DNSSEC Analyzer

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2019-04-24 09:52:05 UTC, NTP stratum 4

Analyzing DNSSEC problems for ITS.GOV

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to e.root-servers.net for ./DNSKEY
	Error querying e.root-servers.net/2001:500:a8:0:0:0:0:e for ./DNSKEY: 'IPv6 transport disabled'
	Received 864 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (864 bytes) ;; HEADER SECTION ;; id = 56628 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190512000000 20190421000000 20326 . ljHKB9UaikaYC1wHzZyFwwibNFjGuwnI3DtVLsnRUwqmq2Er3uaMUYA63Odz4yO1f46zPAOcciVt Xol5oOyci84eGFb/7x6iZpcpIqFP7kWoNTRlQWgJ2V3KHYLr6w3TYiV/eWY7Ziu9HFPV6SLAt6g9 RWgaNwlLUw+fHdmhiAteoXjEBfqNC1je5FtAdPaOB3/aYbUayL4miAo3tsBt8vDzFPOvYVkMHbo4 75Bg1roJfSqxlfKEamGWMwtfnSjmw8htrvi51TBgUOsBBsSGgYWY5/5THwyc8oQDZfi72DiOF2Gr UGjr9yvQIYMuukNAOG8tvAn9PjHlY6pg4XkGUA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DS=19036/SHA-256 is published, but a corresponding DNSKEY is not
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190512000000 20190421000000 20326 . ljHKB9UaikaYC1wHzZyFwwibNFjGuwnI3DtVLsnRUwqmq2Er3uaMUYA63Odz4yO1f46zPAOcciVt Xol5oOyci84eGFb/7x6iZpcpIqFP7kWoNTRlQWgJ2V3KHYLr6w3TYiV/eWY7Ziu9HFPV6SLAt6g9 RWgaNwlLUw+fHdmhiAteoXjEBfqNC1je5FtAdPaOB3/aYbUayL4miAo3tsBt8vDzFPOvYVkMHbo4 75Bg1roJfSqxlfKEamGWMwtfnSjmw8htrvi51TBgUOsBBsSGgYWY5/5THwyc8oQDZfi72DiOF2Gr UGjr9yvQIYMuukNAOG8tvAn9PjHlY6pg4XkGUA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=25266 is now in the chain-of-trust
	Query to j.root-servers.net for ITS.GOV/A
	Error querying j.root-servers.net/2001:503:c27:0:0:0:2:30 for ITS.GOV/A: 'IPv6 transport disabled'
	Received 662 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (662 bytes) ;; HEADER SECTION ;; id = 62300 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ITS.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20190507050000 20190424040000 25266 . P/lz8XVonAZDJE2RMLV6BaoZ+yTpN68Yiq7wRSDeWhu3zoahDUCcpqIgLX1iFGJe1ifOkPW4TqyS nLjBBO9+l/0U9JpnRqK+yIGRZC0J99mGL9cBEFnbcjA3wSHuceTTQJri1RXWPRJYGguNXHywLkvq OAP9yWyS48+kvNIHa0DOelZRtkHgy/WhAZRl92Vp61Ew0FgEiEitp9Z8PpsjpHOrQnW+PP/spzrC zdu5SdVZTfhZRBAMls3jNYdc1DAxTfLynFwx5qapAl4dQ4Mx1HO+499RmNILSkY666hsps55cc0f QXlcgUi6k2YPnps/j+UF1Nnz9qKJ8ofdjfTfmA== ) ;; ADDITIONAL SECTION (9 records) b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to m.root-servers.net for GOV/DNSKEY
	Error querying m.root-servers.net/2001:dc3:0:0:0:0:0:35 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 661 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (661 bytes) ;; HEADER SECTION ;; id = 62855 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20190507050000 20190424040000 25266 . P/lz8XVonAZDJE2RMLV6BaoZ+yTpN68Yiq7wRSDeWhu3zoahDUCcpqIgLX1iFGJe1ifOkPW4TqyS nLjBBO9+l/0U9JpnRqK+yIGRZC0J99mGL9cBEFnbcjA3wSHuceTTQJri1RXWPRJYGguNXHywLkvq OAP9yWyS48+kvNIHa0DOelZRtkHgy/WhAZRl92Vp61Ew0FgEiEitp9Z8PpsjpHOrQnW+PP/spzrC zdu5SdVZTfhZRBAMls3jNYdc1DAxTfLynFwx5qapAl4dQ4Mx1HO+499RmNILSkY666hsps55cc0f QXlcgUi6k2YPnps/j+UF1Nnz9qKJ8ofdjfTfmA== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to m.root-servers.net for GOV/DS
	Error querying m.root-servers.net/2001:dc3:0:0:0:0:0:35 for GOV/DS: 'IPv6 transport disabled'
	Received 406 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (406 bytes) ;; HEADER SECTION ;; id = 20829 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20190507050000 20190424040000 25266 . P/lz8XVonAZDJE2RMLV6BaoZ+yTpN68Yiq7wRSDeWhu3zoahDUCcpqIgLX1iFGJe1ifOkPW4TqyS nLjBBO9+l/0U9JpnRqK+yIGRZC0J99mGL9cBEFnbcjA3wSHuceTTQJri1RXWPRJYGguNXHywLkvq OAP9yWyS48+kvNIHa0DOelZRtkHgy/WhAZRl92Vp61Ew0FgEiEitp9Z8PpsjpHOrQnW+PP/spzrC zdu5SdVZTfhZRBAMls3jNYdc1DAxTfLynFwx5qapAl4dQ4Mx1HO+499RmNILSkY666hsps55cc0f QXlcgUi6k2YPnps/j+UF1Nnz9qKJ8ofdjfTfmA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	DS=7698/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20190507050000 20190424040000 25266 . P/lz8XVonAZDJE2RMLV6BaoZ+yTpN68Yiq7wRSDeWhu3zoahDUCcpqIgLX1iFGJe1ifOkPW4TqyS nLjBBO9+l/0U9JpnRqK+yIGRZC0J99mGL9cBEFnbcjA3wSHuceTTQJri1RXWPRJYGguNXHywLkvq OAP9yWyS48+kvNIHa0DOelZRtkHgy/WhAZRl92Vp61Ew0FgEiEitp9Z8PpsjpHOrQnW+PP/spzrC zdu5SdVZTfhZRBAMls3jNYdc1DAxTfLynFwx5qapAl4dQ4Mx1HO+499RmNILSkY666hsps55cc0f QXlcgUi6k2YPnps/j+UF1Nnz9qKJ8ofdjfTfmA== )`
	RRSIG=25266 and DNSKEY=25266 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	Query to c.gov-servers.net for GOV/DNSKEY
	Received 743 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (743 bytes) ;; HEADER SECTION ;; id = 49528 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AQPO0gfZTyKZiRSwF/XvW9ta+joX/SlCfvNcTsNT4t5edmGhhiRNf45246Z4L6Cx3n93FPHtW91n F+M1gCPyxewRyAM0/UVrqBwutdPQnR8vsQ/WzdsAk50loby/jGN7UAStU/FzllD2qIq4uJ8HcLZW Qth9JV8vKuqVYXgPfhx5lw== ) ; Key ID = 43583 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190502214731 20190417214231 7698 gov. GjRUnOLfnBAtIlt6hLcfcO1H6NuS90vNTDPZ+AQznOz3HueEqBORAmtN1Yr1z0Bnu7LHCEUVijJN SAfPRqPhwhnwBUWDHBahKuDspOKEJtNHzO5Wag4dk5n9szFVyIf6oWOPc5B0NLZc/9phCu4it24X FOynCwl+G5Fo1bFQaMfoh1CSDwZeq90LFwjLUOOKMMcwHdTVL7DIreDuGsqkFS4ZX5MoqztrUkmj TN9nF9soq7kSUiyPtbGy0c+FgMc8iEE5weI0bYXC2J8msnsFQijTQTPiwZGSIVZD5l74b2uK1SVq rHZULW5BRRnVaAGCEVLU8gTPZS0GRBNWNQcbWQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQPO0gfZTyKZiRSwF/XvW9ta+joX/SlCfvNcTsNT4t5edmGhhiRNf45246Z4L6Cx3n93FPHtW91n F+M1gCPyxewRyAM0/UVrqBwutdPQnR8vsQ/WzdsAk50loby/jGN7UAStU/FzllD2qIq4uJ8HcLZW Qth9JV8vKuqVYXgPfhx5lw== ) ; Key ID = 43583`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190502214731 20190417214231 7698 gov. GjRUnOLfnBAtIlt6hLcfcO1H6NuS90vNTDPZ+AQznOz3HueEqBORAmtN1Yr1z0Bnu7LHCEUVijJN SAfPRqPhwhnwBUWDHBahKuDspOKEJtNHzO5Wag4dk5n9szFVyIf6oWOPc5B0NLZc/9phCu4it24X FOynCwl+G5Fo1bFQaMfoh1CSDwZeq90LFwjLUOOKMMcwHdTVL7DIreDuGsqkFS4ZX5MoqztrUkmj TN9nF9soq7kSUiyPtbGy0c+FgMc8iEE5weI0bYXC2J8msnsFQijTQTPiwZGSIVZD5l74b2uK1SVq rHZULW5BRRnVaAGCEVLU8gTPZS0GRBNWNQcbWQ== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=43583 is now in the chain-of-trust
	Query to a.gov-servers.net for ITS.GOV/A
	Error querying a.gov-servers.net/2001:500:4431:0:0:0:2:30 for ITS.GOV/A: 'IPv6 transport disabled'
	Received 384 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (384 bytes) ;; HEADER SECTION ;; id = 30907 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ITS.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) ITS.GOV. 86400 IN NS ns1.twai.GOV. ITS.GOV. 86400 IN NS ns2.twai.GOV. ITS.GOV. 3600 IN DS 57873 7 1 63d953498727a5d2f908809529471c956c169ea6 ITS.GOV. 3600 IN DS ( 57873 7 2 d0fe80399b34b572f4e45550ba421a8ff6f6127999df2482d1dbdeb2cb32419e ) ITS.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190501041007 20190424041007 43583 gov. BOEuhPb6YPKJZrniax938M7VXFGVbgv4TD6Wcdn8SBmp+GFMGPFOyZLChOGo/Vi1jSsNsnbDbaVS qQAfIuPyFk6rjx8IpRSFNlXjhaY0ZrmDP34WbfHkFxE/bYkA1m5Vbllet5MnOrAfBiTJ4WFTAhrS 7E2Ef7Lym5JloLhRmDY= ) ;; ADDITIONAL SECTION (4 records) ns1.twai.GOV. 86400 IN A 199.169.194.28 ns2.twai.GOV. 86400 IN A 199.169.192.28 ns2.twai.GOV. 86400 IN AAAA 2605:3100:fffd:100::7 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.gov-servers.net for ITS.GOV/DNSKEY
	Error querying c.gov-servers.net/2620:74:28:0:0:0:2:30 for ITS.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 384 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (384 bytes) ;; HEADER SECTION ;; id = 55340 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ITS.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) ITS.GOV. 86400 IN NS ns1.twai.GOV. ITS.GOV. 86400 IN NS ns2.twai.GOV. ITS.GOV. 3600 IN DS 57873 7 1 63d953498727a5d2f908809529471c956c169ea6 ITS.GOV. 3600 IN DS ( 57873 7 2 d0fe80399b34b572f4e45550ba421a8ff6f6127999df2482d1dbdeb2cb32419e ) ITS.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190501041007 20190424041007 43583 gov. BOEuhPb6YPKJZrniax938M7VXFGVbgv4TD6Wcdn8SBmp+GFMGPFOyZLChOGo/Vi1jSsNsnbDbaVS qQAfIuPyFk6rjx8IpRSFNlXjhaY0ZrmDP34WbfHkFxE/bYkA1m5Vbllet5MnOrAfBiTJ4WFTAhrS 7E2Ef7Lym5JloLhRmDY= ) ;; ADDITIONAL SECTION (4 records) ns1.twai.GOV. 86400 IN A 199.169.194.28 ns2.twai.GOV. 86400 IN A 199.169.192.28 ns2.twai.GOV. 86400 IN AAAA 2605:3100:fffd:100::7 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone ITS.GOV

ITS.GOV

	Checking DS between GOV and ITS.GOV
	Query to a.gov-servers.net for ITS.GOV/DS
	Received 283 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (283 bytes) ;; HEADER SECTION ;; id = 5749 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ITS.GOV. IN DS ;; ANSWER SECTION (3 records) ITS.GOV. 3600 IN DS 57873 7 1 63d953498727a5d2f908809529471c956c169ea6 ITS.GOV. 3600 IN DS ( 57873 7 2 d0fe80399b34b572f4e45550ba421a8ff6f6127999df2482d1dbdeb2cb32419e ) ITS.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190501041007 20190424041007 43583 gov. BOEuhPb6YPKJZrniax938M7VXFGVbgv4TD6Wcdn8SBmp+GFMGPFOyZLChOGo/Vi1jSsNsnbDbaVS qQAfIuPyFk6rjx8IpRSFNlXjhaY0ZrmDP34WbfHkFxE/bYkA1m5Vbllet5MnOrAfBiTJ4WFTAhrS 7E2Ef7Lym5JloLhRmDY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for ITS.GOV in the GOV zone
	DS=57873/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=57873/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`ITS.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190501041007 20190424041007 43583 gov. BOEuhPb6YPKJZrniax938M7VXFGVbgv4TD6Wcdn8SBmp+GFMGPFOyZLChOGo/Vi1jSsNsnbDbaVS qQAfIuPyFk6rjx8IpRSFNlXjhaY0ZrmDP34WbfHkFxE/bYkA1m5Vbllet5MnOrAfBiTJ4WFTAhrS 7E2Ef7Lym5JloLhRmDY= )`
	RRSIG=43583 and DNSKEY=43583 verifies the DS RRset
	DS=57873/SHA-1 is now in the chain-of-trust
	`ITS.GOV. 3600 IN DS 57873 7 1 63d953498727a5d2f908809529471c956c169ea6`
	`ITS.GOV. 3600 IN DS ( 57873 7 2 d0fe80399b34b572f4e45550ba421a8ff6f6127999df2482d1dbdeb2cb32419e )`
	Query to ns2.twai.GOV for ITS.GOV/DNSKEY
	Timeout querying ns2.twai.GOV/199.169.192.28 for ITS.GOV/DNSKEY
	Error querying ns2.twai.GOV/2605:3100:fffd:100:0:0:0:7 for ITS.GOV/DNSKEY: 'IPv6 transport disabled'
	All Queries to ns2.twai.GOV for ITS.GOV/DNSKEY timed out or failed
	Query to ns1.twai.GOV for ITS.GOV/DNSKEY
	Received 1237 bytes from 199.169.194.28
	;; Answer received from 199.169.194.28 (1237 bytes) ;; HEADER SECTION ;; id = 44690 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ITS.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) ITS.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAbE0npHKogvhiZ8L8X1z3Vd2oz8X1QFGV0SxkERyRQjv6+7QACGdjZkRhAYBYmt6wG7FebVa cWDlX7LcTebQ+B+W7epOKWWKKMwgkOoGPPC/Jm8NHqH4ej9IwkhW4Vq68euT9dmsoGWXq8XC8ZlW HPDsatwZ4uRaFEH/OQ44vzw5 ) ; Key ID = 29099 ITS.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAayp350/RGAzpfkjhnJXz8LGUItdd448/rllL7Oct7NHihvRYYb6ij9XLAv8neTbnNPt44qD uY1IH3hUFwmAFOyQjWms+DRRXCGntsSR6X7nZ5Sf5QZLr8d+1uLZ9lLzRdo9zxBFUsal/FoBbeJB Lzwh6T05U39X+q9mJNT5UeDt ) ; Key ID = 54542 ITS.GOV. 3600 IN DNSKEY ( 257 3 7 AwEAAbER61/WnkJ3ZYtKuNYbrD3hUUMexchSNw6gehCMczsbCup3ROOwsSenoQ98AMK10faxlGdS xZ3K7+ZGKQ9zRO9WlDYfiCr435nnTKdj7WanWw5kh/+zOl69gdhUTXq8ILrH/umHvcdeo9mhVX7/ 9n8B86X56zAIDPm/KZmVTt99w8I8x46jEEcNlR93MhS+zfaZj9DgnRUWb/vCz9nkmipOH0mzKhYQ CIB/OohxoO6tkGiBOpluJREp9MPzzxO0ZA2HG0xRFUzXBES6r45StRgEabNTbrBKD0Uwfa2Isl+a guJ7+QRDGeXF8NRGwPH80rvEBZwxIfmA4AuTIvqlydM= ) ; Key ID = 57873 ITS.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20190501061555 20190424061555 29099 its.gov. DOgD16T0q6y9gqg1mW/wK/rUwBeNulEYubnMXjvI9DDUGw+/+TvFc5IAdzBb+3TEHy1FoBtJXkkm 6cmhqODqqA8PqeBY7MsCBoX26htUpWU1QGTQX0LoAizF9EdSWM06c7xdpLz4m4dzZSIqkn3WPgHp Ti3rdMsMvJe7dG+3qMk= ) ITS.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20190501061555 20190424061555 54542 its.gov. OoPuenlT47HMkcSfJv/fgDpRR9HhZO0rVPg93/RA7hO32BhQ9eR+rSjaSZ3EskkxV37htpXye4wa Lle00Byrer0KhXi9Q/WXo3Fpjm1giAXwXuT7ubclv3K7h2NmQgOCVrUFtaRXbcjHzEuLROvi0+2I qlfE7XoBeD/nnEfrwe8= ) ITS.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20190501061555 20190424061555 57873 its.gov. sPWou3uo4PEor++wha7MqiVhaaO0TOtXzieFTiDdkDpnJaI49Z4u/c3UCGueERLUxtCJuaNDk0WX Ejn0j0deJOHBIk2ai8F5bZdEmi0QmN+AAZ9p1R+EeOo4pjywTPUNLLxC2BuVU3d19bk5RSWHag2U K+3ow5YrM97LS28dIQx4EGDkVNT33mcMT5nxjXsdKdVlSXyIl/zr3turAE2B4eAQhIgCGYBdz4zB yk1g0lQuH/smvhcWfEs/ytNeIboNcZ8b5FrszfOGKiHxF6xX9p42QLL82lNyaF3aJrgR+h0CP0KG 2D60EhYUw1etoQsVJWNhbI48hJkM/p7cXOMCcA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for ITS.GOV
	`ITS.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAbE0npHKogvhiZ8L8X1z3Vd2oz8X1QFGV0SxkERyRQjv6+7QACGdjZkRhAYBYmt6wG7FebVa cWDlX7LcTebQ+B+W7epOKWWKKMwgkOoGPPC/Jm8NHqH4ej9IwkhW4Vq68euT9dmsoGWXq8XC8ZlW HPDsatwZ4uRaFEH/OQ44vzw5 ) ; Key ID = 29099`
	`ITS.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAayp350/RGAzpfkjhnJXz8LGUItdd448/rllL7Oct7NHihvRYYb6ij9XLAv8neTbnNPt44qD uY1IH3hUFwmAFOyQjWms+DRRXCGntsSR6X7nZ5Sf5QZLr8d+1uLZ9lLzRdo9zxBFUsal/FoBbeJB Lzwh6T05U39X+q9mJNT5UeDt ) ; Key ID = 54542`
	`ITS.GOV. 3600 IN DNSKEY ( 257 3 7 AwEAAbER61/WnkJ3ZYtKuNYbrD3hUUMexchSNw6gehCMczsbCup3ROOwsSenoQ98AMK10faxlGdS xZ3K7+ZGKQ9zRO9WlDYfiCr435nnTKdj7WanWw5kh/+zOl69gdhUTXq8ILrH/umHvcdeo9mhVX7/ 9n8B86X56zAIDPm/KZmVTt99w8I8x46jEEcNlR93MhS+zfaZj9DgnRUWb/vCz9nkmipOH0mzKhYQ CIB/OohxoO6tkGiBOpluJREp9MPzzxO0ZA2HG0xRFUzXBES6r45StRgEabNTbrBKD0Uwfa2Isl+a guJ7+QRDGeXF8NRGwPH80rvEBZwxIfmA4AuTIvqlydM= ) ; Key ID = 57873`
	DNSKEY=57873/SEP is now in the chain-of-trust
	DS=57873/SHA-1 verifies DNSKEY=57873/SEP
	DS=57873/SHA-256 verifies DNSKEY=57873/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`ITS.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20190501061555 20190424061555 29099 its.gov. DOgD16T0q6y9gqg1mW/wK/rUwBeNulEYubnMXjvI9DDUGw+/+TvFc5IAdzBb+3TEHy1FoBtJXkkm 6cmhqODqqA8PqeBY7MsCBoX26htUpWU1QGTQX0LoAizF9EdSWM06c7xdpLz4m4dzZSIqkn3WPgHp Ti3rdMsMvJe7dG+3qMk= )`
	`ITS.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20190501061555 20190424061555 54542 its.gov. OoPuenlT47HMkcSfJv/fgDpRR9HhZO0rVPg93/RA7hO32BhQ9eR+rSjaSZ3EskkxV37htpXye4wa Lle00Byrer0KhXi9Q/WXo3Fpjm1giAXwXuT7ubclv3K7h2NmQgOCVrUFtaRXbcjHzEuLROvi0+2I qlfE7XoBeD/nnEfrwe8= )`
	`ITS.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20190501061555 20190424061555 57873 its.gov. sPWou3uo4PEor++wha7MqiVhaaO0TOtXzieFTiDdkDpnJaI49Z4u/c3UCGueERLUxtCJuaNDk0WX Ejn0j0deJOHBIk2ai8F5bZdEmi0QmN+AAZ9p1R+EeOo4pjywTPUNLLxC2BuVU3d19bk5RSWHag2U K+3ow5YrM97LS28dIQx4EGDkVNT33mcMT5nxjXsdKdVlSXyIl/zr3turAE2B4eAQhIgCGYBdz4zB yk1g0lQuH/smvhcWfEs/ytNeIboNcZ8b5FrszfOGKiHxF6xX9p42QLL82lNyaF3aJrgR+h0CP0KG 2D60EhYUw1etoQsVJWNhbI48hJkM/p7cXOMCcA== )`
	RRSIG=29099 and DNSKEY=29099 verifies the DNSKEY RRset
	RRSIG=54542 and DNSKEY=54542 verifies the DNSKEY RRset
	RRSIG=57873 and DNSKEY=57873/SEP verifies the DNSKEY RRset
	DNSKEY=29099 is now in the chain-of-trust
	DNSKEY=54542 is now in the chain-of-trust
	Query to ns1.twai.GOV for ITS.GOV/A
	Received 386 bytes from 199.169.194.28
	;; Answer received from 199.169.194.28 (386 bytes) ;; HEADER SECTION ;; id = 29257 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ITS.GOV. IN A ;; ANSWER SECTION (3 records) ITS.GOV. 5 IN A 199.169.194.42 ITS.GOV. 5 IN RRSIG ( A 7 2 5 20190428220003 20190421220003 29099 its.gov. mJ4xOtAdkGotGpW05rBTqHGJKlprHKSmqHBkJgBRLagEbhDVy1XnwK3k9EaOavEfqnRP50Ah8xev QBz23s3s/mk4HS5VcRp1hPWxvkPrqOSFbnafzEHPzE/KnKsgimrbye7f7fIVa5iiUSPvedVLLqT4 En6FFn+XhEpe7iQsH9I= ) ITS.GOV. 5 IN RRSIG ( A 7 2 5 20190501055103 20190424055103 54542 its.gov. RKoAXD4gP/OFHV0A24WAU6yF15iTt1pqOXPXqDwUFEdUjk/KKdzwjZxESex+8NgVwZbEBiADoz3E A4ZuBHyO3pE8O5eYHYsw0fVisV5uQNOMJyTBCpr5J/UlJ2XMN1lrjn127PuGR4Q42PeVY4bYjaIM lFBTY+ogI47AkxONmyA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ITS.GOV is authoritative for ITS.GOV
	Found RRSIG signed by its.gov zone
	Query to ns1.twai.GOV for ITS.GOV/SOA
	Received 2218 bytes from 199.169.194.28
	;; Answer received from 199.169.194.28 (2218 bytes) ;; HEADER SECTION ;; id = 15955 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ITS.GOV. IN SOA ;; ANSWER SECTION (3 records) ITS.GOV. 30 IN SOA ( ns1.twai.GOV. root.ns1.twai.GOV. 2018110801 ;serial 3600 ;refresh 1800 ;retry 864000 ;expire 3600 ;minimum ) ITS.GOV. 30 IN RRSIG ( SOA 7 2 30 20190428221404 20190421221404 29099 its.gov. R3IX4LyUGfnG1XKALY1TmeHl/QLwhskSP3HuP8Dw4IEvtfzJDkxQbFTHtMD6tTmFGApIM8M60Tee CvzjIu61aWtaXI1Pl16rT1yfD9AMkYfemTnvzwCRpiTdUJL//ixQlNeMTYUVVRwtB7bi/FkxGxZ4 GgWrHT/VpGn71SPnr8Q= ) ITS.GOV. 30 IN RRSIG ( SOA 7 2 30 20190501060821 20190424060821 54542 its.gov. ERRNBNnUiPuTG8T/TJDaVbh/SNAgljoGeLRaSSDvI5kF0Dlcw0ut+B0aiMyHVOb5QFt0auB/raGi 48foqHksCuNmCpvAhJmoiYGEMY3GiFVEOPsQrP0BvmfMwvSPFT8w0enB7uDstdVEmnyORU6FNghM wTMhUd8FzIfo0+IT62M= ) ;; AUTHORITY SECTION (4 records) ITS.GOV. 30 IN NS ns2.twai.GOV. ITS.GOV. 30 IN NS ns1.twai.GOV. ITS.GOV. 30 IN RRSIG ( NS 7 2 30 20190429000404 20190422000404 29099 its.gov. Z286ir5vSzvcSc6BC07l41mOp+zX0EpoNhgu9OY0w/cHXDyNyHcPJ9ghXpZINTgyUwzBbu0KrkQw J0tYvgBt4jNjIyvVn+nRVd9TbE+/9O4ze+U1KyMmXQBZNr53H0l58J9vECoJe9IWmjuYe1CkTl+N I9llyNyt+kjQYXiW26w= ) ITS.GOV. 30 IN RRSIG ( NS 7 2 30 20190501060054 20190424060054 54542 its.gov. Pvq2xGOO7+bLPjvLQuyf/Ht9zlzj4qeMptw/wfl1KLm2AiQLazuMUzAZk8Qp+6EcDZcHro5iVT9t ywfufegoARkUuJcfUtjznq59tMvhvrAB6YoKn6fatFEc0QipGnB6fEzRnMAMfsm5cTu6lO9p8DT9 Z8eyljgkE3E/uE6MCIE= ) ;; ADDITIONAL SECTION (13 records) ns1.twai.GOV. 30 IN A 199.169.194.28 ns1.twai.GOV. 30 IN RRSIG ( A 7 3 30 20190428215019 20190421215019 22478 twai.gov. JtmgfjSTQMYf5C/Ln/LpUAbbB+J16X20hblXVUudYWUTK7SDC7zczXc2WFns37XzzDZTMDkVL50K hHnisdJ5sjgBEDFGnF7ZqroQHnA/PRi9iQKMuWTEuETpGwYEQ70nuN7+dlzI4BhtfwuHKENAanmi sRTU8qVD10Sv43HqR/U= ) ns1.twai.GOV. 30 IN RRSIG ( A 7 3 30 20190501055016 20190424055016 12287 twai.gov. mpfUlvmu1DyCFZUxbZeWOn27ydDaREybEXKC2LL6KTxN89UAACVDoVgJ66tkYSm7obYqZpvQ6w/1 eFxLxrM1M8xUdaPD/ZB4PqCsa3/xPjDvD9l1/l5cIQVD4G2vYCueOGRlGBrwvZVlro2FFk0b1Hhe u4obRi+UUc34YptkhJ0= ) ns2.twai.GOV. 30 IN A 199.169.192.28 ns2.twai.GOV. 30 IN RRSIG ( A 7 3 30 20190428215019 20190421215019 22478 twai.gov. hoWosqrxmdCzCllS3zXLE5wgO3l/zaWCd57N2cEgOwknAggL4PHNFrTWWE4fNfVlkjB35cJZs8YC jucqqm2ghfER1bs6z3/dwHN2i4BcHyMPhcU/74dzSFsChpZwc5enWfeuYGuudurSZ/trmD+YEwY9 OVHhhCtMZxoL4DYObnY= ) ns2.twai.GOV. 30 IN RRSIG ( A 7 3 30 20190501055016 20190424055016 12287 twai.gov. sfMThOfyycbSuplhomhmUT/pLOpLbJ0PcyQrm2/K9Ho7OgqHdThCH1Lsw7+o67mTaznAMzbDkUFG l4SBW7NNAxy8XZkyoAEbSlFd/yGJK1iASOWYyE8NYdszN0LNSAbFR1Q0ydIXxBpJQDfLz7R/ZhuU bjPxOZmeegHzy6rL1/w= ) ns1.twai.GOV. 30 IN AAAA 2605:3100:fffc:100::7 ns1.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20190428215019 20190421215019 22478 twai.gov. FKfUK2UOS8FDxePMKWuU8mhx2e9BKVyxuvCNnwrJHkpCpSbGo08K7uBjLGiZQVussrZYpviLZWnD sXZZqJtq+JQOgauJEnK4GWSISYZYoBZsqaUV18rXrZ3oc2sd+dZ63CvE0W58GexqAed1q48JTnLI trqNza/8I72Z+XGfMsI= ) ns1.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20190501055016 20190424055016 12287 twai.gov. C/czKEP0/O+NifUBqkYBM3QgoqAfGhLGBwXezOS6NzjiEg3kVVuVtRgd+0OyZmKnNLMkjbkaqocf 9MfiKXiWrG0ggBkwIkS7imk4dICd6PQhvXJyERrn7U2T8DqExQmrsVkZRaCrG00y5rgJInRz7WYx G2DOz6/01WC6dxV/wKI= ) ns2.twai.GOV. 30 IN AAAA 2605:3100:fffd:100::7 ns2.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20190428215019 20190421215019 22478 twai.gov. RyujIZ1RnjzKq2UqcJA9ryw2/ki0p8ogvpAKnkvPNTAKfyCDqXgAXhHcgf9qnFo7QUA91333R1G1 01Y5AQvczokwmEubSqU/MAu5QPe53PoDhzaZyjwt+DYHFKby6KA65pmX17HrPjJ0egs4v78pobqH hCsXaMtoSfYTN18hJ9Q= ) ns2.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20190501055016 20190424055016 12287 twai.gov. Xlz1kdn3xBwx6pgJXk4xqZMnyOAWTXN4iIg6L/lVp7Vvvyrr3eOX4/5sIxgvolweXPFnL47lkWJc IwHd1bmG3csjCGqKvCMYIl5w7ikjqrAyxRpEAZ3TmbuG0qAx0f4aAWiWxNB4tjpb3ejyUIGq7daE WhJYIZNvmUC4p0Qy9LE= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.twai.GOV for ITS.GOV/A
	Received 386 bytes from 199.169.194.28
	;; Answer received from 199.169.194.28 (386 bytes) ;; HEADER SECTION ;; id = 52085 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ITS.GOV. IN A ;; ANSWER SECTION (3 records) ITS.GOV. 5 IN A 199.169.194.42 ITS.GOV. 5 IN RRSIG ( A 7 2 5 20190428220003 20190421220003 29099 its.gov. mJ4xOtAdkGotGpW05rBTqHGJKlprHKSmqHBkJgBRLagEbhDVy1XnwK3k9EaOavEfqnRP50Ah8xev QBz23s3s/mk4HS5VcRp1hPWxvkPrqOSFbnafzEHPzE/KnKsgimrbye7f7fIVa5iiUSPvedVLLqT4 En6FFn+XhEpe7iQsH9I= ) ITS.GOV. 5 IN RRSIG ( A 7 2 5 20190501055103 20190424055103 54542 its.gov. RKoAXD4gP/OFHV0A24WAU6yF15iTt1pqOXPXqDwUFEdUjk/KKdzwjZxESex+8NgVwZbEBiADoz3E A4ZuBHyO3pE8O5eYHYsw0fVisV5uQNOMJyTBCpr5J/UlJ2XMN1lrjn127PuGR4Q42PeVY4bYjaIM lFBTY+ogI47AkxONmyA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ITS.GOV A RR has value 199.169.194.42
	Found 2 RRSIGs over A RRset
	`ITS.GOV. 5 IN RRSIG ( A 7 2 5 20190428220003 20190421220003 29099 its.gov. mJ4xOtAdkGotGpW05rBTqHGJKlprHKSmqHBkJgBRLagEbhDVy1XnwK3k9EaOavEfqnRP50Ah8xev QBz23s3s/mk4HS5VcRp1hPWxvkPrqOSFbnafzEHPzE/KnKsgimrbye7f7fIVa5iiUSPvedVLLqT4 En6FFn+XhEpe7iQsH9I= )`
	`ITS.GOV. 5 IN RRSIG ( A 7 2 5 20190501055103 20190424055103 54542 its.gov. RKoAXD4gP/OFHV0A24WAU6yF15iTt1pqOXPXqDwUFEdUjk/KKdzwjZxESex+8NgVwZbEBiADoz3E A4ZuBHyO3pE8O5eYHYsw0fVisV5uQNOMJyTBCpr5J/UlJ2XMN1lrjn127PuGR4Q42PeVY4bYjaIM lFBTY+ogI47AkxONmyA= )`
	RRSIG=29099 and DNSKEY=29099 verifies the A RRset
	RRSIG=54542 and DNSKEY=54542 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test ITS.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: