DNSSEC Analyzer - SOLARDECATHLON.GOV

Domain Name:

Time: 2020-08-14 03:26:58 UTC, NTP stratum 4

Analyzing DNSSEC problems for SOLARDECATHLON.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to m.root-servers.net for ./DNSKEY
	Received 864 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (864 bytes) ;; HEADER SECTION ;; id = 42270 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAdauOGxLhfAKFTTZwGhBXbk793QKdWIQRjiSftWdusCwkPhNyJrIjwtNffCWXGLlZAbpcs41 4RE3oS1qVwV+AdXsO92SBu5haGlxMUk0NqZO7Xlf84/wrzGZVRRouPo5pNX/CKS8Mv9UOi0olKGC u31dNfh8qCszWZcloLDgeLzSnQSkvFoGe69vNCfh7feESKedkBC2qRz0BZv9+oJI0IY/3D7WEnV0 NOlf8gSHozhfJFJ/ZAKtvw/Q3ogrVJFk0LyVaU/NVtVA5FM4pVMIRID7pfrPi78aAzG7b/Wh/Pce 4jPAIpS3dApq25YkvMuPvfB91NMf9FemKwlp78PBVcM= ) ; Key ID = 46594 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20200831000000 20200810000000 20326 . FyZ8LAbEV4Jbpm2/xcE8wZu+OSatuV+1xEbRaRLfTWsjvtrPnrKZTW7cnn1yphgDD9fSHA7gAA0c tS85lRSBxr24Du7Sh+KCaGKKbs3EnSIoTzMXK0mnSVJYL3yHOyofxXe/z3ZDAaBqOGQR2wkhEKih UhNJmPEaPDXUeOr0JwYgQRoEf6PdHXld7fBC1DjiEMhHA9sXsriuG3oLUxgJdZ1fslynQjTky769 ywLkpTF/IuX2nnko+RomXuBospuQdNcXaUi1ymfTE2i3xGbEvRZYGSI4DRbxvUK4u8Lu2rNJmXct vRsBvwcuWpIL182DkbGgsDdsarVRLtobfOwMGg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdauOGxLhfAKFTTZwGhBXbk793QKdWIQRjiSftWdusCwkPhNyJrIjwtNffCWXGLlZAbpcs41 4RE3oS1qVwV+AdXsO92SBu5haGlxMUk0NqZO7Xlf84/wrzGZVRRouPo5pNX/CKS8Mv9UOi0olKGC u31dNfh8qCszWZcloLDgeLzSnQSkvFoGe69vNCfh7feESKedkBC2qRz0BZv9+oJI0IY/3D7WEnV0 NOlf8gSHozhfJFJ/ZAKtvw/Q3ogrVJFk0LyVaU/NVtVA5FM4pVMIRID7pfrPi78aAzG7b/Wh/Pce 4jPAIpS3dApq25YkvMuPvfB91NMf9FemKwlp78PBVcM= ) ; Key ID = 46594`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20200831000000 20200810000000 20326 . FyZ8LAbEV4Jbpm2/xcE8wZu+OSatuV+1xEbRaRLfTWsjvtrPnrKZTW7cnn1yphgDD9fSHA7gAA0c tS85lRSBxr24Du7Sh+KCaGKKbs3EnSIoTzMXK0mnSVJYL3yHOyofxXe/z3ZDAaBqOGQR2wkhEKih UhNJmPEaPDXUeOr0JwYgQRoEf6PdHXld7fBC1DjiEMhHA9sXsriuG3oLUxgJdZ1fslynQjTky769 ywLkpTF/IuX2nnko+RomXuBospuQdNcXaUi1ymfTE2i3xGbEvRZYGSI4DRbxvUK4u8Lu2rNJmXct vRsBvwcuWpIL182DkbGgsDdsarVRLtobfOwMGg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=46594 is now in the chain-of-trust
	Query to c.root-servers.net for SOLARDECATHLON.GOV/A
	Received 676 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (676 bytes) ;; HEADER SECTION ;; id = 33064 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SOLARDECATHLON.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20200826200000 20200813190000 46594 . FRfeY/XKEq1xDgm7tlZEUYpeRhwAky7dEzF6l86g+6ixxzFqwVYLNiI5+P7K/DBhzlr2oo2+4uIj Xo7VOn8hJX+gd4jB1BI0ctZib5T1+lh7qaCkEqsUrKFd8CTzo9f0/c4Z2MqVIT5iAwQM/YNv87tA PxulqbYLB0S5KRi0w0ZTxkdEB5ZDKXzw5hGWmwRjhRuSXDfZPOh6OW2HNnaX2LM2HLmsk55n7SuK MpeDm9T0yEb7ZqCqPJFOpeUhKekPa9CcjGKDFmJ4pghYYxCxDzXvTvWIfnfaDN8/cbCMB+TeM2Vj VWDS0hlJvLGQkQ20anheeEreU6vuPp9Wvfw9Jw== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.root-servers.net for GOV/DNSKEY
	Received 658 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (658 bytes) ;; HEADER SECTION ;; id = 47209 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20200826200000 20200813190000 46594 . FRfeY/XKEq1xDgm7tlZEUYpeRhwAky7dEzF6l86g+6ixxzFqwVYLNiI5+P7K/DBhzlr2oo2+4uIj Xo7VOn8hJX+gd4jB1BI0ctZib5T1+lh7qaCkEqsUrKFd8CTzo9f0/c4Z2MqVIT5iAwQM/YNv87tA PxulqbYLB0S5KRi0w0ZTxkdEB5ZDKXzw5hGWmwRjhRuSXDfZPOh6OW2HNnaX2LM2HLmsk55n7SuK MpeDm9T0yEb7ZqCqPJFOpeUhKekPa9CcjGKDFmJ4pghYYxCxDzXvTvWIfnfaDN8/cbCMB+TeM2Vj VWDS0hlJvLGQkQ20anheeEreU6vuPp9Wvfw9Jw== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to f.root-servers.net for GOV/DS
	Received 403 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (403 bytes) ;; HEADER SECTION ;; id = 21146 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20200826200000 20200813190000 46594 . FRfeY/XKEq1xDgm7tlZEUYpeRhwAky7dEzF6l86g+6ixxzFqwVYLNiI5+P7K/DBhzlr2oo2+4uIj Xo7VOn8hJX+gd4jB1BI0ctZib5T1+lh7qaCkEqsUrKFd8CTzo9f0/c4Z2MqVIT5iAwQM/YNv87tA PxulqbYLB0S5KRi0w0ZTxkdEB5ZDKXzw5hGWmwRjhRuSXDfZPOh6OW2HNnaX2LM2HLmsk55n7SuK MpeDm9T0yEb7ZqCqPJFOpeUhKekPa9CcjGKDFmJ4pghYYxCxDzXvTvWIfnfaDN8/cbCMB+TeM2Vj VWDS0hlJvLGQkQ20anheeEreU6vuPp9Wvfw9Jw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20200826200000 20200813190000 46594 . FRfeY/XKEq1xDgm7tlZEUYpeRhwAky7dEzF6l86g+6ixxzFqwVYLNiI5+P7K/DBhzlr2oo2+4uIj Xo7VOn8hJX+gd4jB1BI0ctZib5T1+lh7qaCkEqsUrKFd8CTzo9f0/c4Z2MqVIT5iAwQM/YNv87tA PxulqbYLB0S5KRi0w0ZTxkdEB5ZDKXzw5hGWmwRjhRuSXDfZPOh6OW2HNnaX2LM2HLmsk55n7SuK MpeDm9T0yEb7ZqCqPJFOpeUhKekPa9CcjGKDFmJ4pghYYxCxDzXvTvWIfnfaDN8/cbCMB+TeM2Vj VWDS0hlJvLGQkQ20anheeEreU6vuPp9Wvfw9Jw== )`
	RRSIG=46594 and DNSKEY=46594 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to b.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (777 bytes) ;; HEADER SECTION ;; id = 4042 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAegdXlD9lumYfYK1EZkZgTXd/IgQSNnvRkdpQa8KXFujLQRrJ2+yqhamuyJq2HZ3k8yYqEER PmtKiuBYWIFw5on1Q0zUn3sO1/14bvKPcI5nbrpJXnlH672yS7FcSeWn14SRe9VzX1Y4/16QXtKh 2gC1Ot1nO0SUqjxdvY5lSDzcdJMRTJws3UjIK3f0uHMw+F5PuHpLWI5zZXir6KUuj2M= ) ; Key ID = 26665 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200822190254 20200807185754 7698 gov. gTJuEq5ZJKGbbiG4aBERDA6OchpSLAQP0PTIrfnoYefiGL3vmkV+xqI8nQ9ZJ5cHkwaEK6ECNin8 UbmEX/Q7vYMnQbCI4drJ/LaburOqW8wpyA6IgqbehmaYtEiXoOT+QGMnXejS+gNn2BJORqUik9vR TQRjm21x/m0bdK37/QqWkiS0WCrabfN7g5UopcZuYD6UB5w9o+83utxRjMJi5tfdxi489yx74+NV P96khjCFtRvCQcnNGQlnOlEKZvHK4KoeLk4rwXtIn/FHMFTRrh2m99v5P7REzq40UHeTGNWuuZII adQu43KIsI6sJspwwOfH+FzNDILQ0NpbhJTlQQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAegdXlD9lumYfYK1EZkZgTXd/IgQSNnvRkdpQa8KXFujLQRrJ2+yqhamuyJq2HZ3k8yYqEER PmtKiuBYWIFw5on1Q0zUn3sO1/14bvKPcI5nbrpJXnlH672yS7FcSeWn14SRe9VzX1Y4/16QXtKh 2gC1Ot1nO0SUqjxdvY5lSDzcdJMRTJws3UjIK3f0uHMw+F5PuHpLWI5zZXir6KUuj2M= ) ; Key ID = 26665`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200822190254 20200807185754 7698 gov. gTJuEq5ZJKGbbiG4aBERDA6OchpSLAQP0PTIrfnoYefiGL3vmkV+xqI8nQ9ZJ5cHkwaEK6ECNin8 UbmEX/Q7vYMnQbCI4drJ/LaburOqW8wpyA6IgqbehmaYtEiXoOT+QGMnXejS+gNn2BJORqUik9vR TQRjm21x/m0bdK37/QqWkiS0WCrabfN7g5UopcZuYD6UB5w9o+83utxRjMJi5tfdxi489yx74+NV P96khjCFtRvCQcnNGQlnOlEKZvHK4KoeLk4rwXtIn/FHMFTRrh2m99v5P7REzq40UHeTGNWuuZII adQu43KIsI6sJspwwOfH+FzNDILQ0NpbhJTlQQ== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=26665 is now in the chain-of-trust
	Query to c.gov-servers.net for SOLARDECATHLON.GOV/A
	Received 487 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (487 bytes) ;; HEADER SECTION ;; id = 24566 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SOLARDECATHLON.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) SOLARDECATHLON.GOV. 86400 IN NS foxbat.doe.GOV. SOLARDECATHLON.GOV. 86400 IN NS adns1.es.net. SOLARDECATHLON.GOV. 86400 IN NS fulcrum.doe.GOV. SOLARDECATHLON.GOV. 3600 IN DS ( 23245 8 1 de9060ab221f629b624facc8a2784d4047a67157 ) SOLARDECATHLON.GOV. 3600 IN DS ( 23245 8 2 7fa1565d30e95158705210e9efe40f894bfb17b617db9c08fd629f8193f60e8b ) SOLARDECATHLON.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200820221008 20200813221008 26665 gov. V9M8M9v5+vOZRtkL3SVv/Ew03xGgcEaFsbuEwrNCZ0JEby9E2cmG6ldmi1a0wPzQiy4qWd5k5irD /GSYwkx6glXVnKzqbRYFlGpmoZ4ts3lM6tzapxYYIvlqjBGfkX91aCSR8M96IZqDFDI2LpVoyB5A Cetc/HSvH9Ft7ibbhlLzmb8N+OMd2/eSZjxKWI3RD3Eob+RYToUxSSXgZ9m8RQ== ) ;; ADDITIONAL SECTION (5 records) foxbat.doe.GOV. 86400 IN A 205.254.143.110 foxbat.doe.GOV. 86400 IN AAAA 2607:f368:1000:1000::53 fulcrum.doe.GOV. 86400 IN A 205.254.144.110 fulcrum.doe.GOV. 86400 IN AAAA 2607:f368:1000:1100::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.gov-servers.net for SOLARDECATHLON.GOV/DNSKEY
	Received 487 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (487 bytes) ;; HEADER SECTION ;; id = 20711 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SOLARDECATHLON.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) SOLARDECATHLON.GOV. 86400 IN NS foxbat.doe.GOV. SOLARDECATHLON.GOV. 86400 IN NS adns1.es.net. SOLARDECATHLON.GOV. 86400 IN NS fulcrum.doe.GOV. SOLARDECATHLON.GOV. 3600 IN DS ( 23245 8 1 de9060ab221f629b624facc8a2784d4047a67157 ) SOLARDECATHLON.GOV. 3600 IN DS ( 23245 8 2 7fa1565d30e95158705210e9efe40f894bfb17b617db9c08fd629f8193f60e8b ) SOLARDECATHLON.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200820221008 20200813221008 26665 gov. V9M8M9v5+vOZRtkL3SVv/Ew03xGgcEaFsbuEwrNCZ0JEby9E2cmG6ldmi1a0wPzQiy4qWd5k5irD /GSYwkx6glXVnKzqbRYFlGpmoZ4ts3lM6tzapxYYIvlqjBGfkX91aCSR8M96IZqDFDI2LpVoyB5A Cetc/HSvH9Ft7ibbhlLzmb8N+OMd2/eSZjxKWI3RD3Eob+RYToUxSSXgZ9m8RQ== ) ;; ADDITIONAL SECTION (5 records) foxbat.doe.GOV. 86400 IN A 205.254.143.110 foxbat.doe.GOV. 86400 IN AAAA 2607:f368:1000:1000::53 fulcrum.doe.GOV. 86400 IN A 205.254.144.110 fulcrum.doe.GOV. 86400 IN AAAA 2607:f368:1000:1100::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone SOLARDECATHLON.GOV

SOLARDECATHLON.GOV

	Checking DS between GOV and SOLARDECATHLON.GOV
	Query to b.gov-servers.net for SOLARDECATHLON.GOV/DS
	Received 326 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (326 bytes) ;; HEADER SECTION ;; id = 15510 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SOLARDECATHLON.GOV. IN DS ;; ANSWER SECTION (3 records) SOLARDECATHLON.GOV. 3600 IN DS ( 23245 8 1 de9060ab221f629b624facc8a2784d4047a67157 ) SOLARDECATHLON.GOV. 3600 IN DS ( 23245 8 2 7fa1565d30e95158705210e9efe40f894bfb17b617db9c08fd629f8193f60e8b ) SOLARDECATHLON.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200820221008 20200813221008 26665 gov. V9M8M9v5+vOZRtkL3SVv/Ew03xGgcEaFsbuEwrNCZ0JEby9E2cmG6ldmi1a0wPzQiy4qWd5k5irD /GSYwkx6glXVnKzqbRYFlGpmoZ4ts3lM6tzapxYYIvlqjBGfkX91aCSR8M96IZqDFDI2LpVoyB5A Cetc/HSvH9Ft7ibbhlLzmb8N+OMd2/eSZjxKWI3RD3Eob+RYToUxSSXgZ9m8RQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for SOLARDECATHLON.GOV in the GOV zone
	DS=23245/SHA-1 has algorithm RSASHA256
	DS=23245/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`SOLARDECATHLON.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200820221008 20200813221008 26665 gov. V9M8M9v5+vOZRtkL3SVv/Ew03xGgcEaFsbuEwrNCZ0JEby9E2cmG6ldmi1a0wPzQiy4qWd5k5irD /GSYwkx6glXVnKzqbRYFlGpmoZ4ts3lM6tzapxYYIvlqjBGfkX91aCSR8M96IZqDFDI2LpVoyB5A Cetc/HSvH9Ft7ibbhlLzmb8N+OMd2/eSZjxKWI3RD3Eob+RYToUxSSXgZ9m8RQ== )`
	RRSIG=26665 and DNSKEY=26665 verifies the DS RRset
	DS=23245/SHA-1 is now in the chain-of-trust
	`SOLARDECATHLON.GOV. 3600 IN DS ( 23245 8 1 de9060ab221f629b624facc8a2784d4047a67157 )`
	`SOLARDECATHLON.GOV. 3600 IN DS ( 23245 8 2 7fa1565d30e95158705210e9efe40f894bfb17b617db9c08fd629f8193f60e8b )`
	Query to adns1.es.net for SOLARDECATHLON.GOV/DNSKEY
	Received 2017 bytes from 192.188.22.22
	;; Answer received from 192.188.22.22 (2017 bytes) ;; HEADER SECTION ;; id = 21195 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SOLARDECATHLON.GOV. IN DNSKEY ;; ANSWER SECTION (5 records) solardecathlon.gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcDM3uAQEOd5YlRluM5ZXp61t2qwJauh/UkuvqD9HXhfBQjO31Hedzq3CIi7gkn7SPrVV9qj DLgIXoLk8NSmlQtFDlD5pNTqQIfZs82V0GkzqtXnlm1ncJm94DyHAUzZYEQSAiXDLeklCG/1p/Kj Ng0G/A0Rwe6lHdR94Upn/PvibhTUvnge5eySzS+qQNcumzNYDWBvLWvaOOCLXZpceDHX2ut+wW0C sruPMaWA462frRPsfB2tNwT0tkT3XN/fpRX8JYVT12Thar23sbpfsGH+pCchwF3Lu7jK5IC31Qau gNF9sr1V3yiKGaimiRcMRN74r0+LPEpKhu883Mzh5X0= ) ; Key ID = 39540 solardecathlon.gov. 3600 IN DNSKEY ( 256 3 8 AwEAAZzow9u5VRrYfZD/pVZqVOIzXbK0BSJwxbO9MbnA3ycHv8tvvPkN6zWwCgRTzDQEyWBQGYws o/s/X1NobK0c/N3noeaRmYqiPLZ9H38RaFVGw66CInWkB+JBudYpbQStU0Q/vnVZKYaXToByP5f8 smurAv3gCvHocKCgusHQ/ExcT5d02g8mDQFsl4oy+wPZ1gCN7rXffiq/+kzNX3RRIzlcCMvL43NZ fWDdfJgy0WEGzvOzgqttIUU0xmFraChgumDWgG+fteNWijgBjdbAeGEvDeDrtujtkobiGgXfE3Jf CU4VeBfhGrPufnajNQrG+VZvjJ6ln5xP5nnTRrDL8RE= ) ; Key ID = 7101 solardecathlon.gov. 3600 IN DNSKEY ( 257 3 8 AwEAAbdV7cwqGqh5JQoireGk87NJxQg3rTCLRBcNY2FOF9YSLvbLKt4wY7sGO2DdbaOCgSLk6OmG aiP7a+OkUJbyDSEkXQMtpy0mV+i2CBHPilDRy8gkmFOvuNUtnwDqih94CCgY0AGjnnmH+m1Bmecd YW1CPhgSOwwR7PbJ8UqfcQ1lo1CV5bISOHReAJUuMAa59awRSKsHZ85duDjTzubh+8Z+CDG53/+m wQZ04YV0AL8ziSM1HnQ7/If3qFTKcVwd+buY/P24LztC2VTJpOrq31SMJ9WprLu2x1jjhloQ0K8N 0ICxarR7+p7A3hFn3XC9xmws6VpRcZXtbRJ53vtvUkYCP6H0Yik3q5/0SH6Q6oK0u1NYP396SVCQ 2RifLOCwwMF8Yk4K54fwlatWMV+ffqCOnpptNQv8+er4EmzkUjRIXbiWLk3Gua9gXb7qGA/NtYLe ZARpxM5HhTbfmglg7WsBiUb5LV+umA4aQ8h5Fml3Z4SlyndFLt3w0gpJJuA0veOr5g5Wvw9zGZty EHDXRSONY0XZ28I1sAfBaFpOEQeAohqbF06S2oF72ahcJIEc1vgFqcJ+BjrPJco48IsK4LK2oFpl qlb+ni9F8wx/ngD/hsb9gVBUk63zqC82aux//frrJtdOr7EjShDN1rhxLJ3zEkjxrUkrMhWjylou /tqt ) ; Key ID = 23245 solardecathlon.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20201017052048 20200719042048 23245 solardecathlon.gov. bH6lu13GWtFeCtJCPey2cs5Y+VwCg9cfGmAJncY0Bud8FH3G6SMUI6V8lQD0Xg6MGmW7Tz10c8z5 kHYvq8gRVyowZ/2Udcn2s9BV2MMqyk3Xk3Q4N/iUNESsjoXr6jKPC2Tc235kxSeBEKAp363CYOqy 7hivYses801IYYKwccAkvnh986ISNgT4zn/Gf4MItBz1p4N+diCzdFadM92goEpSo7QdImdGsUw/ 7Z2/NZ7jAl0Og3hYgLA8UR0Ns8pK7gR5wQGmAXdvYxV4mUWI3S/EdQeNxF7nVrP5QAaDQsNCAR4Y NyMboYsT/NTj9FE9h/i3h010i5mOdzKFfIQ4lKjyrqDYypf6hs2CSkt8mxHbCs8ftemhqC2AcYkl 0hc14vIXXYGtl3yIf9sX/OxyWOZnDpBMfRWcU9clQURImmtMCzwLvNlpEX0fH61kOMtzWwlx/aXu e1lt0ggz6OYTmv7TZ2nt7PxOQhT5e5zjkiCsWx+Bfnd4aTbS1XMHpWKXnMagQ6dQtVRV+kEv3Xq6 Z9qUuUo+FNDwaWaUBs+vuYB3XdwrA2cfocwH9vT+XsIrjFc+PETPlVbseHCJPKNTtEBHV+S66GwR 8xOszNG5F3Bi6wS9l9DVausF75Iy3G3BuIGTTiUKl6kFKC+t64HqXPuwVJy80SvojN9ooSX+Sco= ) solardecathlon.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20201017052048 20200719042048 39540 solardecathlon.gov. t15j+DgYSb75G6QaXroOUZUgD4LXmJ+arH7BHwS0fwQ7uhsLTOmLGsgeXR182r8XQfXFbgw23GF9 vc5dJtCF1xC4CBy3ZPjQFNzJJEfnKLr4OTdd8YBTDdUVQJlBUJTr4lrrFH6KSUOmtx6dmzuToKh0 f3JkzEFhTcTgH4JKPMaZFTDgArwlM4nBsXnnj2xgKPOz6q2KAr2MAr+T3DBSRZ6utwTdyyxnGnv7 qn66fiR1A/FDph0VeGbI5UisON/TcUG982CNc/9Ok8w2KJbMUU4wkNznNvTsN/nuYk1X1axDuDcH ggxFQ6+gtiKrBrV/nlG7pymnciD4r83oUZoQrg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for SOLARDECATHLON.GOV
	`solardecathlon.gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcDM3uAQEOd5YlRluM5ZXp61t2qwJauh/UkuvqD9HXhfBQjO31Hedzq3CIi7gkn7SPrVV9qj DLgIXoLk8NSmlQtFDlD5pNTqQIfZs82V0GkzqtXnlm1ncJm94DyHAUzZYEQSAiXDLeklCG/1p/Kj Ng0G/A0Rwe6lHdR94Upn/PvibhTUvnge5eySzS+qQNcumzNYDWBvLWvaOOCLXZpceDHX2ut+wW0C sruPMaWA462frRPsfB2tNwT0tkT3XN/fpRX8JYVT12Thar23sbpfsGH+pCchwF3Lu7jK5IC31Qau gNF9sr1V3yiKGaimiRcMRN74r0+LPEpKhu883Mzh5X0= ) ; Key ID = 39540`
	`solardecathlon.gov. 3600 IN DNSKEY ( 256 3 8 AwEAAZzow9u5VRrYfZD/pVZqVOIzXbK0BSJwxbO9MbnA3ycHv8tvvPkN6zWwCgRTzDQEyWBQGYws o/s/X1NobK0c/N3noeaRmYqiPLZ9H38RaFVGw66CInWkB+JBudYpbQStU0Q/vnVZKYaXToByP5f8 smurAv3gCvHocKCgusHQ/ExcT5d02g8mDQFsl4oy+wPZ1gCN7rXffiq/+kzNX3RRIzlcCMvL43NZ fWDdfJgy0WEGzvOzgqttIUU0xmFraChgumDWgG+fteNWijgBjdbAeGEvDeDrtujtkobiGgXfE3Jf CU4VeBfhGrPufnajNQrG+VZvjJ6ln5xP5nnTRrDL8RE= ) ; Key ID = 7101`
	solardecathlon.gov. 3600 IN DNSKEY ( 257 3 8 AwEAAbdV7cwqGqh5JQoireGk87NJxQg3rTCLRBcNY2FOF9YSLvbLKt4wY7sGO2DdbaOCgSLk6OmG aiP7a+OkUJbyDSEkXQMtpy0mV+i2CBHPilDRy8gkmFOvuNUtnwDqih94CCgY0AGjnnmH+m1Bmecd YW1CPhgSOwwR7PbJ8UqfcQ1lo1CV5bISOHReAJUuMAa59awRSKsHZ85duDjTzubh+8Z+CDG53/+m wQZ04YV0AL8ziSM1HnQ7/If3qFTKcVwd+buY/P24LztC2VTJpOrq31SMJ9WprLu2x1jjhloQ0K8N 0ICxarR7+p7A3hFn3XC9xmws6VpRcZXtbRJ53vtvUkYCP6H0Yik3q5/0SH6Q6oK0u1NYP396SVCQ 2RifLOCwwMF8Yk4K54fwlatWMV+ffqCOnpptNQv8+er4EmzkUjRIXbiWLk3Gua9gXb7qGA/NtYLe ZARpxM5HhTbfmglg7WsBiUb5LV+umA4aQ8h5Fml3Z4SlyndFLt3w0gpJJuA0veOr5g5Wvw9zGZty EHDXRSONY0XZ28I1sAfBaFpOEQeAohqbF06S2oF72ahcJIEc1vgFqcJ+BjrPJco48IsK4LK2oFpl qlb+ni9F8wx/ngD/hsb9gVBUk63zqC82aux//frrJtdOr7EjShDN1rhxLJ3zEkjxrUkrMhWjylou /tqt ) ; Key ID = 23245
	DNSKEY=23245/SEP is now in the chain-of-trust
	DS=23245/SHA-1 verifies DNSKEY=23245/SEP
	DS=23245/SHA-256 verifies DNSKEY=23245/SEP
	Found 2 RRSIGs over DNSKEY RRset
	solardecathlon.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20201017052048 20200719042048 23245 solardecathlon.gov. bH6lu13GWtFeCtJCPey2cs5Y+VwCg9cfGmAJncY0Bud8FH3G6SMUI6V8lQD0Xg6MGmW7Tz10c8z5 kHYvq8gRVyowZ/2Udcn2s9BV2MMqyk3Xk3Q4N/iUNESsjoXr6jKPC2Tc235kxSeBEKAp363CYOqy 7hivYses801IYYKwccAkvnh986ISNgT4zn/Gf4MItBz1p4N+diCzdFadM92goEpSo7QdImdGsUw/ 7Z2/NZ7jAl0Og3hYgLA8UR0Ns8pK7gR5wQGmAXdvYxV4mUWI3S/EdQeNxF7nVrP5QAaDQsNCAR4Y NyMboYsT/NTj9FE9h/i3h010i5mOdzKFfIQ4lKjyrqDYypf6hs2CSkt8mxHbCs8ftemhqC2AcYkl 0hc14vIXXYGtl3yIf9sX/OxyWOZnDpBMfRWcU9clQURImmtMCzwLvNlpEX0fH61kOMtzWwlx/aXu e1lt0ggz6OYTmv7TZ2nt7PxOQhT5e5zjkiCsWx+Bfnd4aTbS1XMHpWKXnMagQ6dQtVRV+kEv3Xq6 Z9qUuUo+FNDwaWaUBs+vuYB3XdwrA2cfocwH9vT+XsIrjFc+PETPlVbseHCJPKNTtEBHV+S66GwR 8xOszNG5F3Bi6wS9l9DVausF75Iy3G3BuIGTTiUKl6kFKC+t64HqXPuwVJy80SvojN9ooSX+Sco= )
	`solardecathlon.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20201017052048 20200719042048 39540 solardecathlon.gov. t15j+DgYSb75G6QaXroOUZUgD4LXmJ+arH7BHwS0fwQ7uhsLTOmLGsgeXR182r8XQfXFbgw23GF9 vc5dJtCF1xC4CBy3ZPjQFNzJJEfnKLr4OTdd8YBTDdUVQJlBUJTr4lrrFH6KSUOmtx6dmzuToKh0 f3JkzEFhTcTgH4JKPMaZFTDgArwlM4nBsXnnj2xgKPOz6q2KAr2MAr+T3DBSRZ6utwTdyyxnGnv7 qn66fiR1A/FDph0VeGbI5UisON/TcUG982CNc/9Ok8w2KJbMUU4wkNznNvTsN/nuYk1X1axDuDcH ggxFQ6+gtiKrBrV/nlG7pymnciD4r83oUZoQrg== )`
	RRSIG=23245 and DNSKEY=23245/SEP verifies the DNSKEY RRset
	RRSIG=39540 and DNSKEY=39540 verifies the DNSKEY RRset
	DNSKEY=39540 is now in the chain-of-trust
	DNSKEY=7101 is now in the chain-of-trust
	Query to foxbat.doe.GOV for SOLARDECATHLON.GOV/A
	Received 833 bytes from 205.254.143.110
	;; Answer received from 205.254.143.110 (833 bytes) ;; HEADER SECTION ;; id = 11078 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SOLARDECATHLON.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) solardecathlon.gov. 3600 IN SOA ( fulcrum.doe.gov. hostmaster.hq.doe.gov. 2018110115 ;serial 7200 ;refresh 3600 ;retry 2419200 ;expire 43200 ;minimum ) solardecathlon.gov. 3600 IN RRSIG ( SOA 8 2 3600 20201017052048 20200719042048 39540 solardecathlon.gov. p+1Z6HGrbp70epHAn1dhl9PBDw9IKLHisI72TxmC8hYdnicKJhAVpT489h5vRRRCmt2hBIQMUxAf KYc+ZwXNM3cFWebiddKUR4JHN0Mf02MV2BFpHG5JkmBkRhPSmi+FDT/jyTmwdPSGxX0uFhbrxmUS oqf6ii0AuSgqHK563YLDLYIqEtZqDFkJiUi6WEQS2igJzhyWzQBVCYjCW9+DSD6C1hg32xBUA2tu N2h4xdm0OG3wGrlnAER8HrM/OExBxFeOPxm5ffIlgw9VOSEt9HWGQ7whiSUuMDFriAVzCvQXsjIE lnnvvf5LgD8L4dBGUqttiLiEg4BRzWb57AcKxA== ) JMTOEQA1Q4IRMU1KFBSVC5BU9NFL6OOM.solardecathlon.gov. 43200 IN NSEC3 ( 1 0 100 bbe942a714cf5989 p7ep1uoon22bppaq7ojtf43931k3bo2g NS SOA TXT RRSIG DNSKEY NSEC3PARAM SPF ) JMTOEQA1Q4IRMU1KFBSVC5BU9NFL6OOM.solardecathlon.gov. 43200 IN RRSIG ( NSEC3 8 3 43200 20201017052048 20200719042048 39540 solardecathlon.gov. PENGrq1noKvt5HG+KR3dcVSnBWRAiH++1aI35WuiBI+twkIegzkoKBeCiC8S1YCETvYFPKeigGsb 2V05Ttts0GyNgYvYN/m8mAOUxctcr20epdgTliLNBtKqM2VNnMHHtf57PsQLrf0PFZP+rxDCkf+L xGcu5pQjQ+VU6DymGgZ8VE6ZCpPNgntH2HzqLhWS7gfXHZN5iqgVFjgu59cXdWt/pT2NqrMVDwiG 4H4nkIp5yUAlFL29JKAAbuy8+sOQxgEWwjVXsMOlaMFOV1aRWCmbU8ymDT05Y5N0gow9vyA2TmWV GqBW2lIJUkui8v41+ZVK+G+/pLDInNmGWkakKA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	SOLARDECATHLON.GOV is authoritative for SOLARDECATHLON.GOV
	Found RRSIG signed by solardecathlon.gov zone
	Query to adns1.es.net for SOLARDECATHLON.GOV/SOA
	Received 443 bytes from 192.188.22.22
	;; Answer received from 192.188.22.22 (443 bytes) ;; HEADER SECTION ;; id = 20390 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SOLARDECATHLON.GOV. IN SOA ;; ANSWER SECTION (2 records) solardecathlon.gov. 3600 IN SOA ( fulcrum.doe.gov. hostmaster.hq.doe.gov. 2018110115 ;serial 7200 ;refresh 3600 ;retry 2419200 ;expire 43200 ;minimum ) solardecathlon.gov. 3600 IN RRSIG ( SOA 8 2 3600 20201017052048 20200719042048 39540 solardecathlon.gov. p+1Z6HGrbp70epHAn1dhl9PBDw9IKLHisI72TxmC8hYdnicKJhAVpT489h5vRRRCmt2hBIQMUxAf KYc+ZwXNM3cFWebiddKUR4JHN0Mf02MV2BFpHG5JkmBkRhPSmi+FDT/jyTmwdPSGxX0uFhbrxmUS oqf6ii0AuSgqHK563YLDLYIqEtZqDFkJiUi6WEQS2igJzhyWzQBVCYjCW9+DSD6C1hg32xBUA2tu N2h4xdm0OG3wGrlnAER8HrM/OExBxFeOPxm5ffIlgw9VOSEt9HWGQ7whiSUuMDFriAVzCvQXsjIE lnnvvf5LgD8L4dBGUqttiLiEg4BRzWb57AcKxA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to fulcrum.doe.GOV for SOLARDECATHLON.GOV/SOA
	Received 433 bytes from 205.254.144.110
	;; Answer received from 205.254.144.110 (433 bytes) ;; HEADER SECTION ;; id = 16166 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SOLARDECATHLON.GOV. IN SOA ;; ANSWER SECTION (2 records) solardecathlon.gov. 3600 IN SOA ( fulcrum.doe.gov. hostmaster.hq.doe.gov. 2018110115 ;serial 7200 ;refresh 3600 ;retry 2419200 ;expire 43200 ;minimum ) solardecathlon.gov. 3600 IN RRSIG ( SOA 8 2 3600 20201017052048 20200719042048 39540 solardecathlon.gov. p+1Z6HGrbp70epHAn1dhl9PBDw9IKLHisI72TxmC8hYdnicKJhAVpT489h5vRRRCmt2hBIQMUxAf KYc+ZwXNM3cFWebiddKUR4JHN0Mf02MV2BFpHG5JkmBkRhPSmi+FDT/jyTmwdPSGxX0uFhbrxmUS oqf6ii0AuSgqHK563YLDLYIqEtZqDFkJiUi6WEQS2igJzhyWzQBVCYjCW9+DSD6C1hg32xBUA2tu N2h4xdm0OG3wGrlnAER8HrM/OExBxFeOPxm5ffIlgw9VOSEt9HWGQ7whiSUuMDFriAVzCvQXsjIE lnnvvf5LgD8L4dBGUqttiLiEg4BRzWb57AcKxA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to foxbat.doe.GOV for SOLARDECATHLON.GOV/SOA
	Received 433 bytes from 205.254.143.110
	;; Answer received from 205.254.143.110 (433 bytes) ;; HEADER SECTION ;; id = 28927 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SOLARDECATHLON.GOV. IN SOA ;; ANSWER SECTION (2 records) solardecathlon.gov. 3600 IN SOA ( fulcrum.doe.gov. hostmaster.hq.doe.gov. 2018110115 ;serial 7200 ;refresh 3600 ;retry 2419200 ;expire 43200 ;minimum ) solardecathlon.gov. 3600 IN RRSIG ( SOA 8 2 3600 20201017052048 20200719042048 39540 solardecathlon.gov. p+1Z6HGrbp70epHAn1dhl9PBDw9IKLHisI72TxmC8hYdnicKJhAVpT489h5vRRRCmt2hBIQMUxAf KYc+ZwXNM3cFWebiddKUR4JHN0Mf02MV2BFpHG5JkmBkRhPSmi+FDT/jyTmwdPSGxX0uFhbrxmUS oqf6ii0AuSgqHK563YLDLYIqEtZqDFkJiUi6WEQS2igJzhyWzQBVCYjCW9+DSD6C1hg32xBUA2tu N2h4xdm0OG3wGrlnAER8HrM/OExBxFeOPxm5ffIlgw9VOSEt9HWGQ7whiSUuMDFriAVzCvQXsjIE lnnvvf5LgD8L4dBGUqttiLiEg4BRzWb57AcKxA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to foxbat.doe.GOV for SOLARDECATHLON.GOV/A
	Received 833 bytes from 205.254.143.110
	;; Answer received from 205.254.143.110 (833 bytes) ;; HEADER SECTION ;; id = 34919 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SOLARDECATHLON.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) solardecathlon.gov. 3600 IN SOA ( fulcrum.doe.gov. hostmaster.hq.doe.gov. 2018110115 ;serial 7200 ;refresh 3600 ;retry 2419200 ;expire 43200 ;minimum ) solardecathlon.gov. 3600 IN RRSIG ( SOA 8 2 3600 20201017052048 20200719042048 39540 solardecathlon.gov. p+1Z6HGrbp70epHAn1dhl9PBDw9IKLHisI72TxmC8hYdnicKJhAVpT489h5vRRRCmt2hBIQMUxAf KYc+ZwXNM3cFWebiddKUR4JHN0Mf02MV2BFpHG5JkmBkRhPSmi+FDT/jyTmwdPSGxX0uFhbrxmUS oqf6ii0AuSgqHK563YLDLYIqEtZqDFkJiUi6WEQS2igJzhyWzQBVCYjCW9+DSD6C1hg32xBUA2tu N2h4xdm0OG3wGrlnAER8HrM/OExBxFeOPxm5ffIlgw9VOSEt9HWGQ7whiSUuMDFriAVzCvQXsjIE lnnvvf5LgD8L4dBGUqttiLiEg4BRzWb57AcKxA== ) JMTOEQA1Q4IRMU1KFBSVC5BU9NFL6OOM.solardecathlon.gov. 43200 IN NSEC3 ( 1 0 100 bbe942a714cf5989 p7ep1uoon22bppaq7ojtf43931k3bo2g NS SOA TXT RRSIG DNSKEY NSEC3PARAM SPF ) JMTOEQA1Q4IRMU1KFBSVC5BU9NFL6OOM.solardecathlon.gov. 43200 IN RRSIG ( NSEC3 8 3 43200 20201017052048 20200719042048 39540 solardecathlon.gov. PENGrq1noKvt5HG+KR3dcVSnBWRAiH++1aI35WuiBI+twkIegzkoKBeCiC8S1YCETvYFPKeigGsb 2V05Ttts0GyNgYvYN/m8mAOUxctcr20epdgTliLNBtKqM2VNnMHHtf57PsQLrf0PFZP+rxDCkf+L xGcu5pQjQ+VU6DymGgZ8VE6ZCpPNgntH2HzqLhWS7gfXHZN5iqgVFjgu59cXdWt/pT2NqrMVDwiG 4H4nkIp5yUAlFL29JKAAbuy8+sOQxgEWwjVXsMOlaMFOV1aRWCmbU8ymDT05Y5N0gow9vyA2TmWV GqBW2lIJUkui8v41+ZVK+G+/pLDInNmGWkakKA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`solardecathlon.gov. 3600 IN RRSIG ( SOA 8 2 3600 20201017052048 20200719042048 39540 solardecathlon.gov. p+1Z6HGrbp70epHAn1dhl9PBDw9IKLHisI72TxmC8hYdnicKJhAVpT489h5vRRRCmt2hBIQMUxAf KYc+ZwXNM3cFWebiddKUR4JHN0Mf02MV2BFpHG5JkmBkRhPSmi+FDT/jyTmwdPSGxX0uFhbrxmUS oqf6ii0AuSgqHK563YLDLYIqEtZqDFkJiUi6WEQS2igJzhyWzQBVCYjCW9+DSD6C1hg32xBUA2tu N2h4xdm0OG3wGrlnAER8HrM/OExBxFeOPxm5ffIlgw9VOSEt9HWGQ7whiSUuMDFriAVzCvQXsjIE lnnvvf5LgD8L4dBGUqttiLiEg4BRzWb57AcKxA== )`
	RRSIG=39540 and DNSKEY=39540 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test SOLARDECATHLON.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: