DNSSEC Analyzer - NRELHUB.GOV

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2018-12-13 16:10:32 UTC, NTP stratum 4

Analyzing DNSSEC problems for NRELHUB.GOV

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Error querying c.root-servers.net/2001:500:2:0:0:0:0:c for ./DNSKEY: 'IPv6 transport disabled'
	Received 1139 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (1139 bytes) ;; HEADER SECTION ;; id = 48552 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAdp440E6Mz7c+Vl4sPd0lTv2Qnc85dTW64j0RDD7sS/zwxWDJ3QRES2VKDO0OXLMqVJSs2YC CSDKuZXpDPuf++YfAu0j7lzYYdWTGwyNZhEaXtMQJIKYB96pW6cRkiG2Dn8S2vvo/PxW9PKQsyLb td8PcwWglHgReBVp7kEv/Dd+3b3YMukt4jnWgDUddAySg558Zld+c9eGWkgWoOiuhg4rQRkFstMX 1pRyOSHcZuH38o1WcsT4y3eT0U/SR6TOSLIB/8Ftirux/h297oS7tCcwSPt0wwry5OFNTlfMo8v7 WGurogfk8hPipf7TTKHIi20LWen5RCsvYsQBkYGpF78= ) ; Key ID = 2134 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19036 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20181231000000 20181210000000 20326 . oZ1v3JnBSPHWf2HXeAyoqW/lTUP0FAs1tcEQOM47KD3Rb1qHySTbGhh0rTclRlm86GKUlPSiPaF3 zkJ5h46Nazo3r5iAqorjQ1FQD69AgLXpdEIrnzkC3tTTZv+h+Qi2/UosrzoPQnWj3pIdvZvcP5W2 T6nlP7PN5EP2LSeQzLxT8sOUGsBt0iDiGtqm+bN0mKxKdV4599g0+83FtubMG5oYWUBpMJ/os956 uvW/Vg2cwv3/m9X/cX38svYEcAbniXnyqT88+wqPBMA782tUu1AU1tb9QyMt0LcmsDgjrBWl38SG r/LvaNxHMrfU7ymNuEj6NeLBhNfuDEaz0zBRtQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdp440E6Mz7c+Vl4sPd0lTv2Qnc85dTW64j0RDD7sS/zwxWDJ3QRES2VKDO0OXLMqVJSs2YC CSDKuZXpDPuf++YfAu0j7lzYYdWTGwyNZhEaXtMQJIKYB96pW6cRkiG2Dn8S2vvo/PxW9PKQsyLb td8PcwWglHgReBVp7kEv/Dd+3b3YMukt4jnWgDUddAySg558Zld+c9eGWkgWoOiuhg4rQRkFstMX 1pRyOSHcZuH38o1WcsT4y3eT0U/SR6TOSLIB/8Ftirux/h297oS7tCcwSPt0wwry5OFNTlfMo8v7 WGurogfk8hPipf7TTKHIi20LWen5RCsvYsQBkYGpF78= ) ; Key ID = 2134`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19036`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=19036/SEP is now in the chain-of-trust
	DS=19036/SHA-256 verifies DNSKEY=19036/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20181231000000 20181210000000 20326 . oZ1v3JnBSPHWf2HXeAyoqW/lTUP0FAs1tcEQOM47KD3Rb1qHySTbGhh0rTclRlm86GKUlPSiPaF3 zkJ5h46Nazo3r5iAqorjQ1FQD69AgLXpdEIrnzkC3tTTZv+h+Qi2/UosrzoPQnWj3pIdvZvcP5W2 T6nlP7PN5EP2LSeQzLxT8sOUGsBt0iDiGtqm+bN0mKxKdV4599g0+83FtubMG5oYWUBpMJ/os956 uvW/Vg2cwv3/m9X/cX38svYEcAbniXnyqT88+wqPBMA782tUu1AU1tb9QyMt0LcmsDgjrBWl38SG r/LvaNxHMrfU7ymNuEj6NeLBhNfuDEaz0zBRtQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=2134 is now in the chain-of-trust
	Query to a.root-servers.net for NRELHUB.GOV/A
	Received 666 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (666 bytes) ;; HEADER SECTION ;; id = 15726 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; NRELHUB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20181226050000 20181213040000 2134 . va64nNI85PJnLkO40Q70szJFF1i3A28sa/uCvIJ0jo1xsMojL/7is2f8HLAdAJBuICuaNhMpVlxG Ga+ZaIYfjHNCTET+ykRQu9iXFJ1g5BtUg2G4sTzN2u4h7IPGnojCmRslWInn3kGMbRfy9C99NGBM gWwAUSMxTtYyI3n66+QMrGW4lqkhXAJkgLuNPMWzWXxNWpW+i5hetpH676mcCaMPeuVEQLbZ4EWI HsJd908OanUUAXPuLzq3d5aEOIRh1bLiV+mPcTs3XRZZLZWEbeljssJ4cEq30R9oNsCse7IBXYzH LmFcFE5btkOJLhIAPiDLHxP1Q526SqwAkgtUTA== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to d.root-servers.net for GOV/DNSKEY
	Received 658 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (658 bytes) ;; HEADER SECTION ;; id = 47479 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20181226050000 20181213040000 2134 . va64nNI85PJnLkO40Q70szJFF1i3A28sa/uCvIJ0jo1xsMojL/7is2f8HLAdAJBuICuaNhMpVlxG Ga+ZaIYfjHNCTET+ykRQu9iXFJ1g5BtUg2G4sTzN2u4h7IPGnojCmRslWInn3kGMbRfy9C99NGBM gWwAUSMxTtYyI3n66+QMrGW4lqkhXAJkgLuNPMWzWXxNWpW+i5hetpH676mcCaMPeuVEQLbZ4EWI HsJd908OanUUAXPuLzq3d5aEOIRh1bLiV+mPcTs3XRZZLZWEbeljssJ4cEq30R9oNsCse7IBXYzH LmFcFE5btkOJLhIAPiDLHxP1Q526SqwAkgtUTA== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to c.root-servers.net for GOV/DS
	Received 406 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (406 bytes) ;; HEADER SECTION ;; id = 8324 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20181226050000 20181213040000 2134 . va64nNI85PJnLkO40Q70szJFF1i3A28sa/uCvIJ0jo1xsMojL/7is2f8HLAdAJBuICuaNhMpVlxG Ga+ZaIYfjHNCTET+ykRQu9iXFJ1g5BtUg2G4sTzN2u4h7IPGnojCmRslWInn3kGMbRfy9C99NGBM gWwAUSMxTtYyI3n66+QMrGW4lqkhXAJkgLuNPMWzWXxNWpW+i5hetpH676mcCaMPeuVEQLbZ4EWI HsJd908OanUUAXPuLzq3d5aEOIRh1bLiV+mPcTs3XRZZLZWEbeljssJ4cEq30R9oNsCse7IBXYzH LmFcFE5btkOJLhIAPiDLHxP1Q526SqwAkgtUTA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	DS=7698/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20181226050000 20181213040000 2134 . va64nNI85PJnLkO40Q70szJFF1i3A28sa/uCvIJ0jo1xsMojL/7is2f8HLAdAJBuICuaNhMpVlxG Ga+ZaIYfjHNCTET+ykRQu9iXFJ1g5BtUg2G4sTzN2u4h7IPGnojCmRslWInn3kGMbRfy9C99NGBM gWwAUSMxTtYyI3n66+QMrGW4lqkhXAJkgLuNPMWzWXxNWpW+i5hetpH676mcCaMPeuVEQLbZ4EWI HsJd908OanUUAXPuLzq3d5aEOIRh1bLiV+mPcTs3XRZZLZWEbeljssJ4cEq30R9oNsCse7IBXYzH LmFcFE5btkOJLhIAPiDLHxP1Q526SqwAkgtUTA== )`
	RRSIG=2134 and DNSKEY=2134 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	Query to a.gov-servers.net for GOV/DNSKEY
	Error querying a.gov-servers.net/2001:500:4431:0:0:0:2:30 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 743 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (743 bytes) ;; HEADER SECTION ;; id = 42626 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 256 3 8 AQOzQCL1fIfPdHz2b/lMEAyj5l7JieIaa1GJ1/KDBE80I/FgASeN5ekMXj8XwPdLS38aXq4M67zu locw3A3YjP8qGvR8EZTClRKoFWfQSFyroyXq5w2GN2ir8gxXMwRcIcSg5AVK+3uGMLNRdwVXZB27 GlaqF75saOfj2hP7t2bs6Q== ) ; Key ID = 40499 GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20181223224731 20181208224231 7698 gov. Il/96qUKHNn0ZAOoV2App1UfZY1xcWWeHbsbv5fP6NDWPYyMAXR53AvffkiU6HPQtAciq1hHHgln aZ8jfWnDvffBADBaTioeblHVk9JboOUnoVITbsDBTCfZQG7EIn/nfhMy6h/1HJpdkuWshZ7eH+93 c2csPFAPAbF/8qfgixdkl4juvcDdugrXFmWC7A6ns3cjRZeCUd/RLt1SiNG7RjOndb/GGoQcAEDS X+2tJEurPUgMosqtvLk9HHvv3eLAJxy6i184vnN+jMsm1/WEkiK9nW4LCGSamux+LLBvTqfEhQE1 2zZ946dysmZh8czhq4myhgq6pZD08A4Nb7eGnw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQOzQCL1fIfPdHz2b/lMEAyj5l7JieIaa1GJ1/KDBE80I/FgASeN5ekMXj8XwPdLS38aXq4M67zu locw3A3YjP8qGvR8EZTClRKoFWfQSFyroyXq5w2GN2ir8gxXMwRcIcSg5AVK+3uGMLNRdwVXZB27 GlaqF75saOfj2hP7t2bs6Q== ) ; Key ID = 40499`
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20181223224731 20181208224231 7698 gov. Il/96qUKHNn0ZAOoV2App1UfZY1xcWWeHbsbv5fP6NDWPYyMAXR53AvffkiU6HPQtAciq1hHHgln aZ8jfWnDvffBADBaTioeblHVk9JboOUnoVITbsDBTCfZQG7EIn/nfhMy6h/1HJpdkuWshZ7eH+93 c2csPFAPAbF/8qfgixdkl4juvcDdugrXFmWC7A6ns3cjRZeCUd/RLt1SiNG7RjOndb/GGoQcAEDS X+2tJEurPUgMosqtvLk9HHvv3eLAJxy6i184vnN+jMsm1/WEkiK9nW4LCGSamux+LLBvTqfEhQE1 2zZ946dysmZh8czhq4myhgq6pZD08A4Nb7eGnw== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=40499 is now in the chain-of-trust
	Query to c.gov-servers.net for NRELHUB.GOV/A
	Received 581 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (581 bytes) ;; HEADER SECTION ;; id = 48581 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 11 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; NRELHUB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) NRELHUB.GOV. 86400 IN NS adns1.es.net. NRELHUB.GOV. 86400 IN NS adns2.es.net. NRELHUB.GOV. 86400 IN NS helios.nrel.GOV. NRELHUB.GOV. 86400 IN NS phaeton.nrel.GOV. NRELHUB.GOV. 3600 IN DS 6768 7 1 c1aacef20e5ffb82d8f985b598d392edc10219b7 NRELHUB.GOV. 3600 IN DS ( 6768 7 2 4d2ea0742801bed4a24b2dfbf6b3b235980abfe57483b0e933ccc6b2c6e733f7 ) NRELHUB.GOV. 3600 IN DS 23220 7 1 f4a2d700914275f56bb0eeb27c45da903c290996 NRELHUB.GOV. 3600 IN DS ( 23220 7 2 ac6d6a726ba85c775f3904ec3bc483a45a1429bdcdd0e37c3323da3cc96af3df ) NRELHUB.GOV. 3600 IN DS 56388 7 1 aa3004261c8e0589b9a848c9983e5144900f99b9 NRELHUB.GOV. 3600 IN DS ( 56388 7 2 c36d4337fb48ad2fe78eb31934efb204677850e5a6cc8f90907608e61e200897 ) NRELHUB.GOV. 3600 IN RRSIG ( DS 8 2 3600 20181220101008 20181213101008 40499 gov. AzUR/ap7ovdjsRMwbuw0bPHYbbUQcsJm4AkcWkwtguc4TVTXTdy4ZLW/4s9b3Ot+moEI7jZtC0Ou Q7R4xORtLKae0nX8WqIdFonj8CGZDgmW6VkiEfNL1cx/J0QgtIrZcDlLKxRciQgPk+0jG90CXjI0 CLUhiic7/wF4VYbC188= ) ;; ADDITIONAL SECTION (3 records) helios.nrel.GOV. 86400 IN A 192.174.58.2 phaeton.nrel.GOV. 86400 IN A 192.174.58.253 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to b.gov-servers.net for NRELHUB.GOV/DNSKEY
	Error querying b.gov-servers.net/2620:74:27:0:0:0:2:30 for NRELHUB.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 581 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (581 bytes) ;; HEADER SECTION ;; id = 14568 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 11 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; NRELHUB.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) NRELHUB.GOV. 86400 IN NS adns1.es.net. NRELHUB.GOV. 86400 IN NS adns2.es.net. NRELHUB.GOV. 86400 IN NS helios.nrel.GOV. NRELHUB.GOV. 86400 IN NS phaeton.nrel.GOV. NRELHUB.GOV. 3600 IN DS 6768 7 1 c1aacef20e5ffb82d8f985b598d392edc10219b7 NRELHUB.GOV. 3600 IN DS ( 6768 7 2 4d2ea0742801bed4a24b2dfbf6b3b235980abfe57483b0e933ccc6b2c6e733f7 ) NRELHUB.GOV. 3600 IN DS 23220 7 1 f4a2d700914275f56bb0eeb27c45da903c290996 NRELHUB.GOV. 3600 IN DS ( 23220 7 2 ac6d6a726ba85c775f3904ec3bc483a45a1429bdcdd0e37c3323da3cc96af3df ) NRELHUB.GOV. 3600 IN DS 56388 7 1 aa3004261c8e0589b9a848c9983e5144900f99b9 NRELHUB.GOV. 3600 IN DS ( 56388 7 2 c36d4337fb48ad2fe78eb31934efb204677850e5a6cc8f90907608e61e200897 ) NRELHUB.GOV. 3600 IN RRSIG ( DS 8 2 3600 20181220101008 20181213101008 40499 gov. AzUR/ap7ovdjsRMwbuw0bPHYbbUQcsJm4AkcWkwtguc4TVTXTdy4ZLW/4s9b3Ot+moEI7jZtC0Ou Q7R4xORtLKae0nX8WqIdFonj8CGZDgmW6VkiEfNL1cx/J0QgtIrZcDlLKxRciQgPk+0jG90CXjI0 CLUhiic7/wF4VYbC188= ) ;; ADDITIONAL SECTION (3 records) helios.nrel.GOV. 86400 IN A 192.174.58.2 phaeton.nrel.GOV. 86400 IN A 192.174.58.253 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone NRELHUB.GOV

NRELHUB.GOV

	Checking DS between GOV and NRELHUB.GOV
	Query to c.gov-servers.net for NRELHUB.GOV/DS
	Received 455 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (455 bytes) ;; HEADER SECTION ;; id = 43186 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 7 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; NRELHUB.GOV. IN DS ;; ANSWER SECTION (7 records) NRELHUB.GOV. 3600 IN DS 6768 7 1 c1aacef20e5ffb82d8f985b598d392edc10219b7 NRELHUB.GOV. 3600 IN DS ( 6768 7 2 4d2ea0742801bed4a24b2dfbf6b3b235980abfe57483b0e933ccc6b2c6e733f7 ) NRELHUB.GOV. 3600 IN DS 23220 7 1 f4a2d700914275f56bb0eeb27c45da903c290996 NRELHUB.GOV. 3600 IN DS ( 23220 7 2 ac6d6a726ba85c775f3904ec3bc483a45a1429bdcdd0e37c3323da3cc96af3df ) NRELHUB.GOV. 3600 IN DS 56388 7 1 aa3004261c8e0589b9a848c9983e5144900f99b9 NRELHUB.GOV. 3600 IN DS ( 56388 7 2 c36d4337fb48ad2fe78eb31934efb204677850e5a6cc8f90907608e61e200897 ) NRELHUB.GOV. 3600 IN RRSIG ( DS 8 2 3600 20181220101008 20181213101008 40499 gov. AzUR/ap7ovdjsRMwbuw0bPHYbbUQcsJm4AkcWkwtguc4TVTXTdy4ZLW/4s9b3Ot+moEI7jZtC0Ou Q7R4xORtLKae0nX8WqIdFonj8CGZDgmW6VkiEfNL1cx/J0QgtIrZcDlLKxRciQgPk+0jG90CXjI0 CLUhiic7/wF4VYbC188= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 6 DS records for NRELHUB.GOV in the GOV zone
	DS=6768/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=6768/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=23220/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=23220/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=56388/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=56388/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`NRELHUB.GOV. 3600 IN RRSIG ( DS 8 2 3600 20181220101008 20181213101008 40499 gov. AzUR/ap7ovdjsRMwbuw0bPHYbbUQcsJm4AkcWkwtguc4TVTXTdy4ZLW/4s9b3Ot+moEI7jZtC0Ou Q7R4xORtLKae0nX8WqIdFonj8CGZDgmW6VkiEfNL1cx/J0QgtIrZcDlLKxRciQgPk+0jG90CXjI0 CLUhiic7/wF4VYbC188= )`
	RRSIG=40499 and DNSKEY=40499 verifies the DS RRset
	DS=6768/SHA-1 is now in the chain-of-trust
	DS=23220/SHA-1 is now in the chain-of-trust
	DS=56388/SHA-1 is now in the chain-of-trust
	`NRELHUB.GOV. 3600 IN DS 6768 7 1 c1aacef20e5ffb82d8f985b598d392edc10219b7`
	`NRELHUB.GOV. 3600 IN DS ( 6768 7 2 4d2ea0742801bed4a24b2dfbf6b3b235980abfe57483b0e933ccc6b2c6e733f7 )`
	`NRELHUB.GOV. 3600 IN DS 23220 7 1 f4a2d700914275f56bb0eeb27c45da903c290996`
	`NRELHUB.GOV. 3600 IN DS ( 23220 7 2 ac6d6a726ba85c775f3904ec3bc483a45a1429bdcdd0e37c3323da3cc96af3df )`
	`NRELHUB.GOV. 3600 IN DS 56388 7 1 aa3004261c8e0589b9a848c9983e5144900f99b9`
	`NRELHUB.GOV. 3600 IN DS ( 56388 7 2 c36d4337fb48ad2fe78eb31934efb204677850e5a6cc8f90907608e61e200897 )`
	Query to adns2.es.net for NRELHUB.GOV/DNSKEY
	Received 2095 bytes from 192.188.22.52
	;; Answer received from 192.188.22.52 (2095 bytes) ;; HEADER SECTION ;; id = 46185 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NRELHUB.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) nrelhub.gov. 172800 IN DNSKEY ( 256 3 7 AwEAAZu7vCUZSNSR326BvsUuXxamFpjJnIwMirLvzvOrDH31mvQomB+y/f7twbUSfR7wg+gIWiF+ 7pDX+UpX7xUG2BABo8vifq1POO+22sHTBq6xtXtI1kd8vHEpvCq6XTHEnYN55AKMvzah1hzYOHTR KIR9Yc1rsZgvz/1ZpY8A3vFJ ) ; Key ID = 32507 nrelhub.gov. 172800 IN DNSKEY ( 257 3 7 AwEAAbOmK+JKSkypiX4Vc6MYqAxL4WYRvbD25j5r1gzEEpuWHhUY+QH1s1JjI+cWr1VYkCw2ZAfU bmixUuRn/SRsPtwpqTkNIb2JCvmXE83cIXxFiFz84GhVH0vag8xEA0nm8glc34mXJJdRIHSNPbRH f3+guCI0ck48V+t78MVr/oOFDzg7RBLYatv62G3OVM+nfwnHIGfSO4Ju9ErIJEom9OKANnvvCBL7 v66n/S2RxG5M9A+Mt/I78aoG6Gx8fqW05uIIuDo4QeBKkkLF+vTMGGBE1BCW4e4Sw4J1wQGZrUMO eB8yhilhQjNDjxUe0Nf6sjrbRLceYInUFxdB4iC56ac= ) ; Key ID = 23220 nrelhub.gov. 172800 IN DNSKEY ( 257 3 7 AwEAAcmtI0VutZdLrA8dYqJcsbuhL4iKXd9M9iWcqgPFeZtR/dHnIS2db26IoEKikF4b7+fiNeSB 7WaKvUsWmmTG6zkTMI6evwqOQmJOHF0ZaDiZxo6KexyJzv/GfbsYllqL6ug4cMyRet3Iyvdk2cI1 N7PzccFO7ILHVusWT0b7PkhDVRzgwKh8bII8Q4UpI9lcxSoQLwfJEaCNZMQaFDWc2Ni5AWgGaNSB 4DX3IGyyxNfvq7o8PBDKLXivT0+R4BxJouFTtk1wY6R2rTQJGvhmvuyVJx1wv1nwSrYqfHd+ZJ06 K9IWva06oFi4K86eCdMkxj+r/SjDShiUDSzmkSlPAwc= ) ; Key ID = 6768 nrelhub.gov. 172800 IN DNSKEY ( 257 3 7 AwEAAdTomzGpL1PazptD1e6Kdn7sbnkQBbS81TLkV/WFdeoFSaKGoV9HbXozNf/JL7J9XCFByJnH 74jMAgAyc4mmhY2bSj2yUkCGu+0AKy1zKutOUWwssxN+euFtF6StwD0m7hgKbsDuMngWccwviLpW iE9SAfWtQpKkLr+f1hzKFaqm9nHSsxT1+P0hy+LAkTHbANhxvcjoHGA+un7L/d6chXOU+gB313GK aIm2SN927Xsj6059YoAHlxZxfchcwvk1hivlCBosqgqHAVWsrlfokW9ylGPdwZzatJcquuPB9LLz MeMeUd76F/5chBmv6ojbTvXpijX9QG6SO8zuRobav20= ) ; Key ID = 56388 nrelhub.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20181217065555 20181213064435 6768 nrelhub.gov. vt35kkF04BXvobHcZNSMi4maxM8A8WJfHsv+64OjfCV32Oa74TTKHL9+8u4VvZ7h2sYbhjDtgIFB E/JPeNw05mBkW/f8HKG5XEM5W5Qk3u0B10oLfNbYPnog++g1NshkSZosisbxyvIwL/tjPzxxb5he xWJJ5jPq0JzA320DLRKHEqi7T1lYBcAlbn7Hp2UVj35RtJaWNHyCKqem5I8IuYfqvos09mlQlaIV TMtNAtle3xZ0IL9irtKAdAxP7JqJVTodaweEZVhdp/lL5Wdbj4CLHiJ2OJ5bdUpAAeu/87pV36lZ xTkFHnWyFHLlc8cU3zjL8f3HDv8e0iKGyNpXCg== ) nrelhub.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20181217065555 20181213064435 23220 nrelhub.gov. qLR/+ePGvbWgBSq2rnf7KjHDJasE53HWEDcAM1Vk8eSSLLXbaM/7HlJc7TDRB16NaPEfEqE4NS1Z fMGX0wPHOOjEjp1le17gSRXxuvb54QlXdeUwLRewFK8M8dmL1b5QJsM4ka57tUjzTNWcSVBg5A7T gaBxfnKrrYJqtQ7AitTyMX6YaiL0DOgENJuBDzpYwQz9LKNo2jjjmXSvZcIqZ8zE7OwGgTa4pYJD oRgIB5p80J4x6KNJdTAx8dSxdeEF6otxZOXDilD5T/sNUJZaTurkgSzZwe0OBhpv5tRn2nm1tLcn 4Xr+Xo3YGpjLSDV7/Nvg/7CTFDNr6BKvng6QvA== ) nrelhub.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20181217065555 20181213064435 32507 nrelhub.gov. bm8R00Gs4HGT0K0Z3H+8d5lPfiK60/ecgRr0PXSd+oiZP/8apRASdlQ9p1mGRf1eOJT9YzSrZqcI xReL5gJ4263N9vCRe7Y4LdaEus2WbITV7LhQOu+bx1me/fAlWQJPJZulXuCMVrMRKlvzEU+kuqHR yjEjfOHSFpRHtUQ9ssw= ) nrelhub.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20181217065555 20181213064435 56388 nrelhub.gov. vsxTe6+JC9RYByyqfbtg9cGW/BJOHiq4z7uHhToYzLX2NrYLl6l9Txn9A32HWOR8NLzKVOfFWfuF Jg2laiPc2qce72+lh0zlTo/pU28pZPNT3ZPPHz9pcSnqtBVjRqOPOzH3QcrtTMmaCdd3i7MsFgAA lcTSC4jgOtb7GSZ+zMOHpQAvl8W+4jFntrcb0rph5o0FLzjyJSO69+Q6Ayg0NRAPFBjTxJJOJEXT UxG5/sFeXnldZee1FcnTwPj8cTMZ4foWIcMEtDKK3wMTjqEsb1oECkYcaTVzUQG7WxtMk93vXFYQ sHb40TZRe6/Ub+PiLpPc8EUaQLDRjmzObMJZfw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for NRELHUB.GOV
	`nrelhub.gov. 172800 IN DNSKEY ( 256 3 7 AwEAAZu7vCUZSNSR326BvsUuXxamFpjJnIwMirLvzvOrDH31mvQomB+y/f7twbUSfR7wg+gIWiF+ 7pDX+UpX7xUG2BABo8vifq1POO+22sHTBq6xtXtI1kd8vHEpvCq6XTHEnYN55AKMvzah1hzYOHTR KIR9Yc1rsZgvz/1ZpY8A3vFJ ) ; Key ID = 32507`
	`nrelhub.gov. 172800 IN DNSKEY ( 257 3 7 AwEAAbOmK+JKSkypiX4Vc6MYqAxL4WYRvbD25j5r1gzEEpuWHhUY+QH1s1JjI+cWr1VYkCw2ZAfU bmixUuRn/SRsPtwpqTkNIb2JCvmXE83cIXxFiFz84GhVH0vag8xEA0nm8glc34mXJJdRIHSNPbRH f3+guCI0ck48V+t78MVr/oOFDzg7RBLYatv62G3OVM+nfwnHIGfSO4Ju9ErIJEom9OKANnvvCBL7 v66n/S2RxG5M9A+Mt/I78aoG6Gx8fqW05uIIuDo4QeBKkkLF+vTMGGBE1BCW4e4Sw4J1wQGZrUMO eB8yhilhQjNDjxUe0Nf6sjrbRLceYInUFxdB4iC56ac= ) ; Key ID = 23220`
	`nrelhub.gov. 172800 IN DNSKEY ( 257 3 7 AwEAAcmtI0VutZdLrA8dYqJcsbuhL4iKXd9M9iWcqgPFeZtR/dHnIS2db26IoEKikF4b7+fiNeSB 7WaKvUsWmmTG6zkTMI6evwqOQmJOHF0ZaDiZxo6KexyJzv/GfbsYllqL6ug4cMyRet3Iyvdk2cI1 N7PzccFO7ILHVusWT0b7PkhDVRzgwKh8bII8Q4UpI9lcxSoQLwfJEaCNZMQaFDWc2Ni5AWgGaNSB 4DX3IGyyxNfvq7o8PBDKLXivT0+R4BxJouFTtk1wY6R2rTQJGvhmvuyVJx1wv1nwSrYqfHd+ZJ06 K9IWva06oFi4K86eCdMkxj+r/SjDShiUDSzmkSlPAwc= ) ; Key ID = 6768`
	`nrelhub.gov. 172800 IN DNSKEY ( 257 3 7 AwEAAdTomzGpL1PazptD1e6Kdn7sbnkQBbS81TLkV/WFdeoFSaKGoV9HbXozNf/JL7J9XCFByJnH 74jMAgAyc4mmhY2bSj2yUkCGu+0AKy1zKutOUWwssxN+euFtF6StwD0m7hgKbsDuMngWccwviLpW iE9SAfWtQpKkLr+f1hzKFaqm9nHSsxT1+P0hy+LAkTHbANhxvcjoHGA+un7L/d6chXOU+gB313GK aIm2SN927Xsj6059YoAHlxZxfchcwvk1hivlCBosqgqHAVWsrlfokW9ylGPdwZzatJcquuPB9LLz MeMeUd76F/5chBmv6ojbTvXpijX9QG6SO8zuRobav20= ) ; Key ID = 56388`
	DNSKEY=23220/SEP is now in the chain-of-trust
	DS=23220/SHA-1 verifies DNSKEY=23220/SEP
	DS=23220/SHA-256 verifies DNSKEY=23220/SEP
	DNSKEY=6768/SEP is now in the chain-of-trust
	DS=6768/SHA-1 verifies DNSKEY=6768/SEP
	DS=6768/SHA-256 verifies DNSKEY=6768/SEP
	DNSKEY=56388/SEP is now in the chain-of-trust
	DS=56388/SHA-1 verifies DNSKEY=56388/SEP
	DS=56388/SHA-256 verifies DNSKEY=56388/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`nrelhub.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20181217065555 20181213064435 6768 nrelhub.gov. vt35kkF04BXvobHcZNSMi4maxM8A8WJfHsv+64OjfCV32Oa74TTKHL9+8u4VvZ7h2sYbhjDtgIFB E/JPeNw05mBkW/f8HKG5XEM5W5Qk3u0B10oLfNbYPnog++g1NshkSZosisbxyvIwL/tjPzxxb5he xWJJ5jPq0JzA320DLRKHEqi7T1lYBcAlbn7Hp2UVj35RtJaWNHyCKqem5I8IuYfqvos09mlQlaIV TMtNAtle3xZ0IL9irtKAdAxP7JqJVTodaweEZVhdp/lL5Wdbj4CLHiJ2OJ5bdUpAAeu/87pV36lZ xTkFHnWyFHLlc8cU3zjL8f3HDv8e0iKGyNpXCg== )`
	`nrelhub.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20181217065555 20181213064435 23220 nrelhub.gov. qLR/+ePGvbWgBSq2rnf7KjHDJasE53HWEDcAM1Vk8eSSLLXbaM/7HlJc7TDRB16NaPEfEqE4NS1Z fMGX0wPHOOjEjp1le17gSRXxuvb54QlXdeUwLRewFK8M8dmL1b5QJsM4ka57tUjzTNWcSVBg5A7T gaBxfnKrrYJqtQ7AitTyMX6YaiL0DOgENJuBDzpYwQz9LKNo2jjjmXSvZcIqZ8zE7OwGgTa4pYJD oRgIB5p80J4x6KNJdTAx8dSxdeEF6otxZOXDilD5T/sNUJZaTurkgSzZwe0OBhpv5tRn2nm1tLcn 4Xr+Xo3YGpjLSDV7/Nvg/7CTFDNr6BKvng6QvA== )`
	`nrelhub.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20181217065555 20181213064435 32507 nrelhub.gov. bm8R00Gs4HGT0K0Z3H+8d5lPfiK60/ecgRr0PXSd+oiZP/8apRASdlQ9p1mGRf1eOJT9YzSrZqcI xReL5gJ4263N9vCRe7Y4LdaEus2WbITV7LhQOu+bx1me/fAlWQJPJZulXuCMVrMRKlvzEU+kuqHR yjEjfOHSFpRHtUQ9ssw= )`
	`nrelhub.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20181217065555 20181213064435 56388 nrelhub.gov. vsxTe6+JC9RYByyqfbtg9cGW/BJOHiq4z7uHhToYzLX2NrYLl6l9Txn9A32HWOR8NLzKVOfFWfuF Jg2laiPc2qce72+lh0zlTo/pU28pZPNT3ZPPHz9pcSnqtBVjRqOPOzH3QcrtTMmaCdd3i7MsFgAA lcTSC4jgOtb7GSZ+zMOHpQAvl8W+4jFntrcb0rph5o0FLzjyJSO69+Q6Ayg0NRAPFBjTxJJOJEXT UxG5/sFeXnldZee1FcnTwPj8cTMZ4foWIcMEtDKK3wMTjqEsb1oECkYcaTVzUQG7WxtMk93vXFYQ sHb40TZRe6/Ub+PiLpPc8EUaQLDRjmzObMJZfw== )`
	RRSIG=6768 and DNSKEY=6768/SEP verifies the DNSKEY RRset
	RRSIG=23220 and DNSKEY=23220/SEP verifies the DNSKEY RRset
	RRSIG=32507 and DNSKEY=32507 verifies the DNSKEY RRset
	RRSIG=56388 and DNSKEY=56388/SEP verifies the DNSKEY RRset
	DNSKEY=32507 is now in the chain-of-trust
	Query to adns1.es.net for NRELHUB.GOV/A
	Received 558 bytes from 192.188.22.22
	;; Answer received from 192.188.22.22 (558 bytes) ;; HEADER SECTION ;; id = 27108 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NRELHUB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) nrelhub.gov. 3600 IN SOA ( ns0.nrel.gov. postmaster.no.email.please. 371574036 ;serial 3600 ;refresh 360 ;retry 2592000 ;expire 3600 ;minimum ) nrelhub.gov. 3600 IN RRSIG ( SOA 7 2 3600 20181217154756 20181213144756 32507 nrelhub.gov. FHNwqgLJsPc81+foygP8Js6whwl/1yflGRLt5QzGG7OghPO8zobStd7W1M6QTjotSj+Hg4o9zGNN Ee1domZ0gZAjR6QVC7PveD9bHz7WBWmOxK1rCcUt4KXt4ih12PwqXOcN83asyxJrKRl2U1rnbNBQ ejgwvv3eQMKTVrp59PQ= ) 9PJKC3CKK1O46F87432J9OV7675MHKQ8.nrelhub.gov. 3600 IN NSEC3 ( 1 0 10 268b8d53ec74182044328f agjscgbb9toq22dfv3un5atqhlf603pg NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) 9PJKC3CKK1O46F87432J9OV7675MHKQ8.nrelhub.gov. 3600 IN RRSIG ( NSEC3 7 3 3600 20181217011946 20181213003958 32507 nrelhub.gov. BSBruPbxIcoi50tyImSAWv4GewVisj4lIFRc6rMLLCcw/KqdaUnM1FJPLI10mjQTkI2Z8GTaLRt/ N7DWwUP9CIAshU8aOZKTAPxzDXbf0Og4cvoXDT08muQUauRnR4nVPDUheVZPNNRTVbdqHw6xY9f5 zZXhIDyIsD5mhJbeqs4= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NRELHUB.GOV is authoritative for NRELHUB.GOV
	Found RRSIG signed by nrelhub.gov zone
	Query to adns1.es.net for NRELHUB.GOV/SOA
	Error querying adns1.es.net/2001:400:ffff:ffff:ffff:0:0:4444 for NRELHUB.GOV/SOA: 'IPv6 transport disabled'
	Received 574 bytes from 192.188.22.22
	;; Answer received from 192.188.22.22 (574 bytes) ;; HEADER SECTION ;; id = 50105 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NRELHUB.GOV. IN SOA ;; ANSWER SECTION (2 records) nrelhub.gov. 3600 IN SOA ( ns0.nrel.gov. postmaster.no.email.please. 371574036 ;serial 3600 ;refresh 360 ;retry 2592000 ;expire 3600 ;minimum ) nrelhub.gov. 3600 IN RRSIG ( SOA 7 2 3600 20181217154756 20181213144756 32507 nrelhub.gov. FHNwqgLJsPc81+foygP8Js6whwl/1yflGRLt5QzGG7OghPO8zobStd7W1M6QTjotSj+Hg4o9zGNN Ee1domZ0gZAjR6QVC7PveD9bHz7WBWmOxK1rCcUt4KXt4ih12PwqXOcN83asyxJrKRl2U1rnbNBQ ejgwvv3eQMKTVrp59PQ= ) ;; AUTHORITY SECTION (6 records) nrelhub.gov. 3600 IN NS phaeton.nrel.gov. nrelhub.gov. 3600 IN NS ns1.es.net. nrelhub.gov. 3600 IN NS adns2.es.net. nrelhub.gov. 3600 IN NS helios.nrel.gov. nrelhub.gov. 3600 IN NS adns1.es.net. nrelhub.gov. 3600 IN RRSIG ( NS 7 2 3600 20181217102848 20181213101954 32507 nrelhub.gov. QrH/9pqbaliLYPbG5agre4okkIB0I272brFQZHizyuREgtW4Bi3cy61u4IDtTqX+cgtMXHf4algg CdrLDBDtb1RDp8EswPLMrL2fIAJDCrTguGj9HYlxN9wqIET8RTcJFMDLWrpz65olrRK+rHQ/wjY6 qpAAuibjhoUcmC5n3Zs= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to helios.nrel.GOV for NRELHUB.GOV/SOA
	Received 1320 bytes from 192.174.58.2
	;; Answer received from 192.174.58.2 (1320 bytes) ;; HEADER SECTION ;; id = 37354 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NRELHUB.GOV. IN SOA ;; ANSWER SECTION (2 records) NRELHUB.GOV. 3600 IN SOA ( ns0.nrel.GOV. postmaster.no.email.please. 371574036 ;serial 3600 ;refresh 360 ;retry 2592000 ;expire 3600 ;minimum ) NRELHUB.GOV. 3600 IN RRSIG ( SOA 7 2 3600 20181217154756 20181213144756 32507 nrelhub.gov. FHNwqgLJsPc81+foygP8Js6whwl/1yflGRLt5QzGG7OghPO8zobStd7W1M6QTjotSj+Hg4o9zGNN Ee1domZ0gZAjR6QVC7PveD9bHz7WBWmOxK1rCcUt4KXt4ih12PwqXOcN83asyxJrKRl2U1rnbNBQ ejgwvv3eQMKTVrp59PQ= ) ;; AUTHORITY SECTION (6 records) nrelhub.gov. 3600 IN NS adns1.es.net. nrelhub.gov. 3600 IN NS adns2.es.net. nrelhub.gov. 3600 IN NS phaeton.nrel.GOV. nrelhub.gov. 3600 IN NS helios.nrel.GOV. nrelhub.gov. 3600 IN NS ns1.es.net. nrelhub.gov. 3600 IN RRSIG ( NS 7 2 3600 20181217102848 20181213101954 32507 nrelhub.gov. QrH/9pqbaliLYPbG5agre4okkIB0I272brFQZHizyuREgtW4Bi3cy61u4IDtTqX+cgtMXHf4algg CdrLDBDtb1RDp8EswPLMrL2fIAJDCrTguGj9HYlxN9wqIET8RTcJFMDLWrpz65olrRK+rHQ/wjY6 qpAAuibjhoUcmC5n3Zs= ) ;; ADDITIONAL SECTION (9 records) phaeton.nrel.GOV. 3600 IN A 192.174.58.253 phaeton.nrel.GOV. 3600 IN AAAA 2620:d0:8000:3::21 helios.nrel.GOV. 3600 IN A 192.174.58.2 helios.nrel.GOV. 3600 IN AAAA 2620:d0:8000:3::20 phaeton.nrel.GOV. 3600 IN RRSIG ( A 7 3 3600 20181216175052 20181212165924 5648 nrel.gov. lR8zRszf9qVd4sAEGorq809AxsHKSeNRK1XM2fuUGw7VdPChfiFR/9MQYItfM3l2ptn3h9jSAUDj 35LdEtFmbeGulOpGuW9qPULYXmDQM0CDr1j/mbdD45llybqwA542LlEnC26AFlPwBsorAvg8pZud TMUZ1Yc2CG+OdyAGj44= ) phaeton.nrel.GOV. 3600 IN RRSIG ( AAAA 7 3 3600 20181217111143 20181213101900 5648 nrel.gov. ojH0BkRH9AmxOq9JDVcz7uuwJ9lgyiSbLcKkU/0SImTuosGH5h18A9katHbY7a2TtZV70GXVJgzm yXb6Id4t/aaySsylSdm2Sz/1Yv5LWBjQu0iUMG+vHRtTeOcrJS5le0y4YOpf9W1IrtRLdW54v6St MU592PfLt10J8jHdM6I= ) helios.nrel.GOV. 3600 IN RRSIG ( A 7 3 3600 20181216233103 20181212230553 5648 nrel.gov. F6gnTrgBA+3H4XcjX56aOSCIRu8hHG2j07KdZZ6vpdUljOTp6rm4gxe89Uj+TGAhLpdj56uzjrlJ UZ/4Fe2y97CkffVSnrjF6IoLMaIdKv6zvQMSCAVfapPBm20BIwWKb4ngtZWdFoMHRLtyeX3z7sVa x0lEWSRYFFDszgqFe+8= ) helios.nrel.GOV. 3600 IN RRSIG ( AAAA 7 3 3600 20181217082635 20181213074900 5648 nrel.gov. 4jdcmyV9s+8V9es4nY1WXrIAocmFJ3HC08qIaslOGJ/aNUsWfd+j+7YvpSm4bWzvHVoVfyPjGDp2 69JBqslEhbxqyeeruCnhlj1AJ7QlBXPEVJwZfVhRTHjn/I/WsMN6Drn/5OgLpbaRTdXk76pqnFWS tY6kDFy4aVb96Nc7kK4= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to phaeton.nrel.GOV for NRELHUB.GOV/SOA
	Received 1320 bytes from 192.174.58.253
	;; Answer received from 192.174.58.253 (1320 bytes) ;; HEADER SECTION ;; id = 51987 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NRELHUB.GOV. IN SOA ;; ANSWER SECTION (2 records) NRELHUB.GOV. 3600 IN SOA ( ns0.nrel.GOV. postmaster.no.email.please. 371574036 ;serial 3600 ;refresh 360 ;retry 2592000 ;expire 3600 ;minimum ) NRELHUB.GOV. 3600 IN RRSIG ( SOA 7 2 3600 20181217154756 20181213144756 32507 nrelhub.gov. FHNwqgLJsPc81+foygP8Js6whwl/1yflGRLt5QzGG7OghPO8zobStd7W1M6QTjotSj+Hg4o9zGNN Ee1domZ0gZAjR6QVC7PveD9bHz7WBWmOxK1rCcUt4KXt4ih12PwqXOcN83asyxJrKRl2U1rnbNBQ ejgwvv3eQMKTVrp59PQ= ) ;; AUTHORITY SECTION (6 records) nrelhub.gov. 3600 IN NS ns1.es.net. nrelhub.gov. 3600 IN NS adns2.es.net. nrelhub.gov. 3600 IN NS helios.nrel.GOV. nrelhub.gov. 3600 IN NS adns1.es.net. nrelhub.gov. 3600 IN NS phaeton.nrel.GOV. nrelhub.gov. 3600 IN RRSIG ( NS 7 2 3600 20181217102848 20181213101954 32507 nrelhub.gov. QrH/9pqbaliLYPbG5agre4okkIB0I272brFQZHizyuREgtW4Bi3cy61u4IDtTqX+cgtMXHf4algg CdrLDBDtb1RDp8EswPLMrL2fIAJDCrTguGj9HYlxN9wqIET8RTcJFMDLWrpz65olrRK+rHQ/wjY6 qpAAuibjhoUcmC5n3Zs= ) ;; ADDITIONAL SECTION (9 records) phaeton.nrel.GOV. 3600 IN A 192.174.58.253 phaeton.nrel.GOV. 3600 IN AAAA 2620:d0:8000:3::21 helios.nrel.GOV. 3600 IN A 192.174.58.2 helios.nrel.GOV. 3600 IN AAAA 2620:d0:8000:3::20 phaeton.nrel.GOV. 3600 IN RRSIG ( A 7 3 3600 20181216175052 20181212165924 5648 nrel.gov. lR8zRszf9qVd4sAEGorq809AxsHKSeNRK1XM2fuUGw7VdPChfiFR/9MQYItfM3l2ptn3h9jSAUDj 35LdEtFmbeGulOpGuW9qPULYXmDQM0CDr1j/mbdD45llybqwA542LlEnC26AFlPwBsorAvg8pZud TMUZ1Yc2CG+OdyAGj44= ) phaeton.nrel.GOV. 3600 IN RRSIG ( AAAA 7 3 3600 20181217111143 20181213101900 5648 nrel.gov. ojH0BkRH9AmxOq9JDVcz7uuwJ9lgyiSbLcKkU/0SImTuosGH5h18A9katHbY7a2TtZV70GXVJgzm yXb6Id4t/aaySsylSdm2Sz/1Yv5LWBjQu0iUMG+vHRtTeOcrJS5le0y4YOpf9W1IrtRLdW54v6St MU592PfLt10J8jHdM6I= ) helios.nrel.GOV. 3600 IN RRSIG ( A 7 3 3600 20181216233103 20181212230553 5648 nrel.gov. F6gnTrgBA+3H4XcjX56aOSCIRu8hHG2j07KdZZ6vpdUljOTp6rm4gxe89Uj+TGAhLpdj56uzjrlJ UZ/4Fe2y97CkffVSnrjF6IoLMaIdKv6zvQMSCAVfapPBm20BIwWKb4ngtZWdFoMHRLtyeX3z7sVa x0lEWSRYFFDszgqFe+8= ) helios.nrel.GOV. 3600 IN RRSIG ( AAAA 7 3 3600 20181217082635 20181213074900 5648 nrel.gov. 4jdcmyV9s+8V9es4nY1WXrIAocmFJ3HC08qIaslOGJ/aNUsWfd+j+7YvpSm4bWzvHVoVfyPjGDp2 69JBqslEhbxqyeeruCnhlj1AJ7QlBXPEVJwZfVhRTHjn/I/WsMN6Drn/5OgLpbaRTdXk76pqnFWS tY6kDFy4aVb96Nc7kK4= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to adns2.es.net for NRELHUB.GOV/SOA
	Received 574 bytes from 192.188.22.52
	;; Answer received from 192.188.22.52 (574 bytes) ;; HEADER SECTION ;; id = 9076 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NRELHUB.GOV. IN SOA ;; ANSWER SECTION (2 records) nrelhub.gov. 3600 IN SOA ( ns0.nrel.gov. postmaster.no.email.please. 371574036 ;serial 3600 ;refresh 360 ;retry 2592000 ;expire 3600 ;minimum ) nrelhub.gov. 3600 IN RRSIG ( SOA 7 2 3600 20181217154756 20181213144756 32507 nrelhub.gov. FHNwqgLJsPc81+foygP8Js6whwl/1yflGRLt5QzGG7OghPO8zobStd7W1M6QTjotSj+Hg4o9zGNN Ee1domZ0gZAjR6QVC7PveD9bHz7WBWmOxK1rCcUt4KXt4ih12PwqXOcN83asyxJrKRl2U1rnbNBQ ejgwvv3eQMKTVrp59PQ= ) ;; AUTHORITY SECTION (6 records) nrelhub.gov. 3600 IN NS ns1.es.net. nrelhub.gov. 3600 IN NS phaeton.nrel.gov. nrelhub.gov. 3600 IN NS adns1.es.net. nrelhub.gov. 3600 IN NS helios.nrel.gov. nrelhub.gov. 3600 IN NS adns2.es.net. nrelhub.gov. 3600 IN RRSIG ( NS 7 2 3600 20181217102848 20181213101954 32507 nrelhub.gov. QrH/9pqbaliLYPbG5agre4okkIB0I272brFQZHizyuREgtW4Bi3cy61u4IDtTqX+cgtMXHf4algg CdrLDBDtb1RDp8EswPLMrL2fIAJDCrTguGj9HYlxN9wqIET8RTcJFMDLWrpz65olrRK+rHQ/wjY6 qpAAuibjhoUcmC5n3Zs= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to adns1.es.net for NRELHUB.GOV/A
	Received 558 bytes from 192.188.22.22
	;; Answer received from 192.188.22.22 (558 bytes) ;; HEADER SECTION ;; id = 54468 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NRELHUB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) nrelhub.gov. 3600 IN SOA ( ns0.nrel.gov. postmaster.no.email.please. 371574036 ;serial 3600 ;refresh 360 ;retry 2592000 ;expire 3600 ;minimum ) nrelhub.gov. 3600 IN RRSIG ( SOA 7 2 3600 20181217154756 20181213144756 32507 nrelhub.gov. FHNwqgLJsPc81+foygP8Js6whwl/1yflGRLt5QzGG7OghPO8zobStd7W1M6QTjotSj+Hg4o9zGNN Ee1domZ0gZAjR6QVC7PveD9bHz7WBWmOxK1rCcUt4KXt4ih12PwqXOcN83asyxJrKRl2U1rnbNBQ ejgwvv3eQMKTVrp59PQ= ) 9PJKC3CKK1O46F87432J9OV7675MHKQ8.nrelhub.gov. 3600 IN NSEC3 ( 1 0 10 268b8d53ec74182044328f agjscgbb9toq22dfv3un5atqhlf603pg NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) 9PJKC3CKK1O46F87432J9OV7675MHKQ8.nrelhub.gov. 3600 IN RRSIG ( NSEC3 7 3 3600 20181217011946 20181213003958 32507 nrelhub.gov. BSBruPbxIcoi50tyImSAWv4GewVisj4lIFRc6rMLLCcw/KqdaUnM1FJPLI10mjQTkI2Z8GTaLRt/ N7DWwUP9CIAshU8aOZKTAPxzDXbf0Og4cvoXDT08muQUauRnR4nVPDUheVZPNNRTVbdqHw6xY9f5 zZXhIDyIsD5mhJbeqs4= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`nrelhub.gov. 3600 IN RRSIG ( SOA 7 2 3600 20181217154756 20181213144756 32507 nrelhub.gov. FHNwqgLJsPc81+foygP8Js6whwl/1yflGRLt5QzGG7OghPO8zobStd7W1M6QTjotSj+Hg4o9zGNN Ee1domZ0gZAjR6QVC7PveD9bHz7WBWmOxK1rCcUt4KXt4ih12PwqXOcN83asyxJrKRl2U1rnbNBQ ejgwvv3eQMKTVrp59PQ= )`
	RRSIG=32507 and DNSKEY=32507 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test NRELHUB.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: