DNSSEC Analyzer - HHSOPS.GOV

Domain Name:

Time: 2021-01-26 11:09:07 UTC, NTP stratum 4

Analyzing DNSSEC problems for HHSOPS.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to a.root-servers.net for ./DNSKEY
	Received 864 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (864 bytes) ;; HEADER SECTION ;; id = 35870 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbKGKkqc1VAvQr48iPf9Nd39f337MitggxF0AB9kLKRNSuq9joOEPC/R6PD/4lTzUms8U9oP +aiF0rVC2rGOKSdOLxPHRLA3ameMFT2/3bmVCFsRsn03IVTdN5VUAfczjqjmA0t9NM7bbN5oVzuQ L3P1FyQb1q6HX4M1qg+htMNEd9PdlPLMFcrUg5fcYtTr2llVkO1Xo3lAdrjmmxfGeIyQnskpwPyW 88J527DEytmgPo5KzLBYLMoL2Q41PK0ul0rs7yN+g5IG4LnJOcjew1yrmHXrp/OzrpsO4FkicufY t/ygfQKkT5HYbr/yFgeZAfaF80nYyc7wgDYxOeHdiRk= ) ; Key ID = 42351 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210211000000 20210121000000 20326 . hdO/MozPh54eM3Ow9qSXrpqt0L3hj2RfqHeuDimtgMLSR3V16Xqm9k2ctaT4qyCZb51OtiuE+1Uu imx3Dj83myjz5mOGo0z1f1VEwV6QTuPkZeVecZAFCzsuVTlpUT1OdZQhnwvzIIPYBLlG3TOTQuPt UY9v1LcyoxYWEYy+SDdaQo1CGu4Ochy1aleL40pHWaqk0Swl0lLcgykgVWS3ZpCDL+R50cXg7z4i 5GnpMzxy48Yf4ED+Ja/W+x9ZOSmWnRmCjCGrTbY943AgJjCYEBbHEdJYo9PTYJrMp+x75U1LVSVp zpfI7OXd5yvH7AA8b83yyks+Sv+G6w8y05oZNw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbKGKkqc1VAvQr48iPf9Nd39f337MitggxF0AB9kLKRNSuq9joOEPC/R6PD/4lTzUms8U9oP +aiF0rVC2rGOKSdOLxPHRLA3ameMFT2/3bmVCFsRsn03IVTdN5VUAfczjqjmA0t9NM7bbN5oVzuQ L3P1FyQb1q6HX4M1qg+htMNEd9PdlPLMFcrUg5fcYtTr2llVkO1Xo3lAdrjmmxfGeIyQnskpwPyW 88J527DEytmgPo5KzLBYLMoL2Q41PK0ul0rs7yN+g5IG4LnJOcjew1yrmHXrp/OzrpsO4FkicufY t/ygfQKkT5HYbr/yFgeZAfaF80nYyc7wgDYxOeHdiRk= ) ; Key ID = 42351`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210211000000 20210121000000 20326 . hdO/MozPh54eM3Ow9qSXrpqt0L3hj2RfqHeuDimtgMLSR3V16Xqm9k2ctaT4qyCZb51OtiuE+1Uu imx3Dj83myjz5mOGo0z1f1VEwV6QTuPkZeVecZAFCzsuVTlpUT1OdZQhnwvzIIPYBLlG3TOTQuPt UY9v1LcyoxYWEYy+SDdaQo1CGu4Ochy1aleL40pHWaqk0Swl0lLcgykgVWS3ZpCDL+R50cXg7z4i 5GnpMzxy48Yf4ED+Ja/W+x9ZOSmWnRmCjCGrTbY943AgJjCYEBbHEdJYo9PTYJrMp+x75U1LVSVp zpfI7OXd5yvH7AA8b83yyks+Sv+G6w8y05oZNw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=42351 is now in the chain-of-trust
	Query to k.root-servers.net for HHSOPS.GOV/A
	Received 665 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (665 bytes) ;; HEADER SECTION ;; id = 34864 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; HHSOPS.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20210208050000 20210126040000 42351 . k7BMOr9IUKd2I0mUhjsw5yjRdnNeaVibXc7qgGsEyZPOjlynQlCQrM2cSD0k12NRA7UtGE99klfG 90lQFOfVNwD3nscvKMf+LaKulJmH7Y+ldqa03maL5bIO9J0xdfJ1iNNbMiMa+ADK5x3cdmf5ZlQ+ YcHX8LZRQqIuui9TuWTnMslt8eAWRWGhORx6BI2Cg/kIXDKh/ZQ9NyE8BI+guTs0hJ2ITjjA5QYX GULkE6KprPEBH2KxYug7pGpJfPa2zFnwdEJ9gTKeHH38nGwzXVrTXBQ0MlAAN11cqm+WqnCDsb7x VBfzOg5tjV2CQJkzNv0DH0wl67+llcTlIDXn7Q== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to e.root-servers.net for GOV/DNSKEY
	Received 658 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (658 bytes) ;; HEADER SECTION ;; id = 47918 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20210208050000 20210126040000 42351 . k7BMOr9IUKd2I0mUhjsw5yjRdnNeaVibXc7qgGsEyZPOjlynQlCQrM2cSD0k12NRA7UtGE99klfG 90lQFOfVNwD3nscvKMf+LaKulJmH7Y+ldqa03maL5bIO9J0xdfJ1iNNbMiMa+ADK5x3cdmf5ZlQ+ YcHX8LZRQqIuui9TuWTnMslt8eAWRWGhORx6BI2Cg/kIXDKh/ZQ9NyE8BI+guTs0hJ2ITjjA5QYX GULkE6KprPEBH2KxYug7pGpJfPa2zFnwdEJ9gTKeHH38nGwzXVrTXBQ0MlAAN11cqm+WqnCDsb7x VBfzOg5tjV2CQJkzNv0DH0wl67+llcTlIDXn7Q== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to e.root-servers.net for GOV/DS
	Received 403 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (403 bytes) ;; HEADER SECTION ;; id = 4878 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20210208050000 20210126040000 42351 . k7BMOr9IUKd2I0mUhjsw5yjRdnNeaVibXc7qgGsEyZPOjlynQlCQrM2cSD0k12NRA7UtGE99klfG 90lQFOfVNwD3nscvKMf+LaKulJmH7Y+ldqa03maL5bIO9J0xdfJ1iNNbMiMa+ADK5x3cdmf5ZlQ+ YcHX8LZRQqIuui9TuWTnMslt8eAWRWGhORx6BI2Cg/kIXDKh/ZQ9NyE8BI+guTs0hJ2ITjjA5QYX GULkE6KprPEBH2KxYug7pGpJfPa2zFnwdEJ9gTKeHH38nGwzXVrTXBQ0MlAAN11cqm+WqnCDsb7x VBfzOg5tjV2CQJkzNv0DH0wl67+llcTlIDXn7Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20210208050000 20210126040000 42351 . k7BMOr9IUKd2I0mUhjsw5yjRdnNeaVibXc7qgGsEyZPOjlynQlCQrM2cSD0k12NRA7UtGE99klfG 90lQFOfVNwD3nscvKMf+LaKulJmH7Y+ldqa03maL5bIO9J0xdfJ1iNNbMiMa+ADK5x3cdmf5ZlQ+ YcHX8LZRQqIuui9TuWTnMslt8eAWRWGhORx6BI2Cg/kIXDKh/ZQ9NyE8BI+guTs0hJ2ITjjA5QYX GULkE6KprPEBH2KxYug7pGpJfPa2zFnwdEJ9gTKeHH38nGwzXVrTXBQ0MlAAN11cqm+WqnCDsb7x VBfzOg5tjV2CQJkzNv0DH0wl67+llcTlIDXn7Q== )`
	RRSIG=42351 and DNSKEY=42351 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to d.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (777 bytes) ;; HEADER SECTION ;; id = 14517 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAaQup5BwKqvn1In1x+PzsLpFav6zsLaW7fivUq9PpXUzXn++rcjtYBS15NXm1hMAZb5FChUp 35qd7hVqdwNuT/NGFNHfEykaeWjkqBKX2mCBSiyIsK4i4TQu7CS2CgqfqR43wXFITyItTPP5wijo 9Jt4dsVTjAtNJKaXOKZ31tLaeM5C2bYqAofxX6oK3TVAZ7vFsjPqjJZtZUBMZq28BiU= ) ; Key ID = 27306 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210208200254 20210124195754 7698 gov. WGaS8Pgv1gXr3Jmb8nku9yTYzT2DyAuYvBMrGLWJFtYx6J6pL1ciwQt3t3R6tAlK74WoVd7PWvKh ZtOwVHMB3WEES0104kUkhGwOY5agvgEGET1s3xyHaWhSB3HhJ97KH28SGLS+FCi7dKM89/IAlXug uGh5TgcYCXvzj7WNknTTSiaQ+Mkdh+pTP4SaZrJIpfTu1hZibF8cjt/jPlSidm3FFBMWOsskCAeu +gYltllwkbwZZgIprszIpIIi2DKib8aq9ePfZ10sOJVUiGcYywLtucWHnmMszYgWg+bR/7eomVoe 3xDp7iblwcFuHLyhVSVUWGGiUIC9Gm93vfCrSw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAaQup5BwKqvn1In1x+PzsLpFav6zsLaW7fivUq9PpXUzXn++rcjtYBS15NXm1hMAZb5FChUp 35qd7hVqdwNuT/NGFNHfEykaeWjkqBKX2mCBSiyIsK4i4TQu7CS2CgqfqR43wXFITyItTPP5wijo 9Jt4dsVTjAtNJKaXOKZ31tLaeM5C2bYqAofxX6oK3TVAZ7vFsjPqjJZtZUBMZq28BiU= ) ; Key ID = 27306`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210208200254 20210124195754 7698 gov. WGaS8Pgv1gXr3Jmb8nku9yTYzT2DyAuYvBMrGLWJFtYx6J6pL1ciwQt3t3R6tAlK74WoVd7PWvKh ZtOwVHMB3WEES0104kUkhGwOY5agvgEGET1s3xyHaWhSB3HhJ97KH28SGLS+FCi7dKM89/IAlXug uGh5TgcYCXvzj7WNknTTSiaQ+Mkdh+pTP4SaZrJIpfTu1hZibF8cjt/jPlSidm3FFBMWOsskCAeu +gYltllwkbwZZgIprszIpIIi2DKib8aq9ePfZ10sOJVUiGcYywLtucWHnmMszYgWg+bR/7eomVoe 3xDp7iblwcFuHLyhVSVUWGGiUIC9Gm93vfCrSw== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=27306 is now in the chain-of-trust
	Query to c.gov-servers.net for HHSOPS.GOV/A
	Received 683 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (683 bytes) ;; HEADER SECTION ;; id = 56606 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HHSOPS.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) HHSOPS.GOV. 86400 IN NS rh202ns2.355.dhhs.GOV. HHSOPS.GOV. 86400 IN NS rh120ns2.368.dhhs.GOV. HHSOPS.GOV. 86400 IN NS rh202ns1.355.dhhs.GOV. HHSOPS.GOV. 86400 IN NS rh120ns1.368.dhhs.GOV. HHSOPS.GOV. 3600 IN DS ( 59219 8 2 9895bc868f6760e366f00acfb868c75ab639cfa1bc4c4781d72cfd6d7288f935 ) HHSOPS.GOV. 3600 IN DS 61019 8 1 31b42cf8fa55c06628f0e1c285f819e673d76a4c HHSOPS.GOV. 3600 IN DS 59219 8 1 797cf21592d4cce397fc72b373525bdf74dbbd42 HHSOPS.GOV. 3600 IN DS ( 61019 8 2 67395751d254aaddd4097c2057235ef284379567f5d2acfb2edd2c283c2e4186 ) HHSOPS.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210202091007 20210126091007 27306 gov. fQVnPUGi/RxAbsQ9yT+FKg6p0XINkHi2X6G6COZhvTcsprC5AU0Z4ubtRn7A7SR/SBDyHFDur65A QhBKLWoEd5EJbqhPIHIKQUmLAAv1IVo9JCopyIzU8rlOAFfbgW8XQ6w2r8qC+P2B3MQ02K2nZZxR XqrWan2cR6XyR7PvQML7pU0niKcfYMcGv9ZIGQ11/AfCMtYtyQlpwyg0bJH7vw== ) ;; ADDITIONAL SECTION (9 records) rh202ns2.355.dhhs.GOV. 86400 IN A 158.74.30.99 rh202ns2.355.dhhs.GOV. 86400 IN AAAA 2607:f220:0:1::2b rh120ns2.368.dhhs.GOV. 86400 IN A 158.74.30.103 rh120ns2.368.dhhs.GOV. 86400 IN AAAA 2607:f220:0:1::2d rh202ns1.355.dhhs.GOV. 86400 IN A 158.74.30.98 rh202ns1.355.dhhs.GOV. 86400 IN AAAA 2607:f220:0:1::2a rh120ns1.368.dhhs.GOV. 86400 IN A 158.74.30.102 rh120ns1.368.dhhs.GOV. 86400 IN AAAA 2607:f220:0:1::2c ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.gov-servers.net for HHSOPS.GOV/DNSKEY
	Received 683 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (683 bytes) ;; HEADER SECTION ;; id = 18518 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HHSOPS.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) HHSOPS.GOV. 86400 IN NS rh202ns2.355.dhhs.GOV. HHSOPS.GOV. 86400 IN NS rh120ns2.368.dhhs.GOV. HHSOPS.GOV. 86400 IN NS rh202ns1.355.dhhs.GOV. HHSOPS.GOV. 86400 IN NS rh120ns1.368.dhhs.GOV. HHSOPS.GOV. 3600 IN DS ( 59219 8 2 9895bc868f6760e366f00acfb868c75ab639cfa1bc4c4781d72cfd6d7288f935 ) HHSOPS.GOV. 3600 IN DS 61019 8 1 31b42cf8fa55c06628f0e1c285f819e673d76a4c HHSOPS.GOV. 3600 IN DS 59219 8 1 797cf21592d4cce397fc72b373525bdf74dbbd42 HHSOPS.GOV. 3600 IN DS ( 61019 8 2 67395751d254aaddd4097c2057235ef284379567f5d2acfb2edd2c283c2e4186 ) HHSOPS.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210202091007 20210126091007 27306 gov. fQVnPUGi/RxAbsQ9yT+FKg6p0XINkHi2X6G6COZhvTcsprC5AU0Z4ubtRn7A7SR/SBDyHFDur65A QhBKLWoEd5EJbqhPIHIKQUmLAAv1IVo9JCopyIzU8rlOAFfbgW8XQ6w2r8qC+P2B3MQ02K2nZZxR XqrWan2cR6XyR7PvQML7pU0niKcfYMcGv9ZIGQ11/AfCMtYtyQlpwyg0bJH7vw== ) ;; ADDITIONAL SECTION (9 records) rh202ns2.355.dhhs.GOV. 86400 IN A 158.74.30.99 rh202ns2.355.dhhs.GOV. 86400 IN AAAA 2607:f220:0:1::2b rh120ns2.368.dhhs.GOV. 86400 IN A 158.74.30.103 rh120ns2.368.dhhs.GOV. 86400 IN AAAA 2607:f220:0:1::2d rh202ns1.355.dhhs.GOV. 86400 IN A 158.74.30.98 rh202ns1.355.dhhs.GOV. 86400 IN AAAA 2607:f220:0:1::2a rh120ns1.368.dhhs.GOV. 86400 IN A 158.74.30.102 rh120ns1.368.dhhs.GOV. 86400 IN AAAA 2607:f220:0:1::2c ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone HHSOPS.GOV

HHSOPS.GOV

	Checking DS between GOV and HHSOPS.GOV
	Query to d.gov-servers.net for HHSOPS.GOV/DS
	Received 402 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (402 bytes) ;; HEADER SECTION ;; id = 51759 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HHSOPS.GOV. IN DS ;; ANSWER SECTION (5 records) HHSOPS.GOV. 3600 IN DS ( 59219 8 2 9895bc868f6760e366f00acfb868c75ab639cfa1bc4c4781d72cfd6d7288f935 ) HHSOPS.GOV. 3600 IN DS 61019 8 1 31b42cf8fa55c06628f0e1c285f819e673d76a4c HHSOPS.GOV. 3600 IN DS 59219 8 1 797cf21592d4cce397fc72b373525bdf74dbbd42 HHSOPS.GOV. 3600 IN DS ( 61019 8 2 67395751d254aaddd4097c2057235ef284379567f5d2acfb2edd2c283c2e4186 ) HHSOPS.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210202091007 20210126091007 27306 gov. fQVnPUGi/RxAbsQ9yT+FKg6p0XINkHi2X6G6COZhvTcsprC5AU0Z4ubtRn7A7SR/SBDyHFDur65A QhBKLWoEd5EJbqhPIHIKQUmLAAv1IVo9JCopyIzU8rlOAFfbgW8XQ6w2r8qC+P2B3MQ02K2nZZxR XqrWan2cR6XyR7PvQML7pU0niKcfYMcGv9ZIGQ11/AfCMtYtyQlpwyg0bJH7vw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for HHSOPS.GOV in the GOV zone
	DS=59219/SHA-256 has algorithm RSASHA256
	DS=61019/SHA-1 has algorithm RSASHA256
	DS=59219/SHA-1 has algorithm RSASHA256
	DS=61019/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`HHSOPS.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210202091007 20210126091007 27306 gov. fQVnPUGi/RxAbsQ9yT+FKg6p0XINkHi2X6G6COZhvTcsprC5AU0Z4ubtRn7A7SR/SBDyHFDur65A QhBKLWoEd5EJbqhPIHIKQUmLAAv1IVo9JCopyIzU8rlOAFfbgW8XQ6w2r8qC+P2B3MQ02K2nZZxR XqrWan2cR6XyR7PvQML7pU0niKcfYMcGv9ZIGQ11/AfCMtYtyQlpwyg0bJH7vw== )`
	RRSIG=27306 and DNSKEY=27306 verifies the DS RRset
	DS=59219/SHA-256 is now in the chain-of-trust
	DS=61019/SHA-1 is now in the chain-of-trust
	`HHSOPS.GOV. 3600 IN DS ( 59219 8 2 9895bc868f6760e366f00acfb868c75ab639cfa1bc4c4781d72cfd6d7288f935 )`
	`HHSOPS.GOV. 3600 IN DS 61019 8 1 31b42cf8fa55c06628f0e1c285f819e673d76a4c`
	`HHSOPS.GOV. 3600 IN DS 59219 8 1 797cf21592d4cce397fc72b373525bdf74dbbd42`
	`HHSOPS.GOV. 3600 IN DS ( 61019 8 2 67395751d254aaddd4097c2057235ef284379567f5d2acfb2edd2c283c2e4186 )`
	Query to rh202ns1.355.dhhs.GOV for HHSOPS.GOV/DNSKEY
	Received 1525 bytes from 158.74.30.98
	;; Answer received from 158.74.30.98 (1525 bytes) ;; HEADER SECTION ;; id = 7981 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 7 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HHSOPS.GOV. IN DNSKEY ;; ANSWER SECTION (7 records) HHSOPS.GOV. 60 IN DNSKEY ( 257 3 8 AwEAAX4BLdTmPsfG/t8vABA6HrrspvnLEc6dc2qi7ikZ2gOTvOnuIyfeYDn54BSsGk5aH8dS66gw U/upsNWnnRodQDWvXxAvYKeY1eO7ALUSxk7MQ1qLPETHYE4zj23tghga4H09j0quqiBxoKStaa6+ UJifblw/SwkRMuq6f9igWj2p9Q78GqXvnNfv0J/Y3/unJcWNoHIrplCFq/POaLrnULEoMjMg51ph lyy3lMR8npDPbISUyp+zyo4lJRcyYCAse8lVGAWhZTRXCoSln1MJ8QuoBl1Ey5zGRaN0j8D7nT8V /3En8RXLz3lqmOOMCituByPZeHPetRGh3wLSeFBA9cM= ) ; Key ID = 61019 HHSOPS.GOV. 60 IN DNSKEY ( 257 3 8 AwEAAZ5f+1/c5fJF8elruN0DqvUFJFrNSiFriXI6kI0F7GyZogPOFCid0fe39R7Dy1E+4T6PIrmp xFMxYoxpSLhfy/MlIkLmp3J5sjRPVjhQMlo7jTPEn43d9xHL1l/01e0MxPqe8Puy61rOXTL8Oq9F sC+IWmQwXNX64+fpJreOoRuaqBhqF/qQX0cV0yMPMAmjthHVqYBbbbIlwyvK418Tnvhz7QGrkqUz ehaFDirP09DroL/RvPiNAXxhIr/rKw3yCb38UxgQN2fvYOuq3MSkfweUUs2bT7qQALeWh5bLS5PF up9CNisHGvFWRZ4823IaJMFzpn/q59rVSL/b/28Amas= ) ; Key ID = 59219 HHSOPS.GOV. 60 IN DNSKEY ( 256 3 8 AwEAAW4UEoRjmkDeTLSAK81Vi/FRPx/Pozxq0rI9PmUhHmXJOWoGp3NLcKBEtnnt5JU8emKIF/dE heBpuE0jaTClQAwewomtbRMoNyv+g4fE9Eycphha4Dd9rvX8wNGcn6QOOdb/lUcvJOeTa3zgTLoN f21ANAOI2NootULCxi7GNuxD ) ; Key ID = 41958 HHSOPS.GOV. 60 IN DNSKEY ( 256 3 8 AwEAAcRWJ+dQOU/VIZnTDnWXiTjW5n3TaaskA7D8TsdmtSNchkj2OJ4YmQdRnksbrcNRbygjPxZf z+UK7x4QxzXAxK1WO7RnEMUXclwYDtYV5GumbA7E1eUmlq+fZJbbbvqtdhSSnP06ds1HLJx1PNRg vWHdFDtMCipLjAqHGbltXMKP ) ; Key ID = 46830 HHSOPS.GOV. 60 IN RRSIG ( DNSKEY 8 2 60 20210131000135 20210125230135 41958 hhsops.gov. YTMA3oDndyDbuWn3/iOWcwmYTe8fqpau1e0MAyVvWgTaPude+ya9QviE+OIHS08kPr+C4vDFRAwT s9GkvQ2Eq//8SzcAf0l6CHQXZc/xuIl1wrQgmav+N9O77kRnKhVC3qPC//eVdDixICh9XGflSVdJ cmtS3msxtgpgABAnzTE= ) hhsops.gov. 60 IN RRSIG ( DNSKEY 8 2 60 20210131000135 20210125230135 46830 hhsops.gov. Lcwu80JVCBA6t2iz9pw7RsWaLO4RMqM2p8wK/SeiQgDttYb2XDEc46Q38j4TTBjfh6BZl575Rgnm RMZRql+BbnINem6SUD+FqC7Eq1irzvtZfwM5Go1MEWPIryWcczSKVxuq38mX8K5QNAhDyVNvDch4 Z6qpvj2uVhXbI9FHY2A= ) hhsops.gov. 60 IN RRSIG ( DNSKEY 8 2 60 20210131000135 20210125230135 59219 hhsops.gov. Ba1FPUkvPdsXWKiPtvTveGJhEVW5ZjHg2wf2W5oRhs/jaEqdhh5EsBNPVfFRnGopPtN72j85UQGT hRoITJalhRmWWIY+ZMVI8pnlb791eFxmPy7NV7YHXTJRPgibIVc+QTLHVl5l3AIm7KS7d+xFIbNm 5/9cCssuXamBhtGz7vgsw7z5DohTabpYjpcfHvvdxjBaaZMQEoHdNcKqZN/UepIpepTUbHafZY6M jpRYQqed8FTEVq/aFhqXXKGvbMrWdorzM8sGYOErA37QnaLONKi8fsUhj4jO416+0ngyW31W/o65 dfafT3yjSsGXayhLRSua67FBFZbUjU9oNG294g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for HHSOPS.GOV
	`HHSOPS.GOV. 60 IN DNSKEY ( 257 3 8 AwEAAX4BLdTmPsfG/t8vABA6HrrspvnLEc6dc2qi7ikZ2gOTvOnuIyfeYDn54BSsGk5aH8dS66gw U/upsNWnnRodQDWvXxAvYKeY1eO7ALUSxk7MQ1qLPETHYE4zj23tghga4H09j0quqiBxoKStaa6+ UJifblw/SwkRMuq6f9igWj2p9Q78GqXvnNfv0J/Y3/unJcWNoHIrplCFq/POaLrnULEoMjMg51ph lyy3lMR8npDPbISUyp+zyo4lJRcyYCAse8lVGAWhZTRXCoSln1MJ8QuoBl1Ey5zGRaN0j8D7nT8V /3En8RXLz3lqmOOMCituByPZeHPetRGh3wLSeFBA9cM= ) ; Key ID = 61019`
	`HHSOPS.GOV. 60 IN DNSKEY ( 257 3 8 AwEAAZ5f+1/c5fJF8elruN0DqvUFJFrNSiFriXI6kI0F7GyZogPOFCid0fe39R7Dy1E+4T6PIrmp xFMxYoxpSLhfy/MlIkLmp3J5sjRPVjhQMlo7jTPEn43d9xHL1l/01e0MxPqe8Puy61rOXTL8Oq9F sC+IWmQwXNX64+fpJreOoRuaqBhqF/qQX0cV0yMPMAmjthHVqYBbbbIlwyvK418Tnvhz7QGrkqUz ehaFDirP09DroL/RvPiNAXxhIr/rKw3yCb38UxgQN2fvYOuq3MSkfweUUs2bT7qQALeWh5bLS5PF up9CNisHGvFWRZ4823IaJMFzpn/q59rVSL/b/28Amas= ) ; Key ID = 59219`
	`HHSOPS.GOV. 60 IN DNSKEY ( 256 3 8 AwEAAW4UEoRjmkDeTLSAK81Vi/FRPx/Pozxq0rI9PmUhHmXJOWoGp3NLcKBEtnnt5JU8emKIF/dE heBpuE0jaTClQAwewomtbRMoNyv+g4fE9Eycphha4Dd9rvX8wNGcn6QOOdb/lUcvJOeTa3zgTLoN f21ANAOI2NootULCxi7GNuxD ) ; Key ID = 41958`
	`HHSOPS.GOV. 60 IN DNSKEY ( 256 3 8 AwEAAcRWJ+dQOU/VIZnTDnWXiTjW5n3TaaskA7D8TsdmtSNchkj2OJ4YmQdRnksbrcNRbygjPxZf z+UK7x4QxzXAxK1WO7RnEMUXclwYDtYV5GumbA7E1eUmlq+fZJbbbvqtdhSSnP06ds1HLJx1PNRg vWHdFDtMCipLjAqHGbltXMKP ) ; Key ID = 46830`
	DNSKEY=61019/SEP is now in the chain-of-trust
	DS=61019/SHA-1 verifies DNSKEY=61019/SEP
	DS=61019/SHA-256 verifies DNSKEY=61019/SEP
	DNSKEY=59219/SEP is now in the chain-of-trust
	DS=59219/SHA-256 verifies DNSKEY=59219/SEP
	DS=59219/SHA-1 verifies DNSKEY=59219/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`HHSOPS.GOV. 60 IN RRSIG ( DNSKEY 8 2 60 20210131000135 20210125230135 41958 hhsops.gov. YTMA3oDndyDbuWn3/iOWcwmYTe8fqpau1e0MAyVvWgTaPude+ya9QviE+OIHS08kPr+C4vDFRAwT s9GkvQ2Eq//8SzcAf0l6CHQXZc/xuIl1wrQgmav+N9O77kRnKhVC3qPC//eVdDixICh9XGflSVdJ cmtS3msxtgpgABAnzTE= )`
	`hhsops.gov. 60 IN RRSIG ( DNSKEY 8 2 60 20210131000135 20210125230135 46830 hhsops.gov. Lcwu80JVCBA6t2iz9pw7RsWaLO4RMqM2p8wK/SeiQgDttYb2XDEc46Q38j4TTBjfh6BZl575Rgnm RMZRql+BbnINem6SUD+FqC7Eq1irzvtZfwM5Go1MEWPIryWcczSKVxuq38mX8K5QNAhDyVNvDch4 Z6qpvj2uVhXbI9FHY2A= )`
	`hhsops.gov. 60 IN RRSIG ( DNSKEY 8 2 60 20210131000135 20210125230135 59219 hhsops.gov. Ba1FPUkvPdsXWKiPtvTveGJhEVW5ZjHg2wf2W5oRhs/jaEqdhh5EsBNPVfFRnGopPtN72j85UQGT hRoITJalhRmWWIY+ZMVI8pnlb791eFxmPy7NV7YHXTJRPgibIVc+QTLHVl5l3AIm7KS7d+xFIbNm 5/9cCssuXamBhtGz7vgsw7z5DohTabpYjpcfHvvdxjBaaZMQEoHdNcKqZN/UepIpepTUbHafZY6M jpRYQqed8FTEVq/aFhqXXKGvbMrWdorzM8sGYOErA37QnaLONKi8fsUhj4jO416+0ngyW31W/o65 dfafT3yjSsGXayhLRSua67FBFZbUjU9oNG294g== )`
	RRSIG=41958 and DNSKEY=41958 verifies the DNSKEY RRset
	RRSIG=46830 and DNSKEY=46830 verifies the DNSKEY RRset
	RRSIG=59219 and DNSKEY=59219/SEP verifies the DNSKEY RRset
	DNSKEY=41958 is now in the chain-of-trust
	DNSKEY=46830 is now in the chain-of-trust
	Query to rh202ns1.355.dhhs.GOV for HHSOPS.GOV/A
	Received 395 bytes from 158.74.30.98
	;; Answer received from 158.74.30.98 (395 bytes) ;; HEADER SECTION ;; id = 46198 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HHSOPS.GOV. IN A ;; ANSWER SECTION (3 records) HHSOPS.GOV. 60 IN A 127.0.0.9 HHSOPS.GOV. 60 IN RRSIG ( A 8 2 60 20210131000135 20210125230135 41958 hhsops.gov. ScFa+Mo+DcwxEKxG7FkAvCcFbypfTLuZyF5dsMUmfZuar9V4Q36wEcTLnObg07yyYmmvYrMLH3G3 MzkY/hLoeTJr9KYky5W4WWfRZybpnXEI3hzmTJI7a8tFLm0bHoLkcWKMixosfMQg8ZJgDVGYmuF7 ZBl3ikvzx9UYNbD/thQ= ) hhsops.gov. 60 IN RRSIG ( A 8 2 60 20210131000135 20210125230135 46830 hhsops.gov. jJhXD6ApxyaVg61bq7RIgw+UddhGpT5RZgACIjNNIQaONz8KvxW82I5KXtrhH6C8vu8HxZZKHDTs 9gcm8PphvL7KBoslqSaJKZFMdCE7dzmFvI5q8FU63BbDDYk2ZAMDUZbVMl3J4kfBCvIcNxmdTnyo GH3ZvZBXpX/Otp6ka/8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	HHSOPS.GOV is authoritative for HHSOPS.GOV
	Found RRSIG signed by hhsops.gov zone
	Query to rh202ns2.355.dhhs.GOV for HHSOPS.GOV/SOA
	Received 452 bytes from 158.74.30.99
	;; Answer received from 158.74.30.99 (452 bytes) ;; HEADER SECTION ;; id = 8063 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HHSOPS.GOV. IN SOA ;; ANSWER SECTION (3 records) HHSOPS.GOV. 60 IN SOA ( rh120ns1.368.dhhs.GOV. hostmaster.psc.hhs.GOV. 2020091237 ;serial 600 ;refresh 60 ;retry 604800 ;expire 60 ;minimum ) HHSOPS.GOV. 60 IN RRSIG ( SOA 8 2 60 20210131000135 20210125230135 41958 hhsops.gov. JzXH1HH8a9+HU+xuLUO32EZlnHdUs8N/gw1vrfwUTX23EcB/6HHmQSI8DXkN+iMivWFLstsFrFsC m7GuAtoAP/S1Kt33NFGIty9T0GPFrVH9EfsaeWo/mPbHr8PRcFlBnU4ptwOYngwa4xqdzkjI2LMZ zDszwUDq89h48K88Mgw= ) hhsops.gov. 60 IN RRSIG ( SOA 8 2 60 20210131000135 20210125230135 46830 hhsops.gov. a8gLz3g1LYKFtkvyNrgD0BMvpjGkhCPX/tjXgSfSlBQ3CTE9pfFO6WahC7VRjJ8IAimzeoya0b7/ nuWh3s6aOZ/ynC/6uiJSGFJOckE+Kgtq0ZurMtZseLhIt0oZjqUYpT54XeVfmOCgVwV3hLmMLX5z MG+q2YPuoqpWd4B63ds= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to rh120ns2.368.dhhs.GOV for HHSOPS.GOV/SOA
	Received 452 bytes from 158.74.30.103
	;; Answer received from 158.74.30.103 (452 bytes) ;; HEADER SECTION ;; id = 53082 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HHSOPS.GOV. IN SOA ;; ANSWER SECTION (3 records) HHSOPS.GOV. 60 IN SOA ( rh120ns1.368.dhhs.GOV. hostmaster.psc.hhs.GOV. 2020091237 ;serial 600 ;refresh 60 ;retry 604800 ;expire 60 ;minimum ) HHSOPS.GOV. 60 IN RRSIG ( SOA 8 2 60 20210131000135 20210125230135 41958 hhsops.gov. JzXH1HH8a9+HU+xuLUO32EZlnHdUs8N/gw1vrfwUTX23EcB/6HHmQSI8DXkN+iMivWFLstsFrFsC m7GuAtoAP/S1Kt33NFGIty9T0GPFrVH9EfsaeWo/mPbHr8PRcFlBnU4ptwOYngwa4xqdzkjI2LMZ zDszwUDq89h48K88Mgw= ) hhsops.gov. 60 IN RRSIG ( SOA 8 2 60 20210131000135 20210125230135 46830 hhsops.gov. a8gLz3g1LYKFtkvyNrgD0BMvpjGkhCPX/tjXgSfSlBQ3CTE9pfFO6WahC7VRjJ8IAimzeoya0b7/ nuWh3s6aOZ/ynC/6uiJSGFJOckE+Kgtq0ZurMtZseLhIt0oZjqUYpT54XeVfmOCgVwV3hLmMLX5z MG+q2YPuoqpWd4B63ds= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to rh120ns1.368.dhhs.GOV for HHSOPS.GOV/SOA
	Received 452 bytes from 158.74.30.102
	;; Answer received from 158.74.30.102 (452 bytes) ;; HEADER SECTION ;; id = 6729 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HHSOPS.GOV. IN SOA ;; ANSWER SECTION (3 records) HHSOPS.GOV. 60 IN SOA ( rh120ns1.368.dhhs.GOV. hostmaster.psc.hhs.GOV. 2020091237 ;serial 600 ;refresh 60 ;retry 604800 ;expire 60 ;minimum ) HHSOPS.GOV. 60 IN RRSIG ( SOA 8 2 60 20210131000135 20210125230135 41958 hhsops.gov. JzXH1HH8a9+HU+xuLUO32EZlnHdUs8N/gw1vrfwUTX23EcB/6HHmQSI8DXkN+iMivWFLstsFrFsC m7GuAtoAP/S1Kt33NFGIty9T0GPFrVH9EfsaeWo/mPbHr8PRcFlBnU4ptwOYngwa4xqdzkjI2LMZ zDszwUDq89h48K88Mgw= ) hhsops.gov. 60 IN RRSIG ( SOA 8 2 60 20210131000135 20210125230135 46830 hhsops.gov. a8gLz3g1LYKFtkvyNrgD0BMvpjGkhCPX/tjXgSfSlBQ3CTE9pfFO6WahC7VRjJ8IAimzeoya0b7/ nuWh3s6aOZ/ynC/6uiJSGFJOckE+Kgtq0ZurMtZseLhIt0oZjqUYpT54XeVfmOCgVwV3hLmMLX5z MG+q2YPuoqpWd4B63ds= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to rh202ns1.355.dhhs.GOV for HHSOPS.GOV/SOA
	Received 452 bytes from 158.74.30.98
	;; Answer received from 158.74.30.98 (452 bytes) ;; HEADER SECTION ;; id = 59339 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HHSOPS.GOV. IN SOA ;; ANSWER SECTION (3 records) HHSOPS.GOV. 60 IN SOA ( rh120ns1.368.dhhs.GOV. hostmaster.psc.hhs.GOV. 2020091237 ;serial 600 ;refresh 60 ;retry 604800 ;expire 60 ;minimum ) HHSOPS.GOV. 60 IN RRSIG ( SOA 8 2 60 20210131000135 20210125230135 41958 hhsops.gov. JzXH1HH8a9+HU+xuLUO32EZlnHdUs8N/gw1vrfwUTX23EcB/6HHmQSI8DXkN+iMivWFLstsFrFsC m7GuAtoAP/S1Kt33NFGIty9T0GPFrVH9EfsaeWo/mPbHr8PRcFlBnU4ptwOYngwa4xqdzkjI2LMZ zDszwUDq89h48K88Mgw= ) hhsops.gov. 60 IN RRSIG ( SOA 8 2 60 20210131000135 20210125230135 46830 hhsops.gov. a8gLz3g1LYKFtkvyNrgD0BMvpjGkhCPX/tjXgSfSlBQ3CTE9pfFO6WahC7VRjJ8IAimzeoya0b7/ nuWh3s6aOZ/ynC/6uiJSGFJOckE+Kgtq0ZurMtZseLhIt0oZjqUYpT54XeVfmOCgVwV3hLmMLX5z MG+q2YPuoqpWd4B63ds= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to rh202ns1.355.dhhs.GOV for HHSOPS.GOV/A
	Received 395 bytes from 158.74.30.98
	;; Answer received from 158.74.30.98 (395 bytes) ;; HEADER SECTION ;; id = 26324 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HHSOPS.GOV. IN A ;; ANSWER SECTION (3 records) HHSOPS.GOV. 60 IN A 127.0.0.9 HHSOPS.GOV. 60 IN RRSIG ( A 8 2 60 20210131000135 20210125230135 41958 hhsops.gov. ScFa+Mo+DcwxEKxG7FkAvCcFbypfTLuZyF5dsMUmfZuar9V4Q36wEcTLnObg07yyYmmvYrMLH3G3 MzkY/hLoeTJr9KYky5W4WWfRZybpnXEI3hzmTJI7a8tFLm0bHoLkcWKMixosfMQg8ZJgDVGYmuF7 ZBl3ikvzx9UYNbD/thQ= ) hhsops.gov. 60 IN RRSIG ( A 8 2 60 20210131000135 20210125230135 46830 hhsops.gov. jJhXD6ApxyaVg61bq7RIgw+UddhGpT5RZgACIjNNIQaONz8KvxW82I5KXtrhH6C8vu8HxZZKHDTs 9gcm8PphvL7KBoslqSaJKZFMdCE7dzmFvI5q8FU63BbDDYk2ZAMDUZbVMl3J4kfBCvIcNxmdTnyo GH3ZvZBXpX/Otp6ka/8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	HHSOPS.GOV A RR has value 127.0.0.9
	Found 2 RRSIGs over A RRset
	`HHSOPS.GOV. 60 IN RRSIG ( A 8 2 60 20210131000135 20210125230135 41958 hhsops.gov. ScFa+Mo+DcwxEKxG7FkAvCcFbypfTLuZyF5dsMUmfZuar9V4Q36wEcTLnObg07yyYmmvYrMLH3G3 MzkY/hLoeTJr9KYky5W4WWfRZybpnXEI3hzmTJI7a8tFLm0bHoLkcWKMixosfMQg8ZJgDVGYmuF7 ZBl3ikvzx9UYNbD/thQ= )`
	`hhsops.gov. 60 IN RRSIG ( A 8 2 60 20210131000135 20210125230135 46830 hhsops.gov. jJhXD6ApxyaVg61bq7RIgw+UddhGpT5RZgACIjNNIQaONz8KvxW82I5KXtrhH6C8vu8HxZZKHDTs 9gcm8PphvL7KBoslqSaJKZFMdCE7dzmFvI5q8FU63BbDDYk2ZAMDUZbVMl3J4kfBCvIcNxmdTnyo GH3ZvZBXpX/Otp6ka/8= )`
	RRSIG=41958 and DNSKEY=41958 verifies the A RRset
	RRSIG=46830 and DNSKEY=46830 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test HHSOPS.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: