DNSSEC Analyzer - LANL.GOV

Domain Name:

Time: 2021-05-14 23:38:17 UTC, NTP stratum 4

Analyzing DNSSEC problems for LANL.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to i.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (865 bytes) ;; HEADER SECTION ;; id = 33593 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210601000000 20210511000000 20326 . gMnsA3Lm58+9uTDddkHOoqUM18YWhCkx5brt2yk3UM7zojwiLr1Es/mk4am2BwPgHZwOMy+AeT+R 2rCCJlAleAbSXoF3ps6qogze1QS5Xf2eFPXckNWmChWAjmMZEAzzi8bABtUqTd0YhovNE/rhhIf3 OqPW16TM5cqv2ovDZq8+Qj1KFvJ0s+H8tXqI+P4DRR9o43TMbPr0iQYaScj6OaIwhiuMTUb6OT2b JP5c0KnsjDTj+w2AIdNSx2PAJd2jvk/2sMbHpjarmSR25TNfIfheyuDOzvyDtmVQmPls0bYJF6Y+ WFNq3+USPS8HNQEUo0U3tqA1Va8/khAcnUBW9A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210601000000 20210511000000 20326 . gMnsA3Lm58+9uTDddkHOoqUM18YWhCkx5brt2yk3UM7zojwiLr1Es/mk4am2BwPgHZwOMy+AeT+R 2rCCJlAleAbSXoF3ps6qogze1QS5Xf2eFPXckNWmChWAjmMZEAzzi8bABtUqTd0YhovNE/rhhIf3 OqPW16TM5cqv2ovDZq8+Qj1KFvJ0s+H8tXqI+P4DRR9o43TMbPr0iQYaScj6OaIwhiuMTUb6OT2b JP5c0KnsjDTj+w2AIdNSx2PAJd2jvk/2sMbHpjarmSR25TNfIfheyuDOzvyDtmVQmPls0bYJF6Y+ WFNq3+USPS8HNQEUo0U3tqA1Va8/khAcnUBW9A== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=14631 is now in the chain-of-trust
	Query to a.root-servers.net for LANL.GOV/A
	Received 627 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (627 bytes) ;; HEADER SECTION ;; id = 5717 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; LANL.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20210527190000 20210514180000 14631 . hCoHvNIAqzENADG5OjJY4VXFLOoZ4/hPvV1DkC1SPNdfIYI1WCUWwmxtXPWEM+HB3JBJJ88Ezc2w SZmk8hBHDHm/l772OSA5t/X8abePem+PHcdwg6CUw+dLsV2muMZOdK/WsIfnDUVy0jPCpbM1Nnzi 0HQd/B+4SDGJmNvx6WuvDkZ/kIarjWOUX9GSf91H/8H7V83+ZDwHY2xCIJCiSgFMzx+NDf1/BksX yhHmMAF9SGqvQd2uvDEbwG/awR7pWv09AR1WoeLGLj92hF+GDVDs1c/7gSk4ABIVEdiHbT3EzBde skyzbWnTk/XOW8p0MCyE8IrrZQ/3WpLSzvQP+A== ) ;; ADDITIONAL SECTION (9 records) b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to g.root-servers.net for GOV/DNSKEY
	Received 625 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (625 bytes) ;; HEADER SECTION ;; id = 55893 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20210527190000 20210514180000 14631 . hCoHvNIAqzENADG5OjJY4VXFLOoZ4/hPvV1DkC1SPNdfIYI1WCUWwmxtXPWEM+HB3JBJJ88Ezc2w SZmk8hBHDHm/l772OSA5t/X8abePem+PHcdwg6CUw+dLsV2muMZOdK/WsIfnDUVy0jPCpbM1Nnzi 0HQd/B+4SDGJmNvx6WuvDkZ/kIarjWOUX9GSf91H/8H7V83+ZDwHY2xCIJCiSgFMzx+NDf1/BksX yhHmMAF9SGqvQd2uvDEbwG/awR7pWv09AR1WoeLGLj92hF+GDVDs1c/7gSk4ABIVEdiHbT3EzBde skyzbWnTk/XOW8p0MCyE8IrrZQ/3WpLSzvQP+A== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to d.root-servers.net for GOV/DS
	Received 367 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (367 bytes) ;; HEADER SECTION ;; id = 19092 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20210527190000 20210514180000 14631 . hCoHvNIAqzENADG5OjJY4VXFLOoZ4/hPvV1DkC1SPNdfIYI1WCUWwmxtXPWEM+HB3JBJJ88Ezc2w SZmk8hBHDHm/l772OSA5t/X8abePem+PHcdwg6CUw+dLsV2muMZOdK/WsIfnDUVy0jPCpbM1Nnzi 0HQd/B+4SDGJmNvx6WuvDkZ/kIarjWOUX9GSf91H/8H7V83+ZDwHY2xCIJCiSgFMzx+NDf1/BksX yhHmMAF9SGqvQd2uvDEbwG/awR7pWv09AR1WoeLGLj92hF+GDVDs1c/7gSk4ABIVEdiHbT3EzBde skyzbWnTk/XOW8p0MCyE8IrrZQ/3WpLSzvQP+A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found 1 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20210527190000 20210514180000 14631 . hCoHvNIAqzENADG5OjJY4VXFLOoZ4/hPvV1DkC1SPNdfIYI1WCUWwmxtXPWEM+HB3JBJJ88Ezc2w SZmk8hBHDHm/l772OSA5t/X8abePem+PHcdwg6CUw+dLsV2muMZOdK/WsIfnDUVy0jPCpbM1Nnzi 0HQd/B+4SDGJmNvx6WuvDkZ/kIarjWOUX9GSf91H/8H7V83+ZDwHY2xCIJCiSgFMzx+NDf1/BksX yhHmMAF9SGqvQd2uvDEbwG/awR7pWv09AR1WoeLGLj92hF+GDVDs1c/7gSk4ABIVEdiHbT3EzBde skyzbWnTk/XOW8p0MCyE8IrrZQ/3WpLSzvQP+A== )`
	RRSIG=14631 and DNSKEY=14631 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to b.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (777 bytes) ;; HEADER SECTION ;; id = 54044 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbexj/PgN9RGQ1TokFnYjJ87/rMFIqE/rXjWtsmwzxteOcKIVCUJAAWg0pIZZer88omuCVrq +fAz0iBOgY48TRFWgyVFV9rm5esTGOEuCU6BTYj1Cb7zrpb/RayEw0yzVVZ0adT/AXbAsQhteTpV kgWK8K33gxq4wY70AK5KWdDCyj4v9uR6TS0mgbGdg7RzFCi8xeZoYP2PY5XOhAHFon0= ) ; Key ID = 48498 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210524190254 20210509185754 7698 gov. OgUUmguy6HS+AcNAUUxxinzf47xubcLwfLc+B/xt+kM//rKUgtxZjor/wh4xNRZa+SV0j6aJ/y/u We0JV/dbI9cueoq9xYSDzk2BPTW3WFjYKv1X2xcy+tfuPfbAUj5ZG20y5FUxnlcgHfDv+QnK0P5o e/yoeAFFma85ZozCWYGHwOoctKdaVq9dWyrljKdsl9Kwzkd3f7SA7dBXoo3ytFeM1NeEY9gRlTFp zrPRsTqksloHzamrlBu8hmRLEHGNh1l1M6JB4qn22VhJJ76k2yiT6WBvhhyUK4C/MRiAdxqMvuUM SO1OaIUaAVdZgJEg5Az/MIdD7OV1zaQBaA4mgw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbexj/PgN9RGQ1TokFnYjJ87/rMFIqE/rXjWtsmwzxteOcKIVCUJAAWg0pIZZer88omuCVrq +fAz0iBOgY48TRFWgyVFV9rm5esTGOEuCU6BTYj1Cb7zrpb/RayEw0yzVVZ0adT/AXbAsQhteTpV kgWK8K33gxq4wY70AK5KWdDCyj4v9uR6TS0mgbGdg7RzFCi8xeZoYP2PY5XOhAHFon0= ) ; Key ID = 48498`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210524190254 20210509185754 7698 gov. OgUUmguy6HS+AcNAUUxxinzf47xubcLwfLc+B/xt+kM//rKUgtxZjor/wh4xNRZa+SV0j6aJ/y/u We0JV/dbI9cueoq9xYSDzk2BPTW3WFjYKv1X2xcy+tfuPfbAUj5ZG20y5FUxnlcgHfDv+QnK0P5o e/yoeAFFma85ZozCWYGHwOoctKdaVq9dWyrljKdsl9Kwzkd3f7SA7dBXoo3ytFeM1NeEY9gRlTFp zrPRsTqksloHzamrlBu8hmRLEHGNh1l1M6JB4qn22VhJJ76k2yiT6WBvhhyUK4C/MRiAdxqMvuUM SO1OaIUaAVdZgJEg5Az/MIdD7OV1zaQBaA4mgw== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=48498 is now in the chain-of-trust
	Query to b.gov-servers.net for LANL.GOV/A
	Received 446 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (446 bytes) ;; HEADER SECTION ;; id = 11414 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; LANL.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) LANL.GOV. 86400 IN NS adns2.es.net. LANL.GOV. 86400 IN NS adns1.es.net. LANL.GOV. 3600 IN DS ( 41410 8 2 1634ed184fd11b58e19d4a14f0f939beb76e7090c9eca9a83f7b482f2fd77885 ) LANL.GOV. 3600 IN DS 41410 8 1 6ff34ff18f6f358211b29c0187c5daf427974357 LANL.GOV. 3600 IN DS 11749 8 1 480fed0935216c5d12eff709c12814eb4d889a99 LANL.GOV. 3600 IN DS ( 11749 8 2 d3fde837285900bc013fd8fc7eb7243b8768c26863fcaf5b536a4d3fefd4e70e ) LANL.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210521211008 20210514211008 48498 gov. nuS7eTzmalxRulKVlhQbwgg0nkXpv08Ivb9TnjAZPfadQ3/JbmZkNwqDu2zCLbAzDFj5/XOHdOzp lrIg+uE6oArtzAu20RKKZhisMe+C+lxytxTBS8aYVY1cGKqdPDIY11xmslPchZOTUefvJjQZvjSD On7aJ264yXAYDd/7TexyUSJaH9gA88TZqMAP8Fa7GMICWvBypUM8ebqbrNbIKA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.gov-servers.net for LANL.GOV/DNSKEY
	Received 446 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (446 bytes) ;; HEADER SECTION ;; id = 28017 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; LANL.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) LANL.GOV. 86400 IN NS adns2.es.net. LANL.GOV. 86400 IN NS adns1.es.net. LANL.GOV. 3600 IN DS ( 41410 8 2 1634ed184fd11b58e19d4a14f0f939beb76e7090c9eca9a83f7b482f2fd77885 ) LANL.GOV. 3600 IN DS 41410 8 1 6ff34ff18f6f358211b29c0187c5daf427974357 LANL.GOV. 3600 IN DS 11749 8 1 480fed0935216c5d12eff709c12814eb4d889a99 LANL.GOV. 3600 IN DS ( 11749 8 2 d3fde837285900bc013fd8fc7eb7243b8768c26863fcaf5b536a4d3fefd4e70e ) LANL.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210521211008 20210514211008 48498 gov. nuS7eTzmalxRulKVlhQbwgg0nkXpv08Ivb9TnjAZPfadQ3/JbmZkNwqDu2zCLbAzDFj5/XOHdOzp lrIg+uE6oArtzAu20RKKZhisMe+C+lxytxTBS8aYVY1cGKqdPDIY11xmslPchZOTUefvJjQZvjSD On7aJ264yXAYDd/7TexyUSJaH9gA88TZqMAP8Fa7GMICWvBypUM8ebqbrNbIKA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone LANL.GOV

LANL.GOV

	Checking DS between GOV and LANL.GOV
	Query to b.gov-servers.net for LANL.GOV/DS
	Received 400 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (400 bytes) ;; HEADER SECTION ;; id = 45389 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; LANL.GOV. IN DS ;; ANSWER SECTION (5 records) LANL.GOV. 3600 IN DS ( 41410 8 2 1634ed184fd11b58e19d4a14f0f939beb76e7090c9eca9a83f7b482f2fd77885 ) LANL.GOV. 3600 IN DS 41410 8 1 6ff34ff18f6f358211b29c0187c5daf427974357 LANL.GOV. 3600 IN DS 11749 8 1 480fed0935216c5d12eff709c12814eb4d889a99 LANL.GOV. 3600 IN DS ( 11749 8 2 d3fde837285900bc013fd8fc7eb7243b8768c26863fcaf5b536a4d3fefd4e70e ) LANL.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210521211008 20210514211008 48498 gov. nuS7eTzmalxRulKVlhQbwgg0nkXpv08Ivb9TnjAZPfadQ3/JbmZkNwqDu2zCLbAzDFj5/XOHdOzp lrIg+uE6oArtzAu20RKKZhisMe+C+lxytxTBS8aYVY1cGKqdPDIY11xmslPchZOTUefvJjQZvjSD On7aJ264yXAYDd/7TexyUSJaH9gA88TZqMAP8Fa7GMICWvBypUM8ebqbrNbIKA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for LANL.GOV in the GOV zone
	DS=41410/SHA-256 has algorithm RSASHA256
	DS=41410/SHA-1 has algorithm RSASHA256
	DS=11749/SHA-1 has algorithm RSASHA256
	DS=11749/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`LANL.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210521211008 20210514211008 48498 gov. nuS7eTzmalxRulKVlhQbwgg0nkXpv08Ivb9TnjAZPfadQ3/JbmZkNwqDu2zCLbAzDFj5/XOHdOzp lrIg+uE6oArtzAu20RKKZhisMe+C+lxytxTBS8aYVY1cGKqdPDIY11xmslPchZOTUefvJjQZvjSD On7aJ264yXAYDd/7TexyUSJaH9gA88TZqMAP8Fa7GMICWvBypUM8ebqbrNbIKA== )`
	RRSIG=48498 and DNSKEY=48498 verifies the DS RRset
	DS=41410/SHA-256 is now in the chain-of-trust
	DS=11749/SHA-1 is now in the chain-of-trust
	`LANL.GOV. 3600 IN DS ( 41410 8 2 1634ed184fd11b58e19d4a14f0f939beb76e7090c9eca9a83f7b482f2fd77885 )`
	`LANL.GOV. 3600 IN DS 41410 8 1 6ff34ff18f6f358211b29c0187c5daf427974357`
	`LANL.GOV. 3600 IN DS 11749 8 1 480fed0935216c5d12eff709c12814eb4d889a99`
	`LANL.GOV. 3600 IN DS ( 11749 8 2 d3fde837285900bc013fd8fc7eb7243b8768c26863fcaf5b536a4d3fefd4e70e )`
	Query to adns1.es.net for LANL.GOV/DNSKEY
	Received 1821 bytes from 192.188.22.22
	;; Answer received from 192.188.22.22 (1821 bytes) ;; HEADER SECTION ;; id = 12271 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; LANL.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) lanl.gov. 302400 IN DNSKEY ( 257 3 8 AwEAAaXjBWIabv4Yngj0kzwu0XVIPrDYZCOHZWapvrw5KygLaFsWhyLYC5gev/9HUCajWX12Iy8I xrwOuYxD/+va0g24CZmZdHOHGEc+ZR2lUQxx/ApFYIR2RXnRtPpUXB66iM2hnky0kEBPia3OzkXW 4IimyrKsfNcKBWnq6eSwiGP2pK2acSaCPZizbTSZC5h0VeWDnZLkYUhEc02xiNvahOn4yPLyTT9b l16bYWWCscTdFlFPh+Mu7DJ89ilPt6BNd8kZqGVhxP98TGXktZ/RRZftkjSMXPOWo4MWKjmWJ7Xu BX13AtpvkFQXaUeU3fJuugIFLldencaQQRv6+oF0Wn0= ) ; Key ID = 11749 lanl.gov. 302400 IN DNSKEY ( 256 3 8 AwEAAckWO4pi92wZlTo2rYyvn8NKB/xqpWl8Pj8+Qmz1qYFtF2VLxfmIRXDsXnmlLsEI+WwO9YQV 4SiO2DA9uRwmbOz9IM2LjOh6QPLJvi6oq7FFfZhQNXw/P1cZqC3fmRny1oSoPZtyy59GnMEzx+Om uty0FvtklZCBZnRD60DOZ1lf ) ; Key ID = 32145 lanl.gov. 302400 IN DNSKEY ( 256 3 8 AwEAAeALbGulwjDu1bWvcfSsMqw3SZMYTFd4KMEQaGlM+GWrbyGNAD6jwpRndpKOwOwubxqEpiOj WodeZPtyC5sajvyPZZkryH6zH+3pQ4ZY8kb+A7DOhu4URPKqWKCqog7aZw1U1IyvQ1t3vn+3xVQN iuaOY3UIOqVaFNdqU6f/WsKZ ) ; Key ID = 7734 lanl.gov. 302400 IN DNSKEY ( 257 3 8 AwEAAdyHy6a8TdTSMCaVQUTJxhm1PLOTXeTIyHpBwVsBGCP2oNXwW2onr4m06+/AxbIm3Q94Oy5h /HkGBS/3/8Muw6YgxoEdAYEmbfjOqWQ0yfZKiFw1ZPSZDsHXxgku9oCoOXQNpZauG8YZk/lsmSG2 v2BZEDPacKjti7T2tCabE5y8f+eSeOKRH1ASItusCAqPcgnzNIGiRJ20Dk1IMXEnfbmmjLXdsHXO p+bLt0+m88/gArDkj07i3pnweZ8nCbfJynzqHpArEK2d5o+2rW1XJo6bDUhcjgX5x+Cz+06IV81G QLRhRPvWou0kiKu3+C6v5Z+T3qycPWYiB5jEmpI4R78= ) ; Key ID = 41410 lanl.gov. 302400 IN RRSIG ( DNSKEY 8 2 302400 20210521150908 20210514150749 7734 lanl.gov. L1J3glWVEY/x4gapwq+f3oULuiN4I4thOCc10FGqCor+q9yfMQQbGgT0s2fcewNxEaXMSKf35gGa xU74ErEOGjJ2TdfErraEyYtHzyt3vDU9yldF+XmAWTvyW2pJ9L6D0Tmc6AFBP00eoThAMPEAzRWU qbVcpzP2LjWKtxipWcU= ) lanl.gov. 302400 IN RRSIG ( DNSKEY 8 2 302400 20210521150908 20210514150749 11749 lanl.gov. oObfLEE4f9Xd6IRBkO6QipW4N8Y1EfFwQdK31W0XWFsHM86NREC13St951COb5p84wHXX2RFAMGo fUahiiLLmkHoJqd3rQTLOjMkLVBuf9wyWjk6X5aLtcMn4JjVjFmw0/hueDzigyZqB8n80EDE8rBC l9SKJVvJICaZoDhefmSs6l6gP4lqTUawASfhUJJ/kHIGWEDfamY91Ygu9SxEKlpcRY1qw9FTbXvz gE5X/tdf2UIstcqyWzaZwxJfSEVUS2SRTR/NInrEAHM4rn/mmB8W0+b4W/TQEq1YhxOKW5lFKBJs zsRVDM5Z77UBHIk8IZATKWSm1mdThKuRKI7rUw== ) lanl.gov. 302400 IN RRSIG ( DNSKEY 8 2 302400 20210521150908 20210514150749 32145 lanl.gov. gXf/FWL1v7hN58FO0JtfF9uhL+2IZyOGYq0D0qBqW/627zDUgVR8DLatOQTci3PszGc9BCRp71aJ Q14jVepbdFvpzQ0NTs+A3POjUEpP/R5bsUFvgogZI9eHVd0r5toq43H538JbhKsj6Og6mx/861MZ hgeCVhbIMgOmYYpxACY= ) lanl.gov. 302400 IN RRSIG ( DNSKEY 8 2 302400 20210521150908 20210514150749 41410 lanl.gov. WJEnNlppwZem5X1oTL5hd8Kpz5LbDGFqb92Kc9l8ow3yNaWiqGRST064rZzLsgZRw3jhfJTKEnJK ZtXGzikZJTvtfKfgzPrsFWiQp8/KMrfbqYl8YDZTVK8K1V61BHeAPmi8Txhjl3mrg+hi6xuRpiyz HU0CprU16MzBylzc2Ckj1tC11up0HZKI49yNqyB+s0s81n2ZbkgFsnXKEmB2bIOBR+aVu1zhgxM6 9fMcGZtL5dSDQUk7EVKQfbD3ZtsJocQgkl5iGP2OrK6DZjihatWGC8RNxAF0GurtPPhNhVz+7cuB wxhMG+OIE0gnRVmc3taL0etedMQj4JR23nvhMA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 4 DNSKEY records for LANL.GOV
	`lanl.gov. 302400 IN DNSKEY ( 257 3 8 AwEAAaXjBWIabv4Yngj0kzwu0XVIPrDYZCOHZWapvrw5KygLaFsWhyLYC5gev/9HUCajWX12Iy8I xrwOuYxD/+va0g24CZmZdHOHGEc+ZR2lUQxx/ApFYIR2RXnRtPpUXB66iM2hnky0kEBPia3OzkXW 4IimyrKsfNcKBWnq6eSwiGP2pK2acSaCPZizbTSZC5h0VeWDnZLkYUhEc02xiNvahOn4yPLyTT9b l16bYWWCscTdFlFPh+Mu7DJ89ilPt6BNd8kZqGVhxP98TGXktZ/RRZftkjSMXPOWo4MWKjmWJ7Xu BX13AtpvkFQXaUeU3fJuugIFLldencaQQRv6+oF0Wn0= ) ; Key ID = 11749`
	`lanl.gov. 302400 IN DNSKEY ( 256 3 8 AwEAAckWO4pi92wZlTo2rYyvn8NKB/xqpWl8Pj8+Qmz1qYFtF2VLxfmIRXDsXnmlLsEI+WwO9YQV 4SiO2DA9uRwmbOz9IM2LjOh6QPLJvi6oq7FFfZhQNXw/P1cZqC3fmRny1oSoPZtyy59GnMEzx+Om uty0FvtklZCBZnRD60DOZ1lf ) ; Key ID = 32145`
	`lanl.gov. 302400 IN DNSKEY ( 256 3 8 AwEAAeALbGulwjDu1bWvcfSsMqw3SZMYTFd4KMEQaGlM+GWrbyGNAD6jwpRndpKOwOwubxqEpiOj WodeZPtyC5sajvyPZZkryH6zH+3pQ4ZY8kb+A7DOhu4URPKqWKCqog7aZw1U1IyvQ1t3vn+3xVQN iuaOY3UIOqVaFNdqU6f/WsKZ ) ; Key ID = 7734`
	`lanl.gov. 302400 IN DNSKEY ( 257 3 8 AwEAAdyHy6a8TdTSMCaVQUTJxhm1PLOTXeTIyHpBwVsBGCP2oNXwW2onr4m06+/AxbIm3Q94Oy5h /HkGBS/3/8Muw6YgxoEdAYEmbfjOqWQ0yfZKiFw1ZPSZDsHXxgku9oCoOXQNpZauG8YZk/lsmSG2 v2BZEDPacKjti7T2tCabE5y8f+eSeOKRH1ASItusCAqPcgnzNIGiRJ20Dk1IMXEnfbmmjLXdsHXO p+bLt0+m88/gArDkj07i3pnweZ8nCbfJynzqHpArEK2d5o+2rW1XJo6bDUhcjgX5x+Cz+06IV81G QLRhRPvWou0kiKu3+C6v5Z+T3qycPWYiB5jEmpI4R78= ) ; Key ID = 41410`
	DNSKEY=11749/SEP is now in the chain-of-trust
	DS=11749/SHA-1 verifies DNSKEY=11749/SEP
	DS=11749/SHA-256 verifies DNSKEY=11749/SEP
	DNSKEY=41410/SEP is now in the chain-of-trust
	DS=41410/SHA-256 verifies DNSKEY=41410/SEP
	DS=41410/SHA-1 verifies DNSKEY=41410/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`lanl.gov. 302400 IN RRSIG ( DNSKEY 8 2 302400 20210521150908 20210514150749 7734 lanl.gov. L1J3glWVEY/x4gapwq+f3oULuiN4I4thOCc10FGqCor+q9yfMQQbGgT0s2fcewNxEaXMSKf35gGa xU74ErEOGjJ2TdfErraEyYtHzyt3vDU9yldF+XmAWTvyW2pJ9L6D0Tmc6AFBP00eoThAMPEAzRWU qbVcpzP2LjWKtxipWcU= )`
	`lanl.gov. 302400 IN RRSIG ( DNSKEY 8 2 302400 20210521150908 20210514150749 11749 lanl.gov. oObfLEE4f9Xd6IRBkO6QipW4N8Y1EfFwQdK31W0XWFsHM86NREC13St951COb5p84wHXX2RFAMGo fUahiiLLmkHoJqd3rQTLOjMkLVBuf9wyWjk6X5aLtcMn4JjVjFmw0/hueDzigyZqB8n80EDE8rBC l9SKJVvJICaZoDhefmSs6l6gP4lqTUawASfhUJJ/kHIGWEDfamY91Ygu9SxEKlpcRY1qw9FTbXvz gE5X/tdf2UIstcqyWzaZwxJfSEVUS2SRTR/NInrEAHM4rn/mmB8W0+b4W/TQEq1YhxOKW5lFKBJs zsRVDM5Z77UBHIk8IZATKWSm1mdThKuRKI7rUw== )`
	`lanl.gov. 302400 IN RRSIG ( DNSKEY 8 2 302400 20210521150908 20210514150749 32145 lanl.gov. gXf/FWL1v7hN58FO0JtfF9uhL+2IZyOGYq0D0qBqW/627zDUgVR8DLatOQTci3PszGc9BCRp71aJ Q14jVepbdFvpzQ0NTs+A3POjUEpP/R5bsUFvgogZI9eHVd0r5toq43H538JbhKsj6Og6mx/861MZ hgeCVhbIMgOmYYpxACY= )`
	`lanl.gov. 302400 IN RRSIG ( DNSKEY 8 2 302400 20210521150908 20210514150749 41410 lanl.gov. WJEnNlppwZem5X1oTL5hd8Kpz5LbDGFqb92Kc9l8ow3yNaWiqGRST064rZzLsgZRw3jhfJTKEnJK ZtXGzikZJTvtfKfgzPrsFWiQp8/KMrfbqYl8YDZTVK8K1V61BHeAPmi8Txhjl3mrg+hi6xuRpiyz HU0CprU16MzBylzc2Ckj1tC11up0HZKI49yNqyB+s0s81n2ZbkgFsnXKEmB2bIOBR+aVu1zhgxM6 9fMcGZtL5dSDQUk7EVKQfbD3ZtsJocQgkl5iGP2OrK6DZjihatWGC8RNxAF0GurtPPhNhVz+7cuB wxhMG+OIE0gnRVmc3taL0etedMQj4JR23nvhMA== )`
	RRSIG=7734 and DNSKEY=7734 verifies the DNSKEY RRset
	RRSIG=11749 and DNSKEY=11749/SEP verifies the DNSKEY RRset
	RRSIG=32145 and DNSKEY=32145 verifies the DNSKEY RRset
	RRSIG=41410 and DNSKEY=41410/SEP verifies the DNSKEY RRset
	DNSKEY=32145 is now in the chain-of-trust
	DNSKEY=7734 is now in the chain-of-trust
	Query to adns1.es.net for LANL.GOV/A
	Received 397 bytes from 192.188.22.22
	;; Answer received from 192.188.22.22 (397 bytes) ;; HEADER SECTION ;; id = 20035 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; LANL.GOV. IN A ;; ANSWER SECTION (3 records) lanl.gov. 3600 IN A 204.121.60.11 lanl.gov. 3600 IN RRSIG ( A 8 2 3600 20210520212035 20210513204210 7734 lanl.gov. Eqz+4YKI29tGCB86tBcy7Yh3djhhwPc0pKNiDiyfeoAD70u1uu/Xv82wP/wL5k5VH2KpmO1gSK6N MG1px5wwo5FeLFRjUb4s7G7wMqNkhf2Ktr8WGkQZwbf2O2FMDJpT3FW0zzRVnxZ04vsbDQZ3e9at soTXBQfJ9R5xZu1Cp9w= ) lanl.gov. 3600 IN RRSIG ( A 8 2 3600 20210520212035 20210513204210 32145 lanl.gov. XNR/cMFv14Yy1sTvIXqwqCxcDTypJcN5ofZtK6abS0N50JVOlTy56rmPwxBkgnZE3kPLJwN80Idb VGYbFg5p6FyuF3OIhvessTrLv49l4y0G30lFqo9IM1pv5aojM8RN2k80ontRqneOQuGvBafQWzzE UWeiRkib3gCXaAK48H4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	adns1.es.net is authoritative for LANL.GOV
	Found RRSIG signed by lanl.gov zone
	Query to adns2.es.net for LANL.GOV/SOA
	Received 998 bytes from 192.188.22.52
	;; Answer received from 192.188.22.52 (998 bytes) ;; HEADER SECTION ;; id = 34959 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 7 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; LANL.GOV. IN SOA ;; ANSWER SECTION (3 records) lanl.gov. 3600 IN SOA ( nsx.lanl.gov. hostmaster.lanl.gov. 2012855301 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 180 ;minimum ) lanl.gov. 3600 IN RRSIG ( SOA 8 2 3600 20210521233459 20210514223459 7734 lanl.gov. Yj5YYsHOxp11civbA3VC7uUarNKZkKrbymI7kQYtk3Cq7O17mAMtlS0ABSD+wJOUsXUEMgLSrfMm mX1PWi50Fw+PHkwmEngPtNrr7VJoLFMyLswhAxZgMhpApr4xdpXbo/TD/i+JiwWLlmFBO3Us8jom 7696V9Rk7f7etbuv1pA= ) lanl.gov. 3600 IN RRSIG ( SOA 8 2 3600 20210521233459 20210514223459 32145 lanl.gov. X5loBFvn5FYPL6VtYVF+R+IAenp4T1eXKJrP7/HIaPQkcp+7hXe3jnDfTpkBxQbPdRfMdMUGZjod HfRzmlhW/sbKkOSFVGaGD4STXGq9fdnhosKOORXjVP6jhxfdFpmpNugK7jC6IkvAHWf1Tm91/9Vw PFoli3nyCemVyhvPLl0= ) ;; AUTHORITY SECTION (7 records) lanl.gov. 3600 IN NS nsx3.lanl.gov. lanl.gov. 3600 IN NS adns2.es.net. lanl.gov. 3600 IN NS nsx.lanl.gov. lanl.gov. 3600 IN NS nsx2.lanl.gov. lanl.gov. 3600 IN NS adns1.es.net. lanl.gov. 3600 IN RRSIG ( NS 8 2 3600 20210521205856 20210514202140 7734 lanl.gov. jnnDPpqgbu9+MvAI+2wDBLozgT7cmPYhIxUi9Vybscu1ZU+GySiC16drqIpk+fdFlHYzIRzZH5IV knRXwGKeRwtpHIklZXE8I5jq5A1W4mFMkyK1gILlMo+/JX6868UWBhbk2vZ2f67435YBUEFUemA9 t2GnNbZA2ag/vbHjeUU= ) lanl.gov. 3600 IN RRSIG ( NS 8 2 3600 20210521205856 20210514202140 32145 lanl.gov. LaOStSBeQG8MZ6B5w/70tmqjQFdJEjrgyK2iA6oIByP32TsYmY2KP24BwHgA+0LIhcQss7EAIIyS ILZNUWBHI0+dNSUiCzKMSjetS2rsjsP2dKmGbvgpRC+b7UCR+XaldGHOWk+Uc9LjeT/YTuLBQ6XF Pr6UMxh9rERqQiz5t+8= ) ;; ADDITIONAL SECTION (7 records) nsx.lanl.gov. 3600 IN A 204.121.3.1 nsx2.lanl.gov. 3600 IN A 204.121.6.1 nsx3.lanl.gov. 3600 IN A 204.121.3.2 nsx.lanl.gov. 3600 IN AAAA 2620:126:4000:1801::53 nsx2.lanl.gov. 3600 IN AAAA 2620:126:4000:1802::53 nsx3.lanl.gov. 3600 IN AAAA 2620:126:4000:1801::54 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to adns1.es.net for LANL.GOV/A
	Received 397 bytes from 192.188.22.22
	;; Answer received from 192.188.22.22 (397 bytes) ;; HEADER SECTION ;; id = 16017 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; LANL.GOV. IN A ;; ANSWER SECTION (3 records) lanl.gov. 3600 IN A 204.121.60.11 lanl.gov. 3600 IN RRSIG ( A 8 2 3600 20210520212035 20210513204210 7734 lanl.gov. Eqz+4YKI29tGCB86tBcy7Yh3djhhwPc0pKNiDiyfeoAD70u1uu/Xv82wP/wL5k5VH2KpmO1gSK6N MG1px5wwo5FeLFRjUb4s7G7wMqNkhf2Ktr8WGkQZwbf2O2FMDJpT3FW0zzRVnxZ04vsbDQZ3e9at soTXBQfJ9R5xZu1Cp9w= ) lanl.gov. 3600 IN RRSIG ( A 8 2 3600 20210520212035 20210513204210 32145 lanl.gov. XNR/cMFv14Yy1sTvIXqwqCxcDTypJcN5ofZtK6abS0N50JVOlTy56rmPwxBkgnZE3kPLJwN80Idb VGYbFg5p6FyuF3OIhvessTrLv49l4y0G30lFqo9IM1pv5aojM8RN2k80ontRqneOQuGvBafQWzzE UWeiRkib3gCXaAK48H4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	LANL.GOV A RR has value 204.121.60.11
	Found 2 RRSIGs over A RRset
	`lanl.gov. 3600 IN RRSIG ( A 8 2 3600 20210520212035 20210513204210 7734 lanl.gov. Eqz+4YKI29tGCB86tBcy7Yh3djhhwPc0pKNiDiyfeoAD70u1uu/Xv82wP/wL5k5VH2KpmO1gSK6N MG1px5wwo5FeLFRjUb4s7G7wMqNkhf2Ktr8WGkQZwbf2O2FMDJpT3FW0zzRVnxZ04vsbDQZ3e9at soTXBQfJ9R5xZu1Cp9w= )`
	`lanl.gov. 3600 IN RRSIG ( A 8 2 3600 20210520212035 20210513204210 32145 lanl.gov. XNR/cMFv14Yy1sTvIXqwqCxcDTypJcN5ofZtK6abS0N50JVOlTy56rmPwxBkgnZE3kPLJwN80Idb VGYbFg5p6FyuF3OIhvessTrLv49l4y0G30lFqo9IM1pv5aojM8RN2k80ontRqneOQuGvBafQWzzE UWeiRkib3gCXaAK48H4= )`
	RRSIG=7734 and DNSKEY=7734 verifies the A RRset
	RRSIG=32145 and DNSKEY=32145 verifies the A RRset

LANL.GOV

	Query to adns2.es.net for LANL.GOV/A
	Received 967 bytes from 192.188.22.52
	;; Answer received from 192.188.22.52 (967 bytes) ;; HEADER SECTION ;; id = 4756 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 7 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; LANL.GOV. IN A ;; ANSWER SECTION (3 records) lanl.gov. 3600 IN A 204.121.60.11 lanl.gov. 3600 IN RRSIG ( A 8 2 3600 20210520212035 20210513204210 7734 lanl.gov. Eqz+4YKI29tGCB86tBcy7Yh3djhhwPc0pKNiDiyfeoAD70u1uu/Xv82wP/wL5k5VH2KpmO1gSK6N MG1px5wwo5FeLFRjUb4s7G7wMqNkhf2Ktr8WGkQZwbf2O2FMDJpT3FW0zzRVnxZ04vsbDQZ3e9at soTXBQfJ9R5xZu1Cp9w= ) lanl.gov. 3600 IN RRSIG ( A 8 2 3600 20210520212035 20210513204210 32145 lanl.gov. XNR/cMFv14Yy1sTvIXqwqCxcDTypJcN5ofZtK6abS0N50JVOlTy56rmPwxBkgnZE3kPLJwN80Idb VGYbFg5p6FyuF3OIhvessTrLv49l4y0G30lFqo9IM1pv5aojM8RN2k80ontRqneOQuGvBafQWzzE UWeiRkib3gCXaAK48H4= ) ;; AUTHORITY SECTION (7 records) lanl.gov. 3600 IN NS nsx3.lanl.gov. lanl.gov. 3600 IN NS nsx.lanl.gov. lanl.gov. 3600 IN NS adns2.es.net. lanl.gov. 3600 IN NS nsx2.lanl.gov. lanl.gov. 3600 IN NS adns1.es.net. lanl.gov. 3600 IN RRSIG ( NS 8 2 3600 20210521205856 20210514202140 7734 lanl.gov. jnnDPpqgbu9+MvAI+2wDBLozgT7cmPYhIxUi9Vybscu1ZU+GySiC16drqIpk+fdFlHYzIRzZH5IV knRXwGKeRwtpHIklZXE8I5jq5A1W4mFMkyK1gILlMo+/JX6868UWBhbk2vZ2f67435YBUEFUemA9 t2GnNbZA2ag/vbHjeUU= ) lanl.gov. 3600 IN RRSIG ( NS 8 2 3600 20210521205856 20210514202140 32145 lanl.gov. LaOStSBeQG8MZ6B5w/70tmqjQFdJEjrgyK2iA6oIByP32TsYmY2KP24BwHgA+0LIhcQss7EAIIyS ILZNUWBHI0+dNSUiCzKMSjetS2rsjsP2dKmGbvgpRC+b7UCR+XaldGHOWk+Uc9LjeT/YTuLBQ6XF Pr6UMxh9rERqQiz5t+8= ) ;; ADDITIONAL SECTION (7 records) nsx.lanl.gov. 3600 IN A 204.121.3.1 nsx2.lanl.gov. 3600 IN A 204.121.6.1 nsx3.lanl.gov. 3600 IN A 204.121.3.2 nsx.lanl.gov. 3600 IN AAAA 2620:126:4000:1801::53 nsx2.lanl.gov. 3600 IN AAAA 2620:126:4000:1802::53 nsx3.lanl.gov. 3600 IN AAAA 2620:126:4000:1801::54 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	adns2.es.net is authoritative for LANL.GOV
	Found RRSIG signed by lanl.gov zone
	Query to adns2.es.net for LANL.GOV/A
	Received 967 bytes from 192.188.22.52
	;; Answer received from 192.188.22.52 (967 bytes) ;; HEADER SECTION ;; id = 10842 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 7 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; LANL.GOV. IN A ;; ANSWER SECTION (3 records) lanl.gov. 3600 IN A 204.121.60.11 lanl.gov. 3600 IN RRSIG ( A 8 2 3600 20210520212035 20210513204210 7734 lanl.gov. Eqz+4YKI29tGCB86tBcy7Yh3djhhwPc0pKNiDiyfeoAD70u1uu/Xv82wP/wL5k5VH2KpmO1gSK6N MG1px5wwo5FeLFRjUb4s7G7wMqNkhf2Ktr8WGkQZwbf2O2FMDJpT3FW0zzRVnxZ04vsbDQZ3e9at soTXBQfJ9R5xZu1Cp9w= ) lanl.gov. 3600 IN RRSIG ( A 8 2 3600 20210520212035 20210513204210 32145 lanl.gov. XNR/cMFv14Yy1sTvIXqwqCxcDTypJcN5ofZtK6abS0N50JVOlTy56rmPwxBkgnZE3kPLJwN80Idb VGYbFg5p6FyuF3OIhvessTrLv49l4y0G30lFqo9IM1pv5aojM8RN2k80ontRqneOQuGvBafQWzzE UWeiRkib3gCXaAK48H4= ) ;; AUTHORITY SECTION (7 records) lanl.gov. 3600 IN NS nsx.lanl.gov. lanl.gov. 3600 IN NS nsx3.lanl.gov. lanl.gov. 3600 IN NS adns1.es.net. lanl.gov. 3600 IN NS adns2.es.net. lanl.gov. 3600 IN NS nsx2.lanl.gov. lanl.gov. 3600 IN RRSIG ( NS 8 2 3600 20210521205856 20210514202140 7734 lanl.gov. jnnDPpqgbu9+MvAI+2wDBLozgT7cmPYhIxUi9Vybscu1ZU+GySiC16drqIpk+fdFlHYzIRzZH5IV knRXwGKeRwtpHIklZXE8I5jq5A1W4mFMkyK1gILlMo+/JX6868UWBhbk2vZ2f67435YBUEFUemA9 t2GnNbZA2ag/vbHjeUU= ) lanl.gov. 3600 IN RRSIG ( NS 8 2 3600 20210521205856 20210514202140 32145 lanl.gov. LaOStSBeQG8MZ6B5w/70tmqjQFdJEjrgyK2iA6oIByP32TsYmY2KP24BwHgA+0LIhcQss7EAIIyS ILZNUWBHI0+dNSUiCzKMSjetS2rsjsP2dKmGbvgpRC+b7UCR+XaldGHOWk+Uc9LjeT/YTuLBQ6XF Pr6UMxh9rERqQiz5t+8= ) ;; ADDITIONAL SECTION (7 records) nsx.lanl.gov. 3600 IN A 204.121.3.1 nsx2.lanl.gov. 3600 IN A 204.121.6.1 nsx3.lanl.gov. 3600 IN A 204.121.3.2 nsx.lanl.gov. 3600 IN AAAA 2620:126:4000:1801::53 nsx2.lanl.gov. 3600 IN AAAA 2620:126:4000:1802::53 nsx3.lanl.gov. 3600 IN AAAA 2620:126:4000:1801::54 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	LANL.GOV A RR has value 204.121.60.11
	Found 2 RRSIGs over A RRset
	`lanl.gov. 3600 IN RRSIG ( A 8 2 3600 20210520212035 20210513204210 7734 lanl.gov. Eqz+4YKI29tGCB86tBcy7Yh3djhhwPc0pKNiDiyfeoAD70u1uu/Xv82wP/wL5k5VH2KpmO1gSK6N MG1px5wwo5FeLFRjUb4s7G7wMqNkhf2Ktr8WGkQZwbf2O2FMDJpT3FW0zzRVnxZ04vsbDQZ3e9at soTXBQfJ9R5xZu1Cp9w= )`
	`lanl.gov. 3600 IN RRSIG ( A 8 2 3600 20210520212035 20210513204210 32145 lanl.gov. XNR/cMFv14Yy1sTvIXqwqCxcDTypJcN5ofZtK6abS0N50JVOlTy56rmPwxBkgnZE3kPLJwN80Idb VGYbFg5p6FyuF3OIhvessTrLv49l4y0G30lFqo9IM1pv5aojM8RN2k80ontRqneOQuGvBafQWzzE UWeiRkib3gCXaAK48H4= )`
	RRSIG=7734 and DNSKEY=7734 verifies the A RRset
	RRSIG=32145 and DNSKEY=32145 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test LANL.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: