DNSSEC Analyzer - SENTINEL.GOV

Domain Name:

Time: 2021-04-18 04:56:58 UTC, NTP stratum 4

Analyzing DNSSEC problems for SENTINEL.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (864 bytes) ;; HEADER SECTION ;; id = 61124 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210502000000 20210411000000 20326 . SjVAq5V3zP96wlXZKWIo3oDNvWyKnwmIl7/HSmnxJ77WX0dmpJxN+c7wTFGzMro6kuZCYAhZgsWb 3G7lBEAeiw/Y6hQGK1IdLMH4YMoSoxvdw6u0DkvxiodZUatJblMajeF0Rw8W67I4pwYpwOByZ+3W aTr/nk0sWFir7+1tNbWbPrUNb8E8pHFzW9g7vMATiFnM+jXmZVVbueGnzOSmjo34ow9iAQ7V1OcY VtHTxQVMbfNurnEbEi7XnqYtRacNUkvIv0Fpmb9Yi7wlhV/syyu61p3MMoLnSQydYfsI+may7SoH +I6NQk2a2d3Nvzh5nbNd++cu8aRGX3ZtfreUmQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210502000000 20210411000000 20326 . SjVAq5V3zP96wlXZKWIo3oDNvWyKnwmIl7/HSmnxJ77WX0dmpJxN+c7wTFGzMro6kuZCYAhZgsWb 3G7lBEAeiw/Y6hQGK1IdLMH4YMoSoxvdw6u0DkvxiodZUatJblMajeF0Rw8W67I4pwYpwOByZ+3W aTr/nk0sWFir7+1tNbWbPrUNb8E8pHFzW9g7vMATiFnM+jXmZVVbueGnzOSmjo34ow9iAQ7V1OcY VtHTxQVMbfNurnEbEi7XnqYtRacNUkvIv0Fpmb9Yi7wlhV/syyu61p3MMoLnSQydYfsI+may7SoH +I6NQk2a2d3Nvzh5nbNd++cu8aRGX3ZtfreUmQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=14631 is now in the chain-of-trust
	Query to c.root-servers.net for SENTINEL.GOV/A
	Received 634 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (634 bytes) ;; HEADER SECTION ;; id = 36237 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; SENTINEL.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20210430170000 20210417160000 14631 . oh4766ELnYaeE/HIlbOLyP9jpE0IpXyyyWk5hlV94HhaJFTsXWpSd2nhV6hiPiGCl2/2L/EeTnCS sAUhEbEGCgQjLGjt58qB5oA0vif4BRAoX15A49IrpLMM5+RMezqHy/Ik/GZVYbc3etbDM65W0cFw NxeCsvejIBnxr9G9xqN4z2ttbGPAuU96Y5h8QV/+34Wtnjjsd1mQpQ86f+v71b52s+VG721VC4Sd NqfzEUuy91l0m0PvltF+5lsRnDOTFCUSgfXYk0CTSoS9LBTQ4qh1adS3xCMxgOynckV4UE81ehtX blBBggyZs9bwyPdMGKHL/nrRCU2VUnk166QVnA== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to l.root-servers.net for GOV/DNSKEY
	Received 622 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (622 bytes) ;; HEADER SECTION ;; id = 15485 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20210430170000 20210417160000 14631 . oh4766ELnYaeE/HIlbOLyP9jpE0IpXyyyWk5hlV94HhaJFTsXWpSd2nhV6hiPiGCl2/2L/EeTnCS sAUhEbEGCgQjLGjt58qB5oA0vif4BRAoX15A49IrpLMM5+RMezqHy/Ik/GZVYbc3etbDM65W0cFw NxeCsvejIBnxr9G9xqN4z2ttbGPAuU96Y5h8QV/+34Wtnjjsd1mQpQ86f+v71b52s+VG721VC4Sd NqfzEUuy91l0m0PvltF+5lsRnDOTFCUSgfXYk0CTSoS9LBTQ4qh1adS3xCMxgOynckV4UE81ehtX blBBggyZs9bwyPdMGKHL/nrRCU2VUnk166QVnA== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to b.root-servers.net for GOV/DS
	Received 367 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (367 bytes) ;; HEADER SECTION ;; id = 62267 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20210430170000 20210417160000 14631 . oh4766ELnYaeE/HIlbOLyP9jpE0IpXyyyWk5hlV94HhaJFTsXWpSd2nhV6hiPiGCl2/2L/EeTnCS sAUhEbEGCgQjLGjt58qB5oA0vif4BRAoX15A49IrpLMM5+RMezqHy/Ik/GZVYbc3etbDM65W0cFw NxeCsvejIBnxr9G9xqN4z2ttbGPAuU96Y5h8QV/+34Wtnjjsd1mQpQ86f+v71b52s+VG721VC4Sd NqfzEUuy91l0m0PvltF+5lsRnDOTFCUSgfXYk0CTSoS9LBTQ4qh1adS3xCMxgOynckV4UE81ehtX blBBggyZs9bwyPdMGKHL/nrRCU2VUnk166QVnA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20210430170000 20210417160000 14631 . oh4766ELnYaeE/HIlbOLyP9jpE0IpXyyyWk5hlV94HhaJFTsXWpSd2nhV6hiPiGCl2/2L/EeTnCS sAUhEbEGCgQjLGjt58qB5oA0vif4BRAoX15A49IrpLMM5+RMezqHy/Ik/GZVYbc3etbDM65W0cFw NxeCsvejIBnxr9G9xqN4z2ttbGPAuU96Y5h8QV/+34Wtnjjsd1mQpQ86f+v71b52s+VG721VC4Sd NqfzEUuy91l0m0PvltF+5lsRnDOTFCUSgfXYk0CTSoS9LBTQ4qh1adS3xCMxgOynckV4UE81ehtX blBBggyZs9bwyPdMGKHL/nrRCU2VUnk166QVnA== )`
	RRSIG=14631 and DNSKEY=14631 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to b.gov-servers.net for GOV/DNSKEY
	Received 957 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (957 bytes) ;; HEADER SECTION ;; id = 7599 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (4 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAaQup5BwKqvn1In1x+PzsLpFav6zsLaW7fivUq9PpXUzXn++rcjtYBS15NXm1hMAZb5FChUp 35qd7hVqdwNuT/NGFNHfEykaeWjkqBKX2mCBSiyIsK4i4TQu7CS2CgqfqR43wXFITyItTPP5wijo 9Jt4dsVTjAtNJKaXOKZ31tLaeM5C2bYqAofxX6oK3TVAZ7vFsjPqjJZtZUBMZq28BiU= ) ; Key ID = 27306 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbexj/PgN9RGQ1TokFnYjJ87/rMFIqE/rXjWtsmwzxteOcKIVCUJAAWg0pIZZer88omuCVrq +fAz0iBOgY48TRFWgyVFV9rm5esTGOEuCU6BTYj1Cb7zrpb/RayEw0yzVVZ0adT/AXbAsQhteTpV kgWK8K33gxq4wY70AK5KWdDCyj4v9uR6TS0mgbGdg7RzFCi8xeZoYP2PY5XOhAHFon0= ) ; Key ID = 48498 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210424190254 20210409185754 7698 gov. n22zk3nGnUAfkBIwcRzP3TVYEGZZTU94YlknLpBkKEL0BgIFcanyzSE4JKtX5yrfSOsHbkS4IBIS izbnFf7/uizd6mLCw6WSKdlEYI1fwYihNL2EpHcgZ5Ni1Hv1B8m7WQ8lK0V/55TBn1cs8xXnwhMq waNx5zreUAak8HY0Sbai3l7qNzxkNbyYgmkqGtqWnuopbmZHb6dNUiO//tiT4a9W3lKCRPk2sOBz moYQ0dlyK8kFvhG9okbST+QGLZOahfZ1ZSwtrCx8F1NzyffoYcCrvtLF019MDzvUUtx4j1aIciIP 8nxnfbRSIwzNB5lJyUzaCiNNTYNFliTxFBmG/A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAaQup5BwKqvn1In1x+PzsLpFav6zsLaW7fivUq9PpXUzXn++rcjtYBS15NXm1hMAZb5FChUp 35qd7hVqdwNuT/NGFNHfEykaeWjkqBKX2mCBSiyIsK4i4TQu7CS2CgqfqR43wXFITyItTPP5wijo 9Jt4dsVTjAtNJKaXOKZ31tLaeM5C2bYqAofxX6oK3TVAZ7vFsjPqjJZtZUBMZq28BiU= ) ; Key ID = 27306`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbexj/PgN9RGQ1TokFnYjJ87/rMFIqE/rXjWtsmwzxteOcKIVCUJAAWg0pIZZer88omuCVrq +fAz0iBOgY48TRFWgyVFV9rm5esTGOEuCU6BTYj1Cb7zrpb/RayEw0yzVVZ0adT/AXbAsQhteTpV kgWK8K33gxq4wY70AK5KWdDCyj4v9uR6TS0mgbGdg7RzFCi8xeZoYP2PY5XOhAHFon0= ) ; Key ID = 48498`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210424190254 20210409185754 7698 gov. n22zk3nGnUAfkBIwcRzP3TVYEGZZTU94YlknLpBkKEL0BgIFcanyzSE4JKtX5yrfSOsHbkS4IBIS izbnFf7/uizd6mLCw6WSKdlEYI1fwYihNL2EpHcgZ5Ni1Hv1B8m7WQ8lK0V/55TBn1cs8xXnwhMq waNx5zreUAak8HY0Sbai3l7qNzxkNbyYgmkqGtqWnuopbmZHb6dNUiO//tiT4a9W3lKCRPk2sOBz moYQ0dlyK8kFvhG9okbST+QGLZOahfZ1ZSwtrCx8F1NzyffoYcCrvtLF019MDzvUUtx4j1aIciIP 8nxnfbRSIwzNB5lJyUzaCiNNTYNFliTxFBmG/A== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=27306 is now in the chain-of-trust
	DNSKEY=48498 is now in the chain-of-trust
	Query to c.gov-servers.net for SENTINEL.GOV/A
	Received 387 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (387 bytes) ;; HEADER SECTION ;; id = 33409 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SENTINEL.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) SENTINEL.GOV. 86400 IN NS dns2.l-secb.net. SENTINEL.GOV. 86400 IN NS dns1.l-secb.net. SENTINEL.GOV. 86400 IN NS dns3.l-secb.net. SENTINEL.GOV. 3600 IN DS 8404 8 1 b31cff3773f017777559f677741f855f6a285a03 SENTINEL.GOV. 3600 IN DS ( 8404 8 2 9b20c540f363f4c2e6f904e6ee07c8587a3d2295d2f0964704de22575ac14b65 ) SENTINEL.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210425031007 20210418031007 48498 gov. X1PY+mqeHYFfJp1jAW0kCs1w+wopg+9LT6LKTh1FzMBVsusJkaAPlSM+7KyHH5EpWJl0VxKe8LUd P4IiopWPJPzQJ4ptF4UfwOKc79sEt7o1ow6gKEgSZnAivRmCGdLWHePKcgp49Coa9gxCDpq1EwfW EUl+4+AfjSj7OXRqujJyBcfVZValmJvpYtg737M6WVsi35C8YIMUG1AkssakRQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.gov-servers.net for SENTINEL.GOV/DNSKEY
	Received 387 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (387 bytes) ;; HEADER SECTION ;; id = 58274 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SENTINEL.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) SENTINEL.GOV. 86400 IN NS dns2.l-secb.net. SENTINEL.GOV. 86400 IN NS dns1.l-secb.net. SENTINEL.GOV. 86400 IN NS dns3.l-secb.net. SENTINEL.GOV. 3600 IN DS 8404 8 1 b31cff3773f017777559f677741f855f6a285a03 SENTINEL.GOV. 3600 IN DS ( 8404 8 2 9b20c540f363f4c2e6f904e6ee07c8587a3d2295d2f0964704de22575ac14b65 ) SENTINEL.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210425031007 20210418031007 48498 gov. X1PY+mqeHYFfJp1jAW0kCs1w+wopg+9LT6LKTh1FzMBVsusJkaAPlSM+7KyHH5EpWJl0VxKe8LUd P4IiopWPJPzQJ4ptF4UfwOKc79sEt7o1ow6gKEgSZnAivRmCGdLWHePKcgp49Coa9gxCDpq1EwfW EUl+4+AfjSj7OXRqujJyBcfVZValmJvpYtg737M6WVsi35C8YIMUG1AkssakRQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone SENTINEL.GOV

SENTINEL.GOV

	Checking DS between GOV and SENTINEL.GOV
	Query to b.gov-servers.net for SENTINEL.GOV/DS
	Received 320 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (320 bytes) ;; HEADER SECTION ;; id = 55202 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SENTINEL.GOV. IN DS ;; ANSWER SECTION (3 records) SENTINEL.GOV. 3600 IN DS 8404 8 1 b31cff3773f017777559f677741f855f6a285a03 SENTINEL.GOV. 3600 IN DS ( 8404 8 2 9b20c540f363f4c2e6f904e6ee07c8587a3d2295d2f0964704de22575ac14b65 ) SENTINEL.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210425031007 20210418031007 48498 gov. X1PY+mqeHYFfJp1jAW0kCs1w+wopg+9LT6LKTh1FzMBVsusJkaAPlSM+7KyHH5EpWJl0VxKe8LUd P4IiopWPJPzQJ4ptF4UfwOKc79sEt7o1ow6gKEgSZnAivRmCGdLWHePKcgp49Coa9gxCDpq1EwfW EUl+4+AfjSj7OXRqujJyBcfVZValmJvpYtg737M6WVsi35C8YIMUG1AkssakRQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for SENTINEL.GOV in the GOV zone
	DS=8404/SHA-1 has algorithm RSASHA256
	DS=8404/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`SENTINEL.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210425031007 20210418031007 48498 gov. X1PY+mqeHYFfJp1jAW0kCs1w+wopg+9LT6LKTh1FzMBVsusJkaAPlSM+7KyHH5EpWJl0VxKe8LUd P4IiopWPJPzQJ4ptF4UfwOKc79sEt7o1ow6gKEgSZnAivRmCGdLWHePKcgp49Coa9gxCDpq1EwfW EUl+4+AfjSj7OXRqujJyBcfVZValmJvpYtg737M6WVsi35C8YIMUG1AkssakRQ== )`
	RRSIG=48498 and DNSKEY=48498 verifies the DS RRset
	DS=8404/SHA-1 is now in the chain-of-trust
	`SENTINEL.GOV. 3600 IN DS 8404 8 1 b31cff3773f017777559f677741f855f6a285a03`
	`SENTINEL.GOV. 3600 IN DS ( 8404 8 2 9b20c540f363f4c2e6f904e6ee07c8587a3d2295d2f0964704de22575ac14b65 )`
	Query to dns3.l-secb.net for SENTINEL.GOV/DNSKEY
	Received 1257 bytes from 35.163.67.210
	;; Answer received from 35.163.67.210 (1257 bytes) ;; HEADER SECTION ;; id = 58535 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SENTINEL.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) SENTINEL.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAaGp+BXYf0O4PMg13paoCwbkd88e8g9ueT74ZtL4ozGs8/OX5ypJEaY5/vtbaLogJFc5RYi7 33pfit+TqRd2qF/zJyZVv7dR0Z43Qk9ZLAPiKbWpKQhPJL494lXd3FTdyNw9yZjAZbfnC8dK9rUf TvRMG6GzYmn9TvPbcwLb3f49 ) ; Key ID = 43728 SENTINEL.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAcr3OPzcxPO5PJlP3pxkIsppFMVfLXNVsjv0N+6ZdBdix+BBt2+Nhd+bFPwMlzkmDfBViX9r pYU9ybEZmjlVhhvJOGILMiXN6HeYXbV2sTTgQ//SQKoL9q7PsvQ7WNxSk479RSHIyicEl1h9LWrt LNWbSZX0tl4QEGSrDbRxCB07 ) ; Key ID = 39273 SENTINEL.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAbCO9oRbfPAdzhNnDDhN0Z5vYpci97obVEEZn4uNwTrdaWNuEJMXP2kOUfFe0pTs2jlz/Pt6 TacxglyASFarIAlHahGgOlON+rFxf4h4Bt2239mTbRwaFh22wttnivByxOLiY1kd4+RRSubO605W qP9JuDZP6AIj2t4cPQ/ljmE2SD2RO2kMXefx3/3ADcgKSjh/UZoRlYzgaDLri06xkwwZxP4Hw9oL KhFFt03auKl1sHQaXh3ZxXOzkTXHYT9oIl78t597dUHxUb0tfuhzagZND8ik2wYikNSqsvoPyqou 6jnS8Dkv3+Zc5asCRDrmhCYDAGCkQPgO95paIofGi6U= ) ; Key ID = 8404 SENTINEL.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210422162018 20210415162018 43728 sentinel.gov. f1UNpi0uC9VybvtJ1FbBHdoPov/gI3CW5Pc4evtG4sHUYBYA77FGH2lLrTzOqISn5Jl8EcYa9poH RcLtVTOmJPpOO0sqehUR2uF4a9GeCmhHdioxoQB5MmoCtFbOVJVRQ+V5azOq7sMNSlcpt8ljoep2 vMhMnJdF4/Q8H5gVYcM= ) SENTINEL.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210422162018 20210415162018 39273 sentinel.gov. Oe/vYqy9n3Nkm6XSZ8YcUr6/KniHTLrJtVjjPzXdc8i+qHzuqwejdlT5RwGoheNuvsM9eDYvWhRK QID7DZIoX/msuJi1w69EwWE9go28aHC6iFPfg/h8CvmYmOUrBq/YtpN32b296jcIpJPUY+K+M3CM sjpBpR0A4VmNukXUrK8= ) SENTINEL.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210422162018 20210415162018 8404 sentinel.gov. N12jQ72yAGSeYfnZU+IiD5++Mrk4MPCFlmWRRq5Qjd6VxIPzrFCeuaUy1W6U77M1K6WBYM3SF1M+ HbYPAT6xcA0JJ5Yxtu32qjQ+SwgwlpbRw2ayCjeNrzs05oKQc5nyFIB/q4FafUe85mDJNUexdnY8 nFv8KA6wHJdyXu524yenfWj868Khh6Nw0UXt7K1foXrQGRX1/w4EOSjFyaX+byD+1rsGIoHY/f+r CvEmHA7apYaYwOae2VQteHzOzS8YsEROGSDtHam00i/WV3csiFzHJpVWal1TFcXGituhRnoM7GMt Zs/dJzZvJvm67s4CbIgkQtbDXP6Tl2px++V/Lg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for SENTINEL.GOV
	`SENTINEL.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAaGp+BXYf0O4PMg13paoCwbkd88e8g9ueT74ZtL4ozGs8/OX5ypJEaY5/vtbaLogJFc5RYi7 33pfit+TqRd2qF/zJyZVv7dR0Z43Qk9ZLAPiKbWpKQhPJL494lXd3FTdyNw9yZjAZbfnC8dK9rUf TvRMG6GzYmn9TvPbcwLb3f49 ) ; Key ID = 43728`
	`SENTINEL.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAcr3OPzcxPO5PJlP3pxkIsppFMVfLXNVsjv0N+6ZdBdix+BBt2+Nhd+bFPwMlzkmDfBViX9r pYU9ybEZmjlVhhvJOGILMiXN6HeYXbV2sTTgQ//SQKoL9q7PsvQ7WNxSk479RSHIyicEl1h9LWrt LNWbSZX0tl4QEGSrDbRxCB07 ) ; Key ID = 39273`
	`SENTINEL.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAbCO9oRbfPAdzhNnDDhN0Z5vYpci97obVEEZn4uNwTrdaWNuEJMXP2kOUfFe0pTs2jlz/Pt6 TacxglyASFarIAlHahGgOlON+rFxf4h4Bt2239mTbRwaFh22wttnivByxOLiY1kd4+RRSubO605W qP9JuDZP6AIj2t4cPQ/ljmE2SD2RO2kMXefx3/3ADcgKSjh/UZoRlYzgaDLri06xkwwZxP4Hw9oL KhFFt03auKl1sHQaXh3ZxXOzkTXHYT9oIl78t597dUHxUb0tfuhzagZND8ik2wYikNSqsvoPyqou 6jnS8Dkv3+Zc5asCRDrmhCYDAGCkQPgO95paIofGi6U= ) ; Key ID = 8404`
	DNSKEY=8404/SEP is now in the chain-of-trust
	DS=8404/SHA-1 verifies DNSKEY=8404/SEP
	DS=8404/SHA-256 verifies DNSKEY=8404/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`SENTINEL.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210422162018 20210415162018 43728 sentinel.gov. f1UNpi0uC9VybvtJ1FbBHdoPov/gI3CW5Pc4evtG4sHUYBYA77FGH2lLrTzOqISn5Jl8EcYa9poH RcLtVTOmJPpOO0sqehUR2uF4a9GeCmhHdioxoQB5MmoCtFbOVJVRQ+V5azOq7sMNSlcpt8ljoep2 vMhMnJdF4/Q8H5gVYcM= )`
	`SENTINEL.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210422162018 20210415162018 39273 sentinel.gov. Oe/vYqy9n3Nkm6XSZ8YcUr6/KniHTLrJtVjjPzXdc8i+qHzuqwejdlT5RwGoheNuvsM9eDYvWhRK QID7DZIoX/msuJi1w69EwWE9go28aHC6iFPfg/h8CvmYmOUrBq/YtpN32b296jcIpJPUY+K+M3CM sjpBpR0A4VmNukXUrK8= )`
	`SENTINEL.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210422162018 20210415162018 8404 sentinel.gov. N12jQ72yAGSeYfnZU+IiD5++Mrk4MPCFlmWRRq5Qjd6VxIPzrFCeuaUy1W6U77M1K6WBYM3SF1M+ HbYPAT6xcA0JJ5Yxtu32qjQ+SwgwlpbRw2ayCjeNrzs05oKQc5nyFIB/q4FafUe85mDJNUexdnY8 nFv8KA6wHJdyXu524yenfWj868Khh6Nw0UXt7K1foXrQGRX1/w4EOSjFyaX+byD+1rsGIoHY/f+r CvEmHA7apYaYwOae2VQteHzOzS8YsEROGSDtHam00i/WV3csiFzHJpVWal1TFcXGituhRnoM7GMt Zs/dJzZvJvm67s4CbIgkQtbDXP6Tl2px++V/Lg== )`
	RRSIG=43728 and DNSKEY=43728 verifies the DNSKEY RRset
	RRSIG=39273 and DNSKEY=39273 verifies the DNSKEY RRset
	RRSIG=8404 and DNSKEY=8404/SEP verifies the DNSKEY RRset
	DNSKEY=43728 is now in the chain-of-trust
	DNSKEY=39273 is now in the chain-of-trust
	Query to dns1.l-secb.net for SENTINEL.GOV/A
	Received 401 bytes from 198.77.70.37
	;; Answer received from 198.77.70.37 (401 bytes) ;; HEADER SECTION ;; id = 60162 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SENTINEL.GOV. IN A ;; ANSWER SECTION (3 records) SENTINEL.GOV. 30 IN A 18.204.120.174 SENTINEL.GOV. 30 IN RRSIG ( A 8 2 30 20210421095740 20210414095740 43728 sentinel.gov. EtRhAfVqkffB3fevqomMXTiHrBvB/P+8wzhVGI6e6p77XK/UrjSet9v8fBzaTdg/Cr722H4Cc2uC oHAboE72ek1tF9Xkt/lEDNn3k0cK2j20xHSR8ec4SOmudsIojMs1AqXd2GVwvkG73kaFuinD9php JHZEdw3xWOB+oqBxb2c= ) SENTINEL.GOV. 30 IN RRSIG ( A 8 2 30 20210422184724 20210415184724 39273 sentinel.gov. ECX73ModDyElIZ7Q3guN63qQ6v//RS1lzQEMO4nS13s+aU0U1+zcux0ZIw9i5vBXaP1gKEXfdSO7 DNcEsnYbP5muI30aih+vCE+zCPXwFCfAA2tE8oQRO6+VZezafLSDKtPQiv1x5qx6K2GUQQ6zpdD7 /NP366ElJMrs4lAve7E= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns1.l-secb.net is authoritative for SENTINEL.GOV
	Found RRSIG signed by sentinel.gov zone
	Query to dns2.l-secb.net for SENTINEL.GOV/SOA
	Received 975 bytes from 205.130.212.37
	;; Answer received from 205.130.212.37 (975 bytes) ;; HEADER SECTION ;; id = 7286 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SENTINEL.GOV. IN SOA ;; ANSWER SECTION (3 records) SENTINEL.GOV. 900 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2020101601 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) SENTINEL.GOV. 900 IN RRSIG ( SOA 8 2 900 20210421174121 20210414174121 43728 sentinel.gov. mYUb1NuQF1SI5wW2oBm86hiz4lOSubFcfTzWqTd0A6Tbao4t4CR7Jr1GxZd4UuYcOVeQBqGKnyM8 vA7jEQuR4AyORJhDJF7TIvzWHP7+iC9lwWQvC020hgPaUAZdlJNjEjhlTb6+XnJS8HHhdXatyVEQ iDOfuD0DxFYeP2TK4Qg= ) SENTINEL.GOV. 900 IN RRSIG ( SOA 8 2 900 20210422073913 20210415073913 39273 sentinel.gov. NKc3M88f1LcuMDk+mI9rwEVflorbWsZDSc2kQfDsgAooHsYbz0NI8Va43Yv0bNO9YxzPOJit3luw 8auIYU75BGlqxSRBoKPzFNelz34LYr0f1PJCfaToj66j9/aEU0YCKVu3XXpGHZilr166gAM+K1x5 Jb5MpDAkLlmr5c9IDrA= ) ;; AUTHORITY SECTION (5 records) SENTINEL.GOV. 900 IN NS dns2.l-secb.net. SENTINEL.GOV. 900 IN NS dns3.l-secb.net. SENTINEL.GOV. 900 IN NS dns1.l-secb.net. SENTINEL.GOV. 900 IN RRSIG ( NS 8 2 900 20210421205702 20210414205702 43728 sentinel.gov. Mw7IuxoqytzKWVxiSlywPFUwvTrEj11OBZ2ah8jz37ovY61ZpJTeeTDMOAeFIoVotOM2yopLneyw /QlHf5A4rPzFAHPoY5ZCyDmsKuDr0UaXd28YHntWbnxNQf4GwjlIo++UymyzCf3phfW/miQWQb3t nZ/WiCw+PlVu8JAO9oA= ) SENTINEL.GOV. 900 IN RRSIG ( NS 8 2 900 20210422130018 20210415130018 39273 sentinel.gov. gRNLjiOGjQ18ht+6Siu/M05X/33rgtxw0fnPrZ9z4UcuD/jyosCWOCN8gUyxbBneWvh+ERGd1caC 7KCQfg9zeUW0FZUwWsqbApI0t70fUbnvfC7PnABwoLvXzs8RtooP0Jccw43K4q9kW1ttT56kvphy oZDUu4XY/pFDXtUBZYg= ) ;; ADDITIONAL SECTION (7 records) dns1.l-secb.net. 43200 IN A 198.77.70.37 dns2.l-secb.net. 43200 IN A 205.130.212.37 dns3.l-secb.net. 43200 IN A 35.163.67.210 dns1.l-secb.net. 43200 IN AAAA 2001:1900:2268:770:198:77:70:37 dns2.l-secb.net. 43200 IN AAAA 2001:1900:2268:512:205:130:212:37 dns3.l-secb.net. 43200 IN AAAA 2600:1f14:a2e:4b00:35:163:67:210 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns3.l-secb.net for SENTINEL.GOV/SOA
	Received 975 bytes from 35.163.67.210
	;; Answer received from 35.163.67.210 (975 bytes) ;; HEADER SECTION ;; id = 42343 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SENTINEL.GOV. IN SOA ;; ANSWER SECTION (3 records) SENTINEL.GOV. 900 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2020101601 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) SENTINEL.GOV. 900 IN RRSIG ( SOA 8 2 900 20210421212118 20210414212118 43728 sentinel.gov. EtjcmjG1k+V2gJhciwuiEu3HtBj0EMYjBs4BQeaoJZGYtdVyEhlkxbwN4vmuqu+NmkNZPzeg8vRc NtdSVGlCh4OKoYmAqKTBvKat5cItcRhPIXqjjWWYMrpYd63isAS7ln/34vkldG3L3keJP2RHyZf5 UhIDmDjWmLg5CezrSaU= ) SENTINEL.GOV. 900 IN RRSIG ( SOA 8 2 900 20210422073912 20210415073912 39273 sentinel.gov. FnnfcZ1GOL2IkrFYzJ0vGJqPr3AUbsw7MVYev3fosaDC3p7WMdScmvdgYx1LE+6RXgsQKoXSUzvo gmLu/mAu/co7evSFHcDXF6B++R2/YKfffWNBJ764Y/D6l+3t9wC4RGoMp8j/2XZ+aqU2Krc1EtPP FZ810cw/teILqRm263s= ) ;; AUTHORITY SECTION (5 records) SENTINEL.GOV. 900 IN NS dns2.l-secb.net. SENTINEL.GOV. 900 IN NS dns1.l-secb.net. SENTINEL.GOV. 900 IN NS dns3.l-secb.net. SENTINEL.GOV. 900 IN RRSIG ( NS 8 2 900 20210422165910 20210415165910 43728 sentinel.gov. LkMMInBHFDU+/XDXrulx5KroPjR3s9OaiwA7wzd2AKDnX/dFB4pOs6Hv6CwD2QP4VWJax0hv4SwT Msgjd+3RIcRu6ovJZ26siASwmwU/JMzWfr3yMi5KYvfmFFm3O7jTWkaiYig7MrX7Brkf/46w2DrX u4yIxcZ6YZbnEi84+Z8= ) SENTINEL.GOV. 900 IN RRSIG ( NS 8 2 900 20210422165910 20210415165910 39273 sentinel.gov. xL2g8zFeQm3VHYt+zGCpsVY8ZzIccjr9priGSCJynVi2sRt/MMPCK9jtVfkYHY900pS6D82pMJXp Eo+MigQN9mqu4DLPS1eh0bZxpGw0jLtxFoAiZKWnpJUUzsKeX5TV5AKlJvfhUZ6kJSpw+iHAbWX0 5kWarml8yAJ7dolE4Aw= ) ;; ADDITIONAL SECTION (7 records) dns1.l-secb.net. 43200 IN A 198.77.70.37 dns2.l-secb.net. 43200 IN A 205.130.212.37 dns3.l-secb.net. 43200 IN A 35.163.67.210 dns1.l-secb.net. 43200 IN AAAA 2001:1900:2268:770:198:77:70:37 dns2.l-secb.net. 43200 IN AAAA 2001:1900:2268:512:205:130:212:37 dns3.l-secb.net. 43200 IN AAAA 2600:1f14:a2e:4b00:35:163:67:210 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns1.l-secb.net for SENTINEL.GOV/A
	Received 401 bytes from 198.77.70.37
	;; Answer received from 198.77.70.37 (401 bytes) ;; HEADER SECTION ;; id = 61482 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SENTINEL.GOV. IN A ;; ANSWER SECTION (3 records) SENTINEL.GOV. 30 IN A 18.204.120.174 SENTINEL.GOV. 30 IN RRSIG ( A 8 2 30 20210421182515 20210414182515 43728 sentinel.gov. aDtxzXP7ibqti2LCcie3+lu5bOYkv8xRFxjDRps2BCvxuLK5YEvG/5tIJKkC57RHbTufwYZauEdU WbyTiykB3GqD4VpwetOk/4lXzjU5vnW/k8amRH5vitW2xZZ90KBrzygLGcwoGEPkzHar6zfOxO+L QbqdcoKhQBcQK9uaPkE= ) SENTINEL.GOV. 30 IN RRSIG ( A 8 2 30 20210422095224 20210415095224 39273 sentinel.gov. sLp36c/kYGM+RqclV1H5caSgXu1i4vrAy3SAZEVV3PxdvugwzpCGbkuFFrNIwKMOPs8aceaGzQoa lFuzUAIns5z7QpdOGNxfDiMMHC+HFmQ1eCyJk5nkZKC4/hQVwYAT5wKGlaek0ZneWvrmuGrdDs43 06hO+J4yYsoiygTx0k8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	SENTINEL.GOV A RR has value 18.204.120.174
	Found 2 RRSIGs over A RRset
	`SENTINEL.GOV. 30 IN RRSIG ( A 8 2 30 20210421182515 20210414182515 43728 sentinel.gov. aDtxzXP7ibqti2LCcie3+lu5bOYkv8xRFxjDRps2BCvxuLK5YEvG/5tIJKkC57RHbTufwYZauEdU WbyTiykB3GqD4VpwetOk/4lXzjU5vnW/k8amRH5vitW2xZZ90KBrzygLGcwoGEPkzHar6zfOxO+L QbqdcoKhQBcQK9uaPkE= )`
	`SENTINEL.GOV. 30 IN RRSIG ( A 8 2 30 20210422095224 20210415095224 39273 sentinel.gov. sLp36c/kYGM+RqclV1H5caSgXu1i4vrAy3SAZEVV3PxdvugwzpCGbkuFFrNIwKMOPs8aceaGzQoa lFuzUAIns5z7QpdOGNxfDiMMHC+HFmQ1eCyJk5nkZKC4/hQVwYAT5wKGlaek0ZneWvrmuGrdDs43 06hO+J4yYsoiygTx0k8= )`
	RRSIG=43728 and DNSKEY=43728 verifies the A RRset
	RRSIG=39273 and DNSKEY=39273 verifies the A RRset

SENTINEL.GOV

	Query to dns2.l-secb.net for SENTINEL.GOV/A
	Received 401 bytes from 205.130.212.37
	;; Answer received from 205.130.212.37 (401 bytes) ;; HEADER SECTION ;; id = 13257 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SENTINEL.GOV. IN A ;; ANSWER SECTION (3 records) SENTINEL.GOV. 30 IN A 18.204.120.174 SENTINEL.GOV. 30 IN RRSIG ( A 8 2 30 20210421092423 20210414092423 43728 sentinel.gov. mbQq04IPgbczbmWBa5sC10QqQ//9PJztWUXut854giW8CjEMue17fC7whiUJ+Cg3BkXzpRNvQoKw axowQOhVUMFtbe4IDgISJFdTawmTn4ATzOqSI0ci2mEecgl3x3rcS3FOxy8ZnQoUnozl5rLaacQB t2QUcjpVyYPIA9oVU/0= ) SENTINEL.GOV. 30 IN RRSIG ( A 8 2 30 20210422133426 20210415133426 39273 sentinel.gov. d5dTu41mrKM/yW/SL958vPUtJOeLxX3aGfVOG9Nzug66V1VxAkwihq+YSG25xvMXRbnm4TKM2uz5 iK2LlKkT3ElzO+9s8DYhVUIfTWsqNJqVMXMKtOm3PjFLcsURaTgr4ROmFu+bX5G2csZJKD5imSrv e3h61NzVUBUvNZ2rMis= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns2.l-secb.net is authoritative for SENTINEL.GOV
	Found RRSIG signed by sentinel.gov zone
	Query to dns2.l-secb.net for SENTINEL.GOV/A
	Received 401 bytes from 205.130.212.37
	;; Answer received from 205.130.212.37 (401 bytes) ;; HEADER SECTION ;; id = 54064 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SENTINEL.GOV. IN A ;; ANSWER SECTION (3 records) SENTINEL.GOV. 30 IN A 18.204.120.174 SENTINEL.GOV. 30 IN RRSIG ( A 8 2 30 20210421161504 20210414161504 43728 sentinel.gov. ANtRzAskVCPZMM3PTj4Ub/GCz5kAS1NXRTqpg/HqDwjEDIOws1/30E/Z5TBhQ+88jwOKlSGZ3yz5 xkWWZPufqu5TO4x/DzeOVl1YwabHo8FfmCHTyFJ6eACuzjO2t9D+vfYxkpprDtqGt2rex07n8qsZ nowPvMmqAP6f5Odpcy0= ) SENTINEL.GOV. 30 IN RRSIG ( A 8 2 30 20210422102425 20210415102425 39273 sentinel.gov. Ru2X3OV/FJjdHAVB6v2zUMSPsZIuu8Yn+G1qyL6umED4yumoZrYcQKLujnUEFW8GkhBvkArHf1ka N9RRKwZ5od5Oa87UrnyeJCL8nUg1PNH5GdV0mTtGpMFShK0iaa/qvcLaS/aIYTPWqKzZ/SDG3XdU czc/fy+my2OeEiG9ZqU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	SENTINEL.GOV A RR has value 18.204.120.174
	Found 2 RRSIGs over A RRset
	`SENTINEL.GOV. 30 IN RRSIG ( A 8 2 30 20210421161504 20210414161504 43728 sentinel.gov. ANtRzAskVCPZMM3PTj4Ub/GCz5kAS1NXRTqpg/HqDwjEDIOws1/30E/Z5TBhQ+88jwOKlSGZ3yz5 xkWWZPufqu5TO4x/DzeOVl1YwabHo8FfmCHTyFJ6eACuzjO2t9D+vfYxkpprDtqGt2rex07n8qsZ nowPvMmqAP6f5Odpcy0= )`
	`SENTINEL.GOV. 30 IN RRSIG ( A 8 2 30 20210422102425 20210415102425 39273 sentinel.gov. Ru2X3OV/FJjdHAVB6v2zUMSPsZIuu8Yn+G1qyL6umED4yumoZrYcQKLujnUEFW8GkhBvkArHf1ka N9RRKwZ5od5Oa87UrnyeJCL8nUg1PNH5GdV0mTtGpMFShK0iaa/qvcLaS/aIYTPWqKzZ/SDG3XdU czc/fy+my2OeEiG9ZqU= )`
	RRSIG=43728 and DNSKEY=43728 verifies the A RRset
	RRSIG=39273 and DNSKEY=39273 verifies the A RRset

SENTINEL.GOV

	Query to dns3.l-secb.net for SENTINEL.GOV/A
	Received 401 bytes from 35.163.67.210
	;; Answer received from 35.163.67.210 (401 bytes) ;; HEADER SECTION ;; id = 61088 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SENTINEL.GOV. IN A ;; ANSWER SECTION (3 records) SENTINEL.GOV. 30 IN A 18.204.120.174 SENTINEL.GOV. 30 IN RRSIG ( A 8 2 30 20210421122132 20210414122132 43728 sentinel.gov. MKFCgpmhUryBf48ucAxXEDYBVOeWJjrHBLyRHt6zX9TIIks6oxG5fgHs9LOsns9awam8hcG4yvwR /hgQ67ZxKRQX+HEosPmiZROnwRP0dCGaKWRpWs/6lYrcA24T1OcecsVdJ3IowsMGtMYiXCe6jsS2 8qg81anXwDlWVd3jjHM= ) SENTINEL.GOV. 30 IN RRSIG ( A 8 2 30 20210422100031 20210415100031 39273 sentinel.gov. xZzCs3JqktUUb/ZhJvFHAOG45ttx5EcVQZyO+4x2O/5HVOAyaONZq6AQnMXqg1Zfe8Y2FikFgNZu FQFKOpe54Nqxiv/6jXMyssfDGLzRPutQC1Ui5wg25qK5clhrhb44H3mOc80pilx/yUgas4EASC8V CR2KbEQG5ophiSjHvg8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns3.l-secb.net is authoritative for SENTINEL.GOV
	Found RRSIG signed by sentinel.gov zone
	Query to dns3.l-secb.net for SENTINEL.GOV/A
	Received 401 bytes from 35.163.67.210
	;; Answer received from 35.163.67.210 (401 bytes) ;; HEADER SECTION ;; id = 3288 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SENTINEL.GOV. IN A ;; ANSWER SECTION (3 records) SENTINEL.GOV. 30 IN A 18.204.120.174 SENTINEL.GOV. 30 IN RRSIG ( A 8 2 30 20210421212118 20210414212118 43728 sentinel.gov. J82MpXSB3PSRPePWlMIgcIL+exvds3m1BxaXgCpI3Wlm4J78RHaPhrxHavSzbHC/St6MGuTAw46J PIjNmkvDTT0Czx3qCK/kwd6fQSU+mHth7e+eKLZ6boEMoUGLQfgI/Ky04UIajjHyTJ08bLtuEirY dWVMKNR9DMu9oJY7eIo= ) SENTINEL.GOV. 30 IN RRSIG ( A 8 2 30 20210422135611 20210415135611 39273 sentinel.gov. iWeDjKdkeulJjkQbMkgGePRBId6a9ik21slQBdO+EgqDcll/exB3WZy8UZEAW4JqZOSQMdd1m5gn uj/ZWmtW6hpzCUtTmFESs2Pdm9eAQ+aWFgQaag6Mngp2Fc4rcw8mNstsvPsx5ySJwM3M5DB2csMT C6prUogLHZaat188KLE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	SENTINEL.GOV A RR has value 18.204.120.174
	Found 2 RRSIGs over A RRset
	`SENTINEL.GOV. 30 IN RRSIG ( A 8 2 30 20210421212118 20210414212118 43728 sentinel.gov. J82MpXSB3PSRPePWlMIgcIL+exvds3m1BxaXgCpI3Wlm4J78RHaPhrxHavSzbHC/St6MGuTAw46J PIjNmkvDTT0Czx3qCK/kwd6fQSU+mHth7e+eKLZ6boEMoUGLQfgI/Ky04UIajjHyTJ08bLtuEirY dWVMKNR9DMu9oJY7eIo= )`
	`SENTINEL.GOV. 30 IN RRSIG ( A 8 2 30 20210422135611 20210415135611 39273 sentinel.gov. iWeDjKdkeulJjkQbMkgGePRBId6a9ik21slQBdO+EgqDcll/exB3WZy8UZEAW4JqZOSQMdd1m5gn uj/ZWmtW6hpzCUtTmFESs2Pdm9eAQ+aWFgQaag6Mngp2Fc4rcw8mNstsvPsx5ySJwM3M5DB2csMT C6prUogLHZaat188KLE= )`
	RRSIG=43728 and DNSKEY=43728 verifies the A RRset
	RRSIG=39273 and DNSKEY=39273 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test SENTINEL.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: