DNSSEC Analyzer - IRSNET.GOV

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2019-02-21 04:25:01 UTC, NTP stratum 4

Analyzing DNSSEC problems for IRSNET.GOV

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to h.root-servers.net for ./DNSKEY
	Error querying h.root-servers.net/2001:500:1:0:0:0:0:53 for ./DNSKEY: 'IPv6 transport disabled'
	Received 1425 bytes from 198.97.190.53
	;; Answer received from 198.97.190.53 (1425 bytes) ;; HEADER SECTION ;; id = 49116 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAcH+axCdUOsTc9o+jmyVq5rsGTh1EcatSumPqEfsPBT+whyj0/UhD7cWeixV9Wqzj/cnqs8i WELqhdzGX41ZtaNQUfWNfOriASnWmX2D9m/EunplHu8nMSlDnDcT7+llE9tjk5HI1Sr7d9N16ZTI rbVALf65VB2ABbBG39dyAb7tz21PICJbSp2cd77UF7NFqEVkqohl/LkDw+7Apalmp0qAQT1Mgwi2 cVxZMKUiciA6EqS+KNajf0A6olO2oEhZnGGY6b1LTg34/YfHdiIIZQqAfqbieruCGHRiSscC2ZE7 iNreL/76f4JyIEUNkt6bQA29JsegxorLzQkpF7NKqZc= ) ; Key ID = 16749 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 385 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19164 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190313000000 20190220000000 20326 . bKvs4iBtsS7x4UItBsNxJnGzKUowmON76AJt6DQlUjcDXdmNUGW0DNfwz91UCnfonlNeG09mCbRF zhfrgNiE2Niu0Qxh+EcygOjuy1uObcPgFBUsKp201u0WFQwrUl4O0NQfPY5Fa01e44v1u+L/yj2W K4gW2BKfW+5d9GIJhWRAPYWphOiG0+G1MUlWQ45cS07wu2X90+UDREw0prI0c4yJ9OiI6OnSvUvD hoyIgf5oHHYPieU7qu/aaiY8MdyJgfIelmFA65VzLDsTAHGoaagxJEolJehWSJl6AhY0mIs6lF2W XVCtEQbdLocsuCXln3w/n8jO2oJBotQ7S6E4bQ== ) . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190313000000 20190220000000 19164 . eyvOQiC637051ggBwNwq0Kle0vatTO4HrfxgLlRcVDWGZeYVoDRGkqPiCyC1K1HvUrRQHB8vbXfd hrVfXJpjh9e1+Uf403++n6J94wMi2UlAmUkNwo6ROE9JcT4QFpQrUj1TPqY9DpdRrRUYgAPl/PNC vKwIvbwSt4I070PLGGPeumOIPCeZr7YMt8ewiCS3uwOUJB6bk8qUo4tQeL5pkPpmFgozw2v7JT/8 nTZfbu6T0+9GmqRDxvizFVZ8lQRKZZif+Ilyb+Lz7j2XHiI0JszLEQ5vQKLKEtBtyHwcL7ZPgbN/ mpN9ik8h/Jx0H1hjhaS+jSCBBulq+hde8GFH0A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcH+axCdUOsTc9o+jmyVq5rsGTh1EcatSumPqEfsPBT+whyj0/UhD7cWeixV9Wqzj/cnqs8i WELqhdzGX41ZtaNQUfWNfOriASnWmX2D9m/EunplHu8nMSlDnDcT7+llE9tjk5HI1Sr7d9N16ZTI rbVALf65VB2ABbBG39dyAb7tz21PICJbSp2cd77UF7NFqEVkqohl/LkDw+7Apalmp0qAQT1Mgwi2 cVxZMKUiciA6EqS+KNajf0A6olO2oEhZnGGY6b1LTg34/YfHdiIIZQqAfqbieruCGHRiSscC2ZE7 iNreL/76f4JyIEUNkt6bQA29JsegxorLzQkpF7NKqZc= ) ; Key ID = 16749`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 385 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19164`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DS=19036/SHA-256 is published, but a corresponding DNSKEY is not
	DNSKEY=19164/SEP is revoked
	Found 2 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190313000000 20190220000000 20326 . bKvs4iBtsS7x4UItBsNxJnGzKUowmON76AJt6DQlUjcDXdmNUGW0DNfwz91UCnfonlNeG09mCbRF zhfrgNiE2Niu0Qxh+EcygOjuy1uObcPgFBUsKp201u0WFQwrUl4O0NQfPY5Fa01e44v1u+L/yj2W K4gW2BKfW+5d9GIJhWRAPYWphOiG0+G1MUlWQ45cS07wu2X90+UDREw0prI0c4yJ9OiI6OnSvUvD hoyIgf5oHHYPieU7qu/aaiY8MdyJgfIelmFA65VzLDsTAHGoaagxJEolJehWSJl6AhY0mIs6lF2W XVCtEQbdLocsuCXln3w/n8jO2oJBotQ7S6E4bQ== )`
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190313000000 20190220000000 19164 . eyvOQiC637051ggBwNwq0Kle0vatTO4HrfxgLlRcVDWGZeYVoDRGkqPiCyC1K1HvUrRQHB8vbXfd hrVfXJpjh9e1+Uf403++n6J94wMi2UlAmUkNwo6ROE9JcT4QFpQrUj1TPqY9DpdRrRUYgAPl/PNC vKwIvbwSt4I070PLGGPeumOIPCeZr7YMt8ewiCS3uwOUJB6bk8qUo4tQeL5pkPpmFgozw2v7JT/8 nTZfbu6T0+9GmqRDxvizFVZ8lQRKZZif+Ilyb+Lz7j2XHiI0JszLEQ5vQKLKEtBtyHwcL7ZPgbN/ mpN9ik8h/Jx0H1hjhaS+jSCBBulq+hde8GFH0A== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=16749 is now in the chain-of-trust
	DNSKEY=19164/SEP is now in the chain-of-trust
	Query to m.root-servers.net for IRSNET.GOV/A
	Received 668 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (668 bytes) ;; HEADER SECTION ;; id = 2017 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; IRSNET.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20190305180000 20190220170000 16749 . XsODmZ3YdxNtbyeglsPmnxKUvS/qfExJwMBOwTftSEph5QoYQ+qRh3IZ6SY6DNOYU01GK7QM1GQz Lx9V0ywQfMkzd9E/VfREaKy/8kMDaBL/mpRk5UmDFMgfrkkkx3UF7nzz4vKI05ghpxkbUV/Y4yc6 swRfwVSKRBeKMnVZ+YU7NX5TusF3S33GvyRMwCznhlhVfd0V9uYrPeWyhAUFxPW5eTXP0hLymUv9 +8nUby0yKsMAq9S8aXGTMh1Ac+ma5JEQEhcJgX86vjMFU67CV/N5B1Aqciq3mGjoTY28KVZv7la6 HCY7ZCO5QgFO2ylwdSrkMo60w83hp56dJ9yudg== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to e.root-servers.net for GOV/DNSKEY
	Error querying e.root-servers.net/2001:500:a8:0:0:0:0:e for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 658 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (658 bytes) ;; HEADER SECTION ;; id = 56321 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20190305180000 20190220170000 16749 . XsODmZ3YdxNtbyeglsPmnxKUvS/qfExJwMBOwTftSEph5QoYQ+qRh3IZ6SY6DNOYU01GK7QM1GQz Lx9V0ywQfMkzd9E/VfREaKy/8kMDaBL/mpRk5UmDFMgfrkkkx3UF7nzz4vKI05ghpxkbUV/Y4yc6 swRfwVSKRBeKMnVZ+YU7NX5TusF3S33GvyRMwCznhlhVfd0V9uYrPeWyhAUFxPW5eTXP0hLymUv9 +8nUby0yKsMAq9S8aXGTMh1Ac+ma5JEQEhcJgX86vjMFU67CV/N5B1Aqciq3mGjoTY28KVZv7la6 HCY7ZCO5QgFO2ylwdSrkMo60w83hp56dJ9yudg== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to b.root-servers.net for GOV/DS
	Received 406 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (406 bytes) ;; HEADER SECTION ;; id = 47175 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20190305180000 20190220170000 16749 . XsODmZ3YdxNtbyeglsPmnxKUvS/qfExJwMBOwTftSEph5QoYQ+qRh3IZ6SY6DNOYU01GK7QM1GQz Lx9V0ywQfMkzd9E/VfREaKy/8kMDaBL/mpRk5UmDFMgfrkkkx3UF7nzz4vKI05ghpxkbUV/Y4yc6 swRfwVSKRBeKMnVZ+YU7NX5TusF3S33GvyRMwCznhlhVfd0V9uYrPeWyhAUFxPW5eTXP0hLymUv9 +8nUby0yKsMAq9S8aXGTMh1Ac+ma5JEQEhcJgX86vjMFU67CV/N5B1Aqciq3mGjoTY28KVZv7la6 HCY7ZCO5QgFO2ylwdSrkMo60w83hp56dJ9yudg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	DS=7698/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20190305180000 20190220170000 16749 . XsODmZ3YdxNtbyeglsPmnxKUvS/qfExJwMBOwTftSEph5QoYQ+qRh3IZ6SY6DNOYU01GK7QM1GQz Lx9V0ywQfMkzd9E/VfREaKy/8kMDaBL/mpRk5UmDFMgfrkkkx3UF7nzz4vKI05ghpxkbUV/Y4yc6 swRfwVSKRBeKMnVZ+YU7NX5TusF3S33GvyRMwCznhlhVfd0V9uYrPeWyhAUFxPW5eTXP0hLymUv9 +8nUby0yKsMAq9S8aXGTMh1Ac+ma5JEQEhcJgX86vjMFU67CV/N5B1Aqciq3mGjoTY28KVZv7la6 HCY7ZCO5QgFO2ylwdSrkMo60w83hp56dJ9yudg== )`
	RRSIG=16749 and DNSKEY=16749 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	Query to b.gov-servers.net for GOV/DNSKEY
	Received 743 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (743 bytes) ;; HEADER SECTION ;; id = 28013 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 256 3 8 AQO1oAFyB/QSuf32vdl3Yp+o83rKLBdvjsz13AdVp8EooKwa6DL4D8G+e3PanKAJyWEiRpNQIAl2 Ra6JuC7DCiEPBziclmFygf2XGdY4qirPqVemcHHKNoVIMNUteughuiPaqlFY8gTZajQ02ZizqiYK +LRxpPs/ePcbETPT3oB9Ew== ) ; Key ID = 28157 GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190303224731 20190216224231 7698 gov. IJNwadcbltKxKxpP+0War8mfKnzLNyIo0YNGrdFE9Fn7taZx50JinEvHHTS03gEoZqEm8G1JnFFr sWxiQlUZOVR3J+jdKiZ9UM+RC6Fxo2rXJ2T+PCGz6S2C8/Xl9YCPiV17a/HiPZhuwF4U+n6Np1ox bSfY1/GRL4oN5r6OMlEfqZAdoZh58axSBByvbDNcxC7j40RUFGYzvvpUYsj4DLcJlw+LS0zt0hVs iVfQmnQXiHx5ku0riOJQf8zMtnQ/R1ZiwdsBuDvrM7I5GndEBZFlb6O16eLs84ibjD2+R+4QE1lw INZzWsKg5G7B3qRnULzqjEbmY4adUMCN5CGMwg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQO1oAFyB/QSuf32vdl3Yp+o83rKLBdvjsz13AdVp8EooKwa6DL4D8G+e3PanKAJyWEiRpNQIAl2 Ra6JuC7DCiEPBziclmFygf2XGdY4qirPqVemcHHKNoVIMNUteughuiPaqlFY8gTZajQ02ZizqiYK +LRxpPs/ePcbETPT3oB9Ew== ) ; Key ID = 28157`
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190303224731 20190216224231 7698 gov. IJNwadcbltKxKxpP+0War8mfKnzLNyIo0YNGrdFE9Fn7taZx50JinEvHHTS03gEoZqEm8G1JnFFr sWxiQlUZOVR3J+jdKiZ9UM+RC6Fxo2rXJ2T+PCGz6S2C8/Xl9YCPiV17a/HiPZhuwF4U+n6Np1ox bSfY1/GRL4oN5r6OMlEfqZAdoZh58axSBByvbDNcxC7j40RUFGYzvvpUYsj4DLcJlw+LS0zt0hVs iVfQmnQXiHx5ku0riOJQf8zMtnQ/R1ZiwdsBuDvrM7I5GndEBZFlb6O16eLs84ibjD2+R+4QE1lw INZzWsKg5G7B3qRnULzqjEbmY4adUMCN5CGMwg== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=28157 is now in the chain-of-trust
	Query to c.gov-servers.net for IRSNET.GOV/A
	Error querying c.gov-servers.net/2620:74:28:0:0:0:2:30 for IRSNET.GOV/A: 'IPv6 transport disabled'
	Received 550 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (550 bytes) ;; HEADER SECTION ;; id = 43726 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; IRSNET.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) IRSNET.GOV. 86400 IN NS ns1.irs.GOV. IRSNET.GOV. 86400 IN NS ns2.irs.GOV. IRSNET.GOV. 86400 IN NS ns3.irs.GOV. IRSNET.GOV. 86400 IN NS ns4.irs.GOV. IRSNET.GOV. 3600 IN DS ( 29905 8 2 335b670614c985a0ca97ebed8821b75f818456eb18a9422e5963ca0c69d3e65a ) IRSNET.GOV. 3600 IN DS ( 36691 8 2 098e3589db90636a68a604e66b674de1801a4f6291e2d94ca733126358f1cd71 ) IRSNET.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190227221007 20190220221007 28157 gov. JN6fyQ/MGBgowAmKE/9ZB+OmaDEy8sCQGUP14N2TTLXczH/be1UzDYdxdgw81DIAAwQE+P8Z3kqA anTjplbZZASLyefizioSVxK7sHi39k7rRJwLPJpG5rFdF/9bwj1F63zNdR+IIaATtF3kv3mQcjX0 2I/olYco2kTP6znwYN4= ) ;; ADDITIONAL SECTION (9 records) ns1.irs.GOV. 86400 IN A 152.216.7.164 ns2.irs.GOV. 86400 IN A 152.216.7.165 ns3.irs.GOV. 86400 IN A 152.216.11.132 ns4.irs.GOV. 86400 IN A 152.216.11.133 ns1.irs.GOV. 86400 IN AAAA 2610:30:4000:53::90 ns2.irs.GOV. 86400 IN AAAA 2610:30:4000:53::91 ns3.irs.GOV. 86400 IN AAAA 2610:30:2000:53::90 ns4.irs.GOV. 86400 IN AAAA 2610:30:2000:53::91 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to c.gov-servers.net for IRSNET.GOV/DNSKEY
	Error querying c.gov-servers.net/2620:74:28:0:0:0:2:30 for IRSNET.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 550 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (550 bytes) ;; HEADER SECTION ;; id = 22022 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; IRSNET.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) IRSNET.GOV. 86400 IN NS ns1.irs.GOV. IRSNET.GOV. 86400 IN NS ns2.irs.GOV. IRSNET.GOV. 86400 IN NS ns3.irs.GOV. IRSNET.GOV. 86400 IN NS ns4.irs.GOV. IRSNET.GOV. 3600 IN DS ( 29905 8 2 335b670614c985a0ca97ebed8821b75f818456eb18a9422e5963ca0c69d3e65a ) IRSNET.GOV. 3600 IN DS ( 36691 8 2 098e3589db90636a68a604e66b674de1801a4f6291e2d94ca733126358f1cd71 ) IRSNET.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190227221007 20190220221007 28157 gov. JN6fyQ/MGBgowAmKE/9ZB+OmaDEy8sCQGUP14N2TTLXczH/be1UzDYdxdgw81DIAAwQE+P8Z3kqA anTjplbZZASLyefizioSVxK7sHi39k7rRJwLPJpG5rFdF/9bwj1F63zNdR+IIaATtF3kv3mQcjX0 2I/olYco2kTP6znwYN4= ) ;; ADDITIONAL SECTION (9 records) ns1.irs.GOV. 86400 IN A 152.216.7.164 ns2.irs.GOV. 86400 IN A 152.216.7.165 ns3.irs.GOV. 86400 IN A 152.216.11.132 ns4.irs.GOV. 86400 IN A 152.216.11.133 ns1.irs.GOV. 86400 IN AAAA 2610:30:4000:53::90 ns2.irs.GOV. 86400 IN AAAA 2610:30:4000:53::91 ns3.irs.GOV. 86400 IN AAAA 2610:30:2000:53::90 ns4.irs.GOV. 86400 IN AAAA 2610:30:2000:53::91 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone IRSNET.GOV

IRSNET.GOV

	Checking DS between GOV and IRSNET.GOV
	Query to c.gov-servers.net for IRSNET.GOV/DS
	Received 298 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (298 bytes) ;; HEADER SECTION ;; id = 55657 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; IRSNET.GOV. IN DS ;; ANSWER SECTION (3 records) IRSNET.GOV. 3600 IN DS ( 29905 8 2 335b670614c985a0ca97ebed8821b75f818456eb18a9422e5963ca0c69d3e65a ) IRSNET.GOV. 3600 IN DS ( 36691 8 2 098e3589db90636a68a604e66b674de1801a4f6291e2d94ca733126358f1cd71 ) IRSNET.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190227221007 20190220221007 28157 gov. JN6fyQ/MGBgowAmKE/9ZB+OmaDEy8sCQGUP14N2TTLXczH/be1UzDYdxdgw81DIAAwQE+P8Z3kqA anTjplbZZASLyefizioSVxK7sHi39k7rRJwLPJpG5rFdF/9bwj1F63zNdR+IIaATtF3kv3mQcjX0 2I/olYco2kTP6znwYN4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DS records for IRSNET.GOV in the GOV zone
	DS=29905/SHA-256 has algorithm RSASHA256
	DS=36691/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`IRSNET.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190227221007 20190220221007 28157 gov. JN6fyQ/MGBgowAmKE/9ZB+OmaDEy8sCQGUP14N2TTLXczH/be1UzDYdxdgw81DIAAwQE+P8Z3kqA anTjplbZZASLyefizioSVxK7sHi39k7rRJwLPJpG5rFdF/9bwj1F63zNdR+IIaATtF3kv3mQcjX0 2I/olYco2kTP6znwYN4= )`
	RRSIG=28157 and DNSKEY=28157 verifies the DS RRset
	DS=29905/SHA-256 is now in the chain-of-trust
	DS=36691/SHA-256 is now in the chain-of-trust
	`IRSNET.GOV. 3600 IN DS ( 29905 8 2 335b670614c985a0ca97ebed8821b75f818456eb18a9422e5963ca0c69d3e65a )`
	`IRSNET.GOV. 3600 IN DS ( 36691 8 2 098e3589db90636a68a604e66b674de1801a4f6291e2d94ca733126358f1cd71 )`
	Query to ns3.irs.GOV for IRSNET.GOV/DNSKEY
	Received 1717 bytes from 152.216.11.132
	;; Answer received from 152.216.11.132 (1717 bytes) ;; HEADER SECTION ;; id = 61542 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option: ;; QUESTION SECTION (1 record) ;; IRSNET.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) IRSNET.GOV. 14400 IN DNSKEY ( 256 3 8 AwEAAbWAPSP5cY62x6kLA2hkVu1QD7V6Tguc8K/Ph1YoRegHyXQG4WuVaDNKHxOPGbEiN6AgaEYR NIVff+h5LWpUIt9JIBIHuSNOUpQs7tKj7AHsgE6NelTH30vWva+h4Hmu/NOp2BMY2rjwrd/69Tc9 MjDRqhsxKRL8E1Mqo8WJ6puzYGitysFrZ39C2x3qjWMTyrvjJyOVaiRHkftCZa6MFXA3ZcCcjiG7 3kr4ImzfdddUfuvjl7v5/uAGUBLPrT/zpx8odiI2rhW3gmvkw9GO2gj9S0n98aqn/l5fd7lsXr5R XGDQo/0yXad/u9iOHSteO1zO7GW21bo3PG9gbfaldKE= ) ; Key ID = 61488 IRSNET.GOV. 14400 IN DNSKEY ( 256 3 8 AwEAAb5sf892h0pU6MW7n+qtC+WdWFhR78325675dORYxwy8p1Tzlj0qlpVO6p0xQRde6TtHH8Di IyX9YQSZr/UuABwwAKWPvC3Rlr+szX/igyQCSNbrEZPL+BPul4V3BnDHq1iBvsGyHXgdmGB5A5aX Kg6p4vOs5oU4lKvGYbjHxVO/tka8kk9WROThivZdnlodcsGULzlpAA9D19eIUFOnJPqSL6nTr6S5 zsMSZ5aIpY302b8pCFxInQEUex7zMWzQ44tavQ7nd6hC700lta8Uq2FcmuQ6qnt1P/Dp9nnk5owi a+FAjuXDiz5VBp4WPMKcJWAEOR61daM/P6bYPd8xl/U= ) ; Key ID = 42783 IRSNET.GOV. 14400 IN DNSKEY ( 257 3 8 AwEAAbtaAGarXDriltU3DzS7TBDLw38OtwF1nTNwei4PncJiCmD3faUK+FGKmfi2sM1oiuxEWlQa C6MQbcqgRhdoDizK3ouKE4qYbimLU/IdqLFA2J90xNEzaDetudjbw0S/wODVo26/KUEofaYmx0ne K/uF8AkEXH9PZ25RAVKOXWfQF+eYAuj/KbNGS0HqleW0pwStPaCtlKacrkSugi2dy+MGTgfygBrg VDMvpYnaOxxPfHkpF/nGtRChgsw+qm1QmOKFTS1orPngcf9rL6tMKN78H8H17QY4+DWtTSSl9Syv r56tGdfmHnMtsSlvnhvYl6LVx7jgRX2ZkgbxGfIMtZ0= ) ; Key ID = 36691 IRSNET.GOV. 14400 IN DNSKEY ( 257 3 8 AwEAAcoZJddJHkn70O/WK8l1AOZIs2uxH8rNqHy+VyPexFHaPwVZaKoTuIlKtJqnWaRtOd70WDp0 Q+XOTjbAP0c7Na/TONVxEUjsk7xRpqOP6YVWuTvVPstykhvoiWBLxrcae190djnpb6V+Uu2lYNfR mt1acPWHI2VxYHqpSNWZUGTdW3F6uv95y/BNzrhrq9ua/ike/tJORbh6POL+MQRWJ3Q4bAYADoT8 fEtTSuQimaG8Kvw/vCB66UzBEMPLxPxbFEtgQV2G9BjpvijLQ1Bxpfc20SRHbfqRVYf/sDD28kN1 8Ulq22sjwYoVG8jGLoHIrCk8MCXHT8SyG2hAMP/TeBk= ) ; Key ID = 57982 IRSNET.GOV. 14400 IN DNSKEY ( 257 3 8 AwEAAe63SyHvRtt+nartdII7ZLBeuoHcyefn2o47e//rkB/+QXbICG3UKCHN793hfzRXdPA2SJkn 3ljoH+KEHjXwEpQXCtL2YqritFXCh1mQQ+N/YHzkPzDmIGpsLJNUngqo/L28FO3VNEZgrne11Jy6 HbbFLB1eQUMUlUz0mKz+JZuK2Yol5rAcGmzlOBFD80jp0Mq/FZZbSm1a6APyH8x+X6TtwUEvsLb+ b6xKQeU8kXEqXnmLxIyKfHL4xrtApjm0KM4Jb4xJoVThIldW85FIHGFuXa/QzTyiNT8gcC07rFaD aoS6Qu4UnbhEHDSrX0yiOUMV4S3vRzQiq/Ar1Z3Y4pU= ) ; Key ID = 29905 IRSNET.GOV. 14400 IN RRSIG ( DNSKEY 8 2 14400 20190228030324 20190221020324 29905 irsnet.gov. e2b/m0ww4fZX93Rv98wQLx0RMss/3c72WfsU0JVDAhTi2nT6LJTP8eeLYyweetiD8AIVLJaC2RZg OC3YYJ3CqSWPGKfLQHmRukE8/K23iwV4iieqxErCPsU49Gco1QvpqtRpkx9jkUQ41oGyD1MghZCQ Nk+FcmsoBrNRsFLwAW0UotFrpGC9EJKAyvcnIMpHuU8049s5YPGPPNY8VDWe3Rb/6ZT+bd5Z9PoD 0kPj9hemxD8qksYACU5QA6ysz4+7zcI3MrxOP6zB2ceYGgsD48dwxl8GcpKw+XY8oyfMIy3LFLk1 D4dBdS6SwVJ6OP2HJjbwVC9zxFK6WJo+/z+HeA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option:
	Found 5 DNSKEY records for IRSNET.GOV
	`IRSNET.GOV. 14400 IN DNSKEY ( 256 3 8 AwEAAbWAPSP5cY62x6kLA2hkVu1QD7V6Tguc8K/Ph1YoRegHyXQG4WuVaDNKHxOPGbEiN6AgaEYR NIVff+h5LWpUIt9JIBIHuSNOUpQs7tKj7AHsgE6NelTH30vWva+h4Hmu/NOp2BMY2rjwrd/69Tc9 MjDRqhsxKRL8E1Mqo8WJ6puzYGitysFrZ39C2x3qjWMTyrvjJyOVaiRHkftCZa6MFXA3ZcCcjiG7 3kr4ImzfdddUfuvjl7v5/uAGUBLPrT/zpx8odiI2rhW3gmvkw9GO2gj9S0n98aqn/l5fd7lsXr5R XGDQo/0yXad/u9iOHSteO1zO7GW21bo3PG9gbfaldKE= ) ; Key ID = 61488`
	`IRSNET.GOV. 14400 IN DNSKEY ( 256 3 8 AwEAAb5sf892h0pU6MW7n+qtC+WdWFhR78325675dORYxwy8p1Tzlj0qlpVO6p0xQRde6TtHH8Di IyX9YQSZr/UuABwwAKWPvC3Rlr+szX/igyQCSNbrEZPL+BPul4V3BnDHq1iBvsGyHXgdmGB5A5aX Kg6p4vOs5oU4lKvGYbjHxVO/tka8kk9WROThivZdnlodcsGULzlpAA9D19eIUFOnJPqSL6nTr6S5 zsMSZ5aIpY302b8pCFxInQEUex7zMWzQ44tavQ7nd6hC700lta8Uq2FcmuQ6qnt1P/Dp9nnk5owi a+FAjuXDiz5VBp4WPMKcJWAEOR61daM/P6bYPd8xl/U= ) ; Key ID = 42783`
	`IRSNET.GOV. 14400 IN DNSKEY ( 257 3 8 AwEAAbtaAGarXDriltU3DzS7TBDLw38OtwF1nTNwei4PncJiCmD3faUK+FGKmfi2sM1oiuxEWlQa C6MQbcqgRhdoDizK3ouKE4qYbimLU/IdqLFA2J90xNEzaDetudjbw0S/wODVo26/KUEofaYmx0ne K/uF8AkEXH9PZ25RAVKOXWfQF+eYAuj/KbNGS0HqleW0pwStPaCtlKacrkSugi2dy+MGTgfygBrg VDMvpYnaOxxPfHkpF/nGtRChgsw+qm1QmOKFTS1orPngcf9rL6tMKN78H8H17QY4+DWtTSSl9Syv r56tGdfmHnMtsSlvnhvYl6LVx7jgRX2ZkgbxGfIMtZ0= ) ; Key ID = 36691`
	`IRSNET.GOV. 14400 IN DNSKEY ( 257 3 8 AwEAAcoZJddJHkn70O/WK8l1AOZIs2uxH8rNqHy+VyPexFHaPwVZaKoTuIlKtJqnWaRtOd70WDp0 Q+XOTjbAP0c7Na/TONVxEUjsk7xRpqOP6YVWuTvVPstykhvoiWBLxrcae190djnpb6V+Uu2lYNfR mt1acPWHI2VxYHqpSNWZUGTdW3F6uv95y/BNzrhrq9ua/ike/tJORbh6POL+MQRWJ3Q4bAYADoT8 fEtTSuQimaG8Kvw/vCB66UzBEMPLxPxbFEtgQV2G9BjpvijLQ1Bxpfc20SRHbfqRVYf/sDD28kN1 8Ulq22sjwYoVG8jGLoHIrCk8MCXHT8SyG2hAMP/TeBk= ) ; Key ID = 57982`
	`IRSNET.GOV. 14400 IN DNSKEY ( 257 3 8 AwEAAe63SyHvRtt+nartdII7ZLBeuoHcyefn2o47e//rkB/+QXbICG3UKCHN793hfzRXdPA2SJkn 3ljoH+KEHjXwEpQXCtL2YqritFXCh1mQQ+N/YHzkPzDmIGpsLJNUngqo/L28FO3VNEZgrne11Jy6 HbbFLB1eQUMUlUz0mKz+JZuK2Yol5rAcGmzlOBFD80jp0Mq/FZZbSm1a6APyH8x+X6TtwUEvsLb+ b6xKQeU8kXEqXnmLxIyKfHL4xrtApjm0KM4Jb4xJoVThIldW85FIHGFuXa/QzTyiNT8gcC07rFaD aoS6Qu4UnbhEHDSrX0yiOUMV4S3vRzQiq/Ar1Z3Y4pU= ) ; Key ID = 29905`
	DNSKEY=36691/SEP is now in the chain-of-trust
	DS=36691/SHA-256 verifies DNSKEY=36691/SEP
	DNSKEY=29905/SEP is now in the chain-of-trust
	DS=29905/SHA-256 verifies DNSKEY=29905/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`IRSNET.GOV. 14400 IN RRSIG ( DNSKEY 8 2 14400 20190228030324 20190221020324 29905 irsnet.gov. e2b/m0ww4fZX93Rv98wQLx0RMss/3c72WfsU0JVDAhTi2nT6LJTP8eeLYyweetiD8AIVLJaC2RZg OC3YYJ3CqSWPGKfLQHmRukE8/K23iwV4iieqxErCPsU49Gco1QvpqtRpkx9jkUQ41oGyD1MghZCQ Nk+FcmsoBrNRsFLwAW0UotFrpGC9EJKAyvcnIMpHuU8049s5YPGPPNY8VDWe3Rb/6ZT+bd5Z9PoD 0kPj9hemxD8qksYACU5QA6ysz4+7zcI3MrxOP6zB2ceYGgsD48dwxl8GcpKw+XY8oyfMIy3LFLk1 D4dBdS6SwVJ6OP2HJjbwVC9zxFK6WJo+/z+HeA== )`
	RRSIG=29905 and DNSKEY=29905/SEP verifies the DNSKEY RRset
	DNSKEY=61488 is now in the chain-of-trust
	DNSKEY=42783 is now in the chain-of-trust
	DNSKEY=57982/SEP is now in the chain-of-trust
	Query to ns3.irs.GOV for IRSNET.GOV/A
	Error querying ns3.irs.GOV/2610:30:2000:53:0:0:0:90 for IRSNET.GOV/A: 'IPv6 transport disabled'
	Received 793 bytes from 152.216.11.132
	;; Answer received from 152.216.11.132 (793 bytes) ;; HEADER SECTION ;; id = 37271 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option: ;; QUESTION SECTION (1 record) ;; IRSNET.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) IRSNET.GOV. 900 IN SOA ( ns1.irs.GOV. it\.aciouns\.external\.dns\.admin.irs.GOV. 2010083322 ;serial 7200 ;refresh 1800 ;retry 2419200 ;expire 900 ;minimum ) IRSNET.GOV. 14400 IN RRSIG ( SOA 8 2 14400 20190228030324 20190221020324 42783 irsnet.gov. KHiyyrRyIi5/iFHanq6K6OXF8icj887t9K+sNARPNQyKivT9p71nLliE6pRv2hcFPqXq6mUFDxmv w9RTWFUVDrMKbox++Ww0lIb3G25yVOlVaMqHlzAUVq7VKD48xpbvcgn+Hf8UKA6/uemQvy8WmQ4C rbn4EIeYO4VWtVS7KboKbEIEmDlaWCerbW4Gu9wBrqWNOKN0dLN0Z6ufl5utLMMZyxG1TvH8s5fe SywzpfCKLbKSaeYJ3sEyeK4DIfjtP25K47wZFZhTBumDuDGK47W3ikiLJNB6ZC41vOnpPiSnK7On GWo6SLsU9L4Vcvq0q9O0cYP+RO/9XjSa2UTAlA== ) dakpsnhg8j2q6nfi3o3oimskir8b9pbv.IRSNET.GOV. 900 IN NSEC3 ( 1 0 10 aabbccdd holcj128mi4pmkjsoum0uiii6s32mti6 NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) dakpsnhg8j2q6nfi3o3oimskir8b9pbv.IRSNET.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20190228030324 20190221020324 42783 irsnet.gov. MHhmKjx6EoADa5zrYNBUe/XLczJ2n1GEAgkW6TRnV05JcnpujdvuiKKJZ9QilHBd9GGjOlJOOSpL lbykR3tizvva/OIljEICWEvrVKpFH41MWSq+oXsBcM3kzNtVgrRavvFgpvZFuMd3DIILES4aiipp hD/UPpGCnlG42LQ/7POMkoRX/y7msHd5sYOt4LHH9d6gL0R9rmf4de8wg1RBGHg3fEdDfkCoertn QRix+fAiOcjhcS1sz7vm/B+qsOEg/duJuOflVGQFHJQGPelGJgY0FCZ2+wIUMnoFG6GvYv9yfxbP LNZkSn4cuDG8XoGEpYDgZq3JZOMJLQOWYloRIg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option:
	IRSNET.GOV is authoritative for IRSNET.GOV
	Found RRSIG signed by irsnet.gov zone
	Query to ns4.irs.GOV for IRSNET.GOV/SOA
	Error querying ns4.irs.GOV/2610:30:2000:53:0:0:0:91 for IRSNET.GOV/SOA: 'IPv6 transport disabled'
	Received 777 bytes from 152.216.11.133
	;; Answer received from 152.216.11.133 (777 bytes) ;; HEADER SECTION ;; id = 2416 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option: ;; QUESTION SECTION (1 record) ;; IRSNET.GOV. IN SOA ;; ANSWER SECTION (2 records) IRSNET.GOV. 14400 IN SOA ( ns1.irs.GOV. it\.aciouns\.external\.dns\.admin.irs.GOV. 2010083322 ;serial 7200 ;refresh 1800 ;retry 2419200 ;expire 900 ;minimum ) IRSNET.GOV. 14400 IN RRSIG ( SOA 8 2 14400 20190228030324 20190221020324 42783 irsnet.gov. KHiyyrRyIi5/iFHanq6K6OXF8icj887t9K+sNARPNQyKivT9p71nLliE6pRv2hcFPqXq6mUFDxmv w9RTWFUVDrMKbox++Ww0lIb3G25yVOlVaMqHlzAUVq7VKD48xpbvcgn+Hf8UKA6/uemQvy8WmQ4C rbn4EIeYO4VWtVS7KboKbEIEmDlaWCerbW4Gu9wBrqWNOKN0dLN0Z6ufl5utLMMZyxG1TvH8s5fe SywzpfCKLbKSaeYJ3sEyeK4DIfjtP25K47wZFZhTBumDuDGK47W3ikiLJNB6ZC41vOnpPiSnK7On GWo6SLsU9L4Vcvq0q9O0cYP+RO/9XjSa2UTAlA== ) ;; AUTHORITY SECTION (5 records) IRSNET.GOV. 14400 IN NS ns1.irs.GOV. IRSNET.GOV. 14400 IN NS ns2.irs.GOV. IRSNET.GOV. 14400 IN NS ns3.irs.GOV. IRSNET.GOV. 14400 IN NS ns4.irs.GOV. IRSNET.GOV. 14400 IN RRSIG ( NS 8 2 14400 20190228030324 20190221020324 42783 irsnet.gov. MnY7P1s7q1CgNc7KKMaar2seTnRlNKEpzM2EQFSQXu8/Qxnf9k+vfN5qPV0T4QUGkmJ7FTJs11p8 qL0b21uq5G5c+FcK/YSKouoCz2hi9xyBb8b5P3W88JfW+wTx5DVRIg0Yd+uFZiUerTUV7JaG5Sxb 9rLUB7vgrbSzm4A+MnWI4BjNqw6oRHx+kYfvbSjz0Wzzyw4Uytg+SkFS8ezs9E7wUa9Y1Ri+JcSq j7LVJMfZI3mceSVDcXworc7NmMIjAEiwfqkE1a9utN5CyZe17/eXQK74Ka13YGwCNOUIazSO1CuW vVvLvJxWExIg7WPIFKEgP+NQai/kHBClYPhi/A== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option:
	Query to ns3.irs.GOV for IRSNET.GOV/SOA
	Received 777 bytes from 152.216.11.132
	;; Answer received from 152.216.11.132 (777 bytes) ;; HEADER SECTION ;; id = 4669 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option: ;; QUESTION SECTION (1 record) ;; IRSNET.GOV. IN SOA ;; ANSWER SECTION (2 records) IRSNET.GOV. 14400 IN SOA ( ns1.irs.GOV. it\.aciouns\.external\.dns\.admin.irs.GOV. 2010083322 ;serial 7200 ;refresh 1800 ;retry 2419200 ;expire 900 ;minimum ) IRSNET.GOV. 14400 IN RRSIG ( SOA 8 2 14400 20190228030324 20190221020324 42783 irsnet.gov. KHiyyrRyIi5/iFHanq6K6OXF8icj887t9K+sNARPNQyKivT9p71nLliE6pRv2hcFPqXq6mUFDxmv w9RTWFUVDrMKbox++Ww0lIb3G25yVOlVaMqHlzAUVq7VKD48xpbvcgn+Hf8UKA6/uemQvy8WmQ4C rbn4EIeYO4VWtVS7KboKbEIEmDlaWCerbW4Gu9wBrqWNOKN0dLN0Z6ufl5utLMMZyxG1TvH8s5fe SywzpfCKLbKSaeYJ3sEyeK4DIfjtP25K47wZFZhTBumDuDGK47W3ikiLJNB6ZC41vOnpPiSnK7On GWo6SLsU9L4Vcvq0q9O0cYP+RO/9XjSa2UTAlA== ) ;; AUTHORITY SECTION (5 records) IRSNET.GOV. 14400 IN NS ns1.irs.GOV. IRSNET.GOV. 14400 IN NS ns2.irs.GOV. IRSNET.GOV. 14400 IN NS ns3.irs.GOV. IRSNET.GOV. 14400 IN NS ns4.irs.GOV. IRSNET.GOV. 14400 IN RRSIG ( NS 8 2 14400 20190228030324 20190221020324 42783 irsnet.gov. MnY7P1s7q1CgNc7KKMaar2seTnRlNKEpzM2EQFSQXu8/Qxnf9k+vfN5qPV0T4QUGkmJ7FTJs11p8 qL0b21uq5G5c+FcK/YSKouoCz2hi9xyBb8b5P3W88JfW+wTx5DVRIg0Yd+uFZiUerTUV7JaG5Sxb 9rLUB7vgrbSzm4A+MnWI4BjNqw6oRHx+kYfvbSjz0Wzzyw4Uytg+SkFS8ezs9E7wUa9Y1Ri+JcSq j7LVJMfZI3mceSVDcXworc7NmMIjAEiwfqkE1a9utN5CyZe17/eXQK74Ka13YGwCNOUIazSO1CuW vVvLvJxWExIg7WPIFKEgP+NQai/kHBClYPhi/A== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option:
	Query to ns2.irs.GOV for IRSNET.GOV/SOA
	Received 777 bytes from 152.216.7.165
	;; Answer received from 152.216.7.165 (777 bytes) ;; HEADER SECTION ;; id = 34001 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option: ;; QUESTION SECTION (1 record) ;; IRSNET.GOV. IN SOA ;; ANSWER SECTION (2 records) IRSNET.GOV. 14400 IN SOA ( ns1.irs.GOV. it\.aciouns\.external\.dns\.admin.irs.GOV. 2010083321 ;serial 7200 ;refresh 1800 ;retry 2419200 ;expire 900 ;minimum ) IRSNET.GOV. 14400 IN RRSIG ( SOA 8 2 14400 20190227030142 20190220020142 42783 irsnet.gov. tcF7S1Pt9aFzCZFhhG3oQ6iUeM16KkHbtMxvDVM3RU+mmI2Tg6nc5nTC7ERQA2vya4uiz9VxAivp FseJEhswhY+sdzh0G2WjpSkvFd/uIBlEpXeyCWMIiTMzBiz6KVflDDMjy69GppILoihAuw1ZTTC8 0M8E8Be+ErK5M909lGTeBZxe+3fd9mAMcYPoVwuuDo4q15DBDMhu9n/x38NLT/FQ8qn/al1Ig9W3 MIODPQ7ErsilZMndgtl17dK0TLWt8lr6MQds8Cwu9jJQm/GdxTH3mrEHc/q75oODhLmbSzsARcU7 VDvo1jE3h7otKFngBAElqCytlKFJpHobBFexnQ== ) ;; AUTHORITY SECTION (5 records) IRSNET.GOV. 14400 IN NS ns1.irs.GOV. IRSNET.GOV. 14400 IN NS ns2.irs.GOV. IRSNET.GOV. 14400 IN NS ns3.irs.GOV. IRSNET.GOV. 14400 IN NS ns4.irs.GOV. IRSNET.GOV. 14400 IN RRSIG ( NS 8 2 14400 20190227030142 20190220020142 42783 irsnet.gov. s5+qbWAg0Bp9YXcECcifO5Ah0knNlrrJGGfJHqCBdwmf5xRen6fRxM5QjyruY7n3txKicyAzYG4i SrgabMxglS6xmgst6pN2PHliddc20TqWgzhAW23+bjJS1jAd7KQW9pa7ViHsYm8TM6ymRmpjtaZ7 jL9S2k32dZtLGXyuancuQfsauab06um0pEs2VRSkie9BxJqTM5eVbWgr9geBhPe5x03o+Ngz6GLM 3zd3hq8NjCnfiqHq/yuJec+QPRMpTxm94gEJwTS7JJZnK0eWeuP+d4HQivR8YPbwTLKplTxx27Sh t7b/h1HoEAXlWZqLT12m+XAYsguF47Z6kOZuPA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option:
	ns2.irs.GOV serial (2010083321) differs from ns4.irs.GOV serial (2010083322)
	Query to ns1.irs.GOV for IRSNET.GOV/SOA
	Received 777 bytes from 152.216.7.164
	;; Answer received from 152.216.7.164 (777 bytes) ;; HEADER SECTION ;; id = 44474 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option: ;; QUESTION SECTION (1 record) ;; IRSNET.GOV. IN SOA ;; ANSWER SECTION (2 records) IRSNET.GOV. 14400 IN SOA ( ns1.irs.GOV. it\.aciouns\.external\.dns\.admin.irs.GOV. 2010083322 ;serial 7200 ;refresh 1800 ;retry 2419200 ;expire 900 ;minimum ) IRSNET.GOV. 14400 IN RRSIG ( SOA 8 2 14400 20190228030324 20190221020324 42783 irsnet.gov. KHiyyrRyIi5/iFHanq6K6OXF8icj887t9K+sNARPNQyKivT9p71nLliE6pRv2hcFPqXq6mUFDxmv w9RTWFUVDrMKbox++Ww0lIb3G25yVOlVaMqHlzAUVq7VKD48xpbvcgn+Hf8UKA6/uemQvy8WmQ4C rbn4EIeYO4VWtVS7KboKbEIEmDlaWCerbW4Gu9wBrqWNOKN0dLN0Z6ufl5utLMMZyxG1TvH8s5fe SywzpfCKLbKSaeYJ3sEyeK4DIfjtP25K47wZFZhTBumDuDGK47W3ikiLJNB6ZC41vOnpPiSnK7On GWo6SLsU9L4Vcvq0q9O0cYP+RO/9XjSa2UTAlA== ) ;; AUTHORITY SECTION (5 records) IRSNET.GOV. 14400 IN NS ns1.irs.GOV. IRSNET.GOV. 14400 IN NS ns2.irs.GOV. IRSNET.GOV. 14400 IN NS ns3.irs.GOV. IRSNET.GOV. 14400 IN NS ns4.irs.GOV. IRSNET.GOV. 14400 IN RRSIG ( NS 8 2 14400 20190228030324 20190221020324 42783 irsnet.gov. MnY7P1s7q1CgNc7KKMaar2seTnRlNKEpzM2EQFSQXu8/Qxnf9k+vfN5qPV0T4QUGkmJ7FTJs11p8 qL0b21uq5G5c+FcK/YSKouoCz2hi9xyBb8b5P3W88JfW+wTx5DVRIg0Yd+uFZiUerTUV7JaG5Sxb 9rLUB7vgrbSzm4A+MnWI4BjNqw6oRHx+kYfvbSjz0Wzzyw4Uytg+SkFS8ezs9E7wUa9Y1Ri+JcSq j7LVJMfZI3mceSVDcXworc7NmMIjAEiwfqkE1a9utN5CyZe17/eXQK74Ka13YGwCNOUIazSO1CuW vVvLvJxWExIg7WPIFKEgP+NQai/kHBClYPhi/A== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option:
	Query to ns3.irs.GOV for IRSNET.GOV/A
	Error querying ns3.irs.GOV/2610:30:2000:53:0:0:0:90 for IRSNET.GOV/A: 'IPv6 transport disabled'
	Received 793 bytes from 152.216.11.132
	;; Answer received from 152.216.11.132 (793 bytes) ;; HEADER SECTION ;; id = 45183 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option: ;; QUESTION SECTION (1 record) ;; IRSNET.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) IRSNET.GOV. 900 IN SOA ( ns1.irs.GOV. it\.aciouns\.external\.dns\.admin.irs.GOV. 2010083322 ;serial 7200 ;refresh 1800 ;retry 2419200 ;expire 900 ;minimum ) IRSNET.GOV. 14400 IN RRSIG ( SOA 8 2 14400 20190228030324 20190221020324 42783 irsnet.gov. KHiyyrRyIi5/iFHanq6K6OXF8icj887t9K+sNARPNQyKivT9p71nLliE6pRv2hcFPqXq6mUFDxmv w9RTWFUVDrMKbox++Ww0lIb3G25yVOlVaMqHlzAUVq7VKD48xpbvcgn+Hf8UKA6/uemQvy8WmQ4C rbn4EIeYO4VWtVS7KboKbEIEmDlaWCerbW4Gu9wBrqWNOKN0dLN0Z6ufl5utLMMZyxG1TvH8s5fe SywzpfCKLbKSaeYJ3sEyeK4DIfjtP25K47wZFZhTBumDuDGK47W3ikiLJNB6ZC41vOnpPiSnK7On GWo6SLsU9L4Vcvq0q9O0cYP+RO/9XjSa2UTAlA== ) dakpsnhg8j2q6nfi3o3oimskir8b9pbv.IRSNET.GOV. 900 IN NSEC3 ( 1 0 10 aabbccdd holcj128mi4pmkjsoum0uiii6s32mti6 NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) dakpsnhg8j2q6nfi3o3oimskir8b9pbv.IRSNET.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20190228030324 20190221020324 42783 irsnet.gov. MHhmKjx6EoADa5zrYNBUe/XLczJ2n1GEAgkW6TRnV05JcnpujdvuiKKJZ9QilHBd9GGjOlJOOSpL lbykR3tizvva/OIljEICWEvrVKpFH41MWSq+oXsBcM3kzNtVgrRavvFgpvZFuMd3DIILES4aiipp hD/UPpGCnlG42LQ/7POMkoRX/y7msHd5sYOt4LHH9d6gL0R9rmf4de8wg1RBGHg3fEdDfkCoertn QRix+fAiOcjhcS1sz7vm/B+qsOEg/duJuOflVGQFHJQGPelGJgY0FCZ2+wIUMnoFG6GvYv9yfxbP LNZkSn4cuDG8XoGEpYDgZq3JZOMJLQOWYloRIg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`IRSNET.GOV. 14400 IN RRSIG ( SOA 8 2 14400 20190228030324 20190221020324 42783 irsnet.gov. KHiyyrRyIi5/iFHanq6K6OXF8icj887t9K+sNARPNQyKivT9p71nLliE6pRv2hcFPqXq6mUFDxmv w9RTWFUVDrMKbox++Ww0lIb3G25yVOlVaMqHlzAUVq7VKD48xpbvcgn+Hf8UKA6/uemQvy8WmQ4C rbn4EIeYO4VWtVS7KboKbEIEmDlaWCerbW4Gu9wBrqWNOKN0dLN0Z6ufl5utLMMZyxG1TvH8s5fe SywzpfCKLbKSaeYJ3sEyeK4DIfjtP25K47wZFZhTBumDuDGK47W3ikiLJNB6ZC41vOnpPiSnK7On GWo6SLsU9L4Vcvq0q9O0cYP+RO/9XjSa2UTAlA== )`
	RRSIG=42783 and DNSKEY=42783 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test IRSNET.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: