DNSSEC Analyzer - SENTINEL.GOV

Domain Name:

Time: 2019-08-18 12:48:19 UTC, NTP stratum 4

Analyzing DNSSEC problems for SENTINEL.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to k.root-servers.net for ./DNSKEY
	Received 864 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (864 bytes) ;; HEADER SECTION ;; id = 13612 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAcTQyaIe6nt3xSPOG2L/YfwBkOVTJN6mlnZ249O5Rtt3ZSRQHxQSW61AODYw6bvgxrrGq8ee OuenFjcSYgNAMcBYoEYYmKDW6e9EryW4ZaT/MCq+8Am06oR40xAA3fClOM6QjRcT85tP41Go946A icBGP8XOP/Aj1aI/oPRGzRnboUPUok/AzTNnW5npBU69+BuiIwYE7mQOiNBFePyvjQBdoiuYbmuD 3Py0IyjlBxzZUXbqLsRL9gYFkCqeTY29Ik7usuzMTa+JRSLz6KGS5RSJ7CTSMjZg8aNaUbN2dvGh akJPh92HnLvMA3TefFgbKJphFNPA3BWSKLZ02cRWXqM= ) ; Key ID = 59944 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190831000000 20190810000000 20326 . aqUzhXpgfWBkwR+s6UE8VT6RohWeWfyw1JD30Eqtc3LN113C/6ASGzzXw2fIMtod+w95D0ui+sOG MtH40kT96pV8ifUx6nkC4QcRxgAy5Pg7To39Pa/gwakDEDorruQHEjp2CJdL0dQ+yv6Iab0mUjCH hr/9xFtVf1sNT+6wHbzlJmUNxPsF6DAQcSwb59gGyjww/EcrYHzpDjZd1Zs6tXjH8g9Y8edQRJok HYHYuLeRKnjFzPTZgCZKnyqYesFH/sG17+b9v2wjy0uftpkGbRo4Klv+kFgonlMarDavJgRxm6JI GGhkDm53cChcWA02ciLrD1dX+Slckrd9iOiMyw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcTQyaIe6nt3xSPOG2L/YfwBkOVTJN6mlnZ249O5Rtt3ZSRQHxQSW61AODYw6bvgxrrGq8ee OuenFjcSYgNAMcBYoEYYmKDW6e9EryW4ZaT/MCq+8Am06oR40xAA3fClOM6QjRcT85tP41Go946A icBGP8XOP/Aj1aI/oPRGzRnboUPUok/AzTNnW5npBU69+BuiIwYE7mQOiNBFePyvjQBdoiuYbmuD 3Py0IyjlBxzZUXbqLsRL9gYFkCqeTY29Ik7usuzMTa+JRSLz6KGS5RSJ7CTSMjZg8aNaUbN2dvGh akJPh92HnLvMA3TefFgbKJphFNPA3BWSKLZ02cRWXqM= ) ; Key ID = 59944`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190831000000 20190810000000 20326 . aqUzhXpgfWBkwR+s6UE8VT6RohWeWfyw1JD30Eqtc3LN113C/6ASGzzXw2fIMtod+w95D0ui+sOG MtH40kT96pV8ifUx6nkC4QcRxgAy5Pg7To39Pa/gwakDEDorruQHEjp2CJdL0dQ+yv6Iab0mUjCH hr/9xFtVf1sNT+6wHbzlJmUNxPsF6DAQcSwb59gGyjww/EcrYHzpDjZd1Zs6tXjH8g9Y8edQRJok HYHYuLeRKnjFzPTZgCZKnyqYesFH/sG17+b9v2wjy0uftpkGbRo4Klv+kFgonlMarDavJgRxm6JI GGhkDm53cChcWA02ciLrD1dX+Slckrd9iOiMyw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=59944 is now in the chain-of-trust
	Query to l.root-servers.net for SENTINEL.GOV/A
	Error querying l.root-servers.net/2001:500:9f:0:0:0:0:42 for SENTINEL.GOV/A: 'IPv6 transport disabled'
	Received 667 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (667 bytes) ;; HEADER SECTION ;; id = 30473 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SENTINEL.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20190831050000 20190818040000 59944 . W86GQ2xDJSCUidZf7qTA5Y6sFI/Yq1cQNNJaAG0rs/wwaakPbsWcgF7C0meFFCywW3W1uLJDni9E yQMb4TLfzd343sRUv0H1JBXfaWZFNKIFYnVSjHI2P/Op0k9SVF46IWd2NCqLw85Q5rfxnu7Cfspe 0AFr5Fo0esdJ3s9pKf0kh3BLFTSQGFrt6WzSgxzPbgz1dhWmYXZYkCqNFJOUWCcyhf8brlDZosFM baGYKft1eBMTUo9KJVVgwnxTvBI74wrzEGv96Rf9Wu0EY9GdT91MJp0K0aLt9fmMRV1dZlSkBlXh 03ZObLrzV1UhP2E9nFiWmPaxgTJ96hw++bmN4Q== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to e.root-servers.net for GOV/DNSKEY
	Error querying e.root-servers.net/2001:500:a8:0:0:0:0:e for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 661 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (661 bytes) ;; HEADER SECTION ;; id = 6121 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20190831050000 20190818040000 59944 . W86GQ2xDJSCUidZf7qTA5Y6sFI/Yq1cQNNJaAG0rs/wwaakPbsWcgF7C0meFFCywW3W1uLJDni9E yQMb4TLfzd343sRUv0H1JBXfaWZFNKIFYnVSjHI2P/Op0k9SVF46IWd2NCqLw85Q5rfxnu7Cfspe 0AFr5Fo0esdJ3s9pKf0kh3BLFTSQGFrt6WzSgxzPbgz1dhWmYXZYkCqNFJOUWCcyhf8brlDZosFM baGYKft1eBMTUo9KJVVgwnxTvBI74wrzEGv96Rf9Wu0EY9GdT91MJp0K0aLt9fmMRV1dZlSkBlXh 03ZObLrzV1UhP2E9nFiWmPaxgTJ96hw++bmN4Q== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to k.root-servers.net for GOV/DS
	Received 403 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (403 bytes) ;; HEADER SECTION ;; id = 36412 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20190831050000 20190818040000 59944 . W86GQ2xDJSCUidZf7qTA5Y6sFI/Yq1cQNNJaAG0rs/wwaakPbsWcgF7C0meFFCywW3W1uLJDni9E yQMb4TLfzd343sRUv0H1JBXfaWZFNKIFYnVSjHI2P/Op0k9SVF46IWd2NCqLw85Q5rfxnu7Cfspe 0AFr5Fo0esdJ3s9pKf0kh3BLFTSQGFrt6WzSgxzPbgz1dhWmYXZYkCqNFJOUWCcyhf8brlDZosFM baGYKft1eBMTUo9KJVVgwnxTvBI74wrzEGv96Rf9Wu0EY9GdT91MJp0K0aLt9fmMRV1dZlSkBlXh 03ZObLrzV1UhP2E9nFiWmPaxgTJ96hw++bmN4Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20190831050000 20190818040000 59944 . W86GQ2xDJSCUidZf7qTA5Y6sFI/Yq1cQNNJaAG0rs/wwaakPbsWcgF7C0meFFCywW3W1uLJDni9E yQMb4TLfzd343sRUv0H1JBXfaWZFNKIFYnVSjHI2P/Op0k9SVF46IWd2NCqLw85Q5rfxnu7Cfspe 0AFr5Fo0esdJ3s9pKf0kh3BLFTSQGFrt6WzSgxzPbgz1dhWmYXZYkCqNFJOUWCcyhf8brlDZosFM baGYKft1eBMTUo9KJVVgwnxTvBI74wrzEGv96Rf9Wu0EY9GdT91MJp0K0aLt9fmMRV1dZlSkBlXh 03ZObLrzV1UhP2E9nFiWmPaxgTJ96hw++bmN4Q== )`
	RRSIG=59944 and DNSKEY=59944 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to c.gov-servers.net for GOV/DNSKEY
	Received 743 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (743 bytes) ;; HEADER SECTION ;; id = 22956 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 256 3 8 AQPnviCbt0HB2CQze767dPf3TQFosiEwOIkUQaJmcSoNlVSquo3Mox7noTQGzKSdTbKAh0zfkGIb thSb6zyPceMJPpVv2RQUAj9WWTZr4yvO0J5/KllhGqr3sZndrV1lF/rrFzjnnLO8egQTS7bXHbsU 9sM71w5Xiow+isEEPrc5KQ== ) ; Key ID = 7877 GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190830214731 20190815214231 7698 gov. k1bNHuSWv2dXTQUpQqP68QRQ5fWzTY2g+HNf1z8IpZC7H3EHKv8KptrM+vQiUBR655KD9G3geI3x HbR3kKXWcQII2XFfnvCmf7gNbVmOYUli1cTCsbTNo64VS8hdwpwFPH7C8FQ7NDs5vUH6y9XvIJv0 M571C301cmbMdtczwdTVIE64YGedJOWGQMcLJnRPzdbz9IS1XdxHkfLmGsrqzUYUc1/b88hCVlbn ftGzRDh+jUq32mCd6eknCrnfmG4moYT1CVuR10K5oG3pADzMgTSnqCYyFb9xrRYaYtBmDeN0KhKp wx+MHIquJk2W6OUnoMMCX0DqxTlUHMxoxIfOwA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQPnviCbt0HB2CQze767dPf3TQFosiEwOIkUQaJmcSoNlVSquo3Mox7noTQGzKSdTbKAh0zfkGIb thSb6zyPceMJPpVv2RQUAj9WWTZr4yvO0J5/KllhGqr3sZndrV1lF/rrFzjnnLO8egQTS7bXHbsU 9sM71w5Xiow+isEEPrc5KQ== ) ; Key ID = 7877`
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190830214731 20190815214231 7698 gov. k1bNHuSWv2dXTQUpQqP68QRQ5fWzTY2g+HNf1z8IpZC7H3EHKv8KptrM+vQiUBR655KD9G3geI3x HbR3kKXWcQII2XFfnvCmf7gNbVmOYUli1cTCsbTNo64VS8hdwpwFPH7C8FQ7NDs5vUH6y9XvIJv0 M571C301cmbMdtczwdTVIE64YGedJOWGQMcLJnRPzdbz9IS1XdxHkfLmGsrqzUYUc1/b88hCVlbn ftGzRDh+jUq32mCd6eknCrnfmG4moYT1CVuR10K5oG3pADzMgTSnqCYyFb9xrRYaYtBmDeN0KhKp wx+MHIquJk2W6OUnoMMCX0DqxTlUHMxoxIfOwA== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=7877 is now in the chain-of-trust
	Query to a.gov-servers.net for SENTINEL.GOV/A
	Received 336 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (336 bytes) ;; HEADER SECTION ;; id = 9448 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SENTINEL.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) SENTINEL.GOV. 86400 IN NS dns3.l-secb.net. SENTINEL.GOV. 86400 IN NS dns1.l-secb.net. SENTINEL.GOV. 3600 IN DS ( 32644 8 2 4b4906deb9397416980eb6f013dcb91cd5f9b4c8359e8c974f77270ed4d9e655 ) SENTINEL.GOV. 3600 IN DS 32644 8 1 4fc04ece6e791ae393d1e20d0144870abd698ad2 SENTINEL.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190825101007 20190818101007 7877 gov. W0Mz2TBPWRFzI+KQvWgP7pj7rcaNtRKyS7gNeJzraqBOFjuCKjPt8CKXrX0c0IRRgjLva+Bt9Lqr QKfTkOcguFuaLmvc7+P0N3WqQES+4EPV8abSGjPXYu3sg4KkApwfaHtvyFJpj1vXTpjH2FQWkV5d JaEsFLX3p5sUSClM4ho= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.gov-servers.net for SENTINEL.GOV/DNSKEY
	Error querying a.gov-servers.net/2001:500:4431:0:0:0:2:30 for SENTINEL.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 336 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (336 bytes) ;; HEADER SECTION ;; id = 47217 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SENTINEL.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) SENTINEL.GOV. 86400 IN NS dns3.l-secb.net. SENTINEL.GOV. 86400 IN NS dns1.l-secb.net. SENTINEL.GOV. 3600 IN DS ( 32644 8 2 4b4906deb9397416980eb6f013dcb91cd5f9b4c8359e8c974f77270ed4d9e655 ) SENTINEL.GOV. 3600 IN DS 32644 8 1 4fc04ece6e791ae393d1e20d0144870abd698ad2 SENTINEL.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190825101007 20190818101007 7877 gov. W0Mz2TBPWRFzI+KQvWgP7pj7rcaNtRKyS7gNeJzraqBOFjuCKjPt8CKXrX0c0IRRgjLva+Bt9Lqr QKfTkOcguFuaLmvc7+P0N3WqQES+4EPV8abSGjPXYu3sg4KkApwfaHtvyFJpj1vXTpjH2FQWkV5d JaEsFLX3p5sUSClM4ho= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone SENTINEL.GOV

SENTINEL.GOV

	Checking DS between GOV and SENTINEL.GOV
	Query to a.gov-servers.net for SENTINEL.GOV/DS
	Error querying a.gov-servers.net/2001:500:4431:0:0:0:2:30 for SENTINEL.GOV/DS: 'IPv6 transport disabled'
	Received 288 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (288 bytes) ;; HEADER SECTION ;; id = 31316 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SENTINEL.GOV. IN DS ;; ANSWER SECTION (3 records) SENTINEL.GOV. 3600 IN DS ( 32644 8 2 4b4906deb9397416980eb6f013dcb91cd5f9b4c8359e8c974f77270ed4d9e655 ) SENTINEL.GOV. 3600 IN DS 32644 8 1 4fc04ece6e791ae393d1e20d0144870abd698ad2 SENTINEL.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190825101007 20190818101007 7877 gov. W0Mz2TBPWRFzI+KQvWgP7pj7rcaNtRKyS7gNeJzraqBOFjuCKjPt8CKXrX0c0IRRgjLva+Bt9Lqr QKfTkOcguFuaLmvc7+P0N3WqQES+4EPV8abSGjPXYu3sg4KkApwfaHtvyFJpj1vXTpjH2FQWkV5d JaEsFLX3p5sUSClM4ho= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for SENTINEL.GOV in the GOV zone
	DS=32644/SHA-256 has algorithm RSASHA256
	DS=32644/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`SENTINEL.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190825101007 20190818101007 7877 gov. W0Mz2TBPWRFzI+KQvWgP7pj7rcaNtRKyS7gNeJzraqBOFjuCKjPt8CKXrX0c0IRRgjLva+Bt9Lqr QKfTkOcguFuaLmvc7+P0N3WqQES+4EPV8abSGjPXYu3sg4KkApwfaHtvyFJpj1vXTpjH2FQWkV5d JaEsFLX3p5sUSClM4ho= )`
	RRSIG=7877 and DNSKEY=7877 verifies the DS RRset
	DS=32644/SHA-256 is now in the chain-of-trust
	`SENTINEL.GOV. 3600 IN DS ( 32644 8 2 4b4906deb9397416980eb6f013dcb91cd5f9b4c8359e8c974f77270ed4d9e655 )`
	`SENTINEL.GOV. 3600 IN DS 32644 8 1 4fc04ece6e791ae393d1e20d0144870abd698ad2`
	Query to dns3.l-secb.net for SENTINEL.GOV/DNSKEY
	Error querying dns3.l-secb.net/2600:1f14:a2e:4b00:35:163:67:210 for SENTINEL.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 1257 bytes from 35.163.67.210
	;; Answer received from 35.163.67.210 (1257 bytes) ;; HEADER SECTION ;; id = 64236 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SENTINEL.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) SENTINEL.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAb82SusuDdYX3p9zSljon4aEhfgqxT9PBjTSxm82Qq91jR4FSisvCmo/eNssA98jIhBLen9v ixDOQevjmJXpWDmWs59yVGhB56f/3McpcbIb9cZjV1NkrWRtfI4L34hfGoB4FMODWbT8iR3u0kYe i2GfsLoQAgxUsxHXve7jseUd ) ; Key ID = 6915 SENTINEL.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAci0xQNtxOTeiMzkPIIx40VFl+Dez+HM6F0BVVa7lHdFFayMm2O8P2Nloda0m//EJpnho4Lz H3Y5tv1vlO+Y0cJTDn8n15FgzyMP6ZaSsY+1osWDeR2/bUOmgqfT7aR2VhiWmSXMKNzsEMAJ7tI9 plCJ2ojLYfbeAFJRXiRS8UeP ) ; Key ID = 64449 SENTINEL.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAZbxs4ADHH09lJtcnIxVuBKOePVjIbTzLCJ5o4XvVIQrM9SlQRoUDRvY8fY0vLA/Z6ViADHw Fd1I04hHkwL9gXt9YE20we574m1iYxvk64G2jA2CTms0Jl0xct42s35SkyJCAeMG8VZkCKZ8UDi4 kFXyLkZFpeaeuz3CGQQ0dQACgbzPkks8AIHMnTbAzIwXYGMFGIEg8l9+A/i1vnFHg0p6IecVuzpM wZQPWoj/nzCPxCW+czv9yGO6huj+W59BetFsmoeX6k3cfo4cB8XOP1yLXFFlv0NphuhSfJcsfNjl Y2Yv0ysjQ3F6mI324rERgx1XTgmef8shaxvc4zr1xDs= ) ; Key ID = 32644 SENTINEL.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190821033427 20190814033427 6915 sentinel.gov. aV4GeJ+3RbWAddbAXOiV+4oBFD2Dcbm/vFbNWEOyLVQTUBIdvvUWb4qUvNKF7FL7WYsWDXMYr+ze YLq2v2zBNAwZklfsT1aHye7iQE6JYECWytANBkSdY6MPMUVfAZReH1LEPdKPpGPEsx/eShrC6aLR q1cE/uOb5CTt24B6SEM= ) SENTINEL.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190821033427 20190814033427 64449 sentinel.gov. K9CqJvBbq1Ymhg2+te8kyBmIlng4xgG9SlZwPOGC9SHOvoF9lo4051pAdWEscDimTruRsO8Jvnvg 5j55DgDLIUdOZ11nvtihdJBJFxox8o9D9T2W/ofkBJrvf26PYmunEzTyLHnC8bl+pEOiEYC9wXYq CWe4SZawO4VlW7SzfdY= ) SENTINEL.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190821033427 20190814033427 32644 sentinel.gov. GlRI9sVEmaP/9YgTcf3rGIYkka8Jq3D52PkTcoJthQWcht04Inp54AXAzIaKySXbMrdFDY3p4d6o mVMtlviwAgdl833XNOFU2YlT6NVjLfUqTf7B4zLRnkC7VJC0tI4TzuW8DLNyxPLeY5JQMq7mJL4k c9FSOsDZF/KfyOzQ8mPy1MhjYw42Ao5v4NZ0TkvTpZ6j48rABoRxRGDLejHhfP30UlUOm5tjokGL R5jM6cyHNt1SP2rUWzkbxmtBs5y4PepT3jGrkzcbSdG4pJiUAW5UScyeDLUqF7pmWPMF0ZvgKdWY lMZ5bUwoi0JNMf3pcgBoMy4SIN/02MeIaQ4lZw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for SENTINEL.GOV
	`SENTINEL.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAb82SusuDdYX3p9zSljon4aEhfgqxT9PBjTSxm82Qq91jR4FSisvCmo/eNssA98jIhBLen9v ixDOQevjmJXpWDmWs59yVGhB56f/3McpcbIb9cZjV1NkrWRtfI4L34hfGoB4FMODWbT8iR3u0kYe i2GfsLoQAgxUsxHXve7jseUd ) ; Key ID = 6915`
	`SENTINEL.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAci0xQNtxOTeiMzkPIIx40VFl+Dez+HM6F0BVVa7lHdFFayMm2O8P2Nloda0m//EJpnho4Lz H3Y5tv1vlO+Y0cJTDn8n15FgzyMP6ZaSsY+1osWDeR2/bUOmgqfT7aR2VhiWmSXMKNzsEMAJ7tI9 plCJ2ojLYfbeAFJRXiRS8UeP ) ; Key ID = 64449`
	`SENTINEL.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAZbxs4ADHH09lJtcnIxVuBKOePVjIbTzLCJ5o4XvVIQrM9SlQRoUDRvY8fY0vLA/Z6ViADHw Fd1I04hHkwL9gXt9YE20we574m1iYxvk64G2jA2CTms0Jl0xct42s35SkyJCAeMG8VZkCKZ8UDi4 kFXyLkZFpeaeuz3CGQQ0dQACgbzPkks8AIHMnTbAzIwXYGMFGIEg8l9+A/i1vnFHg0p6IecVuzpM wZQPWoj/nzCPxCW+czv9yGO6huj+W59BetFsmoeX6k3cfo4cB8XOP1yLXFFlv0NphuhSfJcsfNjl Y2Yv0ysjQ3F6mI324rERgx1XTgmef8shaxvc4zr1xDs= ) ; Key ID = 32644`
	DNSKEY=32644/SEP is now in the chain-of-trust
	DS=32644/SHA-256 verifies DNSKEY=32644/SEP
	DS=32644/SHA-1 verifies DNSKEY=32644/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`SENTINEL.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190821033427 20190814033427 6915 sentinel.gov. aV4GeJ+3RbWAddbAXOiV+4oBFD2Dcbm/vFbNWEOyLVQTUBIdvvUWb4qUvNKF7FL7WYsWDXMYr+ze YLq2v2zBNAwZklfsT1aHye7iQE6JYECWytANBkSdY6MPMUVfAZReH1LEPdKPpGPEsx/eShrC6aLR q1cE/uOb5CTt24B6SEM= )`
	`SENTINEL.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190821033427 20190814033427 64449 sentinel.gov. K9CqJvBbq1Ymhg2+te8kyBmIlng4xgG9SlZwPOGC9SHOvoF9lo4051pAdWEscDimTruRsO8Jvnvg 5j55DgDLIUdOZ11nvtihdJBJFxox8o9D9T2W/ofkBJrvf26PYmunEzTyLHnC8bl+pEOiEYC9wXYq CWe4SZawO4VlW7SzfdY= )`
	`SENTINEL.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190821033427 20190814033427 32644 sentinel.gov. GlRI9sVEmaP/9YgTcf3rGIYkka8Jq3D52PkTcoJthQWcht04Inp54AXAzIaKySXbMrdFDY3p4d6o mVMtlviwAgdl833XNOFU2YlT6NVjLfUqTf7B4zLRnkC7VJC0tI4TzuW8DLNyxPLeY5JQMq7mJL4k c9FSOsDZF/KfyOzQ8mPy1MhjYw42Ao5v4NZ0TkvTpZ6j48rABoRxRGDLejHhfP30UlUOm5tjokGL R5jM6cyHNt1SP2rUWzkbxmtBs5y4PepT3jGrkzcbSdG4pJiUAW5UScyeDLUqF7pmWPMF0ZvgKdWY lMZ5bUwoi0JNMf3pcgBoMy4SIN/02MeIaQ4lZw== )`
	RRSIG=6915 and DNSKEY=6915 verifies the DNSKEY RRset
	RRSIG=64449 and DNSKEY=64449 verifies the DNSKEY RRset
	RRSIG=32644 and DNSKEY=32644/SEP verifies the DNSKEY RRset
	DNSKEY=6915 is now in the chain-of-trust
	DNSKEY=64449 is now in the chain-of-trust
	Query to dns1.l-secb.net for SENTINEL.GOV/A
	Received 401 bytes from 198.77.70.37
	;; Answer received from 198.77.70.37 (401 bytes) ;; HEADER SECTION ;; id = 2379 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SENTINEL.GOV. IN A ;; ANSWER SECTION (3 records) SENTINEL.GOV. 30 IN A 18.204.120.174 SENTINEL.GOV. 30 IN RRSIG ( A 8 2 30 20190824210840 20190817210840 6915 sentinel.gov. IoGn1J0bXEGb0+kAdORSadMBgU4tCvVTmVifi9iXK0cwJONmZrOYHcRZkjxpadg4dCKqFvmy1FbH DRTsXxv50Edwjgd6DDEq7LyPEgSHeEUKcs0LPGH9BIU2cBMrDK6A/k0zZrdS5ukWVaO9l6xgljSp ga+p8SRupz5Arwjo40A= ) SENTINEL.GOV. 30 IN RRSIG ( A 8 2 30 20190821002435 20190814002435 64449 sentinel.gov. oCRQdxXGpCeQQnMjfoEhkpFCX1l9iTPiR3gDvIClrEY8sCwgh5FZEbEDkm3ImDmwO4leH7vFWDNz UglWY9v4tnHSpiHY7CLKgOrdNfBiT5RSzLo/i0XJWS4tAlG7Tep5uJVzs0sBpVD1laQjooKxd9uC G9+F+CJBgOgo8HAqeyg= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	SENTINEL.GOV is authoritative for SENTINEL.GOV
	Found RRSIG signed by sentinel.gov zone
	Query to dns1.l-secb.net for SENTINEL.GOV/SOA
	Error querying dns1.l-secb.net/2001:1900:2268:770:198:77:70:37 for SENTINEL.GOV/SOA: 'IPv6 transport disabled'
	Received 912 bytes from 198.77.70.37
	;; Answer received from 198.77.70.37 (912 bytes) ;; HEADER SECTION ;; id = 61462 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SENTINEL.GOV. IN SOA ;; ANSWER SECTION (3 records) SENTINEL.GOV. 900 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2018061401 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) SENTINEL.GOV. 900 IN RRSIG ( SOA 8 2 900 20190825011354 20190818011354 6915 sentinel.gov. m0MCG6jg8YpUm4zUBQFI9O5viQzlj+Leu+mpVpdXcg505ArZjGpWo5yCrX1My6Lu1OuemneDKeEe vshS5r5mD+du9guAZprpaBZK7rv8a8xXB4gFFYyr8hUEO1tS/dr5NRWXoYsCvtnxxkfEpxLAuOyF 7L/CZ4+4QoS+uYTUOco= ) SENTINEL.GOV. 900 IN RRSIG ( SOA 8 2 900 20190821012358 20190814012358 64449 sentinel.gov. JwR7PyU7qZtvuQ9pZerK07oARvhQib3dX2qiGrEDqVqi4r8f2Me836wbMZlqWXCwAz3h+enzZ+JE Q8tnNoTGeMYF7c9wiZpSAgZfYJYKoJoyFYK2jI/RSWf4tZE+Rl7hIY8upStnHTrw4vYuU9UqVVid Qgwnvqa8S9naITeck9o= ) ;; AUTHORITY SECTION (4 records) SENTINEL.GOV. 900 IN NS dns1.l-secb.net. SENTINEL.GOV. 900 IN NS dns3.l-secb.net. SENTINEL.GOV. 900 IN RRSIG ( NS 8 2 900 20190825054528 20190818054528 6915 sentinel.gov. bU+W5NU4nTJL7NE/AMwuBz9zt9Puhp3Lg0v3K8fB5qL6nRP7vN6WrrtQ6sBEe17UB3rGwvQ7M8Ce NIgw3wwSuYerBopvT9QmKCaN758deh7Qf2Pd5rIGA2RVjYalAnBqRcGAFTjCzrmMosv9Qh+w+T4c xD+mUAT/bFq9Vhmof0M= ) SENTINEL.GOV. 900 IN RRSIG ( NS 8 2 900 20190821085516 20190814085516 64449 sentinel.gov. Y+/6Qwc6ZaJY2xEbeAod0Wei6dTxBv5iJeODoiwmwq0WiRIU0zxRi6+Baormx5kL6NuddTuSU8B+ gJf+lZSWcLgkEqBg/ydDGbrwilRvcSiFpgtBbrYuKF7YhY7HX8AkYYWH8zIIzx+ueOeVESzHUxj9 M4j09z6U1oreRfPlO6E= ) ;; ADDITIONAL SECTION (5 records) dns1.l-secb.net. 43200 IN A 198.77.70.37 dns3.l-secb.net. 43200 IN A 35.163.67.210 dns1.l-secb.net. 43200 IN AAAA 2001:1900:2268:770:198:77:70:37 dns3.l-secb.net. 43200 IN AAAA 2600:1f14:a2e:4b00:35:163:67:210 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns3.l-secb.net for SENTINEL.GOV/SOA
	Received 912 bytes from 35.163.67.210
	;; Answer received from 35.163.67.210 (912 bytes) ;; HEADER SECTION ;; id = 18522 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SENTINEL.GOV. IN SOA ;; ANSWER SECTION (3 records) SENTINEL.GOV. 900 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2018061401 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) SENTINEL.GOV. 900 IN RRSIG ( SOA 8 2 900 20190824203826 20190817203826 6915 sentinel.gov. JgVdVAmdlFQ5bqkTR/slzsIt/FftXXU6RnqmUG2Q06NuKvkZl+1wSoYfLRTZvV5XuVAeEPZVfJtL jqLf2GrriCpcVhp/2OLHGWMEvTHK758q2bEG4jVGifsg2xFiZpGDboiMhRO0YNiSr/15VsQLs588 ka8OzBjIalPpSgBPsFs= ) SENTINEL.GOV. 900 IN RRSIG ( SOA 8 2 900 20190821032740 20190814032740 64449 sentinel.gov. WmpPomevI4ZLD69XOiCjnZhc4fi6keMhny1D3Td+Sao0FTnMInd9eTI0xvnqS8/HXqGu/9/7yPSP 8risfjRZlxJ5PnjD26EDEwi32pVWb3vR+J3Oi49Y2MoUxSxvWawX0aojho2/c49wIQfnf9bqv8YE 5yypbnK0w2yA3ZlFipQ= ) ;; AUTHORITY SECTION (4 records) SENTINEL.GOV. 900 IN NS dns3.l-secb.net. SENTINEL.GOV. 900 IN NS dns1.l-secb.net. SENTINEL.GOV. 900 IN RRSIG ( NS 8 2 900 20190821033046 20190814033046 6915 sentinel.gov. H679vf3XQQCMpWCMf2mHji5LEHAWkT9J348ihj9TS238zsWD1bMZu7LPw8duSvbFQNw3Pa7jZbXh VpfKnd1To0+8h7eskg793tAsY7sk/Qdrwn5DV/m6Xco2dHGULExB7LaCmsDkiFxZihnrbC/bppYM NLvQsDb/V3Nkq9BdOuA= ) SENTINEL.GOV. 900 IN RRSIG ( NS 8 2 900 20190821111200 20190814111200 64449 sentinel.gov. ezn8ZIVgU6K9RsOTyIE48OasUqd4jmOS5AFbSIY45XZnLvvPqhkF2v9p1AH4Sie8sT6zP+gKVbBi oXcZUW0yQmOdH4HogqPxAe0VXNztqA/T6Q8BvFwTPN6+F93BWdoTHZ5SJzqgRVzEdcmARBNhafzb DGITFi2tdAzfEMMBvaU= ) ;; ADDITIONAL SECTION (5 records) dns1.l-secb.net. 43200 IN A 198.77.70.37 dns3.l-secb.net. 43200 IN A 35.163.67.210 dns1.l-secb.net. 43200 IN AAAA 2001:1900:2268:770:198:77:70:37 dns3.l-secb.net. 43200 IN AAAA 2600:1f14:a2e:4b00:35:163:67:210 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns1.l-secb.net for SENTINEL.GOV/A
	Received 401 bytes from 198.77.70.37
	;; Answer received from 198.77.70.37 (401 bytes) ;; HEADER SECTION ;; id = 41612 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SENTINEL.GOV. IN A ;; ANSWER SECTION (3 records) SENTINEL.GOV. 30 IN A 18.204.120.174 SENTINEL.GOV. 30 IN RRSIG ( A 8 2 30 20190824230605 20190817230605 6915 sentinel.gov. C4DHt5dVtesQMiLpNA6uyKQyMT3eiPDGTkhTrQeHAF3xHdmaS/8ut/JXABGkVlzep8VG1PHiAFQ0 nnevndEbNzFLZ3S67l2gRflU8GKr+gENxse4gENjkrWGtCaJ3kFC8zEnSGVmmbpiADIOD5pl/gs3 gZQDT7o8FfjBT7f4e6o= ) SENTINEL.GOV. 30 IN RRSIG ( A 8 2 30 20190821010202 20190814010202 64449 sentinel.gov. UUjS2VZ7xHNk8k5AYYeg15QG7eyglhUX+JzHRnCtZhqafS+7ZMpscpV9Bi4F4DkZbmgIXS+BC6yi /x/UMLpz72lOfEXkQorQnt9iYqWw51kX55CFbW8vBQHmajfKukbAO7OKrxhRqbzkwFf5DyaJ5vcI zK/inwv9q6oeTSx1S2I= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	SENTINEL.GOV A RR has value 18.204.120.174
	Found 2 RRSIGs over A RRset
	`SENTINEL.GOV. 30 IN RRSIG ( A 8 2 30 20190824230605 20190817230605 6915 sentinel.gov. C4DHt5dVtesQMiLpNA6uyKQyMT3eiPDGTkhTrQeHAF3xHdmaS/8ut/JXABGkVlzep8VG1PHiAFQ0 nnevndEbNzFLZ3S67l2gRflU8GKr+gENxse4gENjkrWGtCaJ3kFC8zEnSGVmmbpiADIOD5pl/gs3 gZQDT7o8FfjBT7f4e6o= )`
	`SENTINEL.GOV. 30 IN RRSIG ( A 8 2 30 20190821010202 20190814010202 64449 sentinel.gov. UUjS2VZ7xHNk8k5AYYeg15QG7eyglhUX+JzHRnCtZhqafS+7ZMpscpV9Bi4F4DkZbmgIXS+BC6yi /x/UMLpz72lOfEXkQorQnt9iYqWw51kX55CFbW8vBQHmajfKukbAO7OKrxhRqbzkwFf5DyaJ5vcI zK/inwv9q6oeTSx1S2I= )`
	RRSIG=6915 and DNSKEY=6915 verifies the A RRset
	RRSIG=64449 and DNSKEY=64449 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test SENTINEL.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: