DNSSEC Analyzer - EXIM.GOV

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2019-04-20 10:15:46 UTC, NTP stratum 4

Analyzing DNSSEC problems for EXIM.GOV

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to l.root-servers.net for ./DNSKEY
	Error querying l.root-servers.net/2001:500:9f:0:0:0:0:42 for ./DNSKEY: 'IPv6 transport disabled'
	Received 864 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (864 bytes) ;; HEADER SECTION ;; id = 2057 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190502000000 20190411000000 20326 . kquHnaziV2mG5TuwV6/NotYIe6Jkf2tLUNkCkR89a97gGLzCVZGtCrq5qLM+pvgru2Jji3h4w7dI h1oalr3fMmrAuX+hcbBYI2H/JzfTCvo1i3gZf/ZYIelFSD19cjgFaGl7sxXcLGuMXQaozHJ4K46l VEClvyy4crkbAuSxA4045om/9eRfxw+C2OMHhrZJIu59m9+oK8kiaxiAq/cufmQI4eCLJtfwVC6X f2H+jkoXQHklFvdrCJvw+WiXQezmN2rGy2ihUda3DBEcTujyhG1a6oqR71EF6dyjhv8Lqn8vFv78 XD54lrf8eCj4RZK69Nl3pQpNdRYFcAXLPr4psg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DS=19036/SHA-256 is published, but a corresponding DNSKEY is not
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190502000000 20190411000000 20326 . kquHnaziV2mG5TuwV6/NotYIe6Jkf2tLUNkCkR89a97gGLzCVZGtCrq5qLM+pvgru2Jji3h4w7dI h1oalr3fMmrAuX+hcbBYI2H/JzfTCvo1i3gZf/ZYIelFSD19cjgFaGl7sxXcLGuMXQaozHJ4K46l VEClvyy4crkbAuSxA4045om/9eRfxw+C2OMHhrZJIu59m9+oK8kiaxiAq/cufmQI4eCLJtfwVC6X f2H+jkoXQHklFvdrCJvw+WiXQezmN2rGy2ihUda3DBEcTujyhG1a6oqR71EF6dyjhv8Lqn8vFv78 XD54lrf8eCj4RZK69Nl3pQpNdRYFcAXLPr4psg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=25266 is now in the chain-of-trust
	Query to i.root-servers.net for EXIM.GOV/A
	Error querying i.root-servers.net/2001:7fe:0:0:0:0:0:53 for EXIM.GOV/A: 'IPv6 transport disabled'
	Received 666 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (666 bytes) ;; HEADER SECTION ;; id = 21165 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; EXIM.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20190503050000 20190420040000 25266 . uxHt27bWNKEbvaNZ3SfOMoM+oHL5M8vYnVgInppZhWNuFccQG4BDljWTGrB2WIsECufONvlR/API aB2QaViWR55LZBMU8VOX47tRJZxwYJqKyVWEV4sTnPPmoUlJG8JEZ/LieoaUfAI0o6SCKnFsueJm yTOvP0zK6iPAO/7u7PMGftX74Mcp6uzvxCf5bUdC9jaLw5qr0P9rQdU89fuC56bY8PaSrmQNV+H3 SMhp5B0ni5+YKYehbx912jbHypnP400qhwRhFfZrCnIPyT+wwdu2U3BAGZOEMNQj3joqqwysBYA6 lRk9wIFZx8nXXJ9PbY8TK1XwsSee6QFLBzQwiw== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to f.root-servers.net for GOV/DNSKEY
	Received 661 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (661 bytes) ;; HEADER SECTION ;; id = 33471 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20190503050000 20190420040000 25266 . uxHt27bWNKEbvaNZ3SfOMoM+oHL5M8vYnVgInppZhWNuFccQG4BDljWTGrB2WIsECufONvlR/API aB2QaViWR55LZBMU8VOX47tRJZxwYJqKyVWEV4sTnPPmoUlJG8JEZ/LieoaUfAI0o6SCKnFsueJm yTOvP0zK6iPAO/7u7PMGftX74Mcp6uzvxCf5bUdC9jaLw5qr0P9rQdU89fuC56bY8PaSrmQNV+H3 SMhp5B0ni5+YKYehbx912jbHypnP400qhwRhFfZrCnIPyT+wwdu2U3BAGZOEMNQj3joqqwysBYA6 lRk9wIFZx8nXXJ9PbY8TK1XwsSee6QFLBzQwiw== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to i.root-servers.net for GOV/DS
	Received 406 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (406 bytes) ;; HEADER SECTION ;; id = 28300 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20190503050000 20190420040000 25266 . uxHt27bWNKEbvaNZ3SfOMoM+oHL5M8vYnVgInppZhWNuFccQG4BDljWTGrB2WIsECufONvlR/API aB2QaViWR55LZBMU8VOX47tRJZxwYJqKyVWEV4sTnPPmoUlJG8JEZ/LieoaUfAI0o6SCKnFsueJm yTOvP0zK6iPAO/7u7PMGftX74Mcp6uzvxCf5bUdC9jaLw5qr0P9rQdU89fuC56bY8PaSrmQNV+H3 SMhp5B0ni5+YKYehbx912jbHypnP400qhwRhFfZrCnIPyT+wwdu2U3BAGZOEMNQj3joqqwysBYA6 lRk9wIFZx8nXXJ9PbY8TK1XwsSee6QFLBzQwiw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20190503050000 20190420040000 25266 . uxHt27bWNKEbvaNZ3SfOMoM+oHL5M8vYnVgInppZhWNuFccQG4BDljWTGrB2WIsECufONvlR/API aB2QaViWR55LZBMU8VOX47tRJZxwYJqKyVWEV4sTnPPmoUlJG8JEZ/LieoaUfAI0o6SCKnFsueJm yTOvP0zK6iPAO/7u7PMGftX74Mcp6uzvxCf5bUdC9jaLw5qr0P9rQdU89fuC56bY8PaSrmQNV+H3 SMhp5B0ni5+YKYehbx912jbHypnP400qhwRhFfZrCnIPyT+wwdu2U3BAGZOEMNQj3joqqwysBYA6 lRk9wIFZx8nXXJ9PbY8TK1XwsSee6QFLBzQwiw== )`
	RRSIG=25266 and DNSKEY=25266 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to c.gov-servers.net for GOV/DNSKEY
	Received 889 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (889 bytes) ;; HEADER SECTION ;; id = 54688 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (4 records) GOV. 86400 IN DNSKEY ( 256 3 8 AQO1oAFyB/QSuf32vdl3Yp+o83rKLBdvjsz13AdVp8EooKwa6DL4D8G+e3PanKAJyWEiRpNQIAl2 Ra6JuC7DCiEPBziclmFygf2XGdY4qirPqVemcHHKNoVIMNUteughuiPaqlFY8gTZajQ02ZizqiYK +LRxpPs/ePcbETPT3oB9Ew== ) ; Key ID = 28157 GOV. 86400 IN DNSKEY ( 256 3 8 AQPO0gfZTyKZiRSwF/XvW9ta+joX/SlCfvNcTsNT4t5edmGhhiRNf45246Z4L6Cx3n93FPHtW91n F+M1gCPyxewRyAM0/UVrqBwutdPQnR8vsQ/WzdsAk50loby/jGN7UAStU/FzllD2qIq4uJ8HcLZW Qth9JV8vKuqVYXgPfhx5lw== ) ; Key ID = 43583 GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190502214731 20190417214231 7698 gov. ocIs3qBX77aDfCB2wAonk4kOqze7WaOKI/7LzbvuBdk5MVppdtS0gPFNZe8ipffRxym+rApFZHQA 9K/V52gv58SgVLlp0yLuytomPI0/ut/a+ZRzxNOJLue+9OzwKLYskFdMeZ2TaBaocBL2kdy6hZUw zbh8fobHnwCldcCUa6hwYQ3h+zwcIJSNVLYWRDymNcsEXO9cGeNK9A4WWkxS2ZTCZ5DbEWhjz6Sg iEyebGW6VCRKhgRLhEY39YbDtAOHwEAiIyvzYcOHCelHIzFgQjUUH4znPy97mt9BBMsX1lusKrqt 2FzZKzR8RM7k911VKhSs8iLtvc8/u9R00fxIgg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 3 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQO1oAFyB/QSuf32vdl3Yp+o83rKLBdvjsz13AdVp8EooKwa6DL4D8G+e3PanKAJyWEiRpNQIAl2 Ra6JuC7DCiEPBziclmFygf2XGdY4qirPqVemcHHKNoVIMNUteughuiPaqlFY8gTZajQ02ZizqiYK +LRxpPs/ePcbETPT3oB9Ew== ) ; Key ID = 28157`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQPO0gfZTyKZiRSwF/XvW9ta+joX/SlCfvNcTsNT4t5edmGhhiRNf45246Z4L6Cx3n93FPHtW91n F+M1gCPyxewRyAM0/UVrqBwutdPQnR8vsQ/WzdsAk50loby/jGN7UAStU/FzllD2qIq4uJ8HcLZW Qth9JV8vKuqVYXgPfhx5lw== ) ; Key ID = 43583`
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190502214731 20190417214231 7698 gov. ocIs3qBX77aDfCB2wAonk4kOqze7WaOKI/7LzbvuBdk5MVppdtS0gPFNZe8ipffRxym+rApFZHQA 9K/V52gv58SgVLlp0yLuytomPI0/ut/a+ZRzxNOJLue+9OzwKLYskFdMeZ2TaBaocBL2kdy6hZUw zbh8fobHnwCldcCUa6hwYQ3h+zwcIJSNVLYWRDymNcsEXO9cGeNK9A4WWkxS2ZTCZ5DbEWhjz6Sg iEyebGW6VCRKhgRLhEY39YbDtAOHwEAiIyvzYcOHCelHIzFgQjUUH4znPy97mt9BBMsX1lusKrqt 2FzZKzR8RM7k911VKhSs8iLtvc8/u9R00fxIgg== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=28157 is now in the chain-of-trust
	DNSKEY=43583 is now in the chain-of-trust
	Query to b.gov-servers.net for EXIM.GOV/A
	Received 421 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (421 bytes) ;; HEADER SECTION ;; id = 43904 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; EXIM.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) EXIM.GOV. 86400 IN NS auth111.ns.uu.net. EXIM.GOV. 86400 IN NS auth120.ns.uu.net. EXIM.GOV. 3600 IN DS 19150 7 1 db4c9b2e31785d7e59ba339a777242ae9c7a1c21 EXIM.GOV. 3600 IN DS 37075 7 1 9b155d40a9d3014d9584d265655db0a9cbd65c30 EXIM.GOV. 3600 IN DS ( 19150 7 2 0659e3ec462139435129f6ae27331f6969a3bac27cc7b0b5990c8af5d2aa2197 ) EXIM.GOV. 3600 IN DS ( 37075 7 2 44584956fb179bcfb5e24f9389254332f7aeb57fad4c4b1701b1388195b7ef7c ) EXIM.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190427041007 20190420041007 43583 gov. Ujg4Ip3t7+PzxWFaPfgbnkGEUZjlZPRyGEu4RFvL1wqgrhmuD+B8OgkW29Dh7sWGX/h+m9Bh+Pvk RhqvUIDkxrhlajeSAW/VDf0ellK9zWP5bqNWwfNKpUC71uKj7EFhTWtqDiYYh9B+L7ozv/RDhyk7 QFnjbSDal7DXRnj4o6s= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.gov-servers.net for EXIM.GOV/DNSKEY
	Received 421 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (421 bytes) ;; HEADER SECTION ;; id = 44575 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; EXIM.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) EXIM.GOV. 86400 IN NS auth111.ns.uu.net. EXIM.GOV. 86400 IN NS auth120.ns.uu.net. EXIM.GOV. 3600 IN DS 19150 7 1 db4c9b2e31785d7e59ba339a777242ae9c7a1c21 EXIM.GOV. 3600 IN DS ( 19150 7 2 0659e3ec462139435129f6ae27331f6969a3bac27cc7b0b5990c8af5d2aa2197 ) EXIM.GOV. 3600 IN DS 37075 7 1 9b155d40a9d3014d9584d265655db0a9cbd65c30 EXIM.GOV. 3600 IN DS ( 37075 7 2 44584956fb179bcfb5e24f9389254332f7aeb57fad4c4b1701b1388195b7ef7c ) EXIM.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190427041007 20190420041007 43583 gov. Ujg4Ip3t7+PzxWFaPfgbnkGEUZjlZPRyGEu4RFvL1wqgrhmuD+B8OgkW29Dh7sWGX/h+m9Bh+Pvk RhqvUIDkxrhlajeSAW/VDf0ellK9zWP5bqNWwfNKpUC71uKj7EFhTWtqDiYYh9B+L7ozv/RDhyk7 QFnjbSDal7DXRnj4o6s= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone EXIM.GOV

EXIM.GOV

	Checking DS between GOV and EXIM.GOV
	Query to c.gov-servers.net for EXIM.GOV/DS
	Received 368 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (368 bytes) ;; HEADER SECTION ;; id = 37977 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; EXIM.GOV. IN DS ;; ANSWER SECTION (5 records) EXIM.GOV. 3600 IN DS 19150 7 1 db4c9b2e31785d7e59ba339a777242ae9c7a1c21 EXIM.GOV. 3600 IN DS ( 19150 7 2 0659e3ec462139435129f6ae27331f6969a3bac27cc7b0b5990c8af5d2aa2197 ) EXIM.GOV. 3600 IN DS 37075 7 1 9b155d40a9d3014d9584d265655db0a9cbd65c30 EXIM.GOV. 3600 IN DS ( 37075 7 2 44584956fb179bcfb5e24f9389254332f7aeb57fad4c4b1701b1388195b7ef7c ) EXIM.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190426221007 20190419221007 43583 gov. qcW82/xgZtL72Q8RqMl91o1uX9TkLLWFUxC5+EnoaaP5mE3TcADPjHtwksftCuTvn1+gwzmk9QG0 QRgRkto0iQT3mM1Ni4h9U16tQSS3ah2UPMIDsoR0t82Bt6Y8PV6LESOFYkuMWaz+OSe26ieF0/Zp 6GQF6UbpUKs7nAl5bGM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 4 DS records for EXIM.GOV in the GOV zone
	DS=19150/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=19150/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=37075/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=37075/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`EXIM.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190426221007 20190419221007 43583 gov. qcW82/xgZtL72Q8RqMl91o1uX9TkLLWFUxC5+EnoaaP5mE3TcADPjHtwksftCuTvn1+gwzmk9QG0 QRgRkto0iQT3mM1Ni4h9U16tQSS3ah2UPMIDsoR0t82Bt6Y8PV6LESOFYkuMWaz+OSe26ieF0/Zp 6GQF6UbpUKs7nAl5bGM= )`
	RRSIG=43583 and DNSKEY=43583 verifies the DS RRset
	DS=19150/SHA-1 is now in the chain-of-trust
	DS=37075/SHA-1 is now in the chain-of-trust
	`EXIM.GOV. 3600 IN DS 19150 7 1 db4c9b2e31785d7e59ba339a777242ae9c7a1c21`
	`EXIM.GOV. 3600 IN DS ( 19150 7 2 0659e3ec462139435129f6ae27331f6969a3bac27cc7b0b5990c8af5d2aa2197 )`
	`EXIM.GOV. 3600 IN DS 37075 7 1 9b155d40a9d3014d9584d265655db0a9cbd65c30`
	`EXIM.GOV. 3600 IN DS ( 37075 7 2 44584956fb179bcfb5e24f9389254332f7aeb57fad4c4b1701b1388195b7ef7c )`
	Query to auth120.ns.uu.net for EXIM.GOV/DNSKEY
	Received 1741 bytes from 198.6.1.154
	;; Answer received from 198.6.1.154 (1741 bytes) ;; HEADER SECTION ;; id = 38751 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; EXIM.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) exim.gov. 21600 IN DNSKEY ( 256 3 7 AwEAAXoGMVvjbYJiCouLD9hyegJXaFoiPQAq+1EMoyTZJWIBYT8JAujWln2kkJriPMdJYvOSaWdf UphBRVLrVPJSATKS/6erbATsONQAe1Rfx8+RIl+KMUN9ddEUHkZBnLFVRkMkQAgcj2FUyF7SOrFw TSG1lwVt2GJst6baDW/jeixJKOXsISUVxF5zDaTzCnzdzVgBBmCry0E6p4SSB/CE4jO1eGUByexx abj4opKtlPJeFYu2+jkm5F7T5sWs3ZPnwtO+R3B3M4Zieyhk7/olOYlWrAvZN5saEh3cbwAPnnv0 Q9P+P7bGvWnR4gZ2f9pN3wm5OV5R97fiBM4Oeq/ycOE= ) ; Key ID = 23189 exim.gov. 21600 IN DNSKEY ( 257 3 7 AwEAAcAOQSAtKaWq5uO6VyQX6GftSxvu9m1YMDmuhQ+wq4nTFa6jbYacmikDpaV/jDVFuM6wCOyH Pk7bYlgq2Xv6zoFw8CDahiVh5Y812QrfsjrUFl4LhcKumYGT4pScB8AuQT4AZDfc+XDVHJi6+TrA Dhe1Swr1Yve5Rek6fdNyd+2esmqMk3otvT7hsNHqxCxBJfdcFDoZ2s4noeVUBVXZkfqkKPuqv5i2 cqb3HZYBTDRaNop4LAdOofIxzQ4XO7tQPJZaW2Gx8VHfPw5rHmbtHiI1doaPUJsNsoPxXKm2/o/x BAugLBoiCsQh/3uQt0gC0L9uhDohnA/pxZ2PQjNWlfE= ) ; Key ID = 37075 exim.gov. 21600 IN DNSKEY ( 256 3 7 AwEAAZVKnaxUfqO8oe3SvF++aHx87GUNp8QCfLC7b7Ib45bexDDvOkp324WYIZ1c73zO5Rf5pXWs YnbP7h+nBK6dC7DkVRCayEN9IWs106HeMyK/QmSk4ZuA8ILgM0Qvly3UZpcBDRgtEwf+U4o4wJC9 bVeO3GOKIlaAqqNLa6Cji/d3qEfm5CcFw8vf6H//zxbuGgnkVeEkx/WQvKN5p/j3sufDfwQy0jRA EkqI0okih+jYM/NKoyevE/GGQ+vpc5gtOew9Y72ilO/3WkYxcnaIFOISmNZp2WekLGxv3yYMdb2t dTaWNR2C8yFGRTUnu21tTja7NYC0ci3ODleugFfiKcs= ) ; Key ID = 29279 exim.gov. 21600 IN DNSKEY ( 257 3 7 AwEAAcq6Sunfx1eHUJNOCBQuGMQVtid6JjnCbktsI39v18vJb+DRckK8im3MMBIAgHPRXcvzHcrX QVOaivn+fZ/RwQu5FdbqGQ19rBxmdscJC8NCY/FVt9mraQ9ShHcXzVI2j+k3+DUmWo29iW4RxfvE DhHeB/87Fy6E5eUWPi1W8jZy8uF13pNfodQNfuTpHjqtUM0gxzkBwpK0m0kGX58zVcHeDAy1Kf09 /GyuxFJuQ0kDgmKfGMcT1Oe1NIrATpEOds9mbkIyYTeVfceGgFsm+eH0XJNPANoPdFZIR4QlHRmm YfzGHTXsavCCpQBIASy+i+96lcvBqi/rsK1TJkDCe3M= ) ; Key ID = 19150 exim.gov. 21600 IN RRSIG ( DNSKEY 7 2 21600 20190427030526 20190420020526 29279 exim.gov. Nd5R3ulZTQ4ruhk7YGhsO6CgQjvfFZHgrWWsz/2oqxkDHteNATBmqAEpJcCBz3JQ5CnM46+yPDQ+ WwnMUKinfs6tILujRsB/P4FSxTxT3C1pIYdDzKBlJVUr0AYa0Zo6u+ZemslMAejzbyK4199bf84r vLORjh3rIMz4jW3cbTYDx4EdX+hN5q1XB8BtoaNiyip/nMNH1odCBgL03kyx4uaoZSmRoMZPudov ORh7dfyyjOWFVWwsntvKMg1I6npaIpzGnVnKK9Tu6Vfg86342g/mLgwXKKfXk4b+Uk0b9IsqqAaN tyb9RYBD+IYtd/jvzz7kD64G++QUduGnrXH81w== ) exim.gov. 21600 IN RRSIG ( DNSKEY 7 2 21600 20190427030526 20190420020526 37075 exim.gov. pTuEjrP1NKtW+NDSzlt+mYJnU10q7on/cJ+cZpPMymsqb4oIJFDKSFJWipSI/1ozBrJw1kcS5R92 aTxfqabyaddTyCCUyD+fbY9QFh0hgvdciCXMrUEr5BjDz2y+rwDASBiDbaw0OaeryxD/G3bBq3h7 mP7os0HTyasEXk/lLTBPgmS8hK6qhSjXiP46JLjNYqYhmHUhfazvLIgIqozUneVblRO5c5kn2vpq TLJYGoSEk28lkgqD55dwICLyiQfz8k0b1fU0VpB+YBrlF6S2uPDlOrxDVJmRg51XgpCSnY7u8E0q wJm/NDj7ZOHyY1bDttIBo92fZtcFfYbk8WRpdA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for EXIM.GOV
	`exim.gov. 21600 IN DNSKEY ( 256 3 7 AwEAAXoGMVvjbYJiCouLD9hyegJXaFoiPQAq+1EMoyTZJWIBYT8JAujWln2kkJriPMdJYvOSaWdf UphBRVLrVPJSATKS/6erbATsONQAe1Rfx8+RIl+KMUN9ddEUHkZBnLFVRkMkQAgcj2FUyF7SOrFw TSG1lwVt2GJst6baDW/jeixJKOXsISUVxF5zDaTzCnzdzVgBBmCry0E6p4SSB/CE4jO1eGUByexx abj4opKtlPJeFYu2+jkm5F7T5sWs3ZPnwtO+R3B3M4Zieyhk7/olOYlWrAvZN5saEh3cbwAPnnv0 Q9P+P7bGvWnR4gZ2f9pN3wm5OV5R97fiBM4Oeq/ycOE= ) ; Key ID = 23189`
	`exim.gov. 21600 IN DNSKEY ( 257 3 7 AwEAAcAOQSAtKaWq5uO6VyQX6GftSxvu9m1YMDmuhQ+wq4nTFa6jbYacmikDpaV/jDVFuM6wCOyH Pk7bYlgq2Xv6zoFw8CDahiVh5Y812QrfsjrUFl4LhcKumYGT4pScB8AuQT4AZDfc+XDVHJi6+TrA Dhe1Swr1Yve5Rek6fdNyd+2esmqMk3otvT7hsNHqxCxBJfdcFDoZ2s4noeVUBVXZkfqkKPuqv5i2 cqb3HZYBTDRaNop4LAdOofIxzQ4XO7tQPJZaW2Gx8VHfPw5rHmbtHiI1doaPUJsNsoPxXKm2/o/x BAugLBoiCsQh/3uQt0gC0L9uhDohnA/pxZ2PQjNWlfE= ) ; Key ID = 37075`
	`exim.gov. 21600 IN DNSKEY ( 256 3 7 AwEAAZVKnaxUfqO8oe3SvF++aHx87GUNp8QCfLC7b7Ib45bexDDvOkp324WYIZ1c73zO5Rf5pXWs YnbP7h+nBK6dC7DkVRCayEN9IWs106HeMyK/QmSk4ZuA8ILgM0Qvly3UZpcBDRgtEwf+U4o4wJC9 bVeO3GOKIlaAqqNLa6Cji/d3qEfm5CcFw8vf6H//zxbuGgnkVeEkx/WQvKN5p/j3sufDfwQy0jRA EkqI0okih+jYM/NKoyevE/GGQ+vpc5gtOew9Y72ilO/3WkYxcnaIFOISmNZp2WekLGxv3yYMdb2t dTaWNR2C8yFGRTUnu21tTja7NYC0ci3ODleugFfiKcs= ) ; Key ID = 29279`
	`exim.gov. 21600 IN DNSKEY ( 257 3 7 AwEAAcq6Sunfx1eHUJNOCBQuGMQVtid6JjnCbktsI39v18vJb+DRckK8im3MMBIAgHPRXcvzHcrX QVOaivn+fZ/RwQu5FdbqGQ19rBxmdscJC8NCY/FVt9mraQ9ShHcXzVI2j+k3+DUmWo29iW4RxfvE DhHeB/87Fy6E5eUWPi1W8jZy8uF13pNfodQNfuTpHjqtUM0gxzkBwpK0m0kGX58zVcHeDAy1Kf09 /GyuxFJuQ0kDgmKfGMcT1Oe1NIrATpEOds9mbkIyYTeVfceGgFsm+eH0XJNPANoPdFZIR4QlHRmm YfzGHTXsavCCpQBIASy+i+96lcvBqi/rsK1TJkDCe3M= ) ; Key ID = 19150`
	DNSKEY=37075/SEP is now in the chain-of-trust
	DS=37075/SHA-1 verifies DNSKEY=37075/SEP
	DS=37075/SHA-256 verifies DNSKEY=37075/SEP
	DNSKEY=19150/SEP is now in the chain-of-trust
	DS=19150/SHA-1 verifies DNSKEY=19150/SEP
	DS=19150/SHA-256 verifies DNSKEY=19150/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`exim.gov. 21600 IN RRSIG ( DNSKEY 7 2 21600 20190427030526 20190420020526 29279 exim.gov. Nd5R3ulZTQ4ruhk7YGhsO6CgQjvfFZHgrWWsz/2oqxkDHteNATBmqAEpJcCBz3JQ5CnM46+yPDQ+ WwnMUKinfs6tILujRsB/P4FSxTxT3C1pIYdDzKBlJVUr0AYa0Zo6u+ZemslMAejzbyK4199bf84r vLORjh3rIMz4jW3cbTYDx4EdX+hN5q1XB8BtoaNiyip/nMNH1odCBgL03kyx4uaoZSmRoMZPudov ORh7dfyyjOWFVWwsntvKMg1I6npaIpzGnVnKK9Tu6Vfg86342g/mLgwXKKfXk4b+Uk0b9IsqqAaN tyb9RYBD+IYtd/jvzz7kD64G++QUduGnrXH81w== )`
	`exim.gov. 21600 IN RRSIG ( DNSKEY 7 2 21600 20190427030526 20190420020526 37075 exim.gov. pTuEjrP1NKtW+NDSzlt+mYJnU10q7on/cJ+cZpPMymsqb4oIJFDKSFJWipSI/1ozBrJw1kcS5R92 aTxfqabyaddTyCCUyD+fbY9QFh0hgvdciCXMrUEr5BjDz2y+rwDASBiDbaw0OaeryxD/G3bBq3h7 mP7os0HTyasEXk/lLTBPgmS8hK6qhSjXiP46JLjNYqYhmHUhfazvLIgIqozUneVblRO5c5kn2vpq TLJYGoSEk28lkgqD55dwICLyiQfz8k0b1fU0VpB+YBrlF6S2uPDlOrxDVJmRg51XgpCSnY7u8E0q wJm/NDj7ZOHyY1bDttIBo92fZtcFfYbk8WRpdA== )`
	RRSIG=29279 and DNSKEY=29279 verifies the DNSKEY RRset
	RRSIG=37075 and DNSKEY=37075/SEP verifies the DNSKEY RRset
	DNSKEY=23189 is now in the chain-of-trust
	DNSKEY=29279 is now in the chain-of-trust
	Query to auth120.ns.uu.net for EXIM.GOV/A
	Received 357 bytes from 198.6.1.154
	;; Answer received from 198.6.1.154 (357 bytes) ;; HEADER SECTION ;; id = 53283 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; EXIM.GOV. IN A ;; ANSWER SECTION (2 records) exim.gov. 21600 IN A 96.127.54.61 exim.gov. 21600 IN RRSIG ( A 7 2 21600 20190427030526 20190420020526 29279 exim.gov. R9jHSonJaXNoiJ+jW/bIVqov7PztPGDIglocLKQiAskmdUG5BHpuiJ9ITfnCu8YIq16/L+QDc77n /fzNyAOX/ezDTsuPqVWvCj4fNON2K8b4NDKPWl4SucSCDsGNdvVpGZRAuGpVkELUdIDokploBdQ7 Vfs3OS2hEa/L+UN6dr8vYTc/8RdJ1Qf2K4OMleOXV8jBQn5ACe+RcvtDavAR7HHb3SdVq0fbyXIx lyvlqq+1CTR3d3RwY3OnilkEydPtBfrsWj1T3jk+Y0mPEm7poOpTnigLT5w4TtYRGmvnmMez13br G5npOhP6YXa4d+sNzXwWgmYvLCYXGT2tql7NVw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	EXIM.GOV is authoritative for EXIM.GOV
	Found RRSIG signed by exim.gov zone
	Query to auth120.ns.uu.net for EXIM.GOV/SOA
	Received 405 bytes from 198.6.1.154
	;; Answer received from 198.6.1.154 (405 bytes) ;; HEADER SECTION ;; id = 38389 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; EXIM.GOV. IN SOA ;; ANSWER SECTION (2 records) exim.gov. 21600 IN SOA ( auth111.ns.uu.net. hostmaster.uu.net. 1817 ;serial 21600 ;refresh 3600 ;retry 1728000 ;expire 21600 ;minimum ) exim.gov. 21600 IN RRSIG ( SOA 7 2 21600 20190427030526 20190420020526 29279 exim.gov. BKWKe1tFjVy6NIAlFYUAsyraS1xCNXXl4BF4UQ+j9pVkfUTkYFnnQNRWJup9MfYNzWYBk0KylzTt AdAx6AnmfKEH3bql/EskhhYW11J7j3Fcbf5DsQjfTFb0qxoWq16OvEAyh/lJNu5CXLvSHSxFbw/d d/lOUyCi8b0JmmPyBtZ1atIE9Mi62fTCZwvcsb1NqJSrj/rTPlXYEwmrn2g0I+tKp5c3wytnqHgI VNNEKCjnWy3cB8o4IVcCRtgFglZ5csVy1FYgP9dUsPi96LFZaavXsmHSam3ONl3UOwUoX+gnkGMD IqBaTwlC82n8w/jNfvVnTzPRtgLkzjCTEkDeLg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to auth111.ns.uu.net for EXIM.GOV/SOA
	Received 405 bytes from 198.6.1.115
	;; Answer received from 198.6.1.115 (405 bytes) ;; HEADER SECTION ;; id = 40131 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; EXIM.GOV. IN SOA ;; ANSWER SECTION (2 records) exim.gov. 21600 IN SOA ( auth111.ns.uu.net. hostmaster.uu.net. 1817 ;serial 21600 ;refresh 3600 ;retry 1728000 ;expire 21600 ;minimum ) exim.gov. 21600 IN RRSIG ( SOA 7 2 21600 20190427030526 20190420020526 29279 exim.gov. BKWKe1tFjVy6NIAlFYUAsyraS1xCNXXl4BF4UQ+j9pVkfUTkYFnnQNRWJup9MfYNzWYBk0KylzTt AdAx6AnmfKEH3bql/EskhhYW11J7j3Fcbf5DsQjfTFb0qxoWq16OvEAyh/lJNu5CXLvSHSxFbw/d d/lOUyCi8b0JmmPyBtZ1atIE9Mi62fTCZwvcsb1NqJSrj/rTPlXYEwmrn2g0I+tKp5c3wytnqHgI VNNEKCjnWy3cB8o4IVcCRtgFglZ5csVy1FYgP9dUsPi96LFZaavXsmHSam3ONl3UOwUoX+gnkGMD IqBaTwlC82n8w/jNfvVnTzPRtgLkzjCTEkDeLg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to auth120.ns.uu.net for EXIM.GOV/A
	Received 357 bytes from 198.6.1.154
	;; Answer received from 198.6.1.154 (357 bytes) ;; HEADER SECTION ;; id = 7956 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; EXIM.GOV. IN A ;; ANSWER SECTION (2 records) exim.gov. 21600 IN A 96.127.54.61 exim.gov. 21600 IN RRSIG ( A 7 2 21600 20190427030526 20190420020526 29279 exim.gov. R9jHSonJaXNoiJ+jW/bIVqov7PztPGDIglocLKQiAskmdUG5BHpuiJ9ITfnCu8YIq16/L+QDc77n /fzNyAOX/ezDTsuPqVWvCj4fNON2K8b4NDKPWl4SucSCDsGNdvVpGZRAuGpVkELUdIDokploBdQ7 Vfs3OS2hEa/L+UN6dr8vYTc/8RdJ1Qf2K4OMleOXV8jBQn5ACe+RcvtDavAR7HHb3SdVq0fbyXIx lyvlqq+1CTR3d3RwY3OnilkEydPtBfrsWj1T3jk+Y0mPEm7poOpTnigLT5w4TtYRGmvnmMez13br G5npOhP6YXa4d+sNzXwWgmYvLCYXGT2tql7NVw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	EXIM.GOV A RR has value 96.127.54.61
	Found 1 RRSIGs over A RRset
	`exim.gov. 21600 IN RRSIG ( A 7 2 21600 20190427030526 20190420020526 29279 exim.gov. R9jHSonJaXNoiJ+jW/bIVqov7PztPGDIglocLKQiAskmdUG5BHpuiJ9ITfnCu8YIq16/L+QDc77n /fzNyAOX/ezDTsuPqVWvCj4fNON2K8b4NDKPWl4SucSCDsGNdvVpGZRAuGpVkELUdIDokploBdQ7 Vfs3OS2hEa/L+UN6dr8vYTc/8RdJ1Qf2K4OMleOXV8jBQn5ACe+RcvtDavAR7HHb3SdVq0fbyXIx lyvlqq+1CTR3d3RwY3OnilkEydPtBfrsWj1T3jk+Y0mPEm7poOpTnigLT5w4TtYRGmvnmMez13br G5npOhP6YXa4d+sNzXwWgmYvLCYXGT2tql7NVw== )`
	RRSIG=29279 and DNSKEY=29279 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test EXIM.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: