DNSSEC Analyzer - SALMONRECOVERY.GOV

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2018-12-13 19:49:10 UTC, NTP stratum 4

Analyzing DNSSEC problems for SALMONRECOVERY.GOV

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (1139 bytes) ;; HEADER SECTION ;; id = 61743 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAdp440E6Mz7c+Vl4sPd0lTv2Qnc85dTW64j0RDD7sS/zwxWDJ3QRES2VKDO0OXLMqVJSs2YC CSDKuZXpDPuf++YfAu0j7lzYYdWTGwyNZhEaXtMQJIKYB96pW6cRkiG2Dn8S2vvo/PxW9PKQsyLb td8PcwWglHgReBVp7kEv/Dd+3b3YMukt4jnWgDUddAySg558Zld+c9eGWkgWoOiuhg4rQRkFstMX 1pRyOSHcZuH38o1WcsT4y3eT0U/SR6TOSLIB/8Ftirux/h297oS7tCcwSPt0wwry5OFNTlfMo8v7 WGurogfk8hPipf7TTKHIi20LWen5RCsvYsQBkYGpF78= ) ; Key ID = 2134 . 172800 IN DNSKEY ( 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19036 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20181231000000 20181210000000 20326 . oZ1v3JnBSPHWf2HXeAyoqW/lTUP0FAs1tcEQOM47KD3Rb1qHySTbGhh0rTclRlm86GKUlPSiPaF3 zkJ5h46Nazo3r5iAqorjQ1FQD69AgLXpdEIrnzkC3tTTZv+h+Qi2/UosrzoPQnWj3pIdvZvcP5W2 T6nlP7PN5EP2LSeQzLxT8sOUGsBt0iDiGtqm+bN0mKxKdV4599g0+83FtubMG5oYWUBpMJ/os956 uvW/Vg2cwv3/m9X/cX38svYEcAbniXnyqT88+wqPBMA782tUu1AU1tb9QyMt0LcmsDgjrBWl38SG r/LvaNxHMrfU7ymNuEj6NeLBhNfuDEaz0zBRtQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdp440E6Mz7c+Vl4sPd0lTv2Qnc85dTW64j0RDD7sS/zwxWDJ3QRES2VKDO0OXLMqVJSs2YC CSDKuZXpDPuf++YfAu0j7lzYYdWTGwyNZhEaXtMQJIKYB96pW6cRkiG2Dn8S2vvo/PxW9PKQsyLb td8PcwWglHgReBVp7kEv/Dd+3b3YMukt4jnWgDUddAySg558Zld+c9eGWkgWoOiuhg4rQRkFstMX 1pRyOSHcZuH38o1WcsT4y3eT0U/SR6TOSLIB/8Ftirux/h297oS7tCcwSPt0wwry5OFNTlfMo8v7 WGurogfk8hPipf7TTKHIi20LWen5RCsvYsQBkYGpF78= ) ; Key ID = 2134`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19036`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=19036/SEP is now in the chain-of-trust
	DS=19036/SHA-256 verifies DNSKEY=19036/SEP
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20181231000000 20181210000000 20326 . oZ1v3JnBSPHWf2HXeAyoqW/lTUP0FAs1tcEQOM47KD3Rb1qHySTbGhh0rTclRlm86GKUlPSiPaF3 zkJ5h46Nazo3r5iAqorjQ1FQD69AgLXpdEIrnzkC3tTTZv+h+Qi2/UosrzoPQnWj3pIdvZvcP5W2 T6nlP7PN5EP2LSeQzLxT8sOUGsBt0iDiGtqm+bN0mKxKdV4599g0+83FtubMG5oYWUBpMJ/os956 uvW/Vg2cwv3/m9X/cX38svYEcAbniXnyqT88+wqPBMA782tUu1AU1tb9QyMt0LcmsDgjrBWl38SG r/LvaNxHMrfU7ymNuEj6NeLBhNfuDEaz0zBRtQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=2134 is now in the chain-of-trust
	Query to h.root-servers.net for SALMONRECOVERY.GOV/A
	Error querying h.root-servers.net/2001:500:1:0:0:0:0:53 for SALMONRECOVERY.GOV/A: 'IPv6 transport disabled'
	Received 673 bytes from 198.97.190.53
	;; Answer received from 198.97.190.53 (673 bytes) ;; HEADER SECTION ;; id = 32350 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SALMONRECOVERY.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20181226170000 20181213160000 2134 . AlZXS+cIdNYZ+wAfDsBfoS40RYu6VtRPenrMLUd+HGwdoS+IqPmH4NL/ReMyjQXsq9vyyL3y07GV drqj6pEGL7YDTzg98jtxBz5enWt6fJT2FFyltIh8vvtCJYfiuTrHzxapzizpzLocDfd6O5x7JyZe LpKud/GqZj4dL7aXMWadfx0KdoeFOqacZ/WZj8RDMUp666FUKtXr+3gO+PyCGlyJDGqN73XKwfVn ZHcOaektzwVRpB2jt9novicUq6cEWqr/g7ba8J90+nxxmsY+dljz2g665H4Ou4zyE84gKwDXJRe/ kbljOdh1epXFNmiW+JqdnQg0AC9UzBspy5Byzw== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.root-servers.net for GOV/DNSKEY
	Error querying c.root-servers.net/2001:500:2:0:0:0:0:c for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 661 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (661 bytes) ;; HEADER SECTION ;; id = 13227 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20181226170000 20181213160000 2134 . AlZXS+cIdNYZ+wAfDsBfoS40RYu6VtRPenrMLUd+HGwdoS+IqPmH4NL/ReMyjQXsq9vyyL3y07GV drqj6pEGL7YDTzg98jtxBz5enWt6fJT2FFyltIh8vvtCJYfiuTrHzxapzizpzLocDfd6O5x7JyZe LpKud/GqZj4dL7aXMWadfx0KdoeFOqacZ/WZj8RDMUp666FUKtXr+3gO+PyCGlyJDGqN73XKwfVn ZHcOaektzwVRpB2jt9novicUq6cEWqr/g7ba8J90+nxxmsY+dljz2g665H4Ou4zyE84gKwDXJRe/ kbljOdh1epXFNmiW+JqdnQg0AC9UzBspy5Byzw== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to f.root-servers.net for GOV/DS
	Error querying f.root-servers.net/2001:500:2f:0:0:0:0:f for GOV/DS: 'IPv6 transport disabled'
	Received 406 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (406 bytes) ;; HEADER SECTION ;; id = 34429 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20181226170000 20181213160000 2134 . AlZXS+cIdNYZ+wAfDsBfoS40RYu6VtRPenrMLUd+HGwdoS+IqPmH4NL/ReMyjQXsq9vyyL3y07GV drqj6pEGL7YDTzg98jtxBz5enWt6fJT2FFyltIh8vvtCJYfiuTrHzxapzizpzLocDfd6O5x7JyZe LpKud/GqZj4dL7aXMWadfx0KdoeFOqacZ/WZj8RDMUp666FUKtXr+3gO+PyCGlyJDGqN73XKwfVn ZHcOaektzwVRpB2jt9novicUq6cEWqr/g7ba8J90+nxxmsY+dljz2g665H4Ou4zyE84gKwDXJRe/ kbljOdh1epXFNmiW+JqdnQg0AC9UzBspy5Byzw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20181226170000 20181213160000 2134 . AlZXS+cIdNYZ+wAfDsBfoS40RYu6VtRPenrMLUd+HGwdoS+IqPmH4NL/ReMyjQXsq9vyyL3y07GV drqj6pEGL7YDTzg98jtxBz5enWt6fJT2FFyltIh8vvtCJYfiuTrHzxapzizpzLocDfd6O5x7JyZe LpKud/GqZj4dL7aXMWadfx0KdoeFOqacZ/WZj8RDMUp666FUKtXr+3gO+PyCGlyJDGqN73XKwfVn ZHcOaektzwVRpB2jt9novicUq6cEWqr/g7ba8J90+nxxmsY+dljz2g665H4Ou4zyE84gKwDXJRe/ kbljOdh1epXFNmiW+JqdnQg0AC9UzBspy5Byzw== )`
	RRSIG=2134 and DNSKEY=2134 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to a.gov-servers.net for GOV/DNSKEY
	Received 743 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (743 bytes) ;; HEADER SECTION ;; id = 32029 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 256 3 8 AQOzQCL1fIfPdHz2b/lMEAyj5l7JieIaa1GJ1/KDBE80I/FgASeN5ekMXj8XwPdLS38aXq4M67zu locw3A3YjP8qGvR8EZTClRKoFWfQSFyroyXq5w2GN2ir8gxXMwRcIcSg5AVK+3uGMLNRdwVXZB27 GlaqF75saOfj2hP7t2bs6Q== ) ; Key ID = 40499 GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20181223224731 20181208224231 7698 gov. Il/96qUKHNn0ZAOoV2App1UfZY1xcWWeHbsbv5fP6NDWPYyMAXR53AvffkiU6HPQtAciq1hHHgln aZ8jfWnDvffBADBaTioeblHVk9JboOUnoVITbsDBTCfZQG7EIn/nfhMy6h/1HJpdkuWshZ7eH+93 c2csPFAPAbF/8qfgixdkl4juvcDdugrXFmWC7A6ns3cjRZeCUd/RLt1SiNG7RjOndb/GGoQcAEDS X+2tJEurPUgMosqtvLk9HHvv3eLAJxy6i184vnN+jMsm1/WEkiK9nW4LCGSamux+LLBvTqfEhQE1 2zZ946dysmZh8czhq4myhgq6pZD08A4Nb7eGnw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQOzQCL1fIfPdHz2b/lMEAyj5l7JieIaa1GJ1/KDBE80I/FgASeN5ekMXj8XwPdLS38aXq4M67zu locw3A3YjP8qGvR8EZTClRKoFWfQSFyroyXq5w2GN2ir8gxXMwRcIcSg5AVK+3uGMLNRdwVXZB27 GlaqF75saOfj2hP7t2bs6Q== ) ; Key ID = 40499`
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20181223224731 20181208224231 7698 gov. Il/96qUKHNn0ZAOoV2App1UfZY1xcWWeHbsbv5fP6NDWPYyMAXR53AvffkiU6HPQtAciq1hHHgln aZ8jfWnDvffBADBaTioeblHVk9JboOUnoVITbsDBTCfZQG7EIn/nfhMy6h/1HJpdkuWshZ7eH+93 c2csPFAPAbF/8qfgixdkl4juvcDdugrXFmWC7A6ns3cjRZeCUd/RLt1SiNG7RjOndb/GGoQcAEDS X+2tJEurPUgMosqtvLk9HHvv3eLAJxy6i184vnN+jMsm1/WEkiK9nW4LCGSamux+LLBvTqfEhQE1 2zZ946dysmZh8czhq4myhgq6pZD08A4Nb7eGnw== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=40499 is now in the chain-of-trust
	Query to c.gov-servers.net for SALMONRECOVERY.GOV/A
	Received 434 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (434 bytes) ;; HEADER SECTION ;; id = 39517 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; SALMONRECOVERY.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) SALMONRECOVERY.GOV. 86400 IN NS ns1.bpa.GOV. SALMONRECOVERY.GOV. 86400 IN NS ns2.bpa.GOV. SALMONRECOVERY.GOV. 3600 IN DS ( 5602 8 2 acb9856a5da1ee91fbc3779e9c1d583fa4055d16866cd19a4ed2d671a7ec45d8 ) SALMONRECOVERY.GOV. 3600 IN DS ( 7472 8 2 93b08ae77ad96ebc1960347b3cff261476d221c3d565c7a3874573ad927be2d5 ) SALMONRECOVERY.GOV. 3600 IN RRSIG ( DS 8 2 3600 20181220161007 20181213161007 40499 gov. NO2BhEtSo0s1SvPjQax5KbrjIAQbWkbwV5iR0zPy0EJjGQg5pJOVnNEehQABXdN327szt2y/Jafs Eg8j2pxs++0PY8kP4vV+S+v4RD5F3jSaY7aa/NBmNlnp98hFA63cRACOEqcasulWD1Ezno6+LuNy W6gZAvT6C8X95y9hcI0= ) ;; ADDITIONAL SECTION (5 records) ns1.bpa.GOV. 86400 IN A 170.160.36.10 ns2.bpa.GOV. 86400 IN A 170.160.100.10 ns1.bpa.GOV. 86400 IN AAAA 2620:137:401a:10db::10 ns2.bpa.GOV. 86400 IN AAAA 2620:137:401b:10db::10 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to a.gov-servers.net for SALMONRECOVERY.GOV/DNSKEY
	Error querying a.gov-servers.net/2001:500:4431:0:0:0:2:30 for SALMONRECOVERY.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 434 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (434 bytes) ;; HEADER SECTION ;; id = 54662 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; SALMONRECOVERY.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) SALMONRECOVERY.GOV. 86400 IN NS ns1.bpa.GOV. SALMONRECOVERY.GOV. 86400 IN NS ns2.bpa.GOV. SALMONRECOVERY.GOV. 3600 IN DS ( 5602 8 2 acb9856a5da1ee91fbc3779e9c1d583fa4055d16866cd19a4ed2d671a7ec45d8 ) SALMONRECOVERY.GOV. 3600 IN DS ( 7472 8 2 93b08ae77ad96ebc1960347b3cff261476d221c3d565c7a3874573ad927be2d5 ) SALMONRECOVERY.GOV. 3600 IN RRSIG ( DS 8 2 3600 20181220161007 20181213161007 40499 gov. NO2BhEtSo0s1SvPjQax5KbrjIAQbWkbwV5iR0zPy0EJjGQg5pJOVnNEehQABXdN327szt2y/Jafs Eg8j2pxs++0PY8kP4vV+S+v4RD5F3jSaY7aa/NBmNlnp98hFA63cRACOEqcasulWD1Ezno6+LuNy W6gZAvT6C8X95y9hcI0= ) ;; ADDITIONAL SECTION (5 records) ns1.bpa.GOV. 86400 IN A 170.160.36.10 ns2.bpa.GOV. 86400 IN A 170.160.100.10 ns1.bpa.GOV. 86400 IN AAAA 2620:137:401a:10db::10 ns2.bpa.GOV. 86400 IN AAAA 2620:137:401b:10db::10 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone SALMONRECOVERY.GOV

SALMONRECOVERY.GOV

	Checking DS between GOV and SALMONRECOVERY.GOV
	Query to c.gov-servers.net for SALMONRECOVERY.GOV/DS
	Error querying c.gov-servers.net/2620:74:28:0:0:0:2:30 for SALMONRECOVERY.GOV/DS: 'IPv6 transport disabled'
	Received 306 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (306 bytes) ;; HEADER SECTION ;; id = 25913 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; SALMONRECOVERY.GOV. IN DS ;; ANSWER SECTION (3 records) SALMONRECOVERY.GOV. 3600 IN DS ( 5602 8 2 acb9856a5da1ee91fbc3779e9c1d583fa4055d16866cd19a4ed2d671a7ec45d8 ) SALMONRECOVERY.GOV. 3600 IN DS ( 7472 8 2 93b08ae77ad96ebc1960347b3cff261476d221c3d565c7a3874573ad927be2d5 ) SALMONRECOVERY.GOV. 3600 IN RRSIG ( DS 8 2 3600 20181220161007 20181213161007 40499 gov. NO2BhEtSo0s1SvPjQax5KbrjIAQbWkbwV5iR0zPy0EJjGQg5pJOVnNEehQABXdN327szt2y/Jafs Eg8j2pxs++0PY8kP4vV+S+v4RD5F3jSaY7aa/NBmNlnp98hFA63cRACOEqcasulWD1Ezno6+LuNy W6gZAvT6C8X95y9hcI0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DS records for SALMONRECOVERY.GOV in the GOV zone
	DS=5602/SHA-256 has algorithm RSASHA256
	DS=7472/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`SALMONRECOVERY.GOV. 3600 IN RRSIG ( DS 8 2 3600 20181220161007 20181213161007 40499 gov. NO2BhEtSo0s1SvPjQax5KbrjIAQbWkbwV5iR0zPy0EJjGQg5pJOVnNEehQABXdN327szt2y/Jafs Eg8j2pxs++0PY8kP4vV+S+v4RD5F3jSaY7aa/NBmNlnp98hFA63cRACOEqcasulWD1Ezno6+LuNy W6gZAvT6C8X95y9hcI0= )`
	RRSIG=40499 and DNSKEY=40499 verifies the DS RRset
	DS=5602/SHA-256 is now in the chain-of-trust
	DS=7472/SHA-256 is now in the chain-of-trust
	`SALMONRECOVERY.GOV. 3600 IN DS ( 5602 8 2 acb9856a5da1ee91fbc3779e9c1d583fa4055d16866cd19a4ed2d671a7ec45d8 )`
	`SALMONRECOVERY.GOV. 3600 IN DS ( 7472 8 2 93b08ae77ad96ebc1960347b3cff261476d221c3d565c7a3874573ad927be2d5 )`
	Query to ns2.bpa.GOV for SALMONRECOVERY.GOV/DNSKEY
	Received 1793 bytes from 170.160.100.10
	;; Answer received from 170.160.100.10 (1793 bytes) ;; HEADER SECTION ;; id = 63055 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SALMONRECOVERY.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) SALMONRECOVERY.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAcxfNH0I4bo0m4mhm6Rhaq2b3vVT+0EvmJCoLIy9AyBn0ljyNYTQCs6NFavU625sp4rMLWhI RqXnqkj8OpOUFlal79bvz4QBDGH93iSs7L6kvOp6Qk4QyMZnxu12B26hXw4LXx0G16FFB6MgPcj0 hde+rzJ51DtComWsmATehhiqUMVU78FuICwOZ50lXKwN1vs+6OBtbkx9Do2MdWC8qiehM/sS/rWI gFilEgjO3xci1ZnnC4YhYQU9PBeaX8uS9AQhs20KUW9W0mo5yt7OConcstjFnBx9aVEVnXVJq014 0WNwjVGV9UJyNh5sy89ehyxo38j5H+Z9RS0+VmmRxbs= ) ; Key ID = 46749 SALMONRECOVERY.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbv0eXH71BARmMlTvXI/cs+bKd93Cx8C0J722L0TecAZ/mi5yqvYaIHCLWRgrgkZR+bUmK3L 0HyjxV8ncuUoiyOfQPU8NsXTX5r2V5rYWXi0JQKKqSfUDuRdOhKeXkuZuSuGu6/osjGs7JRzs/cm 0YT0rRIo7KwGrvf5WaD4sAbTrwXqurxd/gyJi4htsWTh9X6MBleVsM88PhPaMRi19vPLfmX0pmrr pkTBXqxrnX3sQNJ1bTeC+x+u4j8TW+ZR3O8Tj0XEU7CBd1b1olL2IyK/YS81rroxBgfgwwrvNWAV 1ES3WU89iYFLXb4QCCQPKU/VYsc+PJMzxjIaL5TuHb0= ) ; Key ID = 44791 SALMONRECOVERY.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAZsphVUPgHhITxasCmf5XGG7RHSGJU7feTbDLEjuTaaH+aZGUoE0KuLTi1RntxbJvFNBaklE gqlbCRUWmp9FklbP7QrIHRgqiC9ebkiU/Xw4XWuUQTSIxeBcTkliHhnCOBboevGSAbi79/iAa5wS tr2v0hTclfWn+PZukxrK5uIPHXTizHGSJCNLAUPBeT7zDsXahTQJfLcEIc1WoQyCmO9NySDECedF YutwuvojttmBxMFx3eCzPMe68CzBqIK9PeHWeFagIXkdzQiYGAZ/hXJrrVorsEuSAFV7JEsH68QJ 7yk/S4Efyqd40uyeWV5BRQe5+MsQuGx+rJ6kmjod2O0= ) ; Key ID = 7472 SALMONRECOVERY.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20181216171000 20181209171000 46749 salmonrecovery.gov. NBMbpWuGMhHfIHZEw51Mkl7iJlTBL4B07PVC5l3JcETBo6GDOKheCVsx0NOBVD769VtBd+t9D94r hTBM7DrjWwGzB1xJa4bzBXGGO2g9R4uFXuO0TWOvnTxSnCthCRMaSq36TDb2LDS3ZpICtLmoHPo7 nAh/hqg27nOyn31zWDS1J/95ak8gAgPWFAm47Cz489OtasOBY4rPnzcum6SJxdA743hg2fDRcp1q 8j6kv0o5AxtQOLbP5bmnFspW9wymsagNLKbTLyzn2ipDXEhxwvvSlEXw/+U52kdZ1j5aNjW7iPSZ +8yy6jUpMER4jUuA8frfvEa1L3/QBxDSHW1hMA== ) SALMONRECOVERY.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20181216171000 20181209171000 44791 salmonrecovery.gov. Ff27D90e6tv4gR0GZJItX8qCkwz9fb6p6/Vow5uJea/0QVzqkjdfGubqk//VEfkWkh0CFBLilv1g unFZi7WLZX2IVI85G7JRHa6JIXDaIkGes775O5Rtivb4PN4jTGaBS6iZuCW43qTPdQRdTC+rft5Y Dwz1ZOfCamnamDSMxMCAOOkL9B5Xz8mthKf3PMNL8Ea4u6ly7xrNZ7xf73uWAbMafNgt42i4Tge7 TjYrUXKVCAWEKf0CzwmDVRUvLTL+9I7VqTn9ckiLuc/8+dtPI5SbJEIplTny2PNOeC752CcPfvQv 8HOTZiQNG5YLooRB8UX1t2RuZPlGqjxL1xUWfg== ) SALMONRECOVERY.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20181216171000 20181209171000 7472 salmonrecovery.gov. iwWlscVtC7QWpmtJ0pv9tnFmhrdtJz1pSSO6Crw+9ayk8Z2GL+GdSBy9s1z3sEDgPSfFN+mOSPv3 z5Zn8cRRsWgJNS/qu4e6Tn31KnpzrstqtIkacUsj4MHgrvOpw+dqij0r+iQYaRage67N8aTWyO8I ZjoAEabjtyKVHbd7fqC5r5DEO5/LW3LsxrfBGixn8Vb3I46o7RU8keIE2/iSaafAAlma+YBkjROE VL9ZVuYf8GDOxIaHSuYcOHUQG9EV9Slg8XRI+EzeI0Y+lpYtIvaWc1UmeUc3+WrHKa8/e00Yj3xC iYnv+K+BHaSvx0/zqrEOq7Pr0fAakYhopVsdQg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for SALMONRECOVERY.GOV
	`SALMONRECOVERY.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAcxfNH0I4bo0m4mhm6Rhaq2b3vVT+0EvmJCoLIy9AyBn0ljyNYTQCs6NFavU625sp4rMLWhI RqXnqkj8OpOUFlal79bvz4QBDGH93iSs7L6kvOp6Qk4QyMZnxu12B26hXw4LXx0G16FFB6MgPcj0 hde+rzJ51DtComWsmATehhiqUMVU78FuICwOZ50lXKwN1vs+6OBtbkx9Do2MdWC8qiehM/sS/rWI gFilEgjO3xci1ZnnC4YhYQU9PBeaX8uS9AQhs20KUW9W0mo5yt7OConcstjFnBx9aVEVnXVJq014 0WNwjVGV9UJyNh5sy89ehyxo38j5H+Z9RS0+VmmRxbs= ) ; Key ID = 46749`
	`SALMONRECOVERY.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbv0eXH71BARmMlTvXI/cs+bKd93Cx8C0J722L0TecAZ/mi5yqvYaIHCLWRgrgkZR+bUmK3L 0HyjxV8ncuUoiyOfQPU8NsXTX5r2V5rYWXi0JQKKqSfUDuRdOhKeXkuZuSuGu6/osjGs7JRzs/cm 0YT0rRIo7KwGrvf5WaD4sAbTrwXqurxd/gyJi4htsWTh9X6MBleVsM88PhPaMRi19vPLfmX0pmrr pkTBXqxrnX3sQNJ1bTeC+x+u4j8TW+ZR3O8Tj0XEU7CBd1b1olL2IyK/YS81rroxBgfgwwrvNWAV 1ES3WU89iYFLXb4QCCQPKU/VYsc+PJMzxjIaL5TuHb0= ) ; Key ID = 44791`
	`SALMONRECOVERY.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAZsphVUPgHhITxasCmf5XGG7RHSGJU7feTbDLEjuTaaH+aZGUoE0KuLTi1RntxbJvFNBaklE gqlbCRUWmp9FklbP7QrIHRgqiC9ebkiU/Xw4XWuUQTSIxeBcTkliHhnCOBboevGSAbi79/iAa5wS tr2v0hTclfWn+PZukxrK5uIPHXTizHGSJCNLAUPBeT7zDsXahTQJfLcEIc1WoQyCmO9NySDECedF YutwuvojttmBxMFx3eCzPMe68CzBqIK9PeHWeFagIXkdzQiYGAZ/hXJrrVorsEuSAFV7JEsH68QJ 7yk/S4Efyqd40uyeWV5BRQe5+MsQuGx+rJ6kmjod2O0= ) ; Key ID = 7472`
	DNSKEY=7472/SEP is now in the chain-of-trust
	DS=7472/SHA-256 verifies DNSKEY=7472/SEP
	DS=5602/SHA-256 is published, but a corresponding DNSKEY is not
	Found 3 RRSIGs over DNSKEY RRset
	`SALMONRECOVERY.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20181216171000 20181209171000 46749 salmonrecovery.gov. NBMbpWuGMhHfIHZEw51Mkl7iJlTBL4B07PVC5l3JcETBo6GDOKheCVsx0NOBVD769VtBd+t9D94r hTBM7DrjWwGzB1xJa4bzBXGGO2g9R4uFXuO0TWOvnTxSnCthCRMaSq36TDb2LDS3ZpICtLmoHPo7 nAh/hqg27nOyn31zWDS1J/95ak8gAgPWFAm47Cz489OtasOBY4rPnzcum6SJxdA743hg2fDRcp1q 8j6kv0o5AxtQOLbP5bmnFspW9wymsagNLKbTLyzn2ipDXEhxwvvSlEXw/+U52kdZ1j5aNjW7iPSZ +8yy6jUpMER4jUuA8frfvEa1L3/QBxDSHW1hMA== )`
	`SALMONRECOVERY.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20181216171000 20181209171000 44791 salmonrecovery.gov. Ff27D90e6tv4gR0GZJItX8qCkwz9fb6p6/Vow5uJea/0QVzqkjdfGubqk//VEfkWkh0CFBLilv1g unFZi7WLZX2IVI85G7JRHa6JIXDaIkGes775O5Rtivb4PN4jTGaBS6iZuCW43qTPdQRdTC+rft5Y Dwz1ZOfCamnamDSMxMCAOOkL9B5Xz8mthKf3PMNL8Ea4u6ly7xrNZ7xf73uWAbMafNgt42i4Tge7 TjYrUXKVCAWEKf0CzwmDVRUvLTL+9I7VqTn9ckiLuc/8+dtPI5SbJEIplTny2PNOeC752CcPfvQv 8HOTZiQNG5YLooRB8UX1t2RuZPlGqjxL1xUWfg== )`
	`SALMONRECOVERY.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20181216171000 20181209171000 7472 salmonrecovery.gov. iwWlscVtC7QWpmtJ0pv9tnFmhrdtJz1pSSO6Crw+9ayk8Z2GL+GdSBy9s1z3sEDgPSfFN+mOSPv3 z5Zn8cRRsWgJNS/qu4e6Tn31KnpzrstqtIkacUsj4MHgrvOpw+dqij0r+iQYaRage67N8aTWyO8I ZjoAEabjtyKVHbd7fqC5r5DEO5/LW3LsxrfBGixn8Vb3I46o7RU8keIE2/iSaafAAlma+YBkjROE VL9ZVuYf8GDOxIaHSuYcOHUQG9EV9Slg8XRI+EzeI0Y+lpYtIvaWc1UmeUc3+WrHKa8/e00Yj3xC iYnv+K+BHaSvx0/zqrEOq7Pr0fAakYhopVsdQg== )`
	RRSIG=46749 and DNSKEY=46749 verifies the DNSKEY RRset
	RRSIG=44791 and DNSKEY=44791 verifies the DNSKEY RRset
	RRSIG=7472 and DNSKEY=7472/SEP verifies the DNSKEY RRset
	DNSKEY=46749 is now in the chain-of-trust
	DNSKEY=44791 is now in the chain-of-trust
	Query to ns1.bpa.GOV for SALMONRECOVERY.GOV/A
	Received 1327 bytes from 170.160.36.10
	;; Answer received from 170.160.36.10 (1327 bytes) ;; HEADER SECTION ;; id = 32814 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SALMONRECOVERY.GOV. IN A ;; ANSWER SECTION (3 records) SALMONRECOVERY.GOV. 1800 IN A 107.154.146.226 SALMONRECOVERY.GOV. 1800 IN RRSIG ( A 8 2 1800 20181216163748 20181209163748 46749 salmonrecovery.gov. mDI8Tqk89oJlFrRoOfMfYYvmZnfBPjYxHUejkAdrQ/xObzeCB3/dxBgiLEyeUsjhiqPX6AbJI5pB JlHt9Rk05DqEBnwn3cu4XoKOT+BsGsmG0q5u1ST2xoxO7R5hKjGQGi+dlJLyUu9rf9flBkzMxwpE kHidor43RbO7NNVKBhnjaTqFtdWuXkfM0vGiJOLnaqXaaq07WIF3KvzSNsdj0YgXUPM0CKJY1EoO t7Kv1HbH+b3MVrbQl6HvN3/z26+fTeO2FMRLPHS39cU0O7AQ/I1orfB6U6+T+yYCeyQs3+etmp9O BE+HpeTfU3N6OhKGS9IThh+0Me2EjSOe1MR4vg== ) SALMONRECOVERY.GOV. 1800 IN RRSIG ( A 8 2 1800 20181217143748 20181210143748 44791 salmonrecovery.gov. bI5wrgF2xNhU4lw+E9YcNj4NkPUDHjjd/2CXZi64Hct1uWOfrmAJhw9H/9TfHdcZ0Bbni820mbGC 8AR2To1aL9oYHg23ugho/irQaId6HcvRklX1BmcM9R/mMSv2JOhB0ctvTGOOlUM/xoMyiDa2t/z/ aV08uEUyV2nnC7EvY3/q6Rs71PNn7bfqjgqgQ7vT+k5MZ52FYre43REu1jPjqW/zPrRkFHNpw7ak aZKtezVqa1HwMG/Hr3HdO6xsur21iuFDMbiDehAGcU1h4kN3scsXkRloe0BzkyGqntH8BvDYZsgZ pO5obmuE+wGjHA440u0Zv7+SC+moctJd3zBPmQ== ) ;; AUTHORITY SECTION (4 records) SALMONRECOVERY.GOV. 86400 IN NS ns1.bpa.GOV. SALMONRECOVERY.GOV. 86400 IN NS ns2.bpa.GOV. SALMONRECOVERY.GOV. 86400 IN RRSIG ( NS 8 2 86400 20181216163402 20181209163402 46749 salmonrecovery.gov. rBJcgdQ4742lhT7s6cwqn4Q44A8q4eaMLL65RD8cvbjKhYEBev48PMaUyVzeWJa0IyD2JhRIHjFI E8U35rznDHmh7MCYiFJYYKIDoMhtUxok7Hnh9C0yVlAqiNjCGsmmNBKiIJDN0MjYugpdv+Rnl0wM FARUnMUNmL3BWMzlTUGe31Yxl2JrhkKgkheW4wJFduoeAEU11wyMe1uN2D0B86Bnbliuv7abUAth 7aM3Qkhm3ZUvmEhawQH1XGMtgUoT0TcufJ79MXhZJlqXfD2Y2D6xixcIwgezUVjW9dFPfOMSSQoe gofDzfnAnrs9oKa7JFnr9M+lNCGlpccAu28btg== ) SALMONRECOVERY.GOV. 86400 IN RRSIG ( NS 8 2 86400 20181217143748 20181210143748 44791 salmonrecovery.gov. DU2hFchNUfZn2IyX2rGURX2/LZ5oK8fdDFpFr4ac+woxk25wN3H+AXxLK+sQ+vZdih9qH4oJmCQS 4qcYVmbn/9AHkj03aR70ZoEwf4QH2fxwz5bkBtjyrBu/X0uj84R/pqGEadl3EyGvll6qARYS+Ubg oB7xLfR++5oNVY93yQCS27dPw+aejpcLGrnYh3JVVsJuNWljvxNZXbc0Y92uUwee3rKNONarV/dL i5hndvtJerj1dKGbCHMo9P6t0ljIy9ZjPjR9Hq4WC03VRt8uO+ce82mpBB07Rax9hnMPMjhjMOiB b+gpyo0xNu6lyl3ZB6JSdjGCuMY1NtQE0z+BjA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	SALMONRECOVERY.GOV is authoritative for SALMONRECOVERY.GOV
	Found RRSIG signed by salmonrecovery.gov zone
	Query to ns2.bpa.GOV for SALMONRECOVERY.GOV/SOA
	Received 1358 bytes from 170.160.100.10
	;; Answer received from 170.160.100.10 (1358 bytes) ;; HEADER SECTION ;; id = 12764 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SALMONRECOVERY.GOV. IN SOA ;; ANSWER SECTION (3 records) SALMONRECOVERY.GOV. 43200 IN SOA ( ns1.bpa.GOV. hostmaster.bpa.GOV. 2018092102 ;serial 43200 ;refresh 3600 ;retry 1209600 ;expire 3600 ;minimum ) SALMONRECOVERY.GOV. 43200 IN RRSIG ( SOA 8 2 43200 20181218151729 20181211151729 46749 salmonrecovery.gov. bJzZPX6tOMYK2FikBsoArFNBP0uejOp8NP8aKh0mVKXD++fVqRoPvfIlMKH52L04LSwozZb51Syb s9k2oqj8CUMsssEm+wIhVNkth1Lt6DLXBTFDCza8TtjvY0I7Ze6/mr68iZTbg8Qfjb6+RIQfgxtb dT9SANNzoeBtA8MiSjeeZTq4pWysmK4kHxpEH73q97T1w3gR0TIdcrwFJJepvL9o8YUvorQYxF+W +fPTOlIWQA/0S795RSZH5jFz7OnBhvHwY6ifKXoFKfenNc9LLeCuH5UTtutFfq2qsH4IsBOJe7ij JVMbuTEuykH/X3zzZjNOT8/0oz6Os9eaRj4aSA== ) SALMONRECOVERY.GOV. 43200 IN RRSIG ( SOA 8 2 43200 20181218151729 20181211151729 44791 salmonrecovery.gov. IUTBh3+WsQNUgV+dK3jvFHBcg0Na2QqLgjJBKK2xH5KtwuN27D9FU4UzJCOCWwUXqsKhfSjpk+u0 P8O5sRUDikKgOxcj5Naaku8eZx/Wrf39Nrwo+kqTjQMNriwPNrdmJe5UmwKPOhLI0lbusNGGDj1B lFZlze2TYQ64l7wQwCdcSLqFoFEMF3xlpeFuPyYHcxOPvQsqKmXeJMYS8OTIOiszXHlMRvMsGa++ ZJYSQWrwykQIwiAan0K+0EYGX2MjGPhRHrrnHR5esdd5PUmM0tv3Loo4IQRuxbdSZwC3G82rGkwA 6C9IJz68KPc1STg58s4xipOCTezSMH5WdmpibA== ) ;; AUTHORITY SECTION (4 records) SALMONRECOVERY.GOV. 86400 IN NS ns2.bpa.GOV. SALMONRECOVERY.GOV. 86400 IN NS ns1.bpa.GOV. SALMONRECOVERY.GOV. 86400 IN RRSIG ( NS 8 2 86400 20181216143444 20181209143444 46749 salmonrecovery.gov. NxGu/yBdHI50YiKzAg+RfedXNQObK9/SrJHpEaSkU9knFpiL64i8ZV7JUQNC0SI4q4ovWQQ9ao2g p/tHF/fgl/V4d+cyLdIJHkQQMeKR6HbjoNDW5SIoqn6QqyvLxZJFrMTrwDQb7w6HaUaXRR87pylP Nhs6ra+CKIKQGEcC1NqhIxVQIkw+RTL8HYuF3hOHNyNAdnACp6eTDCh6ZwZ2eQaU13NDMu67za5u zTYgaIfY8TkCjIm65WE3kKy5W2d8812ztwZis2RthPY0QFNRjYtrnDIsBzwvfWgPCew///QrxlbH facc/nSMFIka+rRv53Jp6IHbYrxNx61GMtkgLg== ) SALMONRECOVERY.GOV. 86400 IN RRSIG ( NS 8 2 86400 20181217151409 20181210151409 44791 salmonrecovery.gov. KQLk/6sHnrldGKiK73UFhT5VcNZI0W1eAgLSKDBInDqJeb6KjEhlPmBg1ZHtdT3uTy37+on0jveB 9hRavm/LAublcH+0ApFfcN61BiUpJB9Tx6JplqlBF73EIt90ZVgu6TGhNxIKnCV3nUyVaml3bZkW 6dqWSq2TD/8p/u8kRUAO927IuE4OMrKKKpuJsJEjTh/YKgozH5fuxSYUVOL9CfY4cVTSOvk0cuQC WnCRPnCTjX7mJ7MIl+BpGHKjz7o9nGfBj3Pp7P/eSyeKsD+RvAROXUvd5pkwwRPiX0I2AUxButWe BkRzAtAHPy1PLn/CkRLvoLsrUibjPuiJuWYYYw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.bpa.GOV for SALMONRECOVERY.GOV/SOA
	Received 1358 bytes from 170.160.36.10
	;; Answer received from 170.160.36.10 (1358 bytes) ;; HEADER SECTION ;; id = 63773 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SALMONRECOVERY.GOV. IN SOA ;; ANSWER SECTION (3 records) SALMONRECOVERY.GOV. 43200 IN SOA ( ns1.bpa.GOV. hostmaster.bpa.GOV. 2018092102 ;serial 43200 ;refresh 3600 ;retry 1209600 ;expire 3600 ;minimum ) SALMONRECOVERY.GOV. 43200 IN RRSIG ( SOA 8 2 43200 20181218113749 20181211113749 46749 salmonrecovery.gov. wDmkt2bDAUAxRtJnPGrIzVafSvFpNNDc5ysvzPXxl4k//Or7CDv/8tGZGoqJMm3iwYnUipe+iRAi jWixU/487kHv8WOuZlkfsC1cJz1nSq29VyRWg2jm6TV4+RYx2RRalKcd3JgioYOvdGPrzRFWFbdr /gaW/brsCoz01/2B1WEbF7wM/7kUtKYCdBsxlu6xhn1ro/LMgHTuPsFbg5ajR7tGyJt2X/CudnEM Yr+jdNmq6smt3e/mRVaqEykq2zpUnIAJsQl/WVUx/sTGUAEwBfp9ic7J9+M9yXLHcmulngiBQ1o4 rf3UVWMtr5Mh5aWpQQw2il15dv+qi2Sb/W7+sw== ) SALMONRECOVERY.GOV. 43200 IN RRSIG ( SOA 8 2 43200 20181218113749 20181211113749 44791 salmonrecovery.gov. Db+3rOckP8EIpdFnFoj8MVOCdQSHeArTel34iW/XyLWH7fvHApgxUQbEhGgV48nrg8zefomDyHrA 84yI4XLKBp+BLXjYuA5vzhn7ewVAuK8tEGBHOw3GalJ6X4f1OgVv91vwFf1by9yJ57Pup/f4vqOq 2Ql7Q1OsGRcJSPuHAA+0x9+Pfttjvg1GqxO5XjzOTRatPY5c7y1Bzm72Lkk3i4c5hfkP9UMZ89KJ 99hqG1/bNCUZ6aD6vMeKbD5gxQcgTU7vlpjFMcpfwxZVlOqN6ibsES0SuQ4z1T/fLhvPZ9z2QWil zGtk1Xlx6SIfijmJkvML+iiWzga7tHqpKXTiXA== ) ;; AUTHORITY SECTION (4 records) SALMONRECOVERY.GOV. 86400 IN NS ns2.bpa.GOV. SALMONRECOVERY.GOV. 86400 IN NS ns1.bpa.GOV. SALMONRECOVERY.GOV. 86400 IN RRSIG ( NS 8 2 86400 20181216144219 20181209144219 46749 salmonrecovery.gov. DC0Dov5qZaywan/R/x8198vpSAdVElK7dh7XbmiFfz+Iodp6JIdP1eQPLhKPy0Xh+07qnWbPCGQC ZFah5G+MOz1PYUaHmzBVTXDT8rZT9RGvpsUtb/uBn2iXkl9rcNv1sQ7+5PpwMaOTnpYnfu+OmPrP 7MfUH6Ht2degc2UGd9aZ8xozCV/ElvvoT4agFrBJIncvAG4c+EykHiGDc3HVsx6h4kR9Kn1+wrNx j7YXXiwiUyPSycFcdCDUxN6hFUchu71J0kkMlLSYhr0HHNRUZ4GQYyOEGe6zcwAQ0xRuhfQxkDEh istr3PmrbbnK3g6GqlzIq5sksuh5pzkOx7+4Ng== ) SALMONRECOVERY.GOV. 86400 IN RRSIG ( NS 8 2 86400 20181217151409 20181210151409 44791 salmonrecovery.gov. KQLk/6sHnrldGKiK73UFhT5VcNZI0W1eAgLSKDBInDqJeb6KjEhlPmBg1ZHtdT3uTy37+on0jveB 9hRavm/LAublcH+0ApFfcN61BiUpJB9Tx6JplqlBF73EIt90ZVgu6TGhNxIKnCV3nUyVaml3bZkW 6dqWSq2TD/8p/u8kRUAO927IuE4OMrKKKpuJsJEjTh/YKgozH5fuxSYUVOL9CfY4cVTSOvk0cuQC WnCRPnCTjX7mJ7MIl+BpGHKjz7o9nGfBj3Pp7P/eSyeKsD+RvAROXUvd5pkwwRPiX0I2AUxButWe BkRzAtAHPy1PLn/CkRLvoLsrUibjPuiJuWYYYw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.bpa.GOV for SALMONRECOVERY.GOV/A
	Error querying ns1.bpa.GOV/2620:137:401a:10db:0:0:0:10 for SALMONRECOVERY.GOV/A: 'IPv6 transport disabled'
	Received 1327 bytes from 170.160.36.10
	;; Answer received from 170.160.36.10 (1327 bytes) ;; HEADER SECTION ;; id = 57456 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SALMONRECOVERY.GOV. IN A ;; ANSWER SECTION (3 records) SALMONRECOVERY.GOV. 1800 IN A 107.154.146.226 SALMONRECOVERY.GOV. 1800 IN RRSIG ( A 8 2 1800 20181216144555 20181209144555 46749 salmonrecovery.gov. jH3VinfBwJ1fD//qVDFgAI6FywsONzX7MVHF0huinU2pyG1jBSrCFNkxynihyTUqtJauvHcaJtq6 2rzfL80dQQ7JPHMEsCeBaJz7+IvUQEGKUW+Vq+jVb9MxVxBKWXU1Dx0mXqPxgrsNdXS0QXPV9tfK 8xgkhgJQ87EAkLEfhYaz8s+0YlkLAJU24NJrYm9koIwmyyCwIXwJPZJY0mGFfgK8+WnYYPJ5lsQR YXYIQtc5HGafdnevMvMViyFjnt07K0QRT7wfIwEIe4MgS/DK9vklupUYXMGEwmXVXpYQP3QbI6uI a56hJ+/CdJMYyF1D8qquTXILNy0vyU4rSdMZzA== ) SALMONRECOVERY.GOV. 1800 IN RRSIG ( A 8 2 1800 20181217155524 20181210155524 44791 salmonrecovery.gov. m2/6tDgaBMOA4eDgmx7xQmQJzUwVCZdyuggOOe0e8uo3D+FRKIpbj/f+YBdOq/tjGqAqlw2bxx8T vgOIXQotdXnCYpbJ52Oj1dF9N66KB8hd2J3eOyfWbDPe2xNILuOG95v6+0uepDxcuoHSOjDE9WTV Wj3HmxzI0tZTdx7DafXjVBQ7HYgbToV3NVAfHmK5HtPthFnbd1SQ1nPBmuoW7lctzXftFkhFaP4r wGgl7ng2gyQpAL6IHvILIH4amytyrGnW2jjRAr+bn88b27cxTy/7pw6pwvYsDKrxahgP8eXVZRxu 4Ksxd/f9gE3T7BY7UVYjXKg06mvSkJ6o5j34MQ== ) ;; AUTHORITY SECTION (4 records) SALMONRECOVERY.GOV. 86400 IN NS ns2.bpa.GOV. SALMONRECOVERY.GOV. 86400 IN NS ns1.bpa.GOV. SALMONRECOVERY.GOV. 86400 IN RRSIG ( NS 8 2 86400 20181216144555 20181209144555 46749 salmonrecovery.gov. e4Bm+GwlJzhQ3uTDekH5kLoYXxRlBcsnXh0nWGW6cfGpvls3RjjWfIlm41CvYmvy3efiR1qStKdy JzMRc9o+mD+VBW3MiwKQAmQmhVmTFDZt2yksAzM2SEYq0bgKYZ4DpCWQeEAYPQ3iUBAz/C0vHXF4 Ui4ZY/Og79rcR+MwHW2qZwzfm6ZD6cYPVYcYqhNubx43zQXV9hKTSh+S5lFnmbjCC+Di0ddBwReC iBD5YcATt7Oz6/oaEesfOnmt+tYB8Ljpb+pvNWV2HOa+PqwO/ruoS3qiu90rknXiw/lvLQEakB6/ Z+TVNsFkWNCXXeTTrt14Eu7e8qUdtBx20v/Ugg== ) SALMONRECOVERY.GOV. 86400 IN RRSIG ( NS 8 2 86400 20181217155524 20181210155524 44791 salmonrecovery.gov. CsQ2OFGU1aHprNy42fNmUZ3MVZIIw1sQX2TxUiJgjeRzCl+0tK3N08+jMHmomDih6CQGzRTYzWJU jc44Rw6f213N5fGFyumd7J0f484kDvyBhhZMCwFQzfoUxNuinuuyJTGuqiOEH840w8VAL7rIJ49d p5jm/Ky3tm/cFTlAypO8iLNyA75SBR1L1wla7dLYPcWjNeKP0hIQ3Kp59peDBbrWiHoK+lavjFiw D/ju6NrwUO5KlBEELvi2sxmt7kqi3S3SnR1r8T3ltrOWWH5mZF9GaQCZvsKmYkwFpXnekMtFwvmy H5qXptYdvR0IRsiAbJqnP7ebSs3a+Xs3QzwVVQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	SALMONRECOVERY.GOV A RR has value 107.154.146.226
	Found 2 RRSIGs over A RRset
	`SALMONRECOVERY.GOV. 1800 IN RRSIG ( A 8 2 1800 20181216144555 20181209144555 46749 salmonrecovery.gov. jH3VinfBwJ1fD//qVDFgAI6FywsONzX7MVHF0huinU2pyG1jBSrCFNkxynihyTUqtJauvHcaJtq6 2rzfL80dQQ7JPHMEsCeBaJz7+IvUQEGKUW+Vq+jVb9MxVxBKWXU1Dx0mXqPxgrsNdXS0QXPV9tfK 8xgkhgJQ87EAkLEfhYaz8s+0YlkLAJU24NJrYm9koIwmyyCwIXwJPZJY0mGFfgK8+WnYYPJ5lsQR YXYIQtc5HGafdnevMvMViyFjnt07K0QRT7wfIwEIe4MgS/DK9vklupUYXMGEwmXVXpYQP3QbI6uI a56hJ+/CdJMYyF1D8qquTXILNy0vyU4rSdMZzA== )`
	`SALMONRECOVERY.GOV. 1800 IN RRSIG ( A 8 2 1800 20181217155524 20181210155524 44791 salmonrecovery.gov. m2/6tDgaBMOA4eDgmx7xQmQJzUwVCZdyuggOOe0e8uo3D+FRKIpbj/f+YBdOq/tjGqAqlw2bxx8T vgOIXQotdXnCYpbJ52Oj1dF9N66KB8hd2J3eOyfWbDPe2xNILuOG95v6+0uepDxcuoHSOjDE9WTV Wj3HmxzI0tZTdx7DafXjVBQ7HYgbToV3NVAfHmK5HtPthFnbd1SQ1nPBmuoW7lctzXftFkhFaP4r wGgl7ng2gyQpAL6IHvILIH4amytyrGnW2jjRAr+bn88b27cxTy/7pw6pwvYsDKrxahgP8eXVZRxu 4Ksxd/f9gE3T7BY7UVYjXKg06mvSkJ6o5j34MQ== )`
	RRSIG=46749 and DNSKEY=46749 verifies the A RRset
	RRSIG=44791 and DNSKEY=44791 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test SALMONRECOVERY.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: