DNSSEC Analyzer - HYDROGEN.GOV

Domain Name:

Time: 2020-04-10 10:45:27 UTC, NTP stratum 4

Analyzing DNSSEC problems for HYDROGEN.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (1139 bytes) ;; HEADER SECTION ;; id = 58830 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAc4qsciJ5MdMUIu4n/pSTsSiU9OCyAanPTe5TcMX4v1hxhpFwiTGQUv3BXT6IAO4litrZKTU aj4vitqHW1+RQsHn3k/gSvt7FwyQwpy0mEnShBgr6RQiGtlBODNY67sTl+W8M/b6SLTAaaDri3BO 5u6wrDs149rMELJAdoVBjmXW+zRH3kZzh3lwyTZsYtk7L+3DYbTiiHq+sRB4F9XoBPAz5Psv4q4E iPq07nW3acbW84zTz3CyQUmQkJT9VB1oUKHz6sNoyccqzcMX4q1GHAYpQ7FAXlKMxidoN1Ay5DWA NgTmgJXzKhcI2nIZoq1x3yq4814O1LQd9QP68gI37+0= ) ; Key ID = 48903 . 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20200422000000 20200401000000 20326 . MYL1CcghvT4i0z7u1GFvZtGlwjU4pNZxjY8pzsZbfaWJvjA6mwQCReH2PcVjvtr7syyUhLlPHj2B xFbbb/YDbU7Fth14eI2YTChuVkrO6xR/IGf5eIYEF4Aw6gJZGp7tIchnf+Ms+pUiaWnXEpMkIZc4 HvsuuJ+HfDcvWAzyB542TsNxW9VKUfprEgX4/oQ5SLIl/HnoRRdZWZRH+GnLJ6eL5kDLrkxg8mHl rqWjC8tXJm6fpQa8Z2KdH6vlSj85z6ALy6TuXOWosC0s2M2dslQCxBm57an45uJZvfLqjn+ZdDi/ v16sPWOI/56QvdbSRHgIXIMOzQ6GBCTneThIhQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAc4qsciJ5MdMUIu4n/pSTsSiU9OCyAanPTe5TcMX4v1hxhpFwiTGQUv3BXT6IAO4litrZKTU aj4vitqHW1+RQsHn3k/gSvt7FwyQwpy0mEnShBgr6RQiGtlBODNY67sTl+W8M/b6SLTAaaDri3BO 5u6wrDs149rMELJAdoVBjmXW+zRH3kZzh3lwyTZsYtk7L+3DYbTiiHq+sRB4F9XoBPAz5Psv4q4E iPq07nW3acbW84zTz3CyQUmQkJT9VB1oUKHz6sNoyccqzcMX4q1GHAYpQ7FAXlKMxidoN1Ay5DWA NgTmgJXzKhcI2nIZoq1x3yq4814O1LQd9QP68gI37+0= ) ; Key ID = 48903`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20200422000000 20200401000000 20326 . MYL1CcghvT4i0z7u1GFvZtGlwjU4pNZxjY8pzsZbfaWJvjA6mwQCReH2PcVjvtr7syyUhLlPHj2B xFbbb/YDbU7Fth14eI2YTChuVkrO6xR/IGf5eIYEF4Aw6gJZGp7tIchnf+Ms+pUiaWnXEpMkIZc4 HvsuuJ+HfDcvWAzyB542TsNxW9VKUfprEgX4/oQ5SLIl/HnoRRdZWZRH+GnLJ6eL5kDLrkxg8mHl rqWjC8tXJm6fpQa8Z2KdH6vlSj85z6ALy6TuXOWosC0s2M2dslQCxBm57an45uJZvfLqjn+ZdDi/ v16sPWOI/56QvdbSRHgIXIMOzQ6GBCTneThIhQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=48903 is now in the chain-of-trust
	DNSKEY=33853 is now in the chain-of-trust
	Query to d.root-servers.net for HYDROGEN.GOV/A
	Received 667 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (667 bytes) ;; HEADER SECTION ;; id = 53058 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; HYDROGEN.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20200423050000 20200410040000 48903 . HiKd1J+8ikdI+JPP/RI7fmdq4xcR6Xn6/nSizf1mxakv5v3/GxpG5Kod9nwuEHbtQ124Tp/Jpik/ 3aP2yASaXjvOpYxmjLIbZc1d5JLlkno7hNcYhIdmq9z+4ra7tA8UcWPHYH8W7woUeIFe/7wwLGoa mCOyOTNNoAPZ0m0f3D1tsjgSWCpAYsdwh7wtszkI+C37aXsVPbqlAsugid0fbdvDdrJrxR5J06h/ LNQquwxUjRy9eyf3EuVVwJvYPJmDXOeDUuf4Ugc9tI7tCI+MkH6PkGc3nFMlCFdV69DGx86xFoGV 2MgA9pspiOnpugM03Gd6k+M6yCjbucjPQfXMZQ== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Query to b.root-servers.net for GOV/DNSKEY
	Received 661 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (661 bytes) ;; HEADER SECTION ;; id = 51778 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20200423050000 20200410040000 48903 . HiKd1J+8ikdI+JPP/RI7fmdq4xcR6Xn6/nSizf1mxakv5v3/GxpG5Kod9nwuEHbtQ124Tp/Jpik/ 3aP2yASaXjvOpYxmjLIbZc1d5JLlkno7hNcYhIdmq9z+4ra7tA8UcWPHYH8W7woUeIFe/7wwLGoa mCOyOTNNoAPZ0m0f3D1tsjgSWCpAYsdwh7wtszkI+C37aXsVPbqlAsugid0fbdvDdrJrxR5J06h/ LNQquwxUjRy9eyf3EuVVwJvYPJmDXOeDUuf4Ugc9tI7tCI+MkH6PkGc3nFMlCFdV69DGx86xFoGV 2MgA9pspiOnpugM03Gd6k+M6yCjbucjPQfXMZQ== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to d.root-servers.net for GOV/DS
	Received 403 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (403 bytes) ;; HEADER SECTION ;; id = 59833 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20200423050000 20200410040000 48903 . HiKd1J+8ikdI+JPP/RI7fmdq4xcR6Xn6/nSizf1mxakv5v3/GxpG5Kod9nwuEHbtQ124Tp/Jpik/ 3aP2yASaXjvOpYxmjLIbZc1d5JLlkno7hNcYhIdmq9z+4ra7tA8UcWPHYH8W7woUeIFe/7wwLGoa mCOyOTNNoAPZ0m0f3D1tsjgSWCpAYsdwh7wtszkI+C37aXsVPbqlAsugid0fbdvDdrJrxR5J06h/ LNQquwxUjRy9eyf3EuVVwJvYPJmDXOeDUuf4Ugc9tI7tCI+MkH6PkGc3nFMlCFdV69DGx86xFoGV 2MgA9pspiOnpugM03Gd6k+M6yCjbucjPQfXMZQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20200423050000 20200410040000 48903 . HiKd1J+8ikdI+JPP/RI7fmdq4xcR6Xn6/nSizf1mxakv5v3/GxpG5Kod9nwuEHbtQ124Tp/Jpik/ 3aP2yASaXjvOpYxmjLIbZc1d5JLlkno7hNcYhIdmq9z+4ra7tA8UcWPHYH8W7woUeIFe/7wwLGoa mCOyOTNNoAPZ0m0f3D1tsjgSWCpAYsdwh7wtszkI+C37aXsVPbqlAsugid0fbdvDdrJrxR5J06h/ LNQquwxUjRy9eyf3EuVVwJvYPJmDXOeDUuf4Ugc9tI7tCI+MkH6PkGc3nFMlCFdV69DGx86xFoGV 2MgA9pspiOnpugM03Gd6k+M6yCjbucjPQfXMZQ== )`
	RRSIG=48903 and DNSKEY=48903 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to b.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (777 bytes) ;; HEADER SECTION ;; id = 25609 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAdccuiuxqTxvRcMVh4o9DCfREPNTe3hGEklbdV+L99lKySyIzskGLJ6XDBrWgBeY7ZRSOWGQ 2eHdQLN61fRyqWpVLpNzqaIz/UmMP74VPBCz4QXRDkG4hDO3uifCDVs8Jex4TrYT+hGNYmprbsrq dVQCgeeHc7UMKI/SjusQ4uTKgJ9CWt02/AgK+zKFi3LCBVDGnUwE2kUOL1b0MWfT0ks= ) ; Key ID = 36558 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200424190254 20200409185754 7698 gov. N8tXGEMHVb0KW3Olwh0MVkm/mWYKJNavMwOyC7RDK3hNR3xMP8JowTkv+0CW8+6kqSG4mZesgrmy Jh/276tjvYtFJ67XdYVWw76XJEiQPS+ZzG3a2cHzOHEh1CZomrx8UDozYRR2k2JLPsrKHcfqLydN YkmEa/ehwjQtwsAN0gHNwwTYOs33gQ39z/qv5hpUe+hsqLy7gYEGQg4+X9X9txVla3de8rm+v37t mDZ0hBO8IANDN6moefu8EeR6lvhqIfdwsmm4fb2h1+KlQEn0GEGl84DZovLNQuQ64v31Ez3UGekS VwZfhkMUBnZfUuzhEBnojHRjYAxZwlEqFnkV9w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAdccuiuxqTxvRcMVh4o9DCfREPNTe3hGEklbdV+L99lKySyIzskGLJ6XDBrWgBeY7ZRSOWGQ 2eHdQLN61fRyqWpVLpNzqaIz/UmMP74VPBCz4QXRDkG4hDO3uifCDVs8Jex4TrYT+hGNYmprbsrq dVQCgeeHc7UMKI/SjusQ4uTKgJ9CWt02/AgK+zKFi3LCBVDGnUwE2kUOL1b0MWfT0ks= ) ; Key ID = 36558`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200424190254 20200409185754 7698 gov. N8tXGEMHVb0KW3Olwh0MVkm/mWYKJNavMwOyC7RDK3hNR3xMP8JowTkv+0CW8+6kqSG4mZesgrmy Jh/276tjvYtFJ67XdYVWw76XJEiQPS+ZzG3a2cHzOHEh1CZomrx8UDozYRR2k2JLPsrKHcfqLydN YkmEa/ehwjQtwsAN0gHNwwTYOs33gQ39z/qv5hpUe+hsqLy7gYEGQg4+X9X9txVla3de8rm+v37t mDZ0hBO8IANDN6moefu8EeR6lvhqIfdwsmm4fb2h1+KlQEn0GEGl84DZovLNQuQ64v31Ez3UGekS VwZfhkMUBnZfUuzhEBnojHRjYAxZwlEqFnkV9w== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=36558 is now in the chain-of-trust
	Query to b.gov-servers.net for HYDROGEN.GOV/A
	Received 481 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (481 bytes) ;; HEADER SECTION ;; id = 52437 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HYDROGEN.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) HYDROGEN.GOV. 86400 IN NS adns1.es.net. HYDROGEN.GOV. 86400 IN NS fulcrum.doe.GOV. HYDROGEN.GOV. 86400 IN NS foxbat.doe.GOV. HYDROGEN.GOV. 3600 IN DS ( 50020 8 2 4758d4e69dc930177ce954ec35c1909b232489b55b0086a5c2283318401fb128 ) HYDROGEN.GOV. 3600 IN DS 50020 8 1 0bebdde53075027c583ebd0075171906cba04058 HYDROGEN.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200417041007 20200410041007 36558 gov. y3Vxn22GO6S+QNLShWTK4oEBYs0vli9jfUmRtZJta6TKfkqIv+O/d7uqxk0HlhICdvspN3OG0J4b LWCfTTMOOpsWMM8omu0D1xeOUbjxXYw5JkR8gWme1xdyMx9Ch/zldgnXUY4xw1BT+qCaIgeh19FD P9OYQ8EYaCyMK0pLlgtq/dcnJrQXbHjlYWP8cTHKFCYUERailZktCSRzGIL0zQ== ) ;; ADDITIONAL SECTION (5 records) fulcrum.doe.GOV. 86400 IN A 205.254.144.110 fulcrum.doe.GOV. 86400 IN AAAA 2607:f368:1000:1100::53 foxbat.doe.GOV. 86400 IN A 205.254.143.110 foxbat.doe.GOV. 86400 IN AAAA 2607:f368:1000:1000::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.gov-servers.net for HYDROGEN.GOV/DNSKEY
	Received 481 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (481 bytes) ;; HEADER SECTION ;; id = 3857 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HYDROGEN.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) HYDROGEN.GOV. 86400 IN NS adns1.es.net. HYDROGEN.GOV. 86400 IN NS fulcrum.doe.GOV. HYDROGEN.GOV. 86400 IN NS foxbat.doe.GOV. HYDROGEN.GOV. 3600 IN DS ( 50020 8 2 4758d4e69dc930177ce954ec35c1909b232489b55b0086a5c2283318401fb128 ) HYDROGEN.GOV. 3600 IN DS 50020 8 1 0bebdde53075027c583ebd0075171906cba04058 HYDROGEN.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200417041007 20200410041007 36558 gov. y3Vxn22GO6S+QNLShWTK4oEBYs0vli9jfUmRtZJta6TKfkqIv+O/d7uqxk0HlhICdvspN3OG0J4b LWCfTTMOOpsWMM8omu0D1xeOUbjxXYw5JkR8gWme1xdyMx9Ch/zldgnXUY4xw1BT+qCaIgeh19FD P9OYQ8EYaCyMK0pLlgtq/dcnJrQXbHjlYWP8cTHKFCYUERailZktCSRzGIL0zQ== ) ;; ADDITIONAL SECTION (5 records) fulcrum.doe.GOV. 86400 IN A 205.254.144.110 fulcrum.doe.GOV. 86400 IN AAAA 2607:f368:1000:1100::53 foxbat.doe.GOV. 86400 IN A 205.254.143.110 foxbat.doe.GOV. 86400 IN AAAA 2607:f368:1000:1000::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone HYDROGEN.GOV

HYDROGEN.GOV

	Checking DS between GOV and HYDROGEN.GOV
	Query to b.gov-servers.net for HYDROGEN.GOV/DS
	Received 320 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (320 bytes) ;; HEADER SECTION ;; id = 15875 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HYDROGEN.GOV. IN DS ;; ANSWER SECTION (3 records) HYDROGEN.GOV. 3600 IN DS ( 50020 8 2 4758d4e69dc930177ce954ec35c1909b232489b55b0086a5c2283318401fb128 ) HYDROGEN.GOV. 3600 IN DS 50020 8 1 0bebdde53075027c583ebd0075171906cba04058 HYDROGEN.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200417041007 20200410041007 36558 gov. y3Vxn22GO6S+QNLShWTK4oEBYs0vli9jfUmRtZJta6TKfkqIv+O/d7uqxk0HlhICdvspN3OG0J4b LWCfTTMOOpsWMM8omu0D1xeOUbjxXYw5JkR8gWme1xdyMx9Ch/zldgnXUY4xw1BT+qCaIgeh19FD P9OYQ8EYaCyMK0pLlgtq/dcnJrQXbHjlYWP8cTHKFCYUERailZktCSRzGIL0zQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for HYDROGEN.GOV in the GOV zone
	DS=50020/SHA-256 has algorithm RSASHA256
	DS=50020/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`HYDROGEN.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200417041007 20200410041007 36558 gov. y3Vxn22GO6S+QNLShWTK4oEBYs0vli9jfUmRtZJta6TKfkqIv+O/d7uqxk0HlhICdvspN3OG0J4b LWCfTTMOOpsWMM8omu0D1xeOUbjxXYw5JkR8gWme1xdyMx9Ch/zldgnXUY4xw1BT+qCaIgeh19FD P9OYQ8EYaCyMK0pLlgtq/dcnJrQXbHjlYWP8cTHKFCYUERailZktCSRzGIL0zQ== )`
	RRSIG=36558 and DNSKEY=36558 verifies the DS RRset
	DS=50020/SHA-256 is now in the chain-of-trust
	`HYDROGEN.GOV. 3600 IN DS ( 50020 8 2 4758d4e69dc930177ce954ec35c1909b232489b55b0086a5c2283318401fb128 )`
	`HYDROGEN.GOV. 3600 IN DS 50020 8 1 0bebdde53075027c583ebd0075171906cba04058`
	Query to adns1.es.net for HYDROGEN.GOV/DNSKEY
	Received 1993 bytes from 192.188.22.22
	;; Answer received from 192.188.22.22 (1993 bytes) ;; HEADER SECTION ;; id = 29346 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HYDROGEN.GOV. IN DNSKEY ;; ANSWER SECTION (5 records) hydrogen.gov. 3600 IN DNSKEY ( 257 3 8 AwEAAaCJAh89A6vICFY2vjpnWtqXleya1+u+y1hWSTazC3lbMCtDg0wwKfYYGu8qzIH/uIovdAHq +e9UPdwKB4ceEI8HyYkDAzBFUgeuRbNUyFIn1IOxgJZGnW/tuvHia675d2cCesF2mlcgYnAvxpvQ 4d01fiBsnyHQRXlf4T7Vw+o4hT7SVG6++JHBEvt3/a6oiJZdvJ3xMG+7hW0A6yj6B9YyKPvhIwyF Y+w2aMU1ZFd6KD9jPLASG+Nr7J7Fvbqidzun9V5DeviiHaicKzvoY724szSeOdzN4MU2yfC7SiRV cmvVbIkss+oleas/i+J11d+rzqlyEGsLtfgxGJqgssHVDFNzQ3UgQrMOsQpVjY4Lh1k3MeaFO8Kf 4IZ5qDZO5YcbVqxOt+q7BSPIalpSaVkU/awjpeuDBJyDbtJ1ltPiZnmgakZaI8pn92mrkLrkaQnw W4fza1/AXEqQuWCEOrN33M+IYy+g1dvz0qX830/JE5oDJ25Vk8l6VE6YUvmK67qlrzBX/XJnEiuz TElS0FgbojyejnVCaQpZBZyhP5tBzIqJgXGnE/M/9BzsI8o7riqxRElndi6+5Cm4TrL2eGfjZYLl ONzd0vhNGeZkF61N7on+m/4mm8ywEFa9yyRm2bL+PGYzJKlELO62ZyRWVjz5qSk/T+IJCY+ryVs1 AA8r ) ; Key ID = 50020 hydrogen.gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcVGDxAVYdvZ4rvF4+Zi77H52dwK/mNTcnTsQYSO10om67JWVTa9LahFySy4F92sCnWGt1rx TiZ8xhqrC3h7wO9w09vbgQ7mZZvmSVMQvWMPVm8oxuAPWlvM+EdVw2Fjah9wjv2bcuA+XdruotFA ey9t3kCNSgPV4YYt5qemQ5FyN41t0s50kcYlZG76bTyio3/pZn09mz2yjhAoLpxuPGZTz9DbwVvS GY2LOlGXJs0S+F6tGDpYKQ4rMwl10EJFmgLcsbZoCjDPpqWL29UL77Ehr+rk95uWJytfAScFMkxy nlRcufLSH/W6AJWMvL47LcUfzYu/YFJVnJoe9FetI2U= ) ; Key ID = 26136 hydrogen.gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcHOyc3U4LPzLB4D4CQ2MYfANpb/H0BN+jnjl467pQ4S2w71KR1L/DUWmXPME4o15nHhA8F5 hvRJdnOF0/XLtD1neebzdNqrQIRVEJ1yXSK3FQ7lYSRfxT/ZXSPDx4h1paOcI3ioiXvfZZtyIHlE xZKKdgeEmW7NG4VnMePzsPwAgoIrsgbWy2+hEivJKhYm1p4oAlFUx6Vgni3K+gcJB8bCvUfoXqs5 Cfj0pHhIc57WoowsE5BX+//edOfgDAyLldzH2zn4hfs+TIudBM6st7u/V+RjeY45Qv3V73Qp4NaQ iZnTQnrZFSilwyfAR9lKy8q0E/n7yVVF73O2Z5BRxFM= ) ; Key ID = 2253 hydrogen.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20200613142321 20200315132321 26136 hydrogen.gov. je7G3COKuOpzgHva4thPoO/fQL6/qmTzah/8c9DVS8+aWXzxdF0BLGqnRuDjIAvZiRhXGoC0Mebg 2p86WOkfYB7a3FzHEmF+J2s/71NNSGRjOlLiaxdWZG0pNVz0y4WIK9XvGnmDY1ANQ7m0U5tBUZSq h3YlR4WxFpsO7TI69dXNIs0LdNaNYT3RDBy8psHs+82xX0EmnUP802VUlkAP30fvdUqoNm04oyTb TwyPMN0+mpSUZFL9kpO169U99aF6pSvTFd5OejooqBFNMjbihC9GGpfss4qLSFTM9i7WekpcdfTJ AYsl/KEmQFOemMDCMkExw1TYmRkGCABF27yCNg== ) hydrogen.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20200613142321 20200315132321 50020 hydrogen.gov. Q96xBv1fijrqynXmU5h3ehg7mEudTZzrMloqbEMTbkIETatRJ+uO5kNnwcVVXR13VOdOgW0THgl9 YC2GC6ZY1ZM7qs20jJHesQAA2wIPDGNXT7yt7yQkUO+R9GvV54o9sKVMWm3yd4KdKKCDjLU8771v GAQSo4rVIWC2PuTKMOIa1255BLvHjBOTAnqjIxirtYBs7l5n4jv0owTosEpXHZdEH5qd2HCWZR2/ BzG+yP34HhNTKHubiPQwS+VpCymWR5UGdNETZfTKQVx+/E2C8StrL15x+ylkHLPf5Xb81Fygv7kA 4LrngaZmK4ZWCcKW5NpKsSflL76DpAhbJWnWIHJJh2zL9rXpUd30fRkJ2zik5rZ0ViOo/CKtg2lo 5fe3i+4vTxiMcdi03QWCmnv6N4k0Jw7GAXPSzavc1mfkvK8L6vtGre8l0cmR8PDFAO0JQScjNzIa MQ8OBnYXUXNMiumPghyCWaIeryTMmKB+q2OBLmukjif8knM7rdFBagAIppOnmZkF9YTiALOP3N4+ cohX7OV/WreHQM8zjjf8Ivt/Qs9TdeZkAG4wHQUUDiGcobPAYnU6Nq00yf/vwVay+wTTS30t54mp pobErSIwH2rTIHmwsZ3cwu1AEsPZGLuWYcsdF7t+YYTQKyjuMBaBQnW4AuXTwIyf49ANBegOvH8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for HYDROGEN.GOV
	hydrogen.gov. 3600 IN DNSKEY ( 257 3 8 AwEAAaCJAh89A6vICFY2vjpnWtqXleya1+u+y1hWSTazC3lbMCtDg0wwKfYYGu8qzIH/uIovdAHq +e9UPdwKB4ceEI8HyYkDAzBFUgeuRbNUyFIn1IOxgJZGnW/tuvHia675d2cCesF2mlcgYnAvxpvQ 4d01fiBsnyHQRXlf4T7Vw+o4hT7SVG6++JHBEvt3/a6oiJZdvJ3xMG+7hW0A6yj6B9YyKPvhIwyF Y+w2aMU1ZFd6KD9jPLASG+Nr7J7Fvbqidzun9V5DeviiHaicKzvoY724szSeOdzN4MU2yfC7SiRV cmvVbIkss+oleas/i+J11d+rzqlyEGsLtfgxGJqgssHVDFNzQ3UgQrMOsQpVjY4Lh1k3MeaFO8Kf 4IZ5qDZO5YcbVqxOt+q7BSPIalpSaVkU/awjpeuDBJyDbtJ1ltPiZnmgakZaI8pn92mrkLrkaQnw W4fza1/AXEqQuWCEOrN33M+IYy+g1dvz0qX830/JE5oDJ25Vk8l6VE6YUvmK67qlrzBX/XJnEiuz TElS0FgbojyejnVCaQpZBZyhP5tBzIqJgXGnE/M/9BzsI8o7riqxRElndi6+5Cm4TrL2eGfjZYLl ONzd0vhNGeZkF61N7on+m/4mm8ywEFa9yyRm2bL+PGYzJKlELO62ZyRWVjz5qSk/T+IJCY+ryVs1 AA8r ) ; Key ID = 50020
	`hydrogen.gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcVGDxAVYdvZ4rvF4+Zi77H52dwK/mNTcnTsQYSO10om67JWVTa9LahFySy4F92sCnWGt1rx TiZ8xhqrC3h7wO9w09vbgQ7mZZvmSVMQvWMPVm8oxuAPWlvM+EdVw2Fjah9wjv2bcuA+XdruotFA ey9t3kCNSgPV4YYt5qemQ5FyN41t0s50kcYlZG76bTyio3/pZn09mz2yjhAoLpxuPGZTz9DbwVvS GY2LOlGXJs0S+F6tGDpYKQ4rMwl10EJFmgLcsbZoCjDPpqWL29UL77Ehr+rk95uWJytfAScFMkxy nlRcufLSH/W6AJWMvL47LcUfzYu/YFJVnJoe9FetI2U= ) ; Key ID = 26136`
	`hydrogen.gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcHOyc3U4LPzLB4D4CQ2MYfANpb/H0BN+jnjl467pQ4S2w71KR1L/DUWmXPME4o15nHhA8F5 hvRJdnOF0/XLtD1neebzdNqrQIRVEJ1yXSK3FQ7lYSRfxT/ZXSPDx4h1paOcI3ioiXvfZZtyIHlE xZKKdgeEmW7NG4VnMePzsPwAgoIrsgbWy2+hEivJKhYm1p4oAlFUx6Vgni3K+gcJB8bCvUfoXqs5 Cfj0pHhIc57WoowsE5BX+//edOfgDAyLldzH2zn4hfs+TIudBM6st7u/V+RjeY45Qv3V73Qp4NaQ iZnTQnrZFSilwyfAR9lKy8q0E/n7yVVF73O2Z5BRxFM= ) ; Key ID = 2253`
	DNSKEY=50020/SEP is now in the chain-of-trust
	DS=50020/SHA-256 verifies DNSKEY=50020/SEP
	DS=50020/SHA-1 verifies DNSKEY=50020/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`hydrogen.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20200613142321 20200315132321 26136 hydrogen.gov. je7G3COKuOpzgHva4thPoO/fQL6/qmTzah/8c9DVS8+aWXzxdF0BLGqnRuDjIAvZiRhXGoC0Mebg 2p86WOkfYB7a3FzHEmF+J2s/71NNSGRjOlLiaxdWZG0pNVz0y4WIK9XvGnmDY1ANQ7m0U5tBUZSq h3YlR4WxFpsO7TI69dXNIs0LdNaNYT3RDBy8psHs+82xX0EmnUP802VUlkAP30fvdUqoNm04oyTb TwyPMN0+mpSUZFL9kpO169U99aF6pSvTFd5OejooqBFNMjbihC9GGpfss4qLSFTM9i7WekpcdfTJ AYsl/KEmQFOemMDCMkExw1TYmRkGCABF27yCNg== )`
	hydrogen.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20200613142321 20200315132321 50020 hydrogen.gov. Q96xBv1fijrqynXmU5h3ehg7mEudTZzrMloqbEMTbkIETatRJ+uO5kNnwcVVXR13VOdOgW0THgl9 YC2GC6ZY1ZM7qs20jJHesQAA2wIPDGNXT7yt7yQkUO+R9GvV54o9sKVMWm3yd4KdKKCDjLU8771v GAQSo4rVIWC2PuTKMOIa1255BLvHjBOTAnqjIxirtYBs7l5n4jv0owTosEpXHZdEH5qd2HCWZR2/ BzG+yP34HhNTKHubiPQwS+VpCymWR5UGdNETZfTKQVx+/E2C8StrL15x+ylkHLPf5Xb81Fygv7kA 4LrngaZmK4ZWCcKW5NpKsSflL76DpAhbJWnWIHJJh2zL9rXpUd30fRkJ2zik5rZ0ViOo/CKtg2lo 5fe3i+4vTxiMcdi03QWCmnv6N4k0Jw7GAXPSzavc1mfkvK8L6vtGre8l0cmR8PDFAO0JQScjNzIa MQ8OBnYXUXNMiumPghyCWaIeryTMmKB+q2OBLmukjif8knM7rdFBagAIppOnmZkF9YTiALOP3N4+ cohX7OV/WreHQM8zjjf8Ivt/Qs9TdeZkAG4wHQUUDiGcobPAYnU6Nq00yf/vwVay+wTTS30t54mp pobErSIwH2rTIHmwsZ3cwu1AEsPZGLuWYcsdF7t+YYTQKyjuMBaBQnW4AuXTwIyf49ANBegOvH8= )
	RRSIG=26136 and DNSKEY=26136 verifies the DNSKEY RRset
	RRSIG=50020 and DNSKEY=50020/SEP verifies the DNSKEY RRset
	DNSKEY=26136 is now in the chain-of-trust
	DNSKEY=2253 is now in the chain-of-trust
	Query to adns1.es.net for HYDROGEN.GOV/A
	Received 369 bytes from 192.188.22.22
	;; Answer received from 192.188.22.22 (369 bytes) ;; HEADER SECTION ;; id = 30901 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HYDROGEN.GOV. IN A ;; ANSWER SECTION (2 records) hydrogen.gov. 3600 IN A 205.254.148.137 hydrogen.gov. 3600 IN RRSIG ( A 8 2 3600 20200613142321 20200315132321 26136 hydrogen.gov. uzdSZB1RutAo35SBQ+Is8l1PjxbnF3Jgo5JT6z5V42n6T7eLD7hgkDmwH/2WnAPA/4cOja7AVqqG lmfrRXl1gWgvPZcA74ruB2srL1HYjArw7R9iXisBS5T1Nqj8KuAuZL/QdWGoo+f8Ifr5+wCav6dR I/0eJ/1HgsCQ84K4HOH0VG0cktj1Nt8twmx4eadJpnyH5FnYogD3BGbKyXL3tdW8deBrpHSEIvt+ YRvbxFj433qDpqw0t5iiPAz4BAfU14+MmC0V6SHLo19jntJaUr+FRg0WUt6iP+PWFh9N/bA9Cdqf RUh9IqCHw6fGOUu31EFKSIYWy8cG7lvDV/ohFw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	HYDROGEN.GOV is authoritative for HYDROGEN.GOV
	Found RRSIG signed by hydrogen.gov zone
	Query to adns1.es.net for HYDROGEN.GOV/SOA
	Received 425 bytes from 192.188.22.22
	;; Answer received from 192.188.22.22 (425 bytes) ;; HEADER SECTION ;; id = 27976 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HYDROGEN.GOV. IN SOA ;; ANSWER SECTION (2 records) hydrogen.gov. 3600 IN SOA ( fulcrum.doe.gov. hostmaster.hq.doe.gov. 2018110112 ;serial 7200 ;refresh 3600 ;retry 2419200 ;expire 43200 ;minimum ) hydrogen.gov. 3600 IN RRSIG ( SOA 8 2 3600 20200613142321 20200315132321 26136 hydrogen.gov. fBjSYleeX8N6LXZUDC14A5htvrftoL+POTf0QmS4cHEYbGF3neJ80L0IBgVDi9EQqxIdajC5ykB6 JBMtQWk93IL2jQJmgIkU11FIGUY/VxH84eMBZ/CQn6yvRfqIx9PmW7jrlQmnV4GFOkdgXY3eHEWv EvanLAbAHrcJn6StPKBzvvnfclN7pYoSwgKuepfvu5GOrrOUO4yfyH+PCwTsC2nl6RwyFeQc6Ixj iss43k1xlPOfaymeKT6NLXupEpaCB2+ewteEsZuyJ+L7+qtX4BWNFKSvnjMtDwXiw0YjQDoutbYE LsMNqjkxzcU6rbLWumPnGvj+yzxlf5ZWcVbanw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to fulcrum.doe.GOV for HYDROGEN.GOV/SOA
	Received 415 bytes from 205.254.144.110
	;; Answer received from 205.254.144.110 (415 bytes) ;; HEADER SECTION ;; id = 18605 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HYDROGEN.GOV. IN SOA ;; ANSWER SECTION (2 records) hydrogen.gov. 3600 IN SOA ( fulcrum.doe.gov. hostmaster.hq.doe.gov. 2018110112 ;serial 7200 ;refresh 3600 ;retry 2419200 ;expire 43200 ;minimum ) hydrogen.gov. 3600 IN RRSIG ( SOA 8 2 3600 20200613142321 20200315132321 26136 hydrogen.gov. fBjSYleeX8N6LXZUDC14A5htvrftoL+POTf0QmS4cHEYbGF3neJ80L0IBgVDi9EQqxIdajC5ykB6 JBMtQWk93IL2jQJmgIkU11FIGUY/VxH84eMBZ/CQn6yvRfqIx9PmW7jrlQmnV4GFOkdgXY3eHEWv EvanLAbAHrcJn6StPKBzvvnfclN7pYoSwgKuepfvu5GOrrOUO4yfyH+PCwTsC2nl6RwyFeQc6Ixj iss43k1xlPOfaymeKT6NLXupEpaCB2+ewteEsZuyJ+L7+qtX4BWNFKSvnjMtDwXiw0YjQDoutbYE LsMNqjkxzcU6rbLWumPnGvj+yzxlf5ZWcVbanw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to foxbat.doe.GOV for HYDROGEN.GOV/SOA
	Received 415 bytes from 205.254.143.110
	;; Answer received from 205.254.143.110 (415 bytes) ;; HEADER SECTION ;; id = 6347 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HYDROGEN.GOV. IN SOA ;; ANSWER SECTION (2 records) hydrogen.gov. 3600 IN SOA ( fulcrum.doe.gov. hostmaster.hq.doe.gov. 2018110112 ;serial 7200 ;refresh 3600 ;retry 2419200 ;expire 43200 ;minimum ) hydrogen.gov. 3600 IN RRSIG ( SOA 8 2 3600 20200613142321 20200315132321 26136 hydrogen.gov. fBjSYleeX8N6LXZUDC14A5htvrftoL+POTf0QmS4cHEYbGF3neJ80L0IBgVDi9EQqxIdajC5ykB6 JBMtQWk93IL2jQJmgIkU11FIGUY/VxH84eMBZ/CQn6yvRfqIx9PmW7jrlQmnV4GFOkdgXY3eHEWv EvanLAbAHrcJn6StPKBzvvnfclN7pYoSwgKuepfvu5GOrrOUO4yfyH+PCwTsC2nl6RwyFeQc6Ixj iss43k1xlPOfaymeKT6NLXupEpaCB2+ewteEsZuyJ+L7+qtX4BWNFKSvnjMtDwXiw0YjQDoutbYE LsMNqjkxzcU6rbLWumPnGvj+yzxlf5ZWcVbanw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to adns1.es.net for HYDROGEN.GOV/A
	Received 369 bytes from 192.188.22.22
	;; Answer received from 192.188.22.22 (369 bytes) ;; HEADER SECTION ;; id = 29940 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; HYDROGEN.GOV. IN A ;; ANSWER SECTION (2 records) hydrogen.gov. 3600 IN A 205.254.148.137 hydrogen.gov. 3600 IN RRSIG ( A 8 2 3600 20200613142321 20200315132321 26136 hydrogen.gov. uzdSZB1RutAo35SBQ+Is8l1PjxbnF3Jgo5JT6z5V42n6T7eLD7hgkDmwH/2WnAPA/4cOja7AVqqG lmfrRXl1gWgvPZcA74ruB2srL1HYjArw7R9iXisBS5T1Nqj8KuAuZL/QdWGoo+f8Ifr5+wCav6dR I/0eJ/1HgsCQ84K4HOH0VG0cktj1Nt8twmx4eadJpnyH5FnYogD3BGbKyXL3tdW8deBrpHSEIvt+ YRvbxFj433qDpqw0t5iiPAz4BAfU14+MmC0V6SHLo19jntJaUr+FRg0WUt6iP+PWFh9N/bA9Cdqf RUh9IqCHw6fGOUu31EFKSIYWy8cG7lvDV/ohFw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	HYDROGEN.GOV A RR has value 205.254.148.137
	Found 1 RRSIGs over A RRset
	`hydrogen.gov. 3600 IN RRSIG ( A 8 2 3600 20200613142321 20200315132321 26136 hydrogen.gov. uzdSZB1RutAo35SBQ+Is8l1PjxbnF3Jgo5JT6z5V42n6T7eLD7hgkDmwH/2WnAPA/4cOja7AVqqG lmfrRXl1gWgvPZcA74ruB2srL1HYjArw7R9iXisBS5T1Nqj8KuAuZL/QdWGoo+f8Ifr5+wCav6dR I/0eJ/1HgsCQ84K4HOH0VG0cktj1Nt8twmx4eadJpnyH5FnYogD3BGbKyXL3tdW8deBrpHSEIvt+ YRvbxFj433qDpqw0t5iiPAz4BAfU14+MmC0V6SHLo19jntJaUr+FRg0WUt6iP+PWFh9N/bA9Cdqf RUh9IqCHw6fGOUu31EFKSIYWy8cG7lvDV/ohFw== )`
	RRSIG=26136 and DNSKEY=26136 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test HYDROGEN.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: