DNSSEC Analyzer - SUSTAINABILITY.GOV

Domain Name:

Time: 2019-06-15 20:53:23 UTC, NTP stratum 4

Analyzing DNSSEC problems for SUSTAINABILITY.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (864 bytes) ;; HEADER SECTION ;; id = 1899 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190701000000 20190610000000 20326 . pW+2XLLS5ILjyUUHeTnnYqZe+riMHzwy1PudMkOZbhisIw6Gyh69a5EPO7YAozIYPnOlOzx72hdR YZvKeTIeCGo9WP985c4NDQyQTotZ6FCieZbemlE5zWQMSsdLle6oyH3V+iD64VwogVSTLgyI76J8 ANCRy0jthfYDc8p51FfaD/n2wVZ7Yh61BWVH9Wljos6N5Ij4XKDZvIHQqhLbFkk75LVRF0I33VOa W3skLOHKrTg8tniIFP8mFxgjHAYX4n8eJBtx08cCuJq1CrqSjyGijkv3xym+rqUSNs2fZ7i9HLQ1 9LiK+nGxbKNsPyihe5YtefOAK1YDHSYWqJ0cew== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190701000000 20190610000000 20326 . pW+2XLLS5ILjyUUHeTnnYqZe+riMHzwy1PudMkOZbhisIw6Gyh69a5EPO7YAozIYPnOlOzx72hdR YZvKeTIeCGo9WP985c4NDQyQTotZ6FCieZbemlE5zWQMSsdLle6oyH3V+iD64VwogVSTLgyI76J8 ANCRy0jthfYDc8p51FfaD/n2wVZ7Yh61BWVH9Wljos6N5Ij4XKDZvIHQqhLbFkk75LVRF0I33VOa W3skLOHKrTg8tniIFP8mFxgjHAYX4n8eJBtx08cCuJq1CrqSjyGijkv3xym+rqUSNs2fZ7i9HLQ1 9LiK+nGxbKNsPyihe5YtefOAK1YDHSYWqJ0cew== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=25266 is now in the chain-of-trust
	Query to j.root-servers.net for SUSTAINABILITY.GOV/A
	Received 673 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (673 bytes) ;; HEADER SECTION ;; id = 36782 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; SUSTAINABILITY.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20190628050000 20190615040000 25266 . tKCNskgTdCTwfvhuUox/G0vfZ8R4ohCqR2xXPeaQj/XUAMORIqItQCV3pgTLVbxP9SA7r5JEvwVz P4DtgsMdCI2TSghLWSM9CyTQb/FYKz5ZKQxWK0WpbX+IpRVgfXP7dJyMVdbVYJM9tZ8JT9yRQHnB cs/c+HRW1qo48S8QnA3CydG8iEWlVjP/A2HqNzpPDLwo/lwvqsy9fcvD4mwD4fUi8prSwiBpi4Ie xVzzzNel3McCEFUsFCVVfSZXP5YFXzB8pvT2ikM8d1xSDAONrw29LZWqqE34uMoBtv3KFCHU0v9A 70XD/YceZkuDYWwUsI9fvhgJZDBeAjyFgnjZqw== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to h.root-servers.net for GOV/DNSKEY
	Error querying h.root-servers.net/2001:500:1:0:0:0:0:53 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 658 bytes from 198.97.190.53
	;; Answer received from 198.97.190.53 (658 bytes) ;; HEADER SECTION ;; id = 10993 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20190628050000 20190615040000 25266 . tKCNskgTdCTwfvhuUox/G0vfZ8R4ohCqR2xXPeaQj/XUAMORIqItQCV3pgTLVbxP9SA7r5JEvwVz P4DtgsMdCI2TSghLWSM9CyTQb/FYKz5ZKQxWK0WpbX+IpRVgfXP7dJyMVdbVYJM9tZ8JT9yRQHnB cs/c+HRW1qo48S8QnA3CydG8iEWlVjP/A2HqNzpPDLwo/lwvqsy9fcvD4mwD4fUi8prSwiBpi4Ie xVzzzNel3McCEFUsFCVVfSZXP5YFXzB8pvT2ikM8d1xSDAONrw29LZWqqE34uMoBtv3KFCHU0v9A 70XD/YceZkuDYWwUsI9fvhgJZDBeAjyFgnjZqw== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to g.root-servers.net for GOV/DS
	Received 406 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (406 bytes) ;; HEADER SECTION ;; id = 4725 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20190628050000 20190615040000 25266 . tKCNskgTdCTwfvhuUox/G0vfZ8R4ohCqR2xXPeaQj/XUAMORIqItQCV3pgTLVbxP9SA7r5JEvwVz P4DtgsMdCI2TSghLWSM9CyTQb/FYKz5ZKQxWK0WpbX+IpRVgfXP7dJyMVdbVYJM9tZ8JT9yRQHnB cs/c+HRW1qo48S8QnA3CydG8iEWlVjP/A2HqNzpPDLwo/lwvqsy9fcvD4mwD4fUi8prSwiBpi4Ie xVzzzNel3McCEFUsFCVVfSZXP5YFXzB8pvT2ikM8d1xSDAONrw29LZWqqE34uMoBtv3KFCHU0v9A 70XD/YceZkuDYWwUsI9fvhgJZDBeAjyFgnjZqw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20190628050000 20190615040000 25266 . tKCNskgTdCTwfvhuUox/G0vfZ8R4ohCqR2xXPeaQj/XUAMORIqItQCV3pgTLVbxP9SA7r5JEvwVz P4DtgsMdCI2TSghLWSM9CyTQb/FYKz5ZKQxWK0WpbX+IpRVgfXP7dJyMVdbVYJM9tZ8JT9yRQHnB cs/c+HRW1qo48S8QnA3CydG8iEWlVjP/A2HqNzpPDLwo/lwvqsy9fcvD4mwD4fUi8prSwiBpi4Ie xVzzzNel3McCEFUsFCVVfSZXP5YFXzB8pvT2ikM8d1xSDAONrw29LZWqqE34uMoBtv3KFCHU0v9A 70XD/YceZkuDYWwUsI9fvhgJZDBeAjyFgnjZqw== )`
	RRSIG=25266 and DNSKEY=25266 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to b.gov-servers.net for GOV/DNSKEY
	Received 743 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (743 bytes) ;; HEADER SECTION ;; id = 7247 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AQPO0gfZTyKZiRSwF/XvW9ta+joX/SlCfvNcTsNT4t5edmGhhiRNf45246Z4L6Cx3n93FPHtW91n F+M1gCPyxewRyAM0/UVrqBwutdPQnR8vsQ/WzdsAk50loby/jGN7UAStU/FzllD2qIq4uJ8HcLZW Qth9JV8vKuqVYXgPfhx5lw== ) ; Key ID = 43583 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190621214731 20190606214231 7698 gov. o4uebGhXUg2O6PQVdyTXQa+nv0WONwbTV8cfL0QDRmEjMCTK5HLpRs3Kc2ymttd+Ru+VmJtMzwxe 1RWJVN7QDg46BMxKuQX2eFyX7hhKq4VHC29WrDe/XEKvZWo3htwubMJxXUddOGZyFfrC2QD2YJhE 8kUjcrLZVx3UgBcXhh9mApa7/nbbEarK/molC2uCzQTL0hHKgif/rGEuWSdll1NMPhFQnE4gST5U f3hERzKmX/rmviZYZaKc+zcb6l6nBVJrT+rk/HaqP+fjreQiC7patugTn6mtXmiLDiQQhPxjTa5T 7Yy4+JXn7ochn9rJ1Ob/o0FndixY1LjsshOT9w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQPO0gfZTyKZiRSwF/XvW9ta+joX/SlCfvNcTsNT4t5edmGhhiRNf45246Z4L6Cx3n93FPHtW91n F+M1gCPyxewRyAM0/UVrqBwutdPQnR8vsQ/WzdsAk50loby/jGN7UAStU/FzllD2qIq4uJ8HcLZW Qth9JV8vKuqVYXgPfhx5lw== ) ; Key ID = 43583`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190621214731 20190606214231 7698 gov. o4uebGhXUg2O6PQVdyTXQa+nv0WONwbTV8cfL0QDRmEjMCTK5HLpRs3Kc2ymttd+Ru+VmJtMzwxe 1RWJVN7QDg46BMxKuQX2eFyX7hhKq4VHC29WrDe/XEKvZWo3htwubMJxXUddOGZyFfrC2QD2YJhE 8kUjcrLZVx3UgBcXhh9mApa7/nbbEarK/molC2uCzQTL0hHKgif/rGEuWSdll1NMPhFQnE4gST5U f3hERzKmX/rmviZYZaKc+zcb6l6nBVJrT+rk/HaqP+fjreQiC7patugTn6mtXmiLDiQQhPxjTa5T 7Yy4+JXn7ochn9rJ1Ob/o0FndixY1LjsshOT9w== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=43583 is now in the chain-of-trust
	Query to c.gov-servers.net for SUSTAINABILITY.GOV/A
	Received 570 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (570 bytes) ;; HEADER SECTION ;; id = 8489 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SUSTAINABILITY.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) SUSTAINABILITY.GOV. 86400 IN NS rtpns1.epa.GOV. SUSTAINABILITY.GOV. 86400 IN NS pydns1.epa.GOV. SUSTAINABILITY.GOV. 86400 IN NS rtpns2.epa.GOV. SUSTAINABILITY.GOV. 86400 IN NS pydns2.epa.GOV. SUSTAINABILITY.GOV. 3600 IN DS ( 40861 8 2 60620bc4cb044c2461fa89dd618bcaab0fe1e985aa12a0128faf1f249665122e ) SUSTAINABILITY.GOV. 3600 IN DS ( 3997 8 2 58a02f49c7729e3777e154012a231d5a5ae24f7d44ceb05fe6764da34686b63a ) SUSTAINABILITY.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190622161007 20190615161007 43583 gov. qGld+gfFOf8J4FJSkwwazjk+hLfuBr63TyGE+rgFA9ANp3lYfcxcU+ME8+RBTFZySwuyGb4z/UbJ qIgp8k93FP4UCZ3HlvNSemRWcQlQoMnpN6yiRUoWzKEcWck3CczYqH+miV4sqy8mw3Sl+p5XsuQv aHd6SRZca4m7Rt8rzWI= ) ;; ADDITIONAL SECTION (9 records) rtpns1.epa.GOV. 86400 IN A 134.67.12.10 rtpns1.epa.GOV. 86400 IN AAAA 2620:117:506f:c::f00a pydns1.epa.GOV. 86400 IN A 161.80.212.10 pydns1.epa.GOV. 86400 IN AAAA 2620:117:5083:d4::f00a rtpns2.epa.GOV. 86400 IN A 134.67.12.12 rtpns2.epa.GOV. 86400 IN AAAA 2620:117:506f:c::f00c pydns2.epa.GOV. 86400 IN A 161.80.212.12 pydns2.epa.GOV. 86400 IN AAAA 2620:117:5083:d4::f00c ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.gov-servers.net for SUSTAINABILITY.GOV/DNSKEY
	Error querying c.gov-servers.net/2620:74:28:0:0:0:2:30 for SUSTAINABILITY.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 570 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (570 bytes) ;; HEADER SECTION ;; id = 16121 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SUSTAINABILITY.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) SUSTAINABILITY.GOV. 86400 IN NS rtpns1.epa.GOV. SUSTAINABILITY.GOV. 86400 IN NS pydns1.epa.GOV. SUSTAINABILITY.GOV. 86400 IN NS rtpns2.epa.GOV. SUSTAINABILITY.GOV. 86400 IN NS pydns2.epa.GOV. SUSTAINABILITY.GOV. 3600 IN DS ( 40861 8 2 60620bc4cb044c2461fa89dd618bcaab0fe1e985aa12a0128faf1f249665122e ) SUSTAINABILITY.GOV. 3600 IN DS ( 3997 8 2 58a02f49c7729e3777e154012a231d5a5ae24f7d44ceb05fe6764da34686b63a ) SUSTAINABILITY.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190622161007 20190615161007 43583 gov. qGld+gfFOf8J4FJSkwwazjk+hLfuBr63TyGE+rgFA9ANp3lYfcxcU+ME8+RBTFZySwuyGb4z/UbJ qIgp8k93FP4UCZ3HlvNSemRWcQlQoMnpN6yiRUoWzKEcWck3CczYqH+miV4sqy8mw3Sl+p5XsuQv aHd6SRZca4m7Rt8rzWI= ) ;; ADDITIONAL SECTION (9 records) rtpns1.epa.GOV. 86400 IN A 134.67.12.10 rtpns1.epa.GOV. 86400 IN AAAA 2620:117:506f:c::f00a pydns1.epa.GOV. 86400 IN A 161.80.212.10 pydns1.epa.GOV. 86400 IN AAAA 2620:117:5083:d4::f00a rtpns2.epa.GOV. 86400 IN A 134.67.12.12 rtpns2.epa.GOV. 86400 IN AAAA 2620:117:506f:c::f00c pydns2.epa.GOV. 86400 IN A 161.80.212.12 pydns2.epa.GOV. 86400 IN AAAA 2620:117:5083:d4::f00c ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone SUSTAINABILITY.GOV

SUSTAINABILITY.GOV

	Checking DS between GOV and SUSTAINABILITY.GOV
	Query to a.gov-servers.net for SUSTAINABILITY.GOV/DS
	Error querying a.gov-servers.net/2001:500:4431:0:0:0:2:30 for SUSTAINABILITY.GOV/DS: 'IPv6 transport disabled'
	Received 306 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (306 bytes) ;; HEADER SECTION ;; id = 8442 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SUSTAINABILITY.GOV. IN DS ;; ANSWER SECTION (3 records) SUSTAINABILITY.GOV. 3600 IN DS ( 40861 8 2 60620bc4cb044c2461fa89dd618bcaab0fe1e985aa12a0128faf1f249665122e ) SUSTAINABILITY.GOV. 3600 IN DS ( 3997 8 2 58a02f49c7729e3777e154012a231d5a5ae24f7d44ceb05fe6764da34686b63a ) SUSTAINABILITY.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190622161007 20190615161007 43583 gov. qGld+gfFOf8J4FJSkwwazjk+hLfuBr63TyGE+rgFA9ANp3lYfcxcU+ME8+RBTFZySwuyGb4z/UbJ qIgp8k93FP4UCZ3HlvNSemRWcQlQoMnpN6yiRUoWzKEcWck3CczYqH+miV4sqy8mw3Sl+p5XsuQv aHd6SRZca4m7Rt8rzWI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for SUSTAINABILITY.GOV in the GOV zone
	DS=40861/SHA-256 has algorithm RSASHA256
	DS=3997/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`SUSTAINABILITY.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190622161007 20190615161007 43583 gov. qGld+gfFOf8J4FJSkwwazjk+hLfuBr63TyGE+rgFA9ANp3lYfcxcU+ME8+RBTFZySwuyGb4z/UbJ qIgp8k93FP4UCZ3HlvNSemRWcQlQoMnpN6yiRUoWzKEcWck3CczYqH+miV4sqy8mw3Sl+p5XsuQv aHd6SRZca4m7Rt8rzWI= )`
	RRSIG=43583 and DNSKEY=43583 verifies the DS RRset
	DS=40861/SHA-256 is now in the chain-of-trust
	DS=3997/SHA-256 is now in the chain-of-trust
	`SUSTAINABILITY.GOV. 3600 IN DS ( 40861 8 2 60620bc4cb044c2461fa89dd618bcaab0fe1e985aa12a0128faf1f249665122e )`
	`SUSTAINABILITY.GOV. 3600 IN DS ( 3997 8 2 58a02f49c7729e3777e154012a231d5a5ae24f7d44ceb05fe6764da34686b63a )`
	Query to pydns1.epa.GOV for SUSTAINABILITY.GOV/DNSKEY
	Received 1121 bytes from 161.80.212.10
	;; Answer received from 161.80.212.10 (1121 bytes) ;; HEADER SECTION ;; id = 34458 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SUSTAINABILITY.GOV. IN DNSKEY ;; ANSWER SECTION (5 records) sustainability.gov. 1296000 IN DNSKEY ( 257 3 8 AwEAAe+/x1pwddtsyBZ9I7vUx0byui9qMU12vDPo9RUmQ+kZjCM4E7nMnKlFU7h/SXHhARPzHMD5 2EoI9fu5Nf6ymBixVZB4N27YnBRLifYNq/ubHxLf5Oq8IuUM4fayUV3rTb+jXY7XRJwmwKJ7jS4u 4+RC2WS0Fem+m32POhVGE1/qCYkB0gmUUU6iB7iD4LMvi8lwKEmL86vXzwdmwwE328jjRj4gThia gXMDklNe9eNsLE0FzGJcp1u8Dxl9PdaY8JDhLFrE1XtSkwcs3oe2cVmxOKJMucc0jmLlNZAV4I2r pFsSsVhrKS/KnrzyPVNNs9Q8c89kcOERc7KkDo+IQts= ) ; Key ID = 3997 sustainability.gov. 1296000 IN DNSKEY ( 256 3 8 AwEAAcvESlXwnZrlrs8BvQ7AlGiE2dlo+vXGLVZZzKb80ivimnm0gF2vzcDhnOh7BSuCzWMGDi16 0nUEUTSJuR1Wr3o1jHsfQZ4Ao2EyD44Iwyn5FCg7HsiU5j4rxIofKjSVmVZFRHa4h/gGABNUxqx9 avz8a/BiF0djVjpZozvMXQST ) ; Key ID = 5250 sustainability.gov. 1296000 IN DNSKEY ( 256 3 8 AwEAAb0SQ5R2/lk/eSNVvobf8pfHdIUzE+suXJyZZ73YeCTsbpWdZOwL0RwBHL4yvTvX7vt+sNkW uuXy1PRjly/keNyTBShpRo4wLUV02fDmanyHsKPCahezqL9LCiN0BKZYTxnd8ly3O32bmZg+0kyq +dbVsLtx2JvTP0V2mRq1ZN/X ) ; Key ID = 7458 sustainability.gov. 1296000 IN RRSIG ( DNSKEY 8 2 1296000 20190705190043 20190605180043 3997 sustainability.gov. 5YvExSt+Z0ncZ5gN3VfGvfNmDSmAhFTikIl2JcOVG4eh6OkJwoJWOfDkjnkaaQQr74mcyY9KAbv1 GSXCxAbRgXGs+2WRZuxCL64qaadZen4faE6Mf4tCLkvgYh0RXblKuQHBKKN7KuW4iWhlAc86acHA ar6eH2Gdx0CYmP3tI8/1nriyN8M01bc7lmpS76lMMSNFq+tvRh5o328CioqbCIgSuWBJZj80u8e7 uLbKy0Uiu6+2dBoewpA9qNQi6amETPn2qbR9WZE4FZpyKyUij2kJYlEPZgJ11ebIfc7eHFxdLYNq neSfc/roEdI46BYjQjETwzADoR/K+x6ejsE8xA== ) sustainability.gov. 1296000 IN RRSIG ( DNSKEY 8 2 1296000 20190705190043 20190605180043 7458 sustainability.gov. YrVeW/QjXqTHaYgG9yGZJXKW1g7/O4CI7Dw2NILLrJ43xZMs7LNbYkn+NJFewIZm4dSl6eG22jyv 6PwrCNxcKyypatwJgJkGHtZt30gqyfKG+3X72fYLvwuhgeHUwyoQGa5WeuKAjgEO2mioWZU1B4Qk QTe7Zv/839A2WDYEchc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for SUSTAINABILITY.GOV
	`sustainability.gov. 1296000 IN DNSKEY ( 257 3 8 AwEAAe+/x1pwddtsyBZ9I7vUx0byui9qMU12vDPo9RUmQ+kZjCM4E7nMnKlFU7h/SXHhARPzHMD5 2EoI9fu5Nf6ymBixVZB4N27YnBRLifYNq/ubHxLf5Oq8IuUM4fayUV3rTb+jXY7XRJwmwKJ7jS4u 4+RC2WS0Fem+m32POhVGE1/qCYkB0gmUUU6iB7iD4LMvi8lwKEmL86vXzwdmwwE328jjRj4gThia gXMDklNe9eNsLE0FzGJcp1u8Dxl9PdaY8JDhLFrE1XtSkwcs3oe2cVmxOKJMucc0jmLlNZAV4I2r pFsSsVhrKS/KnrzyPVNNs9Q8c89kcOERc7KkDo+IQts= ) ; Key ID = 3997`
	`sustainability.gov. 1296000 IN DNSKEY ( 256 3 8 AwEAAcvESlXwnZrlrs8BvQ7AlGiE2dlo+vXGLVZZzKb80ivimnm0gF2vzcDhnOh7BSuCzWMGDi16 0nUEUTSJuR1Wr3o1jHsfQZ4Ao2EyD44Iwyn5FCg7HsiU5j4rxIofKjSVmVZFRHa4h/gGABNUxqx9 avz8a/BiF0djVjpZozvMXQST ) ; Key ID = 5250`
	`sustainability.gov. 1296000 IN DNSKEY ( 256 3 8 AwEAAb0SQ5R2/lk/eSNVvobf8pfHdIUzE+suXJyZZ73YeCTsbpWdZOwL0RwBHL4yvTvX7vt+sNkW uuXy1PRjly/keNyTBShpRo4wLUV02fDmanyHsKPCahezqL9LCiN0BKZYTxnd8ly3O32bmZg+0kyq +dbVsLtx2JvTP0V2mRq1ZN/X ) ; Key ID = 7458`
	DNSKEY=3997/SEP is now in the chain-of-trust
	DS=3997/SHA-256 verifies DNSKEY=3997/SEP
	DS=40861/SHA-256 is published, but a corresponding DNSKEY is not
	Found 2 RRSIGs over DNSKEY RRset
	`sustainability.gov. 1296000 IN RRSIG ( DNSKEY 8 2 1296000 20190705190043 20190605180043 3997 sustainability.gov. 5YvExSt+Z0ncZ5gN3VfGvfNmDSmAhFTikIl2JcOVG4eh6OkJwoJWOfDkjnkaaQQr74mcyY9KAbv1 GSXCxAbRgXGs+2WRZuxCL64qaadZen4faE6Mf4tCLkvgYh0RXblKuQHBKKN7KuW4iWhlAc86acHA ar6eH2Gdx0CYmP3tI8/1nriyN8M01bc7lmpS76lMMSNFq+tvRh5o328CioqbCIgSuWBJZj80u8e7 uLbKy0Uiu6+2dBoewpA9qNQi6amETPn2qbR9WZE4FZpyKyUij2kJYlEPZgJ11ebIfc7eHFxdLYNq neSfc/roEdI46BYjQjETwzADoR/K+x6ejsE8xA== )`
	`sustainability.gov. 1296000 IN RRSIG ( DNSKEY 8 2 1296000 20190705190043 20190605180043 7458 sustainability.gov. YrVeW/QjXqTHaYgG9yGZJXKW1g7/O4CI7Dw2NILLrJ43xZMs7LNbYkn+NJFewIZm4dSl6eG22jyv 6PwrCNxcKyypatwJgJkGHtZt30gqyfKG+3X72fYLvwuhgeHUwyoQGa5WeuKAjgEO2mioWZU1B4Qk QTe7Zv/839A2WDYEchc= )`
	RRSIG=3997 and DNSKEY=3997/SEP verifies the DNSKEY RRset
	RRSIG=7458 and DNSKEY=7458 verifies the DNSKEY RRset
	DNSKEY=5250 is now in the chain-of-trust
	DNSKEY=7458 is now in the chain-of-trust
	Query to pydns1.epa.GOV for SUSTAINABILITY.GOV/A
	Error querying pydns1.epa.GOV/2620:117:5083:d4:0:0:0:f00a for SUSTAINABILITY.GOV/A: 'IPv6 transport disabled'
	Received 275 bytes from 161.80.212.10
	;; Answer received from 161.80.212.10 (275 bytes) ;; HEADER SECTION ;; id = 13099 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SUSTAINABILITY.GOV. IN A ;; ANSWER SECTION (3 records) sustainability.gov. 600 IN A 52.10.74.188 sustainability.gov. 600 IN A 54.148.62.161 sustainability.gov. 600 IN RRSIG ( A 8 2 600 20190703050403 20190603045532 5250 sustainability.gov. a43VW0YG8hCibFmrk6+q2/kYgnUMJ7O5zB538X492s+mkHGJ2ByL3PdMhKcKvtbuExbGaszZDlV6 eoWjYnXWymu8ZyVk/IOwJGKA6zR6yX8Vwq9KSokPkWw/EyYCqd1K7iaCWN3ToBEIX2sb44vMFJyi 8A6RUZoJztlrDisMBqI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	SUSTAINABILITY.GOV is authoritative for SUSTAINABILITY.GOV
	Found RRSIG signed by sustainability.gov zone
	Query to rtpns2.epa.GOV for SUSTAINABILITY.GOV/SOA
	Error querying rtpns2.epa.GOV/2620:117:506f:c:0:0:0:f00c for SUSTAINABILITY.GOV/SOA: 'IPv6 transport disabled'
	Received 299 bytes from 134.67.12.12
	;; Answer received from 134.67.12.12 (299 bytes) ;; HEADER SECTION ;; id = 31154 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SUSTAINABILITY.GOV. IN SOA ;; ANSWER SECTION (2 records) sustainability.gov. 600 IN SOA ( rtpns2.epa.gov. dnsadmin.epa.gov. 469 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 600 ;minimum ) sustainability.gov. 600 IN RRSIG ( SOA 8 2 600 20190709162944 20190609152944 7458 sustainability.gov. G59zKadZ+CU9Emnms8KLql2CYGTIEkSPhsAOl3BNoJj/wFryQvaGg/scEx0FgdibIen/lAVkvmzT FxQMeQbyqP2nECr9mVSZQkwdoQwH4Fb5g/81lxNnsjZI/2Bd7UX9NrPZRNZrIU8rVCNT/rCTuw13 ggVUa7KkNKSLZN/C7Lk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to pydns2.epa.GOV for SUSTAINABILITY.GOV/SOA
	Error querying pydns2.epa.GOV/2620:117:5083:d4:0:0:0:f00c for SUSTAINABILITY.GOV/SOA: 'IPv6 transport disabled'
	Received 299 bytes from 161.80.212.12
	;; Answer received from 161.80.212.12 (299 bytes) ;; HEADER SECTION ;; id = 928 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SUSTAINABILITY.GOV. IN SOA ;; ANSWER SECTION (2 records) sustainability.gov. 600 IN SOA ( pydns2.epa.gov. dnsadmin.epa.gov. 475 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 600 ;minimum ) sustainability.gov. 600 IN RRSIG ( SOA 8 2 600 20190706133456 20190606123456 7458 sustainability.gov. c3nXQ9mL5xH2wI9xjR7BVbGuX3xTPF1tbIojRYVSTUCQHhavleFay/uvJur8jTWmGwqgo5nqZF5b +RhwI2aSlx85SU8OY82i+Y3nMdnWPeSpHTh+dmCCYVT+cxEBM+EDlVZWdBQY/WBSOLu09kLsUcH6 mpxrVHK3uQY/NnFdZvU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	pydns2.epa.GOV serial (475) differs from rtpns2.epa.GOV serial (469)
	Query to rtpns1.epa.GOV for SUSTAINABILITY.GOV/SOA
	Received 299 bytes from 134.67.12.10
	;; Answer received from 134.67.12.10 (299 bytes) ;; HEADER SECTION ;; id = 39597 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SUSTAINABILITY.GOV. IN SOA ;; ANSWER SECTION (2 records) sustainability.gov. 600 IN SOA ( rtpns1.epa.gov. dnsadmin.epa.gov. 528 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 600 ;minimum ) sustainability.gov. 600 IN RRSIG ( SOA 8 2 600 20190709153745 20190609143745 7458 sustainability.gov. oY987HGp+TsznErPzrfdUhRxe1zTZlS0YI56IeESkNicHwCYNL8ZoE29GmrXlz5/buS12w0/9aBI GD55Qst2bbcVVnVRPmKwdO/KqdAZrv+pwmfnunzLHOixOnapr4j5afOo8afR6TzEeR8aD4DpJjll VTY9YXlw9TfvZLl3wZ8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	rtpns1.epa.GOV serial (528) differs from rtpns2.epa.GOV serial (469)
	Query to pydns1.epa.GOV for SUSTAINABILITY.GOV/SOA
	Received 299 bytes from 161.80.212.10
	;; Answer received from 161.80.212.10 (299 bytes) ;; HEADER SECTION ;; id = 52673 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SUSTAINABILITY.GOV. IN SOA ;; ANSWER SECTION (2 records) sustainability.gov. 600 IN SOA ( pydns1.epa.gov. dnsadmin.epa.gov. 486 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 600 ;minimum ) sustainability.gov. 600 IN RRSIG ( SOA 8 2 600 20190708074619 20190608064619 7458 sustainability.gov. LBX+jefhLqUA0cf86F6ie1Ny1WTzpDEh2iSEMQsQH9ei/nOumqLGFtGUj04IufvajBtKZ8gqgHa/ N3yZGgTK/tcAILMaHe5q5fFAHkZF/KrHLX262GlWx6NHkZExWlekYBcncLW3vwBBo+1xVkatYg1Q H3dp4btQBHvLtaF8qZg= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	pydns1.epa.GOV serial (486) differs from rtpns2.epa.GOV serial (469)
	Query to pydns1.epa.GOV for SUSTAINABILITY.GOV/A
	Received 275 bytes from 161.80.212.10
	;; Answer received from 161.80.212.10 (275 bytes) ;; HEADER SECTION ;; id = 43722 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; SUSTAINABILITY.GOV. IN A ;; ANSWER SECTION (3 records) sustainability.gov. 600 IN A 52.10.74.188 sustainability.gov. 600 IN A 54.148.62.161 sustainability.gov. 600 IN RRSIG ( A 8 2 600 20190703050403 20190603045532 5250 sustainability.gov. a43VW0YG8hCibFmrk6+q2/kYgnUMJ7O5zB538X492s+mkHGJ2ByL3PdMhKcKvtbuExbGaszZDlV6 eoWjYnXWymu8ZyVk/IOwJGKA6zR6yX8Vwq9KSokPkWw/EyYCqd1K7iaCWN3ToBEIX2sb44vMFJyi 8A6RUZoJztlrDisMBqI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	SUSTAINABILITY.GOV A RR has value 52.10.74.188
	SUSTAINABILITY.GOV A RR has value 54.148.62.161
	Found 1 RRSIGs over A RRset
	`sustainability.gov. 600 IN RRSIG ( A 8 2 600 20190703050403 20190603045532 5250 sustainability.gov. a43VW0YG8hCibFmrk6+q2/kYgnUMJ7O5zB538X492s+mkHGJ2ByL3PdMhKcKvtbuExbGaszZDlV6 eoWjYnXWymu8ZyVk/IOwJGKA6zR6yX8Vwq9KSokPkWw/EyYCqd1K7iaCWN3ToBEIX2sb44vMFJyi 8A6RUZoJztlrDisMBqI= )`
	RRSIG=5250 and DNSKEY=5250 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test SUSTAINABILITY.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: