DNSSEC Analyzer

Domain Name:

Time: 2020-01-26 05:00:19 UTC, NTP stratum 4

Analyzing DNSSEC problems for NIH.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to m.root-servers.net for ./DNSKEY
	Received 864 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (864 bytes) ;; HEADER SECTION ;; id = 25276 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20200211000000 20200121000000 20326 . UaaPoqlBlRixcabCWMJ9jVvevx+Sp8W5rMt06Tozfg/gefIspEKxw4fx22mRaAQZzdHq9Lt+Who4 YpUX95CDrgDYtYJ9NOyICRNlWnY9FNqOW0AreCmEK0qqS52xYb72hJYpFrCILGLD6jl4Ar0LFi29 iXnVLQ99+SvD8PPHHkEiIu1WhlES7taEavtbKijyjLYXwagQxSQCzMgkbWN1+S78kJGZEMaBODTZ uiiGIw5Jy3OPAQxHQyLTElR5ZuEg59/sSnTCEfmoXcxG9/g6O1qWs6d9hDVadKfXhHr8OTXGoB25 Ttp3CyZGdSqRkCwwJpWJ9SlaL+khcJoLFqwm8w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20200211000000 20200121000000 20326 . UaaPoqlBlRixcabCWMJ9jVvevx+Sp8W5rMt06Tozfg/gefIspEKxw4fx22mRaAQZzdHq9Lt+Who4 YpUX95CDrgDYtYJ9NOyICRNlWnY9FNqOW0AreCmEK0qqS52xYb72hJYpFrCILGLD6jl4Ar0LFi29 iXnVLQ99+SvD8PPHHkEiIu1WhlES7taEavtbKijyjLYXwagQxSQCzMgkbWN1+S78kJGZEMaBODTZ uiiGIw5Jy3OPAQxHQyLTElR5ZuEg59/sSnTCEfmoXcxG9/g6O1qWs6d9hDVadKfXhHr8OTXGoB25 Ttp3CyZGdSqRkCwwJpWJ9SlaL+khcJoLFqwm8w== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=33853 is now in the chain-of-trust
	Query to l.root-servers.net for NIH.GOV/A
	Error querying l.root-servers.net/2001:500:9f:0:0:0:0:42 for NIH.GOV/A: 'IPv6 transport disabled'
	Received 662 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (662 bytes) ;; HEADER SECTION ;; id = 55077 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NIH.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20200207200000 20200125190000 33853 . XtWz0IP0PQZP4/jVj+8m5GuWflFNSMFkKYwMx8ECpXIoA++79cuxQlzgcn8XeDDxIG5CDD7oNBRu DJkauqyYSnZDNV5sxITqKvPxEHy+sGg/MsJfvxPNb0gj4VrqZfS71JZ8l2G5tXQr+QCvw0i5Bz/D FNr3DyJJbziIvb6aIBli0mVYBGOeA7DdLTM9HnzpB7WwuByW6ieEVjaJo0CP9fyArAErjwpZKrFM 2vyMaZ0G6VfcWiGafkWVZ/yelcdU97RtLkMw1ygrLn4ULl66BZAPVe1Wg6RDDYIVKatA9oB47YLJ zP6LcrgewsVYGc2deBBDeIGpycRWuAoQCixFDQ== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to l.root-servers.net for GOV/DNSKEY
	Received 658 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (658 bytes) ;; HEADER SECTION ;; id = 40292 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20200207200000 20200125190000 33853 . XtWz0IP0PQZP4/jVj+8m5GuWflFNSMFkKYwMx8ECpXIoA++79cuxQlzgcn8XeDDxIG5CDD7oNBRu DJkauqyYSnZDNV5sxITqKvPxEHy+sGg/MsJfvxPNb0gj4VrqZfS71JZ8l2G5tXQr+QCvw0i5Bz/D FNr3DyJJbziIvb6aIBli0mVYBGOeA7DdLTM9HnzpB7WwuByW6ieEVjaJo0CP9fyArAErjwpZKrFM 2vyMaZ0G6VfcWiGafkWVZ/yelcdU97RtLkMw1ygrLn4ULl66BZAPVe1Wg6RDDYIVKatA9oB47YLJ zP6LcrgewsVYGc2deBBDeIGpycRWuAoQCixFDQ== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to c.root-servers.net for GOV/DS
	Error querying c.root-servers.net/2001:500:2:0:0:0:0:c for GOV/DS: 'IPv6 transport disabled'
	Received 406 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (406 bytes) ;; HEADER SECTION ;; id = 13567 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20200207200000 20200125190000 33853 . XtWz0IP0PQZP4/jVj+8m5GuWflFNSMFkKYwMx8ECpXIoA++79cuxQlzgcn8XeDDxIG5CDD7oNBRu DJkauqyYSnZDNV5sxITqKvPxEHy+sGg/MsJfvxPNb0gj4VrqZfS71JZ8l2G5tXQr+QCvw0i5Bz/D FNr3DyJJbziIvb6aIBli0mVYBGOeA7DdLTM9HnzpB7WwuByW6ieEVjaJo0CP9fyArAErjwpZKrFM 2vyMaZ0G6VfcWiGafkWVZ/yelcdU97RtLkMw1ygrLn4ULl66BZAPVe1Wg6RDDYIVKatA9oB47YLJ zP6LcrgewsVYGc2deBBDeIGpycRWuAoQCixFDQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20200207200000 20200125190000 33853 . XtWz0IP0PQZP4/jVj+8m5GuWflFNSMFkKYwMx8ECpXIoA++79cuxQlzgcn8XeDDxIG5CDD7oNBRu DJkauqyYSnZDNV5sxITqKvPxEHy+sGg/MsJfvxPNb0gj4VrqZfS71JZ8l2G5tXQr+QCvw0i5Bz/D FNr3DyJJbziIvb6aIBli0mVYBGOeA7DdLTM9HnzpB7WwuByW6ieEVjaJo0CP9fyArAErjwpZKrFM 2vyMaZ0G6VfcWiGafkWVZ/yelcdU97RtLkMw1ygrLn4ULl66BZAPVe1Wg6RDDYIVKatA9oB47YLJ zP6LcrgewsVYGc2deBBDeIGpycRWuAoQCixFDQ== )`
	RRSIG=33853 and DNSKEY=33853 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to b.gov-servers.net for GOV/DNSKEY
	Error querying b.gov-servers.net/2620:74:27:0:0:0:2:30 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 777 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (777 bytes) ;; HEADER SECTION ;; id = 42565 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAdccuiuxqTxvRcMVh4o9DCfREPNTe3hGEklbdV+L99lKySyIzskGLJ6XDBrWgBeY7ZRSOWGQ 2eHdQLN61fRyqWpVLpNzqaIz/UmMP74VPBCz4QXRDkG4hDO3uifCDVs8Jex4TrYT+hGNYmprbsrq dVQCgeeHc7UMKI/SjusQ4uTKgJ9CWt02/AgK+zKFi3LCBVDGnUwE2kUOL1b0MWfT0ks= ) ; Key ID = 36558 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200204200254 20200120195754 7698 gov. AW2ehlTHCkvsoKYTELKLWDsRb5hmUce7lXmZl5v8iXW1lcvUgYHjl4mKrTmw0o/ZQunLH8tjhL2a nbCy8GymuXffQUXpsWfCtMDd1j2lQBL2ECPw418yOOCqTnoRI6DJvvArASkqLeXHX2bAu4/351ug E/d63O3H30850u+Tgakg/vlTpsNCMxNeJExRDBbwCp4VD7PZN75TMmRM4Y4McQsoGiEdDCsFJXnV 9SP2S24Y/uKSLySFDQ0qZ41uZUoEZaMclbD3Uh6AFlzapQggME06B8zjfauOHVvpfak1QgzXqDKf kWoOradUBw+7eU1rITOiOmukHsMHNdvjdDoqSA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAdccuiuxqTxvRcMVh4o9DCfREPNTe3hGEklbdV+L99lKySyIzskGLJ6XDBrWgBeY7ZRSOWGQ 2eHdQLN61fRyqWpVLpNzqaIz/UmMP74VPBCz4QXRDkG4hDO3uifCDVs8Jex4TrYT+hGNYmprbsrq dVQCgeeHc7UMKI/SjusQ4uTKgJ9CWt02/AgK+zKFi3LCBVDGnUwE2kUOL1b0MWfT0ks= ) ; Key ID = 36558`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200204200254 20200120195754 7698 gov. AW2ehlTHCkvsoKYTELKLWDsRb5hmUce7lXmZl5v8iXW1lcvUgYHjl4mKrTmw0o/ZQunLH8tjhL2a nbCy8GymuXffQUXpsWfCtMDd1j2lQBL2ECPw418yOOCqTnoRI6DJvvArASkqLeXHX2bAu4/351ug E/d63O3H30850u+Tgakg/vlTpsNCMxNeJExRDBbwCp4VD7PZN75TMmRM4Y4McQsoGiEdDCsFJXnV 9SP2S24Y/uKSLySFDQ0qZ41uZUoEZaMclbD3Uh6AFlzapQggME06B8zjfauOHVvpfak1QgzXqDKf kWoOradUBw+7eU1rITOiOmukHsMHNdvjdDoqSA== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=36558 is now in the chain-of-trust
	Query to b.gov-servers.net for NIH.GOV/A
	Error querying b.gov-servers.net/2620:74:27:0:0:0:2:30 for NIH.GOV/A: 'IPv6 transport disabled'
	Received 584 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (584 bytes) ;; HEADER SECTION ;; id = 49958 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NIH.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) NIH.GOV. 86400 IN NS ns.NIH.GOV. NIH.GOV. 86400 IN NS ns3.NIH.GOV. NIH.GOV. 86400 IN NS ns2.NIH.GOV. NIH.GOV. 3600 IN DS ( 35355 7 2 3d1ff2755fbacc8958c29fea7a71750848cc259ccd4fb392aa1ca372751c9c25 ) NIH.GOV. 3600 IN DS 44025 7 1 be69d99b4b38200599bcc061e1fad2877901766c NIH.GOV. 3600 IN DS 35355 7 1 ebd31228d3b15031d6c0859b080ed78cf904cc8d NIH.GOV. 3600 IN DS ( 44025 7 2 cd1d6d93060f5af056bc5f842442e2c43a8f3dd16b8eeaef34cfc9ecb8470786 ) NIH.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200201221007 20200125221007 36558 gov. do9LeIHn4ZVcOzb5b4D8BYsB8VdpzoB+/BeVpKGXTaew5J3VzMMZ6jchNxW9RG5Is8y8arr9zoUs tnIfFUlBI0/Um5kUPDgibc0dvC42WXkqyLlVhPY4dygSG+IzZiGloUL2pWQe3pDZHbS9OaSuD9B8 5uueVXsu2o//2TBdi4NZix7s0Nou2JIkfe3w0KYIv+UL5uVWHtG9wW53S1eB6w== ) ;; ADDITIONAL SECTION (7 records) ns.NIH.GOV. 86400 IN A 128.231.128.251 ns.NIH.GOV. 86400 IN AAAA 2607:f220:404:101::80e7:80fb ns3.NIH.GOV. 86400 IN A 165.112.4.230 ns3.NIH.GOV. 86400 IN AAAA 2607:f220:402:1801::a570:4e6 ns2.NIH.GOV. 86400 IN A 128.231.64.1 ns2.NIH.GOV. 86400 IN AAAA 2607:f220:418:4101::80e7:401 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.gov-servers.net for NIH.GOV/DNSKEY
	Received 584 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (584 bytes) ;; HEADER SECTION ;; id = 18169 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NIH.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) NIH.GOV. 86400 IN NS ns.NIH.GOV. NIH.GOV. 86400 IN NS ns3.NIH.GOV. NIH.GOV. 86400 IN NS ns2.NIH.GOV. NIH.GOV. 3600 IN DS ( 35355 7 2 3d1ff2755fbacc8958c29fea7a71750848cc259ccd4fb392aa1ca372751c9c25 ) NIH.GOV. 3600 IN DS 44025 7 1 be69d99b4b38200599bcc061e1fad2877901766c NIH.GOV. 3600 IN DS 35355 7 1 ebd31228d3b15031d6c0859b080ed78cf904cc8d NIH.GOV. 3600 IN DS ( 44025 7 2 cd1d6d93060f5af056bc5f842442e2c43a8f3dd16b8eeaef34cfc9ecb8470786 ) NIH.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200201221007 20200125221007 36558 gov. do9LeIHn4ZVcOzb5b4D8BYsB8VdpzoB+/BeVpKGXTaew5J3VzMMZ6jchNxW9RG5Is8y8arr9zoUs tnIfFUlBI0/Um5kUPDgibc0dvC42WXkqyLlVhPY4dygSG+IzZiGloUL2pWQe3pDZHbS9OaSuD9B8 5uueVXsu2o//2TBdi4NZix7s0Nou2JIkfe3w0KYIv+UL5uVWHtG9wW53S1eB6w== ) ;; ADDITIONAL SECTION (7 records) ns.NIH.GOV. 86400 IN A 128.231.128.251 ns.NIH.GOV. 86400 IN AAAA 2607:f220:404:101::80e7:80fb ns3.NIH.GOV. 86400 IN A 165.112.4.230 ns3.NIH.GOV. 86400 IN AAAA 2607:f220:402:1801::a570:4e6 ns2.NIH.GOV. 86400 IN A 128.231.64.1 ns2.NIH.GOV. 86400 IN AAAA 2607:f220:418:4101::80e7:401 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone NIH.GOV

NIH.GOV

	Checking DS between GOV and NIH.GOV
	Query to d.gov-servers.net for NIH.GOV/DS
	Error querying d.gov-servers.net/2620:74:29:0:0:0:2:30 for NIH.GOV/DS: 'IPv6 transport disabled'
	Received 399 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (399 bytes) ;; HEADER SECTION ;; id = 6419 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NIH.GOV. IN DS ;; ANSWER SECTION (5 records) NIH.GOV. 3600 IN DS ( 35355 7 2 3d1ff2755fbacc8958c29fea7a71750848cc259ccd4fb392aa1ca372751c9c25 ) NIH.GOV. 3600 IN DS 44025 7 1 be69d99b4b38200599bcc061e1fad2877901766c NIH.GOV. 3600 IN DS 35355 7 1 ebd31228d3b15031d6c0859b080ed78cf904cc8d NIH.GOV. 3600 IN DS ( 44025 7 2 cd1d6d93060f5af056bc5f842442e2c43a8f3dd16b8eeaef34cfc9ecb8470786 ) NIH.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200201221007 20200125221007 36558 gov. do9LeIHn4ZVcOzb5b4D8BYsB8VdpzoB+/BeVpKGXTaew5J3VzMMZ6jchNxW9RG5Is8y8arr9zoUs tnIfFUlBI0/Um5kUPDgibc0dvC42WXkqyLlVhPY4dygSG+IzZiGloUL2pWQe3pDZHbS9OaSuD9B8 5uueVXsu2o//2TBdi4NZix7s0Nou2JIkfe3w0KYIv+UL5uVWHtG9wW53S1eB6w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for NIH.GOV in the GOV zone
	DS=35355/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=44025/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=35355/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=44025/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`NIH.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200201221007 20200125221007 36558 gov. do9LeIHn4ZVcOzb5b4D8BYsB8VdpzoB+/BeVpKGXTaew5J3VzMMZ6jchNxW9RG5Is8y8arr9zoUs tnIfFUlBI0/Um5kUPDgibc0dvC42WXkqyLlVhPY4dygSG+IzZiGloUL2pWQe3pDZHbS9OaSuD9B8 5uueVXsu2o//2TBdi4NZix7s0Nou2JIkfe3w0KYIv+UL5uVWHtG9wW53S1eB6w== )`
	RRSIG=36558 and DNSKEY=36558 verifies the DS RRset
	DS=35355/SHA-256 is now in the chain-of-trust
	DS=44025/SHA-1 is now in the chain-of-trust
	`NIH.GOV. 3600 IN DS ( 35355 7 2 3d1ff2755fbacc8958c29fea7a71750848cc259ccd4fb392aa1ca372751c9c25 )`
	`NIH.GOV. 3600 IN DS 44025 7 1 be69d99b4b38200599bcc061e1fad2877901766c`
	`NIH.GOV. 3600 IN DS 35355 7 1 ebd31228d3b15031d6c0859b080ed78cf904cc8d`
	`NIH.GOV. 3600 IN DS ( 44025 7 2 cd1d6d93060f5af056bc5f842442e2c43a8f3dd16b8eeaef34cfc9ecb8470786 )`
	Query to ns.NIH.GOV for NIH.GOV/DNSKEY
	Error querying ns.NIH.GOV/2607:f220:404:101:0:0:80e7:80fb for NIH.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 1808 bytes from 128.231.128.251
	;; Answer received from 128.231.128.251 (1808 bytes) ;; HEADER SECTION ;; id = 27414 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NIH.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) NIH.GOV. 172800 IN DNSKEY ( 256 3 7 AwEAAZC4aeTQVQYEBS3zcpmwpVK2ZO8p5wCjRXUUtAkazhgMoaie/YFSJCbhzur1XCJ0jXqAseYi eGWyrm9ZUe1c1U1LITbi1xXrszVvh0gFjdKZjGWfJ6Z7ZeDaGrcVQQvw6oq947+hVmTnu50L0AVR AA+r95cZ1xjDFH22nbou1jj/ ) ; Key ID = 5324 NIH.GOV. 172800 IN DNSKEY ( 257 3 7 AwEAAdVZ6+yIoalYKo4CsDMgKrZxztZ1XbcsFPUzx41quE7fwOabxzNpcKU1D+V9pjKCTVM778RH /bMUym7hzG1rLXDjVRFU9ks8RazqMMu5RAVt1BJI9gSxRfSra+UauUUq/37qQnmCnECKCtOCi1ne NB43Hdte/MEhmBXf1SicEizuLrA3SWzkGdUoq4ZvdxybcgkeCy4aAZw24mh0YOdxzcwHxOf5BEZS cLzH+IFkfOpQ9p168ndzR2G7Su4Pxl4OrHrnvP4XhEWzl0yIdYjLIUb0NGK5K2reMo3JcaiGIuAL Nc8XXdLlblHoLjVMu9kxsSBFcWeked//Ct0558igkAs= ) ; Key ID = 44025 NIH.GOV. 172800 IN DNSKEY ( 256 3 7 AwEAAc7aRjEzUeOCtsZlGXsVOnbjIAsGZHNnUgEMyyJmuAgOp1xeMxgCSfcrs+05KBwrDOqj1ONq hjtol7nMIBgyUYsYCIoiQBBm8tXhsndvaNtqKA5YFg//zVc6Lee2qYEjq99RxfipbDcxFp/x0h7d b+l9yXV8a0arzy26qsaLNdOH ) ; Key ID = 51077 NIH.GOV. 172800 IN DNSKEY ( 257 3 7 AwEAAcFsAJQcRWvmnxWgqWhqtCA8yi6k6fixeUOCOYOL8yEBg0lv33N6u5mqDcgj/1BdhjaYv+H0 e9Bjv95zxo+1qyjid2ADDtH47p3mFq0rUB115gFTWADvPnBmTeEl0cqIUcFjkSFONy5JvAamiJmf HrqwkDME9UNn4jMUipeFCYgSEslXWZZLmfUwdow7SDFa/hNG+eUMfXDiM5HAd6hsF6SAF66CjppK AQarGtuhkVPYSQj/hQzhVNhwpZN7LEdcUsqQh0R8QfhD2UXnhAwDerFrIjhUZHhfQueYQs3avDee GdTE/sQ/afzutrqKfNNFAyxTBlwRhvbooOizhQOI7jE= ) ; Key ID = 35355 NIH.GOV. 172800 IN RRSIG ( DNSKEY 7 2 172800 20200129153515 20200125152704 5324 nih.gov. Op8UBr6V4GnH/6p/ciyQavQ8FksQOSvLI0FaMXjXoskjaSPqqfeNKhEr5NUR3pNKfQIFgh9N1DOi LWYmR42HcCcnLGhJNGtndnMARSaJ559IZhQ4imnHYSmpanqIa66KQ4HFULuVsBW1gULblPRdM6uT XpRgFCyvrDqzLfC15r8= ) nih.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20200129153515 20200125152704 35355 nih.gov. DgDC86QVYUjBoDXMMQihnvSIvquIJiVDcWGsH8Vaqim4pExkepDUoAWOvYMuvOAtNxxt+H89JJtT 20O6eW8j0qC1Buao9q8xLWEZSbSRBOpOw6PwZZizafvhetSrO2VGv758EA7NpVtQVYZEgqlQoGSn lMXHYJtWihQU6lXHaUeFS4KufjXLqgbyqFcXd6TCGwKE2op9wlSYmON4MUTQePfXxYCu4XeZwiyW OuYoyXjF3UiADT5II0xtDjfYlAHlNapBbvgF+OT5wjja7Wxc0jMrOhrVyWyvT/JiYWCEXYXE3GpS M2EeHy+g5YGTzOOjYdKPIWHdBvpnInwtkJHesQ== ) nih.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20200129153515 20200125152704 44025 nih.gov. uImYbSDX40jjafHKHQdX5Dijc2hbqssfcQuN2MWOwwRFOfnmgdd4DaIjp9hg6d0OGSvxo0MOoDvc 3UHlTl0yNdcBrEb/O9NsyGJkDG8Q5lxqpy5VJIU/grlGB8lWpzxmjhA9diNd0kgNeV80VNgEHZXh xnWqi0BgoRzdw5VxzHgj4MrpLGjYAtHgAxEqyO1atQ2l020EHwn6Z1D6A1msm3lkAyaf/pc3FRlo 5W7VzlcjLBXffrOKP8z7OapOnGh2nFjAWVx1KMghF7dTU5clfAdHKNlNIpZcGwbXWJRIp6WfB2CE qLs9usHvIrnQAs+iOgaUzIZ0/wNAqWbpXNZ/QA== ) nih.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20200129153515 20200125152704 51077 nih.gov. xz8K/R5OewkC3Xqn0BIQLNRZYeC0qAsE9CntkdtK6ZXLQej5YcyjqtV3lLJbr0H/IP6GZIqd3bb4 HqTpJzHux2ynp8w1enfok9g72faBR/2kKZ0L09NCkFlk7YaGdw0IqfElCC51i85ay3h3UD0qA/qr 9cgFvnWLN+BlPasr/pw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for NIH.GOV
	`NIH.GOV. 172800 IN DNSKEY ( 256 3 7 AwEAAZC4aeTQVQYEBS3zcpmwpVK2ZO8p5wCjRXUUtAkazhgMoaie/YFSJCbhzur1XCJ0jXqAseYi eGWyrm9ZUe1c1U1LITbi1xXrszVvh0gFjdKZjGWfJ6Z7ZeDaGrcVQQvw6oq947+hVmTnu50L0AVR AA+r95cZ1xjDFH22nbou1jj/ ) ; Key ID = 5324`
	`NIH.GOV. 172800 IN DNSKEY ( 257 3 7 AwEAAdVZ6+yIoalYKo4CsDMgKrZxztZ1XbcsFPUzx41quE7fwOabxzNpcKU1D+V9pjKCTVM778RH /bMUym7hzG1rLXDjVRFU9ks8RazqMMu5RAVt1BJI9gSxRfSra+UauUUq/37qQnmCnECKCtOCi1ne NB43Hdte/MEhmBXf1SicEizuLrA3SWzkGdUoq4ZvdxybcgkeCy4aAZw24mh0YOdxzcwHxOf5BEZS cLzH+IFkfOpQ9p168ndzR2G7Su4Pxl4OrHrnvP4XhEWzl0yIdYjLIUb0NGK5K2reMo3JcaiGIuAL Nc8XXdLlblHoLjVMu9kxsSBFcWeked//Ct0558igkAs= ) ; Key ID = 44025`
	`NIH.GOV. 172800 IN DNSKEY ( 256 3 7 AwEAAc7aRjEzUeOCtsZlGXsVOnbjIAsGZHNnUgEMyyJmuAgOp1xeMxgCSfcrs+05KBwrDOqj1ONq hjtol7nMIBgyUYsYCIoiQBBm8tXhsndvaNtqKA5YFg//zVc6Lee2qYEjq99RxfipbDcxFp/x0h7d b+l9yXV8a0arzy26qsaLNdOH ) ; Key ID = 51077`
	`NIH.GOV. 172800 IN DNSKEY ( 257 3 7 AwEAAcFsAJQcRWvmnxWgqWhqtCA8yi6k6fixeUOCOYOL8yEBg0lv33N6u5mqDcgj/1BdhjaYv+H0 e9Bjv95zxo+1qyjid2ADDtH47p3mFq0rUB115gFTWADvPnBmTeEl0cqIUcFjkSFONy5JvAamiJmf HrqwkDME9UNn4jMUipeFCYgSEslXWZZLmfUwdow7SDFa/hNG+eUMfXDiM5HAd6hsF6SAF66CjppK AQarGtuhkVPYSQj/hQzhVNhwpZN7LEdcUsqQh0R8QfhD2UXnhAwDerFrIjhUZHhfQueYQs3avDee GdTE/sQ/afzutrqKfNNFAyxTBlwRhvbooOizhQOI7jE= ) ; Key ID = 35355`
	DNSKEY=44025/SEP is now in the chain-of-trust
	DS=44025/SHA-1 verifies DNSKEY=44025/SEP
	DS=44025/SHA-256 verifies DNSKEY=44025/SEP
	DNSKEY=35355/SEP is now in the chain-of-trust
	DS=35355/SHA-256 verifies DNSKEY=35355/SEP
	DS=35355/SHA-1 verifies DNSKEY=35355/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`NIH.GOV. 172800 IN RRSIG ( DNSKEY 7 2 172800 20200129153515 20200125152704 5324 nih.gov. Op8UBr6V4GnH/6p/ciyQavQ8FksQOSvLI0FaMXjXoskjaSPqqfeNKhEr5NUR3pNKfQIFgh9N1DOi LWYmR42HcCcnLGhJNGtndnMARSaJ559IZhQ4imnHYSmpanqIa66KQ4HFULuVsBW1gULblPRdM6uT XpRgFCyvrDqzLfC15r8= )`
	`nih.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20200129153515 20200125152704 35355 nih.gov. DgDC86QVYUjBoDXMMQihnvSIvquIJiVDcWGsH8Vaqim4pExkepDUoAWOvYMuvOAtNxxt+H89JJtT 20O6eW8j0qC1Buao9q8xLWEZSbSRBOpOw6PwZZizafvhetSrO2VGv758EA7NpVtQVYZEgqlQoGSn lMXHYJtWihQU6lXHaUeFS4KufjXLqgbyqFcXd6TCGwKE2op9wlSYmON4MUTQePfXxYCu4XeZwiyW OuYoyXjF3UiADT5II0xtDjfYlAHlNapBbvgF+OT5wjja7Wxc0jMrOhrVyWyvT/JiYWCEXYXE3GpS M2EeHy+g5YGTzOOjYdKPIWHdBvpnInwtkJHesQ== )`
	`nih.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20200129153515 20200125152704 44025 nih.gov. uImYbSDX40jjafHKHQdX5Dijc2hbqssfcQuN2MWOwwRFOfnmgdd4DaIjp9hg6d0OGSvxo0MOoDvc 3UHlTl0yNdcBrEb/O9NsyGJkDG8Q5lxqpy5VJIU/grlGB8lWpzxmjhA9diNd0kgNeV80VNgEHZXh xnWqi0BgoRzdw5VxzHgj4MrpLGjYAtHgAxEqyO1atQ2l020EHwn6Z1D6A1msm3lkAyaf/pc3FRlo 5W7VzlcjLBXffrOKP8z7OapOnGh2nFjAWVx1KMghF7dTU5clfAdHKNlNIpZcGwbXWJRIp6WfB2CE qLs9usHvIrnQAs+iOgaUzIZ0/wNAqWbpXNZ/QA== )`
	`nih.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20200129153515 20200125152704 51077 nih.gov. xz8K/R5OewkC3Xqn0BIQLNRZYeC0qAsE9CntkdtK6ZXLQej5YcyjqtV3lLJbr0H/IP6GZIqd3bb4 HqTpJzHux2ynp8w1enfok9g72faBR/2kKZ0L09NCkFlk7YaGdw0IqfElCC51i85ay3h3UD0qA/qr 9cgFvnWLN+BlPasr/pw= )`
	RRSIG=5324 and DNSKEY=5324 verifies the DNSKEY RRset
	RRSIG=35355 and DNSKEY=35355/SEP verifies the DNSKEY RRset
	RRSIG=44025 and DNSKEY=44025/SEP verifies the DNSKEY RRset
	RRSIG=51077 and DNSKEY=51077 verifies the DNSKEY RRset
	DNSKEY=5324 is now in the chain-of-trust
	DNSKEY=51077 is now in the chain-of-trust
	Query to ns.NIH.GOV for NIH.GOV/A
	Received 386 bytes from 128.231.128.251
	;; Answer received from 128.231.128.251 (386 bytes) ;; HEADER SECTION ;; id = 38291 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NIH.GOV. IN A ;; ANSWER SECTION (3 records) NIH.GOV. 7200 IN A 54.235.145.223 NIH.GOV. 7200 IN RRSIG ( A 7 2 7200 20200129222541 20200125214436 5324 nih.gov. dTnpZaAPrf8POr4VzmQGplJG1Anw+d2pfgifiM7yTgUfH5cLj14DLkov0xjvwQqGYXd9S9nzEUWz YroSAfqzFhkT1IRkjX0tNHS31t4IjpCIZwB2lpkqo7cdn+BOLZkfm5uMawf2YHVbFCS8KEfcHxMh F+C4FSYYosck3BJXr4A= ) nih.gov. 7200 IN RRSIG ( A 7 2 7200 20200129222541 20200125214436 51077 nih.gov. K1NoPlfdrksvU/hrwaLPoRKpJqzYeD6sjSQ1jxnHQOEwXMJQmcc24iPFwjh2naaZQrFIhHbGJXzl Y1U/8A+yU0xQMIe13h/dYqQuPnVInhtCEh9ZpuilDC5fvWceoxVDmBelfwOpGgMC8Fw4975nt/Dv 4JGdPSL905a8f/LJlR4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NIH.GOV is authoritative for NIH.GOV
	Found RRSIG signed by nih.gov zone
	Query to ns3.NIH.GOV for NIH.GOV/SOA
	Error querying ns3.NIH.GOV/2607:f220:402:1801:0:0:a570:4e6 for NIH.GOV/SOA: 'IPv6 transport disabled'
	Received 426 bytes from 165.112.4.230
	;; Answer received from 165.112.4.230 (426 bytes) ;; HEADER SECTION ;; id = 55688 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NIH.GOV. IN SOA ;; ANSWER SECTION (3 records) NIH.GOV. 7200 IN SOA ( nihblox5.NIH.GOV. hostmaster.NIH.GOV. 29966 ;serial 10800 ;refresh 1080 ;retry 2592000 ;expire 900 ;minimum ) NIH.GOV. 7200 IN RRSIG ( SOA 7 2 7200 20200130045420 20200126035420 5324 nih.gov. CcxJpk4dBJEv2b7KcW+A/rZ3kQJAozJRgCI9Da+ocCw8w3UUeeRU3S6Jv1v9iZwEIDpRKGx6ZVMo QOYEz8PboylOdloFm0eCg5i4M8qLE6TOF7rxNr4DR4Q6zddqzsRHBTUamIiLgONmdMO2KvoJ8J8U pP8hpNgDFLuZrLjYmvs= ) nih.gov. 7200 IN RRSIG ( SOA 7 2 7200 20200130045420 20200126035420 51077 nih.gov. LzmK4nHF2HLi31jEHcA5wdAEjs563ovXp2g+HgMW3/pfuja9o9X5A4MB0/RKBZBuK31h8jFvRiZ4 /40FU7Bul3f7KIKHDfKAJ5lzV+7onYAdPQZXLFc+KQcAFy0j/1Y83mFvkm95vNDGJ9YSGSvyNHbb xy+3SSML1yTI/urtZ+Y= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns.NIH.GOV for NIH.GOV/SOA
	Error querying ns.NIH.GOV/2607:f220:404:101:0:0:80e7:80fb for NIH.GOV/SOA: 'IPv6 transport disabled'
	Received 426 bytes from 128.231.128.251
	;; Answer received from 128.231.128.251 (426 bytes) ;; HEADER SECTION ;; id = 63506 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NIH.GOV. IN SOA ;; ANSWER SECTION (3 records) NIH.GOV. 7200 IN SOA ( nihblox5.NIH.GOV. hostmaster.NIH.GOV. 29966 ;serial 10800 ;refresh 1080 ;retry 2592000 ;expire 900 ;minimum ) NIH.GOV. 7200 IN RRSIG ( SOA 7 2 7200 20200130045420 20200126035420 5324 nih.gov. CcxJpk4dBJEv2b7KcW+A/rZ3kQJAozJRgCI9Da+ocCw8w3UUeeRU3S6Jv1v9iZwEIDpRKGx6ZVMo QOYEz8PboylOdloFm0eCg5i4M8qLE6TOF7rxNr4DR4Q6zddqzsRHBTUamIiLgONmdMO2KvoJ8J8U pP8hpNgDFLuZrLjYmvs= ) nih.gov. 7200 IN RRSIG ( SOA 7 2 7200 20200130045420 20200126035420 51077 nih.gov. LzmK4nHF2HLi31jEHcA5wdAEjs563ovXp2g+HgMW3/pfuja9o9X5A4MB0/RKBZBuK31h8jFvRiZ4 /40FU7Bul3f7KIKHDfKAJ5lzV+7onYAdPQZXLFc+KQcAFy0j/1Y83mFvkm95vNDGJ9YSGSvyNHbb xy+3SSML1yTI/urtZ+Y= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns2.NIH.GOV for NIH.GOV/SOA
	Received 426 bytes from 128.231.64.1
	;; Answer received from 128.231.64.1 (426 bytes) ;; HEADER SECTION ;; id = 13303 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NIH.GOV. IN SOA ;; ANSWER SECTION (3 records) NIH.GOV. 7200 IN SOA ( nihblox5.NIH.GOV. hostmaster.NIH.GOV. 29966 ;serial 10800 ;refresh 1080 ;retry 2592000 ;expire 900 ;minimum ) NIH.GOV. 7200 IN RRSIG ( SOA 7 2 7200 20200130045420 20200126035420 5324 nih.gov. CcxJpk4dBJEv2b7KcW+A/rZ3kQJAozJRgCI9Da+ocCw8w3UUeeRU3S6Jv1v9iZwEIDpRKGx6ZVMo QOYEz8PboylOdloFm0eCg5i4M8qLE6TOF7rxNr4DR4Q6zddqzsRHBTUamIiLgONmdMO2KvoJ8J8U pP8hpNgDFLuZrLjYmvs= ) nih.gov. 7200 IN RRSIG ( SOA 7 2 7200 20200130045420 20200126035420 51077 nih.gov. LzmK4nHF2HLi31jEHcA5wdAEjs563ovXp2g+HgMW3/pfuja9o9X5A4MB0/RKBZBuK31h8jFvRiZ4 /40FU7Bul3f7KIKHDfKAJ5lzV+7onYAdPQZXLFc+KQcAFy0j/1Y83mFvkm95vNDGJ9YSGSvyNHbb xy+3SSML1yTI/urtZ+Y= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns.NIH.GOV for NIH.GOV/A
	Error querying ns.NIH.GOV/2607:f220:404:101:0:0:80e7:80fb for NIH.GOV/A: 'IPv6 transport disabled'
	Received 386 bytes from 128.231.128.251
	;; Answer received from 128.231.128.251 (386 bytes) ;; HEADER SECTION ;; id = 44395 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NIH.GOV. IN A ;; ANSWER SECTION (3 records) NIH.GOV. 7200 IN A 54.235.145.223 NIH.GOV. 7200 IN RRSIG ( A 7 2 7200 20200129222541 20200125214436 5324 nih.gov. dTnpZaAPrf8POr4VzmQGplJG1Anw+d2pfgifiM7yTgUfH5cLj14DLkov0xjvwQqGYXd9S9nzEUWz YroSAfqzFhkT1IRkjX0tNHS31t4IjpCIZwB2lpkqo7cdn+BOLZkfm5uMawf2YHVbFCS8KEfcHxMh F+C4FSYYosck3BJXr4A= ) nih.gov. 7200 IN RRSIG ( A 7 2 7200 20200129222541 20200125214436 51077 nih.gov. K1NoPlfdrksvU/hrwaLPoRKpJqzYeD6sjSQ1jxnHQOEwXMJQmcc24iPFwjh2naaZQrFIhHbGJXzl Y1U/8A+yU0xQMIe13h/dYqQuPnVInhtCEh9ZpuilDC5fvWceoxVDmBelfwOpGgMC8Fw4975nt/Dv 4JGdPSL905a8f/LJlR4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NIH.GOV A RR has value 54.235.145.223
	Found 2 RRSIGs over A RRset
	`NIH.GOV. 7200 IN RRSIG ( A 7 2 7200 20200129222541 20200125214436 5324 nih.gov. dTnpZaAPrf8POr4VzmQGplJG1Anw+d2pfgifiM7yTgUfH5cLj14DLkov0xjvwQqGYXd9S9nzEUWz YroSAfqzFhkT1IRkjX0tNHS31t4IjpCIZwB2lpkqo7cdn+BOLZkfm5uMawf2YHVbFCS8KEfcHxMh F+C4FSYYosck3BJXr4A= )`
	`nih.gov. 7200 IN RRSIG ( A 7 2 7200 20200129222541 20200125214436 51077 nih.gov. K1NoPlfdrksvU/hrwaLPoRKpJqzYeD6sjSQ1jxnHQOEwXMJQmcc24iPFwjh2naaZQrFIhHbGJXzl Y1U/8A+yU0xQMIe13h/dYqQuPnVInhtCEh9ZpuilDC5fvWceoxVDmBelfwOpGgMC8Fw4975nt/Dv 4JGdPSL905a8f/LJlR4= )`
	RRSIG=5324 and DNSKEY=5324 verifies the A RRset
	RRSIG=51077 and DNSKEY=51077 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test NIH.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: