DNSSEC Analyzer - FAASAFETY.GOV

Domain Name:

Time: 2020-10-26 13:31:48 UTC, NTP stratum 4

Analyzing DNSSEC problems for FAASAFETY.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to b.root-servers.net for ./DNSKEY
	Received 864 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (864 bytes) ;; HEADER SECTION ;; id = 44601 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20201111000000 20201021000000 20326 . UfytpVL3Ka5rmqF/Lm/9frJl/ygXTjW0MEaGgecsmHbmLfTrJF3XAgPS5Tp/xc9TkaDf9HCEzk48 R4cfHOI22Ul9AnyBGZX7FiVfVo0NaseADRwt6G3K9jsMwHMIuVmAMTnvFfR32/+CwMMgmXGhBXdZ JVXR71aARAMKZlSgJK7DlOia8h2yC+RaWK0DvHMLwqyA+uwAeLxixmrtu3Olj2Rzmx2MSNDZZUP9 I+vghq7K0rzK7CYrXiAgY2q5WvwtKjJPw6T/qB8Ojqru/XN1LxSa2zYeITAq58IyijgLr6EupAdA 6HB3iPPfhHGKiwafsmcfcRcds90WfxG7UQFAMg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20201111000000 20201021000000 20326 . UfytpVL3Ka5rmqF/Lm/9frJl/ygXTjW0MEaGgecsmHbmLfTrJF3XAgPS5Tp/xc9TkaDf9HCEzk48 R4cfHOI22Ul9AnyBGZX7FiVfVo0NaseADRwt6G3K9jsMwHMIuVmAMTnvFfR32/+CwMMgmXGhBXdZ JVXR71aARAMKZlSgJK7DlOia8h2yC+RaWK0DvHMLwqyA+uwAeLxixmrtu3Olj2Rzmx2MSNDZZUP9 I+vghq7K0rzK7CYrXiAgY2q5WvwtKjJPw6T/qB8Ojqru/XN1LxSa2zYeITAq58IyijgLr6EupAdA 6HB3iPPfhHGKiwafsmcfcRcds90WfxG7UQFAMg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=26116 is now in the chain-of-trust
	Query to c.root-servers.net for FAASAFETY.GOV/A
	Received 671 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (671 bytes) ;; HEADER SECTION ;; id = 27314 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FAASAFETY.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20201108050000 20201026040000 26116 . llwgKSTf7uT+COBzTPtQOYgFVxUgNLRI5e4ak+TKaSR2oUSxUMsJ1BauRGcHe/18LQTQ6nubrSrh /imaxL1i0lmJNzT+2nLY+hRcGTnqWQr0x+yH+Ovh8Am7CJrvf1AHuuFaEAxC6AnThDVBBZnTHwQs 5sUdoHB4cepyPmQk/E/30Jlrp7tedz7dgLi3eW7W5d8OA/tH0t1iRSVrqQgKL8S1as3YcTjUzadx BLlgLMCqW8QnAwjkvilc+nI/8Ie6QkfB+vfsl/0yIOOwUVrM/uTeQ3w+DjlbOFyRfwRDXKfKlCZA Q6mZbBgOPnRZob7U1L7K1jd4WIxyXEJRdIvgrg== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.root-servers.net for GOV/DNSKEY
	Received 658 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (658 bytes) ;; HEADER SECTION ;; id = 4777 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20201108050000 20201026040000 26116 . llwgKSTf7uT+COBzTPtQOYgFVxUgNLRI5e4ak+TKaSR2oUSxUMsJ1BauRGcHe/18LQTQ6nubrSrh /imaxL1i0lmJNzT+2nLY+hRcGTnqWQr0x+yH+Ovh8Am7CJrvf1AHuuFaEAxC6AnThDVBBZnTHwQs 5sUdoHB4cepyPmQk/E/30Jlrp7tedz7dgLi3eW7W5d8OA/tH0t1iRSVrqQgKL8S1as3YcTjUzadx BLlgLMCqW8QnAwjkvilc+nI/8Ie6QkfB+vfsl/0yIOOwUVrM/uTeQ3w+DjlbOFyRfwRDXKfKlCZA Q6mZbBgOPnRZob7U1L7K1jd4WIxyXEJRdIvgrg== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to l.root-servers.net for GOV/DS
	Received 403 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (403 bytes) ;; HEADER SECTION ;; id = 832 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20201108050000 20201026040000 26116 . llwgKSTf7uT+COBzTPtQOYgFVxUgNLRI5e4ak+TKaSR2oUSxUMsJ1BauRGcHe/18LQTQ6nubrSrh /imaxL1i0lmJNzT+2nLY+hRcGTnqWQr0x+yH+Ovh8Am7CJrvf1AHuuFaEAxC6AnThDVBBZnTHwQs 5sUdoHB4cepyPmQk/E/30Jlrp7tedz7dgLi3eW7W5d8OA/tH0t1iRSVrqQgKL8S1as3YcTjUzadx BLlgLMCqW8QnAwjkvilc+nI/8Ie6QkfB+vfsl/0yIOOwUVrM/uTeQ3w+DjlbOFyRfwRDXKfKlCZA Q6mZbBgOPnRZob7U1L7K1jd4WIxyXEJRdIvgrg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20201108050000 20201026040000 26116 . llwgKSTf7uT+COBzTPtQOYgFVxUgNLRI5e4ak+TKaSR2oUSxUMsJ1BauRGcHe/18LQTQ6nubrSrh /imaxL1i0lmJNzT+2nLY+hRcGTnqWQr0x+yH+Ovh8Am7CJrvf1AHuuFaEAxC6AnThDVBBZnTHwQs 5sUdoHB4cepyPmQk/E/30Jlrp7tedz7dgLi3eW7W5d8OA/tH0t1iRSVrqQgKL8S1as3YcTjUzadx BLlgLMCqW8QnAwjkvilc+nI/8Ie6QkfB+vfsl/0yIOOwUVrM/uTeQ3w+DjlbOFyRfwRDXKfKlCZA Q6mZbBgOPnRZob7U1L7K1jd4WIxyXEJRdIvgrg== )`
	RRSIG=26116 and DNSKEY=26116 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to d.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (777 bytes) ;; HEADER SECTION ;; id = 44642 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAeFoiC01j4zIdBfR1vxBGp7WmV8q6IgTQ/pvbQJhCd9+sE16txuz6M81FPFkWhTk1nsXR4tI UZLQZpvgme+q3dqWuqtFA2amB99IM9B9iq6kwSrkZNVFv6zav3eP+5BlL/OA9FNFQHXCj5qj2noA j2le7j8umVcc+4zH677ytdtIImoAY45H8wWxVrGR4kxqM54O10fPHXEPu84irfaZGrM= ) ; Key ID = 15489 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20201031190254 20201016185754 7698 gov. MBslq9pa5Huymkksu4UJkxc3V8MuBRq61akodufo1kf25kme1yYKfE3a+wT5j4t9my5aOjvgOuq0 vGNOI7DyjdG6GR0R3PO3HBT2mFBMtCSqK9AA3UGjx8brf1SDyKGz8VCDaF0C+QH5kLEgVQIqCSrH waJnXt9s5LRufxVP2NOfszOmpOEHvAKeZttbTZdBow9GQNxKi/l/SgejJ2midsslQYxsXz1TPUFa jdlT6Ne9d3+8Jg4QTkF/ARRQkpA42A0pfSZ6PP5k1u3dISqCd6mOUN2iutzj5qZhaTZbrR0NW40A yg+X7Ut4oPmCwYsXuqR2WDVrPWyqYfxIVFHV4A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAeFoiC01j4zIdBfR1vxBGp7WmV8q6IgTQ/pvbQJhCd9+sE16txuz6M81FPFkWhTk1nsXR4tI UZLQZpvgme+q3dqWuqtFA2amB99IM9B9iq6kwSrkZNVFv6zav3eP+5BlL/OA9FNFQHXCj5qj2noA j2le7j8umVcc+4zH677ytdtIImoAY45H8wWxVrGR4kxqM54O10fPHXEPu84irfaZGrM= ) ; Key ID = 15489`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20201031190254 20201016185754 7698 gov. MBslq9pa5Huymkksu4UJkxc3V8MuBRq61akodufo1kf25kme1yYKfE3a+wT5j4t9my5aOjvgOuq0 vGNOI7DyjdG6GR0R3PO3HBT2mFBMtCSqK9AA3UGjx8brf1SDyKGz8VCDaF0C+QH5kLEgVQIqCSrH waJnXt9s5LRufxVP2NOfszOmpOEHvAKeZttbTZdBow9GQNxKi/l/SgejJ2midsslQYxsXz1TPUFa jdlT6Ne9d3+8Jg4QTkF/ARRQkpA42A0pfSZ6PP5k1u3dISqCd6mOUN2iutzj5qZhaTZbrR0NW40A yg+X7Ut4oPmCwYsXuqR2WDVrPWyqYfxIVFHV4A== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=15489 is now in the chain-of-trust
	Query to b.gov-servers.net for FAASAFETY.GOV/A
	Received 373 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (373 bytes) ;; HEADER SECTION ;; id = 43825 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FAASAFETY.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) FAASAFETY.GOV. 86400 IN NS faa-mc-egm1.faa.GOV. FAASAFETY.GOV. 86400 IN NS faa-ct-egm1.faa.GOV. FAASAFETY.GOV. 3600 IN DS ( 32289 10 2 e7d3871e0754347119d4baa2c2bf36546ed28d5c563c4ff6068efc3783b1591a ) FAASAFETY.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201102111008 20201026111008 15489 gov. pwaXsjI89BLsLLLijaMWB0CzjdwjQqa9nlLrp6kSNClxJSdoYi5GyIoGxFgEN8JC3c87/5ZUsRJO wCSsQl6+4XDNt8W2MRYobGrESKqV+Cy3BSSIokvqpwXMe9vwq75QP/2Q07juTuMtnLABotajoj9r AlcZYYu6aJTu6/L+rRmQNyLvFWsQay7JIvH2C+YAmD9eW+yd3f9cCrocBGDXqw== ) ;; ADDITIONAL SECTION (3 records) faa-mc-egm1.faa.GOV. 86400 IN A 162.58.33.66 faa-ct-egm1.faa.GOV. 86400 IN A 155.178.199.16 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.gov-servers.net for FAASAFETY.GOV/DNSKEY
	Received 373 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (373 bytes) ;; HEADER SECTION ;; id = 1235 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FAASAFETY.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) FAASAFETY.GOV. 86400 IN NS faa-mc-egm1.faa.GOV. FAASAFETY.GOV. 86400 IN NS faa-ct-egm1.faa.GOV. FAASAFETY.GOV. 3600 IN DS ( 32289 10 2 e7d3871e0754347119d4baa2c2bf36546ed28d5c563c4ff6068efc3783b1591a ) FAASAFETY.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201102111008 20201026111008 15489 gov. pwaXsjI89BLsLLLijaMWB0CzjdwjQqa9nlLrp6kSNClxJSdoYi5GyIoGxFgEN8JC3c87/5ZUsRJO wCSsQl6+4XDNt8W2MRYobGrESKqV+Cy3BSSIokvqpwXMe9vwq75QP/2Q07juTuMtnLABotajoj9r AlcZYYu6aJTu6/L+rRmQNyLvFWsQay7JIvH2C+YAmD9eW+yd3f9cCrocBGDXqw== ) ;; ADDITIONAL SECTION (3 records) faa-mc-egm1.faa.GOV. 86400 IN A 162.58.33.66 faa-ct-egm1.faa.GOV. 86400 IN A 155.178.199.16 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone FAASAFETY.GOV

FAASAFETY.GOV

	Checking DS between GOV and FAASAFETY.GOV
	Query to c.gov-servers.net for FAASAFETY.GOV/DS
	Received 285 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (285 bytes) ;; HEADER SECTION ;; id = 18229 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FAASAFETY.GOV. IN DS ;; ANSWER SECTION (2 records) FAASAFETY.GOV. 3600 IN DS ( 32289 10 2 e7d3871e0754347119d4baa2c2bf36546ed28d5c563c4ff6068efc3783b1591a ) FAASAFETY.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201102111008 20201026111008 15489 gov. pwaXsjI89BLsLLLijaMWB0CzjdwjQqa9nlLrp6kSNClxJSdoYi5GyIoGxFgEN8JC3c87/5ZUsRJO wCSsQl6+4XDNt8W2MRYobGrESKqV+Cy3BSSIokvqpwXMe9vwq75QP/2Q07juTuMtnLABotajoj9r AlcZYYu6aJTu6/L+rRmQNyLvFWsQay7JIvH2C+YAmD9eW+yd3f9cCrocBGDXqw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for FAASAFETY.GOV in the GOV zone
	DS=32289/SHA-256 has algorithm RSASHA512
	Found 1 RRSIGs over DS RRset
	`FAASAFETY.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201102111008 20201026111008 15489 gov. pwaXsjI89BLsLLLijaMWB0CzjdwjQqa9nlLrp6kSNClxJSdoYi5GyIoGxFgEN8JC3c87/5ZUsRJO wCSsQl6+4XDNt8W2MRYobGrESKqV+Cy3BSSIokvqpwXMe9vwq75QP/2Q07juTuMtnLABotajoj9r AlcZYYu6aJTu6/L+rRmQNyLvFWsQay7JIvH2C+YAmD9eW+yd3f9cCrocBGDXqw== )`
	RRSIG=15489 and DNSKEY=15489 verifies the DS RRset
	DS=32289/SHA-256 is now in the chain-of-trust
	`FAASAFETY.GOV. 3600 IN DS ( 32289 10 2 e7d3871e0754347119d4baa2c2bf36546ed28d5c563c4ff6068efc3783b1591a )`
	Query to faa-ct-egm1.faa.GOV for FAASAFETY.GOV/DNSKEY
	Received 2752 bytes from 155.178.199.16
	;; Answer received from 155.178.199.16 (2752 bytes) ;; HEADER SECTION ;; id = 25140 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FAASAFETY.GOV. IN DNSKEY ;; ANSWER SECTION (5 records) FAASAFETY.GOV. 172800 IN DNSKEY ( 257 3 10 AwEAAbNIXbVvmWZdYZNKuEHNwslanVIQHSzyfpgPNM2qR8xgbI54F0Nt+3x4LU7mIeuneruz9OET nY08EZwYvgfIdJwtiOXpg5kSm36J9IEpBMUuakwbkm8ylLbvVVaMTFSZtI1MYbxG/MWydAdUthLp q95PtBCS52Bvhh9emsD5XbfXRBugeN2c/7cwEDEQ3iEO5mWZGNe3FYO1DWZfXp62t2fOU6DE+Isw Y9Y9sUDm0rUlpMqUQrENQeyENHWBVFrEU4PLCgcW+d3O7aY1w16bHtL9yuRoePebQ8+0VvX4AxEz Z6ozu+CNowI/iAMSEAnYDg0oKJ48rQzgOCKNZ7S0sGiRRUOreFJ8t6pxiPg1imTbEWoXmgs9bWG0 e9HlvgKqVXbEj5SDod61DoPtRyQwzBI/0GH5ndqMkZ5P3P5ASX74UYqABbqJe+9Uwu3iw+K4fq9r UHrKoH9N8itIznrRPvWWn8tYTuoHGng0HoijS3v5mfUnA1lw4N6K30uhMuxbjZu4MznOgkynugIE MwUwMu8d8ZQlnxYbjxxddgNtguaIzZWCRx0FN+DwP5H5/Zd8hBqNjiE4CabjIy3yHtDXgtMfH/ST i4fHjr6gqyv6IZsW98DyIsMxJKw8epIow8y4il2Ig3VTztjNkuwfZ6yt3zOx50pDJz0xH9n8v1k+ J/Ib ) ; Key ID = 32289 FAASAFETY.GOV. 172800 IN DNSKEY ( 256 3 10 AwEAAcHPKKn9S1Il7ZtZQn1E6u1BXX6EclnhnsBLN+k28NY9+FhvN9D2yxtV4Huayx9no97iKRXf vyW7l7d5+kXys0Jbzlu5fyTAif8R7ePNChelBeA6bFdiP/KGdQn7khnAZahFKvyCK+KfrjuCMxoy 5vmlnWhnLFAKP/CzlAmocKWTRNraBFFUkc3E6QnbanU2FET7NS5VAkWVXlemzm8+HUhDNYj/9z/s mD7ANMwx3NUNF+TggPpaWPWc9zMa6D3VqaXDYRZ/OmuzQqEV4eh2R2iJOOAhxRu7tDouYEtwuIIH BzypaSeU6kF5kyjqtW2HQBYQ2kH/KQfUopHT0GoPvnFgipIGMcQXSkRiKjfCMzE+XgtibAztQn/p hAEkzl34x8tbB29CrEmEBmkMpZ6fOSMMpaMzlYL/7tEBCY0h8WAVIovXdX5TEhLtZkz2ygsU5Ft4 7fyNDLNWMAQNDjY23ToZ6q35x33FGzttpY6nxJnaFHMJ6FgBbSg5Gj9D6oaIAfqGd9UGiIHQTUnn Ah/iozIWpLzgPVmNFa0s01WDkySzuv/rROsJo7cmEu+nNbaWM3EKEwpmJpPRU2K9cZc9hF4XAqah hz79v8OYZ2alVMcObAd+8VmUYn5JwV3bmbvfbeJK79wt1sIQo9UAn+6Q6rdstw6dr97bGuXdVIfP 8JAJ ) ; Key ID = 32297 FAASAFETY.GOV. 172800 IN DNSKEY ( 256 3 10 AwEAAcAZotV5IEJ6uBqTJBCS2eXbx+oBYIbj0ixP5xbyLlcuJKhbLuEq9wRXPdiBCV+HeFrnxLyj +8yoQruoImsdmQYkcJnEEHehL3AWoZYJ0nhrhq2xxpxMtUn++Oaknrv30jvJOUh47f7+8PlEqUhd UAtwtlBZUx2tJDuom+JdfZzlKpvjpX4xfz8LBkW3U4UeH/lKQNk/F+hSAVv23ex+95UWN3bxqeW8 czJXyIiqTCi9AGH42rNGQ8lnFF3BJAViG/XGVUTnd6s1KiOH5a8AbBWeV1kUK8dja/ftL3yEgZtv D1cw65FDdAbcppsHCDZ+tgHHhWoQCIEpXgIqOKC8ta1KmbvnplsekHxy2g99t5kMJrB2hHKiP49y 8UyNd990GH6CmoyaU/f1715xXraf90VJcRkyMQINfwbrOhqe7adkTKpXWD/41ycjsaF+FtDJPZr2 uQR4LdHVYS6pgsoMKG7MZmUF9SMrDFEZgOjypRiJ0rMhRzkLalom0plVEJfcN21rX0RG1fID4eek /0Awc9t5vTLYrX5an6rjZNGlqbSS7wZrLfGH0yIsptGFy3aiAfQzMM0uXVLkJx10zWPBUHuB4VCg 8AD5HEa5xPuVUtPm+KWwp+kUVl4iAZcrFoPcusVDItgorfzd5PedDw4IpjVJLS1yLhEFus8VlFr7 otkd ) ; Key ID = 49160 FAASAFETY.GOV. 172800 IN RRSIG ( DNSKEY 10 2 172800 20201029144559 20201025141449 32289 faasafety.gov. H9OQYpVBQ89ofBxIJDZ52PwcR7RRWxeBIgx5UygNTO5sCIf56g5rv3yy61qB5lFhQ5zb/UZRk9Sg esff62yrMLekjs+QSr2LdS9BifptAplp1uUvmyjCcB0C/KYwmCgW+3moM7OHWI6VmqhDR1PX4dO0 gUJhs5p//Dl+xxre1HKACGhQ4jWKd8NUtKBJFmg11A1rLTaW5WdXnNJONB94bT7FbUwpdXnUDzlJ u+c7VCeIrjttCCcSYtC5INuZvQaKg5JvLpigyUKGROheFzIHFWjYjOV7jV1/+UzZu4vvE4ny0+XI pTv4cqdSuwUOq0i88KC8wFsqc1tHqXAvxh4D5QTtMDp5YnXXxMCcHp+Atx+QjtTAo18bpEFL265w z3q5V88ZV5rk+5ZSCrKjE0ygh5ZTKX9VBXcRRYv/BjqF05NjeD5o/LqAwSK6IwDj/7lLzDOk9QZs M8YcRIwjxI8gdIx88a14xBO9EBkkBLLyVfn09nx5tnG1sEvc7sB0EfbjNI1mTao7lBysufqiJ8Ly nt068cL/fwpmuCn7Ik1SPc8S1sfeWrJeMUkS5BVQiiHBDGEsXrTteW+/ueq/MOP4TQ3rstxIP8/O 22R4Q1OagrNrrGHIs/yNjQUqbQn6L8H69Lzwfxj8RtzQMuQijhtnZ+Apo51OlsBIqb9o3FNUuSI= ) faasafety.gov. 172800 IN RRSIG ( DNSKEY 10 2 172800 20201029144559 20201025141449 49160 faasafety.gov. Pr6mRcm+SZHK5xVcyQGKwLu85MpxpjQkv5EQwUjcmpDKXPBndVpgaw8Yl0hxd4W1E8ceWUnJXtxV wyFI+IoDfQP7XYB9tUf4KAk0lPY+TELJdu/5iCOvm3N14xZLIyPWEEhUPNDE+UcGYKPSThEA6+89 iX+ZxGbN/zDviYoTGxFrf/GMFCgyvQJFzRAJDPCZ8yL4ZJq+ivcOSxcZZnx5qm3OXvkaapsIp9V/ 7vY5JWl+rxenYm5v1Hchy66PAScD/0hr2InZR3Mk4jKEhRJ7f/ykRlxH5wE58jE+IMh9/p7IWfRi ufvfkTwwGDu2xuOnAQQvI5YbKFEOPmaY1uoKUe0AInx4MjO+acCPiyP33piGEXjlomesCuuKo4Kc rj+kDxSKUThv6UjGd6v82GUwULPIzIt6nPTQc8GqiuPPUBnF/Jw2b2juemrJhK7IvGOp4z70TMTz xRrFXyvxqaKOdmop9YTc9r3wycvVNj07wcL5fqXi8tjUpxdAULNgoujnDEksfKx45xYtDhJ8axGe 9MnRKy2V9/tSqyR7H2XmchydYfP7bf15jVsysLQYmubtqRJDKvdZlP1yAFD8Ef/eCL0OLnWzWMqu fFCMzCTQpdyqs1OUBek1uqj5Svpv9B8VRSqdFi8HAKyt9ZlN25Ran3QR0cxUAZRXyakyBl2myGQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for FAASAFETY.GOV
	FAASAFETY.GOV. 172800 IN DNSKEY ( 257 3 10 AwEAAbNIXbVvmWZdYZNKuEHNwslanVIQHSzyfpgPNM2qR8xgbI54F0Nt+3x4LU7mIeuneruz9OET nY08EZwYvgfIdJwtiOXpg5kSm36J9IEpBMUuakwbkm8ylLbvVVaMTFSZtI1MYbxG/MWydAdUthLp q95PtBCS52Bvhh9emsD5XbfXRBugeN2c/7cwEDEQ3iEO5mWZGNe3FYO1DWZfXp62t2fOU6DE+Isw Y9Y9sUDm0rUlpMqUQrENQeyENHWBVFrEU4PLCgcW+d3O7aY1w16bHtL9yuRoePebQ8+0VvX4AxEz Z6ozu+CNowI/iAMSEAnYDg0oKJ48rQzgOCKNZ7S0sGiRRUOreFJ8t6pxiPg1imTbEWoXmgs9bWG0 e9HlvgKqVXbEj5SDod61DoPtRyQwzBI/0GH5ndqMkZ5P3P5ASX74UYqABbqJe+9Uwu3iw+K4fq9r UHrKoH9N8itIznrRPvWWn8tYTuoHGng0HoijS3v5mfUnA1lw4N6K30uhMuxbjZu4MznOgkynugIE MwUwMu8d8ZQlnxYbjxxddgNtguaIzZWCRx0FN+DwP5H5/Zd8hBqNjiE4CabjIy3yHtDXgtMfH/ST i4fHjr6gqyv6IZsW98DyIsMxJKw8epIow8y4il2Ig3VTztjNkuwfZ6yt3zOx50pDJz0xH9n8v1k+ J/Ib ) ; Key ID = 32289
	FAASAFETY.GOV. 172800 IN DNSKEY ( 256 3 10 AwEAAcHPKKn9S1Il7ZtZQn1E6u1BXX6EclnhnsBLN+k28NY9+FhvN9D2yxtV4Huayx9no97iKRXf vyW7l7d5+kXys0Jbzlu5fyTAif8R7ePNChelBeA6bFdiP/KGdQn7khnAZahFKvyCK+KfrjuCMxoy 5vmlnWhnLFAKP/CzlAmocKWTRNraBFFUkc3E6QnbanU2FET7NS5VAkWVXlemzm8+HUhDNYj/9z/s mD7ANMwx3NUNF+TggPpaWPWc9zMa6D3VqaXDYRZ/OmuzQqEV4eh2R2iJOOAhxRu7tDouYEtwuIIH BzypaSeU6kF5kyjqtW2HQBYQ2kH/KQfUopHT0GoPvnFgipIGMcQXSkRiKjfCMzE+XgtibAztQn/p hAEkzl34x8tbB29CrEmEBmkMpZ6fOSMMpaMzlYL/7tEBCY0h8WAVIovXdX5TEhLtZkz2ygsU5Ft4 7fyNDLNWMAQNDjY23ToZ6q35x33FGzttpY6nxJnaFHMJ6FgBbSg5Gj9D6oaIAfqGd9UGiIHQTUnn Ah/iozIWpLzgPVmNFa0s01WDkySzuv/rROsJo7cmEu+nNbaWM3EKEwpmJpPRU2K9cZc9hF4XAqah hz79v8OYZ2alVMcObAd+8VmUYn5JwV3bmbvfbeJK79wt1sIQo9UAn+6Q6rdstw6dr97bGuXdVIfP 8JAJ ) ; Key ID = 32297
	FAASAFETY.GOV. 172800 IN DNSKEY ( 256 3 10 AwEAAcAZotV5IEJ6uBqTJBCS2eXbx+oBYIbj0ixP5xbyLlcuJKhbLuEq9wRXPdiBCV+HeFrnxLyj +8yoQruoImsdmQYkcJnEEHehL3AWoZYJ0nhrhq2xxpxMtUn++Oaknrv30jvJOUh47f7+8PlEqUhd UAtwtlBZUx2tJDuom+JdfZzlKpvjpX4xfz8LBkW3U4UeH/lKQNk/F+hSAVv23ex+95UWN3bxqeW8 czJXyIiqTCi9AGH42rNGQ8lnFF3BJAViG/XGVUTnd6s1KiOH5a8AbBWeV1kUK8dja/ftL3yEgZtv D1cw65FDdAbcppsHCDZ+tgHHhWoQCIEpXgIqOKC8ta1KmbvnplsekHxy2g99t5kMJrB2hHKiP49y 8UyNd990GH6CmoyaU/f1715xXraf90VJcRkyMQINfwbrOhqe7adkTKpXWD/41ycjsaF+FtDJPZr2 uQR4LdHVYS6pgsoMKG7MZmUF9SMrDFEZgOjypRiJ0rMhRzkLalom0plVEJfcN21rX0RG1fID4eek /0Awc9t5vTLYrX5an6rjZNGlqbSS7wZrLfGH0yIsptGFy3aiAfQzMM0uXVLkJx10zWPBUHuB4VCg 8AD5HEa5xPuVUtPm+KWwp+kUVl4iAZcrFoPcusVDItgorfzd5PedDw4IpjVJLS1yLhEFus8VlFr7 otkd ) ; Key ID = 49160
	DNSKEY=32289/SEP is now in the chain-of-trust
	DS=32289/SHA-256 verifies DNSKEY=32289/SEP
	Found 2 RRSIGs over DNSKEY RRset
	FAASAFETY.GOV. 172800 IN RRSIG ( DNSKEY 10 2 172800 20201029144559 20201025141449 32289 faasafety.gov. H9OQYpVBQ89ofBxIJDZ52PwcR7RRWxeBIgx5UygNTO5sCIf56g5rv3yy61qB5lFhQ5zb/UZRk9Sg esff62yrMLekjs+QSr2LdS9BifptAplp1uUvmyjCcB0C/KYwmCgW+3moM7OHWI6VmqhDR1PX4dO0 gUJhs5p//Dl+xxre1HKACGhQ4jWKd8NUtKBJFmg11A1rLTaW5WdXnNJONB94bT7FbUwpdXnUDzlJ u+c7VCeIrjttCCcSYtC5INuZvQaKg5JvLpigyUKGROheFzIHFWjYjOV7jV1/+UzZu4vvE4ny0+XI pTv4cqdSuwUOq0i88KC8wFsqc1tHqXAvxh4D5QTtMDp5YnXXxMCcHp+Atx+QjtTAo18bpEFL265w z3q5V88ZV5rk+5ZSCrKjE0ygh5ZTKX9VBXcRRYv/BjqF05NjeD5o/LqAwSK6IwDj/7lLzDOk9QZs M8YcRIwjxI8gdIx88a14xBO9EBkkBLLyVfn09nx5tnG1sEvc7sB0EfbjNI1mTao7lBysufqiJ8Ly nt068cL/fwpmuCn7Ik1SPc8S1sfeWrJeMUkS5BVQiiHBDGEsXrTteW+/ueq/MOP4TQ3rstxIP8/O 22R4Q1OagrNrrGHIs/yNjQUqbQn6L8H69Lzwfxj8RtzQMuQijhtnZ+Apo51OlsBIqb9o3FNUuSI= )
	faasafety.gov. 172800 IN RRSIG ( DNSKEY 10 2 172800 20201029144559 20201025141449 49160 faasafety.gov. Pr6mRcm+SZHK5xVcyQGKwLu85MpxpjQkv5EQwUjcmpDKXPBndVpgaw8Yl0hxd4W1E8ceWUnJXtxV wyFI+IoDfQP7XYB9tUf4KAk0lPY+TELJdu/5iCOvm3N14xZLIyPWEEhUPNDE+UcGYKPSThEA6+89 iX+ZxGbN/zDviYoTGxFrf/GMFCgyvQJFzRAJDPCZ8yL4ZJq+ivcOSxcZZnx5qm3OXvkaapsIp9V/ 7vY5JWl+rxenYm5v1Hchy66PAScD/0hr2InZR3Mk4jKEhRJ7f/ykRlxH5wE58jE+IMh9/p7IWfRi ufvfkTwwGDu2xuOnAQQvI5YbKFEOPmaY1uoKUe0AInx4MjO+acCPiyP33piGEXjlomesCuuKo4Kc rj+kDxSKUThv6UjGd6v82GUwULPIzIt6nPTQc8GqiuPPUBnF/Jw2b2juemrJhK7IvGOp4z70TMTz xRrFXyvxqaKOdmop9YTc9r3wycvVNj07wcL5fqXi8tjUpxdAULNgoujnDEksfKx45xYtDhJ8axGe 9MnRKy2V9/tSqyR7H2XmchydYfP7bf15jVsysLQYmubtqRJDKvdZlP1yAFD8Ef/eCL0OLnWzWMqu fFCMzCTQpdyqs1OUBek1uqj5Svpv9B8VRSqdFi8HAKyt9ZlN25Ran3QR0cxUAZRXyakyBl2myGQ= )
	RRSIG=32289 and DNSKEY=32289/SEP verifies the DNSKEY RRset
	RRSIG=49160 and DNSKEY=49160 verifies the DNSKEY RRset
	DNSKEY=32297 is now in the chain-of-trust
	DNSKEY=49160 is now in the chain-of-trust
	Query to faa-mc-egm1.faa.GOV for FAASAFETY.GOV/A
	Received 615 bytes from 162.58.33.66
	;; Answer received from 162.58.33.66 (615 bytes) ;; HEADER SECTION ;; id = 64170 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FAASAFETY.GOV. IN A ;; ANSWER SECTION (2 records) FAASAFETY.GOV. 86400 IN A 162.58.33.240 FAASAFETY.GOV. 86400 IN RRSIG ( A 10 2 86400 20201030053424 20201026052359 49160 faasafety.gov. mhFPsteWyLWBCHZJEok+smlk1L/FNZgglKIfnaEBhCF6orYNK7bIniiF/ngv3sUres4ysp4qyr34 sdrTKVMjuTCzCN1tz7GenDDEWz7vFQ0t+t/QB1bLFYuIi79WzUyfdsEfWA4KFUaqwlHLApVp0P7H MGwV5mXGcgPaKL8prSoRRKVb6a+gJxd1QgzspMaReE/AzUMWrt0Iqae30fqp6kUGoVUZdb5j7jLN 2g2EnjDOqD7WgefFf6Bv9bE9JGrFj5iZYlAl5ddEkKi9YeWF+Jdb4ptCMMRCZez3ccl3YAWvfxjt aRFgZJZYrs9nw/Bw0lZETKSwa+LX56rt9KQ5LQk3qUXesvw1ScOWgMGd370mE6SUJhOkA5a2u3VO 0JOsSZE6vC/tP4w0bZnJs9rOxQwZUDL+A/8uFspimeR60gflUH/OB0osoKVuRt/HdReIW4Dt+P3D OvkknAaxKowPQHXn3FcnAzwluTerUiSq1IjHAdcWBEsQeZxsWwK7NRf3RhDXJnaPHPrkUZyjyitW 1rv1UAZOrtTn0PxB+kHGkGeMzZJw0VCAS8gsfzSfn0uY4F86b48AUP5JgT4OTOS2V7BBU/Ldsnid jqJgoqf8hjIBQrW5UtrvcpAGAPuP2ZZJDpROZko8HtyYZnweeKlwx0RMh18src0yMyiXGazD0kI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	FAASAFETY.GOV is authoritative for FAASAFETY.GOV
	Found RRSIG signed by faasafety.gov zone
	Query to faa-ct-egm1.faa.GOV for FAASAFETY.GOV/SOA
	Received 660 bytes from 155.178.199.16
	;; Answer received from 155.178.199.16 (660 bytes) ;; HEADER SECTION ;; id = 64854 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FAASAFETY.GOV. IN SOA ;; ANSWER SECTION (2 records) FAASAFETY.GOV. 86400 IN SOA ( faa-mc-egm1.faa.GOV. helpdesk.faa.GOV. 319 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 180 ;minimum ) FAASAFETY.GOV. 86400 IN RRSIG ( SOA 10 2 86400 20201030062359 20201026052359 49160 faasafety.gov. MVG+viGtvhdJvcXZZL6bEPMIDhnEPPheiKnT9fqKUg9dCHVoE91Ra9eCWTUpNplGDjOfoVwhs6+u Uh8df4P3+n18AOgh6qgkaQWq0s3qYDjSIRSgLBCMjer+CG1aIedxaXAhjyWZlrcA9WXHEI2zAsO5 VXrJB1TbqjkeHbcdues+Dh/nzhbJ8f6szyvaf6Mo4tt4q5R6Unkm7iWfvLwwxFzJAmjCyjYLIfGK DMm63b1rdnOcPH9Tjofo4+q/wXaDC53DFWPSkPQW2sSqrgcn0S8Jm1wpHFN/cpYWg14BtMDKxR3a RsFarb7s1as3IfdptlBJIVQLDFTG5IdMr9Fjy3hh6JF1hbf8LGKnkB0A1LNbrBup8BLy7um2cFCn w0kVd5P9RigeLAR1KWzZT2WD7ESwwXfmH+KmAxvk/ZrJT3f/sKuu/BPp4WQiAkkYuCci0d0COd42 zzmT1WdlWqNC4OPuztQwPfyZKWDKt6PirM5nrWU3UXUopgzo+rQokbO6mNN3G7qK43Lbl5o8XV4w Mddi06zMWtVpUBoa5JzrXB2wWe9GHBbClXyFJbySso+KuuDz2VZ/mHissXK9QM17oQyNV3edlP0W glgERFKakt6F4/K64UffO+3GTji11E1Nvz7ubK6OoDucRr1qIA30tJr75EXOTeaiWe0mIiN+uOc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to faa-mc-egm1.faa.GOV for FAASAFETY.GOV/SOA
	Received 660 bytes from 162.58.33.66
	;; Answer received from 162.58.33.66 (660 bytes) ;; HEADER SECTION ;; id = 52254 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FAASAFETY.GOV. IN SOA ;; ANSWER SECTION (2 records) FAASAFETY.GOV. 86400 IN SOA ( faa-mc-egm1.faa.GOV. helpdesk.faa.GOV. 319 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 180 ;minimum ) FAASAFETY.GOV. 86400 IN RRSIG ( SOA 10 2 86400 20201030062359 20201026052359 49160 faasafety.gov. MVG+viGtvhdJvcXZZL6bEPMIDhnEPPheiKnT9fqKUg9dCHVoE91Ra9eCWTUpNplGDjOfoVwhs6+u Uh8df4P3+n18AOgh6qgkaQWq0s3qYDjSIRSgLBCMjer+CG1aIedxaXAhjyWZlrcA9WXHEI2zAsO5 VXrJB1TbqjkeHbcdues+Dh/nzhbJ8f6szyvaf6Mo4tt4q5R6Unkm7iWfvLwwxFzJAmjCyjYLIfGK DMm63b1rdnOcPH9Tjofo4+q/wXaDC53DFWPSkPQW2sSqrgcn0S8Jm1wpHFN/cpYWg14BtMDKxR3a RsFarb7s1as3IfdptlBJIVQLDFTG5IdMr9Fjy3hh6JF1hbf8LGKnkB0A1LNbrBup8BLy7um2cFCn w0kVd5P9RigeLAR1KWzZT2WD7ESwwXfmH+KmAxvk/ZrJT3f/sKuu/BPp4WQiAkkYuCci0d0COd42 zzmT1WdlWqNC4OPuztQwPfyZKWDKt6PirM5nrWU3UXUopgzo+rQokbO6mNN3G7qK43Lbl5o8XV4w Mddi06zMWtVpUBoa5JzrXB2wWe9GHBbClXyFJbySso+KuuDz2VZ/mHissXK9QM17oQyNV3edlP0W glgERFKakt6F4/K64UffO+3GTji11E1Nvz7ubK6OoDucRr1qIA30tJr75EXOTeaiWe0mIiN+uOc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to faa-mc-egm1.faa.GOV for FAASAFETY.GOV/A
	Received 615 bytes from 162.58.33.66
	;; Answer received from 162.58.33.66 (615 bytes) ;; HEADER SECTION ;; id = 65088 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FAASAFETY.GOV. IN A ;; ANSWER SECTION (2 records) FAASAFETY.GOV. 86400 IN A 162.58.33.240 FAASAFETY.GOV. 86400 IN RRSIG ( A 10 2 86400 20201030053424 20201026052359 49160 faasafety.gov. mhFPsteWyLWBCHZJEok+smlk1L/FNZgglKIfnaEBhCF6orYNK7bIniiF/ngv3sUres4ysp4qyr34 sdrTKVMjuTCzCN1tz7GenDDEWz7vFQ0t+t/QB1bLFYuIi79WzUyfdsEfWA4KFUaqwlHLApVp0P7H MGwV5mXGcgPaKL8prSoRRKVb6a+gJxd1QgzspMaReE/AzUMWrt0Iqae30fqp6kUGoVUZdb5j7jLN 2g2EnjDOqD7WgefFf6Bv9bE9JGrFj5iZYlAl5ddEkKi9YeWF+Jdb4ptCMMRCZez3ccl3YAWvfxjt aRFgZJZYrs9nw/Bw0lZETKSwa+LX56rt9KQ5LQk3qUXesvw1ScOWgMGd370mE6SUJhOkA5a2u3VO 0JOsSZE6vC/tP4w0bZnJs9rOxQwZUDL+A/8uFspimeR60gflUH/OB0osoKVuRt/HdReIW4Dt+P3D OvkknAaxKowPQHXn3FcnAzwluTerUiSq1IjHAdcWBEsQeZxsWwK7NRf3RhDXJnaPHPrkUZyjyitW 1rv1UAZOrtTn0PxB+kHGkGeMzZJw0VCAS8gsfzSfn0uY4F86b48AUP5JgT4OTOS2V7BBU/Ldsnid jqJgoqf8hjIBQrW5UtrvcpAGAPuP2ZZJDpROZko8HtyYZnweeKlwx0RMh18src0yMyiXGazD0kI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	FAASAFETY.GOV A RR has value 162.58.33.240
	Found 1 RRSIGs over A RRset
	FAASAFETY.GOV. 86400 IN RRSIG ( A 10 2 86400 20201030053424 20201026052359 49160 faasafety.gov. mhFPsteWyLWBCHZJEok+smlk1L/FNZgglKIfnaEBhCF6orYNK7bIniiF/ngv3sUres4ysp4qyr34 sdrTKVMjuTCzCN1tz7GenDDEWz7vFQ0t+t/QB1bLFYuIi79WzUyfdsEfWA4KFUaqwlHLApVp0P7H MGwV5mXGcgPaKL8prSoRRKVb6a+gJxd1QgzspMaReE/AzUMWrt0Iqae30fqp6kUGoVUZdb5j7jLN 2g2EnjDOqD7WgefFf6Bv9bE9JGrFj5iZYlAl5ddEkKi9YeWF+Jdb4ptCMMRCZez3ccl3YAWvfxjt aRFgZJZYrs9nw/Bw0lZETKSwa+LX56rt9KQ5LQk3qUXesvw1ScOWgMGd370mE6SUJhOkA5a2u3VO 0JOsSZE6vC/tP4w0bZnJs9rOxQwZUDL+A/8uFspimeR60gflUH/OB0osoKVuRt/HdReIW4Dt+P3D OvkknAaxKowPQHXn3FcnAzwluTerUiSq1IjHAdcWBEsQeZxsWwK7NRf3RhDXJnaPHPrkUZyjyitW 1rv1UAZOrtTn0PxB+kHGkGeMzZJw0VCAS8gsfzSfn0uY4F86b48AUP5JgT4OTOS2V7BBU/Ldsnid jqJgoqf8hjIBQrW5UtrvcpAGAPuP2ZZJDpROZko8HtyYZnweeKlwx0RMh18src0yMyiXGazD0kI= )
	RRSIG=49160 and DNSKEY=49160 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test FAASAFETY.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: