DNSSEC Analyzer - SALMONRECOVERY.GOV

Domain Name:

Time: 2020-10-31 16:28:43 UTC, NTP stratum 4

Analyzing DNSSEC problems for SALMONRECOVERY.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (864 bytes) ;; HEADER SECTION ;; id = 63315 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20201121000000 20201031000000 20326 . n9NwM1ChaxlOSRviHhrWhbUt4oM7GQSJHGyLSdgBfeZkJ/Tnwsz40GuFVJHt9WHCRri0/pp8i5YZ 6p5mEhOPzhPR/1H68EBxjDc5aoWZzRNMcgGWZiNPHr/bbdfs9+dpfNCtDWNjxi9p6VP1uAje4Tno /rC1DkDzNxtaTTGNnDp/FHzkdBAnsqAIge1dtamYeb2VmGNVCxc6YBgqERUo5N1BJCCN40jVDIZD ZuGVQJWr9TdN9VaTk5wLxRdBHRhKYn/l9ZsnyCQYgIuMxiwEQ1Npr9D/lznHNrpCM0xBm7Y5Vrcq b41k7KwwdC/u4kThE8ebvrjzp5selRUuNEuS6g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20201121000000 20201031000000 20326 . n9NwM1ChaxlOSRviHhrWhbUt4oM7GQSJHGyLSdgBfeZkJ/Tnwsz40GuFVJHt9WHCRri0/pp8i5YZ 6p5mEhOPzhPR/1H68EBxjDc5aoWZzRNMcgGWZiNPHr/bbdfs9+dpfNCtDWNjxi9p6VP1uAje4Tno /rC1DkDzNxtaTTGNnDp/FHzkdBAnsqAIge1dtamYeb2VmGNVCxc6YBgqERUo5N1BJCCN40jVDIZD ZuGVQJWr9TdN9VaTk5wLxRdBHRhKYn/l9ZsnyCQYgIuMxiwEQ1Npr9D/lznHNrpCM0xBm7Y5Vrcq b41k7KwwdC/u4kThE8ebvrjzp5selRUuNEuS6g== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=26116 is now in the chain-of-trust
	Query to l.root-servers.net for SALMONRECOVERY.GOV/A
	Received 673 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (673 bytes) ;; HEADER SECTION ;; id = 2403 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SALMONRECOVERY.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20201113050000 20201031040000 26116 . va0exI002uskAOKqR7X3BzStxbqtsCfuQahkdePIRpDaaH8duKIFVcPfuDgWFxr4ZSJ5bvG09vIB R8z4yyKaekJmOf00T1A4W54BERed1lWSxT0di64ERKqvYK8dNGjAyAVIc0fc2Cg0CCuJYs1LWHaQ 9ACclYe1Mz3QaDyiQlcG5HWR2+zFRM9f7AlfWY13fgMpuNcG4woZF6WVjB4BytI0wwHCrVuJpLVn X1yisBuF8u3CVR+F3p6JO7ekHkMcbg54oe151dC0rFGkXwAEUSBizRGI3Zc3Tc8XWiiQQJOHofLt T3wony5eCa8pvXXsRIZMslYeYGD3JAFj0oLDVA== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to h.root-servers.net for GOV/DNSKEY
	Received 658 bytes from 198.97.190.53
	;; Answer received from 198.97.190.53 (658 bytes) ;; HEADER SECTION ;; id = 9701 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20201113050000 20201031040000 26116 . va0exI002uskAOKqR7X3BzStxbqtsCfuQahkdePIRpDaaH8duKIFVcPfuDgWFxr4ZSJ5bvG09vIB R8z4yyKaekJmOf00T1A4W54BERed1lWSxT0di64ERKqvYK8dNGjAyAVIc0fc2Cg0CCuJYs1LWHaQ 9ACclYe1Mz3QaDyiQlcG5HWR2+zFRM9f7AlfWY13fgMpuNcG4woZF6WVjB4BytI0wwHCrVuJpLVn X1yisBuF8u3CVR+F3p6JO7ekHkMcbg54oe151dC0rFGkXwAEUSBizRGI3Zc3Tc8XWiiQQJOHofLt T3wony5eCa8pvXXsRIZMslYeYGD3JAFj0oLDVA== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to d.root-servers.net for GOV/DS
	Received 403 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (403 bytes) ;; HEADER SECTION ;; id = 63139 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20201113050000 20201031040000 26116 . va0exI002uskAOKqR7X3BzStxbqtsCfuQahkdePIRpDaaH8duKIFVcPfuDgWFxr4ZSJ5bvG09vIB R8z4yyKaekJmOf00T1A4W54BERed1lWSxT0di64ERKqvYK8dNGjAyAVIc0fc2Cg0CCuJYs1LWHaQ 9ACclYe1Mz3QaDyiQlcG5HWR2+zFRM9f7AlfWY13fgMpuNcG4woZF6WVjB4BytI0wwHCrVuJpLVn X1yisBuF8u3CVR+F3p6JO7ekHkMcbg54oe151dC0rFGkXwAEUSBizRGI3Zc3Tc8XWiiQQJOHofLt T3wony5eCa8pvXXsRIZMslYeYGD3JAFj0oLDVA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20201113050000 20201031040000 26116 . va0exI002uskAOKqR7X3BzStxbqtsCfuQahkdePIRpDaaH8duKIFVcPfuDgWFxr4ZSJ5bvG09vIB R8z4yyKaekJmOf00T1A4W54BERed1lWSxT0di64ERKqvYK8dNGjAyAVIc0fc2Cg0CCuJYs1LWHaQ 9ACclYe1Mz3QaDyiQlcG5HWR2+zFRM9f7AlfWY13fgMpuNcG4woZF6WVjB4BytI0wwHCrVuJpLVn X1yisBuF8u3CVR+F3p6JO7ekHkMcbg54oe151dC0rFGkXwAEUSBizRGI3Zc3Tc8XWiiQQJOHofLt T3wony5eCa8pvXXsRIZMslYeYGD3JAFj0oLDVA== )`
	RRSIG=26116 and DNSKEY=26116 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to c.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (777 bytes) ;; HEADER SECTION ;; id = 60383 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAeFoiC01j4zIdBfR1vxBGp7WmV8q6IgTQ/pvbQJhCd9+sE16txuz6M81FPFkWhTk1nsXR4tI UZLQZpvgme+q3dqWuqtFA2amB99IM9B9iq6kwSrkZNVFv6zav3eP+5BlL/OA9FNFQHXCj5qj2noA j2le7j8umVcc+4zH677ytdtIImoAY45H8wWxVrGR4kxqM54O10fPHXEPu84irfaZGrM= ) ; Key ID = 15489 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20201110190254 20201026185754 7698 gov. JGWvYsY6D/e4gdOBjSbarD335ZzmG8hwXIyjWGtJCISWCfmtoDAyoQ0BSehDq5I2kFmxReDQtHc/ RFZ7cqYe9HQPt81hrWbY78rqAphKpgOwvcjaX08YYKSN5WM66pWfMxPEehhqLyaCSFa1vNGMO2Nu vez1zeAr1TL6BBTl5ET1KrQzEtsSEBqCVnmk2G89fFUZOF12WQg1Q0dGulD9eAXls5nMI1rIB9xQ vBV9ZkOPeNCddN0Ij0ZABYz5IxW4w5HMRHu2atApBdFLJ95txt7fkr088gb9WrGQDd4NcOIAQuyf IaOns8+4bMCEnNvDEJrHWlr+EaJq+zNbeDYvXw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAeFoiC01j4zIdBfR1vxBGp7WmV8q6IgTQ/pvbQJhCd9+sE16txuz6M81FPFkWhTk1nsXR4tI UZLQZpvgme+q3dqWuqtFA2amB99IM9B9iq6kwSrkZNVFv6zav3eP+5BlL/OA9FNFQHXCj5qj2noA j2le7j8umVcc+4zH677ytdtIImoAY45H8wWxVrGR4kxqM54O10fPHXEPu84irfaZGrM= ) ; Key ID = 15489`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20201110190254 20201026185754 7698 gov. JGWvYsY6D/e4gdOBjSbarD335ZzmG8hwXIyjWGtJCISWCfmtoDAyoQ0BSehDq5I2kFmxReDQtHc/ RFZ7cqYe9HQPt81hrWbY78rqAphKpgOwvcjaX08YYKSN5WM66pWfMxPEehhqLyaCSFa1vNGMO2Nu vez1zeAr1TL6BBTl5ET1KrQzEtsSEBqCVnmk2G89fFUZOF12WQg1Q0dGulD9eAXls5nMI1rIB9xQ vBV9ZkOPeNCddN0Ij0ZABYz5IxW4w5HMRHu2atApBdFLJ95txt7fkr088gb9WrGQDd4NcOIAQuyf IaOns8+4bMCEnNvDEJrHWlr+EaJq+zNbeDYvXw== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=15489 is now in the chain-of-trust
	Query to b.gov-servers.net for SALMONRECOVERY.GOV/A
	Received 466 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (466 bytes) ;; HEADER SECTION ;; id = 28483 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SALMONRECOVERY.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) SALMONRECOVERY.GOV. 86400 IN NS ns1.bpa.GOV. SALMONRECOVERY.GOV. 86400 IN NS ns2.bpa.GOV. SALMONRECOVERY.GOV. 3600 IN DS ( 60476 8 2 d7930bef06e3ec2f627c6dd238caac1a468b5c3132bf27bce39a2390773477c7 ) SALMONRECOVERY.GOV. 3600 IN DS ( 28325 8 2 942f64c216c068663a99f4286e8476bb41dc6b471fa2129cb9b1cb396b421bd3 ) SALMONRECOVERY.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201107151008 20201031151008 15489 gov. Rxy/BjZApmx0/3d8XjrJWBNWOiz4ojxzlwIJmuHe6ghsQyQKtQRuAKw4v1QNpfGKJ5cxpQLXsUfi skbeV8xkzSF3I4mocAB/F8DAb4k1csBo/VHAv0DmiosedV/QD5EfsU46Ow6UhKsDg7qU5DfDB32I aLXU+YKtOsy4rM9AzeduCrd0Zu+KFp1THVRz3kiBmEFcPhpuwIJp6dP4q9O1jw== ) ;; ADDITIONAL SECTION (5 records) ns1.bpa.GOV. 86400 IN A 170.160.36.10 ns1.bpa.GOV. 86400 IN AAAA 2620:137:401a:10db::10 ns2.bpa.GOV. 86400 IN A 170.160.100.10 ns2.bpa.GOV. 86400 IN AAAA 2620:137:401b:10db::10 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.gov-servers.net for SALMONRECOVERY.GOV/DNSKEY
	Received 466 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (466 bytes) ;; HEADER SECTION ;; id = 11531 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SALMONRECOVERY.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) SALMONRECOVERY.GOV. 86400 IN NS ns1.bpa.GOV. SALMONRECOVERY.GOV. 86400 IN NS ns2.bpa.GOV. SALMONRECOVERY.GOV. 3600 IN DS ( 60476 8 2 d7930bef06e3ec2f627c6dd238caac1a468b5c3132bf27bce39a2390773477c7 ) SALMONRECOVERY.GOV. 3600 IN DS ( 28325 8 2 942f64c216c068663a99f4286e8476bb41dc6b471fa2129cb9b1cb396b421bd3 ) SALMONRECOVERY.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201107151008 20201031151008 15489 gov. Rxy/BjZApmx0/3d8XjrJWBNWOiz4ojxzlwIJmuHe6ghsQyQKtQRuAKw4v1QNpfGKJ5cxpQLXsUfi skbeV8xkzSF3I4mocAB/F8DAb4k1csBo/VHAv0DmiosedV/QD5EfsU46Ow6UhKsDg7qU5DfDB32I aLXU+YKtOsy4rM9AzeduCrd0Zu+KFp1THVRz3kiBmEFcPhpuwIJp6dP4q9O1jw== ) ;; ADDITIONAL SECTION (5 records) ns1.bpa.GOV. 86400 IN A 170.160.36.10 ns1.bpa.GOV. 86400 IN AAAA 2620:137:401a:10db::10 ns2.bpa.GOV. 86400 IN A 170.160.100.10 ns2.bpa.GOV. 86400 IN AAAA 2620:137:401b:10db::10 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone SALMONRECOVERY.GOV

SALMONRECOVERY.GOV

	Checking DS between GOV and SALMONRECOVERY.GOV
	Query to b.gov-servers.net for SALMONRECOVERY.GOV/DS
	Received 338 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (338 bytes) ;; HEADER SECTION ;; id = 14479 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SALMONRECOVERY.GOV. IN DS ;; ANSWER SECTION (3 records) SALMONRECOVERY.GOV. 3600 IN DS ( 60476 8 2 d7930bef06e3ec2f627c6dd238caac1a468b5c3132bf27bce39a2390773477c7 ) SALMONRECOVERY.GOV. 3600 IN DS ( 28325 8 2 942f64c216c068663a99f4286e8476bb41dc6b471fa2129cb9b1cb396b421bd3 ) SALMONRECOVERY.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201107151008 20201031151008 15489 gov. Rxy/BjZApmx0/3d8XjrJWBNWOiz4ojxzlwIJmuHe6ghsQyQKtQRuAKw4v1QNpfGKJ5cxpQLXsUfi skbeV8xkzSF3I4mocAB/F8DAb4k1csBo/VHAv0DmiosedV/QD5EfsU46Ow6UhKsDg7qU5DfDB32I aLXU+YKtOsy4rM9AzeduCrd0Zu+KFp1THVRz3kiBmEFcPhpuwIJp6dP4q9O1jw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for SALMONRECOVERY.GOV in the GOV zone
	DS=60476/SHA-256 has algorithm RSASHA256
	DS=28325/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`SALMONRECOVERY.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201107151008 20201031151008 15489 gov. Rxy/BjZApmx0/3d8XjrJWBNWOiz4ojxzlwIJmuHe6ghsQyQKtQRuAKw4v1QNpfGKJ5cxpQLXsUfi skbeV8xkzSF3I4mocAB/F8DAb4k1csBo/VHAv0DmiosedV/QD5EfsU46Ow6UhKsDg7qU5DfDB32I aLXU+YKtOsy4rM9AzeduCrd0Zu+KFp1THVRz3kiBmEFcPhpuwIJp6dP4q9O1jw== )`
	RRSIG=15489 and DNSKEY=15489 verifies the DS RRset
	DS=60476/SHA-256 is now in the chain-of-trust
	DS=28325/SHA-256 is now in the chain-of-trust
	`SALMONRECOVERY.GOV. 3600 IN DS ( 60476 8 2 d7930bef06e3ec2f627c6dd238caac1a468b5c3132bf27bce39a2390773477c7 )`
	`SALMONRECOVERY.GOV. 3600 IN DS ( 28325 8 2 942f64c216c068663a99f4286e8476bb41dc6b471fa2129cb9b1cb396b421bd3 )`
	Query to ns2.bpa.GOV for SALMONRECOVERY.GOV/DNSKEY
	Received 2375 bytes from 170.160.100.10
	;; Answer received from 170.160.100.10 (2375 bytes) ;; HEADER SECTION ;; id = 62513 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SALMONRECOVERY.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) SALMONRECOVERY.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAazEzDzCmXaG7kNurFXSp5txJ4BUZWCHI8lyujVCN1DlhWPUSvNyVwR/tn+OT3pi/ajhCBsg Ey8a226wJSg5G7iQhU+WyqJGCtawigPPe6kPXxRP+K7nPas31NV6xcdfKEmiuAGa7VLNKar9SKe2 nGfCcx0uJT5+4lurD0jUNYCVCmWWs91BKP1vlbLAyJVcpveEpNUeOtbFMIyf6VSgTEgF8xLA9nKF jnqm5OMxnowhY5Oib3UVWwAGafRjGa4EIqhzxlQVgPGhM2zKXP7LzRrRF2T1uYVAcThRAOGts0zY uTjwq7TM0zy5sl72QyuDaJpcYBE3O7l8WNuLpeyYB8s= ) ; Key ID = 28325 SALMONRECOVERY.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAeK3lo5yM6zrDQKcx+zqoxdLMYstseX5E1pQFOfbGoL2UugBdDrXh8DSw7Vm7sfDfOXZqyRW a3zlM/HdB8S8ns2TYC51l5B1OGyqnSlAyz+u/ejEG+MmyvdyUfANn6hJfbu+hTyafliHlTCR3SW/ lzQIhNpclvKgXsY533yEVZkvfblcmVZHPZm4RqLDKGsXss5y7DgDTjrW+/BPwbt5aVbzfWVXdAWn +4VVoK7UiwOIaeX8xp/WLqM6E+CUIwE1ZuUmfKEDpE8mY2oed2kBE3pQhB3KgHjsaIwdibKGPX59 wqeeykcxic25Ye89iWHou1uNTf1e4cKipfWxg4DqaQU= ) ; Key ID = 60476 SALMONRECOVERY.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbH8Gz5g/HoGWUd4SW+4v8TGR2pV0Mkm7/wkEUshsBOlrzVgl0RVw0qA8q5IRZZKGNXszxBI eFX2HpQecWsBse9uFalpB76FX9/Zo+XrZoI0g4eYBvtrsyjH5Paoj7LJyRxQ02rDpFnA7Br92gPi uhsbjdI7RAaGr1aamwPwvbSdTdshk3E/Q952WhtHY6i9yVku383cZpo1DNlCjpabAavXAGDKziTN qFffyRdqf0zKsAYPNSJnoHMrF0MsQ5DvovfYVbcd2JW9ktz/0RlpZjpk+RTyNXxxapmSZ4Nryx56 Fp4lzAbLk/qkNKYIFSJJ66dEeYU+JbtOo8uWYjCB1j8= ) ; Key ID = 58741 SALMONRECOVERY.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAesX8cM/Yo6eg45bUZgHeoDAoz4XzxOgFq2tLW0ZZopCP5SnZGganl1F+6ux0LDzs/nXeFDY E0f0hER3Iam7Gx5gY7iD8Umbm7bvvpO9/BtK0XwC7cEnlhGJPn0hHqN7ArSp+GULthaL7yibKCXe y3J/XyU+7Zc//DZtumWd8HBoqV0crKrKO2+KJPXs9rakLQvVfm3730amzUp8moV4SpnQWwIguAJq ml7QRolUvzXC61ybN6zD3PLenKQpNXO3JQsc/X1InZ3CKo5C1jdbecM+bXgggQX0EW2f4yoGZ6MC Qaw6uzK4iyvXmTQQA92fHW8VEy6fYLGG3J7Dw5kXD6E= ) ; Key ID = 60831 SALMONRECOVERY.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20201105185142 20201029175142 28325 salmonrecovery.gov. DNlEFmFt35yxqqDlB2Au6c7bHNxSHArWzLtjeYMLME23bEvvjJUD3/YkH7pTvHC409UtEYC4FJfs MIKv6bgPRxbobdRlfdb4QYFq+zBEyuhktmjY4y5i6HMyKw9A28z4bzetG9yHT37XmBfajg/K8iBY vP6wAXYt2ENk0bSUJsDBUV/1xhuq9JcEjGA3vHnXLvRRTz3L1s0tehr0tXrktGwINfIiFTeBYl7N bxTX0k94MaiP0pkVjqMOxXTCsJEjhRktY0vHw6KqHLLqB4XbuP7ge8KNzsep2QgNHFyVJtx3i4QR xzWZUPNZI2QsMpbPCId45MlvKakKhjRBnlejog== ) SALMONRECOVERY.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20201105185142 20201029175142 60476 salmonrecovery.gov. XU5XwGUYvKbHror4Aip1T8iIWo4rXZP5h8Sx8fPRqqWsEXg7SibPwgfNKTmXZTkcza8zpbcXoJOd 7FmttZhQVdjRmumGErMqT9Hd6YIp5x2M3hqnv4yyGcTluhvlbxdrh86qL/ox07SVVtJ5U499Vmab Zk0opsfiHS3p+fWEgHTMoJ+G9xdYRy6ENtAjZ6qyBJte8MmE371v30lWT06exbgg/0x16FoA5XtX K+E+s0P5Gl7KNr4m7A2i5ylgUNIC47b/iP0kqZf2MKFFqeIjwuI3ZRg1tBZR+9cn7/G5WSWCXZmz vzXMvrob+118RYyBhMcaZ1PRRIbO4hIVR5SVnw== ) SALMONRECOVERY.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20201105185142 20201029175142 58741 salmonrecovery.gov. IIPYWJA++LfIFZdfpARhh8ZqlvYosp57ClwEJqXikBrF3DKZnwv2dhI/yDVrF0tuKJ+/vHDvF773 D3+2AR8Bg183fXdgvkpxWmjRNURrZLDEF9u+3SblSOdjzceOBBtxcTfaMVl5BMKS6L2ySf9IKpRD UYMXhhZ7UK4RinSveTfcLntWEHlfa3n1L1jfhYTlL+KJEwqKV+sqo+lUHC4NQzwccIpyVioSvLY1 FVJi/i9+rBW5aHlDADLYiNbFOhi7XjYVY7/dBVKBdQr0bCEAiFaeG4bDIVG4h1LjP4JfXPaIW/CS go7OOZmr4MfNCWaFbjwisdgoL6Vv9iPTzVbiwA== ) SALMONRECOVERY.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20201105185142 20201029175142 60831 salmonrecovery.gov. Kaynx1IDaoCd2QgZVXKE76SM63txxtyJTim16/+GWjO7Y9y0nHoo4rtW3k3sFgp0uW0dJHyPTCoo 1+lGOdV8BkYe004YtMdBeJgCyW2+OpLpT0YGmrx0m/HqcVjbn3WbruWEmI8k9+SoaaRhBsI7XHZ5 oYIBqBzDlLXbdnj5dV5mI5Rnh4rwrDdpuuRB9V4HhV3jyr+jgQg5QTGm3Sx5KFARnqGbXbAn162m q0pIOilJ/OSQJxZ2dW9dq+KaK9ZOUo4T56EFZY5g+OLdiLlKci4jbDcLTW7c4A2/NhqV0G4MdeUZ 3PBpE86D8fvuJSH9TqQ9w+Rfuj/4oqIjlK5eBA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for SALMONRECOVERY.GOV
	`SALMONRECOVERY.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAazEzDzCmXaG7kNurFXSp5txJ4BUZWCHI8lyujVCN1DlhWPUSvNyVwR/tn+OT3pi/ajhCBsg Ey8a226wJSg5G7iQhU+WyqJGCtawigPPe6kPXxRP+K7nPas31NV6xcdfKEmiuAGa7VLNKar9SKe2 nGfCcx0uJT5+4lurD0jUNYCVCmWWs91BKP1vlbLAyJVcpveEpNUeOtbFMIyf6VSgTEgF8xLA9nKF jnqm5OMxnowhY5Oib3UVWwAGafRjGa4EIqhzxlQVgPGhM2zKXP7LzRrRF2T1uYVAcThRAOGts0zY uTjwq7TM0zy5sl72QyuDaJpcYBE3O7l8WNuLpeyYB8s= ) ; Key ID = 28325`
	`SALMONRECOVERY.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAeK3lo5yM6zrDQKcx+zqoxdLMYstseX5E1pQFOfbGoL2UugBdDrXh8DSw7Vm7sfDfOXZqyRW a3zlM/HdB8S8ns2TYC51l5B1OGyqnSlAyz+u/ejEG+MmyvdyUfANn6hJfbu+hTyafliHlTCR3SW/ lzQIhNpclvKgXsY533yEVZkvfblcmVZHPZm4RqLDKGsXss5y7DgDTjrW+/BPwbt5aVbzfWVXdAWn +4VVoK7UiwOIaeX8xp/WLqM6E+CUIwE1ZuUmfKEDpE8mY2oed2kBE3pQhB3KgHjsaIwdibKGPX59 wqeeykcxic25Ye89iWHou1uNTf1e4cKipfWxg4DqaQU= ) ; Key ID = 60476`
	`SALMONRECOVERY.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbH8Gz5g/HoGWUd4SW+4v8TGR2pV0Mkm7/wkEUshsBOlrzVgl0RVw0qA8q5IRZZKGNXszxBI eFX2HpQecWsBse9uFalpB76FX9/Zo+XrZoI0g4eYBvtrsyjH5Paoj7LJyRxQ02rDpFnA7Br92gPi uhsbjdI7RAaGr1aamwPwvbSdTdshk3E/Q952WhtHY6i9yVku383cZpo1DNlCjpabAavXAGDKziTN qFffyRdqf0zKsAYPNSJnoHMrF0MsQ5DvovfYVbcd2JW9ktz/0RlpZjpk+RTyNXxxapmSZ4Nryx56 Fp4lzAbLk/qkNKYIFSJJ66dEeYU+JbtOo8uWYjCB1j8= ) ; Key ID = 58741`
	`SALMONRECOVERY.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAesX8cM/Yo6eg45bUZgHeoDAoz4XzxOgFq2tLW0ZZopCP5SnZGganl1F+6ux0LDzs/nXeFDY E0f0hER3Iam7Gx5gY7iD8Umbm7bvvpO9/BtK0XwC7cEnlhGJPn0hHqN7ArSp+GULthaL7yibKCXe y3J/XyU+7Zc//DZtumWd8HBoqV0crKrKO2+KJPXs9rakLQvVfm3730amzUp8moV4SpnQWwIguAJq ml7QRolUvzXC61ybN6zD3PLenKQpNXO3JQsc/X1InZ3CKo5C1jdbecM+bXgggQX0EW2f4yoGZ6MC Qaw6uzK4iyvXmTQQA92fHW8VEy6fYLGG3J7Dw5kXD6E= ) ; Key ID = 60831`
	DNSKEY=28325/SEP is now in the chain-of-trust
	DS=28325/SHA-256 verifies DNSKEY=28325/SEP
	DNSKEY=60476/SEP is now in the chain-of-trust
	DS=60476/SHA-256 verifies DNSKEY=60476/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`SALMONRECOVERY.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20201105185142 20201029175142 28325 salmonrecovery.gov. DNlEFmFt35yxqqDlB2Au6c7bHNxSHArWzLtjeYMLME23bEvvjJUD3/YkH7pTvHC409UtEYC4FJfs MIKv6bgPRxbobdRlfdb4QYFq+zBEyuhktmjY4y5i6HMyKw9A28z4bzetG9yHT37XmBfajg/K8iBY vP6wAXYt2ENk0bSUJsDBUV/1xhuq9JcEjGA3vHnXLvRRTz3L1s0tehr0tXrktGwINfIiFTeBYl7N bxTX0k94MaiP0pkVjqMOxXTCsJEjhRktY0vHw6KqHLLqB4XbuP7ge8KNzsep2QgNHFyVJtx3i4QR xzWZUPNZI2QsMpbPCId45MlvKakKhjRBnlejog== )`
	`SALMONRECOVERY.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20201105185142 20201029175142 60476 salmonrecovery.gov. XU5XwGUYvKbHror4Aip1T8iIWo4rXZP5h8Sx8fPRqqWsEXg7SibPwgfNKTmXZTkcza8zpbcXoJOd 7FmttZhQVdjRmumGErMqT9Hd6YIp5x2M3hqnv4yyGcTluhvlbxdrh86qL/ox07SVVtJ5U499Vmab Zk0opsfiHS3p+fWEgHTMoJ+G9xdYRy6ENtAjZ6qyBJte8MmE371v30lWT06exbgg/0x16FoA5XtX K+E+s0P5Gl7KNr4m7A2i5ylgUNIC47b/iP0kqZf2MKFFqeIjwuI3ZRg1tBZR+9cn7/G5WSWCXZmz vzXMvrob+118RYyBhMcaZ1PRRIbO4hIVR5SVnw== )`
	`SALMONRECOVERY.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20201105185142 20201029175142 58741 salmonrecovery.gov. IIPYWJA++LfIFZdfpARhh8ZqlvYosp57ClwEJqXikBrF3DKZnwv2dhI/yDVrF0tuKJ+/vHDvF773 D3+2AR8Bg183fXdgvkpxWmjRNURrZLDEF9u+3SblSOdjzceOBBtxcTfaMVl5BMKS6L2ySf9IKpRD UYMXhhZ7UK4RinSveTfcLntWEHlfa3n1L1jfhYTlL+KJEwqKV+sqo+lUHC4NQzwccIpyVioSvLY1 FVJi/i9+rBW5aHlDADLYiNbFOhi7XjYVY7/dBVKBdQr0bCEAiFaeG4bDIVG4h1LjP4JfXPaIW/CS go7OOZmr4MfNCWaFbjwisdgoL6Vv9iPTzVbiwA== )`
	`SALMONRECOVERY.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20201105185142 20201029175142 60831 salmonrecovery.gov. Kaynx1IDaoCd2QgZVXKE76SM63txxtyJTim16/+GWjO7Y9y0nHoo4rtW3k3sFgp0uW0dJHyPTCoo 1+lGOdV8BkYe004YtMdBeJgCyW2+OpLpT0YGmrx0m/HqcVjbn3WbruWEmI8k9+SoaaRhBsI7XHZ5 oYIBqBzDlLXbdnj5dV5mI5Rnh4rwrDdpuuRB9V4HhV3jyr+jgQg5QTGm3Sx5KFARnqGbXbAn162m q0pIOilJ/OSQJxZ2dW9dq+KaK9ZOUo4T56EFZY5g+OLdiLlKci4jbDcLTW7c4A2/NhqV0G4MdeUZ 3PBpE86D8fvuJSH9TqQ9w+Rfuj/4oqIjlK5eBA== )`
	RRSIG=28325 and DNSKEY=28325/SEP verifies the DNSKEY RRset
	RRSIG=60476 and DNSKEY=60476/SEP verifies the DNSKEY RRset
	RRSIG=58741 and DNSKEY=58741 verifies the DNSKEY RRset
	RRSIG=60831 and DNSKEY=60831 verifies the DNSKEY RRset
	DNSKEY=58741 is now in the chain-of-trust
	DNSKEY=60831 is now in the chain-of-trust
	Query to ns1.bpa.GOV for SALMONRECOVERY.GOV/A
	Received 1327 bytes from 170.160.36.10
	;; Answer received from 170.160.36.10 (1327 bytes) ;; HEADER SECTION ;; id = 41965 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SALMONRECOVERY.GOV. IN A ;; ANSWER SECTION (3 records) SALMONRECOVERY.GOV. 1800 IN A 107.154.146.226 SALMONRECOVERY.GOV. 1800 IN RRSIG ( A 8 2 1800 20201104192541 20201028182541 58741 salmonrecovery.gov. l4rTM9PvP2pZBBXQDFeojiXK9BOQs63KLQX+F2sIxHafIJMDxVOB/gaxf41kGH4K8Sz5iiZVWg4r on6yVkojWB7FNC2eaRAHoWKii9sS/tMjbgkMQw5rgircvSbcMUAgboMzfj9xvxMVOOBiZ97XZt3O gt1DRrmgHd3kOK/B/4b/tFELoVSVLkLm+yuVIzJQ+ot+Gz9uR3wpM7kso8cJHQIzRhixPa3t6qPk Hy2f/XMXHB5s+8jop7ewuh/06JhAD539zqCFqlLiURvQp45rkHl/UczpdsYtcqazy+X2dSCg8jnH xZs5oUX5OsZ6x41TirxDIflUp4kueE8nPCtaMQ== ) SALMONRECOVERY.GOV. 1800 IN RRSIG ( A 8 2 1800 20201105184207 20201029174207 60831 salmonrecovery.gov. bZid/FXKcaNlMO2yYPPYHg2Hsnx+Uzsrgj1kr0WKySi4N/rcVFdl+pmtdbi1f63b284HjUJ4YPIN LU8FqzgYDaw8CQTfc8pFNaqMkPALMHIWxJ3raQ+cx5x2zNQHE4aH0iaUIHdTXo/CR+0hm/cUy/I8 TmH3LgxE3/VgUJx2xuda2KNKjjKYPIkKJHz4JKoFFMbRJnhcmLTSpA82g12dDGo/JUGXvNPWsKuC dur0MDq11BPc/D/gjJiaPhknGzqpV9ctglqe85latFHr7wBSfqt+yiPh28RrK6cpc4FMZEnXfmXe /MHGV2ASj7ey3OOnrhyhtQTlWrUlhtNim6O5LA== ) ;; AUTHORITY SECTION (4 records) SALMONRECOVERY.GOV. 86400 IN NS ns1.bpa.GOV. SALMONRECOVERY.GOV. 86400 IN NS ns2.bpa.GOV. SALMONRECOVERY.GOV. 86400 IN RRSIG ( NS 8 2 86400 20201104192541 20201028182541 58741 salmonrecovery.gov. kz8PfJIl1GZeLZStzuYLzIHUIcKzA74gwR2XHhgeZIl/7hMnB2Vut3BGKg6fjC35t89/R8jauYFY D7NpmeFMrvK7mahB0gvkaDpTww9vaSPjLyxnD0+Vf6A45wPz7uArFY4iulkfTbW0qTg7vdx+HEiM BxcxcVef3J8MJje/Uisen1qA4CHPLjlVEX1eFmGWbeh/xDP2hiHllKR+gj9rW6xYKlhMIE15/knU lV9noF+td3LtcRcUVv/272PtoBCzc+WevkfVg1a7kSW4rz1bkRofHlhEJ5H+URQJVdhpAqoXAPhT +Ivt0imzIXt0WTquHjDe0W2LtLvNJf8d4aNhug== ) SALMONRECOVERY.GOV. 86400 IN RRSIG ( NS 8 2 86400 20201105183524 20201029173524 60831 salmonrecovery.gov. LVj2rEnYjOyd2RN6eaDTthzHnvq5bY7+lEOtyO/1jHdS8PZs0eL2DlTT89eV+1LYON5wYW2/UWXP bJOcTSeWiKm+7Zr+kSvJi+cJlfzmWmY3is7VNorUFZRwjEAxkAg3Gb+s6ahyEmYcg8cQbMfXfQjD HT5HnmyyhMeKE0hxu0FKEfIlQnBcDEJcENKDfLJ1QSVGUdnxPUWqMkZknhMAywdcQt8ClVDPUX9d kWNhx69dCwPsInX5cwqRtoGeuf2Gar7l1W5icp/MCW9JjQsXnbptVqasH6DJxFtWyvOUf/EKj+cO TVZdlYuNS4hG5pp3IEF7ORxaMomA+XMV7UwILw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	SALMONRECOVERY.GOV is authoritative for SALMONRECOVERY.GOV
	Found RRSIG signed by salmonrecovery.gov zone
	Query to ns2.bpa.GOV for SALMONRECOVERY.GOV/SOA
	Received 1358 bytes from 170.160.100.10
	;; Answer received from 170.160.100.10 (1358 bytes) ;; HEADER SECTION ;; id = 18641 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SALMONRECOVERY.GOV. IN SOA ;; ANSWER SECTION (3 records) SALMONRECOVERY.GOV. 43200 IN SOA ( ns1.bpa.GOV. hostmaster.bpa.GOV. 2018092102 ;serial 43200 ;refresh 3600 ;retry 1209600 ;expire 3600 ;minimum ) SALMONRECOVERY.GOV. 43200 IN RRSIG ( SOA 8 2 43200 20201105231137 20201029221137 58741 salmonrecovery.gov. otSraSXqxc46Ttf4d4xIYhkqn86Jz+DSkqF7BNE+N9bYOLSqi9QZ+6VQzw8BBLr/CdIwjmIltHUq nrroVEUf2T8hM8s7dAAhu2f1xYtce0iS8PkVZEjzZr85g+qI852bokNuTgaiQEZkm75UTG8APYS6 6QZ5IpZnoKk/sDpLruDi91VJ6U8qimxVCUn7YatmMBO3j5mQ+Z+clxRaN7JvO2VDDkAoR+dKLK/a KCC6Ot8LxSl74sZtpB4dN/BiXz5L8cjo72Eyn3LezMUD2olrW5uw/wVZ9LAB2d0mmicuPWjXm0Q6 0oXknfBNfKVXcO2RfuACPXq+sgsuC+R7M2kc1Q== ) SALMONRECOVERY.GOV. 43200 IN RRSIG ( SOA 8 2 43200 20201105231137 20201029221137 60831 salmonrecovery.gov. r15CT+gVhZNzmITHCYSjyr4myhDd2UL/Aeog5OxtqCA27qAmWgi12sWf+cUNUGOqqlCL4cInh9Xd 7etI7YbXaMuQlDRPgZDLGnHF/xagdgzK3E6gCDszcK5VLoVFdhHb7l66xQkIV8DvWZi6RHLTGYUK EytJMXBNYFs150+vDzej3Q9osXkwE7BXu3Uy3+VDRRfZFO23gyhKhtkgkM1qOrhSGwCn+2ediu81 2V35/XZ+uc3zLZPuv8mK8A1aQs/VFw+Md9Gv1mtGkzuuYzvYCFJeU8f+T2W+lX4AKDDp15DPLK9c dLoG02B3IrxSazdA3g3/p/abdiE4qibAYVWZRg== ) ;; AUTHORITY SECTION (4 records) SALMONRECOVERY.GOV. 86400 IN NS ns2.bpa.GOV. SALMONRECOVERY.GOV. 86400 IN NS ns1.bpa.GOV. SALMONRECOVERY.GOV. 86400 IN RRSIG ( NS 8 2 86400 20201104203632 20201028193632 58741 salmonrecovery.gov. NSUWtn7MrCxiycER0esw+QZ7KgP/8RbO1Y5ACXR5VkN2uHFrb7nUk8GFKb5xaEl/mZkLuaqNx+be 6NezYS/V/+qim1BD6Q0gkFLIhKKZkiQYpW4jFDV7ktZvjFd5h+qstKhaVFdHSYWQIn/38TMWdmsl b0ycmh1Y3q91IF2p1nNJqFql0lrkJhAXlEdDotyOTdd+VuasxZViGn9bysFTn0z6Fisr39mnp57I TUZy+H7QtVuLy+1fU+Phfp8V+LwyyZFSMt322FVvbraIi7Dy2BhlENdgAm6Giw2pZzird7d95zrn 6iAZKjvHHTfuHoZUm9ZZbA+87T3pIOYlCGKp1Q== ) SALMONRECOVERY.GOV. 86400 IN RRSIG ( NS 8 2 86400 20201105194547 20201029184547 60831 salmonrecovery.gov. DUG0CldZPTiJ6A7c6Po0Hwj8kHf9MxC1X9ICTfKh+AOW1+d6AI96oTbC2tNSaU3kBqOMiwKvGp6e NKM3y3zKPXfXzW3Xn06zjpsZxQHegR3AC6S+pFAYXR5ttqFHnmQFcnAEJRS3MAncS43MS0X/ZoTQ YaeJ2IAsgt9a0iI5glwvzuxl0DYWuKXPtLwNCWC2pT2szXU/+6CsGBputZiW+rlFqlb9zEh4jeYd e7mIbVXar149bDDaa06ZYB6+6KzjAcmGxL3B6VJbp/LJI8wVNW02+xXTJxldy5qiVCPNo/Z2GaGF LHiQZNspXhA2HB5KPtmI2z8Q+iWH3+eMSg+B+A== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.bpa.GOV for SALMONRECOVERY.GOV/SOA
	Received 1358 bytes from 170.160.36.10
	;; Answer received from 170.160.36.10 (1358 bytes) ;; HEADER SECTION ;; id = 10582 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SALMONRECOVERY.GOV. IN SOA ;; ANSWER SECTION (3 records) SALMONRECOVERY.GOV. 43200 IN SOA ( ns1.bpa.GOV. hostmaster.bpa.GOV. 2018092102 ;serial 43200 ;refresh 3600 ;retry 1209600 ;expire 3600 ;minimum ) SALMONRECOVERY.GOV. 43200 IN RRSIG ( SOA 8 2 43200 20201106115856 20201030105856 58741 salmonrecovery.gov. qnh7G8QCY6tsFQiQQ9CJsnKJ+nYKQq7fgZLzC+1zEjPP4y0+x3eCjKKkX2RsdHzDh107G9yowYxr hVL8SOxjuI9wrkXc5ddDfGlK+m4eLKjwqYnxVGYggtE8Cunge5LVieLnO/g+iEBw3HOJAj2ocfp/ PEe859J85MeGd2m6kTVK/o75H8layk7hw4x/eRzGP+gXB+UJjhiZiT+IPFsdoIrFxILzZq5iFwMy ItPDra8IN1a6aXh5Sn03+VZYgfADRmLbsuP3zUrtU4zwszvcpQdOX25gqOwa8FYUTUHCU+is5Vs+ 5R80e6YC+5eN6bo2FtACuq/u6Bqb0BmiTsDvzw== ) SALMONRECOVERY.GOV. 43200 IN RRSIG ( SOA 8 2 43200 20201106115856 20201030105856 60831 salmonrecovery.gov. 2oRcFyWFemHc6GOR/AmGdOUbgaAs0rqNDr34YNzRKmOQM1v+WdWRExuqVd7Mnz50RzF4fcGf4VV/ Y5clqzXmMdUdyg8UbLE3c57f0hRWW7RvKW6CA58qG8EjsMdcGNcNx9pcwJLumrfSIezvNYA58Qxg C+Pxy/JNP57Odgs2kGvuNpZHyFfKrARHlIntTQkYonluYGX8xEL8Bu5yL8NiQspLoNxa18Wlledt xU0Z/4Z1m0Kj9noYAzYfx0HoSl5OmUPLgEyX6Gn2es0131iSpdAia6/+4D9j8bOp6/2Beb41dNrt WJfOIX2+h0Syw03qLhbNIIa5e44YSHSyG6AgRw== ) ;; AUTHORITY SECTION (4 records) SALMONRECOVERY.GOV. 86400 IN NS ns2.bpa.GOV. SALMONRECOVERY.GOV. 86400 IN NS ns1.bpa.GOV. SALMONRECOVERY.GOV. 86400 IN RRSIG ( NS 8 2 86400 20201104195718 20201028185718 58741 salmonrecovery.gov. oFtTb7SXdNoZB0bNXtin+jT7+UAixuhJB9YJt5nWt7dj/mnecn3JyLij5YKg9Tmhak/7ZOAldgj5 3t+RlTb7QL1mHrNh+AlqwAoUNXFj3xetWs/+DNLUb4l230P8WMho4WrWb6wmqmg+BgsPWVgARcOT sQo8cmNeN3u1mr4NZgRX9MMK651jiV5+1N6Tx1Kj4e4Gd48vfPctgVpHrUoOccp5LI/WSNOZlExp 4rfxF4367x5nSjdlk3C3YRszOvsrytcf2NwHPypgSCzK9feYVL8jB7m5PKYHfcpl7Fb6ln/vlmn6 ADrpQOwtn6X6ShrWUgHK71mwhDpKdn1lIsiVlA== ) SALMONRECOVERY.GOV. 86400 IN RRSIG ( NS 8 2 86400 20201105191954 20201029181954 60831 salmonrecovery.gov. n2JMrUSyw6W45Ektu5/imXTRnBsISVZyn/3BYE55CNETU9EFC6vHBy37SvijtTgAwpSElPdVZRPx Kjh5q91m/iGrtOg8qbjt8Wm18nH2A/1zPvJPEI5ehkX6V9dREqPIK4MU12H0udBGHajXN+Nqme5V 4XUKeBdy11GJ2n8mrW+sc3EJefXAGkS2VJNQHZKLbJzdXOmUSZdp5Zk/gaU8AC//GmCDK0MnwyWq wEE/bfIz46uEIF4ojMuii4R0qhtX0FvenHvjURA5gKSaKGmElxucwlDjlsLrdiiCLzsu+eL5rPn7 zLCn8bLyiyvBQG7MibDk/26clk/8eNSEW8HMkA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.bpa.GOV for SALMONRECOVERY.GOV/A
	Received 1327 bytes from 170.160.36.10
	;; Answer received from 170.160.36.10 (1327 bytes) ;; HEADER SECTION ;; id = 10542 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SALMONRECOVERY.GOV. IN A ;; ANSWER SECTION (3 records) SALMONRECOVERY.GOV. 1800 IN A 107.154.146.226 SALMONRECOVERY.GOV. 1800 IN RRSIG ( A 8 2 1800 20201104192541 20201028182541 58741 salmonrecovery.gov. l4rTM9PvP2pZBBXQDFeojiXK9BOQs63KLQX+F2sIxHafIJMDxVOB/gaxf41kGH4K8Sz5iiZVWg4r on6yVkojWB7FNC2eaRAHoWKii9sS/tMjbgkMQw5rgircvSbcMUAgboMzfj9xvxMVOOBiZ97XZt3O gt1DRrmgHd3kOK/B/4b/tFELoVSVLkLm+yuVIzJQ+ot+Gz9uR3wpM7kso8cJHQIzRhixPa3t6qPk Hy2f/XMXHB5s+8jop7ewuh/06JhAD539zqCFqlLiURvQp45rkHl/UczpdsYtcqazy+X2dSCg8jnH xZs5oUX5OsZ6x41TirxDIflUp4kueE8nPCtaMQ== ) SALMONRECOVERY.GOV. 1800 IN RRSIG ( A 8 2 1800 20201105184207 20201029174207 60831 salmonrecovery.gov. bZid/FXKcaNlMO2yYPPYHg2Hsnx+Uzsrgj1kr0WKySi4N/rcVFdl+pmtdbi1f63b284HjUJ4YPIN LU8FqzgYDaw8CQTfc8pFNaqMkPALMHIWxJ3raQ+cx5x2zNQHE4aH0iaUIHdTXo/CR+0hm/cUy/I8 TmH3LgxE3/VgUJx2xuda2KNKjjKYPIkKJHz4JKoFFMbRJnhcmLTSpA82g12dDGo/JUGXvNPWsKuC dur0MDq11BPc/D/gjJiaPhknGzqpV9ctglqe85latFHr7wBSfqt+yiPh28RrK6cpc4FMZEnXfmXe /MHGV2ASj7ey3OOnrhyhtQTlWrUlhtNim6O5LA== ) ;; AUTHORITY SECTION (4 records) SALMONRECOVERY.GOV. 86400 IN NS ns2.bpa.GOV. SALMONRECOVERY.GOV. 86400 IN NS ns1.bpa.GOV. SALMONRECOVERY.GOV. 86400 IN RRSIG ( NS 8 2 86400 20201104192541 20201028182541 58741 salmonrecovery.gov. kz8PfJIl1GZeLZStzuYLzIHUIcKzA74gwR2XHhgeZIl/7hMnB2Vut3BGKg6fjC35t89/R8jauYFY D7NpmeFMrvK7mahB0gvkaDpTww9vaSPjLyxnD0+Vf6A45wPz7uArFY4iulkfTbW0qTg7vdx+HEiM BxcxcVef3J8MJje/Uisen1qA4CHPLjlVEX1eFmGWbeh/xDP2hiHllKR+gj9rW6xYKlhMIE15/knU lV9noF+td3LtcRcUVv/272PtoBCzc+WevkfVg1a7kSW4rz1bkRofHlhEJ5H+URQJVdhpAqoXAPhT +Ivt0imzIXt0WTquHjDe0W2LtLvNJf8d4aNhug== ) SALMONRECOVERY.GOV. 86400 IN RRSIG ( NS 8 2 86400 20201105183524 20201029173524 60831 salmonrecovery.gov. LVj2rEnYjOyd2RN6eaDTthzHnvq5bY7+lEOtyO/1jHdS8PZs0eL2DlTT89eV+1LYON5wYW2/UWXP bJOcTSeWiKm+7Zr+kSvJi+cJlfzmWmY3is7VNorUFZRwjEAxkAg3Gb+s6ahyEmYcg8cQbMfXfQjD HT5HnmyyhMeKE0hxu0FKEfIlQnBcDEJcENKDfLJ1QSVGUdnxPUWqMkZknhMAywdcQt8ClVDPUX9d kWNhx69dCwPsInX5cwqRtoGeuf2Gar7l1W5icp/MCW9JjQsXnbptVqasH6DJxFtWyvOUf/EKj+cO TVZdlYuNS4hG5pp3IEF7ORxaMomA+XMV7UwILw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	SALMONRECOVERY.GOV A RR has value 107.154.146.226
	Found 2 RRSIGs over A RRset
	`SALMONRECOVERY.GOV. 1800 IN RRSIG ( A 8 2 1800 20201104192541 20201028182541 58741 salmonrecovery.gov. l4rTM9PvP2pZBBXQDFeojiXK9BOQs63KLQX+F2sIxHafIJMDxVOB/gaxf41kGH4K8Sz5iiZVWg4r on6yVkojWB7FNC2eaRAHoWKii9sS/tMjbgkMQw5rgircvSbcMUAgboMzfj9xvxMVOOBiZ97XZt3O gt1DRrmgHd3kOK/B/4b/tFELoVSVLkLm+yuVIzJQ+ot+Gz9uR3wpM7kso8cJHQIzRhixPa3t6qPk Hy2f/XMXHB5s+8jop7ewuh/06JhAD539zqCFqlLiURvQp45rkHl/UczpdsYtcqazy+X2dSCg8jnH xZs5oUX5OsZ6x41TirxDIflUp4kueE8nPCtaMQ== )`
	`SALMONRECOVERY.GOV. 1800 IN RRSIG ( A 8 2 1800 20201105184207 20201029174207 60831 salmonrecovery.gov. bZid/FXKcaNlMO2yYPPYHg2Hsnx+Uzsrgj1kr0WKySi4N/rcVFdl+pmtdbi1f63b284HjUJ4YPIN LU8FqzgYDaw8CQTfc8pFNaqMkPALMHIWxJ3raQ+cx5x2zNQHE4aH0iaUIHdTXo/CR+0hm/cUy/I8 TmH3LgxE3/VgUJx2xuda2KNKjjKYPIkKJHz4JKoFFMbRJnhcmLTSpA82g12dDGo/JUGXvNPWsKuC dur0MDq11BPc/D/gjJiaPhknGzqpV9ctglqe85latFHr7wBSfqt+yiPh28RrK6cpc4FMZEnXfmXe /MHGV2ASj7ey3OOnrhyhtQTlWrUlhtNim6O5LA== )`
	RRSIG=58741 and DNSKEY=58741 verifies the A RRset
	RRSIG=60831 and DNSKEY=60831 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test SALMONRECOVERY.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: