DNSSEC Analyzer

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2018-12-18 19:24:43 UTC, NTP stratum 4

Analyzing DNSSEC problems for GSA.GOV

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to a.root-servers.net for ./DNSKEY
	Received 1139 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (1139 bytes) ;; HEADER SECTION ;; id = 62891 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19036 . 172800 IN DNSKEY ( 256 3 8 AwEAAdp440E6Mz7c+Vl4sPd0lTv2Qnc85dTW64j0RDD7sS/zwxWDJ3QRES2VKDO0OXLMqVJSs2YC CSDKuZXpDPuf++YfAu0j7lzYYdWTGwyNZhEaXtMQJIKYB96pW6cRkiG2Dn8S2vvo/PxW9PKQsyLb td8PcwWglHgReBVp7kEv/Dd+3b3YMukt4jnWgDUddAySg558Zld+c9eGWkgWoOiuhg4rQRkFstMX 1pRyOSHcZuH38o1WcsT4y3eT0U/SR6TOSLIB/8Ftirux/h297oS7tCcwSPt0wwry5OFNTlfMo8v7 WGurogfk8hPipf7TTKHIi20LWen5RCsvYsQBkYGpF78= ) ; Key ID = 2134 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20181231000000 20181210000000 20326 . oZ1v3JnBSPHWf2HXeAyoqW/lTUP0FAs1tcEQOM47KD3Rb1qHySTbGhh0rTclRlm86GKUlPSiPaF3 zkJ5h46Nazo3r5iAqorjQ1FQD69AgLXpdEIrnzkC3tTTZv+h+Qi2/UosrzoPQnWj3pIdvZvcP5W2 T6nlP7PN5EP2LSeQzLxT8sOUGsBt0iDiGtqm+bN0mKxKdV4599g0+83FtubMG5oYWUBpMJ/os956 uvW/Vg2cwv3/m9X/cX38svYEcAbniXnyqT88+wqPBMA782tUu1AU1tb9QyMt0LcmsDgjrBWl38SG r/LvaNxHMrfU7ymNuEj6NeLBhNfuDEaz0zBRtQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19036`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdp440E6Mz7c+Vl4sPd0lTv2Qnc85dTW64j0RDD7sS/zwxWDJ3QRES2VKDO0OXLMqVJSs2YC CSDKuZXpDPuf++YfAu0j7lzYYdWTGwyNZhEaXtMQJIKYB96pW6cRkiG2Dn8S2vvo/PxW9PKQsyLb td8PcwWglHgReBVp7kEv/Dd+3b3YMukt4jnWgDUddAySg558Zld+c9eGWkgWoOiuhg4rQRkFstMX 1pRyOSHcZuH38o1WcsT4y3eT0U/SR6TOSLIB/8Ftirux/h297oS7tCcwSPt0wwry5OFNTlfMo8v7 WGurogfk8hPipf7TTKHIi20LWen5RCsvYsQBkYGpF78= ) ; Key ID = 2134`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=19036/SEP is now in the chain-of-trust
	DS=19036/SHA-256 verifies DNSKEY=19036/SEP
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20181231000000 20181210000000 20326 . oZ1v3JnBSPHWf2HXeAyoqW/lTUP0FAs1tcEQOM47KD3Rb1qHySTbGhh0rTclRlm86GKUlPSiPaF3 zkJ5h46Nazo3r5iAqorjQ1FQD69AgLXpdEIrnzkC3tTTZv+h+Qi2/UosrzoPQnWj3pIdvZvcP5W2 T6nlP7PN5EP2LSeQzLxT8sOUGsBt0iDiGtqm+bN0mKxKdV4599g0+83FtubMG5oYWUBpMJ/os956 uvW/Vg2cwv3/m9X/cX38svYEcAbniXnyqT88+wqPBMA782tUu1AU1tb9QyMt0LcmsDgjrBWl38SG r/LvaNxHMrfU7ymNuEj6NeLBhNfuDEaz0zBRtQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=2134 is now in the chain-of-trust
	Query to i.root-servers.net for GSA.GOV/A
	Error querying i.root-servers.net/2001:7fe:0:0:0:0:0:53 for GSA.GOV/A: 'IPv6 transport disabled'
	Received 665 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (665 bytes) ;; HEADER SECTION ;; id = 63794 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GSA.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20181231170000 20181218160000 2134 . XPTxZUXz06MeQZ+WtxjkclcbDHciQXSgXJgAlVKv0m4rLpA08q3BvOb/IeDt2dqOltxrRnhUQCXe bWabN8yKworRq5VNoywxBbV3ChT4je19pKIvXpskswJReYPC8meWuBWXtJm/r2NTVHW1hvAHlU3d 5QJMEPEOkcqQwZT0U0cp3Po+k+qLphXwZTMrvHdqyi7S6KjErBlYSkiy2ffCvEiRPoCuqkwvqs30 yO3bIMMc/nUCSF5yTKGk27pNx+QejkwxGFqlqgrN3yRpGtyzLlWhS12hkcV890SL5ahclNhJwgYX Z/Mv0A+Lh6qO5nn6kpS/lngCvkpC2hMIZW42sA== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to k.root-servers.net for GOV/DNSKEY
	Error querying k.root-servers.net/2001:7fd:0:0:0:0:0:1 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 661 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (661 bytes) ;; HEADER SECTION ;; id = 14675 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20181231170000 20181218160000 2134 . XPTxZUXz06MeQZ+WtxjkclcbDHciQXSgXJgAlVKv0m4rLpA08q3BvOb/IeDt2dqOltxrRnhUQCXe bWabN8yKworRq5VNoywxBbV3ChT4je19pKIvXpskswJReYPC8meWuBWXtJm/r2NTVHW1hvAHlU3d 5QJMEPEOkcqQwZT0U0cp3Po+k+qLphXwZTMrvHdqyi7S6KjErBlYSkiy2ffCvEiRPoCuqkwvqs30 yO3bIMMc/nUCSF5yTKGk27pNx+QejkwxGFqlqgrN3yRpGtyzLlWhS12hkcV890SL5ahclNhJwgYX Z/Mv0A+Lh6qO5nn6kpS/lngCvkpC2hMIZW42sA== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to m.root-servers.net for GOV/DS
	Received 406 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (406 bytes) ;; HEADER SECTION ;; id = 22986 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20181231170000 20181218160000 2134 . XPTxZUXz06MeQZ+WtxjkclcbDHciQXSgXJgAlVKv0m4rLpA08q3BvOb/IeDt2dqOltxrRnhUQCXe bWabN8yKworRq5VNoywxBbV3ChT4je19pKIvXpskswJReYPC8meWuBWXtJm/r2NTVHW1hvAHlU3d 5QJMEPEOkcqQwZT0U0cp3Po+k+qLphXwZTMrvHdqyi7S6KjErBlYSkiy2ffCvEiRPoCuqkwvqs30 yO3bIMMc/nUCSF5yTKGk27pNx+QejkwxGFqlqgrN3yRpGtyzLlWhS12hkcV890SL5ahclNhJwgYX Z/Mv0A+Lh6qO5nn6kpS/lngCvkpC2hMIZW42sA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20181231170000 20181218160000 2134 . XPTxZUXz06MeQZ+WtxjkclcbDHciQXSgXJgAlVKv0m4rLpA08q3BvOb/IeDt2dqOltxrRnhUQCXe bWabN8yKworRq5VNoywxBbV3ChT4je19pKIvXpskswJReYPC8meWuBWXtJm/r2NTVHW1hvAHlU3d 5QJMEPEOkcqQwZT0U0cp3Po+k+qLphXwZTMrvHdqyi7S6KjErBlYSkiy2ffCvEiRPoCuqkwvqs30 yO3bIMMc/nUCSF5yTKGk27pNx+QejkwxGFqlqgrN3yRpGtyzLlWhS12hkcV890SL5ahclNhJwgYX Z/Mv0A+Lh6qO5nn6kpS/lngCvkpC2hMIZW42sA== )`
	RRSIG=2134 and DNSKEY=2134 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to d.gov-servers.net for GOV/DNSKEY
	Received 743 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (743 bytes) ;; HEADER SECTION ;; id = 59404 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 256 3 8 AQOzQCL1fIfPdHz2b/lMEAyj5l7JieIaa1GJ1/KDBE80I/FgASeN5ekMXj8XwPdLS38aXq4M67zu locw3A3YjP8qGvR8EZTClRKoFWfQSFyroyXq5w2GN2ir8gxXMwRcIcSg5AVK+3uGMLNRdwVXZB27 GlaqF75saOfj2hP7t2bs6Q== ) ; Key ID = 40499 GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20181223224731 20181208224231 7698 gov. Il/96qUKHNn0ZAOoV2App1UfZY1xcWWeHbsbv5fP6NDWPYyMAXR53AvffkiU6HPQtAciq1hHHgln aZ8jfWnDvffBADBaTioeblHVk9JboOUnoVITbsDBTCfZQG7EIn/nfhMy6h/1HJpdkuWshZ7eH+93 c2csPFAPAbF/8qfgixdkl4juvcDdugrXFmWC7A6ns3cjRZeCUd/RLt1SiNG7RjOndb/GGoQcAEDS X+2tJEurPUgMosqtvLk9HHvv3eLAJxy6i184vnN+jMsm1/WEkiK9nW4LCGSamux+LLBvTqfEhQE1 2zZ946dysmZh8czhq4myhgq6pZD08A4Nb7eGnw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQOzQCL1fIfPdHz2b/lMEAyj5l7JieIaa1GJ1/KDBE80I/FgASeN5ekMXj8XwPdLS38aXq4M67zu locw3A3YjP8qGvR8EZTClRKoFWfQSFyroyXq5w2GN2ir8gxXMwRcIcSg5AVK+3uGMLNRdwVXZB27 GlaqF75saOfj2hP7t2bs6Q== ) ; Key ID = 40499`
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20181223224731 20181208224231 7698 gov. Il/96qUKHNn0ZAOoV2App1UfZY1xcWWeHbsbv5fP6NDWPYyMAXR53AvffkiU6HPQtAciq1hHHgln aZ8jfWnDvffBADBaTioeblHVk9JboOUnoVITbsDBTCfZQG7EIn/nfhMy6h/1HJpdkuWshZ7eH+93 c2csPFAPAbF/8qfgixdkl4juvcDdugrXFmWC7A6ns3cjRZeCUd/RLt1SiNG7RjOndb/GGoQcAEDS X+2tJEurPUgMosqtvLk9HHvv3eLAJxy6i184vnN+jMsm1/WEkiK9nW4LCGSamux+LLBvTqfEhQE1 2zZ946dysmZh8czhq4myhgq6pZD08A4Nb7eGnw== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=40499 is now in the chain-of-trust
	Query to a.gov-servers.net for GSA.GOV/A
	Error querying a.gov-servers.net/2001:500:4431:0:0:0:2:30 for GSA.GOV/A: 'IPv6 transport disabled'
	Received 513 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (513 bytes) ;; HEADER SECTION ;; id = 62366 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 8 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GSA.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) GSA.GOV. 86400 IN NS dns.GSA.GOV. GSA.GOV. 86400 IN NS dns2.GSA.GOV. GSA.GOV. 86400 IN NS dns3.GSA.GOV. GSA.GOV. 86400 IN NS dns4.GSA.GOV. GSA.GOV. 86400 IN NS dns5.GSA.GOV. GSA.GOV. 3600 IN DS 18146 8 1 5f38686ab44168c67fb704cd8334ca0cd6a682f0 GSA.GOV. 3600 IN DS ( 18146 8 2 3a678c3004a0af79a6a66a0cceaa12a5a003284758b002ecb6638739467b729c ) GSA.GOV. 3600 IN RRSIG ( DS 8 2 3600 20181225161007 20181218161007 40499 gov. eOnXtYZFjHQfl0yOIwTtyzKyv7dB55tolOPSilN3MWNvC7OzeKBWswF+YLGuQd7bVdtb2MWOOy9M uj/wo57T+r0/0Jc72HvgUpQR8/9Tk0SBShuZgWGF2IetOj6THtYukkWu2XtTn5JeIYFciV62RoHP S6efcrTmuY3Z7kvzVlg= ) ;; ADDITIONAL SECTION (8 records) dns.GSA.GOV. 86400 IN A 159.142.136.198 dns2.GSA.GOV. 86400 IN A 159.142.150.68 dns3.GSA.GOV. 86400 IN A 34.195.166.35 dns4.GSA.GOV. 86400 IN A 159.142.69.84 dns5.GSA.GOV. 86400 IN A 159.142.45.20 dns.GSA.GOV. 86400 IN AAAA 2620:0:150:280f::5 dns4.GSA.GOV. 86400 IN AAAA 2620:0:150:4013::5 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to c.gov-servers.net for GSA.GOV/DNSKEY
	Error querying c.gov-servers.net/2620:74:28:0:0:0:2:30 for GSA.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 513 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (513 bytes) ;; HEADER SECTION ;; id = 36806 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 8 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GSA.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) GSA.GOV. 86400 IN NS dns.GSA.GOV. GSA.GOV. 86400 IN NS dns2.GSA.GOV. GSA.GOV. 86400 IN NS dns3.GSA.GOV. GSA.GOV. 86400 IN NS dns4.GSA.GOV. GSA.GOV. 86400 IN NS dns5.GSA.GOV. GSA.GOV. 3600 IN DS 18146 8 1 5f38686ab44168c67fb704cd8334ca0cd6a682f0 GSA.GOV. 3600 IN DS ( 18146 8 2 3a678c3004a0af79a6a66a0cceaa12a5a003284758b002ecb6638739467b729c ) GSA.GOV. 3600 IN RRSIG ( DS 8 2 3600 20181225161007 20181218161007 40499 gov. eOnXtYZFjHQfl0yOIwTtyzKyv7dB55tolOPSilN3MWNvC7OzeKBWswF+YLGuQd7bVdtb2MWOOy9M uj/wo57T+r0/0Jc72HvgUpQR8/9Tk0SBShuZgWGF2IetOj6THtYukkWu2XtTn5JeIYFciV62RoHP S6efcrTmuY3Z7kvzVlg= ) ;; ADDITIONAL SECTION (8 records) dns.GSA.GOV. 86400 IN A 159.142.136.198 dns2.GSA.GOV. 86400 IN A 159.142.150.68 dns3.GSA.GOV. 86400 IN A 34.195.166.35 dns4.GSA.GOV. 86400 IN A 159.142.69.84 dns5.GSA.GOV. 86400 IN A 159.142.45.20 dns.GSA.GOV. 86400 IN AAAA 2620:0:150:280f::5 dns4.GSA.GOV. 86400 IN AAAA 2620:0:150:4013::5 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone GSA.GOV

GSA.GOV

	Checking DS between GOV and GSA.GOV
	Query to d.gov-servers.net for GSA.GOV/DS
	Received 283 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (283 bytes) ;; HEADER SECTION ;; id = 42818 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GSA.GOV. IN DS ;; ANSWER SECTION (3 records) GSA.GOV. 3600 IN DS 18146 8 1 5f38686ab44168c67fb704cd8334ca0cd6a682f0 GSA.GOV. 3600 IN DS ( 18146 8 2 3a678c3004a0af79a6a66a0cceaa12a5a003284758b002ecb6638739467b729c ) GSA.GOV. 3600 IN RRSIG ( DS 8 2 3600 20181225161007 20181218161007 40499 gov. eOnXtYZFjHQfl0yOIwTtyzKyv7dB55tolOPSilN3MWNvC7OzeKBWswF+YLGuQd7bVdtb2MWOOy9M uj/wo57T+r0/0Jc72HvgUpQR8/9Tk0SBShuZgWGF2IetOj6THtYukkWu2XtTn5JeIYFciV62RoHP S6efcrTmuY3Z7kvzVlg= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DS records for GSA.GOV in the GOV zone
	DS=18146/SHA-1 has algorithm RSASHA256
	DS=18146/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GSA.GOV. 3600 IN RRSIG ( DS 8 2 3600 20181225161007 20181218161007 40499 gov. eOnXtYZFjHQfl0yOIwTtyzKyv7dB55tolOPSilN3MWNvC7OzeKBWswF+YLGuQd7bVdtb2MWOOy9M uj/wo57T+r0/0Jc72HvgUpQR8/9Tk0SBShuZgWGF2IetOj6THtYukkWu2XtTn5JeIYFciV62RoHP S6efcrTmuY3Z7kvzVlg= )`
	RRSIG=40499 and DNSKEY=40499 verifies the DS RRset
	DS=18146/SHA-1 is now in the chain-of-trust
	`GSA.GOV. 3600 IN DS 18146 8 1 5f38686ab44168c67fb704cd8334ca0cd6a682f0`
	`GSA.GOV. 3600 IN DS ( 18146 8 2 3a678c3004a0af79a6a66a0cceaa12a5a003284758b002ecb6638739467b729c )`
	Query to dns2.GSA.GOV for GSA.GOV/DNSKEY
	Received 988 bytes from 159.142.150.68
	;; Answer received from 159.142.150.68 (988 bytes) ;; HEADER SECTION ;; id = 49166 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GSA.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) gsa.gov. 10800 IN DNSKEY ( 256 3 8 AwEAAaa4NBin0zCieHn4AreP3i17CsjOXl5KUhUSPqCTwWOjxCSmCbSelHKj+/5zsASyNMRQ/k+c k2/rAsEUUl0UYMcQlxb3RNSQIbChcJh2xHW6kYVI9+QyqUA43i3VVtTgTimu9/jOqFXHfmL1vXdB VLhlQfJ+0M6gm4LgRCzreMqb ) ; Key ID = 12453 gsa.gov. 10800 IN DNSKEY ( 256 3 8 AwEAAbBN6wJDmiFqGSPaaIFnI59KQZ9yLnf2e7lRqK4uB/hHBHi05KEytkdwqGCiUCN6hCSX90av jTzq6Ri/E7h6GvQ+AYjWBym+XuruxuE1Sa0pjNLynWkayI/tb+c/p4miR9QYusY3I6DBJH65mseM sbLAPET0bAL5IDs8S1IgCP9n ) ; Key ID = 9810 gsa.gov. 10800 IN DNSKEY ( 257 3 8 AwEAAbKeywZ7uZUf1rxZr5Vz3o0Gxc2oeHLZ8mRlMd4BurMBVpiFxLBXqvUMCJdsYOM98UxXQO+q yTAFIAf4xUn/5p8v8lbEuGE1zl+HoQZRS7OFhiyT2syESBnWYza/vcO4jZl1CsDt/BFKWrF3yVQ6 cbcaKcNTFc+lbLJ1Nab+kIf1 ) ; Key ID = 18146 gsa.gov. 10800 IN RRSIG ( DNSKEY 8 2 10800 20190114140930 20181215140430 18146 gsa.gov. CFV1SMq9GLvkX5AZC7ReY8jPLSG/N9QHXdCRVQD4tVLD5e4dct65P4xxiZy5AnnnVT8DYt4PSfj1 iyGKHlV46yGM7/36L8ARYYll4uYgz2LQt7HUkjInfm1jUWUUgSKF5gq/kkIuvvKhCyaxbx795azb oSunH++j0tVdf5WI7lU= ) gsa.gov. 10800 IN RRSIG ( DNSKEY 8 2 10800 20190114140931 20181215140431 12453 gsa.gov. DvyK1bidURojdePXo2ixveQgVhs6UWh2SRBmxfXA0HwerEP0+OrX2/wdfGpuOcDu1lKyN1c+tUX1 N+eNKp/iy9zeBtyZvP7DgDeVmv8qX1y6fpI1D5NKggwUpyUlSIMzBPrssPY9umGu4avN//fbwHQi 5ZhgTtn9nzJ3ApSehts= ) gsa.gov. 10800 IN RRSIG ( DNSKEY 8 2 10800 20190114140932 20181215140432 9810 gsa.gov. AbWldzXl8YV6zuA/IJUHA/A4bDqZ0UB3W53/82u44dZpEENx/EsIuSsCwLs1C8GFMPVpZdMoIYgt dMh7gF4TcM51J988/h/xqfEDL7UprkyS8xKY2GN3K7/TFDPv4Eq/VcGygVvtXkP/B+iijSaSt3U6 Y8H1FwvsJOeV7tEctAg= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for GSA.GOV
	`gsa.gov. 10800 IN DNSKEY ( 256 3 8 AwEAAaa4NBin0zCieHn4AreP3i17CsjOXl5KUhUSPqCTwWOjxCSmCbSelHKj+/5zsASyNMRQ/k+c k2/rAsEUUl0UYMcQlxb3RNSQIbChcJh2xHW6kYVI9+QyqUA43i3VVtTgTimu9/jOqFXHfmL1vXdB VLhlQfJ+0M6gm4LgRCzreMqb ) ; Key ID = 12453`
	`gsa.gov. 10800 IN DNSKEY ( 256 3 8 AwEAAbBN6wJDmiFqGSPaaIFnI59KQZ9yLnf2e7lRqK4uB/hHBHi05KEytkdwqGCiUCN6hCSX90av jTzq6Ri/E7h6GvQ+AYjWBym+XuruxuE1Sa0pjNLynWkayI/tb+c/p4miR9QYusY3I6DBJH65mseM sbLAPET0bAL5IDs8S1IgCP9n ) ; Key ID = 9810`
	`gsa.gov. 10800 IN DNSKEY ( 257 3 8 AwEAAbKeywZ7uZUf1rxZr5Vz3o0Gxc2oeHLZ8mRlMd4BurMBVpiFxLBXqvUMCJdsYOM98UxXQO+q yTAFIAf4xUn/5p8v8lbEuGE1zl+HoQZRS7OFhiyT2syESBnWYza/vcO4jZl1CsDt/BFKWrF3yVQ6 cbcaKcNTFc+lbLJ1Nab+kIf1 ) ; Key ID = 18146`
	DNSKEY=18146/SEP is now in the chain-of-trust
	DS=18146/SHA-1 verifies DNSKEY=18146/SEP
	DS=18146/SHA-256 verifies DNSKEY=18146/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`gsa.gov. 10800 IN RRSIG ( DNSKEY 8 2 10800 20190114140930 20181215140430 18146 gsa.gov. CFV1SMq9GLvkX5AZC7ReY8jPLSG/N9QHXdCRVQD4tVLD5e4dct65P4xxiZy5AnnnVT8DYt4PSfj1 iyGKHlV46yGM7/36L8ARYYll4uYgz2LQt7HUkjInfm1jUWUUgSKF5gq/kkIuvvKhCyaxbx795azb oSunH++j0tVdf5WI7lU= )`
	`gsa.gov. 10800 IN RRSIG ( DNSKEY 8 2 10800 20190114140931 20181215140431 12453 gsa.gov. DvyK1bidURojdePXo2ixveQgVhs6UWh2SRBmxfXA0HwerEP0+OrX2/wdfGpuOcDu1lKyN1c+tUX1 N+eNKp/iy9zeBtyZvP7DgDeVmv8qX1y6fpI1D5NKggwUpyUlSIMzBPrssPY9umGu4avN//fbwHQi 5ZhgTtn9nzJ3ApSehts= )`
	`gsa.gov. 10800 IN RRSIG ( DNSKEY 8 2 10800 20190114140932 20181215140432 9810 gsa.gov. AbWldzXl8YV6zuA/IJUHA/A4bDqZ0UB3W53/82u44dZpEENx/EsIuSsCwLs1C8GFMPVpZdMoIYgt dMh7gF4TcM51J988/h/xqfEDL7UprkyS8xKY2GN3K7/TFDPv4Eq/VcGygVvtXkP/B+iijSaSt3U6 Y8H1FwvsJOeV7tEctAg= )`
	RRSIG=18146 and DNSKEY=18146/SEP verifies the DNSKEY RRset
	RRSIG=12453 and DNSKEY=12453 verifies the DNSKEY RRset
	RRSIG=9810 and DNSKEY=9810 verifies the DNSKEY RRset
	DNSKEY=12453 is now in the chain-of-trust
	DNSKEY=9810 is now in the chain-of-trust
	Query to dns.GSA.GOV for GSA.GOV/A
	Error querying dns.GSA.GOV/2620:0:150:280f:0:0:0:5 for GSA.GOV/A: 'IPv6 transport disabled'
	Received 393 bytes from 159.142.136.198
	;; Answer received from 159.142.136.198 (393 bytes) ;; HEADER SECTION ;; id = 58734 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GSA.GOV. IN A ;; ANSWER SECTION (3 records) gsa.gov. 300 IN A 54.85.132.205 gsa.gov. 300 IN RRSIG ( A 8 2 300 20190114140931 20181215140431 12453 gsa.gov. Jai25oBZTvNP02pnxVhNzvIpafOAaYXk7FN33U+YYXdkot0bWwi6EOZEd4F5rRh6V9wXH5Ta1oVh d8sRtmgHhTKUJCPiIpP1AXb9LdFbQjbkJp1r2CPMmgEqzLqJE+QQXSPnFwn2d7Cb0beoZbGCKELT adxPVmk8+ggrWjM6OyA= ) gsa.gov. 300 IN RRSIG ( A 8 2 300 20190114140932 20181215140432 9810 gsa.gov. f4b2NHGp6b5OHuL0KllwsQDEUZ8sm1JyV16cFCaWHSuTxWQU6LbxIMRWWpGY1Smm1IhNFSm1949n XHsudfGH7+RK6HJuyR3N4PPuFqaunvR9LhhhVz4qT12DfISEs8jegj8E51QlbkjtHimFa9Indcfc url8dtjljxWzQcTREmg= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	GSA.GOV is authoritative for GSA.GOV
	Found RRSIG signed by gsa.gov zone
	Query to dns4.GSA.GOV for GSA.GOV/SOA
	Error querying dns4.GSA.GOV/2620:0:150:4013:0:0:0:5 for GSA.GOV/SOA: 'IPv6 transport disabled'
	Received 428 bytes from 159.142.69.84
	;; Answer received from 159.142.69.84 (428 bytes) ;; HEADER SECTION ;; id = 374 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GSA.GOV. IN SOA ;; ANSWER SECTION (3 records) gsa.gov. 10800 IN SOA ( dns.gsa.gov. hostmaster.gsa.gov. 563897379 ;serial 3600 ;refresh 180 ;retry 1209600 ;expire 3600 ;minimum ) gsa.gov. 10800 IN RRSIG ( SOA 8 2 10800 20190117043845 20181218033845 9810 gsa.gov. h+Ykxxn9HoHr4zuFMbNKxPXfk/lOe29XFFOifKOq1ge5d8OTSj+WWgtIc7cNaEnDl/i0WDJ73WQD 683K/y8gBnJ4nwa2Kd0lGt/t3LUXpZm04PDe28aYrHM3NUY+9JVXyGh/punlc/72GdK9daEwnlml 5rJjnfR1lupmiLgfVNQ= ) gsa.gov. 10800 IN RRSIG ( SOA 8 2 10800 20190117043845 20181218033845 12453 gsa.gov. N99gbeQu9C7YfldUcsg0j6ks75fYbbQDHneipZO0PTj0BNJCX2tA7F8togKjnoY94c/aPNBznAGR 4Bq8+Won8H5LZxbrAfZx1sWVMiSjLP2dnOx3tPgUQ7RXJAccpiI4O3e3ZTJ/H4/hTzjYhaDPtnWn 1/o+rWetML+hr52LfbY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns3.GSA.GOV for GSA.GOV/SOA
	Received 421 bytes from 34.195.166.35
	;; Answer received from 34.195.166.35 (421 bytes) ;; HEADER SECTION ;; id = 17599 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GSA.GOV. IN SOA ;; ANSWER SECTION (3 records) GSA.GOV. 10800 IN SOA ( dns.GSA.GOV. hostmaster.GSA.GOV. 563897379 ;serial 3600 ;refresh 180 ;retry 1209600 ;expire 3600 ;minimum ) GSA.GOV. 10800 IN RRSIG ( SOA 8 2 10800 20190117043845 20181218033845 9810 gsa.gov. h+Ykxxn9HoHr4zuFMbNKxPXfk/lOe29XFFOifKOq1ge5d8OTSj+WWgtIc7cNaEnDl/i0WDJ73WQD 683K/y8gBnJ4nwa2Kd0lGt/t3LUXpZm04PDe28aYrHM3NUY+9JVXyGh/punlc/72GdK9daEwnlml 5rJjnfR1lupmiLgfVNQ= ) gsa.gov. 10800 IN RRSIG ( SOA 8 2 10800 20190117043845 20181218033845 12453 gsa.gov. N99gbeQu9C7YfldUcsg0j6ks75fYbbQDHneipZO0PTj0BNJCX2tA7F8togKjnoY94c/aPNBznAGR 4Bq8+Won8H5LZxbrAfZx1sWVMiSjLP2dnOx3tPgUQ7RXJAccpiI4O3e3ZTJ/H4/hTzjYhaDPtnWn 1/o+rWetML+hr52LfbY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns.GSA.GOV for GSA.GOV/SOA
	Error querying dns.GSA.GOV/2620:0:150:280f:0:0:0:5 for GSA.GOV/SOA: 'IPv6 transport disabled'
	Received 428 bytes from 159.142.136.198
	;; Answer received from 159.142.136.198 (428 bytes) ;; HEADER SECTION ;; id = 39766 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GSA.GOV. IN SOA ;; ANSWER SECTION (3 records) gsa.gov. 10800 IN SOA ( dns.gsa.gov. hostmaster.gsa.gov. 563897379 ;serial 3600 ;refresh 180 ;retry 1209600 ;expire 3600 ;minimum ) gsa.gov. 10800 IN RRSIG ( SOA 8 2 10800 20190117043845 20181218033845 9810 gsa.gov. h+Ykxxn9HoHr4zuFMbNKxPXfk/lOe29XFFOifKOq1ge5d8OTSj+WWgtIc7cNaEnDl/i0WDJ73WQD 683K/y8gBnJ4nwa2Kd0lGt/t3LUXpZm04PDe28aYrHM3NUY+9JVXyGh/punlc/72GdK9daEwnlml 5rJjnfR1lupmiLgfVNQ= ) gsa.gov. 10800 IN RRSIG ( SOA 8 2 10800 20190117043845 20181218033845 12453 gsa.gov. N99gbeQu9C7YfldUcsg0j6ks75fYbbQDHneipZO0PTj0BNJCX2tA7F8togKjnoY94c/aPNBznAGR 4Bq8+Won8H5LZxbrAfZx1sWVMiSjLP2dnOx3tPgUQ7RXJAccpiI4O3e3ZTJ/H4/hTzjYhaDPtnWn 1/o+rWetML+hr52LfbY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns5.GSA.GOV for GSA.GOV/SOA
	Received 428 bytes from 159.142.45.20
	;; Answer received from 159.142.45.20 (428 bytes) ;; HEADER SECTION ;; id = 412 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GSA.GOV. IN SOA ;; ANSWER SECTION (3 records) gsa.gov. 10800 IN SOA ( dns.gsa.gov. hostmaster.gsa.gov. 563897379 ;serial 3600 ;refresh 180 ;retry 1209600 ;expire 3600 ;minimum ) gsa.gov. 10800 IN RRSIG ( SOA 8 2 10800 20190117043845 20181218033845 9810 gsa.gov. h+Ykxxn9HoHr4zuFMbNKxPXfk/lOe29XFFOifKOq1ge5d8OTSj+WWgtIc7cNaEnDl/i0WDJ73WQD 683K/y8gBnJ4nwa2Kd0lGt/t3LUXpZm04PDe28aYrHM3NUY+9JVXyGh/punlc/72GdK9daEwnlml 5rJjnfR1lupmiLgfVNQ= ) gsa.gov. 10800 IN RRSIG ( SOA 8 2 10800 20190117043845 20181218033845 12453 gsa.gov. N99gbeQu9C7YfldUcsg0j6ks75fYbbQDHneipZO0PTj0BNJCX2tA7F8togKjnoY94c/aPNBznAGR 4Bq8+Won8H5LZxbrAfZx1sWVMiSjLP2dnOx3tPgUQ7RXJAccpiI4O3e3ZTJ/H4/hTzjYhaDPtnWn 1/o+rWetML+hr52LfbY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns2.GSA.GOV for GSA.GOV/SOA
	Received 428 bytes from 159.142.150.68
	;; Answer received from 159.142.150.68 (428 bytes) ;; HEADER SECTION ;; id = 57942 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GSA.GOV. IN SOA ;; ANSWER SECTION (3 records) gsa.gov. 10800 IN SOA ( dns.gsa.gov. hostmaster.gsa.gov. 563897379 ;serial 3600 ;refresh 180 ;retry 1209600 ;expire 3600 ;minimum ) gsa.gov. 10800 IN RRSIG ( SOA 8 2 10800 20190117043845 20181218033845 9810 gsa.gov. h+Ykxxn9HoHr4zuFMbNKxPXfk/lOe29XFFOifKOq1ge5d8OTSj+WWgtIc7cNaEnDl/i0WDJ73WQD 683K/y8gBnJ4nwa2Kd0lGt/t3LUXpZm04PDe28aYrHM3NUY+9JVXyGh/punlc/72GdK9daEwnlml 5rJjnfR1lupmiLgfVNQ= ) gsa.gov. 10800 IN RRSIG ( SOA 8 2 10800 20190117043845 20181218033845 12453 gsa.gov. N99gbeQu9C7YfldUcsg0j6ks75fYbbQDHneipZO0PTj0BNJCX2tA7F8togKjnoY94c/aPNBznAGR 4Bq8+Won8H5LZxbrAfZx1sWVMiSjLP2dnOx3tPgUQ7RXJAccpiI4O3e3ZTJ/H4/hTzjYhaDPtnWn 1/o+rWetML+hr52LfbY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns.GSA.GOV for GSA.GOV/A
	Error querying dns.GSA.GOV/2620:0:150:280f:0:0:0:5 for GSA.GOV/A: 'IPv6 transport disabled'
	Received 393 bytes from 159.142.136.198
	;; Answer received from 159.142.136.198 (393 bytes) ;; HEADER SECTION ;; id = 60464 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GSA.GOV. IN A ;; ANSWER SECTION (3 records) gsa.gov. 300 IN A 54.85.132.205 gsa.gov. 300 IN RRSIG ( A 8 2 300 20190114140931 20181215140431 12453 gsa.gov. Jai25oBZTvNP02pnxVhNzvIpafOAaYXk7FN33U+YYXdkot0bWwi6EOZEd4F5rRh6V9wXH5Ta1oVh d8sRtmgHhTKUJCPiIpP1AXb9LdFbQjbkJp1r2CPMmgEqzLqJE+QQXSPnFwn2d7Cb0beoZbGCKELT adxPVmk8+ggrWjM6OyA= ) gsa.gov. 300 IN RRSIG ( A 8 2 300 20190114140932 20181215140432 9810 gsa.gov. f4b2NHGp6b5OHuL0KllwsQDEUZ8sm1JyV16cFCaWHSuTxWQU6LbxIMRWWpGY1Smm1IhNFSm1949n XHsudfGH7+RK6HJuyR3N4PPuFqaunvR9LhhhVz4qT12DfISEs8jegj8E51QlbkjtHimFa9Indcfc url8dtjljxWzQcTREmg= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	GSA.GOV A RR has value 54.85.132.205
	Found 2 RRSIGs over A RRset
	`gsa.gov. 300 IN RRSIG ( A 8 2 300 20190114140931 20181215140431 12453 gsa.gov. Jai25oBZTvNP02pnxVhNzvIpafOAaYXk7FN33U+YYXdkot0bWwi6EOZEd4F5rRh6V9wXH5Ta1oVh d8sRtmgHhTKUJCPiIpP1AXb9LdFbQjbkJp1r2CPMmgEqzLqJE+QQXSPnFwn2d7Cb0beoZbGCKELT adxPVmk8+ggrWjM6OyA= )`
	`gsa.gov. 300 IN RRSIG ( A 8 2 300 20190114140932 20181215140432 9810 gsa.gov. f4b2NHGp6b5OHuL0KllwsQDEUZ8sm1JyV16cFCaWHSuTxWQU6LbxIMRWWpGY1Smm1IhNFSm1949n XHsudfGH7+RK6HJuyR3N4PPuFqaunvR9LhhhVz4qT12DfISEs8jegj8E51QlbkjtHimFa9Indcfc url8dtjljxWzQcTREmg= )`
	RRSIG=12453 and DNSKEY=12453 verifies the A RRset
	RRSIG=9810 and DNSKEY=9810 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test GSA.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: