DNSSEC Analyzer - HRSA.GOV

Domain Name:

Time: 2021-01-15 23:57:35 UTC, NTP stratum 4

Analyzing DNSSEC problems for HRSA.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (864 bytes) ;; HEADER SECTION ;; id = 43642 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbKGKkqc1VAvQr48iPf9Nd39f337MitggxF0AB9kLKRNSuq9joOEPC/R6PD/4lTzUms8U9oP +aiF0rVC2rGOKSdOLxPHRLA3ameMFT2/3bmVCFsRsn03IVTdN5VUAfczjqjmA0t9NM7bbN5oVzuQ L3P1FyQb1q6HX4M1qg+htMNEd9PdlPLMFcrUg5fcYtTr2llVkO1Xo3lAdrjmmxfGeIyQnskpwPyW 88J527DEytmgPo5KzLBYLMoL2Q41PK0ul0rs7yN+g5IG4LnJOcjew1yrmHXrp/OzrpsO4FkicufY t/ygfQKkT5HYbr/yFgeZAfaF80nYyc7wgDYxOeHdiRk= ) ; Key ID = 42351 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210201000000 20210111000000 20326 . nPlFYAyI+iUNytZu71KcMwdvR1ubjVRP6Hp7E/owRaLhHhOON4gJsezf4UoBeq75yeDBkzRA2pwD 7g6XVY/qsQM9WDuzTYQJWqvSGDj0BYF5bS482kH8Y3N/Ly/jlQCSFIlCbTjAUBHTdYZji6esQDqi Wk2SzB38ZLsxgey439JkhxUzMh5520zLCiOnuZs9Iy0KLoy4ss7R/GiQjcYEIi0zScXZXcDBr3qd 2HB/BL98F2MDeshzQ/VRimxsZ3RH3ERNPS1GurmjY/mTUZxX3ITj1C57PI2bgurv1b7dyp1zLpmZ lIz/21lQwvT3wESGF44J1YmBDheYoG44GY9RVg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbKGKkqc1VAvQr48iPf9Nd39f337MitggxF0AB9kLKRNSuq9joOEPC/R6PD/4lTzUms8U9oP +aiF0rVC2rGOKSdOLxPHRLA3ameMFT2/3bmVCFsRsn03IVTdN5VUAfczjqjmA0t9NM7bbN5oVzuQ L3P1FyQb1q6HX4M1qg+htMNEd9PdlPLMFcrUg5fcYtTr2llVkO1Xo3lAdrjmmxfGeIyQnskpwPyW 88J527DEytmgPo5KzLBYLMoL2Q41PK0ul0rs7yN+g5IG4LnJOcjew1yrmHXrp/OzrpsO4FkicufY t/ygfQKkT5HYbr/yFgeZAfaF80nYyc7wgDYxOeHdiRk= ) ; Key ID = 42351`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210201000000 20210111000000 20326 . nPlFYAyI+iUNytZu71KcMwdvR1ubjVRP6Hp7E/owRaLhHhOON4gJsezf4UoBeq75yeDBkzRA2pwD 7g6XVY/qsQM9WDuzTYQJWqvSGDj0BYF5bS482kH8Y3N/Ly/jlQCSFIlCbTjAUBHTdYZji6esQDqi Wk2SzB38ZLsxgey439JkhxUzMh5520zLCiOnuZs9Iy0KLoy4ss7R/GiQjcYEIi0zScXZXcDBr3qd 2HB/BL98F2MDeshzQ/VRimxsZ3RH3ERNPS1GurmjY/mTUZxX3ITj1C57PI2bgurv1b7dyp1zLpmZ lIz/21lQwvT3wESGF44J1YmBDheYoG44GY9RVg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=42351 is now in the chain-of-trust
	Query to e.root-servers.net for HRSA.GOV/A
	Received 663 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (663 bytes) ;; HEADER SECTION ;; id = 22393 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HRSA.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20210128210000 20210115200000 42351 . j5uIQdecusd20J+nAqMgEXNBBgspo+qpnu/KAdwPh2a4JVNYJoH8l59cz9ExlGfBhWsP+JilolbG GdLxstFFzKq9gH4ga5BHMPOp57sJtkMqvpejLm+9vqpjywfI7fKjh4XSRrlDuWSHruxz2dDadedB Ov04/gcQVTqtvkegx7C9CaOHt8R/0JPCSLLgr+0eXoE+psWx0WbWCY9KBx+CvW46I6VhaERjh6ml NfDtzrN2Ad6vgYftRvMSMRARxtUcSbG+mVOxu6cLbtGyL1+l1OP/Ohjzx37BAdFvujrK6HHYUfDr /0tfBcjzpgogBvLgvppfrRjPzhacviJ3AvvmmQ== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to f.root-servers.net for GOV/DNSKEY
	Received 658 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (658 bytes) ;; HEADER SECTION ;; id = 13624 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20210128210000 20210115200000 42351 . j5uIQdecusd20J+nAqMgEXNBBgspo+qpnu/KAdwPh2a4JVNYJoH8l59cz9ExlGfBhWsP+JilolbG GdLxstFFzKq9gH4ga5BHMPOp57sJtkMqvpejLm+9vqpjywfI7fKjh4XSRrlDuWSHruxz2dDadedB Ov04/gcQVTqtvkegx7C9CaOHt8R/0JPCSLLgr+0eXoE+psWx0WbWCY9KBx+CvW46I6VhaERjh6ml NfDtzrN2Ad6vgYftRvMSMRARxtUcSbG+mVOxu6cLbtGyL1+l1OP/Ohjzx37BAdFvujrK6HHYUfDr /0tfBcjzpgogBvLgvppfrRjPzhacviJ3AvvmmQ== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to f.root-servers.net for GOV/DS
	Received 403 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (403 bytes) ;; HEADER SECTION ;; id = 12949 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20210128210000 20210115200000 42351 . j5uIQdecusd20J+nAqMgEXNBBgspo+qpnu/KAdwPh2a4JVNYJoH8l59cz9ExlGfBhWsP+JilolbG GdLxstFFzKq9gH4ga5BHMPOp57sJtkMqvpejLm+9vqpjywfI7fKjh4XSRrlDuWSHruxz2dDadedB Ov04/gcQVTqtvkegx7C9CaOHt8R/0JPCSLLgr+0eXoE+psWx0WbWCY9KBx+CvW46I6VhaERjh6ml NfDtzrN2Ad6vgYftRvMSMRARxtUcSbG+mVOxu6cLbtGyL1+l1OP/Ohjzx37BAdFvujrK6HHYUfDr /0tfBcjzpgogBvLgvppfrRjPzhacviJ3AvvmmQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20210128210000 20210115200000 42351 . j5uIQdecusd20J+nAqMgEXNBBgspo+qpnu/KAdwPh2a4JVNYJoH8l59cz9ExlGfBhWsP+JilolbG GdLxstFFzKq9gH4ga5BHMPOp57sJtkMqvpejLm+9vqpjywfI7fKjh4XSRrlDuWSHruxz2dDadedB Ov04/gcQVTqtvkegx7C9CaOHt8R/0JPCSLLgr+0eXoE+psWx0WbWCY9KBx+CvW46I6VhaERjh6ml NfDtzrN2Ad6vgYftRvMSMRARxtUcSbG+mVOxu6cLbtGyL1+l1OP/Ohjzx37BAdFvujrK6HHYUfDr /0tfBcjzpgogBvLgvppfrRjPzhacviJ3AvvmmQ== )`
	RRSIG=42351 and DNSKEY=42351 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to b.gov-servers.net for GOV/DNSKEY
	Received 957 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (957 bytes) ;; HEADER SECTION ;; id = 33609 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (4 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAaQup5BwKqvn1In1x+PzsLpFav6zsLaW7fivUq9PpXUzXn++rcjtYBS15NXm1hMAZb5FChUp 35qd7hVqdwNuT/NGFNHfEykaeWjkqBKX2mCBSiyIsK4i4TQu7CS2CgqfqR43wXFITyItTPP5wijo 9Jt4dsVTjAtNJKaXOKZ31tLaeM5C2bYqAofxX6oK3TVAZ7vFsjPqjJZtZUBMZq28BiU= ) ; Key ID = 27306 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAeFoiC01j4zIdBfR1vxBGp7WmV8q6IgTQ/pvbQJhCd9+sE16txuz6M81FPFkWhTk1nsXR4tI UZLQZpvgme+q3dqWuqtFA2amB99IM9B9iq6kwSrkZNVFv6zav3eP+5BlL/OA9FNFQHXCj5qj2noA j2le7j8umVcc+4zH677ytdtIImoAY45H8wWxVrGR4kxqM54O10fPHXEPu84irfaZGrM= ) ; Key ID = 15489 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210129200254 20210114195754 7698 gov. CGhz32kgAD2TX5Lg2j23jXXUv+RTgGyMxbh/yobXObSvJneaSKa75D5Vo/iCVbvVvp3lntOGoKnQ AD+e8tEVlaKiG2bX1u9asLn9azwmk+M5i/4vCydP31wJ4503w+7bZe1c5qg26RqVN5pudzmgUUUK msaHry0zXHrpcC941eZZhuemdKlF4XT3E6JkkAL+HyCLvqIk4rBqlShTiqUwzKj6+GbhQvuJzU+B 4ZsiuoNu1FBU2ipWi+FJ88xawWmBc+yEDZkPJFJZpdPNtonI1Cjd3H61PSXe6JRrtsLcLX/G9F+J nQo6IN7tiEONh5QAEo2RBBc1yL29N3BRDW8qMg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAaQup5BwKqvn1In1x+PzsLpFav6zsLaW7fivUq9PpXUzXn++rcjtYBS15NXm1hMAZb5FChUp 35qd7hVqdwNuT/NGFNHfEykaeWjkqBKX2mCBSiyIsK4i4TQu7CS2CgqfqR43wXFITyItTPP5wijo 9Jt4dsVTjAtNJKaXOKZ31tLaeM5C2bYqAofxX6oK3TVAZ7vFsjPqjJZtZUBMZq28BiU= ) ; Key ID = 27306`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAeFoiC01j4zIdBfR1vxBGp7WmV8q6IgTQ/pvbQJhCd9+sE16txuz6M81FPFkWhTk1nsXR4tI UZLQZpvgme+q3dqWuqtFA2amB99IM9B9iq6kwSrkZNVFv6zav3eP+5BlL/OA9FNFQHXCj5qj2noA j2le7j8umVcc+4zH677ytdtIImoAY45H8wWxVrGR4kxqM54O10fPHXEPu84irfaZGrM= ) ; Key ID = 15489`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210129200254 20210114195754 7698 gov. CGhz32kgAD2TX5Lg2j23jXXUv+RTgGyMxbh/yobXObSvJneaSKa75D5Vo/iCVbvVvp3lntOGoKnQ AD+e8tEVlaKiG2bX1u9asLn9azwmk+M5i/4vCydP31wJ4503w+7bZe1c5qg26RqVN5pudzmgUUUK msaHry0zXHrpcC941eZZhuemdKlF4XT3E6JkkAL+HyCLvqIk4rBqlShTiqUwzKj6+GbhQvuJzU+B 4ZsiuoNu1FBU2ipWi+FJ88xawWmBc+yEDZkPJFJZpdPNtonI1Cjd3H61PSXe6JRrtsLcLX/G9F+J nQo6IN7tiEONh5QAEo2RBBc1yL29N3BRDW8qMg== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=27306 is now in the chain-of-trust
	DNSKEY=15489 is now in the chain-of-trust
	Query to c.gov-servers.net for HRSA.GOV/A
	Received 637 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (637 bytes) ;; HEADER SECTION ;; id = 20180 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HRSA.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) HRSA.GOV. 86400 IN NS hrsans1.HRSA.GOV. HRSA.GOV. 86400 IN NS ns.nih.GOV. HRSA.GOV. 86400 IN NS hrsans2.HRSA.GOV. HRSA.GOV. 86400 IN NS ns3.nih.GOV. HRSA.GOV. 86400 IN NS ns2.nih.GOV. HRSA.GOV. 3600 IN DS 22563 7 1 842ad656767cef16232a41b900c601fa0d85aaed HRSA.GOV. 3600 IN DS ( 22563 7 2 8736d2705d7e75b3cc5d781b7d3ee64c73b2fcc189a2a5e70c50a26d8e1e4f3d ) HRSA.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210122211007 20210115211007 27306 gov. ntClflkGN1/vZWSpH8hEOAy7uwq0xxntOu/861AmUpD1JgcAN/RxuG/e7XmU0PI/UaU8IroXGRqc Atlh+GoBvL+yMv8q4aF4UAlRLgkoyU9laL3ufsYIcmPZsNsvrES0/ISDJgXg3fptmaEZUMbuCqMS oGJs1JyDKtBzSscUgU7+qxETwpro6nbvnZT4/CSBp1xjkDFsPZWiF3rqurP7pg== ) ;; ADDITIONAL SECTION (11 records) hrsans1.HRSA.GOV. 86400 IN A 165.112.137.239 hrsans1.HRSA.GOV. 86400 IN AAAA 2607:f220:410:400::ef0 ns.nih.GOV. 86400 IN A 128.231.128.251 ns.nih.GOV. 86400 IN AAAA 2607:f220:404:101::80e7:80fb hrsans2.HRSA.GOV. 86400 IN A 162.99.248.37 hrsans2.HRSA.GOV. 86400 IN AAAA 2607:f220:41c:400::250 ns3.nih.GOV. 86400 IN A 165.112.4.230 ns3.nih.GOV. 86400 IN AAAA 2607:f220:402:1801::a570:4e6 ns2.nih.GOV. 86400 IN A 128.231.64.1 ns2.nih.GOV. 86400 IN AAAA 2607:f220:418:4101::80e7:401 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.gov-servers.net for HRSA.GOV/DNSKEY
	Received 637 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (637 bytes) ;; HEADER SECTION ;; id = 59480 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HRSA.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) HRSA.GOV. 86400 IN NS hrsans1.HRSA.GOV. HRSA.GOV. 86400 IN NS ns.nih.GOV. HRSA.GOV. 86400 IN NS hrsans2.HRSA.GOV. HRSA.GOV. 86400 IN NS ns3.nih.GOV. HRSA.GOV. 86400 IN NS ns2.nih.GOV. HRSA.GOV. 3600 IN DS 22563 7 1 842ad656767cef16232a41b900c601fa0d85aaed HRSA.GOV. 3600 IN DS ( 22563 7 2 8736d2705d7e75b3cc5d781b7d3ee64c73b2fcc189a2a5e70c50a26d8e1e4f3d ) HRSA.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210122211007 20210115211007 27306 gov. ntClflkGN1/vZWSpH8hEOAy7uwq0xxntOu/861AmUpD1JgcAN/RxuG/e7XmU0PI/UaU8IroXGRqc Atlh+GoBvL+yMv8q4aF4UAlRLgkoyU9laL3ufsYIcmPZsNsvrES0/ISDJgXg3fptmaEZUMbuCqMS oGJs1JyDKtBzSscUgU7+qxETwpro6nbvnZT4/CSBp1xjkDFsPZWiF3rqurP7pg== ) ;; ADDITIONAL SECTION (11 records) hrsans1.HRSA.GOV. 86400 IN A 165.112.137.239 hrsans1.HRSA.GOV. 86400 IN AAAA 2607:f220:410:400::ef0 ns.nih.GOV. 86400 IN A 128.231.128.251 ns.nih.GOV. 86400 IN AAAA 2607:f220:404:101::80e7:80fb hrsans2.HRSA.GOV. 86400 IN A 162.99.248.37 hrsans2.HRSA.GOV. 86400 IN AAAA 2607:f220:41c:400::250 ns3.nih.GOV. 86400 IN A 165.112.4.230 ns3.nih.GOV. 86400 IN AAAA 2607:f220:402:1801::a570:4e6 ns2.nih.GOV. 86400 IN A 128.231.64.1 ns2.nih.GOV. 86400 IN AAAA 2607:f220:418:4101::80e7:401 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone HRSA.GOV

HRSA.GOV

	Checking DS between GOV and HRSA.GOV
	Query to b.gov-servers.net for HRSA.GOV/DS
	Received 316 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (316 bytes) ;; HEADER SECTION ;; id = 61552 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HRSA.GOV. IN DS ;; ANSWER SECTION (3 records) HRSA.GOV. 3600 IN DS 22563 7 1 842ad656767cef16232a41b900c601fa0d85aaed HRSA.GOV. 3600 IN DS ( 22563 7 2 8736d2705d7e75b3cc5d781b7d3ee64c73b2fcc189a2a5e70c50a26d8e1e4f3d ) HRSA.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210122211007 20210115211007 27306 gov. ntClflkGN1/vZWSpH8hEOAy7uwq0xxntOu/861AmUpD1JgcAN/RxuG/e7XmU0PI/UaU8IroXGRqc Atlh+GoBvL+yMv8q4aF4UAlRLgkoyU9laL3ufsYIcmPZsNsvrES0/ISDJgXg3fptmaEZUMbuCqMS oGJs1JyDKtBzSscUgU7+qxETwpro6nbvnZT4/CSBp1xjkDFsPZWiF3rqurP7pg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for HRSA.GOV in the GOV zone
	DS=22563/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=22563/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`HRSA.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210122211007 20210115211007 27306 gov. ntClflkGN1/vZWSpH8hEOAy7uwq0xxntOu/861AmUpD1JgcAN/RxuG/e7XmU0PI/UaU8IroXGRqc Atlh+GoBvL+yMv8q4aF4UAlRLgkoyU9laL3ufsYIcmPZsNsvrES0/ISDJgXg3fptmaEZUMbuCqMS oGJs1JyDKtBzSscUgU7+qxETwpro6nbvnZT4/CSBp1xjkDFsPZWiF3rqurP7pg== )`
	RRSIG=27306 and DNSKEY=27306 verifies the DS RRset
	DS=22563/SHA-1 is now in the chain-of-trust
	`HRSA.GOV. 3600 IN DS 22563 7 1 842ad656767cef16232a41b900c601fa0d85aaed`
	`HRSA.GOV. 3600 IN DS ( 22563 7 2 8736d2705d7e75b3cc5d781b7d3ee64c73b2fcc189a2a5e70c50a26d8e1e4f3d )`
	Query to ns2.nih.GOV for HRSA.GOV/DNSKEY
	Received 1181 bytes from 128.231.64.1
	;; Answer received from 128.231.64.1 (1181 bytes) ;; HEADER SECTION ;; id = 62101 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HRSA.GOV. IN DNSKEY ;; ANSWER SECTION (4 records) HRSA.GOV. 60 IN DNSKEY ( 256 3 7 AwEAAc35qzGmh4LaomlAg2QJ4PhfeeZv20ujUFZ/Zd3VDTauijwMFf7UkO1TqX7rzAbSHEW2DRzR UoeLN94gXFOmhYYqBaxoxa2NbVyeJiEmgwDyV4ZAY15WMQNxdNpU5XvEb2DxGXaoCRHRmWNTo8Q9 ZHuLp0H4CiKSrBWU/EHDhVYB1blzBeKjnxZPtvBU6tHDufk6Y2ifn+D4Sh3g2UZabRYOP9NyzYRq Rn/57iQEA+JSEPsxXg5rTYTyn+9Lhdp6KjbT4jRvz1x2MTFPqSGmBTP1ePbpMeKYiZ7lSc9cI4Cm MUIPYRehra6Iue3+gPZAXENRy406/p5Gkk5Oy4vJYYk= ) ; Key ID = 842 HRSA.GOV. 60 IN DNSKEY ( 257 3 7 AwEAAfO96uOkMkgOEtRIfd7QqLOrTlEYaymYxsM7rPz3Nhm0wzv4FH9rou7Pe2irHa9FDcfQeLUB /1g0AKtW8rjJ4jxshldm4WqL/fkLD6TYOEWpdAb3bArEkvop3Nr9zcEIdt/6RWtBu5x3rzMZ3dQe fSrgNwkdzHrscdIIQwMAa3Y4SKIgZqJEDg2Sc+3oAIB37NNODHDbgS49G0PInJk1GzLtV1UMdpFj 8Poa5OBalYLQROc4zAGB+BpGB1hB3EvfdXMsmauj+q87wGbAoG+m3XyT9KR3+tWXYzcrI6buatKb RUFO9UfU5dM7a47/JhgnBZqCaQb19LPIIILzy30+KG8= ) ; Key ID = 22563 HRSA.GOV. 60 IN RRSIG ( DNSKEY 7 2 60 20210316152022 20210115142022 842 hrsa.gov. pj0LJ30Oe2JVseHq56GsHdroLfe10ii7iyUTlNIqCsFC41CqdDnHAHALi/0qjGjaNtAmYI+nlypY F469kA5tm5b6znEv0tunOruaCH22+RmGzt4PVlv4SiLURuzah8bFCo+mHJkQJtnt+XelUuc5+On9 6w25yQmEM1h/sRc0mXdFEh6JthO8d5dL66KKslcInkM/iv+Y3K1d0VdL9j3h6yvr63tZgy3R/4SJ QRHOhS0M4fbKXIiLD/QiE5YVgqMc47eiqvFTqifleskPayiDaF1bXN/s+cV0p6BIRHMtsPkeVWE4 JWVk3VB6GZYEoNCI7Zb4ffRBw6v+K/Egv38Y/A== ) hrsa.gov. 60 IN RRSIG ( DNSKEY 7 2 60 20210316152022 20210115142022 22563 hrsa.gov. R+/EavfbLNXnvTSnCQ5K9KyVsdMKfA1K03sS0AFnUkvrc+EZcFRsOZSWxMhIgn4taLaWrtWa798+ GnhCkAeg7McdbUD3laB4cPHwnrp+UtNqFf4aPV8ZjwxbxY5cR/eZ1KUDqGWfL1VuEYIlvsJx3DZu pg6q3dbzfBESqBJ0bNhN1zFCOqyA6nC0t0zy1psfEut8Lc3LhDDI/Ayh9gx4DAwTXdOuFkZLy1Qs bbU7ra635Iyla8zOuNSDvhImVDxPSlVeJpxgFFmHkTjX682WkzzQdImxpTDeKtqcYYFp6Cd6NJS5 NSXGkK5A1cSZChQWhu22bnTlUi69pWULcwNsdQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for HRSA.GOV
	`HRSA.GOV. 60 IN DNSKEY ( 256 3 7 AwEAAc35qzGmh4LaomlAg2QJ4PhfeeZv20ujUFZ/Zd3VDTauijwMFf7UkO1TqX7rzAbSHEW2DRzR UoeLN94gXFOmhYYqBaxoxa2NbVyeJiEmgwDyV4ZAY15WMQNxdNpU5XvEb2DxGXaoCRHRmWNTo8Q9 ZHuLp0H4CiKSrBWU/EHDhVYB1blzBeKjnxZPtvBU6tHDufk6Y2ifn+D4Sh3g2UZabRYOP9NyzYRq Rn/57iQEA+JSEPsxXg5rTYTyn+9Lhdp6KjbT4jRvz1x2MTFPqSGmBTP1ePbpMeKYiZ7lSc9cI4Cm MUIPYRehra6Iue3+gPZAXENRy406/p5Gkk5Oy4vJYYk= ) ; Key ID = 842`
	`HRSA.GOV. 60 IN DNSKEY ( 257 3 7 AwEAAfO96uOkMkgOEtRIfd7QqLOrTlEYaymYxsM7rPz3Nhm0wzv4FH9rou7Pe2irHa9FDcfQeLUB /1g0AKtW8rjJ4jxshldm4WqL/fkLD6TYOEWpdAb3bArEkvop3Nr9zcEIdt/6RWtBu5x3rzMZ3dQe fSrgNwkdzHrscdIIQwMAa3Y4SKIgZqJEDg2Sc+3oAIB37NNODHDbgS49G0PInJk1GzLtV1UMdpFj 8Poa5OBalYLQROc4zAGB+BpGB1hB3EvfdXMsmauj+q87wGbAoG+m3XyT9KR3+tWXYzcrI6buatKb RUFO9UfU5dM7a47/JhgnBZqCaQb19LPIIILzy30+KG8= ) ; Key ID = 22563`
	DNSKEY=22563/SEP is now in the chain-of-trust
	DS=22563/SHA-1 verifies DNSKEY=22563/SEP
	DS=22563/SHA-256 verifies DNSKEY=22563/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`HRSA.GOV. 60 IN RRSIG ( DNSKEY 7 2 60 20210316152022 20210115142022 842 hrsa.gov. pj0LJ30Oe2JVseHq56GsHdroLfe10ii7iyUTlNIqCsFC41CqdDnHAHALi/0qjGjaNtAmYI+nlypY F469kA5tm5b6znEv0tunOruaCH22+RmGzt4PVlv4SiLURuzah8bFCo+mHJkQJtnt+XelUuc5+On9 6w25yQmEM1h/sRc0mXdFEh6JthO8d5dL66KKslcInkM/iv+Y3K1d0VdL9j3h6yvr63tZgy3R/4SJ QRHOhS0M4fbKXIiLD/QiE5YVgqMc47eiqvFTqifleskPayiDaF1bXN/s+cV0p6BIRHMtsPkeVWE4 JWVk3VB6GZYEoNCI7Zb4ffRBw6v+K/Egv38Y/A== )`
	`hrsa.gov. 60 IN RRSIG ( DNSKEY 7 2 60 20210316152022 20210115142022 22563 hrsa.gov. R+/EavfbLNXnvTSnCQ5K9KyVsdMKfA1K03sS0AFnUkvrc+EZcFRsOZSWxMhIgn4taLaWrtWa798+ GnhCkAeg7McdbUD3laB4cPHwnrp+UtNqFf4aPV8ZjwxbxY5cR/eZ1KUDqGWfL1VuEYIlvsJx3DZu pg6q3dbzfBESqBJ0bNhN1zFCOqyA6nC0t0zy1psfEut8Lc3LhDDI/Ayh9gx4DAwTXdOuFkZLy1Qs bbU7ra635Iyla8zOuNSDvhImVDxPSlVeJpxgFFmHkTjX682WkzzQdImxpTDeKtqcYYFp6Cd6NJS5 NSXGkK5A1cSZChQWhu22bnTlUi69pWULcwNsdQ== )`
	RRSIG=842 and DNSKEY=842 verifies the DNSKEY RRset
	RRSIG=22563 and DNSKEY=22563/SEP verifies the DNSKEY RRset
	DNSKEY=842 is now in the chain-of-trust
	Query to ns.nih.GOV for HRSA.GOV/A
	Received 349 bytes from 128.231.128.251
	;; Answer received from 128.231.128.251 (349 bytes) ;; HEADER SECTION ;; id = 51653 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HRSA.GOV. IN A ;; ANSWER SECTION (2 records) HRSA.GOV. 300 IN A 165.112.137.241 HRSA.GOV. 300 IN RRSIG ( A 7 2 300 20210316152022 20210115142022 842 hrsa.gov. F3desoqkqYdWWxzn/b/WAD212e3/5jAjNhY2o1sYe2cE+2DgwpdB4lKWI6RVR8SEFeCcr6K19iyr 7JWW8V0QpaV3cnjKMPLDUwt3ewdtnF7QzlPnDMph/t1GeGB43zlVqY43pi2htNXJb9II89NCRHMt 1LhtjBStT1RFowPvPmq6nZEbmyl8ZyGWiouJucIPTNoou86vHz22iK5i69Iqf775mQlltULUaPl7 MF5SM0xOo+b7p0/XuSaRi6nUf9a0rWVbWnrdtFlbF6V4bQWGmWcRHDS2l+wkyGLW2rNnY4Tqm8S4 30abE6a7j5KKaMu5/wDpNQwfnxTQcpT3kBlVSw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	HRSA.GOV is authoritative for HRSA.GOV
	Found RRSIG signed by hrsa.gov zone
	Query to ns3.nih.GOV for HRSA.GOV/SOA
	Received 388 bytes from 165.112.4.230
	;; Answer received from 165.112.4.230 (388 bytes) ;; HEADER SECTION ;; id = 47827 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HRSA.GOV. IN SOA ;; ANSWER SECTION (2 records) HRSA.GOV. 38400 IN SOA ( hrsans1.HRSA.GOV. hostmaster.HRSA.GOV. 2005062529 ;serial 10800 ;refresh 3600 ;retry 1728000 ;expire 38400 ;minimum ) HRSA.GOV. 38400 IN RRSIG ( SOA 7 2 38400 20210316152022 20210115142022 842 hrsa.gov. HNYBq2SVyljhLn6FHmyIa08sOnuYjckXqBh0MkNw62taqu4XcKSau8kt4tVOpty6cZvKQJBuzJFS RwF9SZEWqSfbcx+cn7SQR381EQTYkkoIZNTvJgtHzxqXjUM/WTJBnF07WDdJYceFync89Af2LiPs iyQG7CkJYEVekI9a+A6osAiNwC2+IC2KKwUX+zxdtZsDEpT8HMjx83VD6JVwl0lDJvLuHFvui2+j BjdzeDwawB8Ho1p6zQku678G/fHNxmKKsfMHZAcUNWlcb2LJZHuY+iZ2YW3mqX2BqUmwJQYamwIN a95/si3oudNhMF1kn4dtSJlcyA6CkZiIE5mucg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns.nih.GOV for HRSA.GOV/SOA
	Received 388 bytes from 128.231.128.251
	;; Answer received from 128.231.128.251 (388 bytes) ;; HEADER SECTION ;; id = 48296 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HRSA.GOV. IN SOA ;; ANSWER SECTION (2 records) HRSA.GOV. 38400 IN SOA ( hrsans1.HRSA.GOV. hostmaster.HRSA.GOV. 2005062529 ;serial 10800 ;refresh 3600 ;retry 1728000 ;expire 38400 ;minimum ) HRSA.GOV. 38400 IN RRSIG ( SOA 7 2 38400 20210316152022 20210115142022 842 hrsa.gov. HNYBq2SVyljhLn6FHmyIa08sOnuYjckXqBh0MkNw62taqu4XcKSau8kt4tVOpty6cZvKQJBuzJFS RwF9SZEWqSfbcx+cn7SQR381EQTYkkoIZNTvJgtHzxqXjUM/WTJBnF07WDdJYceFync89Af2LiPs iyQG7CkJYEVekI9a+A6osAiNwC2+IC2KKwUX+zxdtZsDEpT8HMjx83VD6JVwl0lDJvLuHFvui2+j BjdzeDwawB8Ho1p6zQku678G/fHNxmKKsfMHZAcUNWlcb2LJZHuY+iZ2YW3mqX2BqUmwJQYamwIN a95/si3oudNhMF1kn4dtSJlcyA6CkZiIE5mucg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to hrsans1.HRSA.GOV for HRSA.GOV/SOA
	Received 2057 bytes from 165.112.137.239
	;; Answer received from 165.112.137.239 (2057 bytes) ;; HEADER SECTION ;; id = 41913 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HRSA.GOV. IN SOA ;; ANSWER SECTION (2 records) hrsa.gov. 38400 IN SOA ( hrsans1.hrsa.gov. hostmaster.hrsa.gov. 2005062529 ;serial 10800 ;refresh 3600 ;retry 1728000 ;expire 38400 ;minimum ) hrsa.gov. 38400 IN RRSIG ( SOA 7 2 38400 20210316152022 20210115142022 842 hrsa.gov. HNYBq2SVyljhLn6FHmyIa08sOnuYjckXqBh0MkNw62taqu4XcKSau8kt4tVOpty6cZvKQJBuzJFS RwF9SZEWqSfbcx+cn7SQR381EQTYkkoIZNTvJgtHzxqXjUM/WTJBnF07WDdJYceFync89Af2LiPs iyQG7CkJYEVekI9a+A6osAiNwC2+IC2KKwUX+zxdtZsDEpT8HMjx83VD6JVwl0lDJvLuHFvui2+j BjdzeDwawB8Ho1p6zQku678G/fHNxmKKsfMHZAcUNWlcb2LJZHuY+iZ2YW3mqX2BqUmwJQYamwIN a95/si3oudNhMF1kn4dtSJlcyA6CkZiIE5mucg== ) ;; AUTHORITY SECTION (6 records) hrsa.gov. 38400 IN NS hrsans1.hrsa.gov. hrsa.gov. 38400 IN NS ns.nih.gov. hrsa.gov. 38400 IN NS ns3.nih.gov. hrsa.gov. 38400 IN NS hrsans2.hrsa.gov. hrsa.gov. 38400 IN NS ns2.nih.gov. hrsa.gov. 38400 IN RRSIG ( NS 7 2 38400 20210316152022 20210115142022 842 hrsa.gov. I3cFi7doqndSycd0WvJl87HkXrYJlYYToeAQfSF8o3AeScEGknUd3wXTy3HCITJXN7SnYbDRh3aj szimzdzlg0jdGi30bhMHaaYqhtev9yGDSV2TWcmqNBjkhQ8dAKGgVBRzD79x2VDQLBNMM6XCPhDr gClZTAC3WEQ8Ox4Fqcp4dt29XSHeRu8bfNlEVOFSN23D5pgThy8mvxbw7FfRTzf8YneZ/LxM8O7U xWZ2ZJBBLoeU/TvfLzb/jSkghXMvrCeOMFv6LtB7G2No1QbZ94iLyeNCHfUbq5xi4wv9E2UtIh+O SwG6VakFhfYn0ltbhAHhDdWYJgzY5PjfKZM25A== ) ;; ADDITIONAL SECTION (9 records) hrsans1.hrsa.gov. 3600 IN A 165.112.137.239 hrsans2.hrsa.gov. 3600 IN A 162.99.248.37 hrsans1.hrsa.gov. 3600 IN AAAA 2607:f220:410:400::ef0 hrsans2.hrsa.gov. 3600 IN AAAA 2607:f220:41c:400::250 hrsans1.hrsa.gov. 3600 IN RRSIG ( A 7 3 3600 20210316152022 20210115142022 842 hrsa.gov. k6/xwPn6rNRJPcRuH6/CdYGY5WQxEE7B8Jm8uqUs11VhNOoPukeU8/9ubHzx7oP3Ti5Zj72unbM1 MYWWjKQg71LWp+rTdOKHEd4YXXtHis8r3EyFkQ0wiF4x9SSoPkQv+QlxHzqV6q8bJel4ItBNvA5I oUAVVyE4ARUj5lf4tDYNW1k6pL5KDI2C0IbQdKPsA9gWEkmITXCB7pzAIfvbze7foRxqJRSZhKZ4 R7Zo2hZBfgSAwSVDfUVyHyCyXCteHeINEMKS8XB9Sfdr4ssFyGvAqS6a38Fm3ll/ZfiEz9K5Led/ IBCeMY2Ck50kbyQ3MYH5X5zB9TG2L/BgPDCqJA== ) hrsans1.hrsa.gov. 3600 IN RRSIG ( AAAA 7 3 3600 20210316152022 20210115142022 842 hrsa.gov. ROqrgEJGN+O14XUtfZEao4rkE24h4poh8rlcRZzSDc7Jk+3j4AlOFxrFx5HSRROxBkbSi4+RqmB9 mnxkdZNLce96OdSDP1X8AW0wkfMaWCMTUNXeUPY89UHn1W/Bstyhyyuo4dMA+7epl2DsdJjy1669 K/iohNc+WhBtxmU+pLt0Bt5fqTaCY6LKmu0mhrp+Gkb5QW3WVA2CakUK13S4DnzHtFkbBVWupZw1 ylvHyi56E+saWjyx9BsvPSZsvpwuqSNlZbhYrB/ZLRSELQ5/gbGwNEb10wOaMur6rhjySkHzW7PI lbCDQvUWT0ch2ufZqI5tqSb7JHKZz0FZ9ch2sw== ) hrsans2.hrsa.gov. 3600 IN RRSIG ( A 7 3 3600 20210316152022 20210115142022 842 hrsa.gov. lhmmdQAN4yImvGhNXHvLhQmtmrpCXL1R/y2veKrbXWijed5RYMW7m+xNV7SqjmqXVW2D8O+f/QeH AJWWSJ//SVXNYxpxBh1itzHsLMW6iAiK8AY+8gowWfRPaO7Z+gl7oVaKZVuHosGp2efYNd/UU/+W jlcYfRYDk05+YxuKHYursGHblEmur1wc1SX/zHW+BAe5+3RGD9UDJXnJ8xP7uy7cRdYrYP20OlGw KzRyppDeY6ocR6Pl/kiuj0fhvVgcC5hBENgDcIZb7H++cFgMJjLRf2Fc/tbEX6kfqTxUkttdUCWd 0oR7u7Isav6ytD9p54Iw1xlNyxwLQC5KIIwuZA== ) hrsans2.hrsa.gov. 3600 IN RRSIG ( AAAA 7 3 3600 20210316152022 20210115142022 842 hrsa.gov. OkxvGGxYv89aqWbms1Eym5jMAomkfs4H177p8cBPds0c+whtZj/0cEJkdxYtPz8vRHcy5x3NRhJD KpLweKMxlpD0GLLjyRbeewr/hCf43NkSTJ2KCGr3x51df36D0SoQTGRy9joCC/CbMp9IPDtw8lfK 2otM9h9qtmSl+xLSbU/j019goxPNW7v1YvHy0AsL+JCGyRyIFgWwcgR1hDuXckqYk/Qsp58wDw4T UKHupnao0yCkeVKlE8azV7ryC/SH9nkKvjw5wFPniHWa+qEJohspF5RbvsbQoopmzeFLYOkyiNBS Njf8hQj7vr8XgmYaC8AMu2v/wcXvYRKLJTpxFQ== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns2.nih.GOV for HRSA.GOV/SOA
	Received 388 bytes from 128.231.64.1
	;; Answer received from 128.231.64.1 (388 bytes) ;; HEADER SECTION ;; id = 32316 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HRSA.GOV. IN SOA ;; ANSWER SECTION (2 records) HRSA.GOV. 38400 IN SOA ( hrsans1.HRSA.GOV. hostmaster.HRSA.GOV. 2005062529 ;serial 10800 ;refresh 3600 ;retry 1728000 ;expire 38400 ;minimum ) HRSA.GOV. 38400 IN RRSIG ( SOA 7 2 38400 20210316152022 20210115142022 842 hrsa.gov. HNYBq2SVyljhLn6FHmyIa08sOnuYjckXqBh0MkNw62taqu4XcKSau8kt4tVOpty6cZvKQJBuzJFS RwF9SZEWqSfbcx+cn7SQR381EQTYkkoIZNTvJgtHzxqXjUM/WTJBnF07WDdJYceFync89Af2LiPs iyQG7CkJYEVekI9a+A6osAiNwC2+IC2KKwUX+zxdtZsDEpT8HMjx83VD6JVwl0lDJvLuHFvui2+j BjdzeDwawB8Ho1p6zQku678G/fHNxmKKsfMHZAcUNWlcb2LJZHuY+iZ2YW3mqX2BqUmwJQYamwIN a95/si3oudNhMF1kn4dtSJlcyA6CkZiIE5mucg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to hrsans2.HRSA.GOV for HRSA.GOV/SOA
	Received 2057 bytes from 162.99.248.37
	;; Answer received from 162.99.248.37 (2057 bytes) ;; HEADER SECTION ;; id = 18127 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HRSA.GOV. IN SOA ;; ANSWER SECTION (2 records) hrsa.gov. 38400 IN SOA ( hrsans1.hrsa.gov. hostmaster.hrsa.gov. 2005062529 ;serial 10800 ;refresh 3600 ;retry 1728000 ;expire 38400 ;minimum ) hrsa.gov. 38400 IN RRSIG ( SOA 7 2 38400 20210316152022 20210115142022 842 hrsa.gov. HNYBq2SVyljhLn6FHmyIa08sOnuYjckXqBh0MkNw62taqu4XcKSau8kt4tVOpty6cZvKQJBuzJFS RwF9SZEWqSfbcx+cn7SQR381EQTYkkoIZNTvJgtHzxqXjUM/WTJBnF07WDdJYceFync89Af2LiPs iyQG7CkJYEVekI9a+A6osAiNwC2+IC2KKwUX+zxdtZsDEpT8HMjx83VD6JVwl0lDJvLuHFvui2+j BjdzeDwawB8Ho1p6zQku678G/fHNxmKKsfMHZAcUNWlcb2LJZHuY+iZ2YW3mqX2BqUmwJQYamwIN a95/si3oudNhMF1kn4dtSJlcyA6CkZiIE5mucg== ) ;; AUTHORITY SECTION (6 records) hrsa.gov. 38400 IN NS ns2.nih.gov. hrsa.gov. 38400 IN NS hrsans2.hrsa.gov. hrsa.gov. 38400 IN NS ns3.nih.gov. hrsa.gov. 38400 IN NS ns.nih.gov. hrsa.gov. 38400 IN NS hrsans1.hrsa.gov. hrsa.gov. 38400 IN RRSIG ( NS 7 2 38400 20210316152022 20210115142022 842 hrsa.gov. I3cFi7doqndSycd0WvJl87HkXrYJlYYToeAQfSF8o3AeScEGknUd3wXTy3HCITJXN7SnYbDRh3aj szimzdzlg0jdGi30bhMHaaYqhtev9yGDSV2TWcmqNBjkhQ8dAKGgVBRzD79x2VDQLBNMM6XCPhDr gClZTAC3WEQ8Ox4Fqcp4dt29XSHeRu8bfNlEVOFSN23D5pgThy8mvxbw7FfRTzf8YneZ/LxM8O7U xWZ2ZJBBLoeU/TvfLzb/jSkghXMvrCeOMFv6LtB7G2No1QbZ94iLyeNCHfUbq5xi4wv9E2UtIh+O SwG6VakFhfYn0ltbhAHhDdWYJgzY5PjfKZM25A== ) ;; ADDITIONAL SECTION (9 records) hrsans1.hrsa.gov. 3600 IN A 165.112.137.239 hrsans2.hrsa.gov. 3600 IN A 162.99.248.37 hrsans1.hrsa.gov. 3600 IN AAAA 2607:f220:410:400::ef0 hrsans2.hrsa.gov. 3600 IN AAAA 2607:f220:41c:400::250 hrsans1.hrsa.gov. 3600 IN RRSIG ( A 7 3 3600 20210316152022 20210115142022 842 hrsa.gov. k6/xwPn6rNRJPcRuH6/CdYGY5WQxEE7B8Jm8uqUs11VhNOoPukeU8/9ubHzx7oP3Ti5Zj72unbM1 MYWWjKQg71LWp+rTdOKHEd4YXXtHis8r3EyFkQ0wiF4x9SSoPkQv+QlxHzqV6q8bJel4ItBNvA5I oUAVVyE4ARUj5lf4tDYNW1k6pL5KDI2C0IbQdKPsA9gWEkmITXCB7pzAIfvbze7foRxqJRSZhKZ4 R7Zo2hZBfgSAwSVDfUVyHyCyXCteHeINEMKS8XB9Sfdr4ssFyGvAqS6a38Fm3ll/ZfiEz9K5Led/ IBCeMY2Ck50kbyQ3MYH5X5zB9TG2L/BgPDCqJA== ) hrsans1.hrsa.gov. 3600 IN RRSIG ( AAAA 7 3 3600 20210316152022 20210115142022 842 hrsa.gov. ROqrgEJGN+O14XUtfZEao4rkE24h4poh8rlcRZzSDc7Jk+3j4AlOFxrFx5HSRROxBkbSi4+RqmB9 mnxkdZNLce96OdSDP1X8AW0wkfMaWCMTUNXeUPY89UHn1W/Bstyhyyuo4dMA+7epl2DsdJjy1669 K/iohNc+WhBtxmU+pLt0Bt5fqTaCY6LKmu0mhrp+Gkb5QW3WVA2CakUK13S4DnzHtFkbBVWupZw1 ylvHyi56E+saWjyx9BsvPSZsvpwuqSNlZbhYrB/ZLRSELQ5/gbGwNEb10wOaMur6rhjySkHzW7PI lbCDQvUWT0ch2ufZqI5tqSb7JHKZz0FZ9ch2sw== ) hrsans2.hrsa.gov. 3600 IN RRSIG ( A 7 3 3600 20210316152022 20210115142022 842 hrsa.gov. lhmmdQAN4yImvGhNXHvLhQmtmrpCXL1R/y2veKrbXWijed5RYMW7m+xNV7SqjmqXVW2D8O+f/QeH AJWWSJ//SVXNYxpxBh1itzHsLMW6iAiK8AY+8gowWfRPaO7Z+gl7oVaKZVuHosGp2efYNd/UU/+W jlcYfRYDk05+YxuKHYursGHblEmur1wc1SX/zHW+BAe5+3RGD9UDJXnJ8xP7uy7cRdYrYP20OlGw KzRyppDeY6ocR6Pl/kiuj0fhvVgcC5hBENgDcIZb7H++cFgMJjLRf2Fc/tbEX6kfqTxUkttdUCWd 0oR7u7Isav6ytD9p54Iw1xlNyxwLQC5KIIwuZA== ) hrsans2.hrsa.gov. 3600 IN RRSIG ( AAAA 7 3 3600 20210316152022 20210115142022 842 hrsa.gov. OkxvGGxYv89aqWbms1Eym5jMAomkfs4H177p8cBPds0c+whtZj/0cEJkdxYtPz8vRHcy5x3NRhJD KpLweKMxlpD0GLLjyRbeewr/hCf43NkSTJ2KCGr3x51df36D0SoQTGRy9joCC/CbMp9IPDtw8lfK 2otM9h9qtmSl+xLSbU/j019goxPNW7v1YvHy0AsL+JCGyRyIFgWwcgR1hDuXckqYk/Qsp58wDw4T UKHupnao0yCkeVKlE8azV7ryC/SH9nkKvjw5wFPniHWa+qEJohspF5RbvsbQoopmzeFLYOkyiNBS Njf8hQj7vr8XgmYaC8AMu2v/wcXvYRKLJTpxFQ== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns.nih.GOV for HRSA.GOV/A
	Received 349 bytes from 128.231.128.251
	;; Answer received from 128.231.128.251 (349 bytes) ;; HEADER SECTION ;; id = 34185 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HRSA.GOV. IN A ;; ANSWER SECTION (2 records) HRSA.GOV. 300 IN A 165.112.137.241 HRSA.GOV. 300 IN RRSIG ( A 7 2 300 20210316152022 20210115142022 842 hrsa.gov. F3desoqkqYdWWxzn/b/WAD212e3/5jAjNhY2o1sYe2cE+2DgwpdB4lKWI6RVR8SEFeCcr6K19iyr 7JWW8V0QpaV3cnjKMPLDUwt3ewdtnF7QzlPnDMph/t1GeGB43zlVqY43pi2htNXJb9II89NCRHMt 1LhtjBStT1RFowPvPmq6nZEbmyl8ZyGWiouJucIPTNoou86vHz22iK5i69Iqf775mQlltULUaPl7 MF5SM0xOo+b7p0/XuSaRi6nUf9a0rWVbWnrdtFlbF6V4bQWGmWcRHDS2l+wkyGLW2rNnY4Tqm8S4 30abE6a7j5KKaMu5/wDpNQwfnxTQcpT3kBlVSw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	HRSA.GOV A RR has value 165.112.137.241
	Found 1 RRSIGs over A RRset
	`HRSA.GOV. 300 IN RRSIG ( A 7 2 300 20210316152022 20210115142022 842 hrsa.gov. F3desoqkqYdWWxzn/b/WAD212e3/5jAjNhY2o1sYe2cE+2DgwpdB4lKWI6RVR8SEFeCcr6K19iyr 7JWW8V0QpaV3cnjKMPLDUwt3ewdtnF7QzlPnDMph/t1GeGB43zlVqY43pi2htNXJb9II89NCRHMt 1LhtjBStT1RFowPvPmq6nZEbmyl8ZyGWiouJucIPTNoou86vHz22iK5i69Iqf775mQlltULUaPl7 MF5SM0xOo+b7p0/XuSaRi6nUf9a0rWVbWnrdtFlbF6V4bQWGmWcRHDS2l+wkyGLW2rNnY4Tqm8S4 30abE6a7j5KKaMu5/wDpNQwfnxTQcpT3kBlVSw== )`
	RRSIG=842 and DNSKEY=842 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test HRSA.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: