DNSSEC Analyzer - HRSA.GOV

Domain Name:

Time: 2020-10-28 02:39:54 UTC, NTP stratum 4

Analyzing DNSSEC problems for HRSA.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to k.root-servers.net for ./DNSKEY
	Received 864 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (864 bytes) ;; HEADER SECTION ;; id = 29914 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20201111000000 20201021000000 20326 . UfytpVL3Ka5rmqF/Lm/9frJl/ygXTjW0MEaGgecsmHbmLfTrJF3XAgPS5Tp/xc9TkaDf9HCEzk48 R4cfHOI22Ul9AnyBGZX7FiVfVo0NaseADRwt6G3K9jsMwHMIuVmAMTnvFfR32/+CwMMgmXGhBXdZ JVXR71aARAMKZlSgJK7DlOia8h2yC+RaWK0DvHMLwqyA+uwAeLxixmrtu3Olj2Rzmx2MSNDZZUP9 I+vghq7K0rzK7CYrXiAgY2q5WvwtKjJPw6T/qB8Ojqru/XN1LxSa2zYeITAq58IyijgLr6EupAdA 6HB3iPPfhHGKiwafsmcfcRcds90WfxG7UQFAMg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20201111000000 20201021000000 20326 . UfytpVL3Ka5rmqF/Lm/9frJl/ygXTjW0MEaGgecsmHbmLfTrJF3XAgPS5Tp/xc9TkaDf9HCEzk48 R4cfHOI22Ul9AnyBGZX7FiVfVo0NaseADRwt6G3K9jsMwHMIuVmAMTnvFfR32/+CwMMgmXGhBXdZ JVXR71aARAMKZlSgJK7DlOia8h2yC+RaWK0DvHMLwqyA+uwAeLxixmrtu3Olj2Rzmx2MSNDZZUP9 I+vghq7K0rzK7CYrXiAgY2q5WvwtKjJPw6T/qB8Ojqru/XN1LxSa2zYeITAq58IyijgLr6EupAdA 6HB3iPPfhHGKiwafsmcfcRcds90WfxG7UQFAMg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=26116 is now in the chain-of-trust
	Query to c.root-servers.net for HRSA.GOV/A
	Received 666 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (666 bytes) ;; HEADER SECTION ;; id = 43393 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HRSA.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20201109170000 20201027160000 26116 . 1K7T2spqI3F7oscpV8ZM1NqNAEpQck+D6Dozhwe+i2VlOQfay2ZDug7AVZ0gzFsU6NfPnbeY6C5r qGPEgJHdWHkbCfVuJiNhzljC0xd2AqngSWnBz3oHF1i+A1b1juW/dhXbu2kCHM3pLlNFfwYOhbUL ktAq5dODzSUgUafMUz4HlRtJvay9via9LKvloStKG82cIpVJQTb2w7kGdblWcuVZ6J6jBz+w/QfS phtiCGKlXA8X4B8/2qHNvErR40nyyOZ1ikUja4ImTty0tuMxM/xtChQINKFwDfgpH1XyTMQyI6nq UlIiSQqPNJH5nMoK8Mx/5g3U9yLzQN8ZAYgpDQ== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.root-servers.net for GOV/DNSKEY
	Received 661 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (661 bytes) ;; HEADER SECTION ;; id = 41956 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20201109170000 20201027160000 26116 . 1K7T2spqI3F7oscpV8ZM1NqNAEpQck+D6Dozhwe+i2VlOQfay2ZDug7AVZ0gzFsU6NfPnbeY6C5r qGPEgJHdWHkbCfVuJiNhzljC0xd2AqngSWnBz3oHF1i+A1b1juW/dhXbu2kCHM3pLlNFfwYOhbUL ktAq5dODzSUgUafMUz4HlRtJvay9via9LKvloStKG82cIpVJQTb2w7kGdblWcuVZ6J6jBz+w/QfS phtiCGKlXA8X4B8/2qHNvErR40nyyOZ1ikUja4ImTty0tuMxM/xtChQINKFwDfgpH1XyTMQyI6nq UlIiSQqPNJH5nMoK8Mx/5g3U9yLzQN8ZAYgpDQ== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to a.root-servers.net for GOV/DS
	Received 403 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (403 bytes) ;; HEADER SECTION ;; id = 33240 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20201109170000 20201027160000 26116 . 1K7T2spqI3F7oscpV8ZM1NqNAEpQck+D6Dozhwe+i2VlOQfay2ZDug7AVZ0gzFsU6NfPnbeY6C5r qGPEgJHdWHkbCfVuJiNhzljC0xd2AqngSWnBz3oHF1i+A1b1juW/dhXbu2kCHM3pLlNFfwYOhbUL ktAq5dODzSUgUafMUz4HlRtJvay9via9LKvloStKG82cIpVJQTb2w7kGdblWcuVZ6J6jBz+w/QfS phtiCGKlXA8X4B8/2qHNvErR40nyyOZ1ikUja4ImTty0tuMxM/xtChQINKFwDfgpH1XyTMQyI6nq UlIiSQqPNJH5nMoK8Mx/5g3U9yLzQN8ZAYgpDQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20201109170000 20201027160000 26116 . 1K7T2spqI3F7oscpV8ZM1NqNAEpQck+D6Dozhwe+i2VlOQfay2ZDug7AVZ0gzFsU6NfPnbeY6C5r qGPEgJHdWHkbCfVuJiNhzljC0xd2AqngSWnBz3oHF1i+A1b1juW/dhXbu2kCHM3pLlNFfwYOhbUL ktAq5dODzSUgUafMUz4HlRtJvay9via9LKvloStKG82cIpVJQTb2w7kGdblWcuVZ6J6jBz+w/QfS phtiCGKlXA8X4B8/2qHNvErR40nyyOZ1ikUja4ImTty0tuMxM/xtChQINKFwDfgpH1XyTMQyI6nq UlIiSQqPNJH5nMoK8Mx/5g3U9yLzQN8ZAYgpDQ== )`
	RRSIG=26116 and DNSKEY=26116 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to b.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (777 bytes) ;; HEADER SECTION ;; id = 59336 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAeFoiC01j4zIdBfR1vxBGp7WmV8q6IgTQ/pvbQJhCd9+sE16txuz6M81FPFkWhTk1nsXR4tI UZLQZpvgme+q3dqWuqtFA2amB99IM9B9iq6kwSrkZNVFv6zav3eP+5BlL/OA9FNFQHXCj5qj2noA j2le7j8umVcc+4zH677ytdtIImoAY45H8wWxVrGR4kxqM54O10fPHXEPu84irfaZGrM= ) ; Key ID = 15489 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20201110190254 20201026185754 7698 gov. JGWvYsY6D/e4gdOBjSbarD335ZzmG8hwXIyjWGtJCISWCfmtoDAyoQ0BSehDq5I2kFmxReDQtHc/ RFZ7cqYe9HQPt81hrWbY78rqAphKpgOwvcjaX08YYKSN5WM66pWfMxPEehhqLyaCSFa1vNGMO2Nu vez1zeAr1TL6BBTl5ET1KrQzEtsSEBqCVnmk2G89fFUZOF12WQg1Q0dGulD9eAXls5nMI1rIB9xQ vBV9ZkOPeNCddN0Ij0ZABYz5IxW4w5HMRHu2atApBdFLJ95txt7fkr088gb9WrGQDd4NcOIAQuyf IaOns8+4bMCEnNvDEJrHWlr+EaJq+zNbeDYvXw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAeFoiC01j4zIdBfR1vxBGp7WmV8q6IgTQ/pvbQJhCd9+sE16txuz6M81FPFkWhTk1nsXR4tI UZLQZpvgme+q3dqWuqtFA2amB99IM9B9iq6kwSrkZNVFv6zav3eP+5BlL/OA9FNFQHXCj5qj2noA j2le7j8umVcc+4zH677ytdtIImoAY45H8wWxVrGR4kxqM54O10fPHXEPu84irfaZGrM= ) ; Key ID = 15489`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20201110190254 20201026185754 7698 gov. JGWvYsY6D/e4gdOBjSbarD335ZzmG8hwXIyjWGtJCISWCfmtoDAyoQ0BSehDq5I2kFmxReDQtHc/ RFZ7cqYe9HQPt81hrWbY78rqAphKpgOwvcjaX08YYKSN5WM66pWfMxPEehhqLyaCSFa1vNGMO2Nu vez1zeAr1TL6BBTl5ET1KrQzEtsSEBqCVnmk2G89fFUZOF12WQg1Q0dGulD9eAXls5nMI1rIB9xQ vBV9ZkOPeNCddN0Ij0ZABYz5IxW4w5HMRHu2atApBdFLJ95txt7fkr088gb9WrGQDd4NcOIAQuyf IaOns8+4bMCEnNvDEJrHWlr+EaJq+zNbeDYvXw== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=15489 is now in the chain-of-trust
	Query to d.gov-servers.net for HRSA.GOV/A
	Received 637 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (637 bytes) ;; HEADER SECTION ;; id = 26900 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HRSA.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) HRSA.GOV. 86400 IN NS hrsans1.HRSA.GOV. HRSA.GOV. 86400 IN NS ns.nih.GOV. HRSA.GOV. 86400 IN NS hrsans2.HRSA.GOV. HRSA.GOV. 86400 IN NS ns3.nih.GOV. HRSA.GOV. 86400 IN NS ns2.nih.GOV. HRSA.GOV. 3600 IN DS 22563 7 1 842ad656767cef16232a41b900c601fa0d85aaed HRSA.GOV. 3600 IN DS ( 22563 7 2 8736d2705d7e75b3cc5d781b7d3ee64c73b2fcc189a2a5e70c50a26d8e1e4f3d ) HRSA.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201104011008 20201028011008 15489 gov. 0sPdgWnFEzJZ4Wyq6huU5QHgq79qQrWsd1r11DYwSEd0sxfGIhUGzK+/CteagrXphpTHFAxEU4Uu n4kyM2CV9Apd6T78GjxBv7gSivBh/btINDf9bxK+0OXg9jXmj5YhmBPjfDi5kthuvl0GGE/xm5U8 ArDqqAFU3mPGgzjRnVK2jbQI+oyea8OoGHcLLdnbbc7Pewt4xt4++2O1ndyeQA== ) ;; ADDITIONAL SECTION (11 records) hrsans1.HRSA.GOV. 86400 IN A 165.112.137.239 hrsans1.HRSA.GOV. 86400 IN AAAA 2607:f220:410:400::ef0 ns.nih.GOV. 86400 IN A 128.231.128.251 ns.nih.GOV. 86400 IN AAAA 2607:f220:404:101::80e7:80fb hrsans2.HRSA.GOV. 86400 IN A 162.99.248.37 hrsans2.HRSA.GOV. 86400 IN AAAA 2607:f220:41c:400::250 ns3.nih.GOV. 86400 IN A 165.112.4.230 ns3.nih.GOV. 86400 IN AAAA 2607:f220:402:1801::a570:4e6 ns2.nih.GOV. 86400 IN A 128.231.64.1 ns2.nih.GOV. 86400 IN AAAA 2607:f220:418:4101::80e7:401 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.gov-servers.net for HRSA.GOV/DNSKEY
	Received 637 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (637 bytes) ;; HEADER SECTION ;; id = 47511 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HRSA.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) HRSA.GOV. 86400 IN NS hrsans1.HRSA.GOV. HRSA.GOV. 86400 IN NS ns.nih.GOV. HRSA.GOV. 86400 IN NS hrsans2.HRSA.GOV. HRSA.GOV. 86400 IN NS ns3.nih.GOV. HRSA.GOV. 86400 IN NS ns2.nih.GOV. HRSA.GOV. 3600 IN DS 22563 7 1 842ad656767cef16232a41b900c601fa0d85aaed HRSA.GOV. 3600 IN DS ( 22563 7 2 8736d2705d7e75b3cc5d781b7d3ee64c73b2fcc189a2a5e70c50a26d8e1e4f3d ) HRSA.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201104011008 20201028011008 15489 gov. 0sPdgWnFEzJZ4Wyq6huU5QHgq79qQrWsd1r11DYwSEd0sxfGIhUGzK+/CteagrXphpTHFAxEU4Uu n4kyM2CV9Apd6T78GjxBv7gSivBh/btINDf9bxK+0OXg9jXmj5YhmBPjfDi5kthuvl0GGE/xm5U8 ArDqqAFU3mPGgzjRnVK2jbQI+oyea8OoGHcLLdnbbc7Pewt4xt4++2O1ndyeQA== ) ;; ADDITIONAL SECTION (11 records) hrsans1.HRSA.GOV. 86400 IN A 165.112.137.239 hrsans1.HRSA.GOV. 86400 IN AAAA 2607:f220:410:400::ef0 ns.nih.GOV. 86400 IN A 128.231.128.251 ns.nih.GOV. 86400 IN AAAA 2607:f220:404:101::80e7:80fb hrsans2.HRSA.GOV. 86400 IN A 162.99.248.37 hrsans2.HRSA.GOV. 86400 IN AAAA 2607:f220:41c:400::250 ns3.nih.GOV. 86400 IN A 165.112.4.230 ns3.nih.GOV. 86400 IN AAAA 2607:f220:402:1801::a570:4e6 ns2.nih.GOV. 86400 IN A 128.231.64.1 ns2.nih.GOV. 86400 IN AAAA 2607:f220:418:4101::80e7:401 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone HRSA.GOV

HRSA.GOV

	Checking DS between GOV and HRSA.GOV
	Query to c.gov-servers.net for HRSA.GOV/DS
	Received 316 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (316 bytes) ;; HEADER SECTION ;; id = 58037 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HRSA.GOV. IN DS ;; ANSWER SECTION (3 records) HRSA.GOV. 3600 IN DS 22563 7 1 842ad656767cef16232a41b900c601fa0d85aaed HRSA.GOV. 3600 IN DS ( 22563 7 2 8736d2705d7e75b3cc5d781b7d3ee64c73b2fcc189a2a5e70c50a26d8e1e4f3d ) HRSA.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201104011008 20201028011008 15489 gov. 0sPdgWnFEzJZ4Wyq6huU5QHgq79qQrWsd1r11DYwSEd0sxfGIhUGzK+/CteagrXphpTHFAxEU4Uu n4kyM2CV9Apd6T78GjxBv7gSivBh/btINDf9bxK+0OXg9jXmj5YhmBPjfDi5kthuvl0GGE/xm5U8 ArDqqAFU3mPGgzjRnVK2jbQI+oyea8OoGHcLLdnbbc7Pewt4xt4++2O1ndyeQA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for HRSA.GOV in the GOV zone
	DS=22563/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=22563/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`HRSA.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201104011008 20201028011008 15489 gov. 0sPdgWnFEzJZ4Wyq6huU5QHgq79qQrWsd1r11DYwSEd0sxfGIhUGzK+/CteagrXphpTHFAxEU4Uu n4kyM2CV9Apd6T78GjxBv7gSivBh/btINDf9bxK+0OXg9jXmj5YhmBPjfDi5kthuvl0GGE/xm5U8 ArDqqAFU3mPGgzjRnVK2jbQI+oyea8OoGHcLLdnbbc7Pewt4xt4++2O1ndyeQA== )`
	RRSIG=15489 and DNSKEY=15489 verifies the DS RRset
	DS=22563/SHA-1 is now in the chain-of-trust
	`HRSA.GOV. 3600 IN DS 22563 7 1 842ad656767cef16232a41b900c601fa0d85aaed`
	`HRSA.GOV. 3600 IN DS ( 22563 7 2 8736d2705d7e75b3cc5d781b7d3ee64c73b2fcc189a2a5e70c50a26d8e1e4f3d )`
	Query to ns2.nih.GOV for HRSA.GOV/DNSKEY
	Received 1181 bytes from 128.231.64.1
	;; Answer received from 128.231.64.1 (1181 bytes) ;; HEADER SECTION ;; id = 14266 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HRSA.GOV. IN DNSKEY ;; ANSWER SECTION (4 records) HRSA.GOV. 60 IN DNSKEY ( 256 3 7 AwEAAc35qzGmh4LaomlAg2QJ4PhfeeZv20ujUFZ/Zd3VDTauijwMFf7UkO1TqX7rzAbSHEW2DRzR UoeLN94gXFOmhYYqBaxoxa2NbVyeJiEmgwDyV4ZAY15WMQNxdNpU5XvEb2DxGXaoCRHRmWNTo8Q9 ZHuLp0H4CiKSrBWU/EHDhVYB1blzBeKjnxZPtvBU6tHDufk6Y2ifn+D4Sh3g2UZabRYOP9NyzYRq Rn/57iQEA+JSEPsxXg5rTYTyn+9Lhdp6KjbT4jRvz1x2MTFPqSGmBTP1ePbpMeKYiZ7lSc9cI4Cm MUIPYRehra6Iue3+gPZAXENRy406/p5Gkk5Oy4vJYYk= ) ; Key ID = 842 HRSA.GOV. 60 IN DNSKEY ( 257 3 7 AwEAAfO96uOkMkgOEtRIfd7QqLOrTlEYaymYxsM7rPz3Nhm0wzv4FH9rou7Pe2irHa9FDcfQeLUB /1g0AKtW8rjJ4jxshldm4WqL/fkLD6TYOEWpdAb3bArEkvop3Nr9zcEIdt/6RWtBu5x3rzMZ3dQe fSrgNwkdzHrscdIIQwMAa3Y4SKIgZqJEDg2Sc+3oAIB37NNODHDbgS49G0PInJk1GzLtV1UMdpFj 8Poa5OBalYLQROc4zAGB+BpGB1hB3EvfdXMsmauj+q87wGbAoG+m3XyT9KR3+tWXYzcrI6buatKb RUFO9UfU5dM7a47/JhgnBZqCaQb19LPIIILzy30+KG8= ) ; Key ID = 22563 HRSA.GOV. 60 IN RRSIG ( DNSKEY 7 2 60 20201221220024 20201022210024 842 hrsa.gov. E3VlhBfhi1W2USElW9lhAw1b6s5v7oIOFSp/xlGZvCtHssB7BZlWZ02dTyvmFE0LPPmDwV0KIqCc 1lcX1jFUVwAIr1TuyfHRfIOGN72Bc9J/0XM92aDuws7KzmgJehPRaBypS2t4zOfqhLV1m7r04yDV 6fZD8yUZtQR2W983+1Azfww1fJHBYFIR/gxPUFZubMjDpm/ASelU1/R6C9eHoM/DUy45955v/qID ov+IGKNDO7XWoCcJjRnT+IknYHT47kBbnWksy6+vjBIEtShgvVBc/80i4I0aDTbs/2kbITMzeKeC bHnMorEFkuXq2+sljpCDxi/rXpb0h7iuhqaDCw== ) hrsa.gov. 60 IN RRSIG ( DNSKEY 7 2 60 20201221220024 20201022210024 22563 hrsa.gov. vvPHVUcweOX3tMX+kT8YlnUZVrGRFyrvYoOaNnXEpQJKjMuUlMeJnB8a5wOssdUYa0CyQqUGkSJI 4SiKV78i2CIyBZ0i6ZhYRkkoniV+ae5bawYoCItRGANjhUe7Bkn+hMFUr2msbIjE8Zd6/hE94Yf9 PPao+l+o0GCevbJVm8YR+qZ1zYtUzaDA6qPkUo0ttLp22JEbWsEsh9QTTOrLICpfXfBoP3FalzzL +0ZwbtqKkL692ck4uoLR1slOOuN0+xfqtTmy0GJDcZnlbc9J17LnjV52Ib40IxT3sWr/T0dev1ky j7Hh64+rJLB9MSKpT0J1YASXO/d/V/GWxgY71g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for HRSA.GOV
	`HRSA.GOV. 60 IN DNSKEY ( 256 3 7 AwEAAc35qzGmh4LaomlAg2QJ4PhfeeZv20ujUFZ/Zd3VDTauijwMFf7UkO1TqX7rzAbSHEW2DRzR UoeLN94gXFOmhYYqBaxoxa2NbVyeJiEmgwDyV4ZAY15WMQNxdNpU5XvEb2DxGXaoCRHRmWNTo8Q9 ZHuLp0H4CiKSrBWU/EHDhVYB1blzBeKjnxZPtvBU6tHDufk6Y2ifn+D4Sh3g2UZabRYOP9NyzYRq Rn/57iQEA+JSEPsxXg5rTYTyn+9Lhdp6KjbT4jRvz1x2MTFPqSGmBTP1ePbpMeKYiZ7lSc9cI4Cm MUIPYRehra6Iue3+gPZAXENRy406/p5Gkk5Oy4vJYYk= ) ; Key ID = 842`
	`HRSA.GOV. 60 IN DNSKEY ( 257 3 7 AwEAAfO96uOkMkgOEtRIfd7QqLOrTlEYaymYxsM7rPz3Nhm0wzv4FH9rou7Pe2irHa9FDcfQeLUB /1g0AKtW8rjJ4jxshldm4WqL/fkLD6TYOEWpdAb3bArEkvop3Nr9zcEIdt/6RWtBu5x3rzMZ3dQe fSrgNwkdzHrscdIIQwMAa3Y4SKIgZqJEDg2Sc+3oAIB37NNODHDbgS49G0PInJk1GzLtV1UMdpFj 8Poa5OBalYLQROc4zAGB+BpGB1hB3EvfdXMsmauj+q87wGbAoG+m3XyT9KR3+tWXYzcrI6buatKb RUFO9UfU5dM7a47/JhgnBZqCaQb19LPIIILzy30+KG8= ) ; Key ID = 22563`
	DNSKEY=22563/SEP is now in the chain-of-trust
	DS=22563/SHA-1 verifies DNSKEY=22563/SEP
	DS=22563/SHA-256 verifies DNSKEY=22563/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`HRSA.GOV. 60 IN RRSIG ( DNSKEY 7 2 60 20201221220024 20201022210024 842 hrsa.gov. E3VlhBfhi1W2USElW9lhAw1b6s5v7oIOFSp/xlGZvCtHssB7BZlWZ02dTyvmFE0LPPmDwV0KIqCc 1lcX1jFUVwAIr1TuyfHRfIOGN72Bc9J/0XM92aDuws7KzmgJehPRaBypS2t4zOfqhLV1m7r04yDV 6fZD8yUZtQR2W983+1Azfww1fJHBYFIR/gxPUFZubMjDpm/ASelU1/R6C9eHoM/DUy45955v/qID ov+IGKNDO7XWoCcJjRnT+IknYHT47kBbnWksy6+vjBIEtShgvVBc/80i4I0aDTbs/2kbITMzeKeC bHnMorEFkuXq2+sljpCDxi/rXpb0h7iuhqaDCw== )`
	`hrsa.gov. 60 IN RRSIG ( DNSKEY 7 2 60 20201221220024 20201022210024 22563 hrsa.gov. vvPHVUcweOX3tMX+kT8YlnUZVrGRFyrvYoOaNnXEpQJKjMuUlMeJnB8a5wOssdUYa0CyQqUGkSJI 4SiKV78i2CIyBZ0i6ZhYRkkoniV+ae5bawYoCItRGANjhUe7Bkn+hMFUr2msbIjE8Zd6/hE94Yf9 PPao+l+o0GCevbJVm8YR+qZ1zYtUzaDA6qPkUo0ttLp22JEbWsEsh9QTTOrLICpfXfBoP3FalzzL +0ZwbtqKkL692ck4uoLR1slOOuN0+xfqtTmy0GJDcZnlbc9J17LnjV52Ib40IxT3sWr/T0dev1ky j7Hh64+rJLB9MSKpT0J1YASXO/d/V/GWxgY71g== )`
	RRSIG=842 and DNSKEY=842 verifies the DNSKEY RRset
	RRSIG=22563 and DNSKEY=22563/SEP verifies the DNSKEY RRset
	DNSKEY=842 is now in the chain-of-trust
	Query to ns2.nih.GOV for HRSA.GOV/A
	Received 349 bytes from 128.231.64.1
	;; Answer received from 128.231.64.1 (349 bytes) ;; HEADER SECTION ;; id = 52711 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HRSA.GOV. IN A ;; ANSWER SECTION (2 records) HRSA.GOV. 300 IN A 165.112.137.241 HRSA.GOV. 300 IN RRSIG ( A 7 2 300 20201221220024 20201022210024 842 hrsa.gov. hZfe+nqXWwixtWIWyI6SfAecDy4PssC7m7iAZWBcsyCpuowvNHVbVmwwK2ft3gbyZTS1nL3Jei30 mSIqAE86ITLFa/cU1OSLrukyk8fx3LZjqM7uWFjM0bLpDnEugkBXtb/HX18Q0nXNpvtUCM9fb7WU /1y8E24Jpxye3Aj8aqZFn6iSKpp/WTz3Es8zT9NqllB0FXqlHu9FEvJCK4BhQzN5WR6JV0KWuK0I nI82LI45mROMW66vcCgx7IgESViIL2FRvorbU1flEQz7rRPtuTtkbJAWQBiBpHzl8MI77S38S+kH Dy7vO06PS0U9qcWCrZJVQp18Z6j6p3PRAN0tpQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	HRSA.GOV is authoritative for HRSA.GOV
	Found RRSIG signed by hrsa.gov zone
	Query to ns3.nih.GOV for HRSA.GOV/SOA
	Received 388 bytes from 165.112.4.230
	;; Answer received from 165.112.4.230 (388 bytes) ;; HEADER SECTION ;; id = 6953 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HRSA.GOV. IN SOA ;; ANSWER SECTION (2 records) HRSA.GOV. 38400 IN SOA ( hrsans1.HRSA.GOV. hostmaster.HRSA.GOV. 2005062512 ;serial 10800 ;refresh 3600 ;retry 1728000 ;expire 38400 ;minimum ) HRSA.GOV. 38400 IN RRSIG ( SOA 7 2 38400 20201221220024 20201022210024 842 hrsa.gov. SsM5aPSGkDWfLTqqMcFOEDr+VONhQEDTpKqYIAqfWKS7ctwPbFnCdT4KcLDLxjSwoNcsNsDTKzuP OAm5mT0szfOAxBFXvs1JbqbwAG2qh1c2aflSynXMUmeXLSq190yUXa/xb9msNF398oZEGKBdz90E 7NOhEuGHRUEO3m2XHW5Q+BDUkMak2+xYHIUTxbnNylCEbVSCn3QKY8ntbwtxbqK12pB45PboDaq4 f4risI+Xyi0Tj/dZHE3ki5BKFnsAjj7IP7ATnSQ14avPyp02iLpX487s2YHx44oLBqXut0PckN0O Laosuj7zBpA7R0KqdukYXrJZ4gTlhHSoaTiNrg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns.nih.GOV for HRSA.GOV/SOA
	Received 388 bytes from 128.231.128.251
	;; Answer received from 128.231.128.251 (388 bytes) ;; HEADER SECTION ;; id = 55280 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HRSA.GOV. IN SOA ;; ANSWER SECTION (2 records) HRSA.GOV. 38400 IN SOA ( hrsans1.HRSA.GOV. hostmaster.HRSA.GOV. 2005062512 ;serial 10800 ;refresh 3600 ;retry 1728000 ;expire 38400 ;minimum ) HRSA.GOV. 38400 IN RRSIG ( SOA 7 2 38400 20201221220024 20201022210024 842 hrsa.gov. SsM5aPSGkDWfLTqqMcFOEDr+VONhQEDTpKqYIAqfWKS7ctwPbFnCdT4KcLDLxjSwoNcsNsDTKzuP OAm5mT0szfOAxBFXvs1JbqbwAG2qh1c2aflSynXMUmeXLSq190yUXa/xb9msNF398oZEGKBdz90E 7NOhEuGHRUEO3m2XHW5Q+BDUkMak2+xYHIUTxbnNylCEbVSCn3QKY8ntbwtxbqK12pB45PboDaq4 f4risI+Xyi0Tj/dZHE3ki5BKFnsAjj7IP7ATnSQ14avPyp02iLpX487s2YHx44oLBqXut0PckN0O Laosuj7zBpA7R0KqdukYXrJZ4gTlhHSoaTiNrg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to hrsans1.HRSA.GOV for HRSA.GOV/SOA
	Received 2057 bytes from 165.112.137.239
	;; Answer received from 165.112.137.239 (2057 bytes) ;; HEADER SECTION ;; id = 65335 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HRSA.GOV. IN SOA ;; ANSWER SECTION (2 records) hrsa.gov. 38400 IN SOA ( hrsans1.hrsa.gov. hostmaster.hrsa.gov. 2005062512 ;serial 10800 ;refresh 3600 ;retry 1728000 ;expire 38400 ;minimum ) hrsa.gov. 38400 IN RRSIG ( SOA 7 2 38400 20201221220024 20201022210024 842 hrsa.gov. SsM5aPSGkDWfLTqqMcFOEDr+VONhQEDTpKqYIAqfWKS7ctwPbFnCdT4KcLDLxjSwoNcsNsDTKzuP OAm5mT0szfOAxBFXvs1JbqbwAG2qh1c2aflSynXMUmeXLSq190yUXa/xb9msNF398oZEGKBdz90E 7NOhEuGHRUEO3m2XHW5Q+BDUkMak2+xYHIUTxbnNylCEbVSCn3QKY8ntbwtxbqK12pB45PboDaq4 f4risI+Xyi0Tj/dZHE3ki5BKFnsAjj7IP7ATnSQ14avPyp02iLpX487s2YHx44oLBqXut0PckN0O Laosuj7zBpA7R0KqdukYXrJZ4gTlhHSoaTiNrg== ) ;; AUTHORITY SECTION (6 records) hrsa.gov. 38400 IN NS ns3.nih.gov. hrsa.gov. 38400 IN NS hrsans2.hrsa.gov. hrsa.gov. 38400 IN NS hrsans1.hrsa.gov. hrsa.gov. 38400 IN NS ns2.nih.gov. hrsa.gov. 38400 IN NS ns.nih.gov. hrsa.gov. 38400 IN RRSIG ( NS 7 2 38400 20201221220024 20201022210024 842 hrsa.gov. tPHh74rw1E+VXdT6dCFQfkeffB0dKsRI6xFJbVyzWJdoMKx3dXJoK8qD4JPtk4lssfqD6HeCqOz+ LFmdIRQRzw49PALOl32sM+IjApLDa86QuKp1gFnytOjUwzx03sAk9OQyJiJ0yjScn+dY6kOaZz4l w++d22gmjGU/5/2mBm+Ny+IsVtzNwaoOUI1PtBPxL5lxP4sL32uv6A2srECfP7QBEyWe8H1/oyVt Hd3JAzQNNfRqkpgdt28p+HEY1GgQybRriysWTjGO6lIYjkRkFK8rUVcph6Pzt9BCv7vGFuG5Sf1v YNG2J4FUIjQ4aZdK5ECNTN46SX3SrvREfWjdLw== ) ;; ADDITIONAL SECTION (9 records) hrsans1.hrsa.gov. 3600 IN A 165.112.137.239 hrsans2.hrsa.gov. 3600 IN A 162.99.248.37 hrsans1.hrsa.gov. 3600 IN AAAA 2607:f220:410:400::ef0 hrsans2.hrsa.gov. 3600 IN AAAA 2607:f220:41c:400::250 hrsans1.hrsa.gov. 3600 IN RRSIG ( A 7 3 3600 20201221220024 20201022210024 842 hrsa.gov. P860UnT/XJUI7TZm2p9pd6RGYqrVH7wPveohgR5r/LiLgGSVwWTZKsDjz03N6HO82FFRXmFbOHC4 qtabkupZC5sm4v4eyWUxux74s7TUE0eRphDHPI3ZyACXKUU/c2yVZ2XNwXA1k3vid+OXHNLLBA/j BF8ROhloZBKKA59BAnhNbGKia9llO3HpvKJNDHqZDPEG+FdrC9hre+ts2MQhmjT0Apu306CJKszY P7DwpTcW/HDXN2Z63tl2S04l93rXpPNO0WnBc8d9e62o5qRsDqtkSygyFgujark8jCQ2Sl8MeBOJ Z1vgr8jY6aNoIb92K/jlv1JUfs439DuaSmX6UA== ) hrsans1.hrsa.gov. 3600 IN RRSIG ( AAAA 7 3 3600 20201221220024 20201022210024 842 hrsa.gov. VQ437G0ehV6dRINaaLFQYRPRHETTBxabtd3vSHsgHU7T2uQJ3BYlFeBWGUIxWh94QXaE9B2eCWhr kVAxwOxsRrKFdaqGhetEyuJ0XZEGtAPWGmgri2rizYYv/r6ABZQ/Q/hARWKAGYxRBjXZy/0CREU6 gxOfPKowSd3R8ckCLx5LGTGm1XiwbQNsEtJMbjOV0sQ8+es8l2X6TvwOQ+saDKQkWeaWPwkiCNj7 Hkk9RNzufkAC11JSWBa/Q5pG9hCnu0+qtn6mX08W2bKX6qLmMwg6+/6G3H9qJfN0PJhbHZ1Y62iR xnHNSjK4CmbRuoL/SOm0I1UDFsg0tpstPJfDwA== ) hrsans2.hrsa.gov. 3600 IN RRSIG ( A 7 3 3600 20201221220024 20201022210024 842 hrsa.gov. o27oLAP1m2uTJdLyBam2FRB98eJMv2oAnUKozNQffxuBLhQex0Zxbo3ReM66hFm/qsQJZCoyz/nD HfMxbYR9EHQwxPT2OuUB+MRzyu1bove+GIynhDwcsHoQFIP40f6IpOQfGz10YbYKafNofZjgI/WK abUfuXNq51g+y5M4a0BKFX4L7bM3MZZ0xSy4jZzhsM7V4ZI43SSgxaaXLXXIe2Naxm4kaibD1YNa Y4DMIRIaOjmUZ/TJXE0tLWbsj5Q3d/EtuKZe+gYC5VZrqnPEgN3qwVusJbomqLku4SQfe5CDLjPK mk09XI1ztj7YP728hLpTnimlxTXkmMdNtn3PHw== ) hrsans2.hrsa.gov. 3600 IN RRSIG ( AAAA 7 3 3600 20201221220024 20201022210024 842 hrsa.gov. Q6XeQKVnDlu7o7OUTFIk+HvARA1IXHDAN0c2BZwBhi8xYZwLKUo6vnOzwEq0eoVIYibfobkCXHat dBKZUbHqu6mHapDgXJ7yu/mbVLOiDfkacS6M92DgUed6o0pMfPq0lsndbUl7wxdwd+x1w4OTCHH0 g3F1ThBOncYp/mk9t4FnBm4jkkj6OTAEtbL3vC7Goy3pRRrI8XO9cXXmXrZpaQijSRHw9ZTVcj6j 3kGKw/wE13aggcGf8lO6cBPv1b3RKDUHrEkSDEhoK9hXJG/dmhG4Tlr4jf2xMJIkHhuoSqHMlR+U xYuFmfp9QwG2ZE1DnjatE17wbI8CJGtYqjxnmA== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns2.nih.GOV for HRSA.GOV/SOA
	Received 388 bytes from 128.231.64.1
	;; Answer received from 128.231.64.1 (388 bytes) ;; HEADER SECTION ;; id = 26189 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HRSA.GOV. IN SOA ;; ANSWER SECTION (2 records) HRSA.GOV. 38400 IN SOA ( hrsans1.HRSA.GOV. hostmaster.HRSA.GOV. 2005062512 ;serial 10800 ;refresh 3600 ;retry 1728000 ;expire 38400 ;minimum ) HRSA.GOV. 38400 IN RRSIG ( SOA 7 2 38400 20201221220024 20201022210024 842 hrsa.gov. SsM5aPSGkDWfLTqqMcFOEDr+VONhQEDTpKqYIAqfWKS7ctwPbFnCdT4KcLDLxjSwoNcsNsDTKzuP OAm5mT0szfOAxBFXvs1JbqbwAG2qh1c2aflSynXMUmeXLSq190yUXa/xb9msNF398oZEGKBdz90E 7NOhEuGHRUEO3m2XHW5Q+BDUkMak2+xYHIUTxbnNylCEbVSCn3QKY8ntbwtxbqK12pB45PboDaq4 f4risI+Xyi0Tj/dZHE3ki5BKFnsAjj7IP7ATnSQ14avPyp02iLpX487s2YHx44oLBqXut0PckN0O Laosuj7zBpA7R0KqdukYXrJZ4gTlhHSoaTiNrg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to hrsans2.HRSA.GOV for HRSA.GOV/SOA
	Received 2057 bytes from 162.99.248.37
	;; Answer received from 162.99.248.37 (2057 bytes) ;; HEADER SECTION ;; id = 22430 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HRSA.GOV. IN SOA ;; ANSWER SECTION (2 records) hrsa.gov. 38400 IN SOA ( hrsans1.hrsa.gov. hostmaster.hrsa.gov. 2005062512 ;serial 10800 ;refresh 3600 ;retry 1728000 ;expire 38400 ;minimum ) hrsa.gov. 38400 IN RRSIG ( SOA 7 2 38400 20201221220024 20201022210024 842 hrsa.gov. SsM5aPSGkDWfLTqqMcFOEDr+VONhQEDTpKqYIAqfWKS7ctwPbFnCdT4KcLDLxjSwoNcsNsDTKzuP OAm5mT0szfOAxBFXvs1JbqbwAG2qh1c2aflSynXMUmeXLSq190yUXa/xb9msNF398oZEGKBdz90E 7NOhEuGHRUEO3m2XHW5Q+BDUkMak2+xYHIUTxbnNylCEbVSCn3QKY8ntbwtxbqK12pB45PboDaq4 f4risI+Xyi0Tj/dZHE3ki5BKFnsAjj7IP7ATnSQ14avPyp02iLpX487s2YHx44oLBqXut0PckN0O Laosuj7zBpA7R0KqdukYXrJZ4gTlhHSoaTiNrg== ) ;; AUTHORITY SECTION (6 records) hrsa.gov. 38400 IN NS hrsans1.hrsa.gov. hrsa.gov. 38400 IN NS ns3.nih.gov. hrsa.gov. 38400 IN NS ns2.nih.gov. hrsa.gov. 38400 IN NS ns.nih.gov. hrsa.gov. 38400 IN NS hrsans2.hrsa.gov. hrsa.gov. 38400 IN RRSIG ( NS 7 2 38400 20201221220024 20201022210024 842 hrsa.gov. tPHh74rw1E+VXdT6dCFQfkeffB0dKsRI6xFJbVyzWJdoMKx3dXJoK8qD4JPtk4lssfqD6HeCqOz+ LFmdIRQRzw49PALOl32sM+IjApLDa86QuKp1gFnytOjUwzx03sAk9OQyJiJ0yjScn+dY6kOaZz4l w++d22gmjGU/5/2mBm+Ny+IsVtzNwaoOUI1PtBPxL5lxP4sL32uv6A2srECfP7QBEyWe8H1/oyVt Hd3JAzQNNfRqkpgdt28p+HEY1GgQybRriysWTjGO6lIYjkRkFK8rUVcph6Pzt9BCv7vGFuG5Sf1v YNG2J4FUIjQ4aZdK5ECNTN46SX3SrvREfWjdLw== ) ;; ADDITIONAL SECTION (9 records) hrsans1.hrsa.gov. 3600 IN A 165.112.137.239 hrsans2.hrsa.gov. 3600 IN A 162.99.248.37 hrsans1.hrsa.gov. 3600 IN AAAA 2607:f220:410:400::ef0 hrsans2.hrsa.gov. 3600 IN AAAA 2607:f220:41c:400::250 hrsans1.hrsa.gov. 3600 IN RRSIG ( A 7 3 3600 20201221220024 20201022210024 842 hrsa.gov. P860UnT/XJUI7TZm2p9pd6RGYqrVH7wPveohgR5r/LiLgGSVwWTZKsDjz03N6HO82FFRXmFbOHC4 qtabkupZC5sm4v4eyWUxux74s7TUE0eRphDHPI3ZyACXKUU/c2yVZ2XNwXA1k3vid+OXHNLLBA/j BF8ROhloZBKKA59BAnhNbGKia9llO3HpvKJNDHqZDPEG+FdrC9hre+ts2MQhmjT0Apu306CJKszY P7DwpTcW/HDXN2Z63tl2S04l93rXpPNO0WnBc8d9e62o5qRsDqtkSygyFgujark8jCQ2Sl8MeBOJ Z1vgr8jY6aNoIb92K/jlv1JUfs439DuaSmX6UA== ) hrsans1.hrsa.gov. 3600 IN RRSIG ( AAAA 7 3 3600 20201221220024 20201022210024 842 hrsa.gov. VQ437G0ehV6dRINaaLFQYRPRHETTBxabtd3vSHsgHU7T2uQJ3BYlFeBWGUIxWh94QXaE9B2eCWhr kVAxwOxsRrKFdaqGhetEyuJ0XZEGtAPWGmgri2rizYYv/r6ABZQ/Q/hARWKAGYxRBjXZy/0CREU6 gxOfPKowSd3R8ckCLx5LGTGm1XiwbQNsEtJMbjOV0sQ8+es8l2X6TvwOQ+saDKQkWeaWPwkiCNj7 Hkk9RNzufkAC11JSWBa/Q5pG9hCnu0+qtn6mX08W2bKX6qLmMwg6+/6G3H9qJfN0PJhbHZ1Y62iR xnHNSjK4CmbRuoL/SOm0I1UDFsg0tpstPJfDwA== ) hrsans2.hrsa.gov. 3600 IN RRSIG ( A 7 3 3600 20201221220024 20201022210024 842 hrsa.gov. o27oLAP1m2uTJdLyBam2FRB98eJMv2oAnUKozNQffxuBLhQex0Zxbo3ReM66hFm/qsQJZCoyz/nD HfMxbYR9EHQwxPT2OuUB+MRzyu1bove+GIynhDwcsHoQFIP40f6IpOQfGz10YbYKafNofZjgI/WK abUfuXNq51g+y5M4a0BKFX4L7bM3MZZ0xSy4jZzhsM7V4ZI43SSgxaaXLXXIe2Naxm4kaibD1YNa Y4DMIRIaOjmUZ/TJXE0tLWbsj5Q3d/EtuKZe+gYC5VZrqnPEgN3qwVusJbomqLku4SQfe5CDLjPK mk09XI1ztj7YP728hLpTnimlxTXkmMdNtn3PHw== ) hrsans2.hrsa.gov. 3600 IN RRSIG ( AAAA 7 3 3600 20201221220024 20201022210024 842 hrsa.gov. Q6XeQKVnDlu7o7OUTFIk+HvARA1IXHDAN0c2BZwBhi8xYZwLKUo6vnOzwEq0eoVIYibfobkCXHat dBKZUbHqu6mHapDgXJ7yu/mbVLOiDfkacS6M92DgUed6o0pMfPq0lsndbUl7wxdwd+x1w4OTCHH0 g3F1ThBOncYp/mk9t4FnBm4jkkj6OTAEtbL3vC7Goy3pRRrI8XO9cXXmXrZpaQijSRHw9ZTVcj6j 3kGKw/wE13aggcGf8lO6cBPv1b3RKDUHrEkSDEhoK9hXJG/dmhG4Tlr4jf2xMJIkHhuoSqHMlR+U xYuFmfp9QwG2ZE1DnjatE17wbI8CJGtYqjxnmA== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns2.nih.GOV for HRSA.GOV/A
	Received 349 bytes from 128.231.64.1
	;; Answer received from 128.231.64.1 (349 bytes) ;; HEADER SECTION ;; id = 364 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HRSA.GOV. IN A ;; ANSWER SECTION (2 records) HRSA.GOV. 300 IN A 165.112.137.241 HRSA.GOV. 300 IN RRSIG ( A 7 2 300 20201221220024 20201022210024 842 hrsa.gov. hZfe+nqXWwixtWIWyI6SfAecDy4PssC7m7iAZWBcsyCpuowvNHVbVmwwK2ft3gbyZTS1nL3Jei30 mSIqAE86ITLFa/cU1OSLrukyk8fx3LZjqM7uWFjM0bLpDnEugkBXtb/HX18Q0nXNpvtUCM9fb7WU /1y8E24Jpxye3Aj8aqZFn6iSKpp/WTz3Es8zT9NqllB0FXqlHu9FEvJCK4BhQzN5WR6JV0KWuK0I nI82LI45mROMW66vcCgx7IgESViIL2FRvorbU1flEQz7rRPtuTtkbJAWQBiBpHzl8MI77S38S+kH Dy7vO06PS0U9qcWCrZJVQp18Z6j6p3PRAN0tpQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	HRSA.GOV A RR has value 165.112.137.241
	Found 1 RRSIGs over A RRset
	`HRSA.GOV. 300 IN RRSIG ( A 7 2 300 20201221220024 20201022210024 842 hrsa.gov. hZfe+nqXWwixtWIWyI6SfAecDy4PssC7m7iAZWBcsyCpuowvNHVbVmwwK2ft3gbyZTS1nL3Jei30 mSIqAE86ITLFa/cU1OSLrukyk8fx3LZjqM7uWFjM0bLpDnEugkBXtb/HX18Q0nXNpvtUCM9fb7WU /1y8E24Jpxye3Aj8aqZFn6iSKpp/WTz3Es8zT9NqllB0FXqlHu9FEvJCK4BhQzN5WR6JV0KWuK0I nI82LI45mROMW66vcCgx7IgESViIL2FRvorbU1flEQz7rRPtuTtkbJAWQBiBpHzl8MI77S38S+kH Dy7vO06PS0U9qcWCrZJVQp18Z6j6p3PRAN0tpQ== )`
	RRSIG=842 and DNSKEY=842 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test HRSA.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: