DNSSEC Analyzer

Domain Name:

Time: 2021-01-15 23:34:26 UTC, NTP stratum 4

Analyzing DNSSEC problems for PTT.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to k.root-servers.net for ./DNSKEY
	Received 864 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (864 bytes) ;; HEADER SECTION ;; id = 27648 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbKGKkqc1VAvQr48iPf9Nd39f337MitggxF0AB9kLKRNSuq9joOEPC/R6PD/4lTzUms8U9oP +aiF0rVC2rGOKSdOLxPHRLA3ameMFT2/3bmVCFsRsn03IVTdN5VUAfczjqjmA0t9NM7bbN5oVzuQ L3P1FyQb1q6HX4M1qg+htMNEd9PdlPLMFcrUg5fcYtTr2llVkO1Xo3lAdrjmmxfGeIyQnskpwPyW 88J527DEytmgPo5KzLBYLMoL2Q41PK0ul0rs7yN+g5IG4LnJOcjew1yrmHXrp/OzrpsO4FkicufY t/ygfQKkT5HYbr/yFgeZAfaF80nYyc7wgDYxOeHdiRk= ) ; Key ID = 42351 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210201000000 20210111000000 20326 . nPlFYAyI+iUNytZu71KcMwdvR1ubjVRP6Hp7E/owRaLhHhOON4gJsezf4UoBeq75yeDBkzRA2pwD 7g6XVY/qsQM9WDuzTYQJWqvSGDj0BYF5bS482kH8Y3N/Ly/jlQCSFIlCbTjAUBHTdYZji6esQDqi Wk2SzB38ZLsxgey439JkhxUzMh5520zLCiOnuZs9Iy0KLoy4ss7R/GiQjcYEIi0zScXZXcDBr3qd 2HB/BL98F2MDeshzQ/VRimxsZ3RH3ERNPS1GurmjY/mTUZxX3ITj1C57PI2bgurv1b7dyp1zLpmZ lIz/21lQwvT3wESGF44J1YmBDheYoG44GY9RVg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbKGKkqc1VAvQr48iPf9Nd39f337MitggxF0AB9kLKRNSuq9joOEPC/R6PD/4lTzUms8U9oP +aiF0rVC2rGOKSdOLxPHRLA3ameMFT2/3bmVCFsRsn03IVTdN5VUAfczjqjmA0t9NM7bbN5oVzuQ L3P1FyQb1q6HX4M1qg+htMNEd9PdlPLMFcrUg5fcYtTr2llVkO1Xo3lAdrjmmxfGeIyQnskpwPyW 88J527DEytmgPo5KzLBYLMoL2Q41PK0ul0rs7yN+g5IG4LnJOcjew1yrmHXrp/OzrpsO4FkicufY t/ygfQKkT5HYbr/yFgeZAfaF80nYyc7wgDYxOeHdiRk= ) ; Key ID = 42351`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210201000000 20210111000000 20326 . nPlFYAyI+iUNytZu71KcMwdvR1ubjVRP6Hp7E/owRaLhHhOON4gJsezf4UoBeq75yeDBkzRA2pwD 7g6XVY/qsQM9WDuzTYQJWqvSGDj0BYF5bS482kH8Y3N/Ly/jlQCSFIlCbTjAUBHTdYZji6esQDqi Wk2SzB38ZLsxgey439JkhxUzMh5520zLCiOnuZs9Iy0KLoy4ss7R/GiQjcYEIi0zScXZXcDBr3qd 2HB/BL98F2MDeshzQ/VRimxsZ3RH3ERNPS1GurmjY/mTUZxX3ITj1C57PI2bgurv1b7dyp1zLpmZ lIz/21lQwvT3wESGF44J1YmBDheYoG44GY9RVg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=42351 is now in the chain-of-trust
	Query to f.root-servers.net for PTT.GOV/A
	Received 662 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (662 bytes) ;; HEADER SECTION ;; id = 1154 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; PTT.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20210128210000 20210115200000 42351 . j5uIQdecusd20J+nAqMgEXNBBgspo+qpnu/KAdwPh2a4JVNYJoH8l59cz9ExlGfBhWsP+JilolbG GdLxstFFzKq9gH4ga5BHMPOp57sJtkMqvpejLm+9vqpjywfI7fKjh4XSRrlDuWSHruxz2dDadedB Ov04/gcQVTqtvkegx7C9CaOHt8R/0JPCSLLgr+0eXoE+psWx0WbWCY9KBx+CvW46I6VhaERjh6ml NfDtzrN2Ad6vgYftRvMSMRARxtUcSbG+mVOxu6cLbtGyL1+l1OP/Ohjzx37BAdFvujrK6HHYUfDr /0tfBcjzpgogBvLgvppfrRjPzhacviJ3AvvmmQ== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to f.root-servers.net for GOV/DNSKEY
	Received 658 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (658 bytes) ;; HEADER SECTION ;; id = 5074 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20210128210000 20210115200000 42351 . j5uIQdecusd20J+nAqMgEXNBBgspo+qpnu/KAdwPh2a4JVNYJoH8l59cz9ExlGfBhWsP+JilolbG GdLxstFFzKq9gH4ga5BHMPOp57sJtkMqvpejLm+9vqpjywfI7fKjh4XSRrlDuWSHruxz2dDadedB Ov04/gcQVTqtvkegx7C9CaOHt8R/0JPCSLLgr+0eXoE+psWx0WbWCY9KBx+CvW46I6VhaERjh6ml NfDtzrN2Ad6vgYftRvMSMRARxtUcSbG+mVOxu6cLbtGyL1+l1OP/Ohjzx37BAdFvujrK6HHYUfDr /0tfBcjzpgogBvLgvppfrRjPzhacviJ3AvvmmQ== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to j.root-servers.net for GOV/DS
	Received 403 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (403 bytes) ;; HEADER SECTION ;; id = 20347 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20210128210000 20210115200000 42351 . j5uIQdecusd20J+nAqMgEXNBBgspo+qpnu/KAdwPh2a4JVNYJoH8l59cz9ExlGfBhWsP+JilolbG GdLxstFFzKq9gH4ga5BHMPOp57sJtkMqvpejLm+9vqpjywfI7fKjh4XSRrlDuWSHruxz2dDadedB Ov04/gcQVTqtvkegx7C9CaOHt8R/0JPCSLLgr+0eXoE+psWx0WbWCY9KBx+CvW46I6VhaERjh6ml NfDtzrN2Ad6vgYftRvMSMRARxtUcSbG+mVOxu6cLbtGyL1+l1OP/Ohjzx37BAdFvujrK6HHYUfDr /0tfBcjzpgogBvLgvppfrRjPzhacviJ3AvvmmQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20210128210000 20210115200000 42351 . j5uIQdecusd20J+nAqMgEXNBBgspo+qpnu/KAdwPh2a4JVNYJoH8l59cz9ExlGfBhWsP+JilolbG GdLxstFFzKq9gH4ga5BHMPOp57sJtkMqvpejLm+9vqpjywfI7fKjh4XSRrlDuWSHruxz2dDadedB Ov04/gcQVTqtvkegx7C9CaOHt8R/0JPCSLLgr+0eXoE+psWx0WbWCY9KBx+CvW46I6VhaERjh6ml NfDtzrN2Ad6vgYftRvMSMRARxtUcSbG+mVOxu6cLbtGyL1+l1OP/Ohjzx37BAdFvujrK6HHYUfDr /0tfBcjzpgogBvLgvppfrRjPzhacviJ3AvvmmQ== )`
	RRSIG=42351 and DNSKEY=42351 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to b.gov-servers.net for GOV/DNSKEY
	Received 957 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (957 bytes) ;; HEADER SECTION ;; id = 34309 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (4 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAaQup5BwKqvn1In1x+PzsLpFav6zsLaW7fivUq9PpXUzXn++rcjtYBS15NXm1hMAZb5FChUp 35qd7hVqdwNuT/NGFNHfEykaeWjkqBKX2mCBSiyIsK4i4TQu7CS2CgqfqR43wXFITyItTPP5wijo 9Jt4dsVTjAtNJKaXOKZ31tLaeM5C2bYqAofxX6oK3TVAZ7vFsjPqjJZtZUBMZq28BiU= ) ; Key ID = 27306 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAeFoiC01j4zIdBfR1vxBGp7WmV8q6IgTQ/pvbQJhCd9+sE16txuz6M81FPFkWhTk1nsXR4tI UZLQZpvgme+q3dqWuqtFA2amB99IM9B9iq6kwSrkZNVFv6zav3eP+5BlL/OA9FNFQHXCj5qj2noA j2le7j8umVcc+4zH677ytdtIImoAY45H8wWxVrGR4kxqM54O10fPHXEPu84irfaZGrM= ) ; Key ID = 15489 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210129200254 20210114195754 7698 gov. CGhz32kgAD2TX5Lg2j23jXXUv+RTgGyMxbh/yobXObSvJneaSKa75D5Vo/iCVbvVvp3lntOGoKnQ AD+e8tEVlaKiG2bX1u9asLn9azwmk+M5i/4vCydP31wJ4503w+7bZe1c5qg26RqVN5pudzmgUUUK msaHry0zXHrpcC941eZZhuemdKlF4XT3E6JkkAL+HyCLvqIk4rBqlShTiqUwzKj6+GbhQvuJzU+B 4ZsiuoNu1FBU2ipWi+FJ88xawWmBc+yEDZkPJFJZpdPNtonI1Cjd3H61PSXe6JRrtsLcLX/G9F+J nQo6IN7tiEONh5QAEo2RBBc1yL29N3BRDW8qMg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAaQup5BwKqvn1In1x+PzsLpFav6zsLaW7fivUq9PpXUzXn++rcjtYBS15NXm1hMAZb5FChUp 35qd7hVqdwNuT/NGFNHfEykaeWjkqBKX2mCBSiyIsK4i4TQu7CS2CgqfqR43wXFITyItTPP5wijo 9Jt4dsVTjAtNJKaXOKZ31tLaeM5C2bYqAofxX6oK3TVAZ7vFsjPqjJZtZUBMZq28BiU= ) ; Key ID = 27306`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAeFoiC01j4zIdBfR1vxBGp7WmV8q6IgTQ/pvbQJhCd9+sE16txuz6M81FPFkWhTk1nsXR4tI UZLQZpvgme+q3dqWuqtFA2amB99IM9B9iq6kwSrkZNVFv6zav3eP+5BlL/OA9FNFQHXCj5qj2noA j2le7j8umVcc+4zH677ytdtIImoAY45H8wWxVrGR4kxqM54O10fPHXEPu84irfaZGrM= ) ; Key ID = 15489`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210129200254 20210114195754 7698 gov. CGhz32kgAD2TX5Lg2j23jXXUv+RTgGyMxbh/yobXObSvJneaSKa75D5Vo/iCVbvVvp3lntOGoKnQ AD+e8tEVlaKiG2bX1u9asLn9azwmk+M5i/4vCydP31wJ4503w+7bZe1c5qg26RqVN5pudzmgUUUK msaHry0zXHrpcC941eZZhuemdKlF4XT3E6JkkAL+HyCLvqIk4rBqlShTiqUwzKj6+GbhQvuJzU+B 4ZsiuoNu1FBU2ipWi+FJ88xawWmBc+yEDZkPJFJZpdPNtonI1Cjd3H61PSXe6JRrtsLcLX/G9F+J nQo6IN7tiEONh5QAEo2RBBc1yL29N3BRDW8qMg== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=27306 is now in the chain-of-trust
	DNSKEY=15489 is now in the chain-of-trust
	Query to d.gov-servers.net for PTT.GOV/A
	Received 549 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (549 bytes) ;; HEADER SECTION ;; id = 27252 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 8 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PTT.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) PTT.GOV. 86400 IN NS dns2.gsa.GOV. PTT.GOV. 86400 IN NS dns4.gsa.GOV. PTT.GOV. 86400 IN NS dns.gsa.GOV. PTT.GOV. 86400 IN NS dns3.gsa.GOV. PTT.GOV. 86400 IN NS dns5.gsa.GOV. PTT.GOV. 3600 IN DS 14885 8 1 6e0c82b4898183f017a2330342612cbc434f72f7 PTT.GOV. 3600 IN DS ( 14885 8 2 7a12a679bb84dd9dfc1ca6a10f44a4d016e617491429c8f9c60ba33545a2ca6c ) PTT.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210122211007 20210115211007 27306 gov. XOu3rGaQOyFWWGY7mVCx9Pulkjn5uaQOm+70S2WvMDMlysxPxB7I7u4EKVKM0RhlUKw9a1sgpIE+ mO/DVGF3LIRXvNfXr+xYEyWNcn3F6YqpaR49UBqIXXVlXz4k7yGDZGbSFxcpOrzMXRsUEEsLbIyl 541DqWtCs0wglIXG9IPODigMO+mzOmKfhxtO59AdeLhYBbxElDJnWY1dzThTWg== ) ;; ADDITIONAL SECTION (8 records) dns2.gsa.GOV. 86400 IN A 159.142.150.68 dns4.gsa.GOV. 86400 IN A 13.248.149.147 dns4.gsa.GOV. 86400 IN AAAA 2600:1f14:653:bb00:1:: dns.gsa.GOV. 86400 IN A 13.248.142.184 dns.gsa.GOV. 86400 IN AAAA 2600:1f16:8f2:d500:1:: dns3.gsa.GOV. 86400 IN A 13.248.144.182 dns5.gsa.GOV. 86400 IN A 76.223.9.162 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.gov-servers.net for PTT.GOV/DNSKEY
	Received 549 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (549 bytes) ;; HEADER SECTION ;; id = 43830 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 8 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PTT.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) PTT.GOV. 86400 IN NS dns2.gsa.GOV. PTT.GOV. 86400 IN NS dns4.gsa.GOV. PTT.GOV. 86400 IN NS dns.gsa.GOV. PTT.GOV. 86400 IN NS dns3.gsa.GOV. PTT.GOV. 86400 IN NS dns5.gsa.GOV. PTT.GOV. 3600 IN DS 14885 8 1 6e0c82b4898183f017a2330342612cbc434f72f7 PTT.GOV. 3600 IN DS ( 14885 8 2 7a12a679bb84dd9dfc1ca6a10f44a4d016e617491429c8f9c60ba33545a2ca6c ) PTT.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210122211007 20210115211007 27306 gov. XOu3rGaQOyFWWGY7mVCx9Pulkjn5uaQOm+70S2WvMDMlysxPxB7I7u4EKVKM0RhlUKw9a1sgpIE+ mO/DVGF3LIRXvNfXr+xYEyWNcn3F6YqpaR49UBqIXXVlXz4k7yGDZGbSFxcpOrzMXRsUEEsLbIyl 541DqWtCs0wglIXG9IPODigMO+mzOmKfhxtO59AdeLhYBbxElDJnWY1dzThTWg== ) ;; ADDITIONAL SECTION (8 records) dns2.gsa.GOV. 86400 IN A 159.142.150.68 dns4.gsa.GOV. 86400 IN A 13.248.149.147 dns4.gsa.GOV. 86400 IN AAAA 2600:1f14:653:bb00:1:: dns.gsa.GOV. 86400 IN A 13.248.142.184 dns.gsa.GOV. 86400 IN AAAA 2600:1f16:8f2:d500:1:: dns3.gsa.GOV. 86400 IN A 13.248.144.182 dns5.gsa.GOV. 86400 IN A 76.223.9.162 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone PTT.GOV

PTT.GOV

	Checking DS between GOV and PTT.GOV
	Query to a.gov-servers.net for PTT.GOV/DS
	Received 315 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (315 bytes) ;; HEADER SECTION ;; id = 7079 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PTT.GOV. IN DS ;; ANSWER SECTION (3 records) PTT.GOV. 3600 IN DS 14885 8 1 6e0c82b4898183f017a2330342612cbc434f72f7 PTT.GOV. 3600 IN DS ( 14885 8 2 7a12a679bb84dd9dfc1ca6a10f44a4d016e617491429c8f9c60ba33545a2ca6c ) PTT.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210122211007 20210115211007 27306 gov. XOu3rGaQOyFWWGY7mVCx9Pulkjn5uaQOm+70S2WvMDMlysxPxB7I7u4EKVKM0RhlUKw9a1sgpIE+ mO/DVGF3LIRXvNfXr+xYEyWNcn3F6YqpaR49UBqIXXVlXz4k7yGDZGbSFxcpOrzMXRsUEEsLbIyl 541DqWtCs0wglIXG9IPODigMO+mzOmKfhxtO59AdeLhYBbxElDJnWY1dzThTWg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for PTT.GOV in the GOV zone
	DS=14885/SHA-1 has algorithm RSASHA256
	DS=14885/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`PTT.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210122211007 20210115211007 27306 gov. XOu3rGaQOyFWWGY7mVCx9Pulkjn5uaQOm+70S2WvMDMlysxPxB7I7u4EKVKM0RhlUKw9a1sgpIE+ mO/DVGF3LIRXvNfXr+xYEyWNcn3F6YqpaR49UBqIXXVlXz4k7yGDZGbSFxcpOrzMXRsUEEsLbIyl 541DqWtCs0wglIXG9IPODigMO+mzOmKfhxtO59AdeLhYBbxElDJnWY1dzThTWg== )`
	RRSIG=27306 and DNSKEY=27306 verifies the DS RRset
	DS=14885/SHA-1 is now in the chain-of-trust
	`PTT.GOV. 3600 IN DS 14885 8 1 6e0c82b4898183f017a2330342612cbc434f72f7`
	`PTT.GOV. 3600 IN DS ( 14885 8 2 7a12a679bb84dd9dfc1ca6a10f44a4d016e617491429c8f9c60ba33545a2ca6c )`
	Query to dns4.gsa.GOV for PTT.GOV/DNSKEY
	Received 988 bytes from 13.248.149.147
	;; Answer received from 13.248.149.147 (988 bytes) ;; HEADER SECTION ;; id = 52307 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PTT.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) ptt.gov. 1800 IN DNSKEY ( 256 3 8 AwEAAa1QyDZ+zZ4DvgynsjDkatjhqF08mQ5D7ltNfMcbByiriQ4IX/+/Jz7fqYPvk09tPRNTYkEe inzz7Tk3pw2FY7g6ThI+nlgCPRG0QuZ2Pl2mQ/6FQt8LAjaJw1yqcPN5mteNFU/Dvo1sGkou7aC+ 2dWVFWzlonUrXVHhSEYbTcfZ ) ; Key ID = 30298 ptt.gov. 1800 IN DNSKEY ( 256 3 8 AwEAAcrkNRrEfL0nYMLbZEfeuZ/5egy9sQgOkisJ+VVXRGk4mHzklSTYIeFW34jacz/+gFtgFXJS +VtzoZ3khO3t1QEnQdzR/KB1pJ2yQ0BbVr78gzNdAGPjaClZbrsvjCiNLHRVQ8BgUUyHN54FdHGL xC//ADtEM6qNxw5Z4JJqn73n ) ; Key ID = 9553 ptt.gov. 1800 IN DNSKEY ( 257 3 8 AwEAAbhvoTkEmqQHN2hiCqW1BPTezd6AS1Q47z/vVwEXJIB54jsCvrzsdxku8iiYaZ7JLwKvrqh0 GRdiFJ/XGjTIkgy+tSF9lFDT1e3wty+tYxYhjU0ZxCXs/jdNZu13AEtUv9995he2MXKNBno/Xmci 6sCxiVc/IcArLZRmhV8LZtzH ) ; Key ID = 14885 ptt.gov. 1800 IN RRSIG ( DNSKEY 8 2 1800 20210211165438 20210112164938 14885 ptt.gov. N7AnyT6USj9NbYMGUU/GfEAz4SHRiX9mMqsvPoPUqy3N0hfjvk8lGLkBC3L/7/2+N9N7PiwaT3gr tVWxXDTZLd64oqjU5+S0tNjNgR5ox3wOEDs2DvV2pSS/KIoXuQW+82uXhyYPhO/N/UHPS8nfw16e NbXpKaG/OCUjtvqAl4U= ) ptt.gov. 1800 IN RRSIG ( DNSKEY 8 2 1800 20210211165439 20210112164939 9553 ptt.gov. DHTv2P2cU5NihXm5uTR0WUoe+36XuEeanWwgPYPXJey3ymj0PxXKOEcXiR5Af1H5NFLLMRRhl2Zz QZazlX154KqL7TYn0V4JHxn+7H0K054rRM4ZpKQkGSZAOyeC0wVT6SVutYGDU48HA+NlsxFtzKl/ ivC10GTIy9Ayb1Fx98E= ) ptt.gov. 1800 IN RRSIG ( DNSKEY 8 2 1800 20210211165439 20210112164939 30298 ptt.gov. XYdOYqe8McjzIn1LS5B/VWY6A3wV1Ai/MADAg1kEfokS+BR06vv0nT/nCTF8+6vF8YutKbjpD3nK 0cDciRshzbQ4L1sJ6uuTt7iMuVcZ5F+qP68qRwDScSxDE912GWxKnbWl5WhNkcAyt3WC6JB7CBUp IyF3fR0oVNkK+ucIp38= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for PTT.GOV
	`ptt.gov. 1800 IN DNSKEY ( 256 3 8 AwEAAa1QyDZ+zZ4DvgynsjDkatjhqF08mQ5D7ltNfMcbByiriQ4IX/+/Jz7fqYPvk09tPRNTYkEe inzz7Tk3pw2FY7g6ThI+nlgCPRG0QuZ2Pl2mQ/6FQt8LAjaJw1yqcPN5mteNFU/Dvo1sGkou7aC+ 2dWVFWzlonUrXVHhSEYbTcfZ ) ; Key ID = 30298`
	`ptt.gov. 1800 IN DNSKEY ( 256 3 8 AwEAAcrkNRrEfL0nYMLbZEfeuZ/5egy9sQgOkisJ+VVXRGk4mHzklSTYIeFW34jacz/+gFtgFXJS +VtzoZ3khO3t1QEnQdzR/KB1pJ2yQ0BbVr78gzNdAGPjaClZbrsvjCiNLHRVQ8BgUUyHN54FdHGL xC//ADtEM6qNxw5Z4JJqn73n ) ; Key ID = 9553`
	`ptt.gov. 1800 IN DNSKEY ( 257 3 8 AwEAAbhvoTkEmqQHN2hiCqW1BPTezd6AS1Q47z/vVwEXJIB54jsCvrzsdxku8iiYaZ7JLwKvrqh0 GRdiFJ/XGjTIkgy+tSF9lFDT1e3wty+tYxYhjU0ZxCXs/jdNZu13AEtUv9995he2MXKNBno/Xmci 6sCxiVc/IcArLZRmhV8LZtzH ) ; Key ID = 14885`
	DNSKEY=14885/SEP is now in the chain-of-trust
	DS=14885/SHA-1 verifies DNSKEY=14885/SEP
	DS=14885/SHA-256 verifies DNSKEY=14885/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`ptt.gov. 1800 IN RRSIG ( DNSKEY 8 2 1800 20210211165438 20210112164938 14885 ptt.gov. N7AnyT6USj9NbYMGUU/GfEAz4SHRiX9mMqsvPoPUqy3N0hfjvk8lGLkBC3L/7/2+N9N7PiwaT3gr tVWxXDTZLd64oqjU5+S0tNjNgR5ox3wOEDs2DvV2pSS/KIoXuQW+82uXhyYPhO/N/UHPS8nfw16e NbXpKaG/OCUjtvqAl4U= )`
	`ptt.gov. 1800 IN RRSIG ( DNSKEY 8 2 1800 20210211165439 20210112164939 9553 ptt.gov. DHTv2P2cU5NihXm5uTR0WUoe+36XuEeanWwgPYPXJey3ymj0PxXKOEcXiR5Af1H5NFLLMRRhl2Zz QZazlX154KqL7TYn0V4JHxn+7H0K054rRM4ZpKQkGSZAOyeC0wVT6SVutYGDU48HA+NlsxFtzKl/ ivC10GTIy9Ayb1Fx98E= )`
	`ptt.gov. 1800 IN RRSIG ( DNSKEY 8 2 1800 20210211165439 20210112164939 30298 ptt.gov. XYdOYqe8McjzIn1LS5B/VWY6A3wV1Ai/MADAg1kEfokS+BR06vv0nT/nCTF8+6vF8YutKbjpD3nK 0cDciRshzbQ4L1sJ6uuTt7iMuVcZ5F+qP68qRwDScSxDE912GWxKnbWl5WhNkcAyt3WC6JB7CBUp IyF3fR0oVNkK+ucIp38= )`
	RRSIG=14885 and DNSKEY=14885/SEP verifies the DNSKEY RRset
	RRSIG=9553 and DNSKEY=9553 verifies the DNSKEY RRset
	RRSIG=30298 and DNSKEY=30298 verifies the DNSKEY RRset
	DNSKEY=30298 is now in the chain-of-trust
	DNSKEY=9553 is now in the chain-of-trust
	Query to dns4.gsa.GOV for PTT.GOV/A
	Received 846 bytes from 13.248.149.147
	;; Answer received from 13.248.149.147 (846 bytes) ;; HEADER SECTION ;; id = 13218 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PTT.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) ptt.gov. 1800 IN SOA ( dns.gsa.gov. hostmaster.gsa.gov. 629484879 ;serial 3600 ;refresh 180 ;retry 1209600 ;expire 3600 ;minimum ) ptt.gov. 1800 IN RRSIG ( SOA 8 2 1800 20210211165439 20210112164939 9553 ptt.gov. K2Cp5c5YpmUgnWCffriiunx45oAGbmeB59tVuHa3AkdDz5FJj9q5iolaEZdhzW17OM520oaFAoW5 /SqXu7ycl19+66GhxDUPPQgO/lDuZobtJ87rOCtQriNKXfdlRq0uMTr/0gJlmO1IeAd9QyXuYbki xEyfX1JbTfDtfXWq4A0= ) ptt.gov. 1800 IN RRSIG ( SOA 8 2 1800 20210211165439 20210112164939 30298 ptt.gov. o+SWl0xYwuH2yCqFsaOfrfL5+D02e5U/pOInahgr7twuhFyZD3P8rCxnc99SC9c7ZekjyDt8ksXt nK37CimMWiy8EQUB4octbOGNm4c8OCXBJGMjMIZ8InDeTAIT1TH9TzDePT3PaWyJcLGePSfoVVkK yLx+LtlwnPiyhlSGNEE= ) 55RR4VBISJKSQUL16JDGVLNQ3DOMFOIM.ptt.gov. 3600 IN NSEC3 ( 1 0 10 - 6rqa552rr6a1meetv9kqbvag14sb1voo NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) 55RR4VBISJKSQUL16JDGVLNQ3DOMFOIM.ptt.gov. 3600 IN RRSIG ( NSEC3 8 3 3600 20210211165439 20210112164939 9553 ptt.gov. ZBfn7iuxIVzxUSMo7wMF+6u6RGx43dxg1akMRuwpyZdHcoV2v/jQZPmFNEKdcMQr5+jXp4XzO6tn EOB25567bNA5iWzR0+e4reM3uea/vL8qQvREhm3R6B3L8UP+WPfiu25Oqq3OlcKqviu8w9XiOicP HcyV0FvvUj4c6DuzeBg= ) 55RR4VBISJKSQUL16JDGVLNQ3DOMFOIM.ptt.gov. 3600 IN RRSIG ( NSEC3 8 3 3600 20210211165439 20210112164939 30298 ptt.gov. jEO373jDr0S0982dV5fVdLj7dxEM1u+A/Y3RWGzc07JTcHBxQ6A+hEVWY1Px/roRJ2Op2GG4PBQA b8y7sZg/uwSXL40Wjg/2V+pFGPXLv3qE/BrZhh6cyY4yjWmtZb0JeOZyOq13MaEEIX8l1L7SmMhQ VXPtVuynHNa5kvBoxyc= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	PTT.GOV is authoritative for PTT.GOV
	Found RRSIG signed by ptt.gov zone
	Query to dns4.gsa.GOV for PTT.GOV/SOA
	Received 432 bytes from 13.248.149.147
	;; Answer received from 13.248.149.147 (432 bytes) ;; HEADER SECTION ;; id = 8821 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PTT.GOV. IN SOA ;; ANSWER SECTION (3 records) ptt.gov. 1800 IN SOA ( dns.gsa.gov. hostmaster.gsa.gov. 629484879 ;serial 3600 ;refresh 180 ;retry 1209600 ;expire 3600 ;minimum ) ptt.gov. 1800 IN RRSIG ( SOA 8 2 1800 20210211165439 20210112164939 9553 ptt.gov. K2Cp5c5YpmUgnWCffriiunx45oAGbmeB59tVuHa3AkdDz5FJj9q5iolaEZdhzW17OM520oaFAoW5 /SqXu7ycl19+66GhxDUPPQgO/lDuZobtJ87rOCtQriNKXfdlRq0uMTr/0gJlmO1IeAd9QyXuYbki xEyfX1JbTfDtfXWq4A0= ) ptt.gov. 1800 IN RRSIG ( SOA 8 2 1800 20210211165439 20210112164939 30298 ptt.gov. o+SWl0xYwuH2yCqFsaOfrfL5+D02e5U/pOInahgr7twuhFyZD3P8rCxnc99SC9c7ZekjyDt8ksXt nK37CimMWiy8EQUB4octbOGNm4c8OCXBJGMjMIZ8InDeTAIT1TH9TzDePT3PaWyJcLGePSfoVVkK yLx+LtlwnPiyhlSGNEE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns3.gsa.GOV for PTT.GOV/SOA
	Received 432 bytes from 13.248.144.182
	;; Answer received from 13.248.144.182 (432 bytes) ;; HEADER SECTION ;; id = 62957 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PTT.GOV. IN SOA ;; ANSWER SECTION (3 records) ptt.gov. 1800 IN SOA ( dns.gsa.gov. hostmaster.gsa.gov. 629484879 ;serial 3600 ;refresh 180 ;retry 1209600 ;expire 3600 ;minimum ) ptt.gov. 1800 IN RRSIG ( SOA 8 2 1800 20210211165439 20210112164939 9553 ptt.gov. K2Cp5c5YpmUgnWCffriiunx45oAGbmeB59tVuHa3AkdDz5FJj9q5iolaEZdhzW17OM520oaFAoW5 /SqXu7ycl19+66GhxDUPPQgO/lDuZobtJ87rOCtQriNKXfdlRq0uMTr/0gJlmO1IeAd9QyXuYbki xEyfX1JbTfDtfXWq4A0= ) ptt.gov. 1800 IN RRSIG ( SOA 8 2 1800 20210211165439 20210112164939 30298 ptt.gov. o+SWl0xYwuH2yCqFsaOfrfL5+D02e5U/pOInahgr7twuhFyZD3P8rCxnc99SC9c7ZekjyDt8ksXt nK37CimMWiy8EQUB4octbOGNm4c8OCXBJGMjMIZ8InDeTAIT1TH9TzDePT3PaWyJcLGePSfoVVkK yLx+LtlwnPiyhlSGNEE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns.gsa.GOV for PTT.GOV/SOA
	Received 432 bytes from 13.248.142.184
	;; Answer received from 13.248.142.184 (432 bytes) ;; HEADER SECTION ;; id = 2017 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PTT.GOV. IN SOA ;; ANSWER SECTION (3 records) ptt.gov. 1800 IN SOA ( dns.gsa.gov. hostmaster.gsa.gov. 629484879 ;serial 3600 ;refresh 180 ;retry 1209600 ;expire 3600 ;minimum ) ptt.gov. 1800 IN RRSIG ( SOA 8 2 1800 20210211165439 20210112164939 9553 ptt.gov. K2Cp5c5YpmUgnWCffriiunx45oAGbmeB59tVuHa3AkdDz5FJj9q5iolaEZdhzW17OM520oaFAoW5 /SqXu7ycl19+66GhxDUPPQgO/lDuZobtJ87rOCtQriNKXfdlRq0uMTr/0gJlmO1IeAd9QyXuYbki xEyfX1JbTfDtfXWq4A0= ) ptt.gov. 1800 IN RRSIG ( SOA 8 2 1800 20210211165439 20210112164939 30298 ptt.gov. o+SWl0xYwuH2yCqFsaOfrfL5+D02e5U/pOInahgr7twuhFyZD3P8rCxnc99SC9c7ZekjyDt8ksXt nK37CimMWiy8EQUB4octbOGNm4c8OCXBJGMjMIZ8InDeTAIT1TH9TzDePT3PaWyJcLGePSfoVVkK yLx+LtlwnPiyhlSGNEE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns5.gsa.GOV for PTT.GOV/SOA
	Received 432 bytes from 76.223.9.162
	;; Answer received from 76.223.9.162 (432 bytes) ;; HEADER SECTION ;; id = 31391 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PTT.GOV. IN SOA ;; ANSWER SECTION (3 records) ptt.gov. 1800 IN SOA ( dns.gsa.gov. hostmaster.gsa.gov. 629484879 ;serial 3600 ;refresh 180 ;retry 1209600 ;expire 3600 ;minimum ) ptt.gov. 1800 IN RRSIG ( SOA 8 2 1800 20210211165439 20210112164939 9553 ptt.gov. K2Cp5c5YpmUgnWCffriiunx45oAGbmeB59tVuHa3AkdDz5FJj9q5iolaEZdhzW17OM520oaFAoW5 /SqXu7ycl19+66GhxDUPPQgO/lDuZobtJ87rOCtQriNKXfdlRq0uMTr/0gJlmO1IeAd9QyXuYbki xEyfX1JbTfDtfXWq4A0= ) ptt.gov. 1800 IN RRSIG ( SOA 8 2 1800 20210211165439 20210112164939 30298 ptt.gov. o+SWl0xYwuH2yCqFsaOfrfL5+D02e5U/pOInahgr7twuhFyZD3P8rCxnc99SC9c7ZekjyDt8ksXt nK37CimMWiy8EQUB4octbOGNm4c8OCXBJGMjMIZ8InDeTAIT1TH9TzDePT3PaWyJcLGePSfoVVkK yLx+LtlwnPiyhlSGNEE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns2.gsa.GOV for PTT.GOV/SOA
	Received 432 bytes from 159.142.150.68
	;; Answer received from 159.142.150.68 (432 bytes) ;; HEADER SECTION ;; id = 62924 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PTT.GOV. IN SOA ;; ANSWER SECTION (3 records) ptt.gov. 1800 IN SOA ( dns.gsa.gov. hostmaster.gsa.gov. 629484879 ;serial 3600 ;refresh 180 ;retry 1209600 ;expire 3600 ;minimum ) ptt.gov. 1800 IN RRSIG ( SOA 8 2 1800 20210211165439 20210112164939 9553 ptt.gov. K2Cp5c5YpmUgnWCffriiunx45oAGbmeB59tVuHa3AkdDz5FJj9q5iolaEZdhzW17OM520oaFAoW5 /SqXu7ycl19+66GhxDUPPQgO/lDuZobtJ87rOCtQriNKXfdlRq0uMTr/0gJlmO1IeAd9QyXuYbki xEyfX1JbTfDtfXWq4A0= ) ptt.gov. 1800 IN RRSIG ( SOA 8 2 1800 20210211165439 20210112164939 30298 ptt.gov. o+SWl0xYwuH2yCqFsaOfrfL5+D02e5U/pOInahgr7twuhFyZD3P8rCxnc99SC9c7ZekjyDt8ksXt nK37CimMWiy8EQUB4octbOGNm4c8OCXBJGMjMIZ8InDeTAIT1TH9TzDePT3PaWyJcLGePSfoVVkK yLx+LtlwnPiyhlSGNEE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns4.gsa.GOV for PTT.GOV/A
	Received 846 bytes from 13.248.149.147
	;; Answer received from 13.248.149.147 (846 bytes) ;; HEADER SECTION ;; id = 51117 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PTT.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) ptt.gov. 1800 IN SOA ( dns.gsa.gov. hostmaster.gsa.gov. 629484879 ;serial 3600 ;refresh 180 ;retry 1209600 ;expire 3600 ;minimum ) ptt.gov. 1800 IN RRSIG ( SOA 8 2 1800 20210211165439 20210112164939 9553 ptt.gov. K2Cp5c5YpmUgnWCffriiunx45oAGbmeB59tVuHa3AkdDz5FJj9q5iolaEZdhzW17OM520oaFAoW5 /SqXu7ycl19+66GhxDUPPQgO/lDuZobtJ87rOCtQriNKXfdlRq0uMTr/0gJlmO1IeAd9QyXuYbki xEyfX1JbTfDtfXWq4A0= ) ptt.gov. 1800 IN RRSIG ( SOA 8 2 1800 20210211165439 20210112164939 30298 ptt.gov. o+SWl0xYwuH2yCqFsaOfrfL5+D02e5U/pOInahgr7twuhFyZD3P8rCxnc99SC9c7ZekjyDt8ksXt nK37CimMWiy8EQUB4octbOGNm4c8OCXBJGMjMIZ8InDeTAIT1TH9TzDePT3PaWyJcLGePSfoVVkK yLx+LtlwnPiyhlSGNEE= ) 55RR4VBISJKSQUL16JDGVLNQ3DOMFOIM.ptt.gov. 3600 IN NSEC3 ( 1 0 10 - 6rqa552rr6a1meetv9kqbvag14sb1voo NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) 55RR4VBISJKSQUL16JDGVLNQ3DOMFOIM.ptt.gov. 3600 IN RRSIG ( NSEC3 8 3 3600 20210211165439 20210112164939 9553 ptt.gov. ZBfn7iuxIVzxUSMo7wMF+6u6RGx43dxg1akMRuwpyZdHcoV2v/jQZPmFNEKdcMQr5+jXp4XzO6tn EOB25567bNA5iWzR0+e4reM3uea/vL8qQvREhm3R6B3L8UP+WPfiu25Oqq3OlcKqviu8w9XiOicP HcyV0FvvUj4c6DuzeBg= ) 55RR4VBISJKSQUL16JDGVLNQ3DOMFOIM.ptt.gov. 3600 IN RRSIG ( NSEC3 8 3 3600 20210211165439 20210112164939 30298 ptt.gov. jEO373jDr0S0982dV5fVdLj7dxEM1u+A/Y3RWGzc07JTcHBxQ6A+hEVWY1Px/roRJ2Op2GG4PBQA b8y7sZg/uwSXL40Wjg/2V+pFGPXLv3qE/BrZhh6cyY4yjWmtZb0JeOZyOq13MaEEIX8l1L7SmMhQ VXPtVuynHNa5kvBoxyc= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`ptt.gov. 1800 IN RRSIG ( SOA 8 2 1800 20210211165439 20210112164939 9553 ptt.gov. K2Cp5c5YpmUgnWCffriiunx45oAGbmeB59tVuHa3AkdDz5FJj9q5iolaEZdhzW17OM520oaFAoW5 /SqXu7ycl19+66GhxDUPPQgO/lDuZobtJ87rOCtQriNKXfdlRq0uMTr/0gJlmO1IeAd9QyXuYbki xEyfX1JbTfDtfXWq4A0= )`
	`ptt.gov. 1800 IN RRSIG ( SOA 8 2 1800 20210211165439 20210112164939 30298 ptt.gov. o+SWl0xYwuH2yCqFsaOfrfL5+D02e5U/pOInahgr7twuhFyZD3P8rCxnc99SC9c7ZekjyDt8ksXt nK37CimMWiy8EQUB4octbOGNm4c8OCXBJGMjMIZ8InDeTAIT1TH9TzDePT3PaWyJcLGePSfoVVkK yLx+LtlwnPiyhlSGNEE= )`
	RRSIG=9553 and DNSKEY=9553 verifies the SOA RRset
	RRSIG=30298 and DNSKEY=30298 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test PTT.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: