DNSSEC Analyzer - TREASLOCKBOX.GOV

Domain Name:

Time: 2019-11-18 01:49:05 UTC, NTP stratum 4

Analyzing DNSSEC problems for TREASLOCKBOX.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (864 bytes) ;; HEADER SECTION ;; id = 20302 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20191201000000 20191110000000 20326 . Ls9QKBBhEie6yu8Y8nxmSg/K7CvsJ7mQr1mgOiOkzokm97IpD+Wnls/84l77jFKDJBHEA2mzEMUi eKMb4B95aGqrJua2J4HB/51jwaae7GrVpKtS5w5ni5k1bpB6qPmvmlDlq4vJ3YOVawMsy4vF9Dxa lQ0satgSoFdze4QNUy9J+2Lcjtf6+OamOS7R2bKOQGD4z7+ftKLJqYXlKw3UgGMmnaCMVbcC6IpU UHl52CEPlWTga/fI33QVJjD3j2zkZCip+lIPY3lNb+CXHKr8UvgnrQckZ/MYnvUNlt/JxjFME1hy bwACbrJ/Ea6IwGbDNW4wsmq8HLSn5n9mA6n6iw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20191201000000 20191110000000 20326 . Ls9QKBBhEie6yu8Y8nxmSg/K7CvsJ7mQr1mgOiOkzokm97IpD+Wnls/84l77jFKDJBHEA2mzEMUi eKMb4B95aGqrJua2J4HB/51jwaae7GrVpKtS5w5ni5k1bpB6qPmvmlDlq4vJ3YOVawMsy4vF9Dxa lQ0satgSoFdze4QNUy9J+2Lcjtf6+OamOS7R2bKOQGD4z7+ftKLJqYXlKw3UgGMmnaCMVbcC6IpU UHl52CEPlWTga/fI33QVJjD3j2zkZCip+lIPY3lNb+CXHKr8UvgnrQckZ/MYnvUNlt/JxjFME1hy bwACbrJ/Ea6IwGbDNW4wsmq8HLSn5n9mA6n6iw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=22545 is now in the chain-of-trust
	Query to i.root-servers.net for TREASLOCKBOX.GOV/A
	Received 674 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (674 bytes) ;; HEADER SECTION ;; id = 21269 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TREASLOCKBOX.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20191130170000 20191117160000 22545 . h4CG66sclQwIJb89ICWtpEDOjnpgi92I+kz7S/NDP0zWaZvlWoPnfzsByOm/oPUHsJ7LorIRd9f5 aIb7WyAcyv8PJL6NNNMdHMNR5JWMGm2EFHpJkQu9lNChbsds0TppNlK9wtyyME/GP/fsL947LpYu XIA3lDSUAgHU8heDNAmqoFUSSq3ZoRJyNhY+p4/w1DRdBLtARO9CiNInTtYfse2IwD+ER4YxzDF7 vr0owioswJOlGZ4hLdQYEt/yIo3aesfSmaXwG6f763E8HU1igz8jfnC17od74fU2GUi9dDjnzF1p fSO+HJ8gXp9zAMM7XIjJxGoR3sQF0Q0Ev3mI0g== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to g.root-servers.net for GOV/DNSKEY
	Received 661 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (661 bytes) ;; HEADER SECTION ;; id = 33645 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20191130170000 20191117160000 22545 . h4CG66sclQwIJb89ICWtpEDOjnpgi92I+kz7S/NDP0zWaZvlWoPnfzsByOm/oPUHsJ7LorIRd9f5 aIb7WyAcyv8PJL6NNNMdHMNR5JWMGm2EFHpJkQu9lNChbsds0TppNlK9wtyyME/GP/fsL947LpYu XIA3lDSUAgHU8heDNAmqoFUSSq3ZoRJyNhY+p4/w1DRdBLtARO9CiNInTtYfse2IwD+ER4YxzDF7 vr0owioswJOlGZ4hLdQYEt/yIo3aesfSmaXwG6f763E8HU1igz8jfnC17od74fU2GUi9dDjnzF1p fSO+HJ8gXp9zAMM7XIjJxGoR3sQF0Q0Ev3mI0g== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to e.root-servers.net for GOV/DS
	Received 406 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (406 bytes) ;; HEADER SECTION ;; id = 46107 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20191130170000 20191117160000 22545 . h4CG66sclQwIJb89ICWtpEDOjnpgi92I+kz7S/NDP0zWaZvlWoPnfzsByOm/oPUHsJ7LorIRd9f5 aIb7WyAcyv8PJL6NNNMdHMNR5JWMGm2EFHpJkQu9lNChbsds0TppNlK9wtyyME/GP/fsL947LpYu XIA3lDSUAgHU8heDNAmqoFUSSq3ZoRJyNhY+p4/w1DRdBLtARO9CiNInTtYfse2IwD+ER4YxzDF7 vr0owioswJOlGZ4hLdQYEt/yIo3aesfSmaXwG6f763E8HU1igz8jfnC17od74fU2GUi9dDjnzF1p fSO+HJ8gXp9zAMM7XIjJxGoR3sQF0Q0Ev3mI0g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20191130170000 20191117160000 22545 . h4CG66sclQwIJb89ICWtpEDOjnpgi92I+kz7S/NDP0zWaZvlWoPnfzsByOm/oPUHsJ7LorIRd9f5 aIb7WyAcyv8PJL6NNNMdHMNR5JWMGm2EFHpJkQu9lNChbsds0TppNlK9wtyyME/GP/fsL947LpYu XIA3lDSUAgHU8heDNAmqoFUSSq3ZoRJyNhY+p4/w1DRdBLtARO9CiNInTtYfse2IwD+ER4YxzDF7 vr0owioswJOlGZ4hLdQYEt/yIo3aesfSmaXwG6f763E8HU1igz8jfnC17od74fU2GUi9dDjnzF1p fSO+HJ8gXp9zAMM7XIjJxGoR3sQF0Q0Ev3mI0g== )`
	RRSIG=22545 and DNSKEY=22545 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to c.gov-servers.net for GOV/DNSKEY
	Error querying c.gov-servers.net/2620:74:28:0:0:0:2:30 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 923 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (923 bytes) ;; HEADER SECTION ;; id = 10193 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (4 records) GOV. 86400 IN DNSKEY ( 256 3 8 AQPyPvPjCOOxe71vhn8KNKkRNvz+ttcK3l0mbbdvPuIYZkbo5tW/6YqyfCPoATceDs2qxcCBE3/9 Ulu6AMbnrCndRjIJ/F5b0C3CHmdMBPSHtXNy0z5VXU7dTz/cmSKlaPrDPRrY6WdcTaI3VcnU6cyu dx7N0SeYR9r+TmDbkVd9Dw== ) ; Key ID = 32795 GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAcQAVXGAbq+khqvif1NNId5wvkmsmSZEb/UXjfazqpqEeA7IUc8b/9eEIBebIcFda4Ukv8lF lnfGIvMRADLa50RVwP2asra1Md0NC9tLjrHEYN0H68WN0tTLIQ6jUF/kzYTeTOVhlUqzM+5JyyT9 x01e1FT5ANG8RkbgXIyPte2Qs8wasqNkjFGaD5oFLerVScCa0FXumybu9cBEfBbAzPU= ) ; Key ID = 14320 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20191126200254 20191111195754 7698 gov. BKP8tCaVkJjoo0kjWzUfMqiBr0nH5hSqZX4iGrrkG6wFpazlQJPACx/y4lQrEgUbriqYRWDywC27 ZFkQN0prnD9HYo8IJjhs6JH1FzftEb+gZEdPEN6Lf0LGzpyMf7NMnRpMR1lMxJpcfE80I94f0MOp lMlrQfSpizNjLtCLuVhRwneJ/IeWcWNZ6dBbLKRNWYiVXm6x9Z5xx+6M8r+EFIj/pQTbc7OVkQNX UIqBIV2h6WSBaRdk3LoPCVsoYon1DyfhEPRgpOKC1vGAo3Azl48GRc9qdq7/enrC7LlJ54A2uPR0 iE72MWbL+bgRBMtKsSEVt0nEaicSywrApevlKw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQPyPvPjCOOxe71vhn8KNKkRNvz+ttcK3l0mbbdvPuIYZkbo5tW/6YqyfCPoATceDs2qxcCBE3/9 Ulu6AMbnrCndRjIJ/F5b0C3CHmdMBPSHtXNy0z5VXU7dTz/cmSKlaPrDPRrY6WdcTaI3VcnU6cyu dx7N0SeYR9r+TmDbkVd9Dw== ) ; Key ID = 32795`
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAcQAVXGAbq+khqvif1NNId5wvkmsmSZEb/UXjfazqpqEeA7IUc8b/9eEIBebIcFda4Ukv8lF lnfGIvMRADLa50RVwP2asra1Md0NC9tLjrHEYN0H68WN0tTLIQ6jUF/kzYTeTOVhlUqzM+5JyyT9 x01e1FT5ANG8RkbgXIyPte2Qs8wasqNkjFGaD5oFLerVScCa0FXumybu9cBEfBbAzPU= ) ; Key ID = 14320`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20191126200254 20191111195754 7698 gov. BKP8tCaVkJjoo0kjWzUfMqiBr0nH5hSqZX4iGrrkG6wFpazlQJPACx/y4lQrEgUbriqYRWDywC27 ZFkQN0prnD9HYo8IJjhs6JH1FzftEb+gZEdPEN6Lf0LGzpyMf7NMnRpMR1lMxJpcfE80I94f0MOp lMlrQfSpizNjLtCLuVhRwneJ/IeWcWNZ6dBbLKRNWYiVXm6x9Z5xx+6M8r+EFIj/pQTbc7OVkQNX UIqBIV2h6WSBaRdk3LoPCVsoYon1DyfhEPRgpOKC1vGAo3Azl48GRc9qdq7/enrC7LlJ54A2uPR0 iE72MWbL+bgRBMtKsSEVt0nEaicSywrApevlKw== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=32795 is now in the chain-of-trust
	DNSKEY=14320 is now in the chain-of-trust
	Query to a.gov-servers.net for TREASLOCKBOX.GOV/A
	Received 377 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (377 bytes) ;; HEADER SECTION ;; id = 44280 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TREASLOCKBOX.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) TREASLOCKBOX.GOV. 86400 IN NS ns1.twai.GOV. TREASLOCKBOX.GOV. 86400 IN NS ns2.twai.GOV. TREASLOCKBOX.GOV. 3600 IN DS ( 31635 7 1 6df825707a3c6e6c9ee4e91e3ed3f812f5d70af5 ) TREASLOCKBOX.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191124221007 20191117221007 14320 gov. HAXd41aowlYzMvvY4CC9XjthP/nP6ZEWmfi9TetHJiSylgzyjqKDjMXVoRfeJrntqRlBxZFUoD00 SqFdSCUB2J69lTWJTGE8K75GLn6Fc3T/bGvDR1EVvva2fER1GzSFgNpIzv8Rz9g7fc5jXdzLaLKo DMgxlj5ruFMOn4nr/BUTcXe6BlJYG0hxFc1FsU8k/x9qmg+1XjAmNHARFZxdmw== ) ;; ADDITIONAL SECTION (4 records) ns1.twai.GOV. 86400 IN A 199.169.194.28 ns2.twai.GOV. 86400 IN A 199.169.192.28 ns2.twai.GOV. 86400 IN AAAA 2605:3100:fffd:100::7 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.gov-servers.net for TREASLOCKBOX.GOV/DNSKEY
	Received 377 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (377 bytes) ;; HEADER SECTION ;; id = 56097 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TREASLOCKBOX.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) TREASLOCKBOX.GOV. 86400 IN NS ns1.twai.GOV. TREASLOCKBOX.GOV. 86400 IN NS ns2.twai.GOV. TREASLOCKBOX.GOV. 3600 IN DS ( 31635 7 1 6df825707a3c6e6c9ee4e91e3ed3f812f5d70af5 ) TREASLOCKBOX.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191124221007 20191117221007 14320 gov. HAXd41aowlYzMvvY4CC9XjthP/nP6ZEWmfi9TetHJiSylgzyjqKDjMXVoRfeJrntqRlBxZFUoD00 SqFdSCUB2J69lTWJTGE8K75GLn6Fc3T/bGvDR1EVvva2fER1GzSFgNpIzv8Rz9g7fc5jXdzLaLKo DMgxlj5ruFMOn4nr/BUTcXe6BlJYG0hxFc1FsU8k/x9qmg+1XjAmNHARFZxdmw== ) ;; ADDITIONAL SECTION (4 records) ns1.twai.GOV. 86400 IN A 199.169.194.28 ns2.twai.GOV. 86400 IN A 199.169.192.28 ns2.twai.GOV. 86400 IN AAAA 2605:3100:fffd:100::7 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone TREASLOCKBOX.GOV

TREASLOCKBOX.GOV

	Checking DS between GOV and TREASLOCKBOX.GOV
	Query to b.gov-servers.net for TREASLOCKBOX.GOV/DS
	Error querying b.gov-servers.net/2620:74:27:0:0:0:2:30 for TREASLOCKBOX.GOV/DS: 'IPv6 transport disabled'
	Received 276 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (276 bytes) ;; HEADER SECTION ;; id = 53873 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TREASLOCKBOX.GOV. IN DS ;; ANSWER SECTION (2 records) TREASLOCKBOX.GOV. 3600 IN DS ( 31635 7 1 6df825707a3c6e6c9ee4e91e3ed3f812f5d70af5 ) TREASLOCKBOX.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191124221007 20191117221007 14320 gov. HAXd41aowlYzMvvY4CC9XjthP/nP6ZEWmfi9TetHJiSylgzyjqKDjMXVoRfeJrntqRlBxZFUoD00 SqFdSCUB2J69lTWJTGE8K75GLn6Fc3T/bGvDR1EVvva2fER1GzSFgNpIzv8Rz9g7fc5jXdzLaLKo DMgxlj5ruFMOn4nr/BUTcXe6BlJYG0hxFc1FsU8k/x9qmg+1XjAmNHARFZxdmw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for TREASLOCKBOX.GOV in the GOV zone
	DS=31635/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`TREASLOCKBOX.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191124221007 20191117221007 14320 gov. HAXd41aowlYzMvvY4CC9XjthP/nP6ZEWmfi9TetHJiSylgzyjqKDjMXVoRfeJrntqRlBxZFUoD00 SqFdSCUB2J69lTWJTGE8K75GLn6Fc3T/bGvDR1EVvva2fER1GzSFgNpIzv8Rz9g7fc5jXdzLaLKo DMgxlj5ruFMOn4nr/BUTcXe6BlJYG0hxFc1FsU8k/x9qmg+1XjAmNHARFZxdmw== )`
	RRSIG=14320 and DNSKEY=14320 verifies the DS RRset
	DS=31635/SHA-1 is now in the chain-of-trust
	`TREASLOCKBOX.GOV. 3600 IN DS ( 31635 7 1 6df825707a3c6e6c9ee4e91e3ed3f812f5d70af5 )`
	Query to ns2.twai.GOV for TREASLOCKBOX.GOV/DNSKEY
	Received 1273 bytes from 199.169.192.28
	;; Answer received from 199.169.192.28 (1273 bytes) ;; HEADER SECTION ;; id = 61610 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TREASLOCKBOX.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) TREASLOCKBOX.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAZoeohsV2TZgOHQnDZN1b+ArUYhzgQb7YZGBPsl1l2Ka6grQWqqnhP81xJ9n8zKNiwsyculZ vZZj8pHEol7g2T2st0uiSnXtsfwrv8mlHOcSe5Nhh4onC0O4jkQIcZ6c/zYeMApAXmUdyWbJ1eF6 57ZG/YKMR22fIcpxaK6LVZS3 ) ; Key ID = 51773 TREASLOCKBOX.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAeSPsrFRq7buYdLVT6qvuaorD2uk/mx+NG0wLrJoqBP36ImEkpIKNGLs9VXqqt7w2o8oHiEz bkneiA/60r13FZnJdm9VRF3HVF5eVdDqsDJUFc1pTCXnenrWxO0vwm5faqgon35iYuCpMK9+5oZY YYL/nB8ZgDVph22DA09bPFpL ) ; Key ID = 27857 TREASLOCKBOX.GOV. 3600 IN DNSKEY ( 257 3 7 AwEAAeNGNoXta1g7txxL54KPbICleTKFxir4PWd7S5f8uSDrAlzYaCDDEQTDUhBuQuitAkLf+v4t VQ1DlzJ5j74C0kIKMqWGhIvub77hnupkH0+sZk4W8eCcM7uItJrjj96M1V0l7qMvEixO+QSNqM4w Eq3wWyCgXWFKeXodFO6BvkD1Gu8AYphF+yqQGkaVUP3DjhHs+1Ijg8wZ5rgfH2+BmovDg/JYgkic /ahjdKGzFXn5soClTmaZT9JKCgGte6y1zdJeatue1mlBl7DiLM0i010Iw7gvEBg/CiSAE9aIeXfB qzX3hJo8CBN+VfxyHip2hUVgfM7jU9jk+t84rNO+3sM= ) ; Key ID = 31635 TREASLOCKBOX.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20191122135836 20191115135836 51773 treaslockbox.gov. PCUSmUdQaxGF42X5b1YsBGgi9ho/2lTsUHlRY6L4tTKU0JGeWxek7VUKaFYAY1URyTavhNcCOJuV KETUqHjH+ytj/p2CSuK8pp6lpCpC6HPILfNyU4B4dBYlvI4nZ+gBOc/DXibLyYGZFasJyqI1gbQl xMDe5I4IvzEgE82+2aM= ) TREASLOCKBOX.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20191122135836 20191115135836 27857 treaslockbox.gov. fEWTCIl+gyopmS7zv4qvuJ7hP6GXSF67Xr4BPIIehe/h1EBrQGPSV/0jxB0XyZ9fiP81n5gQmwy0 phjy/x7czoQpnXSmchCRtsw6P/tq6fxuUCzo3pJDNVHkbMvKkXNIov6j8B4p4JLW1dKvtCCmOthD M1Y208Cuo/IHtS2k+pI= ) TREASLOCKBOX.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20191122135836 20191115135836 31635 treaslockbox.gov. A4XvZYOwIfikBtjyFF4x8H4o1NheBAG87Ohfx7rC9/Q9Kv0AVYkYIAgLt7xH4reu1I92O8ofBCzV ryQP7PuTY7Np9Q4Q7LaXqYqmPSqtoFFQ0+z0VQvXG1V7+fcMF4tH5AVAOHnxmEm0vrkMyyPjJ5Ak dZlvSGpdVFw4a81N0rFTjzWqlTevYI14FlYvtp021qdx3njCRhZVYkxmfqbp16/3ELYBMmxLDnZi ondbnaG1U4o8rbj9tifb7G7Sv4K8dbndXI6AK082Zo/kgyoccxS1xKXcRZirhN6uDugKoEcFVrqE r9lZWQwAZtvEWM9zAq/qjREIl3LMqiP8J3uKrA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for TREASLOCKBOX.GOV
	`TREASLOCKBOX.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAZoeohsV2TZgOHQnDZN1b+ArUYhzgQb7YZGBPsl1l2Ka6grQWqqnhP81xJ9n8zKNiwsyculZ vZZj8pHEol7g2T2st0uiSnXtsfwrv8mlHOcSe5Nhh4onC0O4jkQIcZ6c/zYeMApAXmUdyWbJ1eF6 57ZG/YKMR22fIcpxaK6LVZS3 ) ; Key ID = 51773`
	`TREASLOCKBOX.GOV. 3600 IN DNSKEY ( 256 3 7 AwEAAeSPsrFRq7buYdLVT6qvuaorD2uk/mx+NG0wLrJoqBP36ImEkpIKNGLs9VXqqt7w2o8oHiEz bkneiA/60r13FZnJdm9VRF3HVF5eVdDqsDJUFc1pTCXnenrWxO0vwm5faqgon35iYuCpMK9+5oZY YYL/nB8ZgDVph22DA09bPFpL ) ; Key ID = 27857`
	`TREASLOCKBOX.GOV. 3600 IN DNSKEY ( 257 3 7 AwEAAeNGNoXta1g7txxL54KPbICleTKFxir4PWd7S5f8uSDrAlzYaCDDEQTDUhBuQuitAkLf+v4t VQ1DlzJ5j74C0kIKMqWGhIvub77hnupkH0+sZk4W8eCcM7uItJrjj96M1V0l7qMvEixO+QSNqM4w Eq3wWyCgXWFKeXodFO6BvkD1Gu8AYphF+yqQGkaVUP3DjhHs+1Ijg8wZ5rgfH2+BmovDg/JYgkic /ahjdKGzFXn5soClTmaZT9JKCgGte6y1zdJeatue1mlBl7DiLM0i010Iw7gvEBg/CiSAE9aIeXfB qzX3hJo8CBN+VfxyHip2hUVgfM7jU9jk+t84rNO+3sM= ) ; Key ID = 31635`
	DNSKEY=31635/SEP is now in the chain-of-trust
	DS=31635/SHA-1 verifies DNSKEY=31635/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`TREASLOCKBOX.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20191122135836 20191115135836 51773 treaslockbox.gov. PCUSmUdQaxGF42X5b1YsBGgi9ho/2lTsUHlRY6L4tTKU0JGeWxek7VUKaFYAY1URyTavhNcCOJuV KETUqHjH+ytj/p2CSuK8pp6lpCpC6HPILfNyU4B4dBYlvI4nZ+gBOc/DXibLyYGZFasJyqI1gbQl xMDe5I4IvzEgE82+2aM= )`
	`TREASLOCKBOX.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20191122135836 20191115135836 27857 treaslockbox.gov. fEWTCIl+gyopmS7zv4qvuJ7hP6GXSF67Xr4BPIIehe/h1EBrQGPSV/0jxB0XyZ9fiP81n5gQmwy0 phjy/x7czoQpnXSmchCRtsw6P/tq6fxuUCzo3pJDNVHkbMvKkXNIov6j8B4p4JLW1dKvtCCmOthD M1Y208Cuo/IHtS2k+pI= )`
	`TREASLOCKBOX.GOV. 3600 IN RRSIG ( DNSKEY 7 2 3600 20191122135836 20191115135836 31635 treaslockbox.gov. A4XvZYOwIfikBtjyFF4x8H4o1NheBAG87Ohfx7rC9/Q9Kv0AVYkYIAgLt7xH4reu1I92O8ofBCzV ryQP7PuTY7Np9Q4Q7LaXqYqmPSqtoFFQ0+z0VQvXG1V7+fcMF4tH5AVAOHnxmEm0vrkMyyPjJ5Ak dZlvSGpdVFw4a81N0rFTjzWqlTevYI14FlYvtp021qdx3njCRhZVYkxmfqbp16/3ELYBMmxLDnZi ondbnaG1U4o8rbj9tifb7G7Sv4K8dbndXI6AK082Zo/kgyoccxS1xKXcRZirhN6uDugKoEcFVrqE r9lZWQwAZtvEWM9zAq/qjREIl3LMqiP8J3uKrA== )`
	RRSIG=51773 and DNSKEY=51773 verifies the DNSKEY RRset
	RRSIG=27857 and DNSKEY=27857 verifies the DNSKEY RRset
	RRSIG=31635 and DNSKEY=31635/SEP verifies the DNSKEY RRset
	DNSKEY=51773 is now in the chain-of-trust
	DNSKEY=27857 is now in the chain-of-trust
	Query to ns2.twai.GOV for TREASLOCKBOX.GOV/A
	Received 413 bytes from 199.169.192.28
	;; Answer received from 199.169.192.28 (413 bytes) ;; HEADER SECTION ;; id = 37857 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TREASLOCKBOX.GOV. IN A ;; ANSWER SECTION (3 records) TREASLOCKBOX.GOV. 5 IN A 199.169.192.12 TREASLOCKBOX.GOV. 5 IN RRSIG ( A 7 2 5 20191121100005 20191114100005 51773 treaslockbox.gov. BtFgvQ7pjPxcLluZCiKSBIHM1klcLYJECCRYIz9QENFKMrhUoems99pWD4dzb9vaoxdTohGWEhGO yAJQo7P8gel02lmRmrhQPt7tWiUiOZK6I7QstNTmZfGlNyYS8Iw5eT4eWdEDZls2+tpibvs5+vjl +gbba7dy4d+5NFlSXD8= ) TREASLOCKBOX.GOV. 5 IN RRSIG ( A 7 2 5 20191122135841 20191115135841 27857 treaslockbox.gov. bp2SKTsn/jk/95eB0LHA5WqyelK8HMr4lKWIWn+pfVXfOyiilA7TCj9q3laohsZDpzs8dOc8Wef8 dI9abC55WNc+MQO1AuvaTWCtSw8OVzBrN/X6cZzUVXTV2pCzKSlPd7tISgRPJ8gv78C1KXei01N/ BacQLvJbPhRPOlWwUK0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	TREASLOCKBOX.GOV is authoritative for TREASLOCKBOX.GOV
	Found RRSIG signed by treaslockbox.gov zone
	Query to ns1.twai.GOV for TREASLOCKBOX.GOV/SOA
	Received 2263 bytes from 199.169.194.28
	;; Answer received from 199.169.194.28 (2263 bytes) ;; HEADER SECTION ;; id = 25775 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TREASLOCKBOX.GOV. IN SOA ;; ANSWER SECTION (3 records) TREASLOCKBOX.GOV. 30 IN SOA ( ns1.twai.GOV. root.ns1.twai.GOV. 2019102601 ;serial 3600 ;refresh 1800 ;retry 864000 ;expire 3600 ;minimum ) TREASLOCKBOX.GOV. 30 IN RRSIG ( SOA 7 2 30 20191121100645 20191114100645 51773 treaslockbox.gov. UVVCFB3zAIAcpqE5N28qDtjiIgT877RmHuHTdKHbX85oFl9736Yd6nW/nHaQ2Z09GcTIigtRXoTI ZRHN/e2LwQU4hfyvxiplRLCaZYIAK8hm1NwSFeqng9ifzQUcULVBiUW9kZ5yg0BsQGzZh2uTvhj1 AlKZgNUvyk7Wb1/XtZA= ) TREASLOCKBOX.GOV. 30 IN RRSIG ( SOA 7 2 30 20191122145050 20191115145050 27857 treaslockbox.gov. T6d3bHLY1+n36H3sw19Nrt2jpQdwwkecrwdXI2jFrQ7+CLK4bYzW2f24TqRjoZazp8Ll7+OxWdd6 yxObSnDgpjjTofQ/o/KY9CjNRCWwfRaVlmoMfSw8aGUwoJQO9U35bM9sbVqMkaE4zKhkk2hiyA5W tATiC1MvU8iCFG5ZV5I= ) ;; AUTHORITY SECTION (4 records) TREASLOCKBOX.GOV. 30 IN NS ns1.twai.GOV. TREASLOCKBOX.GOV. 30 IN NS ns2.twai.GOV. TREASLOCKBOX.GOV. 30 IN RRSIG ( NS 7 2 30 20191120100939 20191113100939 51773 treaslockbox.gov. ExN0LllYzfKfv2zTEORsWHekraanS+R/fSgPQ24GRMiMEsfmKyBfbOrstigi/cosLqSVtDFrk3jd 4fKd1qu0/TI9WnAUwrmt91zuiPYrK4LsVazdU7bMLN8VMKq71PYhHax+N3l4dUXamtZQlCz7NASt HjiX4XT9s4nVy/n0yJQ= ) TREASLOCKBOX.GOV. 30 IN RRSIG ( NS 7 2 30 20191122135957 20191115135957 27857 treaslockbox.gov. YZNLRLAbh3KRQG7rwaMU99C0od8OOBrIozHcTWrHadAQrnfO9SvKoRQQGdgTD33Rc9jpmufQmpGR 9bl2eMun0O2EEUg+xWkU5gliG1Xckh1AxjDTSFI8UoPIoGpXgWSvdsLO2wEx9UnRRTo0Do1GxaOw bNvgC+wclXoOPtXUNeQ= ) ;; ADDITIONAL SECTION (13 records) ns1.twai.GOV. 30 IN A 199.169.194.28 ns1.twai.GOV. 30 IN RRSIG ( A 7 3 30 20191124215039 20191117215039 30224 twai.gov. gtsXDZHZ6o30W4AL/xJkrz5UnmKuJJGXcHHpskA97i9umouAFp/v5kyQ5ZnjH9x3UAKnLQs5U2Uc mFnOlDT5z2lCNCAvsNHJfuBz2WPtudafCacuMcIdQm5AE25DhQN1lhex7IGFhCY65zzG+FEhNqQ7 vBz9Mw5ed/0KU4KY46E= ) ns1.twai.GOV. 30 IN RRSIG ( A 7 3 30 20191122135026 20191115135026 54347 twai.gov. J3r5d+t3xZ9PtQjqU9lGFK8/nIXyfc1p+EYHM8HyhxueIgJo9U8gYOuKqCdK4bU97fPG5Zkn1REG rKPbSdXsCn1lI406FsnfsgLwOad7BsOHzF6W/qVuHoNc3q1ePA47Jv7fomLpKoWGwT+6bYbV20hN s1AJp9sBvCu3hgSqj1U= ) ns2.twai.GOV. 30 IN A 199.169.192.28 ns2.twai.GOV. 30 IN RRSIG ( A 7 3 30 20191124215039 20191117215039 30224 twai.gov. Vj0uZUiSNS6Y1CN1/L7M3cmaxrS6dPGAjSoX5YxIbq9GMSRJfL96BYh6y1p6aXxJwjKrIc05B+sA u60Kxe5zUeP296Df1I1lhj5TajPC8KeP+Tw5gCHvNN8NpSjS2EBFd/NDVRmr4TiuPKnQ7zYK4w6q VDxL0z4O+T62lk6fXEM= ) ns2.twai.GOV. 30 IN RRSIG ( A 7 3 30 20191122135026 20191115135026 54347 twai.gov. eFiPiaPdTOGQRCrPtL/qaLezdUJ5PzCJDNPwbia2bbw7HSdUfWM//0YvwKBkZ8+bhxgH6cdlhsxV TGsZnOKb241V7DicVVr4aQhcoTncObY94XZUHecUSSsE5I36PdEBRrdFmnKJkJMFmE0fU6YBSQ+y N/ZhNJ6G2F2m6f2wjQk= ) ns1.twai.GOV. 30 IN AAAA 2605:3100:fffc:100::7 ns1.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20191124215039 20191117215039 30224 twai.gov. TiFDuZeIhbK7MJEcR2PNw+A6UTD/tGtwmLBqAw1wSHPPDmApCv/OUkzWFbh52Wn2e+Wj/G9gre7d YbRuKkdKAfycIItLe0Vt/gk7ZGw1kQqKDQPlMCtTlsEeiBMkc2tNoSdJwKKDZL4m51lKDS7nsVtt QJL6bMZTS6hm+Q/Wr+0= ) ns1.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20191122135026 20191115135026 54347 twai.gov. oonLJqiKOaHg6dRCgp80InF/uvQlFSNI8n+7ii6q9ejSWdY33CGB5KuzA8qE4UKuV55Y3yrLVtye kjxuyQccYeGozmxJXf3Ap2hU52qDwpSv1cJq+WfLOuinazE+sKVsNgp8NP6YbuaU+BnsTyuTbTVp YmVlBlWtWQ3/naFfaCI= ) ns2.twai.GOV. 30 IN AAAA 2605:3100:fffd:100::7 ns2.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20191124215039 20191117215039 30224 twai.gov. jcgxiEUKbYNmuL2eHEbXN3fbN5WJPDhrU5Z8FKoPwhVTD5zT/1nFO17G9vRHTRwlAqM6DQxeWKf+ 8I9WhtrBwsuwvGhFEhokQZ5qUfItZmXU9/2X07F/5fD0gW1hZAhbGtX85dfZ2cOJJhT8Atb6RNY3 DMZ5Qnx95JEcwPdDz/I= ) ns2.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20191122135026 20191115135026 54347 twai.gov. OWEIXVy8A0HzwbSE01sXvVSnlQbkKUBfeayyV6DPMoYfP14WoCu56F12tNz6D0bDgcUqGhEd4hcI K4dgvu/OK3OwDE0R6QfUmv9rQPsp/4V2p3IEF/a+O/9DwXbOIuV6z1JyOlwRUoobvf5hhu3SZqqL sE5Gu84LqudiINBMShs= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns2.twai.GOV for TREASLOCKBOX.GOV/SOA
	Received 2263 bytes from 199.169.192.28
	;; Answer received from 199.169.192.28 (2263 bytes) ;; HEADER SECTION ;; id = 15958 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TREASLOCKBOX.GOV. IN SOA ;; ANSWER SECTION (3 records) TREASLOCKBOX.GOV. 30 IN SOA ( ns1.twai.GOV. root.ns1.twai.GOV. 2019102601 ;serial 3600 ;refresh 1800 ;retry 864000 ;expire 3600 ;minimum ) TREASLOCKBOX.GOV. 30 IN RRSIG ( SOA 7 2 30 20191121101819 20191114101819 51773 treaslockbox.gov. hWcvQQSGJeiCEGsC2/qXD8w052gP5V0TAyuo+e0NO4jYMt8vc434fh4tVUTj2/3lVJSI+Q82P0W4 Dl2sA/rGv+U9PfPWpfhbrY7eV0Pseb0jbUbDToQcwDo6L4dfFL1iwf58kWqSG8rri76mm7Kxt9cl lYL5o4jzkoN0ZrdQ4qY= ) TREASLOCKBOX.GOV. 30 IN RRSIG ( SOA 7 2 30 20191122135905 20191115135905 27857 treaslockbox.gov. MFWgpLAMah75kBhJ6IC76EkoWz8JJg7xoFQRxtL4jLVfJHywiV93r8ZfBZXNTi2kc05/27rs82+l 4HFk4TRt4ntMgrQZQq7GsTXawC6fwyNvWNf/dyz/sxR7SE4YPfUyrEssd8k0XD25FOn3xbY82vzv hIMVAHuMWoBq8cSns84= ) ;; AUTHORITY SECTION (4 records) TREASLOCKBOX.GOV. 30 IN NS ns2.twai.GOV. TREASLOCKBOX.GOV. 30 IN NS ns1.twai.GOV. TREASLOCKBOX.GOV. 30 IN RRSIG ( NS 7 2 30 20191124223540 20191117223540 51773 treaslockbox.gov. DH2nCcZ8iIDPEmkr5Vz+r7GNH0Wet/UverKFD+z3n4sO8dXEMHJtS/MBGiCWSyBEAvJqa0Gk+yEh xRFuHDxwTEScRRyLnXViwFVNOTKye4XG/TNiP3NGoEBSgBp/8FodH+GdCXO9UNiP37AQClZu149X H4VON2TrGgb27YuL+Kg= ) TREASLOCKBOX.GOV. 30 IN RRSIG ( NS 7 2 30 20191122135115 20191115135115 27857 treaslockbox.gov. CMKrs45yS4RgzCHiLNCg5Baw32Ra4Unua1MhUexiJVdeJxoY/3MbMQo4YAXxKHHOVSOiE97ZW0nl tk88seyt33InlfEq51MNTs+iNpHzVI9x/xw+NdhQxPw2fdhz9Abup3Tmd2tgUYiSm3+afdHvTSCq 8lkhXJHW6DL9UATAjko= ) ;; ADDITIONAL SECTION (13 records) ns1.twai.GOV. 30 IN A 199.169.194.28 ns1.twai.GOV. 30 IN RRSIG ( A 7 3 30 20191124215034 20191117215034 30224 twai.gov. EYGZRZyTq7QWgg1hV0HUEEMtMwyK5lEqO+MgQy3qXFjFfS6vpe02/t8OIMZvjhhFd4L9Q+w5J9h9 /qZumykWPGf4w7+GTLtUtfw+flsL7Xj2kHgrnJU+UNjhUDbBiFeazjz8XMXYQKjRDJNDFXuCeXEF nO24IBhq2gkaU0UgoTs= ) ns1.twai.GOV. 30 IN RRSIG ( A 7 3 30 20191122135026 20191115135026 54347 twai.gov. J3r5d+t3xZ9PtQjqU9lGFK8/nIXyfc1p+EYHM8HyhxueIgJo9U8gYOuKqCdK4bU97fPG5Zkn1REG rKPbSdXsCn1lI406FsnfsgLwOad7BsOHzF6W/qVuHoNc3q1ePA47Jv7fomLpKoWGwT+6bYbV20hN s1AJp9sBvCu3hgSqj1U= ) ns2.twai.GOV. 30 IN A 199.169.192.28 ns2.twai.GOV. 30 IN RRSIG ( A 7 3 30 20191124215034 20191117215034 30224 twai.gov. kWs9t4sH73rqchmd4pXC4WpEec0hE73I3TuJptc+1YmcXx1M7gJVSSBVwURdiDE1J6lPNV5iRgv6 ilfp1jE7D042zYXjayzQkGpyGEAzow6OYnvKrS5HSQ1bU/OM8LJsEM19DAqUn3JwUzlmA0/jauYZ JpeRVCwSVsSsaYCSrE0= ) ns2.twai.GOV. 30 IN RRSIG ( A 7 3 30 20191122135026 20191115135026 54347 twai.gov. eFiPiaPdTOGQRCrPtL/qaLezdUJ5PzCJDNPwbia2bbw7HSdUfWM//0YvwKBkZ8+bhxgH6cdlhsxV TGsZnOKb241V7DicVVr4aQhcoTncObY94XZUHecUSSsE5I36PdEBRrdFmnKJkJMFmE0fU6YBSQ+y N/ZhNJ6G2F2m6f2wjQk= ) ns1.twai.GOV. 30 IN AAAA 2605:3100:fffc:100::7 ns1.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20191124215034 20191117215034 30224 twai.gov. rDl1mkN5RYDc6o3KfhdnndTd74YxFUUq2WgvYxFpkyB5O/3yKZyWOdoDV5/lC79/lT8epRKKB2tR ilWk6hWij6DUPv1YFY5CZYYY9GcQWAxeIaNcCkPt6bLkAYHSWh3Qz1kzSJWW9/ynDhJXTeMgjnmm UFjgDkZtBSoe7Xo7VwA= ) ns1.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20191122135026 20191115135026 54347 twai.gov. oonLJqiKOaHg6dRCgp80InF/uvQlFSNI8n+7ii6q9ejSWdY33CGB5KuzA8qE4UKuV55Y3yrLVtye kjxuyQccYeGozmxJXf3Ap2hU52qDwpSv1cJq+WfLOuinazE+sKVsNgp8NP6YbuaU+BnsTyuTbTVp YmVlBlWtWQ3/naFfaCI= ) ns2.twai.GOV. 30 IN AAAA 2605:3100:fffd:100::7 ns2.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20191124215034 20191117215034 30224 twai.gov. M9RhbfTzePfrlo9Xhg3gRhb1ncZZdE8gcIcMqrCS+KTvR0DjTj3A2l0v6dAe1hxjrjAtv4hLv8Tt WaJvUHPw458iTHrf0ZlbSqGyU6oXV6XFART7oxD8azq7j3GLR16J0JUCVPz+SsRAC/yu3VIOnH2Y Rru7wP+IumH0UcsMpic= ) ns2.twai.GOV. 30 IN RRSIG ( AAAA 7 3 30 20191122135026 20191115135026 54347 twai.gov. OWEIXVy8A0HzwbSE01sXvVSnlQbkKUBfeayyV6DPMoYfP14WoCu56F12tNz6D0bDgcUqGhEd4hcI K4dgvu/OK3OwDE0R6QfUmv9rQPsp/4V2p3IEF/a+O/9DwXbOIuV6z1JyOlwRUoobvf5hhu3SZqqL sE5Gu84LqudiINBMShs= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns2.twai.GOV for TREASLOCKBOX.GOV/A
	Error querying ns2.twai.GOV/2605:3100:fffd:100:0:0:0:7 for TREASLOCKBOX.GOV/A: 'IPv6 transport disabled'
	Received 413 bytes from 199.169.192.28
	;; Answer received from 199.169.192.28 (413 bytes) ;; HEADER SECTION ;; id = 19727 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TREASLOCKBOX.GOV. IN A ;; ANSWER SECTION (3 records) TREASLOCKBOX.GOV. 5 IN A 199.169.192.12 TREASLOCKBOX.GOV. 5 IN RRSIG ( A 7 2 5 20191121094353 20191114094353 51773 treaslockbox.gov. jR15WHiY3RPgV6Dxrftu6Q+dGQqmClIA6Z2QRy0vBJHlnimncE8oMK6fpGr6mxhoijXhcjYBnB9m DgRGOb24I18EMJ6i7Z+0FVOnQxUCSMM/77D93UGmhhlbX1HzT6PKN3CoaigrFHaemaXMv4y8Bav1 1sbAVJ2/2cXnN7RUyQI= ) TREASLOCKBOX.GOV. 5 IN RRSIG ( A 7 2 5 20191122135338 20191115135338 27857 treaslockbox.gov. VTip4MVIN4h29JEvBgrBkH5P5oIJMt/rxdE9r/Vl9WFjXr+FbOhQ8kYMdOVDKGs/Jx9VhSneudgT NvL7ZmjPwymoKkIes4daCf0IjnhpPFVHR96SNJRoN2UG2tw/iGcUgemf3BupJCcOIH63QHowTiAc FZHtUCYMpDXOwxfpT8s= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	TREASLOCKBOX.GOV A RR has value 199.169.192.12
	Found 2 RRSIGs over A RRset
	`TREASLOCKBOX.GOV. 5 IN RRSIG ( A 7 2 5 20191121094353 20191114094353 51773 treaslockbox.gov. jR15WHiY3RPgV6Dxrftu6Q+dGQqmClIA6Z2QRy0vBJHlnimncE8oMK6fpGr6mxhoijXhcjYBnB9m DgRGOb24I18EMJ6i7Z+0FVOnQxUCSMM/77D93UGmhhlbX1HzT6PKN3CoaigrFHaemaXMv4y8Bav1 1sbAVJ2/2cXnN7RUyQI= )`
	`TREASLOCKBOX.GOV. 5 IN RRSIG ( A 7 2 5 20191122135338 20191115135338 27857 treaslockbox.gov. VTip4MVIN4h29JEvBgrBkH5P5oIJMt/rxdE9r/Vl9WFjXr+FbOhQ8kYMdOVDKGs/Jx9VhSneudgT NvL7ZmjPwymoKkIes4daCf0IjnhpPFVHR96SNJRoN2UG2tw/iGcUgemf3BupJCcOIH63QHowTiAc FZHtUCYMpDXOwxfpT8s= )`
	RRSIG=51773 and DNSKEY=51773 verifies the A RRset
	RRSIG=27857 and DNSKEY=27857 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test TREASLOCKBOX.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: