DNSSEC Analyzer

Domain Name:

Time: 2019-08-20 13:38:31 UTC, NTP stratum 4

Analyzing DNSSEC problems for FDA.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to m.root-servers.net for ./DNSKEY
	Received 864 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (864 bytes) ;; HEADER SECTION ;; id = 45321 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAcTQyaIe6nt3xSPOG2L/YfwBkOVTJN6mlnZ249O5Rtt3ZSRQHxQSW61AODYw6bvgxrrGq8ee OuenFjcSYgNAMcBYoEYYmKDW6e9EryW4ZaT/MCq+8Am06oR40xAA3fClOM6QjRcT85tP41Go946A icBGP8XOP/Aj1aI/oPRGzRnboUPUok/AzTNnW5npBU69+BuiIwYE7mQOiNBFePyvjQBdoiuYbmuD 3Py0IyjlBxzZUXbqLsRL9gYFkCqeTY29Ik7usuzMTa+JRSLz6KGS5RSJ7CTSMjZg8aNaUbN2dvGh akJPh92HnLvMA3TefFgbKJphFNPA3BWSKLZ02cRWXqM= ) ; Key ID = 59944 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190910000000 20190820000000 20326 . myqQxVqqg5Yb0Tx+BDiLM672R1pZi5zzgRAWh3SkK4mQponWEdXVglCRl6VxIDqnbi5NKabyHMBc w+k4hbBjA1TZ0f+cyJa8xxTg8m7caHrdIRDNwr1zFa16L5BO55NWCjyTCwc/IgRU+Q5zS1YX/qdy uDsWsuRxhxclK5Knxc35Z0Pj0/xlBVzatlwloBVtnSpetAHyofMq9J/ylHDdQtfDjC3B/cBE1/TA UR8cJ2hZXlBBkR0q3Nb0dc6CG8647F8Rp9NOPNn6529HFjARFOPKps2ujLqzrLD4wuKzU3B3yOBe Vqv80rPiSnz0po25KwxFuQYXhAPlNQRtVLdjDw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcTQyaIe6nt3xSPOG2L/YfwBkOVTJN6mlnZ249O5Rtt3ZSRQHxQSW61AODYw6bvgxrrGq8ee OuenFjcSYgNAMcBYoEYYmKDW6e9EryW4ZaT/MCq+8Am06oR40xAA3fClOM6QjRcT85tP41Go946A icBGP8XOP/Aj1aI/oPRGzRnboUPUok/AzTNnW5npBU69+BuiIwYE7mQOiNBFePyvjQBdoiuYbmuD 3Py0IyjlBxzZUXbqLsRL9gYFkCqeTY29Ik7usuzMTa+JRSLz6KGS5RSJ7CTSMjZg8aNaUbN2dvGh akJPh92HnLvMA3TefFgbKJphFNPA3BWSKLZ02cRWXqM= ) ; Key ID = 59944`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190910000000 20190820000000 20326 . myqQxVqqg5Yb0Tx+BDiLM672R1pZi5zzgRAWh3SkK4mQponWEdXVglCRl6VxIDqnbi5NKabyHMBc w+k4hbBjA1TZ0f+cyJa8xxTg8m7caHrdIRDNwr1zFa16L5BO55NWCjyTCwc/IgRU+Q5zS1YX/qdy uDsWsuRxhxclK5Knxc35Z0Pj0/xlBVzatlwloBVtnSpetAHyofMq9J/ylHDdQtfDjC3B/cBE1/TA UR8cJ2hZXlBBkR0q3Nb0dc6CG8647F8Rp9NOPNn6529HFjARFOPKps2ujLqzrLD4wuKzU3B3yOBe Vqv80rPiSnz0po25KwxFuQYXhAPlNQRtVLdjDw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=59944 is now in the chain-of-trust
	Query to g.root-servers.net for FDA.GOV/A
	Error querying g.root-servers.net/2001:500:12:0:0:0:0:d0d for FDA.GOV/A: 'IPv6 transport disabled'
	Received 665 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (665 bytes) ;; HEADER SECTION ;; id = 41780 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FDA.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20190902050000 20190820040000 59944 . RUqbA1seT9QkM6KjM21mq6zFMpCnbA/HPqmPHOMxHtrUCinjtW5I4Ufad48PsBNAPfO2LEbwVqe3 Tq7l6ImdQOUgNXFMBn87KMCi5JDRr2gOf+uaEcNz7l2Rb+r1hd/HgZLZSO5XDP8aJU69JwysL8FE K8qNOzZSCFDeznsNJtNsUiw7PLgECGESrefbDbR7kk4viDon8aODFeS3nKDc+B5wbEs5qCzkDbBK u0XcjMtlCYIaFzcQT348bivOa4ovXBYf6SNGgPHgwHRl8L+0HSKCB4m9mLGqoqk/9xn6agjZ+hdM KyrSS/FMZx/sAu9oCxEWWvQKNzF7xGEkhRVa/w== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.root-servers.net for GOV/DNSKEY
	Received 661 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (661 bytes) ;; HEADER SECTION ;; id = 56850 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20190902050000 20190820040000 59944 . RUqbA1seT9QkM6KjM21mq6zFMpCnbA/HPqmPHOMxHtrUCinjtW5I4Ufad48PsBNAPfO2LEbwVqe3 Tq7l6ImdQOUgNXFMBn87KMCi5JDRr2gOf+uaEcNz7l2Rb+r1hd/HgZLZSO5XDP8aJU69JwysL8FE K8qNOzZSCFDeznsNJtNsUiw7PLgECGESrefbDbR7kk4viDon8aODFeS3nKDc+B5wbEs5qCzkDbBK u0XcjMtlCYIaFzcQT348bivOa4ovXBYf6SNGgPHgwHRl8L+0HSKCB4m9mLGqoqk/9xn6agjZ+hdM KyrSS/FMZx/sAu9oCxEWWvQKNzF7xGEkhRVa/w== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to l.root-servers.net for GOV/DS
	Received 403 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (403 bytes) ;; HEADER SECTION ;; id = 65512 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20190902050000 20190820040000 59944 . RUqbA1seT9QkM6KjM21mq6zFMpCnbA/HPqmPHOMxHtrUCinjtW5I4Ufad48PsBNAPfO2LEbwVqe3 Tq7l6ImdQOUgNXFMBn87KMCi5JDRr2gOf+uaEcNz7l2Rb+r1hd/HgZLZSO5XDP8aJU69JwysL8FE K8qNOzZSCFDeznsNJtNsUiw7PLgECGESrefbDbR7kk4viDon8aODFeS3nKDc+B5wbEs5qCzkDbBK u0XcjMtlCYIaFzcQT348bivOa4ovXBYf6SNGgPHgwHRl8L+0HSKCB4m9mLGqoqk/9xn6agjZ+hdM KyrSS/FMZx/sAu9oCxEWWvQKNzF7xGEkhRVa/w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20190902050000 20190820040000 59944 . RUqbA1seT9QkM6KjM21mq6zFMpCnbA/HPqmPHOMxHtrUCinjtW5I4Ufad48PsBNAPfO2LEbwVqe3 Tq7l6ImdQOUgNXFMBn87KMCi5JDRr2gOf+uaEcNz7l2Rb+r1hd/HgZLZSO5XDP8aJU69JwysL8FE K8qNOzZSCFDeznsNJtNsUiw7PLgECGESrefbDbR7kk4viDon8aODFeS3nKDc+B5wbEs5qCzkDbBK u0XcjMtlCYIaFzcQT348bivOa4ovXBYf6SNGgPHgwHRl8L+0HSKCB4m9mLGqoqk/9xn6agjZ+hdM KyrSS/FMZx/sAu9oCxEWWvQKNzF7xGEkhRVa/w== )`
	RRSIG=59944 and DNSKEY=59944 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to b.gov-servers.net for GOV/DNSKEY
	Error querying b.gov-servers.net/2620:74:27:0:0:0:2:30 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 743 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (743 bytes) ;; HEADER SECTION ;; id = 19145 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 256 3 8 AQPnviCbt0HB2CQze767dPf3TQFosiEwOIkUQaJmcSoNlVSquo3Mox7noTQGzKSdTbKAh0zfkGIb thSb6zyPceMJPpVv2RQUAj9WWTZr4yvO0J5/KllhGqr3sZndrV1lF/rrFzjnnLO8egQTS7bXHbsU 9sM71w5Xiow+isEEPrc5KQ== ) ; Key ID = 7877 GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190830214731 20190815214231 7698 gov. k1bNHuSWv2dXTQUpQqP68QRQ5fWzTY2g+HNf1z8IpZC7H3EHKv8KptrM+vQiUBR655KD9G3geI3x HbR3kKXWcQII2XFfnvCmf7gNbVmOYUli1cTCsbTNo64VS8hdwpwFPH7C8FQ7NDs5vUH6y9XvIJv0 M571C301cmbMdtczwdTVIE64YGedJOWGQMcLJnRPzdbz9IS1XdxHkfLmGsrqzUYUc1/b88hCVlbn ftGzRDh+jUq32mCd6eknCrnfmG4moYT1CVuR10K5oG3pADzMgTSnqCYyFb9xrRYaYtBmDeN0KhKp wx+MHIquJk2W6OUnoMMCX0DqxTlUHMxoxIfOwA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQPnviCbt0HB2CQze767dPf3TQFosiEwOIkUQaJmcSoNlVSquo3Mox7noTQGzKSdTbKAh0zfkGIb thSb6zyPceMJPpVv2RQUAj9WWTZr4yvO0J5/KllhGqr3sZndrV1lF/rrFzjnnLO8egQTS7bXHbsU 9sM71w5Xiow+isEEPrc5KQ== ) ; Key ID = 7877`
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190830214731 20190815214231 7698 gov. k1bNHuSWv2dXTQUpQqP68QRQ5fWzTY2g+HNf1z8IpZC7H3EHKv8KptrM+vQiUBR655KD9G3geI3x HbR3kKXWcQII2XFfnvCmf7gNbVmOYUli1cTCsbTNo64VS8hdwpwFPH7C8FQ7NDs5vUH6y9XvIJv0 M571C301cmbMdtczwdTVIE64YGedJOWGQMcLJnRPzdbz9IS1XdxHkfLmGsrqzUYUc1/b88hCVlbn ftGzRDh+jUq32mCd6eknCrnfmG4moYT1CVuR10K5oG3pADzMgTSnqCYyFb9xrRYaYtBmDeN0KhKp wx+MHIquJk2W6OUnoMMCX0DqxTlUHMxoxIfOwA== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=7877 is now in the chain-of-trust
	Query to c.gov-servers.net for FDA.GOV/A
	Received 420 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (420 bytes) ;; HEADER SECTION ;; id = 30573 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FDA.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) FDA.GOV. 86400 IN NS wodc-intnsdns-01.FDA.GOV. FDA.GOV. 86400 IN NS ns1.FDA.GOV. FDA.GOV. 3600 IN DS ( 46071 7 2 2ef2d58d6c8425c8bcf88d7af470f5c42f7565216bd5c9fbbcbf5608f22b8716 ) FDA.GOV. 3600 IN DS 46071 7 1 46356fea9406d8f3be9b45942333a3d8dd62a78d FDA.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190827101007 20190820101007 7877 gov. ehnkpjKFV8jkAeyfHd/CpLCJhvWNkBMRgXhEmmOwkgrIzPGV5+6S4PptvO0+okSNL0vup9LuFyDH Vd8QPzUwb2E2UehK0Eq3owfgHG2S3+YXvmfVsznWmkulGCVv4kV0eP7rq7Ooi7D5FXY1Xaw/Squ4 hrv3m/unshsgcpcxpEA= ) ;; ADDITIONAL SECTION (5 records) wodc-intnsdns-01.FDA.GOV. 86400 IN A 150.148.18.8 wodc-intnsdns-01.FDA.GOV. 86400 IN AAAA 2607:f220:300:202:1000::8 ns1.FDA.GOV. 86400 IN A 150.148.132.6 ns1.FDA.GOV. 86400 IN AAAA 2607:f220:300:800f:1000::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.gov-servers.net for FDA.GOV/DNSKEY
	Received 420 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (420 bytes) ;; HEADER SECTION ;; id = 36481 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FDA.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) FDA.GOV. 86400 IN NS wodc-intnsdns-01.FDA.GOV. FDA.GOV. 86400 IN NS ns1.FDA.GOV. FDA.GOV. 3600 IN DS ( 46071 7 2 2ef2d58d6c8425c8bcf88d7af470f5c42f7565216bd5c9fbbcbf5608f22b8716 ) FDA.GOV. 3600 IN DS 46071 7 1 46356fea9406d8f3be9b45942333a3d8dd62a78d FDA.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190827101007 20190820101007 7877 gov. ehnkpjKFV8jkAeyfHd/CpLCJhvWNkBMRgXhEmmOwkgrIzPGV5+6S4PptvO0+okSNL0vup9LuFyDH Vd8QPzUwb2E2UehK0Eq3owfgHG2S3+YXvmfVsznWmkulGCVv4kV0eP7rq7Ooi7D5FXY1Xaw/Squ4 hrv3m/unshsgcpcxpEA= ) ;; ADDITIONAL SECTION (5 records) wodc-intnsdns-01.FDA.GOV. 86400 IN A 150.148.18.8 wodc-intnsdns-01.FDA.GOV. 86400 IN AAAA 2607:f220:300:202:1000::8 ns1.FDA.GOV. 86400 IN A 150.148.132.6 ns1.FDA.GOV. 86400 IN AAAA 2607:f220:300:800f:1000::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone FDA.GOV

FDA.GOV

	Checking DS between GOV and FDA.GOV
	Query to b.gov-servers.net for FDA.GOV/DS
	Received 283 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (283 bytes) ;; HEADER SECTION ;; id = 2109 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FDA.GOV. IN DS ;; ANSWER SECTION (3 records) FDA.GOV. 3600 IN DS ( 46071 7 2 2ef2d58d6c8425c8bcf88d7af470f5c42f7565216bd5c9fbbcbf5608f22b8716 ) FDA.GOV. 3600 IN DS 46071 7 1 46356fea9406d8f3be9b45942333a3d8dd62a78d FDA.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190827101007 20190820101007 7877 gov. ehnkpjKFV8jkAeyfHd/CpLCJhvWNkBMRgXhEmmOwkgrIzPGV5+6S4PptvO0+okSNL0vup9LuFyDH Vd8QPzUwb2E2UehK0Eq3owfgHG2S3+YXvmfVsznWmkulGCVv4kV0eP7rq7Ooi7D5FXY1Xaw/Squ4 hrv3m/unshsgcpcxpEA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for FDA.GOV in the GOV zone
	DS=46071/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=46071/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`FDA.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190827101007 20190820101007 7877 gov. ehnkpjKFV8jkAeyfHd/CpLCJhvWNkBMRgXhEmmOwkgrIzPGV5+6S4PptvO0+okSNL0vup9LuFyDH Vd8QPzUwb2E2UehK0Eq3owfgHG2S3+YXvmfVsznWmkulGCVv4kV0eP7rq7Ooi7D5FXY1Xaw/Squ4 hrv3m/unshsgcpcxpEA= )`
	RRSIG=7877 and DNSKEY=7877 verifies the DS RRset
	DS=46071/SHA-256 is now in the chain-of-trust
	`FDA.GOV. 3600 IN DS ( 46071 7 2 2ef2d58d6c8425c8bcf88d7af470f5c42f7565216bd5c9fbbcbf5608f22b8716 )`
	`FDA.GOV. 3600 IN DS 46071 7 1 46356fea9406d8f3be9b45942333a3d8dd62a78d`
	Query to wodc-intnsdns-01.FDA.GOV for FDA.GOV/DNSKEY
	Received 1237 bytes from 150.148.18.8
	;; Answer received from 150.148.18.8 (1237 bytes) ;; HEADER SECTION ;; id = 43744 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FDA.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) FDA.GOV. 172800 IN DNSKEY ( 256 3 7 AwEAAaxYjZW5EWlpz/YzyFap1ZCzdrqfqEasCd/2zImQbrq/bLfAetlwUyKhGw9EE5zSqo9XVOi6 BsnqVeKQHhU+6E4F64VndFZtiG5UVYxNVr52W0hvwkBwdjN+cA1zZFNNKzSREUg8ICIgJPr82w86 iMJGS7uCQIi2UDupVn9AILTL ) ; Key ID = 25412 FDA.GOV. 172800 IN DNSKEY ( 257 3 7 AwEAAdleeswhC/a5pgib08BfCxt7ZRDo1I8RRoEjPbM2YngMUJGw/rSW1frh6AFSCq5CX1OOZADQ 7rqZT+OvTdVO5K3kxsw2o1pmMrlOxCgsNSEmtkVg1Ze0wFVGZFvdmYLAyKnLbzCkqIeflgSVkoKI yo0v7Zq+Qo2+MBC9qMyNBYC6gdm4wIfUhRnra5N+jw5LiiPk7uchA1XOwXjue287lsOnDtQelu2I FgGYciXFsgbyw2FW5hGRrv3pdP/NCe/+sYmUhA1sC4bm/EBeNa+dRJRriY7/etVNXOLf8fo4qoeI 1H52EPv4SXhENQhccU+/Tc8AJ1wyOJZP73HRXjc9Zsc= ) ; Key ID = 46071 FDA.GOV. 172800 IN DNSKEY ( 256 3 7 AwEAAcSZhAMhyj+Rw0pWNWUxabhBvGyZbxwV17wKLz59eoPdfLiVrx9tj4BwdEv2M3eq9C7de1uU GT66eBKBlF/EZPpGohI3RQZ4QWVjd5j2i9GGQrVpcYEv+ntLXUiiZPCbxKNGanJplJ+loP5xJL3L MtPDefzFHw5QR/ToV7Hg06dR ) ; Key ID = 59060 FDA.GOV. 172800 IN RRSIG ( DNSKEY 7 2 172800 20190824073226 20190820065723 25412 fda.gov. KlV/NuyLPQ3jdrJoQB3PXm1FF9u8tWqquB34nNGP5cCFo3aEIIy4xwNasXmoaDO1o/oruIV6n8kR Mg5kUDji3saYr4wdLvJyDcg0gWEz1KS2WSASYFlWScg5uf27yeeYz3+fAssegYjuuJtdxUuYSTEd f47Psg0fFOTvyxEr36c= ) fda.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20190824073226 20190820065723 46071 fda.gov. r0KrZ5MGQwyFbng53nIk+7/KQweA9HMStmnZzYXV2bscDQFvdMdQdbq9REKbm3g5uCbx+3Tw9wF0 xh7jyMpxgFrVxLDUoy2rCZs4HrWCB8n70V/VNwnQ0OpS9uNH2GqvJ89asaFRgKXgp0kOXJAILpv8 fGMvLFUbkp4HlXlVwWkWl7bjt/CpjYPWoamahRJn3YddyD2eLv04y5HrIVtHcrDU4/3CTShwQnPS EilEE+C87UvrZp6xguQ4/v9qxrfeZMFqCDLBaX/58nb1vS8beNrB00JGbSfou3axg53er/9cQop0 rZNjsYmKiOpWJm58wmtAXplWNsM89yXtJyc3yQ== ) fda.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20190824073226 20190820065723 59060 fda.gov. dRWAr2P3cefzKshxfpyX3iWrBNePnnnrr3YOXeA/VlWsUzlt0AOge/1j5k/DmvLll6jrojZLAVi+ HDeLit8luc6kA/0FADgpv78cXBmbf6f1ZQNr+Rd9opbH4zlpnWtwxZchl09F1XHM3vp+RXwLr7LB KOqXYy5z9KU+omYgH1s= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for FDA.GOV
	`FDA.GOV. 172800 IN DNSKEY ( 256 3 7 AwEAAaxYjZW5EWlpz/YzyFap1ZCzdrqfqEasCd/2zImQbrq/bLfAetlwUyKhGw9EE5zSqo9XVOi6 BsnqVeKQHhU+6E4F64VndFZtiG5UVYxNVr52W0hvwkBwdjN+cA1zZFNNKzSREUg8ICIgJPr82w86 iMJGS7uCQIi2UDupVn9AILTL ) ; Key ID = 25412`
	`FDA.GOV. 172800 IN DNSKEY ( 257 3 7 AwEAAdleeswhC/a5pgib08BfCxt7ZRDo1I8RRoEjPbM2YngMUJGw/rSW1frh6AFSCq5CX1OOZADQ 7rqZT+OvTdVO5K3kxsw2o1pmMrlOxCgsNSEmtkVg1Ze0wFVGZFvdmYLAyKnLbzCkqIeflgSVkoKI yo0v7Zq+Qo2+MBC9qMyNBYC6gdm4wIfUhRnra5N+jw5LiiPk7uchA1XOwXjue287lsOnDtQelu2I FgGYciXFsgbyw2FW5hGRrv3pdP/NCe/+sYmUhA1sC4bm/EBeNa+dRJRriY7/etVNXOLf8fo4qoeI 1H52EPv4SXhENQhccU+/Tc8AJ1wyOJZP73HRXjc9Zsc= ) ; Key ID = 46071`
	`FDA.GOV. 172800 IN DNSKEY ( 256 3 7 AwEAAcSZhAMhyj+Rw0pWNWUxabhBvGyZbxwV17wKLz59eoPdfLiVrx9tj4BwdEv2M3eq9C7de1uU GT66eBKBlF/EZPpGohI3RQZ4QWVjd5j2i9GGQrVpcYEv+ntLXUiiZPCbxKNGanJplJ+loP5xJL3L MtPDefzFHw5QR/ToV7Hg06dR ) ; Key ID = 59060`
	DNSKEY=46071/SEP is now in the chain-of-trust
	DS=46071/SHA-256 verifies DNSKEY=46071/SEP
	DS=46071/SHA-1 verifies DNSKEY=46071/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`FDA.GOV. 172800 IN RRSIG ( DNSKEY 7 2 172800 20190824073226 20190820065723 25412 fda.gov. KlV/NuyLPQ3jdrJoQB3PXm1FF9u8tWqquB34nNGP5cCFo3aEIIy4xwNasXmoaDO1o/oruIV6n8kR Mg5kUDji3saYr4wdLvJyDcg0gWEz1KS2WSASYFlWScg5uf27yeeYz3+fAssegYjuuJtdxUuYSTEd f47Psg0fFOTvyxEr36c= )`
	`fda.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20190824073226 20190820065723 46071 fda.gov. r0KrZ5MGQwyFbng53nIk+7/KQweA9HMStmnZzYXV2bscDQFvdMdQdbq9REKbm3g5uCbx+3Tw9wF0 xh7jyMpxgFrVxLDUoy2rCZs4HrWCB8n70V/VNwnQ0OpS9uNH2GqvJ89asaFRgKXgp0kOXJAILpv8 fGMvLFUbkp4HlXlVwWkWl7bjt/CpjYPWoamahRJn3YddyD2eLv04y5HrIVtHcrDU4/3CTShwQnPS EilEE+C87UvrZp6xguQ4/v9qxrfeZMFqCDLBaX/58nb1vS8beNrB00JGbSfou3axg53er/9cQop0 rZNjsYmKiOpWJm58wmtAXplWNsM89yXtJyc3yQ== )`
	`fda.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20190824073226 20190820065723 59060 fda.gov. dRWAr2P3cefzKshxfpyX3iWrBNePnnnrr3YOXeA/VlWsUzlt0AOge/1j5k/DmvLll6jrojZLAVi+ HDeLit8luc6kA/0FADgpv78cXBmbf6f1ZQNr+Rd9opbH4zlpnWtwxZchl09F1XHM3vp+RXwLr7LB KOqXYy5z9KU+omYgH1s= )`
	RRSIG=25412 and DNSKEY=25412 verifies the DNSKEY RRset
	RRSIG=46071 and DNSKEY=46071/SEP verifies the DNSKEY RRset
	RRSIG=59060 and DNSKEY=59060 verifies the DNSKEY RRset
	DNSKEY=25412 is now in the chain-of-trust
	DNSKEY=59060 is now in the chain-of-trust
	Query to wodc-intnsdns-01.FDA.GOV for FDA.GOV/A
	Received 847 bytes from 150.148.18.8
	;; Answer received from 150.148.18.8 (847 bytes) ;; HEADER SECTION ;; id = 59358 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FDA.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) FDA.GOV. 900 IN SOA ( ns1.FDA.GOV. dnsadmin.fda.hhs.GOV. 2019063145 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) FDA.GOV. 900 IN RRSIG ( SOA 7 2 28800 20190824133336 20190820123336 25412 fda.gov. eysA/KgyLcfKcbRvx9aItaW7lVFHgsat8WqhtZR7rzvzvP0t0pPTeIHZDJTdFXnsswoUndm3mf47 5xO4QiYS2yQz7p5vVVWZYs7ScCjGPYhOYRp3HWi/ans9jFd261HdemExo383EHAEwDw+ud+Htugv QwB4uyWJmqKHvu8I0LY= ) fda.gov. 900 IN RRSIG ( SOA 7 2 28800 20190824133336 20190820123336 59060 fda.gov. p911OZpUFvtgmbSNBvnDOIwe0mRLURP5Es13YdshMSx2OvUeMnY3QOHr9T4SyEAkz4FA+zWiQGZE VkaWYM3TqTKjA9r+V4yrgJ/xvTcdMokZljnk7+3HLYBGF+L5AgBb/RIJdtMYee7x4FwsZRD/mgjY ocuHyxJ2NMHA8pwgyjs= ) MITIONOM80SR63PIBQELTT3GJ11AATE2.fda.gov. 900 IN NSEC3 ( 1 0 10 4b119ed94435 mlf1uedlc8j8l3783456emrrkgqec2qn NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) MITIONOM80SR63PIBQELTT3GJ11AATE2.fda.gov. 900 IN RRSIG ( NSEC3 7 3 900 20190824071651 20190820065711 25412 fda.gov. K1UgINStdKwJUEQR1BgsqGBcN7sbp4m7IWwOKXno6ghcsyIfaFE6JPU/HB42MOCO2SlViHHRtw5m +zi3B1do4cLOoThO8pKuretP+xQ+EexSAA7oDGJvC80A8V/zBqk5H26zGn7hy8kXF0vx93Rfne/S R09yma+G3vfXe72bYh0= ) MITIONOM80SR63PIBQELTT3GJ11AATE2.fda.gov. 900 IN RRSIG ( NSEC3 7 3 900 20190824071651 20190820065711 59060 fda.gov. NgW4CqkpxylkY9H7xE5A1hGa2oJ+KUWN9PZmBAk5b5iMDeSwHGjBW57C7e+4dBHNHq1p+MacN7rQ nKhdjIK1tfIuimrAcHZ/pG7VHHZfdVZaTHsIIjaQES33OYqVohmngHChLGFquCHiUFf5itoYIoPr Z643O7exq4XX0CVqqiE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	FDA.GOV is authoritative for FDA.GOV
	Found RRSIG signed by fda.gov zone
	Query to ns1.FDA.GOV for FDA.GOV/SOA
	Received 2230 bytes from 150.148.132.6
	;; Answer received from 150.148.132.6 (2230 bytes) ;; HEADER SECTION ;; id = 64237 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FDA.GOV. IN SOA ;; ANSWER SECTION (3 records) FDA.GOV. 28800 IN SOA ( ns1.FDA.GOV. dnsadmin.fda.hhs.GOV. 2019063145 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) FDA.GOV. 28800 IN RRSIG ( SOA 7 2 28800 20190824133336 20190820123336 25412 fda.gov. eysA/KgyLcfKcbRvx9aItaW7lVFHgsat8WqhtZR7rzvzvP0t0pPTeIHZDJTdFXnsswoUndm3mf47 5xO4QiYS2yQz7p5vVVWZYs7ScCjGPYhOYRp3HWi/ans9jFd261HdemExo383EHAEwDw+ud+Htugv QwB4uyWJmqKHvu8I0LY= ) fda.gov. 28800 IN RRSIG ( SOA 7 2 28800 20190824133336 20190820123336 59060 fda.gov. p911OZpUFvtgmbSNBvnDOIwe0mRLURP5Es13YdshMSx2OvUeMnY3QOHr9T4SyEAkz4FA+zWiQGZE VkaWYM3TqTKjA9r+V4yrgJ/xvTcdMokZljnk7+3HLYBGF+L5AgBb/RIJdtMYee7x4FwsZRD/mgjY ocuHyxJ2NMHA8pwgyjs= ) ;; AUTHORITY SECTION (4 records) fda.gov. 28800 IN NS wodc-intnsdns-01.fda.gov. fda.gov. 28800 IN NS ns1.FDA.GOV. fda.gov. 28800 IN RRSIG ( NS 7 2 28800 20190824111807 20190820102658 25412 fda.gov. ZNFBH5p3zJ/8dMYzpahFf+UiXmuujmY6pvQAkpaG2zv/JufDja4mbEFqMNXuqPJgo7sd5sumSDUv 2zB3Y8fEVPfba1/qp0OdyXQqdZeQo3V11HJskdqLi0Rydxk0+zGXPx4HiUziWGhs+cfTsXQWvdkH wBIdb5Z5RAHdQKpgTYg= ) fda.gov. 28800 IN RRSIG ( NS 7 2 28800 20190824111807 20190820102658 59060 fda.gov. JpdS0chnLEyIM2e3/yE05S8C+t2263jNljuHNuKnVWHV4HhFr9eRcgh3dhArt2VJt3DgNw2NZoK8 00cBE+uSnfY4ltZrwNL5KLXTRNS3T+clWy/ZRze1b4b4gejSrjQF/tIwybgkcatTzhWFHYszB0rh 68NTjuPUIijzbfGBptE= ) ;; ADDITIONAL SECTION (13 records) wodc-intnsdns-01.fda.gov. 28800 IN A 150.148.18.8 ns1.FDA.GOV. 28800 IN A 150.148.132.6 wodc-intnsdns-01.fda.gov. 28800 IN AAAA 2607:f220:300:202:1000::8 ns1.FDA.GOV. 28800 IN AAAA 2607:f220:300:800f:1000::1 wodc-intnsdns-01.fda.gov. 28800 IN RRSIG ( A 7 3 28800 20190823153910 20190819151452 25412 fda.gov. Zr9ohIWDTgliir7XMLsINf1EPSna8cbCc4si/BHletKf4+MedSZVJtm29Y14xC5XVPgr7zWvF1KH gR5MJJf0JVr9sD1G88dhCXK/9zol6M4cpwgJQvT18VA0bTNeuWxgeixBiAf1pXUfy9XTCJQ+QkAk p36b5RZIcERrv8xlMJA= ) wodc-intnsdns-01.fda.gov. 28800 IN RRSIG ( A 7 3 28800 20190823153910 20190819151452 59060 fda.gov. e2jyhcVSCDlzwU8kU7DkXnxfdSklGunkqr93P9fun/ZGnfqEaG901sWkkCR+L2bWtvzpCW95lA40 xMb/nPTJbYnyP/Z8T8zmhnGh/UqWBGhPqqTsDLEyKyh9S8//EBl45rKzzyADiwleVUejhdyIqrep wIbO7NBgCiyKbAJMYSQ= ) wodc-intnsdns-01.fda.gov. 28800 IN RRSIG ( AAAA 7 3 28800 20190823201852 20190819200711 25412 fda.gov. Ih09f1bljhIiYmM+4Qx09KiowN1jMqQ0MOwa7psdWV5Utp8l/nma6fc50ndgThvV784EtH+TSXrr nkSaSGFdA6KQBC5ZhoJQYZefralT1kaXYE9tTHcC3Ln+ydkdaiHhXJN6Kez8xJ3ot2vao7cKl1LT JubTd9A4jdPItKQXQ/k= ) wodc-intnsdns-01.fda.gov. 28800 IN RRSIG ( AAAA 7 3 28800 20190823201852 20190819200711 59060 fda.gov. J8iYEsWsjUf/3ImPjSZzpj36XtpiMnnjB7EzLroP56La4ekkpbVMHqo1VNDiYYzvO2Mxc7Ac3fRB 7MQCwRNk7N7p2/iM6pI5nRmDL6RIGVah8Th8uIORHSigSYzsXTMUEyPxEld1D9gNTXpIkhixbPST u8FqYiL45y9mDakIyXU= ) ns1.FDA.GOV. 28800 IN RRSIG ( A 7 3 28800 20190824061052 20190820051115 25412 fda.gov. OZ7LFmSQtF2AI5hMtlSAofcOz7SJL5FiNCIeI2LBbcNZtW4yN8q1fd4VW5FVla7Nu1CrTQpud56a jJ2nfyNU8XezC+eG2OwBUYrVn3VYwzkpkUWQTXp1oyvT45qGiBs6gBuXUqWt9+K3L8Rk+EVH/AKw Q+8bJ/KCtfUq7Lt+iwY= ) ns1.FDA.GOV. 28800 IN RRSIG ( A 7 3 28800 20190824061052 20190820051115 59060 fda.gov. LbJjs2lE71XHE5ANEXGGcrmqEKUWnLcEHQpJtsskJC/0VIFt5fW5aHdnpd5YhBv+8j28wIA8Sm41 Fw1qHPqo/JwEeB4D9PAuGmkJ/bttV1GzchAURVOpt1AcicV8HCENJ23OpVQMPuVS/VWAVXZxCBoY CmhFxcp8ciLale/tvbQ= ) ns1.FDA.GOV. 28800 IN RRSIG ( AAAA 7 3 28800 20190823220812 20190819212721 25412 fda.gov. XMaRzrO0Mq7YMeLyKhH5BGKmKsKqZXNSmiPBetuFptwJ3MYamFTMb77aDYjRVs46Zx2hDWHpqBgt Z282t45+bTkXhvLoxXl9cIfDhrGRxgyCaESJJogyOgAVgCfnaq3/QRlmNVIx7onuwiO+pOIKpBkz kDukriZ6hlsmvGscgAs= ) ns1.FDA.GOV. 28800 IN RRSIG ( AAAA 7 3 28800 20190823220812 20190819212721 59060 fda.gov. AuFZ/nxBlnafBkYV32nhlujXixjihzH/2GzUTYhJnCIjewLy77/eBxA7MIbeEw426NVOKRxXmwkC hE9qj7nVj6HLnCrbZB3kaKGOOv5W8gTl2uubZU2NgCwP/8lZ8vNeeilqqcJPxKfXvjOycwKU8gb2 AV1JOCT0Ywm6SmxhOs8= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to wodc-intnsdns-01.FDA.GOV for FDA.GOV/SOA
	Error querying wodc-intnsdns-01.FDA.GOV/2607:f220:300:202:1000:0:0:8 for FDA.GOV/SOA: 'IPv6 transport disabled'
	Received 2230 bytes from 150.148.18.8
	;; Answer received from 150.148.18.8 (2230 bytes) ;; HEADER SECTION ;; id = 51329 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FDA.GOV. IN SOA ;; ANSWER SECTION (3 records) FDA.GOV. 28800 IN SOA ( ns1.FDA.GOV. dnsadmin.fda.hhs.GOV. 2019063145 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) FDA.GOV. 28800 IN RRSIG ( SOA 7 2 28800 20190824133336 20190820123336 25412 fda.gov. eysA/KgyLcfKcbRvx9aItaW7lVFHgsat8WqhtZR7rzvzvP0t0pPTeIHZDJTdFXnsswoUndm3mf47 5xO4QiYS2yQz7p5vVVWZYs7ScCjGPYhOYRp3HWi/ans9jFd261HdemExo383EHAEwDw+ud+Htugv QwB4uyWJmqKHvu8I0LY= ) fda.gov. 28800 IN RRSIG ( SOA 7 2 28800 20190824133336 20190820123336 59060 fda.gov. p911OZpUFvtgmbSNBvnDOIwe0mRLURP5Es13YdshMSx2OvUeMnY3QOHr9T4SyEAkz4FA+zWiQGZE VkaWYM3TqTKjA9r+V4yrgJ/xvTcdMokZljnk7+3HLYBGF+L5AgBb/RIJdtMYee7x4FwsZRD/mgjY ocuHyxJ2NMHA8pwgyjs= ) ;; AUTHORITY SECTION (4 records) fda.gov. 28800 IN NS wodc-intnsdns-01.fda.gov. fda.gov. 28800 IN NS ns1.FDA.GOV. fda.gov. 28800 IN RRSIG ( NS 7 2 28800 20190824111807 20190820102658 25412 fda.gov. ZNFBH5p3zJ/8dMYzpahFf+UiXmuujmY6pvQAkpaG2zv/JufDja4mbEFqMNXuqPJgo7sd5sumSDUv 2zB3Y8fEVPfba1/qp0OdyXQqdZeQo3V11HJskdqLi0Rydxk0+zGXPx4HiUziWGhs+cfTsXQWvdkH wBIdb5Z5RAHdQKpgTYg= ) fda.gov. 28800 IN RRSIG ( NS 7 2 28800 20190824111807 20190820102658 59060 fda.gov. JpdS0chnLEyIM2e3/yE05S8C+t2263jNljuHNuKnVWHV4HhFr9eRcgh3dhArt2VJt3DgNw2NZoK8 00cBE+uSnfY4ltZrwNL5KLXTRNS3T+clWy/ZRze1b4b4gejSrjQF/tIwybgkcatTzhWFHYszB0rh 68NTjuPUIijzbfGBptE= ) ;; ADDITIONAL SECTION (13 records) wodc-intnsdns-01.fda.gov. 28800 IN A 150.148.18.8 ns1.FDA.GOV. 28800 IN A 150.148.132.6 wodc-intnsdns-01.fda.gov. 28800 IN AAAA 2607:f220:300:202:1000::8 ns1.FDA.GOV. 28800 IN AAAA 2607:f220:300:800f:1000::1 wodc-intnsdns-01.fda.gov. 28800 IN RRSIG ( A 7 3 28800 20190823153910 20190819151452 25412 fda.gov. Zr9ohIWDTgliir7XMLsINf1EPSna8cbCc4si/BHletKf4+MedSZVJtm29Y14xC5XVPgr7zWvF1KH gR5MJJf0JVr9sD1G88dhCXK/9zol6M4cpwgJQvT18VA0bTNeuWxgeixBiAf1pXUfy9XTCJQ+QkAk p36b5RZIcERrv8xlMJA= ) wodc-intnsdns-01.fda.gov. 28800 IN RRSIG ( A 7 3 28800 20190823153910 20190819151452 59060 fda.gov. e2jyhcVSCDlzwU8kU7DkXnxfdSklGunkqr93P9fun/ZGnfqEaG901sWkkCR+L2bWtvzpCW95lA40 xMb/nPTJbYnyP/Z8T8zmhnGh/UqWBGhPqqTsDLEyKyh9S8//EBl45rKzzyADiwleVUejhdyIqrep wIbO7NBgCiyKbAJMYSQ= ) wodc-intnsdns-01.fda.gov. 28800 IN RRSIG ( AAAA 7 3 28800 20190823201852 20190819200711 25412 fda.gov. Ih09f1bljhIiYmM+4Qx09KiowN1jMqQ0MOwa7psdWV5Utp8l/nma6fc50ndgThvV784EtH+TSXrr nkSaSGFdA6KQBC5ZhoJQYZefralT1kaXYE9tTHcC3Ln+ydkdaiHhXJN6Kez8xJ3ot2vao7cKl1LT JubTd9A4jdPItKQXQ/k= ) wodc-intnsdns-01.fda.gov. 28800 IN RRSIG ( AAAA 7 3 28800 20190823201852 20190819200711 59060 fda.gov. J8iYEsWsjUf/3ImPjSZzpj36XtpiMnnjB7EzLroP56La4ekkpbVMHqo1VNDiYYzvO2Mxc7Ac3fRB 7MQCwRNk7N7p2/iM6pI5nRmDL6RIGVah8Th8uIORHSigSYzsXTMUEyPxEld1D9gNTXpIkhixbPST u8FqYiL45y9mDakIyXU= ) ns1.FDA.GOV. 28800 IN RRSIG ( A 7 3 28800 20190824061052 20190820051115 25412 fda.gov. OZ7LFmSQtF2AI5hMtlSAofcOz7SJL5FiNCIeI2LBbcNZtW4yN8q1fd4VW5FVla7Nu1CrTQpud56a jJ2nfyNU8XezC+eG2OwBUYrVn3VYwzkpkUWQTXp1oyvT45qGiBs6gBuXUqWt9+K3L8Rk+EVH/AKw Q+8bJ/KCtfUq7Lt+iwY= ) ns1.FDA.GOV. 28800 IN RRSIG ( A 7 3 28800 20190824061052 20190820051115 59060 fda.gov. LbJjs2lE71XHE5ANEXGGcrmqEKUWnLcEHQpJtsskJC/0VIFt5fW5aHdnpd5YhBv+8j28wIA8Sm41 Fw1qHPqo/JwEeB4D9PAuGmkJ/bttV1GzchAURVOpt1AcicV8HCENJ23OpVQMPuVS/VWAVXZxCBoY CmhFxcp8ciLale/tvbQ= ) ns1.FDA.GOV. 28800 IN RRSIG ( AAAA 7 3 28800 20190823220812 20190819212721 25412 fda.gov. XMaRzrO0Mq7YMeLyKhH5BGKmKsKqZXNSmiPBetuFptwJ3MYamFTMb77aDYjRVs46Zx2hDWHpqBgt Z282t45+bTkXhvLoxXl9cIfDhrGRxgyCaESJJogyOgAVgCfnaq3/QRlmNVIx7onuwiO+pOIKpBkz kDukriZ6hlsmvGscgAs= ) ns1.FDA.GOV. 28800 IN RRSIG ( AAAA 7 3 28800 20190823220812 20190819212721 59060 fda.gov. AuFZ/nxBlnafBkYV32nhlujXixjihzH/2GzUTYhJnCIjewLy77/eBxA7MIbeEw426NVOKRxXmwkC hE9qj7nVj6HLnCrbZB3kaKGOOv5W8gTl2uubZU2NgCwP/8lZ8vNeeilqqcJPxKfXvjOycwKU8gb2 AV1JOCT0Ywm6SmxhOs8= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to wodc-intnsdns-01.FDA.GOV for FDA.GOV/A
	Received 847 bytes from 150.148.18.8
	;; Answer received from 150.148.18.8 (847 bytes) ;; HEADER SECTION ;; id = 35551 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FDA.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) FDA.GOV. 900 IN SOA ( ns1.FDA.GOV. dnsadmin.fda.hhs.GOV. 2019063145 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) FDA.GOV. 900 IN RRSIG ( SOA 7 2 28800 20190824133336 20190820123336 25412 fda.gov. eysA/KgyLcfKcbRvx9aItaW7lVFHgsat8WqhtZR7rzvzvP0t0pPTeIHZDJTdFXnsswoUndm3mf47 5xO4QiYS2yQz7p5vVVWZYs7ScCjGPYhOYRp3HWi/ans9jFd261HdemExo383EHAEwDw+ud+Htugv QwB4uyWJmqKHvu8I0LY= ) fda.gov. 900 IN RRSIG ( SOA 7 2 28800 20190824133336 20190820123336 59060 fda.gov. p911OZpUFvtgmbSNBvnDOIwe0mRLURP5Es13YdshMSx2OvUeMnY3QOHr9T4SyEAkz4FA+zWiQGZE VkaWYM3TqTKjA9r+V4yrgJ/xvTcdMokZljnk7+3HLYBGF+L5AgBb/RIJdtMYee7x4FwsZRD/mgjY ocuHyxJ2NMHA8pwgyjs= ) MITIONOM80SR63PIBQELTT3GJ11AATE2.fda.gov. 900 IN NSEC3 ( 1 0 10 4b119ed94435 mlf1uedlc8j8l3783456emrrkgqec2qn NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) MITIONOM80SR63PIBQELTT3GJ11AATE2.fda.gov. 900 IN RRSIG ( NSEC3 7 3 900 20190824071651 20190820065711 25412 fda.gov. K1UgINStdKwJUEQR1BgsqGBcN7sbp4m7IWwOKXno6ghcsyIfaFE6JPU/HB42MOCO2SlViHHRtw5m +zi3B1do4cLOoThO8pKuretP+xQ+EexSAA7oDGJvC80A8V/zBqk5H26zGn7hy8kXF0vx93Rfne/S R09yma+G3vfXe72bYh0= ) MITIONOM80SR63PIBQELTT3GJ11AATE2.fda.gov. 900 IN RRSIG ( NSEC3 7 3 900 20190824071651 20190820065711 59060 fda.gov. NgW4CqkpxylkY9H7xE5A1hGa2oJ+KUWN9PZmBAk5b5iMDeSwHGjBW57C7e+4dBHNHq1p+MacN7rQ nKhdjIK1tfIuimrAcHZ/pG7VHHZfdVZaTHsIIjaQES33OYqVohmngHChLGFquCHiUFf5itoYIoPr Z643O7exq4XX0CVqqiE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`FDA.GOV. 900 IN RRSIG ( SOA 7 2 28800 20190824133336 20190820123336 25412 fda.gov. eysA/KgyLcfKcbRvx9aItaW7lVFHgsat8WqhtZR7rzvzvP0t0pPTeIHZDJTdFXnsswoUndm3mf47 5xO4QiYS2yQz7p5vVVWZYs7ScCjGPYhOYRp3HWi/ans9jFd261HdemExo383EHAEwDw+ud+Htugv QwB4uyWJmqKHvu8I0LY= )`
	`fda.gov. 900 IN RRSIG ( SOA 7 2 28800 20190824133336 20190820123336 59060 fda.gov. p911OZpUFvtgmbSNBvnDOIwe0mRLURP5Es13YdshMSx2OvUeMnY3QOHr9T4SyEAkz4FA+zWiQGZE VkaWYM3TqTKjA9r+V4yrgJ/xvTcdMokZljnk7+3HLYBGF+L5AgBb/RIJdtMYee7x4FwsZRD/mgjY ocuHyxJ2NMHA8pwgyjs= )`
	RRSIG=25412 and DNSKEY=25412 verifies the SOA RRset
	RRSIG=59060 and DNSKEY=59060 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test FDA.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: