DNSSEC Analyzer - NWIRP.GOV

Domain Name:

Time: 2020-10-28 02:56:19 UTC, NTP stratum 4

Analyzing DNSSEC problems for NWIRP.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (864 bytes) ;; HEADER SECTION ;; id = 46018 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20201111000000 20201021000000 20326 . UfytpVL3Ka5rmqF/Lm/9frJl/ygXTjW0MEaGgecsmHbmLfTrJF3XAgPS5Tp/xc9TkaDf9HCEzk48 R4cfHOI22Ul9AnyBGZX7FiVfVo0NaseADRwt6G3K9jsMwHMIuVmAMTnvFfR32/+CwMMgmXGhBXdZ JVXR71aARAMKZlSgJK7DlOia8h2yC+RaWK0DvHMLwqyA+uwAeLxixmrtu3Olj2Rzmx2MSNDZZUP9 I+vghq7K0rzK7CYrXiAgY2q5WvwtKjJPw6T/qB8Ojqru/XN1LxSa2zYeITAq58IyijgLr6EupAdA 6HB3iPPfhHGKiwafsmcfcRcds90WfxG7UQFAMg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20201111000000 20201021000000 20326 . UfytpVL3Ka5rmqF/Lm/9frJl/ygXTjW0MEaGgecsmHbmLfTrJF3XAgPS5Tp/xc9TkaDf9HCEzk48 R4cfHOI22Ul9AnyBGZX7FiVfVo0NaseADRwt6G3K9jsMwHMIuVmAMTnvFfR32/+CwMMgmXGhBXdZ JVXR71aARAMKZlSgJK7DlOia8h2yC+RaWK0DvHMLwqyA+uwAeLxixmrtu3Olj2Rzmx2MSNDZZUP9 I+vghq7K0rzK7CYrXiAgY2q5WvwtKjJPw6T/qB8Ojqru/XN1LxSa2zYeITAq58IyijgLr6EupAdA 6HB3iPPfhHGKiwafsmcfcRcds90WfxG7UQFAMg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=26116 is now in the chain-of-trust
	Query to a.root-servers.net for NWIRP.GOV/A
	Received 664 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (664 bytes) ;; HEADER SECTION ;; id = 24700 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NWIRP.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20201109170000 20201027160000 26116 . 1K7T2spqI3F7oscpV8ZM1NqNAEpQck+D6Dozhwe+i2VlOQfay2ZDug7AVZ0gzFsU6NfPnbeY6C5r qGPEgJHdWHkbCfVuJiNhzljC0xd2AqngSWnBz3oHF1i+A1b1juW/dhXbu2kCHM3pLlNFfwYOhbUL ktAq5dODzSUgUafMUz4HlRtJvay9via9LKvloStKG82cIpVJQTb2w7kGdblWcuVZ6J6jBz+w/QfS phtiCGKlXA8X4B8/2qHNvErR40nyyOZ1ikUja4ImTty0tuMxM/xtChQINKFwDfgpH1XyTMQyI6nq UlIiSQqPNJH5nMoK8Mx/5g3U9yLzQN8ZAYgpDQ== ) ;; ADDITIONAL SECTION (9 records) b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.root-servers.net for GOV/DNSKEY
	Received 658 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (658 bytes) ;; HEADER SECTION ;; id = 37923 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20201109170000 20201027160000 26116 . 1K7T2spqI3F7oscpV8ZM1NqNAEpQck+D6Dozhwe+i2VlOQfay2ZDug7AVZ0gzFsU6NfPnbeY6C5r qGPEgJHdWHkbCfVuJiNhzljC0xd2AqngSWnBz3oHF1i+A1b1juW/dhXbu2kCHM3pLlNFfwYOhbUL ktAq5dODzSUgUafMUz4HlRtJvay9via9LKvloStKG82cIpVJQTb2w7kGdblWcuVZ6J6jBz+w/QfS phtiCGKlXA8X4B8/2qHNvErR40nyyOZ1ikUja4ImTty0tuMxM/xtChQINKFwDfgpH1XyTMQyI6nq UlIiSQqPNJH5nMoK8Mx/5g3U9yLzQN8ZAYgpDQ== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to b.root-servers.net for GOV/DS
	Received 406 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (406 bytes) ;; HEADER SECTION ;; id = 5496 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20201109170000 20201027160000 26116 . 1K7T2spqI3F7oscpV8ZM1NqNAEpQck+D6Dozhwe+i2VlOQfay2ZDug7AVZ0gzFsU6NfPnbeY6C5r qGPEgJHdWHkbCfVuJiNhzljC0xd2AqngSWnBz3oHF1i+A1b1juW/dhXbu2kCHM3pLlNFfwYOhbUL ktAq5dODzSUgUafMUz4HlRtJvay9via9LKvloStKG82cIpVJQTb2w7kGdblWcuVZ6J6jBz+w/QfS phtiCGKlXA8X4B8/2qHNvErR40nyyOZ1ikUja4ImTty0tuMxM/xtChQINKFwDfgpH1XyTMQyI6nq UlIiSQqPNJH5nMoK8Mx/5g3U9yLzQN8ZAYgpDQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20201109170000 20201027160000 26116 . 1K7T2spqI3F7oscpV8ZM1NqNAEpQck+D6Dozhwe+i2VlOQfay2ZDug7AVZ0gzFsU6NfPnbeY6C5r qGPEgJHdWHkbCfVuJiNhzljC0xd2AqngSWnBz3oHF1i+A1b1juW/dhXbu2kCHM3pLlNFfwYOhbUL ktAq5dODzSUgUafMUz4HlRtJvay9via9LKvloStKG82cIpVJQTb2w7kGdblWcuVZ6J6jBz+w/QfS phtiCGKlXA8X4B8/2qHNvErR40nyyOZ1ikUja4ImTty0tuMxM/xtChQINKFwDfgpH1XyTMQyI6nq UlIiSQqPNJH5nMoK8Mx/5g3U9yLzQN8ZAYgpDQ== )`
	RRSIG=26116 and DNSKEY=26116 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to c.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (777 bytes) ;; HEADER SECTION ;; id = 23223 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAeFoiC01j4zIdBfR1vxBGp7WmV8q6IgTQ/pvbQJhCd9+sE16txuz6M81FPFkWhTk1nsXR4tI UZLQZpvgme+q3dqWuqtFA2amB99IM9B9iq6kwSrkZNVFv6zav3eP+5BlL/OA9FNFQHXCj5qj2noA j2le7j8umVcc+4zH677ytdtIImoAY45H8wWxVrGR4kxqM54O10fPHXEPu84irfaZGrM= ) ; Key ID = 15489 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20201110190254 20201026185754 7698 gov. JGWvYsY6D/e4gdOBjSbarD335ZzmG8hwXIyjWGtJCISWCfmtoDAyoQ0BSehDq5I2kFmxReDQtHc/ RFZ7cqYe9HQPt81hrWbY78rqAphKpgOwvcjaX08YYKSN5WM66pWfMxPEehhqLyaCSFa1vNGMO2Nu vez1zeAr1TL6BBTl5ET1KrQzEtsSEBqCVnmk2G89fFUZOF12WQg1Q0dGulD9eAXls5nMI1rIB9xQ vBV9ZkOPeNCddN0Ij0ZABYz5IxW4w5HMRHu2atApBdFLJ95txt7fkr088gb9WrGQDd4NcOIAQuyf IaOns8+4bMCEnNvDEJrHWlr+EaJq+zNbeDYvXw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAeFoiC01j4zIdBfR1vxBGp7WmV8q6IgTQ/pvbQJhCd9+sE16txuz6M81FPFkWhTk1nsXR4tI UZLQZpvgme+q3dqWuqtFA2amB99IM9B9iq6kwSrkZNVFv6zav3eP+5BlL/OA9FNFQHXCj5qj2noA j2le7j8umVcc+4zH677ytdtIImoAY45H8wWxVrGR4kxqM54O10fPHXEPu84irfaZGrM= ) ; Key ID = 15489`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20201110190254 20201026185754 7698 gov. JGWvYsY6D/e4gdOBjSbarD335ZzmG8hwXIyjWGtJCISWCfmtoDAyoQ0BSehDq5I2kFmxReDQtHc/ RFZ7cqYe9HQPt81hrWbY78rqAphKpgOwvcjaX08YYKSN5WM66pWfMxPEehhqLyaCSFa1vNGMO2Nu vez1zeAr1TL6BBTl5ET1KrQzEtsSEBqCVnmk2G89fFUZOF12WQg1Q0dGulD9eAXls5nMI1rIB9xQ vBV9ZkOPeNCddN0Ij0ZABYz5IxW4w5HMRHu2atApBdFLJ95txt7fkr088gb9WrGQDd4NcOIAQuyf IaOns8+4bMCEnNvDEJrHWlr+EaJq+zNbeDYvXw== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=15489 is now in the chain-of-trust
	Query to a.gov-servers.net for NWIRP.GOV/A
	Received 481 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (481 bytes) ;; HEADER SECTION ;; id = 42863 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 6 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NWIRP.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) NWIRP.GOV. 86400 IN NS bea.nist.GOV. NWIRP.GOV. 86400 IN NS gea2.nist.GOV. NWIRP.GOV. 86400 IN NS gea.nist.GOV. NWIRP.GOV. 3600 IN DS ( 56949 7 2 f805f80ed1be4d3445883042ede27010b287e39fec79eb4cf47da665202f68af ) NWIRP.GOV. 3600 IN DS 56949 7 1 01ffa677e7907388a4fdd8eba637b07324abb9e0 NWIRP.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201104011008 20201028011008 15489 gov. Nte14h7uPUO0ImKTuc1mQ5/dP392uaUHF8fHSnJ+V9rs2Xgldg3tSqz9Pk7AlJqMYkqVnN0MVFBn d22sS38TPTcYG31TP2zk0Jr1mAo2C4gdU9gbjbXqqbZgUYPYmR5s1m6DzuJBR5p+LsO/+en/Uehs 0xzROoW7xY5jFC9VANEd+WUEkzo0lXa95qWjq9F9auVkplg0mQuLbx1oHxOhtQ== ) ;; ADDITIONAL SECTION (6 records) bea.nist.GOV. 86400 IN A 132.163.4.10 bea.nist.GOV. 86400 IN AAAA 2610:20:6b01:4::10 gea2.nist.GOV. 86400 IN A 129.6.13.4 gea.nist.GOV. 86400 IN A 129.6.13.3 gea.nist.GOV. 86400 IN AAAA 2610:20:6005:13::3 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.gov-servers.net for NWIRP.GOV/DNSKEY
	Received 481 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (481 bytes) ;; HEADER SECTION ;; id = 20211 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 6 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NWIRP.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) NWIRP.GOV. 86400 IN NS bea.nist.GOV. NWIRP.GOV. 86400 IN NS gea2.nist.GOV. NWIRP.GOV. 86400 IN NS gea.nist.GOV. NWIRP.GOV. 3600 IN DS ( 56949 7 2 f805f80ed1be4d3445883042ede27010b287e39fec79eb4cf47da665202f68af ) NWIRP.GOV. 3600 IN DS 56949 7 1 01ffa677e7907388a4fdd8eba637b07324abb9e0 NWIRP.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201104011008 20201028011008 15489 gov. Nte14h7uPUO0ImKTuc1mQ5/dP392uaUHF8fHSnJ+V9rs2Xgldg3tSqz9Pk7AlJqMYkqVnN0MVFBn d22sS38TPTcYG31TP2zk0Jr1mAo2C4gdU9gbjbXqqbZgUYPYmR5s1m6DzuJBR5p+LsO/+en/Uehs 0xzROoW7xY5jFC9VANEd+WUEkzo0lXa95qWjq9F9auVkplg0mQuLbx1oHxOhtQ== ) ;; ADDITIONAL SECTION (6 records) bea.nist.GOV. 86400 IN A 132.163.4.10 bea.nist.GOV. 86400 IN AAAA 2610:20:6b01:4::10 gea2.nist.GOV. 86400 IN A 129.6.13.4 gea.nist.GOV. 86400 IN A 129.6.13.3 gea.nist.GOV. 86400 IN AAAA 2610:20:6005:13::3 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone NWIRP.GOV

NWIRP.GOV

	Checking DS between GOV and NWIRP.GOV
	Query to c.gov-servers.net for NWIRP.GOV/DS
	Received 317 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (317 bytes) ;; HEADER SECTION ;; id = 27672 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NWIRP.GOV. IN DS ;; ANSWER SECTION (3 records) NWIRP.GOV. 3600 IN DS ( 56949 7 2 f805f80ed1be4d3445883042ede27010b287e39fec79eb4cf47da665202f68af ) NWIRP.GOV. 3600 IN DS 56949 7 1 01ffa677e7907388a4fdd8eba637b07324abb9e0 NWIRP.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201104011008 20201028011008 15489 gov. Nte14h7uPUO0ImKTuc1mQ5/dP392uaUHF8fHSnJ+V9rs2Xgldg3tSqz9Pk7AlJqMYkqVnN0MVFBn d22sS38TPTcYG31TP2zk0Jr1mAo2C4gdU9gbjbXqqbZgUYPYmR5s1m6DzuJBR5p+LsO/+en/Uehs 0xzROoW7xY5jFC9VANEd+WUEkzo0lXa95qWjq9F9auVkplg0mQuLbx1oHxOhtQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for NWIRP.GOV in the GOV zone
	DS=56949/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=56949/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`NWIRP.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201104011008 20201028011008 15489 gov. Nte14h7uPUO0ImKTuc1mQ5/dP392uaUHF8fHSnJ+V9rs2Xgldg3tSqz9Pk7AlJqMYkqVnN0MVFBn d22sS38TPTcYG31TP2zk0Jr1mAo2C4gdU9gbjbXqqbZgUYPYmR5s1m6DzuJBR5p+LsO/+en/Uehs 0xzROoW7xY5jFC9VANEd+WUEkzo0lXa95qWjq9F9auVkplg0mQuLbx1oHxOhtQ== )`
	RRSIG=15489 and DNSKEY=15489 verifies the DS RRset
	DS=56949/SHA-256 is now in the chain-of-trust
	`NWIRP.GOV. 3600 IN DS ( 56949 7 2 f805f80ed1be4d3445883042ede27010b287e39fec79eb4cf47da665202f68af )`
	`NWIRP.GOV. 3600 IN DS 56949 7 1 01ffa677e7907388a4fdd8eba637b07324abb9e0`
	Query to gea.nist.GOV for NWIRP.GOV/DNSKEY
	Received 1245 bytes from 129.6.13.3
	;; Answer received from 129.6.13.3 (1245 bytes) ;; HEADER SECTION ;; id = 58973 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NWIRP.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) NWIRP.GOV. 302400 IN DNSKEY ( 256 3 7 AwEAAcaaWCJ7ciqDLjV0BFpSb4BMef0P3pYJanPhBKp9Y3+6ACzV53w1PWbfIX84pkiIGv76r9s+ 68Bxn1WZcN12OTUWFXeQz6DLcTZjizBvgvd1OGI4GX9J2NH5xucwURVB/J8kMWab69pgstiXsld+ CxNwF0QxTVytagD23ET/Qc+H ) ; Key ID = 54779 NWIRP.GOV. 302400 IN DNSKEY ( 256 3 7 AwEAAczyxkZP7RSXDQkvT0D0wiauXTdFFwn4WPohlECVIjF8Wjg6rX/f2U/kDsIM0dotQzE4IEdo sHmB8xnb0ewh61Jq8AscwoK94cho1GtEoJo5mcTMXG2rwOY7JP2MrngODeW1KjurASCAfqpp5q59 TEmChY1wisMKsThg0CCW89xH ) ; Key ID = 53660 NWIRP.GOV. 302400 IN DNSKEY ( 257 3 7 AwEAAc7ILeINZp/4vBRKWS6wA+4GFSoPkzI/24L78wyTG5MAPH3Pk2BS3fykkxdYffbbl+iboFrP hQSqRwfHaYz0eX6mM3sYfrC2C7M00MLukNxsdSd0o2zsXM0JAhVA1asCZMj1va8Zcd9Eyb5zZ6hp zZKp3xXrzbIvZ02PaaiiQuDAVGEVwB8FwseB5qBbMk4MBbGrlEGdC4B6JOO91NrskxVq1zvz/t9t xuMDClLr9LG0J9/ZJMkM20bkmKf/ob7QysOvhehFRG0FrhhxpWrUpJxfnLXrR93kRUPjqNqjtX3A pu9pe8L02cdPAm9OL8vD5g0Oe4+7u5YQFx0LVwJijbE= ) ; Key ID = 56949 NWIRP.GOV. 302400 IN RRSIG ( DNSKEY 7 2 302400 20201103085323 20201027081358 53660 nwirp.gov. dRc/hSc7QFB5AT4Nt2f2Er0TXztU87b+QQiPvH/I4Ne1LRzpdu1CdjUtZek6iRVvRlDN5T5wDc7B NBY76rHcGSr6O1iF9xvsSQe2jg2Kc7yhrrh1aSAEWxDnt1/FvOqFjAQ32KkRSjLc11lkNDbgVe8M BWON6D7CW4LhkFz5zaE= ) nwirp.gov. 302400 IN RRSIG ( DNSKEY 7 2 302400 20201103085323 20201027081358 54779 nwirp.gov. TQL+bViEp3p5Ga31T/70c6rQr3zrbpPoHGEYTIyoO8/h8ZEpqgEzhqdI3f9O2zkko5P6ZVMKm7q3 BTEESbVfQBYeYWh4gvqfLv/WLtqnWt1I7g+uDKIQ4ozKyBvPnZGCE8F5S1iGZ1gA9doe8R/zr1J5 laRNU1GzBUomSh/164k= ) nwirp.gov. 302400 IN RRSIG ( DNSKEY 7 2 302400 20201103085323 20201027081358 56949 nwirp.gov. QCRJfgjlAJ5zz7n6nPL2fdY9/eTCc11ONPBKoF+LXPCLTgVOE5T3KbcANiyRj7ZwUgpQTh15LnZx gUETtFSP1giWYzrHdp+k2yGMLceDbCpwRjOaFFxcuW/OLfY/MR/rQfLYN3oBDEOt6itnhYobRlKr GngZyWRoq0ebU0jP40yakKufdIPpxALmrOAUi9nt06ou1WCryF92VfnYVre4icVTEa9sLOzspiwx lyt/fcct8/BFzVw3JdyNeCG5WS5JXkIedv8+TGQRgkk0XKDLeZ4qoeL4kAtkMo+xRvhil0WHs3Iz 4+DbV0Vm+R14fg77IUYhESbSWpfYdsiyLXH9yw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for NWIRP.GOV
	`NWIRP.GOV. 302400 IN DNSKEY ( 256 3 7 AwEAAcaaWCJ7ciqDLjV0BFpSb4BMef0P3pYJanPhBKp9Y3+6ACzV53w1PWbfIX84pkiIGv76r9s+ 68Bxn1WZcN12OTUWFXeQz6DLcTZjizBvgvd1OGI4GX9J2NH5xucwURVB/J8kMWab69pgstiXsld+ CxNwF0QxTVytagD23ET/Qc+H ) ; Key ID = 54779`
	`NWIRP.GOV. 302400 IN DNSKEY ( 256 3 7 AwEAAczyxkZP7RSXDQkvT0D0wiauXTdFFwn4WPohlECVIjF8Wjg6rX/f2U/kDsIM0dotQzE4IEdo sHmB8xnb0ewh61Jq8AscwoK94cho1GtEoJo5mcTMXG2rwOY7JP2MrngODeW1KjurASCAfqpp5q59 TEmChY1wisMKsThg0CCW89xH ) ; Key ID = 53660`
	`NWIRP.GOV. 302400 IN DNSKEY ( 257 3 7 AwEAAc7ILeINZp/4vBRKWS6wA+4GFSoPkzI/24L78wyTG5MAPH3Pk2BS3fykkxdYffbbl+iboFrP hQSqRwfHaYz0eX6mM3sYfrC2C7M00MLukNxsdSd0o2zsXM0JAhVA1asCZMj1va8Zcd9Eyb5zZ6hp zZKp3xXrzbIvZ02PaaiiQuDAVGEVwB8FwseB5qBbMk4MBbGrlEGdC4B6JOO91NrskxVq1zvz/t9t xuMDClLr9LG0J9/ZJMkM20bkmKf/ob7QysOvhehFRG0FrhhxpWrUpJxfnLXrR93kRUPjqNqjtX3A pu9pe8L02cdPAm9OL8vD5g0Oe4+7u5YQFx0LVwJijbE= ) ; Key ID = 56949`
	DNSKEY=56949/SEP is now in the chain-of-trust
	DS=56949/SHA-256 verifies DNSKEY=56949/SEP
	DS=56949/SHA-1 verifies DNSKEY=56949/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`NWIRP.GOV. 302400 IN RRSIG ( DNSKEY 7 2 302400 20201103085323 20201027081358 53660 nwirp.gov. dRc/hSc7QFB5AT4Nt2f2Er0TXztU87b+QQiPvH/I4Ne1LRzpdu1CdjUtZek6iRVvRlDN5T5wDc7B NBY76rHcGSr6O1iF9xvsSQe2jg2Kc7yhrrh1aSAEWxDnt1/FvOqFjAQ32KkRSjLc11lkNDbgVe8M BWON6D7CW4LhkFz5zaE= )`
	`nwirp.gov. 302400 IN RRSIG ( DNSKEY 7 2 302400 20201103085323 20201027081358 54779 nwirp.gov. TQL+bViEp3p5Ga31T/70c6rQr3zrbpPoHGEYTIyoO8/h8ZEpqgEzhqdI3f9O2zkko5P6ZVMKm7q3 BTEESbVfQBYeYWh4gvqfLv/WLtqnWt1I7g+uDKIQ4ozKyBvPnZGCE8F5S1iGZ1gA9doe8R/zr1J5 laRNU1GzBUomSh/164k= )`
	`nwirp.gov. 302400 IN RRSIG ( DNSKEY 7 2 302400 20201103085323 20201027081358 56949 nwirp.gov. QCRJfgjlAJ5zz7n6nPL2fdY9/eTCc11ONPBKoF+LXPCLTgVOE5T3KbcANiyRj7ZwUgpQTh15LnZx gUETtFSP1giWYzrHdp+k2yGMLceDbCpwRjOaFFxcuW/OLfY/MR/rQfLYN3oBDEOt6itnhYobRlKr GngZyWRoq0ebU0jP40yakKufdIPpxALmrOAUi9nt06ou1WCryF92VfnYVre4icVTEa9sLOzspiwx lyt/fcct8/BFzVw3JdyNeCG5WS5JXkIedv8+TGQRgkk0XKDLeZ4qoeL4kAtkMo+xRvhil0WHs3Iz 4+DbV0Vm+R14fg77IUYhESbSWpfYdsiyLXH9yw== )`
	RRSIG=53660 and DNSKEY=53660 verifies the DNSKEY RRset
	RRSIG=54779 and DNSKEY=54779 verifies the DNSKEY RRset
	RRSIG=56949 and DNSKEY=56949/SEP verifies the DNSKEY RRset
	DNSKEY=54779 is now in the chain-of-trust
	DNSKEY=53660 is now in the chain-of-trust
	Query to gea.nist.GOV for NWIRP.GOV/A
	Received 858 bytes from 129.6.13.3
	;; Answer received from 129.6.13.3 (858 bytes) ;; HEADER SECTION ;; id = 32762 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NWIRP.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) NWIRP.GOV. 300 IN SOA ( gm.nist.GOV. netops.nist.GOV. 2764 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 300 ;minimum ) NWIRP.GOV. 300 IN RRSIG ( SOA 7 2 1800 20201103103951 20201027093951 53660 nwirp.gov. Ab4jaMtSEeDD/l4azyHVSfoqcSFGlUEG/HUnUlMVcCfUTN6guDhR8y1cXwEQmBjB/59a+y1x2IJV l/4Mf+lcBMFeovxs5guw6YO0F1lM4p9pM1ZZT8GfKh6D+SQQMjFp51gy5YV5AYXCSDEKUNEdcVIu Bz3EDTN2mZkdNW1Bess= ) nwirp.gov. 300 IN RRSIG ( SOA 7 2 1800 20201103103951 20201027093951 54779 nwirp.gov. PIrlcHjlmwbw0YhJsBEMrKMPuo23IXUbINdO/Fh7sRYpZbM6mm3piVxfOn0lKrcizpu2MWHmJHoy j9LPX2CgkcB3OoJnCQB2NUhXNRN3d/9eAcXhMpZBNqwHazW1QJxS6UGpdl6gxBVPgZbanr0SkJXb oc+SZ8cDPk6eHfbG0Ws= ) TD88S8DSCS8FC73U16SCAGQ2PGECGHV5.nwirp.gov. 300 IN NSEC3 ( 1 0 10 7c8a4955844fff3e6cfcd6a9e4 fnp6bailmf9kmpg4nrrabplacclvotv8 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) TD88S8DSCS8FC73U16SCAGQ2PGECGHV5.nwirp.gov. 300 IN RRSIG ( NSEC3 7 3 300 20201102151013 20201026141632 53660 nwirp.gov. IayhKA+Cg/lQ3ZYbnQLfKhdRXFSK8OKEZKCjhZB02Jm55/zN3WfuWJqWe+x4eGxsu9Bssai6xyIW VHvgeUL6OzYLcZyZbeYVlUA8yHce1N5w+qEf0wek/sbYF4bAsVljEBFylWNxrDSZ0iVNHQX6I1ku 50oWr55a+kn5A0p7Tbc= ) TD88S8DSCS8FC73U16SCAGQ2PGECGHV5.nwirp.gov. 300 IN RRSIG ( NSEC3 7 3 300 20201102151013 20201026141632 54779 nwirp.gov. mAvI5xrUTyUWEj+SoeT3jctVwlM2k54CrEAr4AYAo5Q8KysOeGfANWWcsIYmbeYHwp4zokK6BvYj eiqn2U2oz3/W+3xvf2PDZhbmnsK8su/vSTtHk0QcoVo7rE971lXcNiKtwpvZXFEjtIn7PEmzxnhu cKkN6S8I/Z4ns0BX3vk= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NWIRP.GOV is authoritative for NWIRP.GOV
	Found RRSIG signed by nwirp.gov zone
	Query to gea2.nist.GOV for NWIRP.GOV/SOA
	Received 427 bytes from 129.6.13.4
	;; Answer received from 129.6.13.4 (427 bytes) ;; HEADER SECTION ;; id = 19065 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NWIRP.GOV. IN SOA ;; ANSWER SECTION (3 records) NWIRP.GOV. 1800 IN SOA ( gm.nist.GOV. netops.nist.GOV. 2764 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 300 ;minimum ) NWIRP.GOV. 1800 IN RRSIG ( SOA 7 2 1800 20201103103951 20201027093951 53660 nwirp.gov. Ab4jaMtSEeDD/l4azyHVSfoqcSFGlUEG/HUnUlMVcCfUTN6guDhR8y1cXwEQmBjB/59a+y1x2IJV l/4Mf+lcBMFeovxs5guw6YO0F1lM4p9pM1ZZT8GfKh6D+SQQMjFp51gy5YV5AYXCSDEKUNEdcVIu Bz3EDTN2mZkdNW1Bess= ) nwirp.gov. 1800 IN RRSIG ( SOA 7 2 1800 20201103103951 20201027093951 54779 nwirp.gov. PIrlcHjlmwbw0YhJsBEMrKMPuo23IXUbINdO/Fh7sRYpZbM6mm3piVxfOn0lKrcizpu2MWHmJHoy j9LPX2CgkcB3OoJnCQB2NUhXNRN3d/9eAcXhMpZBNqwHazW1QJxS6UGpdl6gxBVPgZbanr0SkJXb oc+SZ8cDPk6eHfbG0Ws= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to gea.nist.GOV for NWIRP.GOV/SOA
	Received 2968 bytes from 129.6.13.3
	;; Answer received from 129.6.13.3 (2968 bytes) ;; HEADER SECTION ;; id = 39623 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 5 arcount = 19 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NWIRP.GOV. IN SOA ;; ANSWER SECTION (3 records) NWIRP.GOV. 1800 IN SOA ( gm.nist.GOV. netops.nist.GOV. 2764 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 300 ;minimum ) NWIRP.GOV. 1800 IN RRSIG ( SOA 7 2 1800 20201103103951 20201027093951 53660 nwirp.gov. Ab4jaMtSEeDD/l4azyHVSfoqcSFGlUEG/HUnUlMVcCfUTN6guDhR8y1cXwEQmBjB/59a+y1x2IJV l/4Mf+lcBMFeovxs5guw6YO0F1lM4p9pM1ZZT8GfKh6D+SQQMjFp51gy5YV5AYXCSDEKUNEdcVIu Bz3EDTN2mZkdNW1Bess= ) nwirp.gov. 1800 IN RRSIG ( SOA 7 2 1800 20201103103951 20201027093951 54779 nwirp.gov. PIrlcHjlmwbw0YhJsBEMrKMPuo23IXUbINdO/Fh7sRYpZbM6mm3piVxfOn0lKrcizpu2MWHmJHoy j9LPX2CgkcB3OoJnCQB2NUhXNRN3d/9eAcXhMpZBNqwHazW1QJxS6UGpdl6gxBVPgZbanr0SkJXb oc+SZ8cDPk6eHfbG0Ws= ) ;; AUTHORITY SECTION (5 records) nwirp.gov. 1800 IN NS gea.nist.GOV. nwirp.gov. 1800 IN NS gea2.nist.GOV. nwirp.gov. 1800 IN NS bea.nist.GOV. nwirp.gov. 1800 IN RRSIG ( NS 7 2 1800 20201103101138 20201027093951 53660 nwirp.gov. wFjppcwo9hLaNrjbOICuqjaMZwLQZ9ypYOufGsETjV7kV1tCIDNtjZD0VMd/AeU0m6fnFArIFu4w El3FOhKS/1vi4w+iZwTnw0XapqV3zX2epVKINiW0MFGFtAIDSlSd3CyMABdmPdXtMrxhineeGIv5 5mWFKipHTLYWCxVV22c= ) nwirp.gov. 1800 IN RRSIG ( NS 7 2 1800 20201103101138 20201027093951 54779 nwirp.gov. FutZOWP6B3uVFv0UvZMP38qwnFUWcvaRMXf/P6NE528PT1U/ubsaI/MOXe/Bqf87iZMJGGEOPBIw Gi+4fLpfFzqwErvXWLNztI9mRVZ7W7f1uBFEXIHC5WZfnE3E70yXsKUW6ZePWJZ3evCYrzrrlCY0 VMiUk2OEH0VMuGfuCzE= ) ;; ADDITIONAL SECTION (19 records) gea2.nist.GOV. 1800 IN A 129.6.13.4 bea.nist.GOV. 1800 IN A 132.163.4.10 gea.nist.GOV. 1800 IN A 129.6.13.3 gea2.nist.GOV. 1800 IN AAAA 2610:20:6005:13::4 bea.nist.GOV. 1800 IN AAAA 2610:20:6b01:4::10 gea.nist.GOV. 1800 IN AAAA 2610:20:6005:13::3 gea2.nist.GOV. 1800 IN RRSIG ( A 7 3 1800 20201103094214 20201027093526 36539 nist.gov. pcsYMhBwCCybuRI35VvTsm4/Ec67B2aRy4eZnKCg5qMgcWAs6K3QaguHuqWYWsN8quiIPSL6BVFI 9FyHifBAJ5T1/MlexRbZUNxwl3QaMRO087SJA0AiBm2S+HuCg5a6JQNpVnh/6Cw3Qjja98mlv5gS PajlBsAY9dCKaV9mwto= ) gea2.nist.GOV. 1800 IN RRSIG ( A 7 3 1800 20201103094214 20201027093526 55550 nist.gov. nNJZu8P5qBZO9wTMVfnkj7V9rIpH+5Pw7hHToZ3Ghxg5Vrhl3hFpyfeDKekNLQc7gafwza0xHHNs y53Zr9xqumVcIGS7viUlO+IdUmdg+PBSQp4rxmP6b9NWbPk7XlOa8k2Y1sJRVXAMbgp5R1s8ZxID Dzcm7Xl0fOkrFrNVeAg= ) gea2.nist.GOV. 1800 IN RRSIG ( AAAA 7 3 1800 20201103111550 20201027103347 36539 nist.gov. U2PyJdxjVDJYVeeAtTisoa5uzVoA8OmhlCskjhqyRN+5JnC7rK9cjCTbk7XkoeVshbyeSLPDgdK9 Va5YxD51YAXXf1ZhncnIrl4TKN7G2vKZBsFbhzpI/1Cm6iZqrP5c4P4mN1Qq/Hp3E23h3Yf/Olws TAz8kWrfHAv+0BDmRKs= ) gea2.nist.GOV. 1800 IN RRSIG ( AAAA 7 3 1800 20201103111550 20201027103347 55550 nist.gov. HF9aUpgidZYXJbCkY+rQZ3HDL4goe2MYd/+Yjtwsb7NReHuqcW8RbMczDUzSk/f2YRVY7gafADsz jVSBC2laYsSpKRUFab0Evm9MClQuwhRltXEE6jUX1XTCbbns/laXp/LxUI6MgwAHaD4ZW/omW5av v6rytssKxP3Gw3kv4DI= ) bea.nist.GOV. 1800 IN RRSIG ( A 7 3 1800 20201103110140 20201027104718 36539 nist.gov. ehQ4bFydqakJzMR/+8Htt3vz2OzVwis6+f28Vr1Vq7m44lBwXkGHalXxqKWkrpFnON0l6Rp8jRfs bR+7HMSyoVfkeYx8jtj9x7+buItlqaeYoQdj0koXf9GJ2qW7WVCmegakDTirsEDDN4oT1q9p03x+ R1Jxf2Gz7zlFCpgyQ1c= ) bea.nist.GOV. 1800 IN RRSIG ( A 7 3 1800 20201103110140 20201027104718 55550 nist.gov. a9qGihkG2y/V9ZiJ+9wj9+QbWerwkxyxV0WmiVTaHRCd9effMoubrZHK48FpHDR9PTp/mqYq9l9F AZle4lBRkfOpUl0/05hyOCgkqozN/rW8RSyqrZz7HGchoKHbTz/VqNC9LmSQkEFjUqJEMJpVJ8to FIV6P+ZoUSYGx7dsRQQ= ) bea.nist.GOV. 1800 IN RRSIG ( AAAA 7 3 1800 20201103101526 20201027095707 36539 nist.gov. 1j6VT4N37IyxIHH/A1SOPRYUd8bzS+LhkaOpa3C8CqBen/Ir4B9L2xcKxmiesJhX/SPSEkS4+0qW XTuKxTOZI4u+HEmTBnM4M1DywNwZeWijQ6iUsvi4tS5stA8iLFnyiDRb+DC8AUaUxkdqsL/sj9vB FO0DgEH/WXV0YCDVIr0= ) bea.nist.GOV. 1800 IN RRSIG ( AAAA 7 3 1800 20201103101526 20201027095707 55550 nist.gov. bgfQKcEwdDDo+LpMbgdTQO6j8J8YRhzP1l7NYizmieWZntGfhl5ejGhZtnCHdl7YPZwQbc5OOzmg xpjoM4QPNSi21Ju69VQi2MEOExe12FpilpcQi3Dkv7st6XQJwfuAlhmz75xvFHEwiGXji/peRu5P HyLFKOasXBiiKfnsn/o= ) gea.nist.GOV. 1800 IN RRSIG ( A 7 3 1800 20201103105608 20201027100918 36539 nist.gov. dhd/ZSZGEHbfeXI1qZ9IqyATnhsdPtOIAvrh8XnnWD1XfMEhgeP/UPGb0ZR9y5pA4j/c39r272D+ /2+ZFQQjGlUeeghiDJySKCSS1zEQaO+LFRTyy02I+0TEVsnxu+65KHF7RUJA7q6UOFGlo38EtJe9 H97bSmPiGhL/g1MNekE= ) gea.nist.GOV. 1800 IN RRSIG ( A 7 3 1800 20201103105608 20201027100918 55550 nist.gov. JSBQZ2d4Blxh1qNcfggHCdqSKz/jKq1aSf8P3aU9/ojnrb+WJuUAipAYN6xjrewz96QQJ9jlZpUD LZWvcse3O9AJpZ6/dhGXv9M5gugPzYMNX1Y21QuyxrJJ9HvOLCMlp/51qTz5tcEVFbIUMBKegQ00 P+0vwupXs8KVAoDdcoc= ) gea.nist.GOV. 1800 IN RRSIG ( AAAA 7 3 1800 20201103115511 20201027115135 36539 nist.gov. V19gvaAcodOj0P0w63r2h9mis8DQiIG6FZFRb2qWs5NCIHsmsNhfy57LseCsN/28QKWhO0AK40hn mRKbjglT7i1sAq3yp9AZJ6AKoMqa5cqc1T4DpxcWCFsaZdIY+vSu2kV/OFXjLBECJ14ttJMpt1hb f+hcohG9S3F3ETVLqUo= ) gea.nist.GOV. 1800 IN RRSIG ( AAAA 7 3 1800 20201103115511 20201027115135 55550 nist.gov. KVfp+S3PE8IlnAql0XMDt4soOvTdO6ck3gvAtOEdsBuo/XycFNvW6O5bbfqg+hSvoxF5BYBceI8i YgH3s01upSHqk3GfIso8b6+TgaYnMeTGoKJFafmNW5ufqA5iEgUskM4Tw0zhnLybEG7now1x/00O pCSC+aSryv8fMmyOvQY= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to bea.nist.GOV for NWIRP.GOV/SOA
	Received 2968 bytes from 132.163.4.10
	;; Answer received from 132.163.4.10 (2968 bytes) ;; HEADER SECTION ;; id = 8053 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 5 arcount = 19 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NWIRP.GOV. IN SOA ;; ANSWER SECTION (3 records) NWIRP.GOV. 1800 IN SOA ( gm.nist.GOV. netops.nist.GOV. 2764 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 300 ;minimum ) NWIRP.GOV. 1800 IN RRSIG ( SOA 7 2 1800 20201103103951 20201027093951 53660 nwirp.gov. Ab4jaMtSEeDD/l4azyHVSfoqcSFGlUEG/HUnUlMVcCfUTN6guDhR8y1cXwEQmBjB/59a+y1x2IJV l/4Mf+lcBMFeovxs5guw6YO0F1lM4p9pM1ZZT8GfKh6D+SQQMjFp51gy5YV5AYXCSDEKUNEdcVIu Bz3EDTN2mZkdNW1Bess= ) nwirp.gov. 1800 IN RRSIG ( SOA 7 2 1800 20201103103951 20201027093951 54779 nwirp.gov. PIrlcHjlmwbw0YhJsBEMrKMPuo23IXUbINdO/Fh7sRYpZbM6mm3piVxfOn0lKrcizpu2MWHmJHoy j9LPX2CgkcB3OoJnCQB2NUhXNRN3d/9eAcXhMpZBNqwHazW1QJxS6UGpdl6gxBVPgZbanr0SkJXb oc+SZ8cDPk6eHfbG0Ws= ) ;; AUTHORITY SECTION (5 records) nwirp.gov. 1800 IN NS gea.nist.GOV. nwirp.gov. 1800 IN NS bea.nist.GOV. nwirp.gov. 1800 IN NS gea2.nist.GOV. nwirp.gov. 1800 IN RRSIG ( NS 7 2 1800 20201103101138 20201027093951 53660 nwirp.gov. wFjppcwo9hLaNrjbOICuqjaMZwLQZ9ypYOufGsETjV7kV1tCIDNtjZD0VMd/AeU0m6fnFArIFu4w El3FOhKS/1vi4w+iZwTnw0XapqV3zX2epVKINiW0MFGFtAIDSlSd3CyMABdmPdXtMrxhineeGIv5 5mWFKipHTLYWCxVV22c= ) nwirp.gov. 1800 IN RRSIG ( NS 7 2 1800 20201103101138 20201027093951 54779 nwirp.gov. FutZOWP6B3uVFv0UvZMP38qwnFUWcvaRMXf/P6NE528PT1U/ubsaI/MOXe/Bqf87iZMJGGEOPBIw Gi+4fLpfFzqwErvXWLNztI9mRVZ7W7f1uBFEXIHC5WZfnE3E70yXsKUW6ZePWJZ3evCYrzrrlCY0 VMiUk2OEH0VMuGfuCzE= ) ;; ADDITIONAL SECTION (19 records) gea2.nist.GOV. 1800 IN A 129.6.13.4 bea.nist.GOV. 1800 IN A 132.163.4.10 gea.nist.GOV. 1800 IN A 129.6.13.3 gea2.nist.GOV. 1800 IN AAAA 2610:20:6005:13::4 bea.nist.GOV. 1800 IN AAAA 2610:20:6b01:4::10 gea.nist.GOV. 1800 IN AAAA 2610:20:6005:13::3 gea2.nist.GOV. 1800 IN RRSIG ( A 7 3 1800 20201103094214 20201027093526 36539 nist.gov. pcsYMhBwCCybuRI35VvTsm4/Ec67B2aRy4eZnKCg5qMgcWAs6K3QaguHuqWYWsN8quiIPSL6BVFI 9FyHifBAJ5T1/MlexRbZUNxwl3QaMRO087SJA0AiBm2S+HuCg5a6JQNpVnh/6Cw3Qjja98mlv5gS PajlBsAY9dCKaV9mwto= ) gea2.nist.GOV. 1800 IN RRSIG ( A 7 3 1800 20201103094214 20201027093526 55550 nist.gov. nNJZu8P5qBZO9wTMVfnkj7V9rIpH+5Pw7hHToZ3Ghxg5Vrhl3hFpyfeDKekNLQc7gafwza0xHHNs y53Zr9xqumVcIGS7viUlO+IdUmdg+PBSQp4rxmP6b9NWbPk7XlOa8k2Y1sJRVXAMbgp5R1s8ZxID Dzcm7Xl0fOkrFrNVeAg= ) gea2.nist.GOV. 1800 IN RRSIG ( AAAA 7 3 1800 20201103111550 20201027103347 36539 nist.gov. U2PyJdxjVDJYVeeAtTisoa5uzVoA8OmhlCskjhqyRN+5JnC7rK9cjCTbk7XkoeVshbyeSLPDgdK9 Va5YxD51YAXXf1ZhncnIrl4TKN7G2vKZBsFbhzpI/1Cm6iZqrP5c4P4mN1Qq/Hp3E23h3Yf/Olws TAz8kWrfHAv+0BDmRKs= ) gea2.nist.GOV. 1800 IN RRSIG ( AAAA 7 3 1800 20201103111550 20201027103347 55550 nist.gov. HF9aUpgidZYXJbCkY+rQZ3HDL4goe2MYd/+Yjtwsb7NReHuqcW8RbMczDUzSk/f2YRVY7gafADsz jVSBC2laYsSpKRUFab0Evm9MClQuwhRltXEE6jUX1XTCbbns/laXp/LxUI6MgwAHaD4ZW/omW5av v6rytssKxP3Gw3kv4DI= ) bea.nist.GOV. 1800 IN RRSIG ( A 7 3 1800 20201103110140 20201027104718 36539 nist.gov. ehQ4bFydqakJzMR/+8Htt3vz2OzVwis6+f28Vr1Vq7m44lBwXkGHalXxqKWkrpFnON0l6Rp8jRfs bR+7HMSyoVfkeYx8jtj9x7+buItlqaeYoQdj0koXf9GJ2qW7WVCmegakDTirsEDDN4oT1q9p03x+ R1Jxf2Gz7zlFCpgyQ1c= ) bea.nist.GOV. 1800 IN RRSIG ( A 7 3 1800 20201103110140 20201027104718 55550 nist.gov. a9qGihkG2y/V9ZiJ+9wj9+QbWerwkxyxV0WmiVTaHRCd9effMoubrZHK48FpHDR9PTp/mqYq9l9F AZle4lBRkfOpUl0/05hyOCgkqozN/rW8RSyqrZz7HGchoKHbTz/VqNC9LmSQkEFjUqJEMJpVJ8to FIV6P+ZoUSYGx7dsRQQ= ) bea.nist.GOV. 1800 IN RRSIG ( AAAA 7 3 1800 20201103101526 20201027095707 36539 nist.gov. 1j6VT4N37IyxIHH/A1SOPRYUd8bzS+LhkaOpa3C8CqBen/Ir4B9L2xcKxmiesJhX/SPSEkS4+0qW XTuKxTOZI4u+HEmTBnM4M1DywNwZeWijQ6iUsvi4tS5stA8iLFnyiDRb+DC8AUaUxkdqsL/sj9vB FO0DgEH/WXV0YCDVIr0= ) bea.nist.GOV. 1800 IN RRSIG ( AAAA 7 3 1800 20201103101526 20201027095707 55550 nist.gov. bgfQKcEwdDDo+LpMbgdTQO6j8J8YRhzP1l7NYizmieWZntGfhl5ejGhZtnCHdl7YPZwQbc5OOzmg xpjoM4QPNSi21Ju69VQi2MEOExe12FpilpcQi3Dkv7st6XQJwfuAlhmz75xvFHEwiGXji/peRu5P HyLFKOasXBiiKfnsn/o= ) gea.nist.GOV. 1800 IN RRSIG ( A 7 3 1800 20201103105608 20201027100918 36539 nist.gov. dhd/ZSZGEHbfeXI1qZ9IqyATnhsdPtOIAvrh8XnnWD1XfMEhgeP/UPGb0ZR9y5pA4j/c39r272D+ /2+ZFQQjGlUeeghiDJySKCSS1zEQaO+LFRTyy02I+0TEVsnxu+65KHF7RUJA7q6UOFGlo38EtJe9 H97bSmPiGhL/g1MNekE= ) gea.nist.GOV. 1800 IN RRSIG ( A 7 3 1800 20201103105608 20201027100918 55550 nist.gov. JSBQZ2d4Blxh1qNcfggHCdqSKz/jKq1aSf8P3aU9/ojnrb+WJuUAipAYN6xjrewz96QQJ9jlZpUD LZWvcse3O9AJpZ6/dhGXv9M5gugPzYMNX1Y21QuyxrJJ9HvOLCMlp/51qTz5tcEVFbIUMBKegQ00 P+0vwupXs8KVAoDdcoc= ) gea.nist.GOV. 1800 IN RRSIG ( AAAA 7 3 1800 20201103115511 20201027115135 36539 nist.gov. V19gvaAcodOj0P0w63r2h9mis8DQiIG6FZFRb2qWs5NCIHsmsNhfy57LseCsN/28QKWhO0AK40hn mRKbjglT7i1sAq3yp9AZJ6AKoMqa5cqc1T4DpxcWCFsaZdIY+vSu2kV/OFXjLBECJ14ttJMpt1hb f+hcohG9S3F3ETVLqUo= ) gea.nist.GOV. 1800 IN RRSIG ( AAAA 7 3 1800 20201103115511 20201027115135 55550 nist.gov. KVfp+S3PE8IlnAql0XMDt4soOvTdO6ck3gvAtOEdsBuo/XycFNvW6O5bbfqg+hSvoxF5BYBceI8i YgH3s01upSHqk3GfIso8b6+TgaYnMeTGoKJFafmNW5ufqA5iEgUskM4Tw0zhnLybEG7now1x/00O pCSC+aSryv8fMmyOvQY= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to gea.nist.GOV for NWIRP.GOV/A
	Received 858 bytes from 129.6.13.3
	;; Answer received from 129.6.13.3 (858 bytes) ;; HEADER SECTION ;; id = 36325 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NWIRP.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) NWIRP.GOV. 300 IN SOA ( gm.nist.GOV. netops.nist.GOV. 2764 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 300 ;minimum ) NWIRP.GOV. 300 IN RRSIG ( SOA 7 2 1800 20201103103951 20201027093951 53660 nwirp.gov. Ab4jaMtSEeDD/l4azyHVSfoqcSFGlUEG/HUnUlMVcCfUTN6guDhR8y1cXwEQmBjB/59a+y1x2IJV l/4Mf+lcBMFeovxs5guw6YO0F1lM4p9pM1ZZT8GfKh6D+SQQMjFp51gy5YV5AYXCSDEKUNEdcVIu Bz3EDTN2mZkdNW1Bess= ) nwirp.gov. 300 IN RRSIG ( SOA 7 2 1800 20201103103951 20201027093951 54779 nwirp.gov. PIrlcHjlmwbw0YhJsBEMrKMPuo23IXUbINdO/Fh7sRYpZbM6mm3piVxfOn0lKrcizpu2MWHmJHoy j9LPX2CgkcB3OoJnCQB2NUhXNRN3d/9eAcXhMpZBNqwHazW1QJxS6UGpdl6gxBVPgZbanr0SkJXb oc+SZ8cDPk6eHfbG0Ws= ) TD88S8DSCS8FC73U16SCAGQ2PGECGHV5.nwirp.gov. 300 IN NSEC3 ( 1 0 10 7c8a4955844fff3e6cfcd6a9e4 fnp6bailmf9kmpg4nrrabplacclvotv8 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) TD88S8DSCS8FC73U16SCAGQ2PGECGHV5.nwirp.gov. 300 IN RRSIG ( NSEC3 7 3 300 20201102151013 20201026141632 53660 nwirp.gov. IayhKA+Cg/lQ3ZYbnQLfKhdRXFSK8OKEZKCjhZB02Jm55/zN3WfuWJqWe+x4eGxsu9Bssai6xyIW VHvgeUL6OzYLcZyZbeYVlUA8yHce1N5w+qEf0wek/sbYF4bAsVljEBFylWNxrDSZ0iVNHQX6I1ku 50oWr55a+kn5A0p7Tbc= ) TD88S8DSCS8FC73U16SCAGQ2PGECGHV5.nwirp.gov. 300 IN RRSIG ( NSEC3 7 3 300 20201102151013 20201026141632 54779 nwirp.gov. mAvI5xrUTyUWEj+SoeT3jctVwlM2k54CrEAr4AYAo5Q8KysOeGfANWWcsIYmbeYHwp4zokK6BvYj eiqn2U2oz3/W+3xvf2PDZhbmnsK8su/vSTtHk0QcoVo7rE971lXcNiKtwpvZXFEjtIn7PEmzxnhu cKkN6S8I/Z4ns0BX3vk= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`NWIRP.GOV. 300 IN RRSIG ( SOA 7 2 1800 20201103103951 20201027093951 53660 nwirp.gov. Ab4jaMtSEeDD/l4azyHVSfoqcSFGlUEG/HUnUlMVcCfUTN6guDhR8y1cXwEQmBjB/59a+y1x2IJV l/4Mf+lcBMFeovxs5guw6YO0F1lM4p9pM1ZZT8GfKh6D+SQQMjFp51gy5YV5AYXCSDEKUNEdcVIu Bz3EDTN2mZkdNW1Bess= )`
	`nwirp.gov. 300 IN RRSIG ( SOA 7 2 1800 20201103103951 20201027093951 54779 nwirp.gov. PIrlcHjlmwbw0YhJsBEMrKMPuo23IXUbINdO/Fh7sRYpZbM6mm3piVxfOn0lKrcizpu2MWHmJHoy j9LPX2CgkcB3OoJnCQB2NUhXNRN3d/9eAcXhMpZBNqwHazW1QJxS6UGpdl6gxBVPgZbanr0SkJXb oc+SZ8cDPk6eHfbG0Ws= )`
	RRSIG=53660 and DNSKEY=53660 verifies the SOA RRset
	RRSIG=54779 and DNSKEY=54779 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test NWIRP.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: