DNSSEC Analyzer - HEARTTRUTH.GOV

Domain Name:

Time: 2019-10-14 00:37:44 UTC, NTP stratum 4

Analyzing DNSSEC problems for HEARTTRUTH.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to k.root-servers.net for ./DNSKEY
	Received 865 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (865 bytes) ;; HEADER SECTION ;; id = 18393 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20191101000000 20191011000000 20326 . m7mvEdeqXKN9sp0nUBhJUWTdurOlW0ruL9Ot1xceZaaYAV5Yz0UbwAWwcu6Sjf9rtridZ4jOuVmU FHaVeRJtA5v8jhU6mPveHVSppdtMQjGqeCQnq683EArww37WBaULfIb6Rr5BE1Gwgk93O2WwFRWH MW2csoFTIhYDNQ1SfIUkYSp3VR04r4o5mtuwhwvjAgvFpRN9qpwIYG7lWhThrJW1hTyqEoP9YY5n zs3jEYYJJ3JNU+SopJSoQ/5/vIerMovD28y4d8IHs/A0gqlSaW7Dg3kQvh0gZU6u117tjz20QuJu nD6J+MraIGpYBMgaPZvEDbCmbCGOtqKqsrX5tw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20191101000000 20191011000000 20326 . m7mvEdeqXKN9sp0nUBhJUWTdurOlW0ruL9Ot1xceZaaYAV5Yz0UbwAWwcu6Sjf9rtridZ4jOuVmU FHaVeRJtA5v8jhU6mPveHVSppdtMQjGqeCQnq683EArww37WBaULfIb6Rr5BE1Gwgk93O2WwFRWH MW2csoFTIhYDNQ1SfIUkYSp3VR04r4o5mtuwhwvjAgvFpRN9qpwIYG7lWhThrJW1hTyqEoP9YY5n zs3jEYYJJ3JNU+SopJSoQ/5/vIerMovD28y4d8IHs/A0gqlSaW7Dg3kQvh0gZU6u117tjz20QuJu nD6J+MraIGpYBMgaPZvEDbCmbCGOtqKqsrX5tw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=22545 is now in the chain-of-trust
	Query to a.root-servers.net for HEARTTRUTH.GOV/A
	Error querying a.root-servers.net/2001:503:ba3e:0:0:0:2:30 for HEARTTRUTH.GOV/A: 'IPv6 transport disabled'
	Received 669 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (669 bytes) ;; HEADER SECTION ;; id = 39126 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HEARTTRUTH.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20191026170000 20191013160000 22545 . ZyYVwMqG6Pxk2USPDd+0pmFOvVHnECWEcM0fe9SS+FQJoZxavFOCEL4r42C27ciLG5YA43XyEB98 vGl/UxmkKrFED0VuxWdJHCEKr5Qg6KG2ylOFY6TRnV/m3Erh7RJnuCm97ZDh7Rzx6Z9mX3fj6HFd SjZOsSndK2uT3+hCzn1RHqM+2/ZKsiVeC21bDDlLOD0A9DqYFkBzrpTtUKw6h0KxI6OsihXZpkO2 /Yz+olXbsF9hLfWmX2UgRFpGQgd95y5NePyTc4CIjquo7aAFZ44b2HczV07p5OdQl6XntFQsgZTA 9ODUglj6yAf0oI9TR9AyoMotyP1TSGr63bzq3g== ) ;; ADDITIONAL SECTION (9 records) b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to j.root-servers.net for GOV/DNSKEY
	Received 658 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (658 bytes) ;; HEADER SECTION ;; id = 53721 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20191026170000 20191013160000 22545 . ZyYVwMqG6Pxk2USPDd+0pmFOvVHnECWEcM0fe9SS+FQJoZxavFOCEL4r42C27ciLG5YA43XyEB98 vGl/UxmkKrFED0VuxWdJHCEKr5Qg6KG2ylOFY6TRnV/m3Erh7RJnuCm97ZDh7Rzx6Z9mX3fj6HFd SjZOsSndK2uT3+hCzn1RHqM+2/ZKsiVeC21bDDlLOD0A9DqYFkBzrpTtUKw6h0KxI6OsihXZpkO2 /Yz+olXbsF9hLfWmX2UgRFpGQgd95y5NePyTc4CIjquo7aAFZ44b2HczV07p5OdQl6XntFQsgZTA 9ODUglj6yAf0oI9TR9AyoMotyP1TSGr63bzq3g== ) ;; ADDITIONAL SECTION (9 records) b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to k.root-servers.net for GOV/DS
	Received 406 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (406 bytes) ;; HEADER SECTION ;; id = 5762 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20191026170000 20191013160000 22545 . ZyYVwMqG6Pxk2USPDd+0pmFOvVHnECWEcM0fe9SS+FQJoZxavFOCEL4r42C27ciLG5YA43XyEB98 vGl/UxmkKrFED0VuxWdJHCEKr5Qg6KG2ylOFY6TRnV/m3Erh7RJnuCm97ZDh7Rzx6Z9mX3fj6HFd SjZOsSndK2uT3+hCzn1RHqM+2/ZKsiVeC21bDDlLOD0A9DqYFkBzrpTtUKw6h0KxI6OsihXZpkO2 /Yz+olXbsF9hLfWmX2UgRFpGQgd95y5NePyTc4CIjquo7aAFZ44b2HczV07p5OdQl6XntFQsgZTA 9ODUglj6yAf0oI9TR9AyoMotyP1TSGr63bzq3g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20191026170000 20191013160000 22545 . ZyYVwMqG6Pxk2USPDd+0pmFOvVHnECWEcM0fe9SS+FQJoZxavFOCEL4r42C27ciLG5YA43XyEB98 vGl/UxmkKrFED0VuxWdJHCEKr5Qg6KG2ylOFY6TRnV/m3Erh7RJnuCm97ZDh7Rzx6Z9mX3fj6HFd SjZOsSndK2uT3+hCzn1RHqM+2/ZKsiVeC21bDDlLOD0A9DqYFkBzrpTtUKw6h0KxI6OsihXZpkO2 /Yz+olXbsF9hLfWmX2UgRFpGQgd95y5NePyTc4CIjquo7aAFZ44b2HczV07p5OdQl6XntFQsgZTA 9ODUglj6yAf0oI9TR9AyoMotyP1TSGr63bzq3g== )`
	RRSIG=22545 and DNSKEY=22545 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to d.gov-servers.net for GOV/DNSKEY
	Error querying d.gov-servers.net/2620:74:29:0:0:0:2:30 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 889 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (889 bytes) ;; HEADER SECTION ;; id = 45639 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (4 records) GOV. 86400 IN DNSKEY ( 256 3 8 AQPnviCbt0HB2CQze767dPf3TQFosiEwOIkUQaJmcSoNlVSquo3Mox7noTQGzKSdTbKAh0zfkGIb thSb6zyPceMJPpVv2RQUAj9WWTZr4yvO0J5/KllhGqr3sZndrV1lF/rrFzjnnLO8egQTS7bXHbsU 9sM71w5Xiow+isEEPrc5KQ== ) ; Key ID = 7877 GOV. 86400 IN DNSKEY ( 256 3 8 AQPyPvPjCOOxe71vhn8KNKkRNvz+ttcK3l0mbbdvPuIYZkbo5tW/6YqyfCPoATceDs2qxcCBE3/9 Ulu6AMbnrCndRjIJ/F5b0C3CHmdMBPSHtXNy0z5VXU7dTz/cmSKlaPrDPRrY6WdcTaI3VcnU6cyu dx7N0SeYR9r+TmDbkVd9Dw== ) ; Key ID = 32795 GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20191019214731 20191004214231 7698 gov. E4bZ4ey1pa1MHvM50pmQREN2h6s76AhXbOSegaic7ywDl721xcHBq8+BTlPYGTugzHSlboys1Jgn 0SOHAw0ribaSAt44KhSlPTu5Qd2L92o7vV2s/YR+lJsQfQ+UFqbsZoiVjDLiamui2We2Nzav2nlq fqpk00XyvxoRLL4RsHVe1vfjdqNhsOpRXj6TJkF61nFK8fr1smp8wHvsVks8J8QHtKcpvACtpNAt UXZ9P5b/IKBAKlc4cpSvX60wWYYygmYLrfZJzZCxhaJXdDpGMs4ftWqErkRcWVaRPCVjY7FI48Xz 24qeMhj9uo/9H8ygNCpopSxnwqWKptoDEy2BlQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQPnviCbt0HB2CQze767dPf3TQFosiEwOIkUQaJmcSoNlVSquo3Mox7noTQGzKSdTbKAh0zfkGIb thSb6zyPceMJPpVv2RQUAj9WWTZr4yvO0J5/KllhGqr3sZndrV1lF/rrFzjnnLO8egQTS7bXHbsU 9sM71w5Xiow+isEEPrc5KQ== ) ; Key ID = 7877`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQPyPvPjCOOxe71vhn8KNKkRNvz+ttcK3l0mbbdvPuIYZkbo5tW/6YqyfCPoATceDs2qxcCBE3/9 Ulu6AMbnrCndRjIJ/F5b0C3CHmdMBPSHtXNy0z5VXU7dTz/cmSKlaPrDPRrY6WdcTaI3VcnU6cyu dx7N0SeYR9r+TmDbkVd9Dw== ) ; Key ID = 32795`
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20191019214731 20191004214231 7698 gov. E4bZ4ey1pa1MHvM50pmQREN2h6s76AhXbOSegaic7ywDl721xcHBq8+BTlPYGTugzHSlboys1Jgn 0SOHAw0ribaSAt44KhSlPTu5Qd2L92o7vV2s/YR+lJsQfQ+UFqbsZoiVjDLiamui2We2Nzav2nlq fqpk00XyvxoRLL4RsHVe1vfjdqNhsOpRXj6TJkF61nFK8fr1smp8wHvsVks8J8QHtKcpvACtpNAt UXZ9P5b/IKBAKlc4cpSvX60wWYYygmYLrfZJzZCxhaJXdDpGMs4ftWqErkRcWVaRPCVjY7FI48Xz 24qeMhj9uo/9H8ygNCpopSxnwqWKptoDEy2BlQ== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=7877 is now in the chain-of-trust
	DNSKEY=32795 is now in the chain-of-trust
	Query to b.gov-servers.net for HEARTTRUTH.GOV/A
	Error querying b.gov-servers.net/2620:74:27:0:0:0:2:30 for HEARTTRUTH.GOV/A: 'IPv6 transport disabled'
	Received 655 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (655 bytes) ;; HEADER SECTION ;; id = 13290 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HEARTTRUTH.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) HEARTTRUTH.GOV. 86400 IN NS rh120ns2.368.dhhs.GOV. HEARTTRUTH.GOV. 86400 IN NS rh202ns2.355.dhhs.GOV. HEARTTRUTH.GOV. 86400 IN NS rh120ns1.368.dhhs.GOV. HEARTTRUTH.GOV. 86400 IN NS rh202ns1.355.dhhs.GOV. HEARTTRUTH.GOV. 3600 IN DS ( 25016 8 2 aa0d124b5cdff4ee7d0a7c4b98444ae113c1bfbcf7ef2723c57696100564d597 ) HEARTTRUTH.GOV. 3600 IN DS ( 10435 8 1 f4950b84c1f6e2b59032b5d4aaa93697508ab3b9 ) HEARTTRUTH.GOV. 3600 IN DS ( 10435 8 2 904e4eb6854f19cdcc7e1c00b64019c6fe5532fab08021152bc4a41d3016960d ) HEARTTRUTH.GOV. 3600 IN DS ( 25016 8 1 4b6f821da196230910efa198d60cc3dd6357de66 ) HEARTTRUTH.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191020221007 20191013221007 7877 gov. ihva0xqYh5damx3G1ESixttGXCSXiJgNoU2Go6vaeaBelKRJM0NIxlaNrEyfqFCsnCHoeJPRhcPg SzcwqV4KGymKtJ7NC3xqWq3yFeumZSncZyNzCmRRp1HhxqOygQPIiy3mKVX56iwjebiC52xMvqjl GFq2OXW5lzCmsN7FsHQ= ) ;; ADDITIONAL SECTION (9 records) rh120ns2.368.dhhs.GOV. 86400 IN A 158.74.30.103 rh120ns2.368.dhhs.GOV. 86400 IN AAAA 2607:f220:0:1::2d rh202ns2.355.dhhs.GOV. 86400 IN A 158.74.30.99 rh202ns2.355.dhhs.GOV. 86400 IN AAAA 2607:f220:0:1::2b rh120ns1.368.dhhs.GOV. 86400 IN A 158.74.30.102 rh120ns1.368.dhhs.GOV. 86400 IN AAAA 2607:f220:0:1::2c rh202ns1.355.dhhs.GOV. 86400 IN A 158.74.30.98 rh202ns1.355.dhhs.GOV. 86400 IN AAAA 2607:f220:0:1::2a ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.gov-servers.net for HEARTTRUTH.GOV/DNSKEY
	Error querying a.gov-servers.net/2001:500:4431:0:0:0:2:30 for HEARTTRUTH.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 655 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (655 bytes) ;; HEADER SECTION ;; id = 5623 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HEARTTRUTH.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) HEARTTRUTH.GOV. 86400 IN NS rh120ns2.368.dhhs.GOV. HEARTTRUTH.GOV. 86400 IN NS rh202ns2.355.dhhs.GOV. HEARTTRUTH.GOV. 86400 IN NS rh120ns1.368.dhhs.GOV. HEARTTRUTH.GOV. 86400 IN NS rh202ns1.355.dhhs.GOV. HEARTTRUTH.GOV. 3600 IN DS ( 25016 8 2 aa0d124b5cdff4ee7d0a7c4b98444ae113c1bfbcf7ef2723c57696100564d597 ) HEARTTRUTH.GOV. 3600 IN DS ( 10435 8 1 f4950b84c1f6e2b59032b5d4aaa93697508ab3b9 ) HEARTTRUTH.GOV. 3600 IN DS ( 10435 8 2 904e4eb6854f19cdcc7e1c00b64019c6fe5532fab08021152bc4a41d3016960d ) HEARTTRUTH.GOV. 3600 IN DS ( 25016 8 1 4b6f821da196230910efa198d60cc3dd6357de66 ) HEARTTRUTH.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191020221007 20191013221007 7877 gov. ihva0xqYh5damx3G1ESixttGXCSXiJgNoU2Go6vaeaBelKRJM0NIxlaNrEyfqFCsnCHoeJPRhcPg SzcwqV4KGymKtJ7NC3xqWq3yFeumZSncZyNzCmRRp1HhxqOygQPIiy3mKVX56iwjebiC52xMvqjl GFq2OXW5lzCmsN7FsHQ= ) ;; ADDITIONAL SECTION (9 records) rh120ns2.368.dhhs.GOV. 86400 IN A 158.74.30.103 rh120ns2.368.dhhs.GOV. 86400 IN AAAA 2607:f220:0:1::2d rh202ns2.355.dhhs.GOV. 86400 IN A 158.74.30.99 rh202ns2.355.dhhs.GOV. 86400 IN AAAA 2607:f220:0:1::2b rh120ns1.368.dhhs.GOV. 86400 IN A 158.74.30.102 rh120ns1.368.dhhs.GOV. 86400 IN AAAA 2607:f220:0:1::2c rh202ns1.355.dhhs.GOV. 86400 IN A 158.74.30.98 rh202ns1.355.dhhs.GOV. 86400 IN AAAA 2607:f220:0:1::2a ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone HEARTTRUTH.GOV

HEARTTRUTH.GOV

	Checking DS between GOV and HEARTTRUTH.GOV
	Query to b.gov-servers.net for HEARTTRUTH.GOV/DS
	Received 374 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (374 bytes) ;; HEADER SECTION ;; id = 7831 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HEARTTRUTH.GOV. IN DS ;; ANSWER SECTION (5 records) HEARTTRUTH.GOV. 3600 IN DS ( 25016 8 2 aa0d124b5cdff4ee7d0a7c4b98444ae113c1bfbcf7ef2723c57696100564d597 ) HEARTTRUTH.GOV. 3600 IN DS ( 10435 8 1 f4950b84c1f6e2b59032b5d4aaa93697508ab3b9 ) HEARTTRUTH.GOV. 3600 IN DS ( 10435 8 2 904e4eb6854f19cdcc7e1c00b64019c6fe5532fab08021152bc4a41d3016960d ) HEARTTRUTH.GOV. 3600 IN DS ( 25016 8 1 4b6f821da196230910efa198d60cc3dd6357de66 ) HEARTTRUTH.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191020221007 20191013221007 7877 gov. ihva0xqYh5damx3G1ESixttGXCSXiJgNoU2Go6vaeaBelKRJM0NIxlaNrEyfqFCsnCHoeJPRhcPg SzcwqV4KGymKtJ7NC3xqWq3yFeumZSncZyNzCmRRp1HhxqOygQPIiy3mKVX56iwjebiC52xMvqjl GFq2OXW5lzCmsN7FsHQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for HEARTTRUTH.GOV in the GOV zone
	DS=25016/SHA-256 has algorithm RSASHA256
	DS=10435/SHA-1 has algorithm RSASHA256
	DS=10435/SHA-256 has algorithm RSASHA256
	DS=25016/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`HEARTTRUTH.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191020221007 20191013221007 7877 gov. ihva0xqYh5damx3G1ESixttGXCSXiJgNoU2Go6vaeaBelKRJM0NIxlaNrEyfqFCsnCHoeJPRhcPg SzcwqV4KGymKtJ7NC3xqWq3yFeumZSncZyNzCmRRp1HhxqOygQPIiy3mKVX56iwjebiC52xMvqjl GFq2OXW5lzCmsN7FsHQ= )`
	RRSIG=7877 and DNSKEY=7877 verifies the DS RRset
	DS=25016/SHA-256 is now in the chain-of-trust
	DS=10435/SHA-1 is now in the chain-of-trust
	`HEARTTRUTH.GOV. 3600 IN DS ( 25016 8 2 aa0d124b5cdff4ee7d0a7c4b98444ae113c1bfbcf7ef2723c57696100564d597 )`
	`HEARTTRUTH.GOV. 3600 IN DS ( 10435 8 1 f4950b84c1f6e2b59032b5d4aaa93697508ab3b9 )`
	`HEARTTRUTH.GOV. 3600 IN DS ( 10435 8 2 904e4eb6854f19cdcc7e1c00b64019c6fe5532fab08021152bc4a41d3016960d )`
	`HEARTTRUTH.GOV. 3600 IN DS ( 25016 8 1 4b6f821da196230910efa198d60cc3dd6357de66 )`
	Query to rh202ns2.355.dhhs.GOV for HEARTTRUTH.GOV/DNSKEY
	Received 1541 bytes from 158.74.30.99
	;; Answer received from 158.74.30.99 (1541 bytes) ;; HEADER SECTION ;; id = 1337 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 7 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HEARTTRUTH.GOV. IN DNSKEY ;; ANSWER SECTION (7 records) HEARTTRUTH.GOV. 900 IN DNSKEY ( 257 3 8 AwEAAXyM7ZYFfV3hyjek2cFFNJqsVsm3CKqcZHO1BkhkSpIgIupF/YOJFLHcUoE2B6ZEWg/QEFYr EdfKK6D8E3GjriRaUsc8ezXTMmzg0ZDZy3e7nUvGSGdk7/W1OlKveGMlqxh0oPMwiDnomUYFe3FP fcXKy2xoYjgQ+9ODnL2UPEb88xDTjy7w5PUSIhffX4KqhcAiIsLL3KvwgtS2GUQLz1d1nhYDtlat El7c21bDgB58L7r54PcplmW+l4J8XbmuFfXeStKJEzEmc2KOHb6aZjYCl1cH53tIC46yffZvgMvx Au+b/z279d0KXp+9w6WV9OAWjkfDOrYK1+BFM5ZIHZU= ) ; Key ID = 10435 HEARTTRUTH.GOV. 900 IN DNSKEY ( 257 3 8 AwEAAa6sFlGshwq2Y7fQR/E6rLWKEdEEDk/OmMncyKg25+VzL6HBlwjeg3kKZo81UhK+Y8EyE5D8 kocvmeQdUK4fTZwEjL7Ck6U5e/DMkWClBXpQZGQgf5CLzOqxSzeN4Qh27Z90OG5xJASoRapaDNkj 558SU7uEi5X3xK+KuCI6y546hYRCnueam/7kNNnTzsDk6m60e+kDKpx8Ax2g2fkn7jSfkzaeBQhf 2hqh3NV1e57JpyvhPPCH+bnUV1EWYDE0z7qGU50IIbITznrT8oFYCF0gI0eMhMw3h2zyuy+KiYEy 1SNuuj5NADeeBVB+NFH1ZpiyyQsBvZICQHZOsW6sPB8= ) ; Key ID = 25016 HEARTTRUTH.GOV. 900 IN DNSKEY ( 256 3 8 AwEAAaN7cddo8O82Y7DshfQJnuTKtpO2ywcFXIC+R13YeUeuAKTnSzmyneLHApfPD23B4lL+4F8F ZEd+8br9cMGxDuzag8JTeYXOPqY/2qht9Fx2qVsN0Bts/cSSGCX0Z4o5bkl8ZY9a6r/mbHqyRntX bTLJGWKqFbdy8nCxbuZnAFBv ) ; Key ID = 5214 HEARTTRUTH.GOV. 900 IN DNSKEY ( 256 3 8 AwEAAe4x5f4EHNfutFypUVJNq1zMSZKiUS6RlpxoQUooR/9r9SlcVl0tHg2CMvd5YcNM/P0ZL/ap zojd+7M84ng6CIa9CIhS2dgequyPlW9XcWv3VvYaoA2u7674mX6CwgO7tw79zPh0SJX1MHnTXk/c 7kgByfNBqOwdGXrQNJbDSlY7 ) ; Key ID = 64303 HEARTTRUTH.GOV. 900 IN RRSIG ( DNSKEY 8 2 900 20191019000143 20191013230143 5214 hearttruth.gov. eOEU5hcrjWFcPNLYMx2guk85GrVSdX+z3xKoiJWVJZ1KI1mmw8wQ4W0zJ9g2NdlYs6WRzS7ehSHl 9H3ugGQpG80himeOajXSbtz/OtawOtANHgksJA+j2CDOf8crHl++TmoFmzmWmjF3zM2y20gLZwY3 jxJnSMGKO5K0onKzBkA= ) hearttruth.gov. 900 IN RRSIG ( DNSKEY 8 2 900 20191019000143 20191013230143 10435 hearttruth.gov. Zhizd1V3I83hRHZRm4VMrHRNO0ZK4wL8o3nQmtb/6Riyjz3Kgt4eJ6BY8rG0tH4lfsVFBDTicbgk pjFxM36jZ9pKIxzXhSkMUaMPqq1AJWe/IdO3sBeMsoEDh9x3MrHJKYUOTAmxVvswqH0ve7JSNUe8 FZq8WzvLa2pKt8iKt1UnqkJH5JvfvtnhRd97M06G9f29hxQ1ebwTdR2PSzqzA5dnP9ketSpediPJ drf22Aw+9+lgv6eGWkw9//sOjR6NBpH1igmySFHH7qV2+1qjBfKu+/LlFw2rg/2zUqWKnRqdzQg1 bJ51A5ntvH+Lwa38WK0oZlk0qc2jGX1ouAUWoA== ) hearttruth.gov. 900 IN RRSIG ( DNSKEY 8 2 900 20191019000143 20191013230143 64303 hearttruth.gov. ChAtkFhX6DaScnuVzJmZb7/sXExGfFv/W7P9JGOprWrorWRsyzDJmCumjVNT/TGBM3cBKISKsqdq zVTCZsO1YnwyRinUPpxRZlWRklFlj/Wm+v3Ti7H2tPfDlczSOM/qOLREYQKb9U6DHXVoycXoFSMh +AAX0SEr+Z0jBBWoH7U= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for HEARTTRUTH.GOV
	`HEARTTRUTH.GOV. 900 IN DNSKEY ( 257 3 8 AwEAAXyM7ZYFfV3hyjek2cFFNJqsVsm3CKqcZHO1BkhkSpIgIupF/YOJFLHcUoE2B6ZEWg/QEFYr EdfKK6D8E3GjriRaUsc8ezXTMmzg0ZDZy3e7nUvGSGdk7/W1OlKveGMlqxh0oPMwiDnomUYFe3FP fcXKy2xoYjgQ+9ODnL2UPEb88xDTjy7w5PUSIhffX4KqhcAiIsLL3KvwgtS2GUQLz1d1nhYDtlat El7c21bDgB58L7r54PcplmW+l4J8XbmuFfXeStKJEzEmc2KOHb6aZjYCl1cH53tIC46yffZvgMvx Au+b/z279d0KXp+9w6WV9OAWjkfDOrYK1+BFM5ZIHZU= ) ; Key ID = 10435`
	`HEARTTRUTH.GOV. 900 IN DNSKEY ( 257 3 8 AwEAAa6sFlGshwq2Y7fQR/E6rLWKEdEEDk/OmMncyKg25+VzL6HBlwjeg3kKZo81UhK+Y8EyE5D8 kocvmeQdUK4fTZwEjL7Ck6U5e/DMkWClBXpQZGQgf5CLzOqxSzeN4Qh27Z90OG5xJASoRapaDNkj 558SU7uEi5X3xK+KuCI6y546hYRCnueam/7kNNnTzsDk6m60e+kDKpx8Ax2g2fkn7jSfkzaeBQhf 2hqh3NV1e57JpyvhPPCH+bnUV1EWYDE0z7qGU50IIbITznrT8oFYCF0gI0eMhMw3h2zyuy+KiYEy 1SNuuj5NADeeBVB+NFH1ZpiyyQsBvZICQHZOsW6sPB8= ) ; Key ID = 25016`
	`HEARTTRUTH.GOV. 900 IN DNSKEY ( 256 3 8 AwEAAaN7cddo8O82Y7DshfQJnuTKtpO2ywcFXIC+R13YeUeuAKTnSzmyneLHApfPD23B4lL+4F8F ZEd+8br9cMGxDuzag8JTeYXOPqY/2qht9Fx2qVsN0Bts/cSSGCX0Z4o5bkl8ZY9a6r/mbHqyRntX bTLJGWKqFbdy8nCxbuZnAFBv ) ; Key ID = 5214`
	`HEARTTRUTH.GOV. 900 IN DNSKEY ( 256 3 8 AwEAAe4x5f4EHNfutFypUVJNq1zMSZKiUS6RlpxoQUooR/9r9SlcVl0tHg2CMvd5YcNM/P0ZL/ap zojd+7M84ng6CIa9CIhS2dgequyPlW9XcWv3VvYaoA2u7674mX6CwgO7tw79zPh0SJX1MHnTXk/c 7kgByfNBqOwdGXrQNJbDSlY7 ) ; Key ID = 64303`
	DNSKEY=10435/SEP is now in the chain-of-trust
	DS=10435/SHA-1 verifies DNSKEY=10435/SEP
	DS=10435/SHA-256 verifies DNSKEY=10435/SEP
	DNSKEY=25016/SEP is now in the chain-of-trust
	DS=25016/SHA-256 verifies DNSKEY=25016/SEP
	DS=25016/SHA-1 verifies DNSKEY=25016/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`HEARTTRUTH.GOV. 900 IN RRSIG ( DNSKEY 8 2 900 20191019000143 20191013230143 5214 hearttruth.gov. eOEU5hcrjWFcPNLYMx2guk85GrVSdX+z3xKoiJWVJZ1KI1mmw8wQ4W0zJ9g2NdlYs6WRzS7ehSHl 9H3ugGQpG80himeOajXSbtz/OtawOtANHgksJA+j2CDOf8crHl++TmoFmzmWmjF3zM2y20gLZwY3 jxJnSMGKO5K0onKzBkA= )`
	`hearttruth.gov. 900 IN RRSIG ( DNSKEY 8 2 900 20191019000143 20191013230143 10435 hearttruth.gov. Zhizd1V3I83hRHZRm4VMrHRNO0ZK4wL8o3nQmtb/6Riyjz3Kgt4eJ6BY8rG0tH4lfsVFBDTicbgk pjFxM36jZ9pKIxzXhSkMUaMPqq1AJWe/IdO3sBeMsoEDh9x3MrHJKYUOTAmxVvswqH0ve7JSNUe8 FZq8WzvLa2pKt8iKt1UnqkJH5JvfvtnhRd97M06G9f29hxQ1ebwTdR2PSzqzA5dnP9ketSpediPJ drf22Aw+9+lgv6eGWkw9//sOjR6NBpH1igmySFHH7qV2+1qjBfKu+/LlFw2rg/2zUqWKnRqdzQg1 bJ51A5ntvH+Lwa38WK0oZlk0qc2jGX1ouAUWoA== )`
	`hearttruth.gov. 900 IN RRSIG ( DNSKEY 8 2 900 20191019000143 20191013230143 64303 hearttruth.gov. ChAtkFhX6DaScnuVzJmZb7/sXExGfFv/W7P9JGOprWrorWRsyzDJmCumjVNT/TGBM3cBKISKsqdq zVTCZsO1YnwyRinUPpxRZlWRklFlj/Wm+v3Ti7H2tPfDlczSOM/qOLREYQKb9U6DHXVoycXoFSMh +AAX0SEr+Z0jBBWoH7U= )`
	RRSIG=5214 and DNSKEY=5214 verifies the DNSKEY RRset
	RRSIG=10435 and DNSKEY=10435/SEP verifies the DNSKEY RRset
	RRSIG=64303 and DNSKEY=64303 verifies the DNSKEY RRset
	DNSKEY=5214 is now in the chain-of-trust
	DNSKEY=64303 is now in the chain-of-trust
	Query to rh202ns1.355.dhhs.GOV for HEARTTRUTH.GOV/A
	Error querying rh202ns1.355.dhhs.GOV/2607:f220:0:1:0:0:0:2a for HEARTTRUTH.GOV/A: 'IPv6 transport disabled'
	Received 407 bytes from 158.74.30.98
	;; Answer received from 158.74.30.98 (407 bytes) ;; HEADER SECTION ;; id = 43696 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HEARTTRUTH.GOV. IN A ;; ANSWER SECTION (3 records) HEARTTRUTH.GOV. 900 IN A 128.231.54.233 HEARTTRUTH.GOV. 900 IN RRSIG ( A 8 2 900 20191019000143 20191013230143 5214 hearttruth.gov. ToULVOX2qH+rp69oN9sFBqRBaOGiaJrO1r3VZsprwzbmXk1+7uHIpjzURllvYC2BUvZ4vRYuoUfv rBeAq6e8wTnOrds9DMHybx0eNRxFqCzZuE+4ba8dxq/j+O5jAos4RrKlPjaIqi46mJP75VZprAtn hlLOeMtCAcYbCYc+dGo= ) hearttruth.gov. 900 IN RRSIG ( A 8 2 900 20191019000143 20191013230143 64303 hearttruth.gov. omqqeu4c9wb6SwI07eu4adQvKboYeH30hcFIUaAtk/MJWZH4Q3eXKBZOS8dM6BIpsDQ0sYfK7vvO qaTWB6K3OVkiYB9FExrdmicKHOqydVCduRAiddpZcwM/ZaMzG0UDCkQA9lU4jLI0YP9lbYEnLWXD B3BX7sojEfQPDA31B5M= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	HEARTTRUTH.GOV is authoritative for HEARTTRUTH.GOV
	Found RRSIG signed by hearttruth.gov zone
	Query to rh202ns2.355.dhhs.GOV for HEARTTRUTH.GOV/SOA
	Received 464 bytes from 158.74.30.99
	;; Answer received from 158.74.30.99 (464 bytes) ;; HEADER SECTION ;; id = 47351 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HEARTTRUTH.GOV. IN SOA ;; ANSWER SECTION (3 records) HEARTTRUTH.GOV. 900 IN SOA ( rh120ns1.368.dhhs.GOV. hostmaster.psc.hhs.GOV. 4419 ;serial 600 ;refresh 60 ;retry 604800 ;expire 60 ;minimum ) HEARTTRUTH.GOV. 900 IN RRSIG ( SOA 8 2 900 20191019000143 20191013230143 5214 hearttruth.gov. dzTfw9gjiQbytCIFM7sbFqxFF4smuK1BTPW4w1uXsqbhP8M/OqAeWkLty2LLc1YAA8C4v01Bqbr1 73RQNyzCwuH2YYtvvFAxfXWTrxwaRKcRXjzHm/VO8GQOKAjIfjRVrczDcWhSSKsfO6nel0DjoArQ nCOe8IT8yyHmcpcsAEY= ) hearttruth.gov. 900 IN RRSIG ( SOA 8 2 900 20191019000143 20191013230143 64303 hearttruth.gov. hvDOCw4UpMDJNvx8P/LOu2iQsOuQZOyJT9xTnMES21nD4qwLqRVla4P+GGT93+NC0i8oQYq3PeoK ShXJxCoOwGQ5ADrPnknNEKEt+h+UuJ+CQchXO2HfX7D5G6cCgMCIb80rcSKfDzs3ytb3YnYXLAvk jIv5PPdpg3jCF+2kW3s= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to rh120ns2.368.dhhs.GOV for HEARTTRUTH.GOV/SOA
	Received 464 bytes from 158.74.30.103
	;; Answer received from 158.74.30.103 (464 bytes) ;; HEADER SECTION ;; id = 6086 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HEARTTRUTH.GOV. IN SOA ;; ANSWER SECTION (3 records) HEARTTRUTH.GOV. 900 IN SOA ( rh120ns1.368.dhhs.GOV. hostmaster.psc.hhs.GOV. 4419 ;serial 600 ;refresh 60 ;retry 604800 ;expire 60 ;minimum ) HEARTTRUTH.GOV. 900 IN RRSIG ( SOA 8 2 900 20191019000143 20191013230143 5214 hearttruth.gov. dzTfw9gjiQbytCIFM7sbFqxFF4smuK1BTPW4w1uXsqbhP8M/OqAeWkLty2LLc1YAA8C4v01Bqbr1 73RQNyzCwuH2YYtvvFAxfXWTrxwaRKcRXjzHm/VO8GQOKAjIfjRVrczDcWhSSKsfO6nel0DjoArQ nCOe8IT8yyHmcpcsAEY= ) hearttruth.gov. 900 IN RRSIG ( SOA 8 2 900 20191019000143 20191013230143 64303 hearttruth.gov. hvDOCw4UpMDJNvx8P/LOu2iQsOuQZOyJT9xTnMES21nD4qwLqRVla4P+GGT93+NC0i8oQYq3PeoK ShXJxCoOwGQ5ADrPnknNEKEt+h+UuJ+CQchXO2HfX7D5G6cCgMCIb80rcSKfDzs3ytb3YnYXLAvk jIv5PPdpg3jCF+2kW3s= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to rh120ns1.368.dhhs.GOV for HEARTTRUTH.GOV/SOA
	Error querying rh120ns1.368.dhhs.GOV/2607:f220:0:1:0:0:0:2c for HEARTTRUTH.GOV/SOA: 'IPv6 transport disabled'
	Received 464 bytes from 158.74.30.102
	;; Answer received from 158.74.30.102 (464 bytes) ;; HEADER SECTION ;; id = 21944 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HEARTTRUTH.GOV. IN SOA ;; ANSWER SECTION (3 records) HEARTTRUTH.GOV. 900 IN SOA ( rh120ns1.368.dhhs.GOV. hostmaster.psc.hhs.GOV. 4419 ;serial 600 ;refresh 60 ;retry 604800 ;expire 60 ;minimum ) HEARTTRUTH.GOV. 900 IN RRSIG ( SOA 8 2 900 20191019000143 20191013230143 5214 hearttruth.gov. dzTfw9gjiQbytCIFM7sbFqxFF4smuK1BTPW4w1uXsqbhP8M/OqAeWkLty2LLc1YAA8C4v01Bqbr1 73RQNyzCwuH2YYtvvFAxfXWTrxwaRKcRXjzHm/VO8GQOKAjIfjRVrczDcWhSSKsfO6nel0DjoArQ nCOe8IT8yyHmcpcsAEY= ) hearttruth.gov. 900 IN RRSIG ( SOA 8 2 900 20191019000143 20191013230143 64303 hearttruth.gov. hvDOCw4UpMDJNvx8P/LOu2iQsOuQZOyJT9xTnMES21nD4qwLqRVla4P+GGT93+NC0i8oQYq3PeoK ShXJxCoOwGQ5ADrPnknNEKEt+h+UuJ+CQchXO2HfX7D5G6cCgMCIb80rcSKfDzs3ytb3YnYXLAvk jIv5PPdpg3jCF+2kW3s= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to rh202ns1.355.dhhs.GOV for HEARTTRUTH.GOV/SOA
	Received 464 bytes from 158.74.30.98
	;; Answer received from 158.74.30.98 (464 bytes) ;; HEADER SECTION ;; id = 59912 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HEARTTRUTH.GOV. IN SOA ;; ANSWER SECTION (3 records) HEARTTRUTH.GOV. 900 IN SOA ( rh120ns1.368.dhhs.GOV. hostmaster.psc.hhs.GOV. 4419 ;serial 600 ;refresh 60 ;retry 604800 ;expire 60 ;minimum ) HEARTTRUTH.GOV. 900 IN RRSIG ( SOA 8 2 900 20191019000143 20191013230143 5214 hearttruth.gov. dzTfw9gjiQbytCIFM7sbFqxFF4smuK1BTPW4w1uXsqbhP8M/OqAeWkLty2LLc1YAA8C4v01Bqbr1 73RQNyzCwuH2YYtvvFAxfXWTrxwaRKcRXjzHm/VO8GQOKAjIfjRVrczDcWhSSKsfO6nel0DjoArQ nCOe8IT8yyHmcpcsAEY= ) hearttruth.gov. 900 IN RRSIG ( SOA 8 2 900 20191019000143 20191013230143 64303 hearttruth.gov. hvDOCw4UpMDJNvx8P/LOu2iQsOuQZOyJT9xTnMES21nD4qwLqRVla4P+GGT93+NC0i8oQYq3PeoK ShXJxCoOwGQ5ADrPnknNEKEt+h+UuJ+CQchXO2HfX7D5G6cCgMCIb80rcSKfDzs3ytb3YnYXLAvk jIv5PPdpg3jCF+2kW3s= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to rh202ns1.355.dhhs.GOV for HEARTTRUTH.GOV/A
	Received 407 bytes from 158.74.30.98
	;; Answer received from 158.74.30.98 (407 bytes) ;; HEADER SECTION ;; id = 4719 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HEARTTRUTH.GOV. IN A ;; ANSWER SECTION (3 records) HEARTTRUTH.GOV. 900 IN A 128.231.54.233 HEARTTRUTH.GOV. 900 IN RRSIG ( A 8 2 900 20191019000143 20191013230143 5214 hearttruth.gov. ToULVOX2qH+rp69oN9sFBqRBaOGiaJrO1r3VZsprwzbmXk1+7uHIpjzURllvYC2BUvZ4vRYuoUfv rBeAq6e8wTnOrds9DMHybx0eNRxFqCzZuE+4ba8dxq/j+O5jAos4RrKlPjaIqi46mJP75VZprAtn hlLOeMtCAcYbCYc+dGo= ) hearttruth.gov. 900 IN RRSIG ( A 8 2 900 20191019000143 20191013230143 64303 hearttruth.gov. omqqeu4c9wb6SwI07eu4adQvKboYeH30hcFIUaAtk/MJWZH4Q3eXKBZOS8dM6BIpsDQ0sYfK7vvO qaTWB6K3OVkiYB9FExrdmicKHOqydVCduRAiddpZcwM/ZaMzG0UDCkQA9lU4jLI0YP9lbYEnLWXD B3BX7sojEfQPDA31B5M= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	HEARTTRUTH.GOV A RR has value 128.231.54.233
	Found 2 RRSIGs over A RRset
	`HEARTTRUTH.GOV. 900 IN RRSIG ( A 8 2 900 20191019000143 20191013230143 5214 hearttruth.gov. ToULVOX2qH+rp69oN9sFBqRBaOGiaJrO1r3VZsprwzbmXk1+7uHIpjzURllvYC2BUvZ4vRYuoUfv rBeAq6e8wTnOrds9DMHybx0eNRxFqCzZuE+4ba8dxq/j+O5jAos4RrKlPjaIqi46mJP75VZprAtn hlLOeMtCAcYbCYc+dGo= )`
	`hearttruth.gov. 900 IN RRSIG ( A 8 2 900 20191019000143 20191013230143 64303 hearttruth.gov. omqqeu4c9wb6SwI07eu4adQvKboYeH30hcFIUaAtk/MJWZH4Q3eXKBZOS8dM6BIpsDQ0sYfK7vvO qaTWB6K3OVkiYB9FExrdmicKHOqydVCduRAiddpZcwM/ZaMzG0UDCkQA9lU4jLI0YP9lbYEnLWXD B3BX7sojEfQPDA31B5M= )`
	RRSIG=5214 and DNSKEY=5214 verifies the A RRset
	RRSIG=64303 and DNSKEY=64303 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test HEARTTRUTH.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: