DNSSEC Analyzer

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2019-04-24 09:58:11 UTC, NTP stratum 4

Analyzing DNSSEC problems for FAN.GOV

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to d.root-servers.net for ./DNSKEY
	Error querying d.root-servers.net/2001:500:2d:0:0:0:0:d for ./DNSKEY: 'IPv6 transport disabled'
	Received 864 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (864 bytes) ;; HEADER SECTION ;; id = 9929 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190512000000 20190421000000 20326 . ljHKB9UaikaYC1wHzZyFwwibNFjGuwnI3DtVLsnRUwqmq2Er3uaMUYA63Odz4yO1f46zPAOcciVt Xol5oOyci84eGFb/7x6iZpcpIqFP7kWoNTRlQWgJ2V3KHYLr6w3TYiV/eWY7Ziu9HFPV6SLAt6g9 RWgaNwlLUw+fHdmhiAteoXjEBfqNC1je5FtAdPaOB3/aYbUayL4miAo3tsBt8vDzFPOvYVkMHbo4 75Bg1roJfSqxlfKEamGWMwtfnSjmw8htrvi51TBgUOsBBsSGgYWY5/5THwyc8oQDZfi72DiOF2Gr UGjr9yvQIYMuukNAOG8tvAn9PjHlY6pg4XkGUA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DS=19036/SHA-256 is published, but a corresponding DNSKEY is not
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190512000000 20190421000000 20326 . ljHKB9UaikaYC1wHzZyFwwibNFjGuwnI3DtVLsnRUwqmq2Er3uaMUYA63Odz4yO1f46zPAOcciVt Xol5oOyci84eGFb/7x6iZpcpIqFP7kWoNTRlQWgJ2V3KHYLr6w3TYiV/eWY7Ziu9HFPV6SLAt6g9 RWgaNwlLUw+fHdmhiAteoXjEBfqNC1je5FtAdPaOB3/aYbUayL4miAo3tsBt8vDzFPOvYVkMHbo4 75Bg1roJfSqxlfKEamGWMwtfnSjmw8htrvi51TBgUOsBBsSGgYWY5/5THwyc8oQDZfi72DiOF2Gr UGjr9yvQIYMuukNAOG8tvAn9PjHlY6pg4XkGUA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=25266 is now in the chain-of-trust
	Query to l.root-servers.net for FAN.GOV/A
	Error querying l.root-servers.net/2001:500:9f:0:0:0:0:42 for FAN.GOV/A: 'IPv6 transport disabled'
	Received 662 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (662 bytes) ;; HEADER SECTION ;; id = 59251 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FAN.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20190507050000 20190424040000 25266 . P/lz8XVonAZDJE2RMLV6BaoZ+yTpN68Yiq7wRSDeWhu3zoahDUCcpqIgLX1iFGJe1ifOkPW4TqyS nLjBBO9+l/0U9JpnRqK+yIGRZC0J99mGL9cBEFnbcjA3wSHuceTTQJri1RXWPRJYGguNXHywLkvq OAP9yWyS48+kvNIHa0DOelZRtkHgy/WhAZRl92Vp61Ew0FgEiEitp9Z8PpsjpHOrQnW+PP/spzrC zdu5SdVZTfhZRBAMls3jNYdc1DAxTfLynFwx5qapAl4dQ4Mx1HO+499RmNILSkY666hsps55cc0f QXlcgUi6k2YPnps/j+UF1Nnz9qKJ8ofdjfTfmA== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to m.root-servers.net for GOV/DNSKEY
	Error querying m.root-servers.net/2001:dc3:0:0:0:0:0:35 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 661 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (661 bytes) ;; HEADER SECTION ;; id = 55296 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20190507050000 20190424040000 25266 . P/lz8XVonAZDJE2RMLV6BaoZ+yTpN68Yiq7wRSDeWhu3zoahDUCcpqIgLX1iFGJe1ifOkPW4TqyS nLjBBO9+l/0U9JpnRqK+yIGRZC0J99mGL9cBEFnbcjA3wSHuceTTQJri1RXWPRJYGguNXHywLkvq OAP9yWyS48+kvNIHa0DOelZRtkHgy/WhAZRl92Vp61Ew0FgEiEitp9Z8PpsjpHOrQnW+PP/spzrC zdu5SdVZTfhZRBAMls3jNYdc1DAxTfLynFwx5qapAl4dQ4Mx1HO+499RmNILSkY666hsps55cc0f QXlcgUi6k2YPnps/j+UF1Nnz9qKJ8ofdjfTfmA== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to e.root-servers.net for GOV/DS
	Received 403 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (403 bytes) ;; HEADER SECTION ;; id = 52779 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20190507050000 20190424040000 25266 . P/lz8XVonAZDJE2RMLV6BaoZ+yTpN68Yiq7wRSDeWhu3zoahDUCcpqIgLX1iFGJe1ifOkPW4TqyS nLjBBO9+l/0U9JpnRqK+yIGRZC0J99mGL9cBEFnbcjA3wSHuceTTQJri1RXWPRJYGguNXHywLkvq OAP9yWyS48+kvNIHa0DOelZRtkHgy/WhAZRl92Vp61Ew0FgEiEitp9Z8PpsjpHOrQnW+PP/spzrC zdu5SdVZTfhZRBAMls3jNYdc1DAxTfLynFwx5qapAl4dQ4Mx1HO+499RmNILSkY666hsps55cc0f QXlcgUi6k2YPnps/j+UF1Nnz9qKJ8ofdjfTfmA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20190507050000 20190424040000 25266 . P/lz8XVonAZDJE2RMLV6BaoZ+yTpN68Yiq7wRSDeWhu3zoahDUCcpqIgLX1iFGJe1ifOkPW4TqyS nLjBBO9+l/0U9JpnRqK+yIGRZC0J99mGL9cBEFnbcjA3wSHuceTTQJri1RXWPRJYGguNXHywLkvq OAP9yWyS48+kvNIHa0DOelZRtkHgy/WhAZRl92Vp61Ew0FgEiEitp9Z8PpsjpHOrQnW+PP/spzrC zdu5SdVZTfhZRBAMls3jNYdc1DAxTfLynFwx5qapAl4dQ4Mx1HO+499RmNILSkY666hsps55cc0f QXlcgUi6k2YPnps/j+UF1Nnz9qKJ8ofdjfTfmA== )`
	RRSIG=25266 and DNSKEY=25266 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to d.gov-servers.net for GOV/DNSKEY
	Received 743 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (743 bytes) ;; HEADER SECTION ;; id = 63899 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 256 3 8 AQPO0gfZTyKZiRSwF/XvW9ta+joX/SlCfvNcTsNT4t5edmGhhiRNf45246Z4L6Cx3n93FPHtW91n F+M1gCPyxewRyAM0/UVrqBwutdPQnR8vsQ/WzdsAk50loby/jGN7UAStU/FzllD2qIq4uJ8HcLZW Qth9JV8vKuqVYXgPfhx5lw== ) ; Key ID = 43583 GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190502214731 20190417214231 7698 gov. GjRUnOLfnBAtIlt6hLcfcO1H6NuS90vNTDPZ+AQznOz3HueEqBORAmtN1Yr1z0Bnu7LHCEUVijJN SAfPRqPhwhnwBUWDHBahKuDspOKEJtNHzO5Wag4dk5n9szFVyIf6oWOPc5B0NLZc/9phCu4it24X FOynCwl+G5Fo1bFQaMfoh1CSDwZeq90LFwjLUOOKMMcwHdTVL7DIreDuGsqkFS4ZX5MoqztrUkmj TN9nF9soq7kSUiyPtbGy0c+FgMc8iEE5weI0bYXC2J8msnsFQijTQTPiwZGSIVZD5l74b2uK1SVq rHZULW5BRRnVaAGCEVLU8gTPZS0GRBNWNQcbWQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQPO0gfZTyKZiRSwF/XvW9ta+joX/SlCfvNcTsNT4t5edmGhhiRNf45246Z4L6Cx3n93FPHtW91n F+M1gCPyxewRyAM0/UVrqBwutdPQnR8vsQ/WzdsAk50loby/jGN7UAStU/FzllD2qIq4uJ8HcLZW Qth9JV8vKuqVYXgPfhx5lw== ) ; Key ID = 43583`
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190502214731 20190417214231 7698 gov. GjRUnOLfnBAtIlt6hLcfcO1H6NuS90vNTDPZ+AQznOz3HueEqBORAmtN1Yr1z0Bnu7LHCEUVijJN SAfPRqPhwhnwBUWDHBahKuDspOKEJtNHzO5Wag4dk5n9szFVyIf6oWOPc5B0NLZc/9phCu4it24X FOynCwl+G5Fo1bFQaMfoh1CSDwZeq90LFwjLUOOKMMcwHdTVL7DIreDuGsqkFS4ZX5MoqztrUkmj TN9nF9soq7kSUiyPtbGy0c+FgMc8iEE5weI0bYXC2J8msnsFQijTQTPiwZGSIVZD5l74b2uK1SVq rHZULW5BRRnVaAGCEVLU8gTPZS0GRBNWNQcbWQ== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=43583 is now in the chain-of-trust
	Query to b.gov-servers.net for FAN.GOV/A
	Error querying b.gov-servers.net/2620:74:27:0:0:0:2:30 for FAN.GOV/A: 'IPv6 transport disabled'
	Received 413 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (413 bytes) ;; HEADER SECTION ;; id = 14229 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FAN.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) FAN.GOV. 86400 IN NS a26-65.akam.net. FAN.GOV. 86400 IN NS a9-64.akam.net. FAN.GOV. 86400 IN NS a3-66.akam.net. FAN.GOV. 86400 IN NS a14-64.akam.net. FAN.GOV. 86400 IN NS a1-63.akam.net. FAN.GOV. 86400 IN NS a8-67.akam.net. FAN.GOV. 3600 IN DS 53699 8 1 44cd8b16e28186b4be7805a4eb82ddedb29ee20a FAN.GOV. 3600 IN DS ( 53699 8 2 b47f0d45ba55497fe6e5e308b4174080d9ad5bf43873477dd4c8e84f3d914162 ) FAN.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190501041007 20190424041007 43583 gov. p3lQ3Y8F2EyQh0ZMZnA9peWYH174LNnTIhwqQ1ZVqTUo48LCSzqsAwYAf3sUhOqaLdBquQd/eCTq wbcmGhGzDEExqN2zXk+HSqaAutxWEgWiw3o+jkRFAdtB3UBF0KQPUrQk9Lp0/hQxZSEwXPKzREf3 wcnenjueBdk3k5Hmags= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.gov-servers.net for FAN.GOV/DNSKEY
	Received 413 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (413 bytes) ;; HEADER SECTION ;; id = 40373 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FAN.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) FAN.GOV. 86400 IN NS a26-65.akam.net. FAN.GOV. 86400 IN NS a9-64.akam.net. FAN.GOV. 86400 IN NS a3-66.akam.net. FAN.GOV. 86400 IN NS a14-64.akam.net. FAN.GOV. 86400 IN NS a1-63.akam.net. FAN.GOV. 86400 IN NS a8-67.akam.net. FAN.GOV. 3600 IN DS 53699 8 1 44cd8b16e28186b4be7805a4eb82ddedb29ee20a FAN.GOV. 3600 IN DS ( 53699 8 2 b47f0d45ba55497fe6e5e308b4174080d9ad5bf43873477dd4c8e84f3d914162 ) FAN.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190501041007 20190424041007 43583 gov. p3lQ3Y8F2EyQh0ZMZnA9peWYH174LNnTIhwqQ1ZVqTUo48LCSzqsAwYAf3sUhOqaLdBquQd/eCTq wbcmGhGzDEExqN2zXk+HSqaAutxWEgWiw3o+jkRFAdtB3UBF0KQPUrQk9Lp0/hQxZSEwXPKzREf3 wcnenjueBdk3k5Hmags= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone FAN.GOV

FAN.GOV

	Checking DS between GOV and FAN.GOV
	Query to a.gov-servers.net for FAN.GOV/DS
	Received 283 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (283 bytes) ;; HEADER SECTION ;; id = 8902 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FAN.GOV. IN DS ;; ANSWER SECTION (3 records) FAN.GOV. 3600 IN DS 53699 8 1 44cd8b16e28186b4be7805a4eb82ddedb29ee20a FAN.GOV. 3600 IN DS ( 53699 8 2 b47f0d45ba55497fe6e5e308b4174080d9ad5bf43873477dd4c8e84f3d914162 ) FAN.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190501041007 20190424041007 43583 gov. p3lQ3Y8F2EyQh0ZMZnA9peWYH174LNnTIhwqQ1ZVqTUo48LCSzqsAwYAf3sUhOqaLdBquQd/eCTq wbcmGhGzDEExqN2zXk+HSqaAutxWEgWiw3o+jkRFAdtB3UBF0KQPUrQk9Lp0/hQxZSEwXPKzREf3 wcnenjueBdk3k5Hmags= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for FAN.GOV in the GOV zone
	DS=53699/SHA-1 has algorithm RSASHA256
	DS=53699/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`FAN.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190501041007 20190424041007 43583 gov. p3lQ3Y8F2EyQh0ZMZnA9peWYH174LNnTIhwqQ1ZVqTUo48LCSzqsAwYAf3sUhOqaLdBquQd/eCTq wbcmGhGzDEExqN2zXk+HSqaAutxWEgWiw3o+jkRFAdtB3UBF0KQPUrQk9Lp0/hQxZSEwXPKzREf3 wcnenjueBdk3k5Hmags= )`
	RRSIG=43583 and DNSKEY=43583 verifies the DS RRset
	DS=53699/SHA-1 is now in the chain-of-trust
	`FAN.GOV. 3600 IN DS 53699 8 1 44cd8b16e28186b4be7805a4eb82ddedb29ee20a`
	`FAN.GOV. 3600 IN DS ( 53699 8 2 b47f0d45ba55497fe6e5e308b4174080d9ad5bf43873477dd4c8e84f3d914162 )`
	Query to a1-63.akam.net for FAN.GOV/DNSKEY
	Received 1454 bytes from 193.108.91.63
	;; Answer received from 193.108.91.63 (1454 bytes) ;; HEADER SECTION ;; id = 42992 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FAN.GOV. IN DNSKEY ;; ANSWER SECTION (5 records) FAN.GOV. 15768000 IN DNSKEY ( 256 3 8 AwEAAcUltWVt4UUZRWL2ivqsGMhUKvQ27baKLW0TCje2CTAW7fOymJWsi3VuT6DlJi0hc/74bVfr s/TJBdXMoWXVWpIp+qGkMJRmJye/+Y1w7roC1H0s3+0jLYmut8exv3MSU+zhCWV0dzRb8WGaWmco /5+457TDtFU0efdA8FZHv7T24W8YwG/1mpxl2uYFk8fDP0lEfT5gcF158UEdEs6JD8U1WULAMwbj 4V9tSg43iYT4f4rE0Yv2xJRLGGekaweazZmd9FG66lPGYy33dTQOjjj/9MmGeByjkDAMPMglQwmG 32pdjn2tsyNfrueXXH3N7ksskR7oFH9d0Hdn5AnqtUE= ) ; Key ID = 10578 FAN.GOV. 15768000 IN DNSKEY ( 256 3 8 AwEAAcb7T8et6kNUKNYaL9rF8fGWtRDxCACqnc7hftryfywZE+4u7rzLaWOlfqkZ2E5z7L3eXZ5Y NsgtSBZ5QC5nh6QCmtV9+JDDH+OWfejK94zpyH6QqdYuGLOEudLbipwrMspYeBV8FFVTO9djBt6l Qjo220NidVhzHCKevcl6bNmvlPd5zR0izxgI6FqEJlJFuNTubM7Whj6YUT1IAB2QKH4skFyFmoyB ET7is8Lpo08SstiYdxUYuh1pQmep6n1AE4q4MwhCQej6w9MJOhXK5daeMbvcMbrp3rUMX3Yakyqv 7mEdoQwDLXGtYt4db+DZVRTigb+GXOb7bOcdkCefCNE= ) ; Key ID = 60096 FAN.GOV. 15768000 IN DNSKEY ( 257 3 8 AwEAAbuA216Q2cDddhgeRwnGdqX7X8FrD4Y42l2i7j8boA7wAoy+sHnB/3pi5L1UNlAO+dzl8+/x AD8RQSUXHSYRl6rtgHwOT8vT5bDvIzxL2sdf1MHi62C4Kw1LqPW5p4pMhdl73nz/mnGmi1DbBG0y fHqXOdlCl4BnJ09l9tO5rEZcEOdbkVEp80RDKsBfsRPeemihC2fNMUc6qsRXFBn6F/iiJ1k+0p3T iACsOxLhvnUhJbtjAD7mVCoBxKwIXJ9IqtzivuIm3C6BWQIfBZN7d+O8SBeqWy6GVVkv09uJF4LO wTfqQdDl8E7gXux3UULG5A/m5Fqjt5WDptZXkVKhqDc= ) ; Key ID = 53699 FAN.GOV. 15768000 IN RRSIG ( DNSKEY 8 2 15768000 20200310135806 20190311125806 60096 fan.gov. HnV696Ojz/UcvCY3zzz6dEUHLqt37b3CKhmH/l7qv00RW35lXFuqUFRkWPRRYsLKpiqaeu8iyDcw IWZ67/DhhXtl9YQc2f1xdjIw77SoRaZYud8Q81DBmTDXr+QmQiTZaw9AHsydKz4uAWpFoI3I47t5 PNkKf+ReIhVJn1Xufci+UnkRtU+xxEcsFDcyYN/zuQoeX1KNswigcxBDZYCGaKG3ehqJpqShnyZ0 47wYyi3lLQ1/itWPzllvhmk21tkCppdEPDd39HMIveNpAVzFTwhG60Kq66m+DeTNCd+PHbFYOTHd XPdstO8CJYS3wpLAtAl+xUL39+rTyMMlquZPJg== ) FAN.GOV. 15768000 IN RRSIG ( DNSKEY 8 2 15768000 20200310135806 20190311125806 53699 fan.gov. Iws7mVkUl+NCp68LJfuDDM8cu0pikH5OqBEiNBZ8UNnNyBJ736HQOcr0l6oA5CZEWkNWlqBKnvVl AIJPqPT9uMHUj4hVflbfqb8GFlmnvpqoqMu7nVFTy4nR81iFD9gwTpRjStPFKU7yj1IX0xVefdcL kf0aNRk7clQsqo44mv2GU+RYJicKwLWOny/Vt42usSZXNL92yHTbOCcUqlYC5Zm7DLscW+cyhH1z 8fQd9j1TydnQ+tyN3Ra0hFhGGM9dTwFu/0h8dzuPnahmM+Oe/DuyHtwwy2K/wYPTvCnUqdqnZTgZ rHpeJLh8rHr4JK/78EnN3Y/HuQSquxIN/hE0Jg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for FAN.GOV
	`FAN.GOV. 15768000 IN DNSKEY ( 256 3 8 AwEAAcUltWVt4UUZRWL2ivqsGMhUKvQ27baKLW0TCje2CTAW7fOymJWsi3VuT6DlJi0hc/74bVfr s/TJBdXMoWXVWpIp+qGkMJRmJye/+Y1w7roC1H0s3+0jLYmut8exv3MSU+zhCWV0dzRb8WGaWmco /5+457TDtFU0efdA8FZHv7T24W8YwG/1mpxl2uYFk8fDP0lEfT5gcF158UEdEs6JD8U1WULAMwbj 4V9tSg43iYT4f4rE0Yv2xJRLGGekaweazZmd9FG66lPGYy33dTQOjjj/9MmGeByjkDAMPMglQwmG 32pdjn2tsyNfrueXXH3N7ksskR7oFH9d0Hdn5AnqtUE= ) ; Key ID = 10578`
	`FAN.GOV. 15768000 IN DNSKEY ( 256 3 8 AwEAAcb7T8et6kNUKNYaL9rF8fGWtRDxCACqnc7hftryfywZE+4u7rzLaWOlfqkZ2E5z7L3eXZ5Y NsgtSBZ5QC5nh6QCmtV9+JDDH+OWfejK94zpyH6QqdYuGLOEudLbipwrMspYeBV8FFVTO9djBt6l Qjo220NidVhzHCKevcl6bNmvlPd5zR0izxgI6FqEJlJFuNTubM7Whj6YUT1IAB2QKH4skFyFmoyB ET7is8Lpo08SstiYdxUYuh1pQmep6n1AE4q4MwhCQej6w9MJOhXK5daeMbvcMbrp3rUMX3Yakyqv 7mEdoQwDLXGtYt4db+DZVRTigb+GXOb7bOcdkCefCNE= ) ; Key ID = 60096`
	`FAN.GOV. 15768000 IN DNSKEY ( 257 3 8 AwEAAbuA216Q2cDddhgeRwnGdqX7X8FrD4Y42l2i7j8boA7wAoy+sHnB/3pi5L1UNlAO+dzl8+/x AD8RQSUXHSYRl6rtgHwOT8vT5bDvIzxL2sdf1MHi62C4Kw1LqPW5p4pMhdl73nz/mnGmi1DbBG0y fHqXOdlCl4BnJ09l9tO5rEZcEOdbkVEp80RDKsBfsRPeemihC2fNMUc6qsRXFBn6F/iiJ1k+0p3T iACsOxLhvnUhJbtjAD7mVCoBxKwIXJ9IqtzivuIm3C6BWQIfBZN7d+O8SBeqWy6GVVkv09uJF4LO wTfqQdDl8E7gXux3UULG5A/m5Fqjt5WDptZXkVKhqDc= ) ; Key ID = 53699`
	DNSKEY=53699/SEP is now in the chain-of-trust
	DS=53699/SHA-1 verifies DNSKEY=53699/SEP
	DS=53699/SHA-256 verifies DNSKEY=53699/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`FAN.GOV. 15768000 IN RRSIG ( DNSKEY 8 2 15768000 20200310135806 20190311125806 60096 fan.gov. HnV696Ojz/UcvCY3zzz6dEUHLqt37b3CKhmH/l7qv00RW35lXFuqUFRkWPRRYsLKpiqaeu8iyDcw IWZ67/DhhXtl9YQc2f1xdjIw77SoRaZYud8Q81DBmTDXr+QmQiTZaw9AHsydKz4uAWpFoI3I47t5 PNkKf+ReIhVJn1Xufci+UnkRtU+xxEcsFDcyYN/zuQoeX1KNswigcxBDZYCGaKG3ehqJpqShnyZ0 47wYyi3lLQ1/itWPzllvhmk21tkCppdEPDd39HMIveNpAVzFTwhG60Kq66m+DeTNCd+PHbFYOTHd XPdstO8CJYS3wpLAtAl+xUL39+rTyMMlquZPJg== )`
	`FAN.GOV. 15768000 IN RRSIG ( DNSKEY 8 2 15768000 20200310135806 20190311125806 53699 fan.gov. Iws7mVkUl+NCp68LJfuDDM8cu0pikH5OqBEiNBZ8UNnNyBJ736HQOcr0l6oA5CZEWkNWlqBKnvVl AIJPqPT9uMHUj4hVflbfqb8GFlmnvpqoqMu7nVFTy4nR81iFD9gwTpRjStPFKU7yj1IX0xVefdcL kf0aNRk7clQsqo44mv2GU+RYJicKwLWOny/Vt42usSZXNL92yHTbOCcUqlYC5Zm7DLscW+cyhH1z 8fQd9j1TydnQ+tyN3Ra0hFhGGM9dTwFu/0h8dzuPnahmM+Oe/DuyHtwwy2K/wYPTvCnUqdqnZTgZ rHpeJLh8rHr4JK/78EnN3Y/HuQSquxIN/hE0Jg== )`
	RRSIG=60096 and DNSKEY=60096 verifies the DNSKEY RRset
	RRSIG=53699 and DNSKEY=53699/SEP verifies the DNSKEY RRset
	DNSKEY=10578 is now in the chain-of-trust
	DNSKEY=60096 is now in the chain-of-trust
	Query to a1-63.akam.net for FAN.GOV/A
	Error querying a1-63.akam.net/2600:1401:2:0:0:0:0:3f for FAN.GOV/A: 'IPv6 transport disabled'
	Received 347 bytes from 193.108.91.63
	;; Answer received from 193.108.91.63 (347 bytes) ;; HEADER SECTION ;; id = 44428 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FAN.GOV. IN A ;; ANSWER SECTION (2 records) FAN.GOV. 900 IN A 52.222.78.234 FAN.GOV. 900 IN RRSIG ( A 8 2 900 20200305142511 20190306132512 60096 fan.gov. qnVVtBMqpk23DFzOmrK1nL0oYnEs5Dx1D4mSF5TaqTlEv/1RbJyE1f0ODQW+WgJ6+SJhcBA9briX qjuthU1Z2H6VoVSn2epd5wufonbZIRtzHyUsaz+iZ9Pbx4mxR04Ygv9AvALevxLqeHZVeUHfeZOR HWFE8dBshiQqLlirnjJcuRytWn9zxV7loxcwg8gA5Brdf/G3LCDOuIVEJg7BdDBlYwY7PiNBHG5o 7syw0HsVOXfBlLLGK7J2oG4VlALN4lXBlgYwe73GjiLGwHdS3zlAO5M9VVr0xbV8/hl3k9l9q/Sb M2NFFV2Gq3Fb2WV4rPc7nOevgTaARxpRPfOT7g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	FAN.GOV is authoritative for FAN.GOV
	Found RRSIG signed by fan.gov zone
	Query to a1-63.akam.net for FAN.GOV/SOA
	Error querying a1-63.akam.net/2600:1401:2:0:0:0:0:3f for FAN.GOV/SOA: 'IPv6 transport disabled'
	Received 837 bytes from 193.108.91.63
	;; Answer received from 193.108.91.63 (837 bytes) ;; HEADER SECTION ;; id = 65340 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FAN.GOV. IN SOA ;; ANSWER SECTION (2 records) FAN.GOV. 10800 IN SOA ( o-sa26-ddi001.grid.state.sbu. hostmaster.state.GOV. 4244 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) FAN.GOV. 10800 IN RRSIG ( SOA 8 2 10800 20200407131627 20190408121627 60096 fan.gov. ujQJsQAUC8+lUamYrceZrpgusstbGeb9cQFxWh5vssQ4/CaVQOt0BEF7cOEC726VdSJ6X2NYUJ4c ayHchiJM8pX0aJ02n8uormw6LoXYYGMewO6wrFQtf8EHUbps1fXe970V0L2ieNp3xGlQJ0W0hYLD VgCXWDsl4KHVYAJtP14IOOlyyELtff5eP+3XPiPD7twwe5d746DHnJHT04U2hiCQnup9vUH8gc8Y 2GsISxl0wVtXzYy7YWAloMImqj3LmzdQSS1aFuiic/2FZ+gcRdCFkNW6ucPLN9Yb9ldwZvKSACsS MSGyBYyAtQkWSOXkMj9vohh9sRDJ9qOuLf6tfQ== ) ;; AUTHORITY SECTION (7 records) FAN.GOV. 900 IN NS a8-67.akam.net. FAN.GOV. 900 IN NS a26-65.akam.net. FAN.GOV. 900 IN NS a9-64.akam.net. FAN.GOV. 900 IN NS a3-66.akam.net. FAN.GOV. 900 IN NS a1-63.akam.net. FAN.GOV. 900 IN NS a14-64.akam.net. FAN.GOV. 900 IN RRSIG ( NS 8 2 900 20200305142511 20190306132512 60096 fan.gov. TS8HdyFAPzfSRRobDYbgYiBiviYmCxSdXE0Em8OeNPglpQkYChFmb6YkRvlNy6mCwwucXW7GuJ/u XDE/ZguNB+vgg8qj2vYCZAPlTIsy9hwgml897td1I6ZNVow3aIixAGxdUiJmo5lXmH5odhVoYvwr ny2dFMXDt4o2VIS0GyxIdUJNZV63OF7tb5jqumZeUb+dzyEYhl46bcWHcjyvAMl3YoK6EgMx+e1C x0daChV5cVKZTx8QlH3ZxZnPUqj9Pw+AVtjS5da7PBEhqr2RJUghnXyXauUYo1LpQmeej4ERDOhj 932mZhoK/hQ3Ahw3c5hLECyYqYUHGLb7C8ELnQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a26-65.akam.net for FAN.GOV/SOA
	Received 837 bytes from 23.74.25.65
	;; Answer received from 23.74.25.65 (837 bytes) ;; HEADER SECTION ;; id = 25694 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FAN.GOV. IN SOA ;; ANSWER SECTION (2 records) FAN.GOV. 10800 IN SOA ( o-sa26-ddi001.grid.state.sbu. hostmaster.state.GOV. 4244 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) FAN.GOV. 10800 IN RRSIG ( SOA 8 2 10800 20200407131627 20190408121627 60096 fan.gov. ujQJsQAUC8+lUamYrceZrpgusstbGeb9cQFxWh5vssQ4/CaVQOt0BEF7cOEC726VdSJ6X2NYUJ4c ayHchiJM8pX0aJ02n8uormw6LoXYYGMewO6wrFQtf8EHUbps1fXe970V0L2ieNp3xGlQJ0W0hYLD VgCXWDsl4KHVYAJtP14IOOlyyELtff5eP+3XPiPD7twwe5d746DHnJHT04U2hiCQnup9vUH8gc8Y 2GsISxl0wVtXzYy7YWAloMImqj3LmzdQSS1aFuiic/2FZ+gcRdCFkNW6ucPLN9Yb9ldwZvKSACsS MSGyBYyAtQkWSOXkMj9vohh9sRDJ9qOuLf6tfQ== ) ;; AUTHORITY SECTION (7 records) FAN.GOV. 900 IN NS a9-64.akam.net. FAN.GOV. 900 IN NS a14-64.akam.net. FAN.GOV. 900 IN NS a26-65.akam.net. FAN.GOV. 900 IN NS a8-67.akam.net. FAN.GOV. 900 IN NS a1-63.akam.net. FAN.GOV. 900 IN NS a3-66.akam.net. FAN.GOV. 900 IN RRSIG ( NS 8 2 900 20200305142511 20190306132512 60096 fan.gov. TS8HdyFAPzfSRRobDYbgYiBiviYmCxSdXE0Em8OeNPglpQkYChFmb6YkRvlNy6mCwwucXW7GuJ/u XDE/ZguNB+vgg8qj2vYCZAPlTIsy9hwgml897td1I6ZNVow3aIixAGxdUiJmo5lXmH5odhVoYvwr ny2dFMXDt4o2VIS0GyxIdUJNZV63OF7tb5jqumZeUb+dzyEYhl46bcWHcjyvAMl3YoK6EgMx+e1C x0daChV5cVKZTx8QlH3ZxZnPUqj9Pw+AVtjS5da7PBEhqr2RJUghnXyXauUYo1LpQmeej4ERDOhj 932mZhoK/hQ3Ahw3c5hLECyYqYUHGLb7C8ELnQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a8-67.akam.net for FAN.GOV/SOA
	Received 837 bytes from 2.16.40.67
	;; Answer received from 2.16.40.67 (837 bytes) ;; HEADER SECTION ;; id = 22796 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FAN.GOV. IN SOA ;; ANSWER SECTION (2 records) FAN.GOV. 10800 IN SOA ( o-sa26-ddi001.grid.state.sbu. hostmaster.state.GOV. 4244 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) FAN.GOV. 10800 IN RRSIG ( SOA 8 2 10800 20200407131627 20190408121627 60096 fan.gov. ujQJsQAUC8+lUamYrceZrpgusstbGeb9cQFxWh5vssQ4/CaVQOt0BEF7cOEC726VdSJ6X2NYUJ4c ayHchiJM8pX0aJ02n8uormw6LoXYYGMewO6wrFQtf8EHUbps1fXe970V0L2ieNp3xGlQJ0W0hYLD VgCXWDsl4KHVYAJtP14IOOlyyELtff5eP+3XPiPD7twwe5d746DHnJHT04U2hiCQnup9vUH8gc8Y 2GsISxl0wVtXzYy7YWAloMImqj3LmzdQSS1aFuiic/2FZ+gcRdCFkNW6ucPLN9Yb9ldwZvKSACsS MSGyBYyAtQkWSOXkMj9vohh9sRDJ9qOuLf6tfQ== ) ;; AUTHORITY SECTION (7 records) FAN.GOV. 900 IN NS a3-66.akam.net. FAN.GOV. 900 IN NS a9-64.akam.net. FAN.GOV. 900 IN NS a26-65.akam.net. FAN.GOV. 900 IN NS a14-64.akam.net. FAN.GOV. 900 IN NS a1-63.akam.net. FAN.GOV. 900 IN NS a8-67.akam.net. FAN.GOV. 900 IN RRSIG ( NS 8 2 900 20200305142511 20190306132512 60096 fan.gov. TS8HdyFAPzfSRRobDYbgYiBiviYmCxSdXE0Em8OeNPglpQkYChFmb6YkRvlNy6mCwwucXW7GuJ/u XDE/ZguNB+vgg8qj2vYCZAPlTIsy9hwgml897td1I6ZNVow3aIixAGxdUiJmo5lXmH5odhVoYvwr ny2dFMXDt4o2VIS0GyxIdUJNZV63OF7tb5jqumZeUb+dzyEYhl46bcWHcjyvAMl3YoK6EgMx+e1C x0daChV5cVKZTx8QlH3ZxZnPUqj9Pw+AVtjS5da7PBEhqr2RJUghnXyXauUYo1LpQmeej4ERDOhj 932mZhoK/hQ3Ahw3c5hLECyYqYUHGLb7C8ELnQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a14-64.akam.net for FAN.GOV/SOA
	Received 837 bytes from 184.26.161.64
	;; Answer received from 184.26.161.64 (837 bytes) ;; HEADER SECTION ;; id = 64510 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FAN.GOV. IN SOA ;; ANSWER SECTION (2 records) FAN.GOV. 10800 IN SOA ( o-sa26-ddi001.grid.state.sbu. hostmaster.state.GOV. 4244 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) FAN.GOV. 10800 IN RRSIG ( SOA 8 2 10800 20200407131627 20190408121627 60096 fan.gov. ujQJsQAUC8+lUamYrceZrpgusstbGeb9cQFxWh5vssQ4/CaVQOt0BEF7cOEC726VdSJ6X2NYUJ4c ayHchiJM8pX0aJ02n8uormw6LoXYYGMewO6wrFQtf8EHUbps1fXe970V0L2ieNp3xGlQJ0W0hYLD VgCXWDsl4KHVYAJtP14IOOlyyELtff5eP+3XPiPD7twwe5d746DHnJHT04U2hiCQnup9vUH8gc8Y 2GsISxl0wVtXzYy7YWAloMImqj3LmzdQSS1aFuiic/2FZ+gcRdCFkNW6ucPLN9Yb9ldwZvKSACsS MSGyBYyAtQkWSOXkMj9vohh9sRDJ9qOuLf6tfQ== ) ;; AUTHORITY SECTION (7 records) FAN.GOV. 900 IN NS a3-66.akam.net. FAN.GOV. 900 IN NS a14-64.akam.net. FAN.GOV. 900 IN NS a8-67.akam.net. FAN.GOV. 900 IN NS a26-65.akam.net. FAN.GOV. 900 IN NS a1-63.akam.net. FAN.GOV. 900 IN NS a9-64.akam.net. FAN.GOV. 900 IN RRSIG ( NS 8 2 900 20200305142511 20190306132512 60096 fan.gov. TS8HdyFAPzfSRRobDYbgYiBiviYmCxSdXE0Em8OeNPglpQkYChFmb6YkRvlNy6mCwwucXW7GuJ/u XDE/ZguNB+vgg8qj2vYCZAPlTIsy9hwgml897td1I6ZNVow3aIixAGxdUiJmo5lXmH5odhVoYvwr ny2dFMXDt4o2VIS0GyxIdUJNZV63OF7tb5jqumZeUb+dzyEYhl46bcWHcjyvAMl3YoK6EgMx+e1C x0daChV5cVKZTx8QlH3ZxZnPUqj9Pw+AVtjS5da7PBEhqr2RJUghnXyXauUYo1LpQmeej4ERDOhj 932mZhoK/hQ3Ahw3c5hLECyYqYUHGLb7C8ELnQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a3-66.akam.net for FAN.GOV/SOA
	Received 837 bytes from 96.7.49.66
	;; Answer received from 96.7.49.66 (837 bytes) ;; HEADER SECTION ;; id = 19901 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FAN.GOV. IN SOA ;; ANSWER SECTION (2 records) FAN.GOV. 10800 IN SOA ( o-sa26-ddi001.grid.state.sbu. hostmaster.state.GOV. 4244 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) FAN.GOV. 10800 IN RRSIG ( SOA 8 2 10800 20200407131627 20190408121627 60096 fan.gov. ujQJsQAUC8+lUamYrceZrpgusstbGeb9cQFxWh5vssQ4/CaVQOt0BEF7cOEC726VdSJ6X2NYUJ4c ayHchiJM8pX0aJ02n8uormw6LoXYYGMewO6wrFQtf8EHUbps1fXe970V0L2ieNp3xGlQJ0W0hYLD VgCXWDsl4KHVYAJtP14IOOlyyELtff5eP+3XPiPD7twwe5d746DHnJHT04U2hiCQnup9vUH8gc8Y 2GsISxl0wVtXzYy7YWAloMImqj3LmzdQSS1aFuiic/2FZ+gcRdCFkNW6ucPLN9Yb9ldwZvKSACsS MSGyBYyAtQkWSOXkMj9vohh9sRDJ9qOuLf6tfQ== ) ;; AUTHORITY SECTION (7 records) FAN.GOV. 900 IN NS a1-63.akam.net. FAN.GOV. 900 IN NS a14-64.akam.net. FAN.GOV. 900 IN NS a8-67.akam.net. FAN.GOV. 900 IN NS a26-65.akam.net. FAN.GOV. 900 IN NS a3-66.akam.net. FAN.GOV. 900 IN NS a9-64.akam.net. FAN.GOV. 900 IN RRSIG ( NS 8 2 900 20200305142511 20190306132512 60096 fan.gov. TS8HdyFAPzfSRRobDYbgYiBiviYmCxSdXE0Em8OeNPglpQkYChFmb6YkRvlNy6mCwwucXW7GuJ/u XDE/ZguNB+vgg8qj2vYCZAPlTIsy9hwgml897td1I6ZNVow3aIixAGxdUiJmo5lXmH5odhVoYvwr ny2dFMXDt4o2VIS0GyxIdUJNZV63OF7tb5jqumZeUb+dzyEYhl46bcWHcjyvAMl3YoK6EgMx+e1C x0daChV5cVKZTx8QlH3ZxZnPUqj9Pw+AVtjS5da7PBEhqr2RJUghnXyXauUYo1LpQmeej4ERDOhj 932mZhoK/hQ3Ahw3c5hLECyYqYUHGLb7C8ELnQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a9-64.akam.net for FAN.GOV/SOA
	Received 837 bytes from 184.85.248.64
	;; Answer received from 184.85.248.64 (837 bytes) ;; HEADER SECTION ;; id = 31421 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FAN.GOV. IN SOA ;; ANSWER SECTION (2 records) FAN.GOV. 10800 IN SOA ( o-sa26-ddi001.grid.state.sbu. hostmaster.state.GOV. 4244 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) FAN.GOV. 10800 IN RRSIG ( SOA 8 2 10800 20200407131627 20190408121627 60096 fan.gov. ujQJsQAUC8+lUamYrceZrpgusstbGeb9cQFxWh5vssQ4/CaVQOt0BEF7cOEC726VdSJ6X2NYUJ4c ayHchiJM8pX0aJ02n8uormw6LoXYYGMewO6wrFQtf8EHUbps1fXe970V0L2ieNp3xGlQJ0W0hYLD VgCXWDsl4KHVYAJtP14IOOlyyELtff5eP+3XPiPD7twwe5d746DHnJHT04U2hiCQnup9vUH8gc8Y 2GsISxl0wVtXzYy7YWAloMImqj3LmzdQSS1aFuiic/2FZ+gcRdCFkNW6ucPLN9Yb9ldwZvKSACsS MSGyBYyAtQkWSOXkMj9vohh9sRDJ9qOuLf6tfQ== ) ;; AUTHORITY SECTION (7 records) FAN.GOV. 900 IN NS a1-63.akam.net. FAN.GOV. 900 IN NS a3-66.akam.net. FAN.GOV. 900 IN NS a9-64.akam.net. FAN.GOV. 900 IN NS a8-67.akam.net. FAN.GOV. 900 IN NS a14-64.akam.net. FAN.GOV. 900 IN NS a26-65.akam.net. FAN.GOV. 900 IN RRSIG ( NS 8 2 900 20200305142511 20190306132512 60096 fan.gov. TS8HdyFAPzfSRRobDYbgYiBiviYmCxSdXE0Em8OeNPglpQkYChFmb6YkRvlNy6mCwwucXW7GuJ/u XDE/ZguNB+vgg8qj2vYCZAPlTIsy9hwgml897td1I6ZNVow3aIixAGxdUiJmo5lXmH5odhVoYvwr ny2dFMXDt4o2VIS0GyxIdUJNZV63OF7tb5jqumZeUb+dzyEYhl46bcWHcjyvAMl3YoK6EgMx+e1C x0daChV5cVKZTx8QlH3ZxZnPUqj9Pw+AVtjS5da7PBEhqr2RJUghnXyXauUYo1LpQmeej4ERDOhj 932mZhoK/hQ3Ahw3c5hLECyYqYUHGLb7C8ELnQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a1-63.akam.net for FAN.GOV/A
	Received 347 bytes from 193.108.91.63
	;; Answer received from 193.108.91.63 (347 bytes) ;; HEADER SECTION ;; id = 53272 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FAN.GOV. IN A ;; ANSWER SECTION (2 records) FAN.GOV. 900 IN A 52.222.78.234 FAN.GOV. 900 IN RRSIG ( A 8 2 900 20200305142511 20190306132512 60096 fan.gov. qnVVtBMqpk23DFzOmrK1nL0oYnEs5Dx1D4mSF5TaqTlEv/1RbJyE1f0ODQW+WgJ6+SJhcBA9briX qjuthU1Z2H6VoVSn2epd5wufonbZIRtzHyUsaz+iZ9Pbx4mxR04Ygv9AvALevxLqeHZVeUHfeZOR HWFE8dBshiQqLlirnjJcuRytWn9zxV7loxcwg8gA5Brdf/G3LCDOuIVEJg7BdDBlYwY7PiNBHG5o 7syw0HsVOXfBlLLGK7J2oG4VlALN4lXBlgYwe73GjiLGwHdS3zlAO5M9VVr0xbV8/hl3k9l9q/Sb M2NFFV2Gq3Fb2WV4rPc7nOevgTaARxpRPfOT7g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	FAN.GOV A RR has value 52.222.78.234
	Found 1 RRSIGs over A RRset
	`FAN.GOV. 900 IN RRSIG ( A 8 2 900 20200305142511 20190306132512 60096 fan.gov. qnVVtBMqpk23DFzOmrK1nL0oYnEs5Dx1D4mSF5TaqTlEv/1RbJyE1f0ODQW+WgJ6+SJhcBA9briX qjuthU1Z2H6VoVSn2epd5wufonbZIRtzHyUsaz+iZ9Pbx4mxR04Ygv9AvALevxLqeHZVeUHfeZOR HWFE8dBshiQqLlirnjJcuRytWn9zxV7loxcwg8gA5Brdf/G3LCDOuIVEJg7BdDBlYwY7PiNBHG5o 7syw0HsVOXfBlLLGK7J2oG4VlALN4lXBlgYwe73GjiLGwHdS3zlAO5M9VVr0xbV8/hl3k9l9q/Sb M2NFFV2Gq3Fb2WV4rPc7nOevgTaARxpRPfOT7g== )`
	RRSIG=60096 and DNSKEY=60096 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test FAN.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: