DNSSEC Analyzer - NWTRB.GOV

Domain Name:

Time: 2020-01-24 02:43:36 UTC, NTP stratum 4

Analyzing DNSSEC problems for NWTRB.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to k.root-servers.net for ./DNSKEY
	Error querying k.root-servers.net/2001:7fd:0:0:0:0:0:1 for ./DNSKEY: 'IPv6 transport disabled'
	Received 864 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (864 bytes) ;; HEADER SECTION ;; id = 38874 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20200211000000 20200121000000 20326 . UaaPoqlBlRixcabCWMJ9jVvevx+Sp8W5rMt06Tozfg/gefIspEKxw4fx22mRaAQZzdHq9Lt+Who4 YpUX95CDrgDYtYJ9NOyICRNlWnY9FNqOW0AreCmEK0qqS52xYb72hJYpFrCILGLD6jl4Ar0LFi29 iXnVLQ99+SvD8PPHHkEiIu1WhlES7taEavtbKijyjLYXwagQxSQCzMgkbWN1+S78kJGZEMaBODTZ uiiGIw5Jy3OPAQxHQyLTElR5ZuEg59/sSnTCEfmoXcxG9/g6O1qWs6d9hDVadKfXhHr8OTXGoB25 Ttp3CyZGdSqRkCwwJpWJ9SlaL+khcJoLFqwm8w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20200211000000 20200121000000 20326 . UaaPoqlBlRixcabCWMJ9jVvevx+Sp8W5rMt06Tozfg/gefIspEKxw4fx22mRaAQZzdHq9Lt+Who4 YpUX95CDrgDYtYJ9NOyICRNlWnY9FNqOW0AreCmEK0qqS52xYb72hJYpFrCILGLD6jl4Ar0LFi29 iXnVLQ99+SvD8PPHHkEiIu1WhlES7taEavtbKijyjLYXwagQxSQCzMgkbWN1+S78kJGZEMaBODTZ uiiGIw5Jy3OPAQxHQyLTElR5ZuEg59/sSnTCEfmoXcxG9/g6O1qWs6d9hDVadKfXhHr8OTXGoB25 Ttp3CyZGdSqRkCwwJpWJ9SlaL+khcJoLFqwm8w== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=33853 is now in the chain-of-trust
	Query to k.root-servers.net for NWTRB.GOV/A
	Error querying k.root-servers.net/2001:7fd:0:0:0:0:0:1 for NWTRB.GOV/A: 'IPv6 transport disabled'
	Received 664 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (664 bytes) ;; HEADER SECTION ;; id = 24386 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NWTRB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20200205210000 20200123200000 33853 . E8bXIRY/E4muIOIyh32DOOnDAO/l7iJdkhdafopb1FB9x6ZhiTe5rp9HMhfIVyBFjE+AiB+d/vqw 6BnkhYEYMz077bogygAJKFTveIeGxB0246XW0HKavT92Tzy2W6vKt5YD8n08a0gp0nOdltZ9mE2c CRNCtUexhIkoY6BY3fiKBmO4D9UmHmm+BSjjv2+ewq46b3PhQKXCRQU3iA2SYrns3qKjDn2BJwh+ UVx4JfB8fFrw2BZLZZl0UZQg3s6TBw004Kz5w+1b8hNyNAZXrC1o1EgMu93nIlsXm6vqK/05UwCw yS30q091C2gSSqh9DROwF/iXxaLt9oTj41vjhg== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.root-servers.net for GOV/DNSKEY
	Received 658 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (658 bytes) ;; HEADER SECTION ;; id = 46322 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20200205210000 20200123200000 33853 . E8bXIRY/E4muIOIyh32DOOnDAO/l7iJdkhdafopb1FB9x6ZhiTe5rp9HMhfIVyBFjE+AiB+d/vqw 6BnkhYEYMz077bogygAJKFTveIeGxB0246XW0HKavT92Tzy2W6vKt5YD8n08a0gp0nOdltZ9mE2c CRNCtUexhIkoY6BY3fiKBmO4D9UmHmm+BSjjv2+ewq46b3PhQKXCRQU3iA2SYrns3qKjDn2BJwh+ UVx4JfB8fFrw2BZLZZl0UZQg3s6TBw004Kz5w+1b8hNyNAZXrC1o1EgMu93nIlsXm6vqK/05UwCw yS30q091C2gSSqh9DROwF/iXxaLt9oTj41vjhg== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to k.root-servers.net for GOV/DS
	Error querying k.root-servers.net/2001:7fd:0:0:0:0:0:1 for GOV/DS: 'IPv6 transport disabled'
	Received 406 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (406 bytes) ;; HEADER SECTION ;; id = 22286 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20200205210000 20200123200000 33853 . E8bXIRY/E4muIOIyh32DOOnDAO/l7iJdkhdafopb1FB9x6ZhiTe5rp9HMhfIVyBFjE+AiB+d/vqw 6BnkhYEYMz077bogygAJKFTveIeGxB0246XW0HKavT92Tzy2W6vKt5YD8n08a0gp0nOdltZ9mE2c CRNCtUexhIkoY6BY3fiKBmO4D9UmHmm+BSjjv2+ewq46b3PhQKXCRQU3iA2SYrns3qKjDn2BJwh+ UVx4JfB8fFrw2BZLZZl0UZQg3s6TBw004Kz5w+1b8hNyNAZXrC1o1EgMu93nIlsXm6vqK/05UwCw yS30q091C2gSSqh9DROwF/iXxaLt9oTj41vjhg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	DS=7698/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20200205210000 20200123200000 33853 . E8bXIRY/E4muIOIyh32DOOnDAO/l7iJdkhdafopb1FB9x6ZhiTe5rp9HMhfIVyBFjE+AiB+d/vqw 6BnkhYEYMz077bogygAJKFTveIeGxB0246XW0HKavT92Tzy2W6vKt5YD8n08a0gp0nOdltZ9mE2c CRNCtUexhIkoY6BY3fiKBmO4D9UmHmm+BSjjv2+ewq46b3PhQKXCRQU3iA2SYrns3qKjDn2BJwh+ UVx4JfB8fFrw2BZLZZl0UZQg3s6TBw004Kz5w+1b8hNyNAZXrC1o1EgMu93nIlsXm6vqK/05UwCw yS30q091C2gSSqh9DROwF/iXxaLt9oTj41vjhg== )`
	RRSIG=33853 and DNSKEY=33853 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	Query to b.gov-servers.net for GOV/DNSKEY
	Error querying b.gov-servers.net/2620:74:27:0:0:0:2:30 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 777 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (777 bytes) ;; HEADER SECTION ;; id = 15636 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAdccuiuxqTxvRcMVh4o9DCfREPNTe3hGEklbdV+L99lKySyIzskGLJ6XDBrWgBeY7ZRSOWGQ 2eHdQLN61fRyqWpVLpNzqaIz/UmMP74VPBCz4QXRDkG4hDO3uifCDVs8Jex4TrYT+hGNYmprbsrq dVQCgeeHc7UMKI/SjusQ4uTKgJ9CWt02/AgK+zKFi3LCBVDGnUwE2kUOL1b0MWfT0ks= ) ; Key ID = 36558 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200204200254 20200120195754 7698 gov. AW2ehlTHCkvsoKYTELKLWDsRb5hmUce7lXmZl5v8iXW1lcvUgYHjl4mKrTmw0o/ZQunLH8tjhL2a nbCy8GymuXffQUXpsWfCtMDd1j2lQBL2ECPw418yOOCqTnoRI6DJvvArASkqLeXHX2bAu4/351ug E/d63O3H30850u+Tgakg/vlTpsNCMxNeJExRDBbwCp4VD7PZN75TMmRM4Y4McQsoGiEdDCsFJXnV 9SP2S24Y/uKSLySFDQ0qZ41uZUoEZaMclbD3Uh6AFlzapQggME06B8zjfauOHVvpfak1QgzXqDKf kWoOradUBw+7eU1rITOiOmukHsMHNdvjdDoqSA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAdccuiuxqTxvRcMVh4o9DCfREPNTe3hGEklbdV+L99lKySyIzskGLJ6XDBrWgBeY7ZRSOWGQ 2eHdQLN61fRyqWpVLpNzqaIz/UmMP74VPBCz4QXRDkG4hDO3uifCDVs8Jex4TrYT+hGNYmprbsrq dVQCgeeHc7UMKI/SjusQ4uTKgJ9CWt02/AgK+zKFi3LCBVDGnUwE2kUOL1b0MWfT0ks= ) ; Key ID = 36558`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200204200254 20200120195754 7698 gov. AW2ehlTHCkvsoKYTELKLWDsRb5hmUce7lXmZl5v8iXW1lcvUgYHjl4mKrTmw0o/ZQunLH8tjhL2a nbCy8GymuXffQUXpsWfCtMDd1j2lQBL2ECPw418yOOCqTnoRI6DJvvArASkqLeXHX2bAu4/351ug E/d63O3H30850u+Tgakg/vlTpsNCMxNeJExRDBbwCp4VD7PZN75TMmRM4Y4McQsoGiEdDCsFJXnV 9SP2S24Y/uKSLySFDQ0qZ41uZUoEZaMclbD3Uh6AFlzapQggME06B8zjfauOHVvpfak1QgzXqDKf kWoOradUBw+7eU1rITOiOmukHsMHNdvjdDoqSA== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=36558 is now in the chain-of-trust
	Query to a.gov-servers.net for NWTRB.GOV/A
	Error querying a.gov-servers.net/2001:500:4431:0:0:0:2:30 for NWTRB.GOV/A: 'IPv6 transport disabled'
	Received 385 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (385 bytes) ;; HEADER SECTION ;; id = 17819 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NWTRB.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) NWTRB.GOV. 86400 IN NS ns3.NWTRB.GOV. NWTRB.GOV. 86400 IN NS ns2.NWTRB.GOV. NWTRB.GOV. 3600 IN DS ( 14002 5 2 1b919dc7b09e9ec77a25ada37c96eb6195cf0c47ea84e903ce9ffef92eb36905 ) NWTRB.GOV. 3600 IN DS 14002 5 1 8565f95f000168edba83b3311b357c24c0e9b6aa NWTRB.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200130221007 20200123221007 36558 gov. eFUnS647JybUlDJo1aDI2GhmF4P5fbfgWWChVw+d059YGLq8qBvhM3YNdjo87KcYec/p9rviU1Mk +y/2Mi86LbIYRrTKgXIFsbml45b3Tco39ls58SD1mxVcIrxO4ayqL335AzS0ZaX/A/jqRsE5mBze 2j7tz0hqShcidE6VD+v7EFI0L8VUFRQGpNk9sgnB6pCEkV/jazIc3/dIVpBRrQ== ) ;; ADDITIONAL SECTION (3 records) ns3.NWTRB.GOV. 86400 IN A 96.89.3.213 ns2.NWTRB.GOV. 86400 IN A 12.14.15.13 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.gov-servers.net for NWTRB.GOV/DNSKEY
	Received 385 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (385 bytes) ;; HEADER SECTION ;; id = 15630 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NWTRB.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) NWTRB.GOV. 86400 IN NS ns3.NWTRB.GOV. NWTRB.GOV. 86400 IN NS ns2.NWTRB.GOV. NWTRB.GOV. 3600 IN DS ( 14002 5 2 1b919dc7b09e9ec77a25ada37c96eb6195cf0c47ea84e903ce9ffef92eb36905 ) NWTRB.GOV. 3600 IN DS 14002 5 1 8565f95f000168edba83b3311b357c24c0e9b6aa NWTRB.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200130221007 20200123221007 36558 gov. eFUnS647JybUlDJo1aDI2GhmF4P5fbfgWWChVw+d059YGLq8qBvhM3YNdjo87KcYec/p9rviU1Mk +y/2Mi86LbIYRrTKgXIFsbml45b3Tco39ls58SD1mxVcIrxO4ayqL335AzS0ZaX/A/jqRsE5mBze 2j7tz0hqShcidE6VD+v7EFI0L8VUFRQGpNk9sgnB6pCEkV/jazIc3/dIVpBRrQ== ) ;; ADDITIONAL SECTION (3 records) ns3.NWTRB.GOV. 86400 IN A 96.89.3.213 ns2.NWTRB.GOV. 86400 IN A 12.14.15.13 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone NWTRB.GOV

NWTRB.GOV

	Checking DS between GOV and NWTRB.GOV
	Query to d.gov-servers.net for NWTRB.GOV/DS
	Received 317 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (317 bytes) ;; HEADER SECTION ;; id = 36951 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NWTRB.GOV. IN DS ;; ANSWER SECTION (3 records) NWTRB.GOV. 3600 IN DS ( 14002 5 2 1b919dc7b09e9ec77a25ada37c96eb6195cf0c47ea84e903ce9ffef92eb36905 ) NWTRB.GOV. 3600 IN DS 14002 5 1 8565f95f000168edba83b3311b357c24c0e9b6aa NWTRB.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200130221007 20200123221007 36558 gov. eFUnS647JybUlDJo1aDI2GhmF4P5fbfgWWChVw+d059YGLq8qBvhM3YNdjo87KcYec/p9rviU1Mk +y/2Mi86LbIYRrTKgXIFsbml45b3Tco39ls58SD1mxVcIrxO4ayqL335AzS0ZaX/A/jqRsE5mBze 2j7tz0hqShcidE6VD+v7EFI0L8VUFRQGpNk9sgnB6pCEkV/jazIc3/dIVpBRrQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for NWTRB.GOV in the GOV zone
	DS=14002/SHA-256 has algorithm RSASHA1
	DS=14002/SHA-1 has algorithm RSASHA1
	Found 1 RRSIGs over DS RRset
	`NWTRB.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200130221007 20200123221007 36558 gov. eFUnS647JybUlDJo1aDI2GhmF4P5fbfgWWChVw+d059YGLq8qBvhM3YNdjo87KcYec/p9rviU1Mk +y/2Mi86LbIYRrTKgXIFsbml45b3Tco39ls58SD1mxVcIrxO4ayqL335AzS0ZaX/A/jqRsE5mBze 2j7tz0hqShcidE6VD+v7EFI0L8VUFRQGpNk9sgnB6pCEkV/jazIc3/dIVpBRrQ== )`
	RRSIG=36558 and DNSKEY=36558 verifies the DS RRset
	DS=14002/SHA-256 is now in the chain-of-trust
	`NWTRB.GOV. 3600 IN DS ( 14002 5 2 1b919dc7b09e9ec77a25ada37c96eb6195cf0c47ea84e903ce9ffef92eb36905 )`
	`NWTRB.GOV. 3600 IN DS 14002 5 1 8565f95f000168edba83b3311b357c24c0e9b6aa`
	Query to ns2.NWTRB.GOV for NWTRB.GOV/DNSKEY
	Received 1449 bytes from 12.14.15.13
	;; Answer received from 12.14.15.13 (1449 bytes) ;; HEADER SECTION ;; id = 46575 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NWTRB.GOV. IN DNSKEY ;; ANSWER SECTION (4 records) nwtrb.gov. 10800 IN DNSKEY ( 257 3 5 AwEAAbLhES1xEHmxpPi03ZNeH0gQQYdp2C3MdYHMWpWwDDxdJ81Yg3+0i+iu30/jhoRDUaFPVwiq /GABpv1txxYQVGUv8hyJ0oldqz2u6Sp5gQEfH7sCrXf2ZV9jJCE2z8s/1gWKs5TY3Q8Uq1ChIrcg DdiVVAbyKaAr4eVQwdnNSmQg0UYJWAqmYOqwmUdGdBMqw4ICVklpySBgSkmvka/VzImjIBdlqjm4 W73n6Q+ob63sBI93Wfh1B3aU+pKk8wvBfIr+R1dBeN1HpH6mfzYRa7qBW6cKj6R6tXvD+jv/+XKP NBdZ4SuKLaVSGdfnSLZWvXq7Fz7/oLoRT6sK1qeGHN+DhKzoLwGqRd27gd7vGt5NyhWJC3Z/kwGT AE8Q5QHzZG87hIkMwBGpDGU/nFb7clz41lTiP5+snqSY9xVxOqcFSnY6H6id6yrYiDimm2+caeVe R+9RMPZefHb2eP1U0A3broolSTaF8aSMSqU5tzbgUpNCLdz5QKtXPy1GkHJlXNJwKZvYxikJw5oY E4l1w3WXPEEsNuuYHcVvCXzOxbIAkqETsUxxw0IWrMc1HZgcCkwk9miWpwkl1y3DRacJihaBdxEs 3jJ5ZfzBFIYvVm/VtPrdhAXzANcLS64lhV/bLL1aEAdgxmSHNvJ0KMAP8bsjjHtiNmn3Oyt0uPq1 3bQ/ ) ; Key ID = 14002 nwtrb.gov. 10800 IN DNSKEY ( 256 3 5 AwEAAcWVi2xWw0tWK3OzMW8rViNm4u7+xg5tGa9hu9r6C1jRKbyfQypgAqpaBL/bKItRjma3WLP4 jDcDgrZsh2TlTFPP4wdAQvGcucmc4gtYT7qnQsAPFkbw5Tah9l9/D7kjeQJgx74QInINgOWVnnh1 8cu94T45dtrcYy5L6unxev+D ) ; Key ID = 19812 nwtrb.gov. 10800 IN RRSIG ( DNSKEY 5 2 10800 20200223005901 20200124005901 14002 nwtrb.gov. S2ntzHfr/fHMaOvsb0WYrH+k93vhcGqAqLFvTmzt2+kl9uQ5T/wCKigU7L1jyzz2iqlMCcLjzqlo Ee9XN/YCoooGX8K28W5orPlWSGf1IiXKDyz7eyBj29baXkbZFyCLWIvhrrhTfRNDaMcVjtV3EmVi bIOVzv5ge4eKZP3lrqiaE/NPurWd2EpbD/EfKgLHK5uA31H2zCfIxDl05Wy1qQKCw4Y6DkyBaQob mY2n73xwmdL0dslMcsoFmwaVt+B10nmnB+WRJ2exl18+k4vDBG9UnQiZmgS8+JY2a4j62rR9YZA6 gT+8Zu5xx++3mfRhfy7ZGZHJj2RWTmgo7m502Zo+gvjtSOUDcbVCQJ43a7ZMNDFRKOLTfbZyyk/T bEJRarOOlh1+iVfUvjT4sXj8PyTQCcgRBAI54lmJUO6SssUewImkIZ/oYnfH2YIDXjPK2Rcx2IZH 3UNFxG5LfGIgkqrNN+YvYbfyhUAE8YdBLJsD0HgtZaw+zEAdi0BMwfdaFoac8CObuuiD5FegHvVT 2Mxvh2n6jHH8jw0E0IrvR62aQg8YnG1iYHz3bTAgVCpQIiYYLkt8LS8FA/4HEVwzziIA8M8nInSp 2afebasi//UDLz785HrTC6NI9sglfWEfsYPWQEZzgR8rJM9MpnBbl7c5cIwAmjUjAABR4fzakmQ= ) nwtrb.gov. 10800 IN RRSIG ( DNSKEY 5 2 10800 20200223005901 20200124005901 19812 nwtrb.gov. REB4MbBMGGtnI2iHQQMENeKTGtQ5E3kJ6UJsCgJ8sZka0IbZdapcyBc7B321AgIgFOOjGwMNAzZI fNp6l3jBvWBunrUU+HpM8JmqnvVylpbSD0uUoWemYMFttHIEmjl5REUCAKODs3s1YaBY+i0TbA4U sWoOYZklMA5S38JnUB0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for NWTRB.GOV
	nwtrb.gov. 10800 IN DNSKEY ( 257 3 5 AwEAAbLhES1xEHmxpPi03ZNeH0gQQYdp2C3MdYHMWpWwDDxdJ81Yg3+0i+iu30/jhoRDUaFPVwiq /GABpv1txxYQVGUv8hyJ0oldqz2u6Sp5gQEfH7sCrXf2ZV9jJCE2z8s/1gWKs5TY3Q8Uq1ChIrcg DdiVVAbyKaAr4eVQwdnNSmQg0UYJWAqmYOqwmUdGdBMqw4ICVklpySBgSkmvka/VzImjIBdlqjm4 W73n6Q+ob63sBI93Wfh1B3aU+pKk8wvBfIr+R1dBeN1HpH6mfzYRa7qBW6cKj6R6tXvD+jv/+XKP NBdZ4SuKLaVSGdfnSLZWvXq7Fz7/oLoRT6sK1qeGHN+DhKzoLwGqRd27gd7vGt5NyhWJC3Z/kwGT AE8Q5QHzZG87hIkMwBGpDGU/nFb7clz41lTiP5+snqSY9xVxOqcFSnY6H6id6yrYiDimm2+caeVe R+9RMPZefHb2eP1U0A3broolSTaF8aSMSqU5tzbgUpNCLdz5QKtXPy1GkHJlXNJwKZvYxikJw5oY E4l1w3WXPEEsNuuYHcVvCXzOxbIAkqETsUxxw0IWrMc1HZgcCkwk9miWpwkl1y3DRacJihaBdxEs 3jJ5ZfzBFIYvVm/VtPrdhAXzANcLS64lhV/bLL1aEAdgxmSHNvJ0KMAP8bsjjHtiNmn3Oyt0uPq1 3bQ/ ) ; Key ID = 14002
	`nwtrb.gov. 10800 IN DNSKEY ( 256 3 5 AwEAAcWVi2xWw0tWK3OzMW8rViNm4u7+xg5tGa9hu9r6C1jRKbyfQypgAqpaBL/bKItRjma3WLP4 jDcDgrZsh2TlTFPP4wdAQvGcucmc4gtYT7qnQsAPFkbw5Tah9l9/D7kjeQJgx74QInINgOWVnnh1 8cu94T45dtrcYy5L6unxev+D ) ; Key ID = 19812`
	DNSKEY=14002/SEP is now in the chain-of-trust
	DS=14002/SHA-256 verifies DNSKEY=14002/SEP
	DS=14002/SHA-1 verifies DNSKEY=14002/SEP
	Found 2 RRSIGs over DNSKEY RRset
	nwtrb.gov. 10800 IN RRSIG ( DNSKEY 5 2 10800 20200223005901 20200124005901 14002 nwtrb.gov. S2ntzHfr/fHMaOvsb0WYrH+k93vhcGqAqLFvTmzt2+kl9uQ5T/wCKigU7L1jyzz2iqlMCcLjzqlo Ee9XN/YCoooGX8K28W5orPlWSGf1IiXKDyz7eyBj29baXkbZFyCLWIvhrrhTfRNDaMcVjtV3EmVi bIOVzv5ge4eKZP3lrqiaE/NPurWd2EpbD/EfKgLHK5uA31H2zCfIxDl05Wy1qQKCw4Y6DkyBaQob mY2n73xwmdL0dslMcsoFmwaVt+B10nmnB+WRJ2exl18+k4vDBG9UnQiZmgS8+JY2a4j62rR9YZA6 gT+8Zu5xx++3mfRhfy7ZGZHJj2RWTmgo7m502Zo+gvjtSOUDcbVCQJ43a7ZMNDFRKOLTfbZyyk/T bEJRarOOlh1+iVfUvjT4sXj8PyTQCcgRBAI54lmJUO6SssUewImkIZ/oYnfH2YIDXjPK2Rcx2IZH 3UNFxG5LfGIgkqrNN+YvYbfyhUAE8YdBLJsD0HgtZaw+zEAdi0BMwfdaFoac8CObuuiD5FegHvVT 2Mxvh2n6jHH8jw0E0IrvR62aQg8YnG1iYHz3bTAgVCpQIiYYLkt8LS8FA/4HEVwzziIA8M8nInSp 2afebasi//UDLz785HrTC6NI9sglfWEfsYPWQEZzgR8rJM9MpnBbl7c5cIwAmjUjAABR4fzakmQ= )
	`nwtrb.gov. 10800 IN RRSIG ( DNSKEY 5 2 10800 20200223005901 20200124005901 19812 nwtrb.gov. REB4MbBMGGtnI2iHQQMENeKTGtQ5E3kJ6UJsCgJ8sZka0IbZdapcyBc7B321AgIgFOOjGwMNAzZI fNp6l3jBvWBunrUU+HpM8JmqnvVylpbSD0uUoWemYMFttHIEmjl5REUCAKODs3s1YaBY+i0TbA4U sWoOYZklMA5S38JnUB0= )`
	RRSIG=14002 and DNSKEY=14002/SEP verifies the DNSKEY RRset
	RRSIG=19812 and DNSKEY=19812 verifies the DNSKEY RRset
	DNSKEY=19812 is now in the chain-of-trust
	Query to ns2.NWTRB.GOV for NWTRB.GOV/A
	Received 807 bytes from 12.14.15.13
	;; Answer received from 12.14.15.13 (807 bytes) ;; HEADER SECTION ;; id = 36176 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NWTRB.GOV. IN A ;; ANSWER SECTION (2 records) nwtrb.gov. 10800 IN A 12.53.30.75 nwtrb.gov. 10800 IN RRSIG ( A 5 2 10800 20200223005901 20200124005901 19812 nwtrb.gov. gIlXmLVMvvyuBpw+CvwV+FkJZoOApS8cZtk1AHSR3M41TFh5rZG3zXAg+ZClBm2CpVgHUEtNxVbZ 01IbaJtYD2JhPJTsuTxaPB8LKTF+S1JoskFMTGwHS2lB8l4ogKs4sBIDndZCz7RhGmq/gctyK6OJ B+aNIk3Bk/QCU5361cE= ) ;; AUTHORITY SECTION (3 records) nwtrb.gov. 10800 IN NS ns3.nwtrb.gov. nwtrb.gov. 10800 IN NS ns2.nwtrb.gov. nwtrb.gov. 10800 IN RRSIG ( NS 5 2 10800 20200223005901 20200124005901 19812 nwtrb.gov. rcqfK8BH1qDk37BHwjAU82ywtNHSBS9mrOA1y2/Lvj+qTGgocg/rKL3a8SYHvBtjMMK5kHuSYhu8 1p6XFHKhotCZYgppiHy1TT2S88Qi3Tsdg7SlVULocoPjokSO/zIOCZ7HoAjoSuhDBEoC5LgwE+fJ 696DwA6TmNlFVfHOFPE= ) ;; ADDITIONAL SECTION (5 records) ns2.nwtrb.gov. 10800 IN A 12.14.15.13 ns3.nwtrb.gov. 10800 IN A 96.89.3.213 ns2.nwtrb.gov. 10800 IN RRSIG ( A 5 3 10800 20200223005901 20200124005901 19812 nwtrb.gov. SSKwzJApwTOVnQDwgKChpt2L+w5TVct8KqclmP5KQoxoyRqRDIAVGzbRTPe1XjOnISEC3ZWYNYsj fTpjzf9CGa5Qe8pRoUcbh+mwb+GXpYbY8J2PvZkvUXTunVSF8pVbWC6pQ8iNDhUl06jHSvxg+ZEw UMGuOiAyjaYFdxQgKkM= ) ns3.nwtrb.gov. 10800 IN RRSIG ( A 5 3 10800 20200223005901 20200124005901 19812 nwtrb.gov. rRNYfIJukQIkQtgq4N4v9Ql3PFne/1hxjI403hHL5LP+2uwm5YpaRI7V+AyJZN6wZ3j2J2PJAo/I INMlyey0ryoAlwH0S2qZeKTIy+d2Ti2zX1ZEfVhEdY0We3djJAzfbpTwOKe6Mj9IOXf4orPkun13 g4yMROpTACJzvk7La/c= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NWTRB.GOV is authoritative for NWTRB.GOV
	Found RRSIG signed by nwtrb.gov zone
	Query to ns3.nwtrb.gov for NWTRB.GOV/SOA
	Received 838 bytes from 96.89.3.213
	;; Answer received from 96.89.3.213 (838 bytes) ;; HEADER SECTION ;; id = 42773 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NWTRB.GOV. IN SOA ;; ANSWER SECTION (2 records) nwtrb.gov. 10800 IN SOA ( ns2.nwtrb.gov. root.NWTRB.gov. 2020012359 ;serial 3600 ;refresh 600 ;retry 1209600 ;expire 3600 ;minimum ) nwtrb.gov. 10800 IN RRSIG ( SOA 5 2 10800 20200222045901 20200123045901 19812 nwtrb.gov. YYUicbYsdAo90k1WswlKdTWh4KiQTyCwQUzE4MKKRA4VQBnhTOP1I6WLZB6fAxuk7rl6iJ+ptoxo BqvvmKk9fleprldt1Gjom20fzd4toW2oacZv5iYXub3NnNf4kyrw3Mw5q++3cIyPFZor8H7QlU+/ iiKn8etqfgN6CV/JL8U= ) ;; AUTHORITY SECTION (3 records) nwtrb.gov. 10800 IN NS ns3.nwtrb.gov. nwtrb.gov. 10800 IN NS ns2.nwtrb.gov. nwtrb.gov. 10800 IN RRSIG ( NS 5 2 10800 20200222045901 20200123045901 19812 nwtrb.gov. A+VP0sJyc3pEwoZNnaqVwN68QGJ5BsuJ5oxD5ew3eF0iqU+4z7EntnISTYHWUwrMnWAd1UCvubbt hq2AOLWSyFTnclzHz8ChyQIMi+hzsE/VvSxPcIvbeB8Y0W8V7b6/eDc5Te/RxlOfLWl2ULe0mcnB tbOgpqMvsGBPn50URsQ= ) ;; ADDITIONAL SECTION (5 records) ns2.nwtrb.gov. 10800 IN A 12.14.15.13 ns3.nwtrb.gov. 10800 IN A 96.89.3.213 ns2.nwtrb.gov. 10800 IN RRSIG ( A 5 3 10800 20200222045901 20200123045901 19812 nwtrb.gov. iKfBUomYrgoQCn+P6sXBq6l9DXyp3HD993UUwYBj+X4Jzbmd3XhZPN/QT+QfEH1cyznmGmB1PKLL AqmlzDM+24srhk+EfNZ8dqcW+frZabp9nZp6as/AW0eSk31wgZmzoFYtK36kIh0AnhZKkMPWGrlC /5Ty77/qbE2dwMeLSYY= ) ns3.nwtrb.gov. 10800 IN RRSIG ( A 5 3 10800 20200222045901 20200123045901 19812 nwtrb.gov. Ad5vQ+gSbXrk/Uhkvw3s3J8GoM6T7aF5dEqogxkqrr1V8bflx+FreZwbKbpxQYNBvIKU1UrSJxiy 12SrujOjU4HSlBdWZobHr0QT8p0+KMTFmmDw89+uh9+FV8dqGONCQLkxzLANcqSXm8y5Q/eJR4bW 0h6PLbdlCrBp1DsVbGI= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns2.nwtrb.gov for NWTRB.GOV/SOA
	Received 838 bytes from 12.14.15.13
	;; Answer received from 12.14.15.13 (838 bytes) ;; HEADER SECTION ;; id = 34903 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NWTRB.GOV. IN SOA ;; ANSWER SECTION (2 records) nwtrb.gov. 10800 IN SOA ( ns2.nwtrb.gov. root.NWTRB.gov. 2020012359 ;serial 3600 ;refresh 600 ;retry 1209600 ;expire 3600 ;minimum ) nwtrb.gov. 10800 IN RRSIG ( SOA 5 2 10800 20200223005901 20200124005901 19812 nwtrb.gov. e60FLfkTuQSo30XLOsFBflA06JK7VqC5ZBPBBsWrmO/7zC3JjKXIznQgqEoR6emQO94b5wFkmADv 9o7UaWHX+tD4lFHqikCku4oyVRkXA+aYpil/Sx5R0b4i5Wj37ktPLTYrPDkUgg/kc3Nore9W22OW Jywebbozbz0DP9oTyFY= ) ;; AUTHORITY SECTION (3 records) nwtrb.gov. 10800 IN NS ns2.nwtrb.gov. nwtrb.gov. 10800 IN NS ns3.nwtrb.gov. nwtrb.gov. 10800 IN RRSIG ( NS 5 2 10800 20200223005901 20200124005901 19812 nwtrb.gov. rcqfK8BH1qDk37BHwjAU82ywtNHSBS9mrOA1y2/Lvj+qTGgocg/rKL3a8SYHvBtjMMK5kHuSYhu8 1p6XFHKhotCZYgppiHy1TT2S88Qi3Tsdg7SlVULocoPjokSO/zIOCZ7HoAjoSuhDBEoC5LgwE+fJ 696DwA6TmNlFVfHOFPE= ) ;; ADDITIONAL SECTION (5 records) ns2.nwtrb.gov. 10800 IN A 12.14.15.13 ns3.nwtrb.gov. 10800 IN A 96.89.3.213 ns2.nwtrb.gov. 10800 IN RRSIG ( A 5 3 10800 20200223005901 20200124005901 19812 nwtrb.gov. SSKwzJApwTOVnQDwgKChpt2L+w5TVct8KqclmP5KQoxoyRqRDIAVGzbRTPe1XjOnISEC3ZWYNYsj fTpjzf9CGa5Qe8pRoUcbh+mwb+GXpYbY8J2PvZkvUXTunVSF8pVbWC6pQ8iNDhUl06jHSvxg+ZEw UMGuOiAyjaYFdxQgKkM= ) ns3.nwtrb.gov. 10800 IN RRSIG ( A 5 3 10800 20200223005901 20200124005901 19812 nwtrb.gov. rRNYfIJukQIkQtgq4N4v9Ql3PFne/1hxjI403hHL5LP+2uwm5YpaRI7V+AyJZN6wZ3j2J2PJAo/I INMlyey0ryoAlwH0S2qZeKTIy+d2Ti2zX1ZEfVhEdY0We3djJAzfbpTwOKe6Mj9IOXf4orPkun13 g4yMROpTACJzvk7La/c= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns2.NWTRB.GOV for NWTRB.GOV/A
	Received 807 bytes from 12.14.15.13
	;; Answer received from 12.14.15.13 (807 bytes) ;; HEADER SECTION ;; id = 46363 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; NWTRB.GOV. IN A ;; ANSWER SECTION (2 records) nwtrb.gov. 10800 IN A 12.53.30.75 nwtrb.gov. 10800 IN RRSIG ( A 5 2 10800 20200223005901 20200124005901 19812 nwtrb.gov. gIlXmLVMvvyuBpw+CvwV+FkJZoOApS8cZtk1AHSR3M41TFh5rZG3zXAg+ZClBm2CpVgHUEtNxVbZ 01IbaJtYD2JhPJTsuTxaPB8LKTF+S1JoskFMTGwHS2lB8l4ogKs4sBIDndZCz7RhGmq/gctyK6OJ B+aNIk3Bk/QCU5361cE= ) ;; AUTHORITY SECTION (3 records) nwtrb.gov. 10800 IN NS ns2.nwtrb.gov. nwtrb.gov. 10800 IN NS ns3.nwtrb.gov. nwtrb.gov. 10800 IN RRSIG ( NS 5 2 10800 20200223005901 20200124005901 19812 nwtrb.gov. rcqfK8BH1qDk37BHwjAU82ywtNHSBS9mrOA1y2/Lvj+qTGgocg/rKL3a8SYHvBtjMMK5kHuSYhu8 1p6XFHKhotCZYgppiHy1TT2S88Qi3Tsdg7SlVULocoPjokSO/zIOCZ7HoAjoSuhDBEoC5LgwE+fJ 696DwA6TmNlFVfHOFPE= ) ;; ADDITIONAL SECTION (5 records) ns2.nwtrb.gov. 10800 IN A 12.14.15.13 ns3.nwtrb.gov. 10800 IN A 96.89.3.213 ns2.nwtrb.gov. 10800 IN RRSIG ( A 5 3 10800 20200223005901 20200124005901 19812 nwtrb.gov. SSKwzJApwTOVnQDwgKChpt2L+w5TVct8KqclmP5KQoxoyRqRDIAVGzbRTPe1XjOnISEC3ZWYNYsj fTpjzf9CGa5Qe8pRoUcbh+mwb+GXpYbY8J2PvZkvUXTunVSF8pVbWC6pQ8iNDhUl06jHSvxg+ZEw UMGuOiAyjaYFdxQgKkM= ) ns3.nwtrb.gov. 10800 IN RRSIG ( A 5 3 10800 20200223005901 20200124005901 19812 nwtrb.gov. rRNYfIJukQIkQtgq4N4v9Ql3PFne/1hxjI403hHL5LP+2uwm5YpaRI7V+AyJZN6wZ3j2J2PJAo/I INMlyey0ryoAlwH0S2qZeKTIy+d2Ti2zX1ZEfVhEdY0We3djJAzfbpTwOKe6Mj9IOXf4orPkun13 g4yMROpTACJzvk7La/c= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NWTRB.GOV A RR has value 12.53.30.75
	Found 1 RRSIGs over A RRset
	`nwtrb.gov. 10800 IN RRSIG ( A 5 2 10800 20200223005901 20200124005901 19812 nwtrb.gov. gIlXmLVMvvyuBpw+CvwV+FkJZoOApS8cZtk1AHSR3M41TFh5rZG3zXAg+ZClBm2CpVgHUEtNxVbZ 01IbaJtYD2JhPJTsuTxaPB8LKTF+S1JoskFMTGwHS2lB8l4ogKs4sBIDndZCz7RhGmq/gctyK6OJ B+aNIk3Bk/QCU5361cE= )`
	RRSIG=19812 and DNSKEY=19812 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test NWTRB.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: