E43JSPDMBL7STPE3S.GOV. 86400 IN RRSIG ( NSEC3 8 2 86400 20210929034048 20210922034048 57735 gov. apOGQP6C8A2mjc+G9liFV8/tbX0nF3ZJFbQxf/SnRDxeXau9sgmVl+IZnLz1wemGoQydSoXMRtnt kZxxlU8F/qIuZeqj/8U5URoD8jLGZngaq5kBaEeZC8rxngcRTmXKu9+xbhBR9KGbNgJROEbUIKvm pS43I3JTn1yPqkftWqfx4mA+ghYlThOBi5FRMKD0WkffUUMuo3z/XSjsZHZPLQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for EVALUATION.GOV in the GOV zone
	Query to dns5.gsa.GOV for EVALUATION.GOV/DNSKEY
	Received 701 bytes from 76.223.9.162
	;; Response received from 76.223.9.162 (701 octets) ;; HEADER SECTION ;; id = 43627 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; EVALUATION.GOV. IN DNSKEY ;; ANSWER SECTION (4 records) evaluation.gov. 10800 IN DNSKEY ( 257 3 8 AwEAAbbK1GNiozuJmpZPR9jEkmu5YGNIlm1TmhvPyTYY60HzXHuHRgCjrHVLXETcIxeWM/igfNHv Sn/PvXWmKx+hxKkGK/F/52zFznQpkqkmZvKXNQ53msIZpdIGJVDZSvJmH182prTtamydeAOiX9q4 65WYmKwBk8gWypzd36tKqQ9J ) ; Key ID = 47755 evaluation.gov. 10800 IN DNSKEY ( 256 3 8 AwEAAaQaI/M9pz4yJQYxrtO/49vKk4DBx3szXM9W6vmqrJBxU6b6Cd48IHsTBWSpgSxJ7YCVB0NW 5CIfAPMH1oI/X5WOXajlRXqEV05FmT5dAYhv3Md90f3vorGoh+BNQc4beiWyT4DBAQAxgygYElAP 345FNVeet1EddnWlWnyLGUch ) ; Key ID = 54304 evaluation.gov. 10800 IN RRSIG ( DNSKEY 8 2 10800 20211020202648 20210920202148 47755 evaluation.gov. eW7kFTEMhjC+i5JT/vyE6RDxJ5Rjc4d6g7jMV1tnQKfKKNTIbgsmWoedyLRe6qNNcJd9I0vLTz6k LqdQ+jZWNOe1mK9/DqsYjF1Ij/7GNU9vmSJcOJRS9VklUX5wsQp2lg8CLroZ4g+N1PKjM1HgEzlr qBNrfc2jtkQdZltfzoY= ) evaluation.gov. 10800 IN RRSIG ( DNSKEY 8 2 10800 20211020202648 20210920202148 54304 evaluation.gov. VKN6t+q1lvjD18bSaqswj1IXJewlUWRxEk6FBpE8j+6YloFijOdAknrLT5diG0XTh9Aw97BqPZNj QyIXXT0wq1X2Cz4kt9tvbi3bszMdBx88BPOhfBCGrw2W7widxkUHUsqrboxqnFpmx2OnlxUdrCpi xftsp5P6ZqzjBXjF/Kg= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for EVALUATION.GOV
	`evaluation.gov. 10800 IN DNSKEY ( 257 3 8 AwEAAbbK1GNiozuJmpZPR9jEkmu5YGNIlm1TmhvPyTYY60HzXHuHRgCjrHVLXETcIxeWM/igfNHv Sn/PvXWmKx+hxKkGK/F/52zFznQpkqkmZvKXNQ53msIZpdIGJVDZSvJmH182prTtamydeAOiX9q4 65WYmKwBk8gWypzd36tKqQ9J ) ; Key ID = 47755`
	`evaluation.gov. 10800 IN DNSKEY ( 256 3 8 AwEAAaQaI/M9pz4yJQYxrtO/49vKk4DBx3szXM9W6vmqrJBxU6b6Cd48IHsTBWSpgSxJ7YCVB0NW 5CIfAPMH1oI/X5WOXajlRXqEV05FmT5dAYhv3Md90f3vorGoh+BNQc4beiWyT4DBAQAxgygYElAP 345FNVeet1EddnWlWnyLGUch ) ; Key ID = 54304`
	Found 2 RRSIGs over DNSKEY RRset
	`evaluation.gov. 10800 IN RRSIG ( DNSKEY 8 2 10800 20211020202648 20210920202148 47755 evaluation.gov. eW7kFTEMhjC+i5JT/vyE6RDxJ5Rjc4d6g7jMV1tnQKfKKNTIbgsmWoedyLRe6qNNcJd9I0vLTz6k LqdQ+jZWNOe1mK9/DqsYjF1Ij/7GNU9vmSJcOJRS9VklUX5wsQp2lg8CLroZ4g+N1PKjM1HgEzlr qBNrfc2jtkQdZltfzoY= )`
	`evaluation.gov. 10800 IN RRSIG ( DNSKEY 8 2 10800 20211020202648 20210920202148 54304 evaluation.gov. VKN6t+q1lvjD18bSaqswj1IXJewlUWRxEk6FBpE8j+6YloFijOdAknrLT5diG0XTh9Aw97BqPZNj QyIXXT0wq1X2Cz4kt9tvbi3bszMdBx88BPOhfBCGrw2W7widxkUHUsqrboxqnFpmx2OnlxUdrCpi xftsp5P6ZqzjBXjF/Kg= )`
	RRSIG=47755 and DNSKEY=47755/SEP verifies the DNSKEY RRset
	RRSIG=54304 and DNSKEY=54304 verifies the DNSKEY RRset
	Query to dns2.gsa.GOV for EVALUATION.GOV/A
	Received 247 bytes from 159.142.150.68
	;; Response received from 159.142.150.68 (247 octets) ;; HEADER SECTION ;; id = 2682 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; EVALUATION.GOV. IN A ;; ANSWER SECTION (2 records) evaluation.gov. 10800 IN A 159.142.191.107 evaluation.gov. 10800 IN RRSIG ( A 8 2 10800 20211020202648 20210920202148 54304 evaluation.gov. DUz81HsiJi8xYGleYes38iiHkQluwhZ7mjhtpyAlhiCTEUFdRy0jMu22VpoxN8sM943AhEYcjv/3 NIdCsXI5JoJ0ijPJKlbnZ0UAMrP/J6U6djeTH9nFBg34S6SW+yATVQbrxpUyHCTVJbPT4hyLXTwU C6H09Et/oxuh63fDheM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns2.gsa.GOV is authoritative for EVALUATION.GOV
	Found RRSIG signed by evaluation.gov zone
	Query to dns4.gsa.GOV for EVALUATION.GOV/SOA
	Received 286 bytes from 13.248.149.147
	;; Response received from 13.248.149.147 (286 octets) ;; HEADER SECTION ;; id = 25675 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; EVALUATION.GOV. IN SOA ;; ANSWER SECTION (2 records) evaluation.gov. 10800 IN SOA ( dns.gsa.gov. hostmaster.gsa.gov. 651184009 ;serial 3600 ;refresh 180 ;retry 1209600 ;expire 3600 ;minimum ) evaluation.gov. 10800 IN RRSIG ( SOA 8 2 10800 20211020202648 20210920202148 54304 evaluation.gov. Fzvly1wQ6pNQ87FK8gF1HMgIESdaArLgaxAXzx8qpXe9TB0RJZuKi2pw0BOMV2ARrYLJ7/7PNJlC 8MOqgmOLmOLruXulFQrnWRTjYANmN1CuYARSnPNuwbeBwgj8HL+XnXXwHcVY/k2n1CoP4/+9izyE nE55lALZHZZwEFG55Sw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns.gsa.GOV for EVALUATION.GOV/SOA
	Received 286 bytes from 13.248.142.184
	;; Response received from 13.248.142.184 (286 octets) ;; HEADER SECTION ;; id = 30354 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; EVALUATION.GOV. IN SOA ;; ANSWER SECTION (2 records) evaluation.gov. 10800 IN SOA ( dns.gsa.gov. hostmaster.gsa.gov. 651184009 ;serial 3600 ;refresh 180 ;retry 1209600 ;expire 3600 ;minimum ) evaluation.gov. 10800 IN RRSIG ( SOA 8 2 10800 20211020202648 20210920202148 54304 evaluation.gov. Fzvly1wQ6pNQ87FK8gF1HMgIESdaArLgaxAXzx8qpXe9TB0RJZuKi2pw0BOMV2ARrYLJ7/7PNJlC 8MOqgmOLmOLruXulFQrnWRTjYANmN1CuYARSnPNuwbeBwgj8HL+XnXXwHcVY/k2n1CoP4/+9izyE nE55lALZHZZwEFG55Sw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns3.gsa.GOV for EVALUATION.GOV/SOA
	Received 286 bytes from 13.248.144.182
	;; Response received from 13.248.144.182 (286 octets) ;; HEADER SECTION ;; id = 46877 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; EVALUATION.GOV. IN SOA ;; ANSWER SECTION (2 records) evaluation.gov. 10800 IN SOA ( dns.gsa.gov. hostmaster.gsa.gov. 651184009 ;serial 3600 ;refresh 180 ;retry 1209600 ;expire 3600 ;minimum ) evaluation.gov. 10800 IN RRSIG ( SOA 8 2 10800 20211020202648 20210920202148 54304 evaluation.gov. Fzvly1wQ6pNQ87FK8gF1HMgIESdaArLgaxAXzx8qpXe9TB0RJZuKi2pw0BOMV2ARrYLJ7/7PNJlC 8MOqgmOLmOLruXulFQrnWRTjYANmN1CuYARSnPNuwbeBwgj8HL+XnXXwHcVY/k2n1CoP4/+9izyE nE55lALZHZZwEFG55Sw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns5.gsa.GOV for EVALUATION.GOV/SOA
	Received 286 bytes from 76.223.9.162
	;; Response received from 76.223.9.162 (286 octets) ;; HEADER SECTION ;; id = 45695 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; EVALUATION.GOV. IN SOA ;; ANSWER SECTION (2 records) evaluation.gov. 10800 IN SOA ( dns.gsa.gov. hostmaster.gsa.gov. 651184009 ;serial 3600 ;refresh 180 ;retry 1209600 ;expire 3600 ;minimum ) evaluation.gov. 10800 IN RRSIG ( SOA 8 2 10800 20211020202648 20210920202148 54304 evaluation.gov. Fzvly1wQ6pNQ87FK8gF1HMgIESdaArLgaxAXzx8qpXe9TB0RJZuKi2pw0BOMV2ARrYLJ7/7PNJlC 8MOqgmOLmOLruXulFQrnWRTjYANmN1CuYARSnPNuwbeBwgj8HL+XnXXwHcVY/k2n1CoP4/+9izyE nE55lALZHZZwEFG55Sw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns2.gsa.GOV for EVALUATION.GOV/A
	Received 247 bytes from 159.142.150.68
	;; Response received from 159.142.150.68 (247 octets) ;; HEADER SECTION ;; id = 35314 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; EVALUATION.GOV. IN A ;; ANSWER SECTION (2 records) evaluation.gov. 10800 IN A 159.142.191.107 evaluation.gov. 10800 IN RRSIG ( A 8 2 10800 20211020202648 20210920202148 54304 evaluation.gov. DUz81HsiJi8xYGleYes38iiHkQluwhZ7mjhtpyAlhiCTEUFdRy0jMu22VpoxN8sM943AhEYcjv/3 NIdCsXI5JoJ0ijPJKlbnZ0UAMrP/J6U6djeTH9nFBg34S6SW+yATVQbrxpUyHCTVJbPT4hyLXTwU C6H09Et/oxuh63fDheM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	EVALUATION.GOV A RR has value 159.142.191.107
	Found 1 RRSIGs over A RRset
	`evaluation.gov. 10800 IN RRSIG ( A 8 2 10800 20211020202648 20210920202148 54304 evaluation.gov. DUz81HsiJi8xYGleYes38iiHkQluwhZ7mjhtpyAlhiCTEUFdRy0jMu22VpoxN8sM943AhEYcjv/3 NIdCsXI5JoJ0ijPJKlbnZ0UAMrP/J6U6djeTH9nFBg34S6SW+yATVQbrxpUyHCTVJbPT4hyLXTwU C6H09Et/oxuh63fDheM= )`
	RRSIG=54304 and DNSKEY=54304 verifies the A RRset

EVALUATION.GOV

	Query to dns3.gsa.GOV for EVALUATION.GOV/A
	Received 247 bytes from 13.248.144.182
	;; Response received from 13.248.144.182 (247 octets) ;; HEADER SECTION ;; id = 45393 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; EVALUATION.GOV. IN A ;; ANSWER SECTION (2 records) evaluation.gov. 10800 IN A 159.142.191.107 evaluation.gov. 10800 IN RRSIG ( A 8 2 10800 20211020202648 20210920202148 54304 evaluation.gov. DUz81HsiJi8xYGleYes38iiHkQluwhZ7mjhtpyAlhiCTEUFdRy0jMu22VpoxN8sM943AhEYcjv/3 NIdCsXI5JoJ0ijPJKlbnZ0UAMrP/J6U6djeTH9nFBg34S6SW+yATVQbrxpUyHCTVJbPT4hyLXTwU C6H09Et/oxuh63fDheM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns3.gsa.GOV is authoritative for EVALUATION.GOV
	Found RRSIG signed by evaluation.gov zone
	Query to dns3.gsa.GOV for EVALUATION.GOV/A
	Received 247 bytes from 13.248.144.182
	;; Response received from 13.248.144.182 (247 octets) ;; HEADER SECTION ;; id = 43757 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; EVALUATION.GOV. IN A ;; ANSWER SECTION (2 records) evaluation.gov. 10800 IN A 159.142.191.107 evaluation.gov. 10800 IN RRSIG ( A 8 2 10800 20211020202648 20210920202148 54304 evaluation.gov. DUz81HsiJi8xYGleYes38iiHkQluwhZ7mjhtpyAlhiCTEUFdRy0jMu22VpoxN8sM943AhEYcjv/3 NIdCsXI5JoJ0ijPJKlbnZ0UAMrP/J6U6djeTH9nFBg34S6SW+yATVQbrxpUyHCTVJbPT4hyLXTwU C6H09Et/oxuh63fDheM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	EVALUATION.GOV A RR has value 159.142.191.107
	Found 1 RRSIGs over A RRset
	`evaluation.gov. 10800 IN RRSIG ( A 8 2 10800 20211020202648 20210920202148 54304 evaluation.gov. DUz81HsiJi8xYGleYes38iiHkQluwhZ7mjhtpyAlhiCTEUFdRy0jMu22VpoxN8sM943AhEYcjv/3 NIdCsXI5JoJ0ijPJKlbnZ0UAMrP/J6U6djeTH9nFBg34S6SW+yATVQbrxpUyHCTVJbPT4hyLXTwU C6H09Et/oxuh63fDheM= )`
	RRSIG=54304 and DNSKEY=54304 verifies the A RRset

EVALUATION.GOV

	Query to dns4.gsa.GOV for EVALUATION.GOV/A
	Received 247 bytes from 13.248.149.147
	;; Response received from 13.248.149.147 (247 octets) ;; HEADER SECTION ;; id = 57176 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; EVALUATION.GOV. IN A ;; ANSWER SECTION (2 records) evaluation.gov. 10800 IN A 159.142.191.107 evaluation.gov. 10800 IN RRSIG ( A 8 2 10800 20211020202648 20210920202148 54304 evaluation.gov. DUz81HsiJi8xYGleYes38iiHkQluwhZ7mjhtpyAlhiCTEUFdRy0jMu22VpoxN8sM943AhEYcjv/3 NIdCsXI5JoJ0ijPJKlbnZ0UAMrP/J6U6djeTH9nFBg34S6SW+yATVQbrxpUyHCTVJbPT4hyLXTwU C6H09Et/oxuh63fDheM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns4.gsa.GOV is authoritative for EVALUATION.GOV
	Found RRSIG signed by evaluation.gov zone
	Query to dns4.gsa.GOV for EVALUATION.GOV/A
	Received 247 bytes from 13.248.149.147
	;; Response received from 13.248.149.147 (247 octets) ;; HEADER SECTION ;; id = 4237 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; EVALUATION.GOV. IN A ;; ANSWER SECTION (2 records) evaluation.gov. 10800 IN A 159.142.191.107 evaluation.gov. 10800 IN RRSIG ( A 8 2 10800 20211020202648 20210920202148 54304 evaluation.gov. DUz81HsiJi8xYGleYes38iiHkQluwhZ7mjhtpyAlhiCTEUFdRy0jMu22VpoxN8sM943AhEYcjv/3 NIdCsXI5JoJ0ijPJKlbnZ0UAMrP/J6U6djeTH9nFBg34S6SW+yATVQbrxpUyHCTVJbPT4hyLXTwU C6H09Et/oxuh63fDheM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	EVALUATION.GOV A RR has value 159.142.191.107
	Found 1 RRSIGs over A RRset
	`evaluation.gov. 10800 IN RRSIG ( A 8 2 10800 20211020202648 20210920202148 54304 evaluation.gov. DUz81HsiJi8xYGleYes38iiHkQluwhZ7mjhtpyAlhiCTEUFdRy0jMu22VpoxN8sM943AhEYcjv/3 NIdCsXI5JoJ0ijPJKlbnZ0UAMrP/J6U6djeTH9nFBg34S6SW+yATVQbrxpUyHCTVJbPT4hyLXTwU C6H09Et/oxuh63fDheM= )`
	RRSIG=54304 and DNSKEY=54304 verifies the A RRset

EVALUATION.GOV

	Query to dns.gsa.GOV for EVALUATION.GOV/A
	Received 247 bytes from 13.248.142.184
	;; Response received from 13.248.142.184 (247 octets) ;; HEADER SECTION ;; id = 50884 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; EVALUATION.GOV. IN A ;; ANSWER SECTION (2 records) evaluation.gov. 10800 IN A 159.142.191.107 evaluation.gov. 10800 IN RRSIG ( A 8 2 10800 20211020202648 20210920202148 54304 evaluation.gov. DUz81HsiJi8xYGleYes38iiHkQluwhZ7mjhtpyAlhiCTEUFdRy0jMu22VpoxN8sM943AhEYcjv/3 NIdCsXI5JoJ0ijPJKlbnZ0UAMrP/J6U6djeTH9nFBg34S6SW+yATVQbrxpUyHCTVJbPT4hyLXTwU C6H09Et/oxuh63fDheM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns.gsa.GOV is authoritative for EVALUATION.GOV
	Found RRSIG signed by evaluation.gov zone
	Query to dns.gsa.GOV for EVALUATION.GOV/A
	Received 247 bytes from 13.248.142.184
	;; Response received from 13.248.142.184 (247 octets) ;; HEADER SECTION ;; id = 16573 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; EVALUATION.GOV. IN A ;; ANSWER SECTION (2 records) evaluation.gov. 10800 IN A 159.142.191.107 evaluation.gov. 10800 IN RRSIG ( A 8 2 10800 20211020202648 20210920202148 54304 evaluation.gov. DUz81HsiJi8xYGleYes38iiHkQluwhZ7mjhtpyAlhiCTEUFdRy0jMu22VpoxN8sM943AhEYcjv/3 NIdCsXI5JoJ0ijPJKlbnZ0UAMrP/J6U6djeTH9nFBg34S6SW+yATVQbrxpUyHCTVJbPT4hyLXTwU C6H09Et/oxuh63fDheM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	EVALUATION.GOV A RR has value 159.142.191.107
	Found 1 RRSIGs over A RRset
	`evaluation.gov. 10800 IN RRSIG ( A 8 2 10800 20211020202648 20210920202148 54304 evaluation.gov. DUz81HsiJi8xYGleYes38iiHkQluwhZ7mjhtpyAlhiCTEUFdRy0jMu22VpoxN8sM943AhEYcjv/3 NIdCsXI5JoJ0ijPJKlbnZ0UAMrP/J6U6djeTH9nFBg34S6SW+yATVQbrxpUyHCTVJbPT4hyLXTwU C6H09Et/oxuh63fDheM= )`
	RRSIG=54304 and DNSKEY=54304 verifies the A RRset

EVALUATION.GOV

	Query to dns5.gsa.GOV for EVALUATION.GOV/A
	Received 247 bytes from 76.223.9.162
	;; Response received from 76.223.9.162 (247 octets) ;; HEADER SECTION ;; id = 26748 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; EVALUATION.GOV. IN A ;; ANSWER SECTION (2 records) evaluation.gov. 10800 IN A 159.142.191.107 evaluation.gov. 10800 IN RRSIG ( A 8 2 10800 20211020202648 20210920202148 54304 evaluation.gov. DUz81HsiJi8xYGleYes38iiHkQluwhZ7mjhtpyAlhiCTEUFdRy0jMu22VpoxN8sM943AhEYcjv/3 NIdCsXI5JoJ0ijPJKlbnZ0UAMrP/J6U6djeTH9nFBg34S6SW+yATVQbrxpUyHCTVJbPT4hyLXTwU C6H09Et/oxuh63fDheM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns5.gsa.GOV is authoritative for EVALUATION.GOV
	Found RRSIG signed by evaluation.gov zone
	Query to dns5.gsa.GOV for EVALUATION.GOV/A
	Received 247 bytes from 76.223.9.162
	;; Response received from 76.223.9.162 (247 octets) ;; HEADER SECTION ;; id = 50878 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; EVALUATION.GOV. IN A ;; ANSWER SECTION (2 records) evaluation.gov. 10800 IN A 159.142.191.107 evaluation.gov. 10800 IN RRSIG ( A 8 2 10800 20211020202648 20210920202148 54304 evaluation.gov. DUz81HsiJi8xYGleYes38iiHkQluwhZ7mjhtpyAlhiCTEUFdRy0jMu22VpoxN8sM943AhEYcjv/3 NIdCsXI5JoJ0ijPJKlbnZ0UAMrP/J6U6djeTH9nFBg34S6SW+yATVQbrxpUyHCTVJbPT4hyLXTwU C6H09Et/oxuh63fDheM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	EVALUATION.GOV A RR has value 159.142.191.107
	Found 1 RRSIGs over A RRset
	`evaluation.gov. 10800 IN RRSIG ( A 8 2 10800 20211020202648 20210920202148 54304 evaluation.gov. DUz81HsiJi8xYGleYes38iiHkQluwhZ7mjhtpyAlhiCTEUFdRy0jMu22VpoxN8sM943AhEYcjv/3 NIdCsXI5JoJ0ijPJKlbnZ0UAMrP/J6U6djeTH9nFBg34S6SW+yATVQbrxpUyHCTVJbPT4hyLXTwU C6H09Et/oxuh63fDheM= )`
	RRSIG=54304 and DNSKEY=54304 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test EVALUATION.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: