DNSSEC Analyzer - FARA.GOV

Domain Name:

Time: 2021-04-20 03:30:07 UTC, NTP stratum 4

Analyzing DNSSEC problems for FARA.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to i.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (865 bytes) ;; HEADER SECTION ;; id = 29177 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210502000000 20210411000000 20326 . SjVAq5V3zP96wlXZKWIo3oDNvWyKnwmIl7/HSmnxJ77WX0dmpJxN+c7wTFGzMro6kuZCYAhZgsWb 3G7lBEAeiw/Y6hQGK1IdLMH4YMoSoxvdw6u0DkvxiodZUatJblMajeF0Rw8W67I4pwYpwOByZ+3W aTr/nk0sWFir7+1tNbWbPrUNb8E8pHFzW9g7vMATiFnM+jXmZVVbueGnzOSmjo34ow9iAQ7V1OcY VtHTxQVMbfNurnEbEi7XnqYtRacNUkvIv0Fpmb9Yi7wlhV/syyu61p3MMoLnSQydYfsI+may7SoH +I6NQk2a2d3Nvzh5nbNd++cu8aRGX3ZtfreUmQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210502000000 20210411000000 20326 . SjVAq5V3zP96wlXZKWIo3oDNvWyKnwmIl7/HSmnxJ77WX0dmpJxN+c7wTFGzMro6kuZCYAhZgsWb 3G7lBEAeiw/Y6hQGK1IdLMH4YMoSoxvdw6u0DkvxiodZUatJblMajeF0Rw8W67I4pwYpwOByZ+3W aTr/nk0sWFir7+1tNbWbPrUNb8E8pHFzW9g7vMATiFnM+jXmZVVbueGnzOSmjo34ow9iAQ7V1OcY VtHTxQVMbfNurnEbEi7XnqYtRacNUkvIv0Fpmb9Yi7wlhV/syyu61p3MMoLnSQydYfsI+may7SoH +I6NQk2a2d3Nvzh5nbNd++cu8aRGX3ZtfreUmQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=14631 is now in the chain-of-trust
	Query to l.root-servers.net for FARA.GOV/A
	Received 627 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (627 bytes) ;; HEADER SECTION ;; id = 15639 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FARA.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20210502170000 20210419160000 14631 . kc5E/lpgmnB1RLHmyrNZYZW1HWvCnFZ91xL3xHm8DmFHjMlbyEfhTjFMJuDJuF/O7/HOvLxC+96D 1tz1iFVoRNPoMSy4wwnuSNMAot3m2841NCrpV7Nh0obDBTUfMzYXRi8Fbc3gkiuLbFWSdEdPwqyQ jfmvvdJgcKIvdRU5CKJ8S+4JzJKjI1l4sPpxDrV1GSxe7lmYSihYvO/vzJGEIgvOSW9K1+8sayQb yXEwSiS9+s6KqknSvQsjzBFTWnGMD3ax2VjrSKIat2AhTfRmFip5VlzPGLT9102dIJQryi1dipJV hPfJz9RgwtpB2pbWQ6rNFnG6w84wkDwjRiFmHw== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to k.root-servers.net for GOV/DNSKEY
	Received 622 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (622 bytes) ;; HEADER SECTION ;; id = 19067 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20210502170000 20210419160000 14631 . kc5E/lpgmnB1RLHmyrNZYZW1HWvCnFZ91xL3xHm8DmFHjMlbyEfhTjFMJuDJuF/O7/HOvLxC+96D 1tz1iFVoRNPoMSy4wwnuSNMAot3m2841NCrpV7Nh0obDBTUfMzYXRi8Fbc3gkiuLbFWSdEdPwqyQ jfmvvdJgcKIvdRU5CKJ8S+4JzJKjI1l4sPpxDrV1GSxe7lmYSihYvO/vzJGEIgvOSW9K1+8sayQb yXEwSiS9+s6KqknSvQsjzBFTWnGMD3ax2VjrSKIat2AhTfRmFip5VlzPGLT9102dIJQryi1dipJV hPfJz9RgwtpB2pbWQ6rNFnG6w84wkDwjRiFmHw== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to c.root-servers.net for GOV/DS
	Received 370 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (370 bytes) ;; HEADER SECTION ;; id = 1779 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20210502170000 20210419160000 14631 . kc5E/lpgmnB1RLHmyrNZYZW1HWvCnFZ91xL3xHm8DmFHjMlbyEfhTjFMJuDJuF/O7/HOvLxC+96D 1tz1iFVoRNPoMSy4wwnuSNMAot3m2841NCrpV7Nh0obDBTUfMzYXRi8Fbc3gkiuLbFWSdEdPwqyQ jfmvvdJgcKIvdRU5CKJ8S+4JzJKjI1l4sPpxDrV1GSxe7lmYSihYvO/vzJGEIgvOSW9K1+8sayQb yXEwSiS9+s6KqknSvQsjzBFTWnGMD3ax2VjrSKIat2AhTfRmFip5VlzPGLT9102dIJQryi1dipJV hPfJz9RgwtpB2pbWQ6rNFnG6w84wkDwjRiFmHw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20210502170000 20210419160000 14631 . kc5E/lpgmnB1RLHmyrNZYZW1HWvCnFZ91xL3xHm8DmFHjMlbyEfhTjFMJuDJuF/O7/HOvLxC+96D 1tz1iFVoRNPoMSy4wwnuSNMAot3m2841NCrpV7Nh0obDBTUfMzYXRi8Fbc3gkiuLbFWSdEdPwqyQ jfmvvdJgcKIvdRU5CKJ8S+4JzJKjI1l4sPpxDrV1GSxe7lmYSihYvO/vzJGEIgvOSW9K1+8sayQb yXEwSiS9+s6KqknSvQsjzBFTWnGMD3ax2VjrSKIat2AhTfRmFip5VlzPGLT9102dIJQryi1dipJV hPfJz9RgwtpB2pbWQ6rNFnG6w84wkDwjRiFmHw== )`
	RRSIG=14631 and DNSKEY=14631 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to b.gov-servers.net for GOV/DNSKEY
	Received 957 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (957 bytes) ;; HEADER SECTION ;; id = 7453 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (4 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAaQup5BwKqvn1In1x+PzsLpFav6zsLaW7fivUq9PpXUzXn++rcjtYBS15NXm1hMAZb5FChUp 35qd7hVqdwNuT/NGFNHfEykaeWjkqBKX2mCBSiyIsK4i4TQu7CS2CgqfqR43wXFITyItTPP5wijo 9Jt4dsVTjAtNJKaXOKZ31tLaeM5C2bYqAofxX6oK3TVAZ7vFsjPqjJZtZUBMZq28BiU= ) ; Key ID = 27306 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbexj/PgN9RGQ1TokFnYjJ87/rMFIqE/rXjWtsmwzxteOcKIVCUJAAWg0pIZZer88omuCVrq +fAz0iBOgY48TRFWgyVFV9rm5esTGOEuCU6BTYj1Cb7zrpb/RayEw0yzVVZ0adT/AXbAsQhteTpV kgWK8K33gxq4wY70AK5KWdDCyj4v9uR6TS0mgbGdg7RzFCi8xeZoYP2PY5XOhAHFon0= ) ; Key ID = 48498 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210504190254 20210419185754 7698 gov. O3Vkv1GxULxEFZlk2sKzqasNvLJbTDyQ9ytSfizjFDulm1IOZ7et3SHgQgoYKJKrG7Y6Q9OaNmRJ mV0halAep4T8RPc/SuKFF9xP0TxXbSZgbfgBgqwj3MfttDt7f8lpumS+UJxeaJDHnJApqPlClRmR /fPRoQxY7aWQmQUIhGL6lYNeMHrHfsPyWyZEpLzVaYffUC/XHLNIancKYopgSk9g3/mLUy8Eki5c SWFw8jJt5WJUs1Y87iZ+SRdiDbzMy6B1epxpQvqdNQAbaJmI5o8JXMKjb6mLweqBNlUMNnr/k5Oo 2sJC3u3SxCEd8dT1FHzvp4Ufr/ZXi1xv70uBOg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAaQup5BwKqvn1In1x+PzsLpFav6zsLaW7fivUq9PpXUzXn++rcjtYBS15NXm1hMAZb5FChUp 35qd7hVqdwNuT/NGFNHfEykaeWjkqBKX2mCBSiyIsK4i4TQu7CS2CgqfqR43wXFITyItTPP5wijo 9Jt4dsVTjAtNJKaXOKZ31tLaeM5C2bYqAofxX6oK3TVAZ7vFsjPqjJZtZUBMZq28BiU= ) ; Key ID = 27306`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbexj/PgN9RGQ1TokFnYjJ87/rMFIqE/rXjWtsmwzxteOcKIVCUJAAWg0pIZZer88omuCVrq +fAz0iBOgY48TRFWgyVFV9rm5esTGOEuCU6BTYj1Cb7zrpb/RayEw0yzVVZ0adT/AXbAsQhteTpV kgWK8K33gxq4wY70AK5KWdDCyj4v9uR6TS0mgbGdg7RzFCi8xeZoYP2PY5XOhAHFon0= ) ; Key ID = 48498`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210504190254 20210419185754 7698 gov. O3Vkv1GxULxEFZlk2sKzqasNvLJbTDyQ9ytSfizjFDulm1IOZ7et3SHgQgoYKJKrG7Y6Q9OaNmRJ mV0halAep4T8RPc/SuKFF9xP0TxXbSZgbfgBgqwj3MfttDt7f8lpumS+UJxeaJDHnJApqPlClRmR /fPRoQxY7aWQmQUIhGL6lYNeMHrHfsPyWyZEpLzVaYffUC/XHLNIancKYopgSk9g3/mLUy8Eki5c SWFw8jJt5WJUs1Y87iZ+SRdiDbzMy6B1epxpQvqdNQAbaJmI5o8JXMKjb6mLweqBNlUMNnr/k5Oo 2sJC3u3SxCEd8dT1FHzvp4Ufr/ZXi1xv70uBOg== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=27306 is now in the chain-of-trust
	DNSKEY=48498 is now in the chain-of-trust
	Query to c.gov-servers.net for FARA.GOV/A
	Received 544 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (544 bytes) ;; HEADER SECTION ;; id = 10467 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FARA.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) FARA.GOV. 86400 IN NS ns-jdcw-02.usdoj.GOV. FARA.GOV. 86400 IN NS ns-jdcw-01.usdoj.GOV. FARA.GOV. 3600 IN DS 47596 8 1 8332708f7431624bec65c1fbceb5fd04f5e487a6 FARA.GOV. 3600 IN DS ( 56782 8 2 63dbc212d0451b5442a9e00506aa9edf6c183e99d04c91886089eb1982ad8bf6 ) FARA.GOV. 3600 IN DS ( 47596 8 2 44ae9022a8c78e6b5ab7ae4f9567af82607f3004de96cde01357976c3e6d4ab7 ) FARA.GOV. 3600 IN DS 56782 8 1 e356be91fe1bfbde6cedb64bc3274fafd1ac8e99 FARA.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210427011008 20210420011008 48498 gov. j4vY4c57DLjDg0Wov9xojeaGFo9tKGg/SD4Avi/DeC8JtwZmq9rPBCP5Th8MXCEgUVuun6jkv8MR wWmEHVJkVHKXxbzA3nxK0cnQT9DAsuSLC0HetNVWO3dBV1/lZsFRzPXpRbAESy57C2ojp7t3wnrT nmD/GKWNBFYCdi6CN6ax/5oMRDHPBvA2m6ZAjMJlkIqBUh0PlQgvATevsj3inQ== ) ;; ADDITIONAL SECTION (5 records) ns-jdcw-02.usdoj.GOV. 86400 IN A 149.101.80.157 ns-jdcw-02.usdoj.GOV. 86400 IN AAAA 2607:f330:5000:107f::86 ns-jdcw-01.usdoj.GOV. 86400 IN A 149.101.180.157 ns-jdcw-01.usdoj.GOV. 86400 IN AAAA 2607:f330:6000:107f::86 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.gov-servers.net for FARA.GOV/DNSKEY
	Received 544 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (544 bytes) ;; HEADER SECTION ;; id = 65139 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FARA.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) FARA.GOV. 86400 IN NS ns-jdcw-02.usdoj.GOV. FARA.GOV. 86400 IN NS ns-jdcw-01.usdoj.GOV. FARA.GOV. 3600 IN DS 47596 8 1 8332708f7431624bec65c1fbceb5fd04f5e487a6 FARA.GOV. 3600 IN DS ( 56782 8 2 63dbc212d0451b5442a9e00506aa9edf6c183e99d04c91886089eb1982ad8bf6 ) FARA.GOV. 3600 IN DS ( 47596 8 2 44ae9022a8c78e6b5ab7ae4f9567af82607f3004de96cde01357976c3e6d4ab7 ) FARA.GOV. 3600 IN DS 56782 8 1 e356be91fe1bfbde6cedb64bc3274fafd1ac8e99 FARA.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210427011008 20210420011008 48498 gov. j4vY4c57DLjDg0Wov9xojeaGFo9tKGg/SD4Avi/DeC8JtwZmq9rPBCP5Th8MXCEgUVuun6jkv8MR wWmEHVJkVHKXxbzA3nxK0cnQT9DAsuSLC0HetNVWO3dBV1/lZsFRzPXpRbAESy57C2ojp7t3wnrT nmD/GKWNBFYCdi6CN6ax/5oMRDHPBvA2m6ZAjMJlkIqBUh0PlQgvATevsj3inQ== ) ;; ADDITIONAL SECTION (5 records) ns-jdcw-02.usdoj.GOV. 86400 IN A 149.101.80.157 ns-jdcw-02.usdoj.GOV. 86400 IN AAAA 2607:f330:5000:107f::86 ns-jdcw-01.usdoj.GOV. 86400 IN A 149.101.180.157 ns-jdcw-01.usdoj.GOV. 86400 IN AAAA 2607:f330:6000:107f::86 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone FARA.GOV

FARA.GOV

	Checking DS between GOV and FARA.GOV
	Query to d.gov-servers.net for FARA.GOV/DS
	Received 400 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (400 bytes) ;; HEADER SECTION ;; id = 50710 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FARA.GOV. IN DS ;; ANSWER SECTION (5 records) FARA.GOV. 3600 IN DS 47596 8 1 8332708f7431624bec65c1fbceb5fd04f5e487a6 FARA.GOV. 3600 IN DS ( 56782 8 2 63dbc212d0451b5442a9e00506aa9edf6c183e99d04c91886089eb1982ad8bf6 ) FARA.GOV. 3600 IN DS ( 47596 8 2 44ae9022a8c78e6b5ab7ae4f9567af82607f3004de96cde01357976c3e6d4ab7 ) FARA.GOV. 3600 IN DS 56782 8 1 e356be91fe1bfbde6cedb64bc3274fafd1ac8e99 FARA.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210427011008 20210420011008 48498 gov. j4vY4c57DLjDg0Wov9xojeaGFo9tKGg/SD4Avi/DeC8JtwZmq9rPBCP5Th8MXCEgUVuun6jkv8MR wWmEHVJkVHKXxbzA3nxK0cnQT9DAsuSLC0HetNVWO3dBV1/lZsFRzPXpRbAESy57C2ojp7t3wnrT nmD/GKWNBFYCdi6CN6ax/5oMRDHPBvA2m6ZAjMJlkIqBUh0PlQgvATevsj3inQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for FARA.GOV in the GOV zone
	DS=47596/SHA-1 has algorithm RSASHA256
	DS=56782/SHA-256 has algorithm RSASHA256
	DS=47596/SHA-256 has algorithm RSASHA256
	DS=56782/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`FARA.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210427011008 20210420011008 48498 gov. j4vY4c57DLjDg0Wov9xojeaGFo9tKGg/SD4Avi/DeC8JtwZmq9rPBCP5Th8MXCEgUVuun6jkv8MR wWmEHVJkVHKXxbzA3nxK0cnQT9DAsuSLC0HetNVWO3dBV1/lZsFRzPXpRbAESy57C2ojp7t3wnrT nmD/GKWNBFYCdi6CN6ax/5oMRDHPBvA2m6ZAjMJlkIqBUh0PlQgvATevsj3inQ== )`
	RRSIG=48498 and DNSKEY=48498 verifies the DS RRset
	DS=47596/SHA-1 is now in the chain-of-trust
	DS=56782/SHA-256 is now in the chain-of-trust
	`FARA.GOV. 3600 IN DS 47596 8 1 8332708f7431624bec65c1fbceb5fd04f5e487a6`
	`FARA.GOV. 3600 IN DS ( 56782 8 2 63dbc212d0451b5442a9e00506aa9edf6c183e99d04c91886089eb1982ad8bf6 )`
	`FARA.GOV. 3600 IN DS ( 47596 8 2 44ae9022a8c78e6b5ab7ae4f9567af82607f3004de96cde01357976c3e6d4ab7 )`
	`FARA.GOV. 3600 IN DS 56782 8 1 e356be91fe1bfbde6cedb64bc3274fafd1ac8e99`
	Query to ns-jdcw-02.usdoj.GOV for FARA.GOV/DNSKEY
	Received 1813 bytes from 149.101.80.157
	;; Answer received from 149.101.80.157 (1813 bytes) ;; HEADER SECTION ;; id = 39783 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FARA.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) FARA.GOV. 432000 IN DNSKEY ( 257 3 8 AwEAAcMk9c75FKnTwzr+BnKxQJINcaqI3GCmUloSklYwNcxvVU7QQQUZHBL8Igg0htPFwjHPX8RK 7jR3xP7mEwtscrRqGAsLJ15GWq8DwIMTI4lGaoP3PmsClaXh/1PHykZzNi8XyIpXb3QLUpGct5fm YrzuPoeVyfogFr8TehKQAX9v4IHlLkh9vztZR/q+P2kh5ubilWpHqwp3S8T+4BJw0lxoAQ0nnLLZ WNLS3rHv/hvCslLezXfrUqXL8TvAGXGZJo8SA8d1rNeAINAQCbrlRLMMrWLSaGJDT9s0SrRf0HTQ MaszVUWm+2VBz8N4Uu0mhkMiOybeNO/bBIZxY6KwB8s= ) ; Key ID = 56782 FARA.GOV. 432000 IN DNSKEY ( 256 3 8 AwEAAax91CurlYevEXsnks1nwp4RlJo4wu9Bil9ztCXhEwUAwNrvZi0JYCiemqT6WVk8DOMvo2uE Ubjims5kNyBW/TgCixmbzwF9qxCriCHh5c0AWdk0FoDwWLBIpbtJ4RDA0xRJxoUafK5YersJwMj1 Z4MRgBDi5PgTs/wSWPGnRYKj ) ; Key ID = 54609 FARA.GOV. 432000 IN DNSKEY ( 256 3 8 AwEAAfT0QpAVVTXrACkfrFCgiri+xMkU0fxFux/uV9FVgtJOef5bqJ2LczRhSR9HmvyCKM2ZRxXt a7xvfBVtCWuAmYqjUE2sGduTHPr9gvIyilh2lGcINRa3r5xqPCjq+jUB93X/UpYXDVvxU/K45mtl mP2gWPH1uefNj2857niAI8h9 ) ; Key ID = 39684 FARA.GOV. 432000 IN DNSKEY ( 257 3 8 AwEAAe8friH7WFFhAM/qb7OSjltfOm2GsjpErdEHTnBthkuCbWtrcygZAik+/1Z4H8Akt/sB8MnI a7QoMapy2IMftfRqY2Tja+PBwBaXq73YT3QPeubzgMOLtZcXWWTG7N5D23PzKkgZBryw8KkZJKmM YsdJfH4U8WXGtDqVoKC0sZ6jTlEahBJqZd+EG1MFba5RPOwdb2t0QCHAo8vAxwgLs0N0oTb9EAPv oXFZUxF4XwrcdoJGw1HxQHo5TznR5nqvSmZPfWJF78QxFV21+E3Sx0fy5YsxkjdczqSnkru602K/ QjSNxsCxips5DKvxOGWP3E2CAZ916ZVsRiygIjrdW58= ) ; Key ID = 47596 FARA.GOV. 432000 IN RRSIG ( DNSKEY 8 2 432000 20210429092046 20210419082046 39684 fara.gov. VZE2AUIRugjl7GTls3cD5ISJpb6jOUQtVInh+/+5TLVwdYaVPU40SspMFPlYq3or+Z4Fa38jlWCS YZmTcvtFy2cbSaAFyN+5OOKIk/8d9DncYgSrBL0QrRuv8YwYfYeHV2jfqfbjpYNOa1HRdkzxcHpX LwVRJmXNh+onjVp9llc= ) fara.gov. 432000 IN RRSIG ( DNSKEY 8 2 432000 20210429092046 20210419082046 47596 fara.gov. JHfX+yyZ4Z2yf8Ua1VlOY9MEX32HVB3xwSBPA76bXym/oPto6MbWLTS/djMUdowjbApfdKBNr0Dz RyshS6gMerTHvE/pjSgzBOk6fbFM4I6WhPNb8t0u6mzSXkH33KB5OR+jhfyhZ3FzTbbxWChmWijK qpNDFo5sNn8yOU0DBfp+4Ala6lyBYHZLmk5Bk8u13qhiA/P21DoG+8fEmNQAHG+Fug0v77+EUpWG s5Yq+kvntnznxqC344Jg461BFcNkAUpx2m5W6xWppsFKmSYJz9zx5Gg0jlGazFL/7P1yK9/7fdnt OanIHhtgJKNsTmxrlP9Q0i+rXKRpm6gyyfjnsg== ) fara.gov. 432000 IN RRSIG ( DNSKEY 8 2 432000 20210429092046 20210419082046 54609 fara.gov. mzYUT6RxSlw1/BaIc8QYhdGwMpN266qv0y+Qs985kZQC+HeGnJm5pB1AiProbOlAqC+ethXKL4A2 5w7kFIcU8fz3ozgWzQauA4pijGq/8Wpq+Vn4DZyujNgzRQ0c+t7yoNWJbaPXbYKSdxInsT+mTbmz ZVWFQZLqg0DBXV1G05g= ) fara.gov. 432000 IN RRSIG ( DNSKEY 8 2 432000 20210429092046 20210419082046 56782 fara.gov. RF8G6Q8mu0p5JrIMA9vuwECCs1SQzuEsgeO7zLsktGeYYK49p0SfWKU9wvE3Ostohcnaz55cESAQ NFBwmyaG1CNab7CgHZT9Orv2IezNnkm2CnTXdzWj3mHEs8u0AXL4IJhM/wyFCUb39WKGvSDc31Fl xJ+bpmNz4yLAuBYOJlv8g1Un1y++7f+J0ZTTvX3pT6+wbeHevPPSMNkqTUNkwB/hd7Q1MKKcNjBP hEbM0Flm7lJnXzXiiUMyC4UfArQ0bS2SvGUyDy6UpjAMgjispwGtRKi3kKAFPnL6TxMkci+ZocM0 1PtI33FkXCFJT0BOwYoi3njEqC14ePOrz3Dodg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for FARA.GOV
	`FARA.GOV. 432000 IN DNSKEY ( 257 3 8 AwEAAcMk9c75FKnTwzr+BnKxQJINcaqI3GCmUloSklYwNcxvVU7QQQUZHBL8Igg0htPFwjHPX8RK 7jR3xP7mEwtscrRqGAsLJ15GWq8DwIMTI4lGaoP3PmsClaXh/1PHykZzNi8XyIpXb3QLUpGct5fm YrzuPoeVyfogFr8TehKQAX9v4IHlLkh9vztZR/q+P2kh5ubilWpHqwp3S8T+4BJw0lxoAQ0nnLLZ WNLS3rHv/hvCslLezXfrUqXL8TvAGXGZJo8SA8d1rNeAINAQCbrlRLMMrWLSaGJDT9s0SrRf0HTQ MaszVUWm+2VBz8N4Uu0mhkMiOybeNO/bBIZxY6KwB8s= ) ; Key ID = 56782`
	`FARA.GOV. 432000 IN DNSKEY ( 256 3 8 AwEAAax91CurlYevEXsnks1nwp4RlJo4wu9Bil9ztCXhEwUAwNrvZi0JYCiemqT6WVk8DOMvo2uE Ubjims5kNyBW/TgCixmbzwF9qxCriCHh5c0AWdk0FoDwWLBIpbtJ4RDA0xRJxoUafK5YersJwMj1 Z4MRgBDi5PgTs/wSWPGnRYKj ) ; Key ID = 54609`
	`FARA.GOV. 432000 IN DNSKEY ( 256 3 8 AwEAAfT0QpAVVTXrACkfrFCgiri+xMkU0fxFux/uV9FVgtJOef5bqJ2LczRhSR9HmvyCKM2ZRxXt a7xvfBVtCWuAmYqjUE2sGduTHPr9gvIyilh2lGcINRa3r5xqPCjq+jUB93X/UpYXDVvxU/K45mtl mP2gWPH1uefNj2857niAI8h9 ) ; Key ID = 39684`
	`FARA.GOV. 432000 IN DNSKEY ( 257 3 8 AwEAAe8friH7WFFhAM/qb7OSjltfOm2GsjpErdEHTnBthkuCbWtrcygZAik+/1Z4H8Akt/sB8MnI a7QoMapy2IMftfRqY2Tja+PBwBaXq73YT3QPeubzgMOLtZcXWWTG7N5D23PzKkgZBryw8KkZJKmM YsdJfH4U8WXGtDqVoKC0sZ6jTlEahBJqZd+EG1MFba5RPOwdb2t0QCHAo8vAxwgLs0N0oTb9EAPv oXFZUxF4XwrcdoJGw1HxQHo5TznR5nqvSmZPfWJF78QxFV21+E3Sx0fy5YsxkjdczqSnkru602K/ QjSNxsCxips5DKvxOGWP3E2CAZ916ZVsRiygIjrdW58= ) ; Key ID = 47596`
	DNSKEY=56782/SEP is now in the chain-of-trust
	DS=56782/SHA-256 verifies DNSKEY=56782/SEP
	DS=56782/SHA-1 verifies DNSKEY=56782/SEP
	DNSKEY=47596/SEP is now in the chain-of-trust
	DS=47596/SHA-1 verifies DNSKEY=47596/SEP
	DS=47596/SHA-256 verifies DNSKEY=47596/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`FARA.GOV. 432000 IN RRSIG ( DNSKEY 8 2 432000 20210429092046 20210419082046 39684 fara.gov. VZE2AUIRugjl7GTls3cD5ISJpb6jOUQtVInh+/+5TLVwdYaVPU40SspMFPlYq3or+Z4Fa38jlWCS YZmTcvtFy2cbSaAFyN+5OOKIk/8d9DncYgSrBL0QrRuv8YwYfYeHV2jfqfbjpYNOa1HRdkzxcHpX LwVRJmXNh+onjVp9llc= )`
	`fara.gov. 432000 IN RRSIG ( DNSKEY 8 2 432000 20210429092046 20210419082046 47596 fara.gov. JHfX+yyZ4Z2yf8Ua1VlOY9MEX32HVB3xwSBPA76bXym/oPto6MbWLTS/djMUdowjbApfdKBNr0Dz RyshS6gMerTHvE/pjSgzBOk6fbFM4I6WhPNb8t0u6mzSXkH33KB5OR+jhfyhZ3FzTbbxWChmWijK qpNDFo5sNn8yOU0DBfp+4Ala6lyBYHZLmk5Bk8u13qhiA/P21DoG+8fEmNQAHG+Fug0v77+EUpWG s5Yq+kvntnznxqC344Jg461BFcNkAUpx2m5W6xWppsFKmSYJz9zx5Gg0jlGazFL/7P1yK9/7fdnt OanIHhtgJKNsTmxrlP9Q0i+rXKRpm6gyyfjnsg== )`
	`fara.gov. 432000 IN RRSIG ( DNSKEY 8 2 432000 20210429092046 20210419082046 54609 fara.gov. mzYUT6RxSlw1/BaIc8QYhdGwMpN266qv0y+Qs985kZQC+HeGnJm5pB1AiProbOlAqC+ethXKL4A2 5w7kFIcU8fz3ozgWzQauA4pijGq/8Wpq+Vn4DZyujNgzRQ0c+t7yoNWJbaPXbYKSdxInsT+mTbmz ZVWFQZLqg0DBXV1G05g= )`
	`fara.gov. 432000 IN RRSIG ( DNSKEY 8 2 432000 20210429092046 20210419082046 56782 fara.gov. RF8G6Q8mu0p5JrIMA9vuwECCs1SQzuEsgeO7zLsktGeYYK49p0SfWKU9wvE3Ostohcnaz55cESAQ NFBwmyaG1CNab7CgHZT9Orv2IezNnkm2CnTXdzWj3mHEs8u0AXL4IJhM/wyFCUb39WKGvSDc31Fl xJ+bpmNz4yLAuBYOJlv8g1Un1y++7f+J0ZTTvX3pT6+wbeHevPPSMNkqTUNkwB/hd7Q1MKKcNjBP hEbM0Flm7lJnXzXiiUMyC4UfArQ0bS2SvGUyDy6UpjAMgjispwGtRKi3kKAFPnL6TxMkci+ZocM0 1PtI33FkXCFJT0BOwYoi3njEqC14ePOrz3Dodg== )`
	RRSIG=39684 and DNSKEY=39684 verifies the DNSKEY RRset
	RRSIG=47596 and DNSKEY=47596/SEP verifies the DNSKEY RRset
	RRSIG=54609 and DNSKEY=54609 verifies the DNSKEY RRset
	RRSIG=56782 and DNSKEY=56782/SEP verifies the DNSKEY RRset
	DNSKEY=54609 is now in the chain-of-trust
	DNSKEY=39684 is now in the chain-of-trust
	Query to ns-jdcw-02.usdoj.GOV for FARA.GOV/A
	Received 389 bytes from 149.101.80.157
	;; Answer received from 149.101.80.157 (389 bytes) ;; HEADER SECTION ;; id = 18292 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FARA.GOV. IN A ;; ANSWER SECTION (3 records) FARA.GOV. 600 IN A 149.101.82.155 FARA.GOV. 600 IN RRSIG ( A 8 2 600 20210427061746 20210417061234 39684 fara.gov. bJwcQh8jpjIgY0gxeFU9udpJHOH1vdP+0Mcz33tu2q0ccGDPspoA5PPiM0gPA4+/3502sLl+YrXW qCtI27t92mY3P1YBjuFhcnhlZ2giwZI4f6Vkb0NCpSyMs4kI5cUj/utLeDrO3vqN3NB1lkT9zNrG 1DqYxoeJyNOmPYjyZH4= ) fara.gov. 600 IN RRSIG ( A 8 2 600 20210429092046 20210419082046 54609 fara.gov. nBzdXLpTKLZ5iLSWuLErGI8V6X+AlK4wgJ8wBHv6KGbvZW4iWkFqmG/eWKxRQmfLdVDJFlHqxu/Y KaDD393pUhdiFDjTc6oPxw9Ol/thwANKozDFf+S+fn6bqKypYTTwCY4CcJMAVCI6BVeeeEXnH4J/ 8S1GaHs9alyOuhAzXbk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns-jdcw-02.usdoj.GOV is authoritative for FARA.GOV
	Found RRSIG signed by fara.gov zone
	Query to ns-jdcw-01.usdoj.GOV for FARA.GOV/SOA
	Received 444 bytes from 149.101.180.157
	;; Answer received from 149.101.180.157 (444 bytes) ;; HEADER SECTION ;; id = 56861 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FARA.GOV. IN SOA ;; ANSWER SECTION (3 records) FARA.GOV. 600 IN SOA ( dnsgm-dc2.admin.oss.doj.GOV. root.usdoj.GOV. 2002071188 ;serial 10800 ;refresh 1080 ;retry 2592000 ;expire 600 ;minimum ) FARA.GOV. 600 IN RRSIG ( SOA 8 2 600 20210429231024 20210419221024 39684 fara.gov. TEOi3I0jWkjve7xe8lOca0OgwMJuMr3uJVm+WT3+gkxbwiFTN7LjQm2hMZHcps/1S4+7vFdrgQPp 22gSyYx8maSkhvGB3wm6LoQGbvvczEGdTJhaHVESBpQqLHmLZ428z5BUstiPNT3Bpu0Tp8Upt93m XkVOCfkjbfmjAJQWp48= ) fara.gov. 600 IN RRSIG ( SOA 8 2 600 20210429231024 20210419221024 54609 fara.gov. jBsn4YM2kHfJy2Z/f71p9r56uXXLcFFnj0nEI/ZTaunEbzzSNuTsTcZMFOKcAEYYO9soyRV873Ew R6wL1Bn9Lz8Q8kIjx+pLbrYI5oc0ddDNxeQd/hus5wtCxnOtMPGh20DqCezCgZTMsyFs0KlGIBCu x7N39GgJhr5CzFS13ms= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-jdcw-02.usdoj.GOV for FARA.GOV/A
	Received 389 bytes from 149.101.80.157
	;; Answer received from 149.101.80.157 (389 bytes) ;; HEADER SECTION ;; id = 42640 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FARA.GOV. IN A ;; ANSWER SECTION (3 records) FARA.GOV. 600 IN A 149.101.82.155 FARA.GOV. 600 IN RRSIG ( A 8 2 600 20210427061746 20210417061234 39684 fara.gov. bJwcQh8jpjIgY0gxeFU9udpJHOH1vdP+0Mcz33tu2q0ccGDPspoA5PPiM0gPA4+/3502sLl+YrXW qCtI27t92mY3P1YBjuFhcnhlZ2giwZI4f6Vkb0NCpSyMs4kI5cUj/utLeDrO3vqN3NB1lkT9zNrG 1DqYxoeJyNOmPYjyZH4= ) fara.gov. 600 IN RRSIG ( A 8 2 600 20210429092046 20210419082046 54609 fara.gov. nBzdXLpTKLZ5iLSWuLErGI8V6X+AlK4wgJ8wBHv6KGbvZW4iWkFqmG/eWKxRQmfLdVDJFlHqxu/Y KaDD393pUhdiFDjTc6oPxw9Ol/thwANKozDFf+S+fn6bqKypYTTwCY4CcJMAVCI6BVeeeEXnH4J/ 8S1GaHs9alyOuhAzXbk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	FARA.GOV A RR has value 149.101.82.155
	Found 2 RRSIGs over A RRset
	`FARA.GOV. 600 IN RRSIG ( A 8 2 600 20210427061746 20210417061234 39684 fara.gov. bJwcQh8jpjIgY0gxeFU9udpJHOH1vdP+0Mcz33tu2q0ccGDPspoA5PPiM0gPA4+/3502sLl+YrXW qCtI27t92mY3P1YBjuFhcnhlZ2giwZI4f6Vkb0NCpSyMs4kI5cUj/utLeDrO3vqN3NB1lkT9zNrG 1DqYxoeJyNOmPYjyZH4= )`
	`fara.gov. 600 IN RRSIG ( A 8 2 600 20210429092046 20210419082046 54609 fara.gov. nBzdXLpTKLZ5iLSWuLErGI8V6X+AlK4wgJ8wBHv6KGbvZW4iWkFqmG/eWKxRQmfLdVDJFlHqxu/Y KaDD393pUhdiFDjTc6oPxw9Ol/thwANKozDFf+S+fn6bqKypYTTwCY4CcJMAVCI6BVeeeEXnH4J/ 8S1GaHs9alyOuhAzXbk= )`
	RRSIG=39684 and DNSKEY=39684 verifies the A RRset
	RRSIG=54609 and DNSKEY=54609 verifies the A RRset

FARA.GOV

	Query to ns-jdcw-01.usdoj.GOV for FARA.GOV/A
	Received 389 bytes from 149.101.180.157
	;; Answer received from 149.101.180.157 (389 bytes) ;; HEADER SECTION ;; id = 38959 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FARA.GOV. IN A ;; ANSWER SECTION (3 records) FARA.GOV. 600 IN A 149.101.82.155 FARA.GOV. 600 IN RRSIG ( A 8 2 600 20210427061746 20210417061234 39684 fara.gov. bJwcQh8jpjIgY0gxeFU9udpJHOH1vdP+0Mcz33tu2q0ccGDPspoA5PPiM0gPA4+/3502sLl+YrXW qCtI27t92mY3P1YBjuFhcnhlZ2giwZI4f6Vkb0NCpSyMs4kI5cUj/utLeDrO3vqN3NB1lkT9zNrG 1DqYxoeJyNOmPYjyZH4= ) fara.gov. 600 IN RRSIG ( A 8 2 600 20210429092046 20210419082046 54609 fara.gov. nBzdXLpTKLZ5iLSWuLErGI8V6X+AlK4wgJ8wBHv6KGbvZW4iWkFqmG/eWKxRQmfLdVDJFlHqxu/Y KaDD393pUhdiFDjTc6oPxw9Ol/thwANKozDFf+S+fn6bqKypYTTwCY4CcJMAVCI6BVeeeEXnH4J/ 8S1GaHs9alyOuhAzXbk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns-jdcw-01.usdoj.GOV is authoritative for FARA.GOV
	Found RRSIG signed by fara.gov zone
	Query to ns-jdcw-01.usdoj.GOV for FARA.GOV/A
	Received 389 bytes from 149.101.180.157
	;; Answer received from 149.101.180.157 (389 bytes) ;; HEADER SECTION ;; id = 53315 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FARA.GOV. IN A ;; ANSWER SECTION (3 records) FARA.GOV. 600 IN A 149.101.82.155 FARA.GOV. 600 IN RRSIG ( A 8 2 600 20210427061746 20210417061234 39684 fara.gov. bJwcQh8jpjIgY0gxeFU9udpJHOH1vdP+0Mcz33tu2q0ccGDPspoA5PPiM0gPA4+/3502sLl+YrXW qCtI27t92mY3P1YBjuFhcnhlZ2giwZI4f6Vkb0NCpSyMs4kI5cUj/utLeDrO3vqN3NB1lkT9zNrG 1DqYxoeJyNOmPYjyZH4= ) fara.gov. 600 IN RRSIG ( A 8 2 600 20210429092046 20210419082046 54609 fara.gov. nBzdXLpTKLZ5iLSWuLErGI8V6X+AlK4wgJ8wBHv6KGbvZW4iWkFqmG/eWKxRQmfLdVDJFlHqxu/Y KaDD393pUhdiFDjTc6oPxw9Ol/thwANKozDFf+S+fn6bqKypYTTwCY4CcJMAVCI6BVeeeEXnH4J/ 8S1GaHs9alyOuhAzXbk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	FARA.GOV A RR has value 149.101.82.155
	Found 2 RRSIGs over A RRset
	`FARA.GOV. 600 IN RRSIG ( A 8 2 600 20210427061746 20210417061234 39684 fara.gov. bJwcQh8jpjIgY0gxeFU9udpJHOH1vdP+0Mcz33tu2q0ccGDPspoA5PPiM0gPA4+/3502sLl+YrXW qCtI27t92mY3P1YBjuFhcnhlZ2giwZI4f6Vkb0NCpSyMs4kI5cUj/utLeDrO3vqN3NB1lkT9zNrG 1DqYxoeJyNOmPYjyZH4= )`
	`fara.gov. 600 IN RRSIG ( A 8 2 600 20210429092046 20210419082046 54609 fara.gov. nBzdXLpTKLZ5iLSWuLErGI8V6X+AlK4wgJ8wBHv6KGbvZW4iWkFqmG/eWKxRQmfLdVDJFlHqxu/Y KaDD393pUhdiFDjTc6oPxw9Ol/thwANKozDFf+S+fn6bqKypYTTwCY4CcJMAVCI6BVeeeEXnH4J/ 8S1GaHs9alyOuhAzXbk= )`
	RRSIG=39684 and DNSKEY=39684 verifies the A RRset
	RRSIG=54609 and DNSKEY=54609 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test FARA.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: