DNSSEC Analyzer - MESH.GOV

Domain Name:

Time: 2021-04-22 10:14:43 UTC, NTP stratum 4

Analyzing DNSSEC problems for MESH.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to i.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (865 bytes) ;; HEADER SECTION ;; id = 47515 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210512000000 20210421000000 20326 . bx5MOQGiU0gAwVPCF6fPBYdApVZCvs4fZ3603lzlRdtiHNsNSk2j/mVU7UD6oZkA/q/AIucEPGMD Lua0HNNnfhW8QsYssPHURJpcOUhgt17GinADGwADQYSI6fH12kFnb5wIZ/jznJ58dCdJDr0E7tg6 GarIqeu190nLM+sp75CNlKEG3HrrdSIGLWY8CFU1wLcU43ZAXaCiO5D6XwV8j7WUOs0n8XB48JzO yq4nZ/9Pt6Nl1QWT1UMrGZPPpBBeBKFeggIiGmDuzCn/nrk8F5zuN8f8RvhCxJZi1Kf6rEB0l79X XZ+JnpyjIJrNSNsDxeTQkO5NgXOrols1Gxv/QA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210512000000 20210421000000 20326 . bx5MOQGiU0gAwVPCF6fPBYdApVZCvs4fZ3603lzlRdtiHNsNSk2j/mVU7UD6oZkA/q/AIucEPGMD Lua0HNNnfhW8QsYssPHURJpcOUhgt17GinADGwADQYSI6fH12kFnb5wIZ/jznJ58dCdJDr0E7tg6 GarIqeu190nLM+sp75CNlKEG3HrrdSIGLWY8CFU1wLcU43ZAXaCiO5D6XwV8j7WUOs0n8XB48JzO yq4nZ/9Pt6Nl1QWT1UMrGZPPpBBeBKFeggIiGmDuzCn/nrk8F5zuN8f8RvhCxJZi1Kf6rEB0l79X XZ+JnpyjIJrNSNsDxeTQkO5NgXOrols1Gxv/QA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=14631 is now in the chain-of-trust
	Query to i.root-servers.net for MESH.GOV/A
	Received 630 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (630 bytes) ;; HEADER SECTION ;; id = 41094 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MESH.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20210505050000 20210422040000 14631 . pAkjWrKL8QkviX3hidOlwQyHCPdmBNUsEsOyTnAfiZTj12Oh9Cv66L/QdQa/2c9m/+HpFvJgvH5u 9dmHH8MkLnJdpvJprRxsPQFeivKfKJP04MOiewOHemhMRX53CvS+iBpPGzr1jY0NP3xpqRPrZOth fE9x/sWaExbE8FRMDH7DONMq2EivPjBi5p7zF2AasHjE4D1p50Y/casuRDnmvclNdZ3B7DTqX8sx 0s2l1cEIHiPnn8LXBy7yUM/T8vA+rz9HqLwGobTVc8slL+3wW8zcejJtlOBej1GM9Pt7S44hBVB1 UPDNylakIhDLRa/Py5yEn4pL5LuKEJalpjZS3g== ) ;; ADDITIONAL SECTION (9 records) d.gov-servers.net. 172800 IN A 81.19.194.30 c.gov-servers.net. 172800 IN A 69.36.153.30 b.gov-servers.net. 172800 IN A 209.112.123.30 a.gov-servers.net. 172800 IN A 69.36.157.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.root-servers.net for GOV/DNSKEY
	Received 622 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (622 bytes) ;; HEADER SECTION ;; id = 52446 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20210505050000 20210422040000 14631 . pAkjWrKL8QkviX3hidOlwQyHCPdmBNUsEsOyTnAfiZTj12Oh9Cv66L/QdQa/2c9m/+HpFvJgvH5u 9dmHH8MkLnJdpvJprRxsPQFeivKfKJP04MOiewOHemhMRX53CvS+iBpPGzr1jY0NP3xpqRPrZOth fE9x/sWaExbE8FRMDH7DONMq2EivPjBi5p7zF2AasHjE4D1p50Y/casuRDnmvclNdZ3B7DTqX8sx 0s2l1cEIHiPnn8LXBy7yUM/T8vA+rz9HqLwGobTVc8slL+3wW8zcejJtlOBej1GM9Pt7S44hBVB1 UPDNylakIhDLRa/Py5yEn4pL5LuKEJalpjZS3g== ) ;; ADDITIONAL SECTION (9 records) b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to b.root-servers.net for GOV/DS
	Received 367 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (367 bytes) ;; HEADER SECTION ;; id = 22064 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20210505050000 20210422040000 14631 . pAkjWrKL8QkviX3hidOlwQyHCPdmBNUsEsOyTnAfiZTj12Oh9Cv66L/QdQa/2c9m/+HpFvJgvH5u 9dmHH8MkLnJdpvJprRxsPQFeivKfKJP04MOiewOHemhMRX53CvS+iBpPGzr1jY0NP3xpqRPrZOth fE9x/sWaExbE8FRMDH7DONMq2EivPjBi5p7zF2AasHjE4D1p50Y/casuRDnmvclNdZ3B7DTqX8sx 0s2l1cEIHiPnn8LXBy7yUM/T8vA+rz9HqLwGobTVc8slL+3wW8zcejJtlOBej1GM9Pt7S44hBVB1 UPDNylakIhDLRa/Py5yEn4pL5LuKEJalpjZS3g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20210505050000 20210422040000 14631 . pAkjWrKL8QkviX3hidOlwQyHCPdmBNUsEsOyTnAfiZTj12Oh9Cv66L/QdQa/2c9m/+HpFvJgvH5u 9dmHH8MkLnJdpvJprRxsPQFeivKfKJP04MOiewOHemhMRX53CvS+iBpPGzr1jY0NP3xpqRPrZOth fE9x/sWaExbE8FRMDH7DONMq2EivPjBi5p7zF2AasHjE4D1p50Y/casuRDnmvclNdZ3B7DTqX8sx 0s2l1cEIHiPnn8LXBy7yUM/T8vA+rz9HqLwGobTVc8slL+3wW8zcejJtlOBej1GM9Pt7S44hBVB1 UPDNylakIhDLRa/Py5yEn4pL5LuKEJalpjZS3g== )`
	RRSIG=14631 and DNSKEY=14631 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to b.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (777 bytes) ;; HEADER SECTION ;; id = 34905 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbexj/PgN9RGQ1TokFnYjJ87/rMFIqE/rXjWtsmwzxteOcKIVCUJAAWg0pIZZer88omuCVrq +fAz0iBOgY48TRFWgyVFV9rm5esTGOEuCU6BTYj1Cb7zrpb/RayEw0yzVVZ0adT/AXbAsQhteTpV kgWK8K33gxq4wY70AK5KWdDCyj4v9uR6TS0mgbGdg7RzFCi8xeZoYP2PY5XOhAHFon0= ) ; Key ID = 48498 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210504190254 20210419185754 7698 gov. ZUQqCCEYe1uWRzEtjSAi55l/uPdT1PBCAPVabl5T0bTDYGDYkEUq6tEFc/VB/eBfw2B2pGWSIGb5 hzuuYFXyRfbgM+uwLGpFejX5M1rIRxqMawk8jyalKiedBy2NaID8XUy6yB9zHTa3QfoaGgLjvH6l Zbj6346qKK7OqyYRriKnF0K2DWGjOgfmi7zmIV1HgQ/l4Fwm8EUcrIlPnhA+l6RT37PO3u5Af+Xy HHT5s8hoOwHRthbq0W3+fP1z3luZbFre5c4nR4/sReFkwUHp0JlsVBxOaHKvDqOGARhy5U8YIT8N V4j5TSyrf+7xO6W60UfdQRPymiBmBzNWTdgm2w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbexj/PgN9RGQ1TokFnYjJ87/rMFIqE/rXjWtsmwzxteOcKIVCUJAAWg0pIZZer88omuCVrq +fAz0iBOgY48TRFWgyVFV9rm5esTGOEuCU6BTYj1Cb7zrpb/RayEw0yzVVZ0adT/AXbAsQhteTpV kgWK8K33gxq4wY70AK5KWdDCyj4v9uR6TS0mgbGdg7RzFCi8xeZoYP2PY5XOhAHFon0= ) ; Key ID = 48498`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210504190254 20210419185754 7698 gov. ZUQqCCEYe1uWRzEtjSAi55l/uPdT1PBCAPVabl5T0bTDYGDYkEUq6tEFc/VB/eBfw2B2pGWSIGb5 hzuuYFXyRfbgM+uwLGpFejX5M1rIRxqMawk8jyalKiedBy2NaID8XUy6yB9zHTa3QfoaGgLjvH6l Zbj6346qKK7OqyYRriKnF0K2DWGjOgfmi7zmIV1HgQ/l4Fwm8EUcrIlPnhA+l6RT37PO3u5Af+Xy HHT5s8hoOwHRthbq0W3+fP1z3luZbFre5c4nR4/sReFkwUHp0JlsVBxOaHKvDqOGARhy5U8YIT8N V4j5TSyrf+7xO6W60UfdQRPymiBmBzNWTdgm2w== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=48498 is now in the chain-of-trust
	Query to d.gov-servers.net for MESH.GOV/A
	Received 435 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (435 bytes) ;; HEADER SECTION ;; id = 23291 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MESH.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) MESH.GOV. 86400 IN NS gslb02.nlm.nih.GOV. MESH.GOV. 86400 IN NS gslb01.nlm.nih.GOV. MESH.GOV. 86400 IN NS gslb03.nlm.nih.GOV. MESH.GOV. 3600 IN DS ( 24081 7 2 a74326c13fa3b95865f3b09f5a5e40b41b4169494546ad41dde56c3ced7e2252 ) MESH.GOV. 3600 IN DS 24081 7 1 534a85d7375550f141260e928bd9089b18b77508 MESH.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210429091007 20210422091007 48498 gov. i8j5mt6UpW7mDq6lXV1yR9o+NM0J44y1YFZCSVQH2oTT4+t9j0gufMld9fACbWkMSurPULlO/a1P kMUYwnWcUGkwu2RlXzoSb5YUg6YaN1lnGDYzgWDw6uDfwnJu+EzMl7oP01uDfqNK7cP5f3JVRPat 7JBKmSGZvnSgShuLAE8f0GHoBWZUxCL0yElfwburiea3sjbVJEFclOqJ+7yCTw== ) ;; ADDITIONAL SECTION (4 records) gslb02.nlm.nih.GOV. 86400 IN A 165.112.6.3 gslb01.nlm.nih.GOV. 86400 IN A 130.14.252.50 gslb03.nlm.nih.GOV. 86400 IN A 130.14.252.53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.gov-servers.net for MESH.GOV/DNSKEY
	Received 435 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (435 bytes) ;; HEADER SECTION ;; id = 34081 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MESH.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) MESH.GOV. 86400 IN NS gslb02.nlm.nih.GOV. MESH.GOV. 86400 IN NS gslb01.nlm.nih.GOV. MESH.GOV. 86400 IN NS gslb03.nlm.nih.GOV. MESH.GOV. 3600 IN DS ( 24081 7 2 a74326c13fa3b95865f3b09f5a5e40b41b4169494546ad41dde56c3ced7e2252 ) MESH.GOV. 3600 IN DS 24081 7 1 534a85d7375550f141260e928bd9089b18b77508 MESH.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210429091007 20210422091007 48498 gov. i8j5mt6UpW7mDq6lXV1yR9o+NM0J44y1YFZCSVQH2oTT4+t9j0gufMld9fACbWkMSurPULlO/a1P kMUYwnWcUGkwu2RlXzoSb5YUg6YaN1lnGDYzgWDw6uDfwnJu+EzMl7oP01uDfqNK7cP5f3JVRPat 7JBKmSGZvnSgShuLAE8f0GHoBWZUxCL0yElfwburiea3sjbVJEFclOqJ+7yCTw== ) ;; ADDITIONAL SECTION (4 records) gslb02.nlm.nih.GOV. 86400 IN A 165.112.6.3 gslb01.nlm.nih.GOV. 86400 IN A 130.14.252.50 gslb03.nlm.nih.GOV. 86400 IN A 130.14.252.53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone MESH.GOV

MESH.GOV

	Checking DS between GOV and MESH.GOV
	Query to a.gov-servers.net for MESH.GOV/DS
	Received 316 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (316 bytes) ;; HEADER SECTION ;; id = 45729 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MESH.GOV. IN DS ;; ANSWER SECTION (3 records) MESH.GOV. 3600 IN DS ( 24081 7 2 a74326c13fa3b95865f3b09f5a5e40b41b4169494546ad41dde56c3ced7e2252 ) MESH.GOV. 3600 IN DS 24081 7 1 534a85d7375550f141260e928bd9089b18b77508 MESH.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210429091007 20210422091007 48498 gov. i8j5mt6UpW7mDq6lXV1yR9o+NM0J44y1YFZCSVQH2oTT4+t9j0gufMld9fACbWkMSurPULlO/a1P kMUYwnWcUGkwu2RlXzoSb5YUg6YaN1lnGDYzgWDw6uDfwnJu+EzMl7oP01uDfqNK7cP5f3JVRPat 7JBKmSGZvnSgShuLAE8f0GHoBWZUxCL0yElfwburiea3sjbVJEFclOqJ+7yCTw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for MESH.GOV in the GOV zone
	DS=24081/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=24081/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`MESH.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210429091007 20210422091007 48498 gov. i8j5mt6UpW7mDq6lXV1yR9o+NM0J44y1YFZCSVQH2oTT4+t9j0gufMld9fACbWkMSurPULlO/a1P kMUYwnWcUGkwu2RlXzoSb5YUg6YaN1lnGDYzgWDw6uDfwnJu+EzMl7oP01uDfqNK7cP5f3JVRPat 7JBKmSGZvnSgShuLAE8f0GHoBWZUxCL0yElfwburiea3sjbVJEFclOqJ+7yCTw== )`
	RRSIG=48498 and DNSKEY=48498 verifies the DS RRset
	DS=24081/SHA-256 is now in the chain-of-trust
	`MESH.GOV. 3600 IN DS ( 24081 7 2 a74326c13fa3b95865f3b09f5a5e40b41b4169494546ad41dde56c3ced7e2252 )`
	`MESH.GOV. 3600 IN DS 24081 7 1 534a85d7375550f141260e928bd9089b18b77508`
	Query to gslb03.nlm.nih.GOV for MESH.GOV/DNSKEY
	Received 1181 bytes from 130.14.252.53
	;; Answer received from 130.14.252.53 (1181 bytes) ;; HEADER SECTION ;; id = 30474 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MESH.GOV. IN DNSKEY ;; ANSWER SECTION (4 records) MESH.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAaYQ/SiUc6jlOcQosuwvWVKBBkdlOIyoUebL/4hr4xwvG8jwxRd4HAtS1f4H8DBcPp1CFwnJ RQoBQB/leLC6Jo3sJ2L+5oTBT1SNKQenVpzJBY8J2IJ7FBs+LMNkwa4cIq9CG60pHlLRLUTUevK6 bLaCYm3My1T9x03l+M+JJ9W88hN8gPOv8UFNwmFLNAjX0jgLykU5rrKExu6XPekSPxD63Gi7Xhkl 0m+6XJf+hMEZDXUZ+4R3iOBj6pCfVYclL0YaEuQHyh5jNKYgvFM7ftWrQhJtxfozIVZSXM6NYIO2 xBmwkXv53/U2wLNNyuluT4ZlNWlhdhjUENGl/paD3EU= ) ; Key ID = 24081 MESH.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAaE8PLC3EbH1d3Hf5IcbHOUAC9XPHv6H4TP+GS+RStAUYp2kp6/LtEBvtnRRvbH6y5TGFmHo su/oNTy+lLZXbm3/4L5yYBMN2yl9R0AC+L5PoxqMDSsICXS9WQYpqv/VKBy9QasqDPhZO3o2ETtX jqhDEYHp3NxPhog3l7eF5Z1l0TPvV0P8GD8OWHTMyHAxa//XaV+8D0bGdR4xh0IlSKrNGcRsAi05 Jti+dX2Igsk5hgYuQLCcL7mAqpi1OOSI3FhGffDFxQuvACWiI5pRjKAGfuYKN2ey5DXifgdiPWy9 G0z+1R4PrDVnIadLci2w1Xrr8dARujFYI3WNSpbOttE= ) ; Key ID = 45524 MESH.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20210504153829 20210413153829 24081 mesh.gov. C+BQbVh3WgkpJ2nq9cPJVoe4XJQzZs9DHcgLrXRqzLeUCroGulE3NYV72tuSJs1pNsPz8vnAmx7O 4NcjwMgGlh04ut4i+30gvOdMC3htRk2YvHz6bQmDwIzsssgxCElogoRwRZtjau2O3jbexBj0yPcD 2u4qms+CrmHojVSHgdLsi4KnAVAF5uDc1yDabxmiDTelPhUUAgtwIROPyMl/w3A9U0Xc7AbAVgY/ 5h1JRCQOeLu5GFIDgD6az02izu0Mm8UOtUyx8jqoe0y5VtmSg1FFy6IA2fAgXozgoi2Q/E5amfrt BulRoDlQAztojk2VMncjmKkuDbtO+g1p8LVgrA== ) MESH.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20210504095823 20210413095823 45524 mesh.gov. DSeEBRNu47q6Tw/RCaSqRDp9oz2Qkq9/ziOZbNkTdseQFAeEGgAYznNf/CoX3fpObgLhu6yJyyQi zYC0FFHjJQ7quHsrFTUQGnVVIPEWLBwXm12WY1arMupERuKTefQwmZPOjiSr1UhX+yEZSphmERpe TOnJl7M9vEnbB7FesA645j4VAtydEwmFq0OmuXzKprSD6azMaIBPiIDMz1V5JRkqP2yIlxDOJSrX X3mNlC3KwedtEWb2kP1HzhyAIyPPJZJdFpaUjbeoAv7miSsTDoCJapW27YqKqH2TLUm8fzUkOW6i A8WPQRnsGmBFroydYn0kszgSqZHmnfWpRPKbbQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for MESH.GOV
	`MESH.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAaYQ/SiUc6jlOcQosuwvWVKBBkdlOIyoUebL/4hr4xwvG8jwxRd4HAtS1f4H8DBcPp1CFwnJ RQoBQB/leLC6Jo3sJ2L+5oTBT1SNKQenVpzJBY8J2IJ7FBs+LMNkwa4cIq9CG60pHlLRLUTUevK6 bLaCYm3My1T9x03l+M+JJ9W88hN8gPOv8UFNwmFLNAjX0jgLykU5rrKExu6XPekSPxD63Gi7Xhkl 0m+6XJf+hMEZDXUZ+4R3iOBj6pCfVYclL0YaEuQHyh5jNKYgvFM7ftWrQhJtxfozIVZSXM6NYIO2 xBmwkXv53/U2wLNNyuluT4ZlNWlhdhjUENGl/paD3EU= ) ; Key ID = 24081`
	`MESH.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAaE8PLC3EbH1d3Hf5IcbHOUAC9XPHv6H4TP+GS+RStAUYp2kp6/LtEBvtnRRvbH6y5TGFmHo su/oNTy+lLZXbm3/4L5yYBMN2yl9R0AC+L5PoxqMDSsICXS9WQYpqv/VKBy9QasqDPhZO3o2ETtX jqhDEYHp3NxPhog3l7eF5Z1l0TPvV0P8GD8OWHTMyHAxa//XaV+8D0bGdR4xh0IlSKrNGcRsAi05 Jti+dX2Igsk5hgYuQLCcL7mAqpi1OOSI3FhGffDFxQuvACWiI5pRjKAGfuYKN2ey5DXifgdiPWy9 G0z+1R4PrDVnIadLci2w1Xrr8dARujFYI3WNSpbOttE= ) ; Key ID = 45524`
	DNSKEY=24081/SEP is now in the chain-of-trust
	DS=24081/SHA-256 verifies DNSKEY=24081/SEP
	DS=24081/SHA-1 verifies DNSKEY=24081/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`MESH.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20210504153829 20210413153829 24081 mesh.gov. C+BQbVh3WgkpJ2nq9cPJVoe4XJQzZs9DHcgLrXRqzLeUCroGulE3NYV72tuSJs1pNsPz8vnAmx7O 4NcjwMgGlh04ut4i+30gvOdMC3htRk2YvHz6bQmDwIzsssgxCElogoRwRZtjau2O3jbexBj0yPcD 2u4qms+CrmHojVSHgdLsi4KnAVAF5uDc1yDabxmiDTelPhUUAgtwIROPyMl/w3A9U0Xc7AbAVgY/ 5h1JRCQOeLu5GFIDgD6az02izu0Mm8UOtUyx8jqoe0y5VtmSg1FFy6IA2fAgXozgoi2Q/E5amfrt BulRoDlQAztojk2VMncjmKkuDbtO+g1p8LVgrA== )`
	`MESH.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20210504095823 20210413095823 45524 mesh.gov. DSeEBRNu47q6Tw/RCaSqRDp9oz2Qkq9/ziOZbNkTdseQFAeEGgAYznNf/CoX3fpObgLhu6yJyyQi zYC0FFHjJQ7quHsrFTUQGnVVIPEWLBwXm12WY1arMupERuKTefQwmZPOjiSr1UhX+yEZSphmERpe TOnJl7M9vEnbB7FesA645j4VAtydEwmFq0OmuXzKprSD6azMaIBPiIDMz1V5JRkqP2yIlxDOJSrX X3mNlC3KwedtEWb2kP1HzhyAIyPPJZJdFpaUjbeoAv7miSsTDoCJapW27YqKqH2TLUm8fzUkOW6i A8WPQRnsGmBFroydYn0kszgSqZHmnfWpRPKbbQ== )`
	RRSIG=24081 and DNSKEY=24081/SEP verifies the DNSKEY RRset
	RRSIG=45524 and DNSKEY=45524 verifies the DNSKEY RRset
	DNSKEY=45524 is now in the chain-of-trust
	Query to gslb03.nlm.nih.GOV for MESH.GOV/A
	Received 349 bytes from 130.14.252.53
	;; Answer received from 130.14.252.53 (349 bytes) ;; HEADER SECTION ;; id = 16698 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MESH.GOV. IN A ;; ANSWER SECTION (2 records) MESH.GOV. 30 IN A 130.14.16.4 MESH.GOV. 30 IN RRSIG ( A 7 2 30 20210504112553 20210413112553 45524 mesh.gov. dfqvlBqpG9hEX7WKd5k4u//OEYBMUB3Q4cvOULZZiCTSqrt6calY2TbSvI7jiWLP9YFnqQ//KtZz VWhk2OtFusgmqH8GTVbBOj4rZLO4sa2Tex5vo1wHh902EtxZ7QVs3WCgQVhzeqFq0Wpgylf+z7fX mHG5p3Reft9uF5tRGtNbALbhLDV98DnEkqwvf09e8RCNi5i1c4P/7/HUceE+S4RAwHSClAi/oQOm ZHbrRcibLq2xy7v6H7GyEOujygrI/Z1X40pBU+pcUBIabihRbx2bmSRJnXtR+8UzKnL7Tfl7SXt+ cBITGQX4xcrQhbK6NEUGA682UKpgyiPVO1LQvQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	gslb03.nlm.nih.GOV is authoritative for MESH.GOV
	Found RRSIG signed by mesh.gov zone
	Query to gslb02.nlm.nih.GOV for MESH.GOV/SOA
	Received 747 bytes from 165.112.6.3
	;; Answer received from 165.112.6.3 (747 bytes) ;; HEADER SECTION ;; id = 5616 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MESH.GOV. IN SOA ;; ANSWER SECTION (2 records) MESH.GOV. 500 IN SOA ( gslb01.nlm.nih.GOV. hostmaster.gslb01.nlm.nih.GOV. 2021032908 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) MESH.GOV. 500 IN RRSIG ( SOA 7 2 500 20210504133607 20210413133607 45524 mesh.gov. DWPsPJGB7XkKNxu7yEPy2riYTuD+vfATJanoPdfPJIYVsnzkBfSvQMxxbXZRgC34Tx+aeXVXlGr7 wI0gZmNZ54D3nOFnYN13Lntt8WXDClv+jCsOaG/86QwKGwRn7Wmyn6ed2kXUP9VkQtTYAa4/rR3G 5WGOiqqBnXF7MvMvXdbebbwEYiBlol278mETm8XvDwqfexv23mrnfN1zkgtcyXQmSXTOLnb31GDX QuOO2cm8eoxpxADYUzeHQZW7BvGsYd3bIC5vEQH41HmOKOxqFAlfsqohmXxnbH6kUCyKR1oZp6qz BhoyLMWTFuWqwFdxTJ5qBaGlh0nra46PsQ21tQ== ) ;; AUTHORITY SECTION (4 records) MESH.GOV. 60 IN NS gslb02.nlm.nih.GOV. MESH.GOV. 60 IN NS gslb03.nlm.nih.GOV. MESH.GOV. 60 IN NS gslb01.nlm.nih.GOV. MESH.GOV. 60 IN RRSIG ( NS 7 2 60 20210504093513 20210413093513 45524 mesh.gov. MjBGB/PH5ihaUZDAR9TVuMSTujBGLmvWPrrDIKJCQ51dUa/j09pgb7icvpWmD3wQfDvRtV5zQJ/G ICOx6SL6nvNzK6yVBw2fnjrIraOrU8LlkDj+gNa2p1zMbgXXFVyDXz7QBK0nkIJLu7hcPTvwim3m iD9sMw4Atc2Wh+H+OczlvXM3GtCkicAQyRxwsPb4jZnlCoinkxkY2k6XCvuYOFPsq4Rr2z5hKaND kCPPOxnaTnfqko2xLV3Qmx+Tw63hYlbbFrvmRwVfyhlCQ8A+xBFc/W/Sf5L56r8nzoZHq9xP1BQv oX07B5JEujU/OwqqdGOn2NZtK5+8YiW/dgH6eg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to gslb01.nlm.nih.GOV for MESH.GOV/SOA
	Received 747 bytes from 130.14.252.50
	;; Answer received from 130.14.252.50 (747 bytes) ;; HEADER SECTION ;; id = 23717 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MESH.GOV. IN SOA ;; ANSWER SECTION (2 records) MESH.GOV. 500 IN SOA ( gslb01.nlm.nih.GOV. hostmaster.gslb01.nlm.nih.GOV. 2021032908 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) MESH.GOV. 500 IN RRSIG ( SOA 7 2 500 20210504174606 20210413174606 45524 mesh.gov. DhqebTJlJ4kgBYqgl4FxA3Bg8GVihmDsGaT/agoLujHuKw4EwAlCbmeaoDVwPt+AaE8Or9XUsY+e Qx8UEwkwsrbQrbVPujjqwFLd+1Z+I691FkUDgxcuREo3HaMrOujS/oXPblB7oMhxG3eB74vR/tnL 5nWgvh6ht4UnzYOXR+736J4A7+36E/GzxUtmzvqmaZFmY1RBaEioU89tMSsW679hV2JCrArUjIcA wT3iRkXqpoNWPUuf8CUUq6fRZKnEgpPh9LjkElwkQnJ/Mtdj/KH7pql19PLpw/X54cojxWZJJGHy IFdbBJnHhCJOqus5wjtgDkIL1QajzbzD0KDYsw== ) ;; AUTHORITY SECTION (4 records) MESH.GOV. 60 IN NS gslb03.nlm.nih.GOV. MESH.GOV. 60 IN NS gslb01.nlm.nih.GOV. MESH.GOV. 60 IN NS gslb02.nlm.nih.GOV. MESH.GOV. 60 IN RRSIG ( NS 7 2 60 20210504115233 20210413115233 45524 mesh.gov. k+193OPz/MtNUSlHNxq5p9raOts3c5n/zzF6Gg+XwDPU7NIhHSVo8DibaPmrCDOTBCLJZcrEByTZ NwevXo55dKE3HP8wpe552T4KxQQWkJH7eujY+kkOI4Iv0wxLHOueqXagpd0ENLJIXCxQC3PJ2deD c+XkLdhL32PPfR0qE39hYBmGRfb6EsiqSTejaa+wEjtPz6oAM9U5mnBnLrOV0S+Ue2w/87Ym51mh cVtMv97avuKueqev4e7U4cVckVGkLyZe2tzSxo2gredrZqbHlDlijYimGdbAVR5//CkRb2rP6aFZ lTFDf6KdD7FKMEmlevk+NqfKaFJJtNJMOI6+Uw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to gslb03.nlm.nih.GOV for MESH.GOV/A
	Received 349 bytes from 130.14.252.53
	;; Answer received from 130.14.252.53 (349 bytes) ;; HEADER SECTION ;; id = 24725 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MESH.GOV. IN A ;; ANSWER SECTION (2 records) MESH.GOV. 30 IN A 130.14.16.4 MESH.GOV. 30 IN RRSIG ( A 7 2 30 20210504112553 20210413112553 45524 mesh.gov. dfqvlBqpG9hEX7WKd5k4u//OEYBMUB3Q4cvOULZZiCTSqrt6calY2TbSvI7jiWLP9YFnqQ//KtZz VWhk2OtFusgmqH8GTVbBOj4rZLO4sa2Tex5vo1wHh902EtxZ7QVs3WCgQVhzeqFq0Wpgylf+z7fX mHG5p3Reft9uF5tRGtNbALbhLDV98DnEkqwvf09e8RCNi5i1c4P/7/HUceE+S4RAwHSClAi/oQOm ZHbrRcibLq2xy7v6H7GyEOujygrI/Z1X40pBU+pcUBIabihRbx2bmSRJnXtR+8UzKnL7Tfl7SXt+ cBITGQX4xcrQhbK6NEUGA682UKpgyiPVO1LQvQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	MESH.GOV A RR has value 130.14.16.4
	Found 1 RRSIGs over A RRset
	`MESH.GOV. 30 IN RRSIG ( A 7 2 30 20210504112553 20210413112553 45524 mesh.gov. dfqvlBqpG9hEX7WKd5k4u//OEYBMUB3Q4cvOULZZiCTSqrt6calY2TbSvI7jiWLP9YFnqQ//KtZz VWhk2OtFusgmqH8GTVbBOj4rZLO4sa2Tex5vo1wHh902EtxZ7QVs3WCgQVhzeqFq0Wpgylf+z7fX mHG5p3Reft9uF5tRGtNbALbhLDV98DnEkqwvf09e8RCNi5i1c4P/7/HUceE+S4RAwHSClAi/oQOm ZHbrRcibLq2xy7v6H7GyEOujygrI/Z1X40pBU+pcUBIabihRbx2bmSRJnXtR+8UzKnL7Tfl7SXt+ cBITGQX4xcrQhbK6NEUGA682UKpgyiPVO1LQvQ== )`
	RRSIG=45524 and DNSKEY=45524 verifies the A RRset

MESH.GOV

	Query to gslb02.nlm.nih.GOV for MESH.GOV/A
	Received 349 bytes from 165.112.6.3
	;; Answer received from 165.112.6.3 (349 bytes) ;; HEADER SECTION ;; id = 34564 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MESH.GOV. IN A ;; ANSWER SECTION (2 records) MESH.GOV. 30 IN A 130.14.16.4 MESH.GOV. 30 IN RRSIG ( A 7 2 30 20210504092702 20210413092702 45524 mesh.gov. i8xJBYr3mtuDift2ufH3kVlIVrExhEEOfPtYf6oueFTQyaMFuwWXOkPczy+x0LjAvqHVQS8E4YEZ qgJBb5Nl4mpPcCbBwszpYMS3jpZz8mzqJC52b/VwzNAVrRBivVgEG2fPy9+cg0ZX0dKj6tdCzPIb WOVpXF4AIN1b33Aka9MsbBRUGsoC8s6EROWEtFThGaINifpK5pPr2altWpquqzSnlp+5meVyMeSD KdhyyoyPDvBFa18bHPIojZWCHLlS5Xjkpwa7J/320bsGH9oThKn4KhpPqHCGXKBEhVVL0smZFoNP qpgj+gMJoMZuOssPR+JXFvGQqAKUad1IV0cuIQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	gslb02.nlm.nih.GOV is authoritative for MESH.GOV
	Found RRSIG signed by mesh.gov zone
	Query to gslb02.nlm.nih.GOV for MESH.GOV/A
	Received 349 bytes from 165.112.6.3
	;; Answer received from 165.112.6.3 (349 bytes) ;; HEADER SECTION ;; id = 15425 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MESH.GOV. IN A ;; ANSWER SECTION (2 records) MESH.GOV. 30 IN A 130.14.16.4 MESH.GOV. 30 IN RRSIG ( A 7 2 30 20210504121228 20210413121228 45524 mesh.gov. krpqpdinkq9THE5BiaNTWVqVhYJnVIC7xImNR3onfrE+UY8B692Z3cOTdLHjTGy4Pc3tzETpbJwU Z33DgSfrZlFouHmptw2IoWaq2jAnwVxv75I+eGC/NT4bCJgX6RkYE/7rBK0r/HGvIuNDB4lcF5Xp gx2ySmtZBUlIsRd3amwTW6od+krfTYxp17SYieChl5UUV+CtoBHwPozQbeOX0se4bml4G0qn94Vu xC+CpANe9CAmU2/iFpodbZ9rbd1fkWOpw7+74LqLpqmvhvqSceoA5nd3KBHBKcvkf2JyiVZBqT9c Z/VAkhzpcy4R5jx0mtn3zHc8dORdEUxJJ/q4vA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	MESH.GOV A RR has value 130.14.16.4
	Found 1 RRSIGs over A RRset
	`MESH.GOV. 30 IN RRSIG ( A 7 2 30 20210504121228 20210413121228 45524 mesh.gov. krpqpdinkq9THE5BiaNTWVqVhYJnVIC7xImNR3onfrE+UY8B692Z3cOTdLHjTGy4Pc3tzETpbJwU Z33DgSfrZlFouHmptw2IoWaq2jAnwVxv75I+eGC/NT4bCJgX6RkYE/7rBK0r/HGvIuNDB4lcF5Xp gx2ySmtZBUlIsRd3amwTW6od+krfTYxp17SYieChl5UUV+CtoBHwPozQbeOX0se4bml4G0qn94Vu xC+CpANe9CAmU2/iFpodbZ9rbd1fkWOpw7+74LqLpqmvhvqSceoA5nd3KBHBKcvkf2JyiVZBqT9c Z/VAkhzpcy4R5jx0mtn3zHc8dORdEUxJJ/q4vA== )`
	RRSIG=45524 and DNSKEY=45524 verifies the A RRset

MESH.GOV

	Query to gslb01.nlm.nih.GOV for MESH.GOV/A
	Received 349 bytes from 130.14.252.50
	;; Answer received from 130.14.252.50 (349 bytes) ;; HEADER SECTION ;; id = 49621 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MESH.GOV. IN A ;; ANSWER SECTION (2 records) MESH.GOV. 30 IN A 130.14.16.4 MESH.GOV. 30 IN RRSIG ( A 7 2 30 20210504101753 20210413101753 45524 mesh.gov. YMXOYd+GAuVTNwvdugO/cAb9kD6a5ESGN2GOwWjt+8PY+ft6Ml6e3ldO4cEyqBoKxCdDvEWvLx0J PN4eBmP2/2lFNYc55Wr6EyFF6IGjx5ZOcDlqRQb7qR9GbyfBMPk8gf2MDPxyXUO4PtVFhwA/Q3N6 f62EPFc4jd9JwXdJIeirA1aNlMGHIW7IXBcmtlSERKvMbGJdv45r36+6BZB6+96UyIGcnUdwfaPI eyyhyoS+/uxLJZHAfjO6PqTjJyGaJ+HjDDRD4FpiPOtcujEYex7c3q0HLI57cidR7Oo7KmmHPWBG fAb+Ox5o299akQz1ivHZTDzDLG0SzWCRxoyZgg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	gslb01.nlm.nih.GOV is authoritative for MESH.GOV
	Found RRSIG signed by mesh.gov zone
	Query to gslb01.nlm.nih.GOV for MESH.GOV/A
	Received 349 bytes from 130.14.252.50
	;; Answer received from 130.14.252.50 (349 bytes) ;; HEADER SECTION ;; id = 49322 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; MESH.GOV. IN A ;; ANSWER SECTION (2 records) MESH.GOV. 30 IN A 130.14.16.4 MESH.GOV. 30 IN RRSIG ( A 7 2 30 20210504145345 20210413145345 45524 mesh.gov. amUKGXfvMrUZH7Y/eqN6iHvxQAXhnfRNAoqgcqsE/8JeIIq/ybCArsfkfOsLriTiKbM/31X9ycIv cfQHnv3RpPWwSX9O6nCYXILwympyreSmeBqPcHcsoF4UD/F2pFc61WUKHlMEIAXbLpVaoazhC0Hj lx/o2N0mM+bf9QhKsjW2ftLmNnFKUxBGKtAXCNhz516S+YRBvij5erytGwC/u+Kaz23EVZ7kNFcp OYnmBzZPooGiwxq3OJMiGCbCKxBZ7h4AhUjzhxK7ijGim7/GWMA/genFnniYOafjEpu34/zqnuE8 4ySKyDLd4T0UF6WDiSX5Wa/tYKpQr1a08tagbA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	MESH.GOV A RR has value 130.14.16.4
	Found 1 RRSIGs over A RRset
	`MESH.GOV. 30 IN RRSIG ( A 7 2 30 20210504145345 20210413145345 45524 mesh.gov. amUKGXfvMrUZH7Y/eqN6iHvxQAXhnfRNAoqgcqsE/8JeIIq/ybCArsfkfOsLriTiKbM/31X9ycIv cfQHnv3RpPWwSX9O6nCYXILwympyreSmeBqPcHcsoF4UD/F2pFc61WUKHlMEIAXbLpVaoazhC0Hj lx/o2N0mM+bf9QhKsjW2ftLmNnFKUxBGKtAXCNhz516S+YRBvij5erytGwC/u+Kaz23EVZ7kNFcp OYnmBzZPooGiwxq3OJMiGCbCKxBZ7h4AhUjzhxK7ijGim7/GWMA/genFnniYOafjEpu34/zqnuE8 4ySKyDLd4T0UF6WDiSX5Wa/tYKpQr1a08tagbA== )`
	RRSIG=45524 and DNSKEY=45524 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test MESH.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: