DNSSEC Analyzer - TREASLOCKBOX.GOV

Domain Name:

Time: 2021-04-18 06:28:04 UTC, NTP stratum 4

Analyzing DNSSEC problems for TREASLOCKBOX.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (864 bytes) ;; HEADER SECTION ;; id = 42533 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210502000000 20210411000000 20326 . SjVAq5V3zP96wlXZKWIo3oDNvWyKnwmIl7/HSmnxJ77WX0dmpJxN+c7wTFGzMro6kuZCYAhZgsWb 3G7lBEAeiw/Y6hQGK1IdLMH4YMoSoxvdw6u0DkvxiodZUatJblMajeF0Rw8W67I4pwYpwOByZ+3W aTr/nk0sWFir7+1tNbWbPrUNb8E8pHFzW9g7vMATiFnM+jXmZVVbueGnzOSmjo34ow9iAQ7V1OcY VtHTxQVMbfNurnEbEi7XnqYtRacNUkvIv0Fpmb9Yi7wlhV/syyu61p3MMoLnSQydYfsI+may7SoH +I6NQk2a2d3Nvzh5nbNd++cu8aRGX3ZtfreUmQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210502000000 20210411000000 20326 . SjVAq5V3zP96wlXZKWIo3oDNvWyKnwmIl7/HSmnxJ77WX0dmpJxN+c7wTFGzMro6kuZCYAhZgsWb 3G7lBEAeiw/Y6hQGK1IdLMH4YMoSoxvdw6u0DkvxiodZUatJblMajeF0Rw8W67I4pwYpwOByZ+3W aTr/nk0sWFir7+1tNbWbPrUNb8E8pHFzW9g7vMATiFnM+jXmZVVbueGnzOSmjo34ow9iAQ7V1OcY VtHTxQVMbfNurnEbEi7XnqYtRacNUkvIv0Fpmb9Yi7wlhV/syyu61p3MMoLnSQydYfsI+may7SoH +I6NQk2a2d3Nvzh5nbNd++cu8aRGX3ZtfreUmQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=14631 is now in the chain-of-trust
	Query to g.root-servers.net for TREASLOCKBOX.GOV/A
	Received 638 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (638 bytes) ;; HEADER SECTION ;; id = 1202 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TREASLOCKBOX.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20210501050000 20210418040000 14631 . n8ih8Milqo06Gk11nXu4oYvya1tNDj0qq57H2zwsqo2DaO8xU0BLMoWPjrzK7y0EmXXzMFLJTLM7 zTa3KdfO8ATurcOwAU6/iv0Pf2C/2JUKJHMrHIn4XRbXkyesIcWVwqglP1imT5SuCi6+vtUqzdJy vq4feJEfUBfEe6rkBVe44+P33l+LZFRen2TgHEYhntyrWql+q2rxRfpJHBUFdLYBg0vROBejueY1 qf7U+m21sWKA5cy9l5FEBzeAs2ddYVSSw+VvQE/szlhkuymYlGlnrpiHLpdyc0sjQmxES+Wo2tHQ nWjoBdKHbx+K8agdvGQtmanzhR+urhhFW+xYNQ== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to f.root-servers.net for GOV/DNSKEY
	Received 622 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (622 bytes) ;; HEADER SECTION ;; id = 52471 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20210501050000 20210418040000 14631 . n8ih8Milqo06Gk11nXu4oYvya1tNDj0qq57H2zwsqo2DaO8xU0BLMoWPjrzK7y0EmXXzMFLJTLM7 zTa3KdfO8ATurcOwAU6/iv0Pf2C/2JUKJHMrHIn4XRbXkyesIcWVwqglP1imT5SuCi6+vtUqzdJy vq4feJEfUBfEe6rkBVe44+P33l+LZFRen2TgHEYhntyrWql+q2rxRfpJHBUFdLYBg0vROBejueY1 qf7U+m21sWKA5cy9l5FEBzeAs2ddYVSSw+VvQE/szlhkuymYlGlnrpiHLpdyc0sjQmxES+Wo2tHQ nWjoBdKHbx+K8agdvGQtmanzhR+urhhFW+xYNQ== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to i.root-servers.net for GOV/DS
	Received 370 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (370 bytes) ;; HEADER SECTION ;; id = 22803 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20210501050000 20210418040000 14631 . n8ih8Milqo06Gk11nXu4oYvya1tNDj0qq57H2zwsqo2DaO8xU0BLMoWPjrzK7y0EmXXzMFLJTLM7 zTa3KdfO8ATurcOwAU6/iv0Pf2C/2JUKJHMrHIn4XRbXkyesIcWVwqglP1imT5SuCi6+vtUqzdJy vq4feJEfUBfEe6rkBVe44+P33l+LZFRen2TgHEYhntyrWql+q2rxRfpJHBUFdLYBg0vROBejueY1 qf7U+m21sWKA5cy9l5FEBzeAs2ddYVSSw+VvQE/szlhkuymYlGlnrpiHLpdyc0sjQmxES+Wo2tHQ nWjoBdKHbx+K8agdvGQtmanzhR+urhhFW+xYNQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20210501050000 20210418040000 14631 . n8ih8Milqo06Gk11nXu4oYvya1tNDj0qq57H2zwsqo2DaO8xU0BLMoWPjrzK7y0EmXXzMFLJTLM7 zTa3KdfO8ATurcOwAU6/iv0Pf2C/2JUKJHMrHIn4XRbXkyesIcWVwqglP1imT5SuCi6+vtUqzdJy vq4feJEfUBfEe6rkBVe44+P33l+LZFRen2TgHEYhntyrWql+q2rxRfpJHBUFdLYBg0vROBejueY1 qf7U+m21sWKA5cy9l5FEBzeAs2ddYVSSw+VvQE/szlhkuymYlGlnrpiHLpdyc0sjQmxES+Wo2tHQ nWjoBdKHbx+K8agdvGQtmanzhR+urhhFW+xYNQ== )`
	RRSIG=14631 and DNSKEY=14631 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to a.gov-servers.net for GOV/DNSKEY
	Received 957 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (957 bytes) ;; HEADER SECTION ;; id = 56053 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (4 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAaQup5BwKqvn1In1x+PzsLpFav6zsLaW7fivUq9PpXUzXn++rcjtYBS15NXm1hMAZb5FChUp 35qd7hVqdwNuT/NGFNHfEykaeWjkqBKX2mCBSiyIsK4i4TQu7CS2CgqfqR43wXFITyItTPP5wijo 9Jt4dsVTjAtNJKaXOKZ31tLaeM5C2bYqAofxX6oK3TVAZ7vFsjPqjJZtZUBMZq28BiU= ) ; Key ID = 27306 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbexj/PgN9RGQ1TokFnYjJ87/rMFIqE/rXjWtsmwzxteOcKIVCUJAAWg0pIZZer88omuCVrq +fAz0iBOgY48TRFWgyVFV9rm5esTGOEuCU6BTYj1Cb7zrpb/RayEw0yzVVZ0adT/AXbAsQhteTpV kgWK8K33gxq4wY70AK5KWdDCyj4v9uR6TS0mgbGdg7RzFCi8xeZoYP2PY5XOhAHFon0= ) ; Key ID = 48498 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210424190254 20210409185754 7698 gov. n22zk3nGnUAfkBIwcRzP3TVYEGZZTU94YlknLpBkKEL0BgIFcanyzSE4JKtX5yrfSOsHbkS4IBIS izbnFf7/uizd6mLCw6WSKdlEYI1fwYihNL2EpHcgZ5Ni1Hv1B8m7WQ8lK0V/55TBn1cs8xXnwhMq waNx5zreUAak8HY0Sbai3l7qNzxkNbyYgmkqGtqWnuopbmZHb6dNUiO//tiT4a9W3lKCRPk2sOBz moYQ0dlyK8kFvhG9okbST+QGLZOahfZ1ZSwtrCx8F1NzyffoYcCrvtLF019MDzvUUtx4j1aIciIP 8nxnfbRSIwzNB5lJyUzaCiNNTYNFliTxFBmG/A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAaQup5BwKqvn1In1x+PzsLpFav6zsLaW7fivUq9PpXUzXn++rcjtYBS15NXm1hMAZb5FChUp 35qd7hVqdwNuT/NGFNHfEykaeWjkqBKX2mCBSiyIsK4i4TQu7CS2CgqfqR43wXFITyItTPP5wijo 9Jt4dsVTjAtNJKaXOKZ31tLaeM5C2bYqAofxX6oK3TVAZ7vFsjPqjJZtZUBMZq28BiU= ) ; Key ID = 27306`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbexj/PgN9RGQ1TokFnYjJ87/rMFIqE/rXjWtsmwzxteOcKIVCUJAAWg0pIZZer88omuCVrq +fAz0iBOgY48TRFWgyVFV9rm5esTGOEuCU6BTYj1Cb7zrpb/RayEw0yzVVZ0adT/AXbAsQhteTpV kgWK8K33gxq4wY70AK5KWdDCyj4v9uR6TS0mgbGdg7RzFCi8xeZoYP2PY5XOhAHFon0= ) ; Key ID = 48498`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210424190254 20210409185754 7698 gov. n22zk3nGnUAfkBIwcRzP3TVYEGZZTU94YlknLpBkKEL0BgIFcanyzSE4JKtX5yrfSOsHbkS4IBIS izbnFf7/uizd6mLCw6WSKdlEYI1fwYihNL2EpHcgZ5Ni1Hv1B8m7WQ8lK0V/55TBn1cs8xXnwhMq waNx5zreUAak8HY0Sbai3l7qNzxkNbyYgmkqGtqWnuopbmZHb6dNUiO//tiT4a9W3lKCRPk2sOBz moYQ0dlyK8kFvhG9okbST+QGLZOahfZ1ZSwtrCx8F1NzyffoYcCrvtLF019MDzvUUtx4j1aIciIP 8nxnfbRSIwzNB5lJyUzaCiNNTYNFliTxFBmG/A== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=27306 is now in the chain-of-trust
	DNSKEY=48498 is now in the chain-of-trust
	Query to b.gov-servers.net for TREASLOCKBOX.GOV/A
	Received 377 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (377 bytes) ;; HEADER SECTION ;; id = 363 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TREASLOCKBOX.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) TREASLOCKBOX.GOV. 86400 IN NS ns2.twai.GOV. TREASLOCKBOX.GOV. 86400 IN NS ns1.twai.GOV. TREASLOCKBOX.GOV. 3600 IN DS ( 35178 7 1 a72e5160f2b569b07a91f0b6b540a61f465c849e ) TREASLOCKBOX.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210425051007 20210418051007 48498 gov. kjDj720yV3s1c1GOHqP40yXN5rq6YzBdn3Cy2o7mvJZDqJy1FTSAJxjOOyw4MKcV/x1qbQZvhXcy pVCm3FiciDcFVCTS5X01I3TmJjX0YnXu4Lw/KqRl8ljqejwNKL6KXgGUhNtwyahuKbkVvRUNVUpT H1QFnf3g+QJWSNUxULkRo4PKEbc1JQ9zsm41tMkAx3SmF1lTyVK8T8tJ5UrSbQ== ) ;; ADDITIONAL SECTION (4 records) ns2.twai.GOV. 86400 IN A 199.169.192.28 ns2.twai.GOV. 86400 IN AAAA 2605:3100:fffd:100::7 ns1.twai.GOV. 86400 IN A 199.169.194.28 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.gov-servers.net for TREASLOCKBOX.GOV/DNSKEY
	Received 377 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (377 bytes) ;; HEADER SECTION ;; id = 23453 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TREASLOCKBOX.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) TREASLOCKBOX.GOV. 86400 IN NS ns2.twai.GOV. TREASLOCKBOX.GOV. 86400 IN NS ns1.twai.GOV. TREASLOCKBOX.GOV. 3600 IN DS ( 35178 7 1 a72e5160f2b569b07a91f0b6b540a61f465c849e ) TREASLOCKBOX.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210425051007 20210418051007 48498 gov. kjDj720yV3s1c1GOHqP40yXN5rq6YzBdn3Cy2o7mvJZDqJy1FTSAJxjOOyw4MKcV/x1qbQZvhXcy pVCm3FiciDcFVCTS5X01I3TmJjX0YnXu4Lw/KqRl8ljqejwNKL6KXgGUhNtwyahuKbkVvRUNVUpT H1QFnf3g+QJWSNUxULkRo4PKEbc1JQ9zsm41tMkAx3SmF1lTyVK8T8tJ5UrSbQ== ) ;; ADDITIONAL SECTION (4 records) ns2.twai.GOV. 86400 IN A 199.169.192.28 ns2.twai.GOV. 86400 IN AAAA 2605:3100:fffd:100::7 ns1.twai.GOV. 86400 IN A 199.169.194.28 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone TREASLOCKBOX.GOV

TREASLOCKBOX.GOV

	Checking DS between GOV and TREASLOCKBOX.GOV
	Query to c.gov-servers.net for TREASLOCKBOX.GOV/DS
	Received 276 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (276 bytes) ;; HEADER SECTION ;; id = 63892 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TREASLOCKBOX.GOV. IN DS ;; ANSWER SECTION (2 records) TREASLOCKBOX.GOV. 3600 IN DS ( 35178 7 1 a72e5160f2b569b07a91f0b6b540a61f465c849e ) TREASLOCKBOX.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210425051007 20210418051007 48498 gov. kjDj720yV3s1c1GOHqP40yXN5rq6YzBdn3Cy2o7mvJZDqJy1FTSAJxjOOyw4MKcV/x1qbQZvhXcy pVCm3FiciDcFVCTS5X01I3TmJjX0YnXu4Lw/KqRl8ljqejwNKL6KXgGUhNtwyahuKbkVvRUNVUpT H1QFnf3g+QJWSNUxULkRo4PKEbc1JQ9zsm41tMkAx3SmF1lTyVK8T8tJ5UrSbQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for TREASLOCKBOX.GOV in the GOV zone
	DS=35178/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`TREASLOCKBOX.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210425051007 20210418051007 48498 gov. kjDj720yV3s1c1GOHqP40yXN5rq6YzBdn3Cy2o7mvJZDqJy1FTSAJxjOOyw4MKcV/x1qbQZvhXcy pVCm3FiciDcFVCTS5X01I3TmJjX0YnXu4Lw/KqRl8ljqejwNKL6KXgGUhNtwyahuKbkVvRUNVUpT H1QFnf3g+QJWSNUxULkRo4PKEbc1JQ9zsm41tMkAx3SmF1lTyVK8T8tJ5UrSbQ== )`
	RRSIG=48498 and DNSKEY=48498 verifies the DS RRset
	DS=35178/SHA-1 is now in the chain-of-trust
	`TREASLOCKBOX.GOV. 3600 IN DS ( 35178 7 1 a72e5160f2b569b07a91f0b6b540a61f465c849e )`
	Query to ns1.twai.GOV for TREASLOCKBOX.GOV/DNSKEY
	Received 1273 bytes from 199.169.194.28
	;; Answer received from 199.169.194.28 (1273 bytes) ;; HEADER SECTION ;; id = 43151 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TREASLOCKBOX.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) TREASLOCKBOX.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAYrRU1vQdSj0yRGRqyX/W+vQmbShgLGF3ya+BT7tpRiwpGeKWjMUx42qHofUv1Ibh9mI+gvd WXh4xNya5S4zcyDf0fvEZhC6aNNjudxkyE/lrWuwfjC45g6lnofs2xKiLeocLXMPkvdDgQwBfKP2 wV/CRqY1SFyMitRxn6P0L0Vb ) ; Key ID = 10457 TREASLOCKBOX.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAalLcfVBCyJyxajJpxVAyRILGCBrm82MgFPG5MnDBNB+Z/8UDE92EQccF/hwH9aT+/uliqVD eHerj5oYDg9FSUmuxpKYQN0bscXAlFfOL7zAWzMyfU5utjhNHN8fSOm0lkPdxiKTcNe0gmCKnltY JXH3jj3uRoFaY8QcvVvtp+UX ) ; Key ID = 26219 TREASLOCKBOX.GOV. 3600 IN DNSKEY ( 257 3 7 AwEAAbtxJJVjwHlu7+NaLbIBRXaNlW8jmXJaP7dJhZL6SOKXhNzKCGJ1FKIEx78simNOt6dvPhir wAvH0mc2idzuzY7MH+n0awVfBHhwepVvr0ZCStaGzudePGhjWKaAK2sUlyGMocAiZHxp2IeFDRQS nV832U/J98Yg4eG26km9PjFX/E0ve6ugOuFYbD8GpQhCFVVCAkRtCvHSrh3EInq+vSxusd0qF6OA q9nCMmjGXKscPNZRVhyXpuuYcFEc8vDL6j6svBDVuWbUuH42E6VSoLD86fuz/WwFIXZtqfuCTaom fhBKC4jhtDVmRUVlhk+adrgEppqq7MTaNFpiBICQ2Vk= ) ; Key ID = 35178 TREASLOCKBOX.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20210423012354 20210416012354 10457 treaslockbox.gov. ezHCxfkXLfUbnNawKc/oTuXEhI4tAZ6wD0zxMeyab3aKGHt06xLJC3/uW3t7QybsTS/zz7bi732R Rdd+WXZBcPl2+HV00g6l97HIC7xHX1Nl+a5ItWd66QJ/0mg4XUKG4yYkU5gXnQfMu0c2td6u8o6l 1PEWblHnGA1EMXUweTI= ) TREASLOCKBOX.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20210423012354 20210416012354 26219 treaslockbox.gov. UAv+xl2c02MmGIZAKC7bqQ7Wm6bsWOSOiZKXAVP7M0sLk7GR3o5j5M+Jp7KAA644bWZ3965bIdyh g06Hv5wjIO7vTiKm2ky8yxv7yLjGcsI0W78A+YQ1xO6Ghruto/56Ws3XsJ7zOe1JJN1jTzy8ciuQ 8XFoW2wifd7g0ioiI60= ) TREASLOCKBOX.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20210423012354 20210416012354 35178 treaslockbox.gov. cq2ShX8yZWYgWBY0D/CCHE8kxSX+GpBo8eAsaJsDR6m+OdBuqmKzbiALLkec1IcT3PlHX9dxUxOr qd+/qUWFgbJGmhha862ddjFvmaHWD65OLq9LWDYV5vmxtt7pFXD1VHPgBUlXYSoTmZW40YHj7IDT 34VZY3ko/8eqlwL14+Gp7pS2LQfg3NwBnTX5R3ql4jtKzr9BvlRe94adpbFd8YRAWWIARrFP2iiZ Ssdr+5VfHYtNINgUbSpVjj7RUFlSlXuJHirWIHvD/KqUg5iOZmcWgzb7BkYNlJEz4BN32UpkwlJo 8u2pRkRiY7R48V6YdAOFTdEKOO5aM+xDVBhjnA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for TREASLOCKBOX.GOV
	`TREASLOCKBOX.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAYrRU1vQdSj0yRGRqyX/W+vQmbShgLGF3ya+BT7tpRiwpGeKWjMUx42qHofUv1Ibh9mI+gvd WXh4xNya5S4zcyDf0fvEZhC6aNNjudxkyE/lrWuwfjC45g6lnofs2xKiLeocLXMPkvdDgQwBfKP2 wV/CRqY1SFyMitRxn6P0L0Vb ) ; Key ID = 10457`
	`TREASLOCKBOX.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAalLcfVBCyJyxajJpxVAyRILGCBrm82MgFPG5MnDBNB+Z/8UDE92EQccF/hwH9aT+/uliqVD eHerj5oYDg9FSUmuxpKYQN0bscXAlFfOL7zAWzMyfU5utjhNHN8fSOm0lkPdxiKTcNe0gmCKnltY JXH3jj3uRoFaY8QcvVvtp+UX ) ; Key ID = 26219`
	`TREASLOCKBOX.GOV. 3600 IN DNSKEY ( 257 3 7 AwEAAbtxJJVjwHlu7+NaLbIBRXaNlW8jmXJaP7dJhZL6SOKXhNzKCGJ1FKIEx78simNOt6dvPhir wAvH0mc2idzuzY7MH+n0awVfBHhwepVvr0ZCStaGzudePGhjWKaAK2sUlyGMocAiZHxp2IeFDRQS nV832U/J98Yg4eG26km9PjFX/E0ve6ugOuFYbD8GpQhCFVVCAkRtCvHSrh3EInq+vSxusd0qF6OA q9nCMmjGXKscPNZRVhyXpuuYcFEc8vDL6j6svBDVuWbUuH42E6VSoLD86fuz/WwFIXZtqfuCTaom fhBKC4jhtDVmRUVlhk+adrgEppqq7MTaNFpiBICQ2Vk= ) ; Key ID = 35178`
	DNSKEY=35178/SEP is now in the chain-of-trust
	DS=35178/SHA-1 verifies DNSKEY=35178/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`TREASLOCKBOX.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20210423012354 20210416012354 10457 treaslockbox.gov. ezHCxfkXLfUbnNawKc/oTuXEhI4tAZ6wD0zxMeyab3aKGHt06xLJC3/uW3t7QybsTS/zz7bi732R Rdd+WXZBcPl2+HV00g6l97HIC7xHX1Nl+a5ItWd66QJ/0mg4XUKG4yYkU5gXnQfMu0c2td6u8o6l 1PEWblHnGA1EMXUweTI= )`
	`TREASLOCKBOX.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20210423012354 20210416012354 26219 treaslockbox.gov. UAv+xl2c02MmGIZAKC7bqQ7Wm6bsWOSOiZKXAVP7M0sLk7GR3o5j5M+Jp7KAA644bWZ3965bIdyh g06Hv5wjIO7vTiKm2ky8yxv7yLjGcsI0W78A+YQ1xO6Ghruto/56Ws3XsJ7zOe1JJN1jTzy8ciuQ 8XFoW2wifd7g0ioiI60= )`
	`TREASLOCKBOX.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20210423012354 20210416012354 35178 treaslockbox.gov. cq2ShX8yZWYgWBY0D/CCHE8kxSX+GpBo8eAsaJsDR6m+OdBuqmKzbiALLkec1IcT3PlHX9dxUxOr qd+/qUWFgbJGmhha862ddjFvmaHWD65OLq9LWDYV5vmxtt7pFXD1VHPgBUlXYSoTmZW40YHj7IDT 34VZY3ko/8eqlwL14+Gp7pS2LQfg3NwBnTX5R3ql4jtKzr9BvlRe94adpbFd8YRAWWIARrFP2iiZ Ssdr+5VfHYtNINgUbSpVjj7RUFlSlXuJHirWIHvD/KqUg5iOZmcWgzb7BkYNlJEz4BN32UpkwlJo 8u2pRkRiY7R48V6YdAOFTdEKOO5aM+xDVBhjnA== )`
	RRSIG=10457 and DNSKEY=10457 verifies the DNSKEY RRset
	RRSIG=26219 and DNSKEY=26219 verifies the DNSKEY RRset
	RRSIG=35178 and DNSKEY=35178/SEP verifies the DNSKEY RRset
	DNSKEY=10457 is now in the chain-of-trust
	DNSKEY=26219 is now in the chain-of-trust
	Query to ns2.twai.GOV for TREASLOCKBOX.GOV/A
	Received 413 bytes from 199.169.192.28
	;; Answer received from 199.169.192.28 (413 bytes) ;; HEADER SECTION ;; id = 58522 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TREASLOCKBOX.GOV. IN A ;; ANSWER SECTION (3 records) TREASLOCKBOX.GOV. 5 IN A 199.169.192.12 TREASLOCKBOX.GOV. 5 IN RRSIG ( A 7 2 5 20210423025646 20210416025646 10457 treaslockbox.gov. b6q15rXocWsC7ng1RFYdGE8smOu6HIeK5lfDadXb2P+czyDcgPb9sCNpaVXFpRGatDXcR6qndtEC aKwgwYNzwOWfA0cRBin8lz/GI+84y5W1etpvrMCMFDETIyEr96k/UIIodhaYCVCGjFNM3rI95ef7 wDP1krNw+S0BK6/Z9gA= ) TREASLOCKBOX.GOV. 5 IN RRSIG ( A 7 2 5 20210423002946 20210416002946 26219 treaslockbox.gov. OKSooz19dEjg9rfS90KNLyJChGxmR5sN3RtBJ7e8xMJFbvyQllk+pA2DCQArRfkwARgOj0XmVny2 lwYO6WFyrcrmTJ7R2JbNWesL5mvtgnzmXQAOgTVDDifgNsWK+c8IMc4ki/0fAJbHgRAjfQ1vJbes tHj2UrbNupcClglIs60= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns2.twai.GOV is authoritative for TREASLOCKBOX.GOV
	Found RRSIG signed by treaslockbox.gov zone
	Query to ns1.twai.GOV for TREASLOCKBOX.GOV/SOA
	Received 2263 bytes from 199.169.194.28
	;; Answer received from 199.169.194.28 (2263 bytes) ;; HEADER SECTION ;; id = 22957 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TREASLOCKBOX.GOV. IN SOA ;; ANSWER SECTION (3 records) TREASLOCKBOX.GOV. 30 IN SOA ( ns1.twai.GOV. root.ns1.twai.GOV. 2021013101 ;serial 3600 ;refresh 1800 ;retry 864000 ;expire 3600 ;minimum ) TREASLOCKBOX.GOV. 30 IN RRSIG ( SOA 7 2 30 20210421052134 20210414052134 10457 treaslockbox.gov. LsR/UgU4DVMfrPLbPK6heuQ2JhmKEz0TJQQVblKLomzXDKbpUAH5vBhqb9NUWYuafP/LlyWfI+O6 u8yIfokoyhoi5CkV9iYRZiYMEwofiD0nH2lIAhxTZEjPwuAOddnN8D1bINF7K1k2yV/zm1rOxPBf PCOcXFyxI1qJ7l0Hw5o= ) TREASLOCKBOX.GOV. 30 IN RRSIG ( SOA 7 2 30 20210423062047 20210416062047 26219 treaslockbox.gov. PQec5nv12ac2kn8cf/z66Z3HB348gfflDEIeO1DomlOfjOhNZeSotvoW05nLVpynhzteKY1AmHvh G2BmIuCgwLR1ixuVywhUQEV1mCD/dy5i/MY87Ef3QTlxOUrvTGzGH4afNUatX272LSwgZepM9bqH RoIExJhGNA8RNFM+Axk= ) ;; AUTHORITY SECTION (4 records) TREASLOCKBOX.GOV. 30 IN NS ns2.twai.GOV. TREASLOCKBOX.GOV. 30 IN NS ns1.twai.GOV. TREASLOCKBOX.GOV. 30 IN RRSIG ( NS 7 2 30 20210421010629 20210414010629 10457 treaslockbox.gov. FAP3NM5wO5Sohb9Wi2aPDTrdF5QZqdB0L0EfA7Zd5UwxiybkntPDQcu7GK4GtRmCJHNKvxPxHsA2 +zZKmaRseBc4XdJGLd6yezdwFa/gQsZ2hNvYh/pI4BcQm4U5GJO/W9iBn5qN5pG+rS7JVuPCPM4O YEXFt3QTaZPDXzNgPmo= ) TREASLOCKBOX.GOV. 30 IN RRSIG ( NS 7 2 30 20210423005050 20210416005050 26219 treaslockbox.gov. fQtqcDffsane2IHaEj44anaIZoNprU1aRgZSNOL42WDyHnqu19ltCwkh+6pY68/RlEQYnKa836ZH YQv33UYbpp2eJT8cCiqtVBf6yFamOJzFsQrKKKDUYmnefTRZDsQK/46YSkVSsfmat4ddgBi9Ke3Q h4WIs1RbMjuZ4UIuvZc= ) ;; ADDITIONAL SECTION (13 records) ns1.twai.GOV. 30 IN A 199.169.194.28 ns1.twai.GOV. 30 IN RRSIG ( A 7 3 30 20210420153927 20210413153927 14747 twai.gov. KJKRBshe/kTdb+hJlyhMh3/5rrJbFrY+7n9/HdU7DipB9mqmE9tuKZLrw+wHGlChTgSv/OhBQGEy hCW9TtjHnoD38ZwtdFXB1njIHGZImeu9nXC1TwvDs+jfGPJUTHlBZYStDOXvLYtAGhRI0GKcZRQj PqBuFQj7pKWTJ7KFSM4= ) ns1.twai.GOV. 30 IN RRSIG ( A 7 3 30 20210422233119 20210415233119 31499 twai.gov. HUXIHXzt/75tA/g1TY1Bwgwn0VwGWOFpbN7uIcr+2vGqkbolAucagYsTKf1L/ZKwhHyHGNSLC14k 0GWUS87fmHi7lxRfb+rstqyA8V9LuvZfkWTRirISs/aBant9BhsMmO01t8yIDexR6IU2N1zHwspa C6Ldk42CT7ZNvGnYieI= ) ns2.twai.GOV. 30 IN A 199.169.192.28 ns2.twai.GOV. 30 IN RRSIG ( A 7 3 30 20210420153927 20210413153927 14747 twai.gov. XGfX4QNUdCMc8Not7OepMxtPlh0eskW/Obx/OOL+N/0Nuz5740Lkp9nC9Od0xG+A3+vOM6vuc+dP JvvVIVtAg7R+aZTvMRCDr5EyKGwUOUQNDWbveOlzTzHNU8idpsF+hzXKogjnks8+N4ugGaoZPVMg bB7eQXzOzIpe4mEXLOk= ) ns2.twai.GOV. 30 IN RRSIG ( A 7 3 30 20210422233119 20210415233119 31499 twai.gov. izTbAB60aZAQrftDH0PKXWBSBAV2eQD9jAOJD+tkHwcCX1t1S8fuGQyedPZo+UlV/ApGCtNNp4C2 Q8VhUHII9zS6mZChK9ozXXW5S/gmIUdZodBrJvjPF1VZ/n2PtJCCHBCH8SZhC50NM3xNSFegQfNJ tTbeNrh3r6oUCiofybw= ) ns1.twai.GOV. 30 IN AAAA 2605:3100:fffc:100::7 ns1.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20210420153927 20210413153927 14747 twai.gov. WMUVxRTctd5JmtU9IV2YWIa4+fiXS4OFcqblKChfLXrDr7gY+A/qX9/LtxtW/epIt1W2wePA9a3k hzenYuxiyR2WarU70+8nGACH45whPr8N70U3U19chayg9wfITC2r3xmZgiN2H3bQT7zErkqsCR7N xnaDIsszdS3lSOX0bt4= ) ns1.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20210422233119 20210415233119 31499 twai.gov. bQNJVj3FZiTKdoF5gVmfB1IuMiNPs/+apEVoqCTmmagOLVMAR3fDJEQzN3IOryhEtH6DJbWQNidx FqdQilvq7nSz4aLOJNrA++MMzqhgEySTVp1j01/RY2+XV/WhTsPjV6vA3iR04MPYiy7Or5xXJJEs sFLOzABZumtt/rfle5k= ) ns2.twai.GOV. 30 IN AAAA 2605:3100:fffd:100::7 ns2.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20210420153927 20210413153927 14747 twai.gov. RJt3O2NFhhwbGONst4/+GIX40EKT6rw72+0uJ85HhhT6sFZeX3gRXg3foI5hi0L4cMBcGZJW2Hsh Si/kGzBreY31cK6biwbKKNzbA1hoEo8fIxO4KWqaYYFJHNdW+TbWUojO1qYmdiu2x7BTbqr0Tiz/ vq/u7msWLqVlZnOS0pA= ) ns2.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20210422233119 20210415233119 31499 twai.gov. EYvi9TsGcX3H06DR6Vxv+ErpEfJ0XGCDu+y8UcoI03bYjR/0zD2yw2ghjWhhtvpwrMGB1qd+8uoG JtzQu7E2GelUhHEgOvcUwXPRDeTnLmHhbqzsHg+L6Q6igbCnfxN9WWbYmFPkrFClugpai8JYAsI5 9g8DSbVZkh7xldazKF4= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns2.twai.GOV for TREASLOCKBOX.GOV/A
	Received 413 bytes from 199.169.192.28
	;; Answer received from 199.169.192.28 (413 bytes) ;; HEADER SECTION ;; id = 11964 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TREASLOCKBOX.GOV. IN A ;; ANSWER SECTION (3 records) TREASLOCKBOX.GOV. 5 IN A 199.169.192.12 TREASLOCKBOX.GOV. 5 IN RRSIG ( A 7 2 5 20210423090245 20210416090245 10457 treaslockbox.gov. XNXHAU5DB9NNt7sw9J8fc9dJjeLg8O9zLeX4nZG1SW6g7Zy+Z9AnopJaiKERjlTChVlY+7EFwKFi wwLrHJwuuKUgcjFH9ZidQYwLX02kzLbSabVtC0P/8sYM6DvjA0hLEAMncmbPnG5qcaPex/wlNZjG cM27SCD8jhmx4QMdUyk= ) TREASLOCKBOX.GOV. 5 IN RRSIG ( A 7 2 5 20210423050932 20210416050932 26219 treaslockbox.gov. CAKhcwXyPLzmXOwB6ZTschy+B0HuwtxgtUTB99jZcy3G/7M0cozJdr6P6uOnIbpNV7Ly1/f+FlQh NwxNrrGvskorLzTr3Xn0fkTLGcQ1L4C4h5I9NO/Bd258UzedZSeppN0EmuIPtBsye+34YKnsBHB0 sRitmtAXuGWNAcruJ04= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	TREASLOCKBOX.GOV A RR has value 199.169.192.12
	Found 2 RRSIGs over A RRset
	`TREASLOCKBOX.GOV. 5 IN RRSIG ( A 7 2 5 20210423090245 20210416090245 10457 treaslockbox.gov. XNXHAU5DB9NNt7sw9J8fc9dJjeLg8O9zLeX4nZG1SW6g7Zy+Z9AnopJaiKERjlTChVlY+7EFwKFi wwLrHJwuuKUgcjFH9ZidQYwLX02kzLbSabVtC0P/8sYM6DvjA0hLEAMncmbPnG5qcaPex/wlNZjG cM27SCD8jhmx4QMdUyk= )`
	`TREASLOCKBOX.GOV. 5 IN RRSIG ( A 7 2 5 20210423050932 20210416050932 26219 treaslockbox.gov. CAKhcwXyPLzmXOwB6ZTschy+B0HuwtxgtUTB99jZcy3G/7M0cozJdr6P6uOnIbpNV7Ly1/f+FlQh NwxNrrGvskorLzTr3Xn0fkTLGcQ1L4C4h5I9NO/Bd258UzedZSeppN0EmuIPtBsye+34YKnsBHB0 sRitmtAXuGWNAcruJ04= )`
	RRSIG=10457 and DNSKEY=10457 verifies the A RRset
	RRSIG=26219 and DNSKEY=26219 verifies the A RRset

TREASLOCKBOX.GOV

	Query to ns1.twai.GOV for TREASLOCKBOX.GOV/A
	Received 413 bytes from 199.169.194.28
	;; Answer received from 199.169.194.28 (413 bytes) ;; HEADER SECTION ;; id = 48504 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TREASLOCKBOX.GOV. IN A ;; ANSWER SECTION (3 records) TREASLOCKBOX.GOV. 5 IN A 199.169.192.12 TREASLOCKBOX.GOV. 5 IN RRSIG ( A 7 2 5 20210420211555 20210413211555 10457 treaslockbox.gov. LRr55Rd4ApRPDCk9jBfEoGx9BlP8BsnPKKjbijDZqk/wTXbj8eNqIALWoh90eSRQdO114eYbXPMf SaFAoBR4zvwgO9lgT30J0LxQd69wj0Z0b41SNVwlepRto3Nw7UAJZ+UnJJWs2koRPo6KL1SR9+kA E2ZHmUMvy8O1gJjEObw= ) TREASLOCKBOX.GOV. 5 IN RRSIG ( A 7 2 5 20210423080921 20210416080921 26219 treaslockbox.gov. gMLmzZYbLxZILzFvQ6CEqJY39Sw6B7kGcnlceEW/tuyqSHYJqLhUKh1jI3ViCHrpEHPyeVQal+QY oG8mBwBFkdF/bsU66N62WDIbW7Oq0hJjnVzojbfO26Y7G8K6P6pvVXVb57ufY+fWAAjWVlaR4DfI u/L07u6s5OrHElNZ1CE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns1.twai.GOV is authoritative for TREASLOCKBOX.GOV
	Found RRSIG signed by treaslockbox.gov zone
	Query to ns1.twai.GOV for TREASLOCKBOX.GOV/A
	Received 413 bytes from 199.169.194.28
	;; Answer received from 199.169.194.28 (413 bytes) ;; HEADER SECTION ;; id = 8503 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TREASLOCKBOX.GOV. IN A ;; ANSWER SECTION (3 records) TREASLOCKBOX.GOV. 5 IN A 199.169.192.12 TREASLOCKBOX.GOV. 5 IN RRSIG ( A 7 2 5 20210420213535 20210413213535 10457 treaslockbox.gov. C7dSpd0AM5aMzAUgneSTE30fNGYiluFxefEYwtXaOpNHLMTX/p8Evv+S3IZbgVkRaejG9uFsQwPD yx6LD86xG9cxZjQi01qS85iKK1Bz2eRruw3VHYJZ5WElNwcDkyBjcwmtYhpUl0k2bcdAw+0tq/e8 kFuLCO7awy1r3yImaIs= ) TREASLOCKBOX.GOV. 5 IN RRSIG ( A 7 2 5 20210423002449 20210416002449 26219 treaslockbox.gov. n3f45zt33VFCG5fULb97j/BsCGBrQ86U9bOqyLwnhkE98wecoI3TcUiIreSKux0LGhakyUqajqFU Z8B3f3HPmPcc01+q/aTNvTXQL7smrBDPtSAD6Kr5ZTADcyBHwVsAk45NFJWZY8Thu22yAcfZjDu7 ZMS4QtGkdZsMxmR+MNM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	TREASLOCKBOX.GOV A RR has value 199.169.192.12
	Found 2 RRSIGs over A RRset
	`TREASLOCKBOX.GOV. 5 IN RRSIG ( A 7 2 5 20210420213535 20210413213535 10457 treaslockbox.gov. C7dSpd0AM5aMzAUgneSTE30fNGYiluFxefEYwtXaOpNHLMTX/p8Evv+S3IZbgVkRaejG9uFsQwPD yx6LD86xG9cxZjQi01qS85iKK1Bz2eRruw3VHYJZ5WElNwcDkyBjcwmtYhpUl0k2bcdAw+0tq/e8 kFuLCO7awy1r3yImaIs= )`
	`TREASLOCKBOX.GOV. 5 IN RRSIG ( A 7 2 5 20210423002449 20210416002449 26219 treaslockbox.gov. n3f45zt33VFCG5fULb97j/BsCGBrQ86U9bOqyLwnhkE98wecoI3TcUiIreSKux0LGhakyUqajqFU Z8B3f3HPmPcc01+q/aTNvTXQL7smrBDPtSAD6Kr5ZTADcyBHwVsAk45NFJWZY8Thu22yAcfZjDu7 ZMS4QtGkdZsMxmR+MNM= )`
	RRSIG=10457 and DNSKEY=10457 verifies the A RRset
	RRSIG=26219 and DNSKEY=26219 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test TREASLOCKBOX.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: