DNSSEC Analyzer - TSPTEST.GOV

Domain Name:

Time: 2021-05-17 23:33:08 UTC, NTP stratum 4

Analyzing DNSSEC problems for TSPTEST.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (864 bytes) ;; HEADER SECTION ;; id = 7716 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210601000000 20210511000000 20326 . gMnsA3Lm58+9uTDddkHOoqUM18YWhCkx5brt2yk3UM7zojwiLr1Es/mk4am2BwPgHZwOMy+AeT+R 2rCCJlAleAbSXoF3ps6qogze1QS5Xf2eFPXckNWmChWAjmMZEAzzi8bABtUqTd0YhovNE/rhhIf3 OqPW16TM5cqv2ovDZq8+Qj1KFvJ0s+H8tXqI+P4DRR9o43TMbPr0iQYaScj6OaIwhiuMTUb6OT2b JP5c0KnsjDTj+w2AIdNSx2PAJd2jvk/2sMbHpjarmSR25TNfIfheyuDOzvyDtmVQmPls0bYJF6Y+ WFNq3+USPS8HNQEUo0U3tqA1Va8/khAcnUBW9A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210601000000 20210511000000 20326 . gMnsA3Lm58+9uTDddkHOoqUM18YWhCkx5brt2yk3UM7zojwiLr1Es/mk4am2BwPgHZwOMy+AeT+R 2rCCJlAleAbSXoF3ps6qogze1QS5Xf2eFPXckNWmChWAjmMZEAzzi8bABtUqTd0YhovNE/rhhIf3 OqPW16TM5cqv2ovDZq8+Qj1KFvJ0s+H8tXqI+P4DRR9o43TMbPr0iQYaScj6OaIwhiuMTUb6OT2b JP5c0KnsjDTj+w2AIdNSx2PAJd2jvk/2sMbHpjarmSR25TNfIfheyuDOzvyDtmVQmPls0bYJF6Y+ WFNq3+USPS8HNQEUo0U3tqA1Va8/khAcnUBW9A== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=14631 is now in the chain-of-trust
	Query to j.root-servers.net for TSPTEST.GOV/A
	Received 630 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (630 bytes) ;; HEADER SECTION ;; id = 16400 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; TSPTEST.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20210530200000 20210517190000 14631 . AbKRTvM9e8+ylPTGT6oaxjvz2f6D0dn9w5s/iAsLJn9RZygn3sis8IJD4Fztxdp6x0TbiawFW67L /1HefsrzO9/AspzyU+lrOH9/PuQEFJKTxV5BhoV2ej7614OKBMMMQ/cKGQGnY7mgblT4K8PN1c85 gbitmHuWPnIkEdb1LaRriR/ttLJvPb0Qz+TUiZ3tVo7txs5Rxq7RW9aw4p9mzgkliyY4gd3DMk5c sVrVGexpYN0RFasQTxpHKT7eZPcJo1nwenZUSwOlVbXr0Jqp0J8UwXvhkEsiFrbbcOglQnv8bUal EH6Fl52ki8qhizfzO4VTwj64P6oiI7AOR3nuug== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to f.root-servers.net for GOV/DNSKEY
	Received 622 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (622 bytes) ;; HEADER SECTION ;; id = 62894 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20210530200000 20210517190000 14631 . AbKRTvM9e8+ylPTGT6oaxjvz2f6D0dn9w5s/iAsLJn9RZygn3sis8IJD4Fztxdp6x0TbiawFW67L /1HefsrzO9/AspzyU+lrOH9/PuQEFJKTxV5BhoV2ej7614OKBMMMQ/cKGQGnY7mgblT4K8PN1c85 gbitmHuWPnIkEdb1LaRriR/ttLJvPb0Qz+TUiZ3tVo7txs5Rxq7RW9aw4p9mzgkliyY4gd3DMk5c sVrVGexpYN0RFasQTxpHKT7eZPcJo1nwenZUSwOlVbXr0Jqp0J8UwXvhkEsiFrbbcOglQnv8bUal EH6Fl52ki8qhizfzO4VTwj64P6oiI7AOR3nuug== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to c.root-servers.net for GOV/DS
	Received 370 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (370 bytes) ;; HEADER SECTION ;; id = 58730 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20210530200000 20210517190000 14631 . AbKRTvM9e8+ylPTGT6oaxjvz2f6D0dn9w5s/iAsLJn9RZygn3sis8IJD4Fztxdp6x0TbiawFW67L /1HefsrzO9/AspzyU+lrOH9/PuQEFJKTxV5BhoV2ej7614OKBMMMQ/cKGQGnY7mgblT4K8PN1c85 gbitmHuWPnIkEdb1LaRriR/ttLJvPb0Qz+TUiZ3tVo7txs5Rxq7RW9aw4p9mzgkliyY4gd3DMk5c sVrVGexpYN0RFasQTxpHKT7eZPcJo1nwenZUSwOlVbXr0Jqp0J8UwXvhkEsiFrbbcOglQnv8bUal EH6Fl52ki8qhizfzO4VTwj64P6oiI7AOR3nuug== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20210530200000 20210517190000 14631 . AbKRTvM9e8+ylPTGT6oaxjvz2f6D0dn9w5s/iAsLJn9RZygn3sis8IJD4Fztxdp6x0TbiawFW67L /1HefsrzO9/AspzyU+lrOH9/PuQEFJKTxV5BhoV2ej7614OKBMMMQ/cKGQGnY7mgblT4K8PN1c85 gbitmHuWPnIkEdb1LaRriR/ttLJvPb0Qz+TUiZ3tVo7txs5Rxq7RW9aw4p9mzgkliyY4gd3DMk5c sVrVGexpYN0RFasQTxpHKT7eZPcJo1nwenZUSwOlVbXr0Jqp0J8UwXvhkEsiFrbbcOglQnv8bUal EH6Fl52ki8qhizfzO4VTwj64P6oiI7AOR3nuug== )`
	RRSIG=14631 and DNSKEY=14631 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to c.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (777 bytes) ;; HEADER SECTION ;; id = 39907 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbexj/PgN9RGQ1TokFnYjJ87/rMFIqE/rXjWtsmwzxteOcKIVCUJAAWg0pIZZer88omuCVrq +fAz0iBOgY48TRFWgyVFV9rm5esTGOEuCU6BTYj1Cb7zrpb/RayEw0yzVVZ0adT/AXbAsQhteTpV kgWK8K33gxq4wY70AK5KWdDCyj4v9uR6TS0mgbGdg7RzFCi8xeZoYP2PY5XOhAHFon0= ) ; Key ID = 48498 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210524190254 20210509185754 7698 gov. OgUUmguy6HS+AcNAUUxxinzf47xubcLwfLc+B/xt+kM//rKUgtxZjor/wh4xNRZa+SV0j6aJ/y/u We0JV/dbI9cueoq9xYSDzk2BPTW3WFjYKv1X2xcy+tfuPfbAUj5ZG20y5FUxnlcgHfDv+QnK0P5o e/yoeAFFma85ZozCWYGHwOoctKdaVq9dWyrljKdsl9Kwzkd3f7SA7dBXoo3ytFeM1NeEY9gRlTFp zrPRsTqksloHzamrlBu8hmRLEHGNh1l1M6JB4qn22VhJJ76k2yiT6WBvhhyUK4C/MRiAdxqMvuUM SO1OaIUaAVdZgJEg5Az/MIdD7OV1zaQBaA4mgw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbexj/PgN9RGQ1TokFnYjJ87/rMFIqE/rXjWtsmwzxteOcKIVCUJAAWg0pIZZer88omuCVrq +fAz0iBOgY48TRFWgyVFV9rm5esTGOEuCU6BTYj1Cb7zrpb/RayEw0yzVVZ0adT/AXbAsQhteTpV kgWK8K33gxq4wY70AK5KWdDCyj4v9uR6TS0mgbGdg7RzFCi8xeZoYP2PY5XOhAHFon0= ) ; Key ID = 48498`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210524190254 20210509185754 7698 gov. OgUUmguy6HS+AcNAUUxxinzf47xubcLwfLc+B/xt+kM//rKUgtxZjor/wh4xNRZa+SV0j6aJ/y/u We0JV/dbI9cueoq9xYSDzk2BPTW3WFjYKv1X2xcy+tfuPfbAUj5ZG20y5FUxnlcgHfDv+QnK0P5o e/yoeAFFma85ZozCWYGHwOoctKdaVq9dWyrljKdsl9Kwzkd3f7SA7dBXoo3ytFeM1NeEY9gRlTFp zrPRsTqksloHzamrlBu8hmRLEHGNh1l1M6JB4qn22VhJJ76k2yiT6WBvhhyUK4C/MRiAdxqMvuUM SO1OaIUaAVdZgJEg5Az/MIdD7OV1zaQBaA4mgw== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=48498 is now in the chain-of-trust
	Query to c.gov-servers.net for TSPTEST.GOV/A
	Received 471 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (471 bytes) ;; HEADER SECTION ;; id = 30214 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TSPTEST.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) TSPTEST.GOV. 86400 IN NS ns3.TSPTEST.GOV. TSPTEST.GOV. 86400 IN NS ns4.TSPTEST.GOV. TSPTEST.GOV. 3600 IN DS ( 7834 8 2 8c249d67d962c4afa044e2731b1da3623876da20ec31553b615046d5839765b7 ) TSPTEST.GOV. 3600 IN DS ( 38208 7 2 b2076e6c0e741ff4717e07df79ff867528e53b94b2c99d5c343d720cca7b12b0 ) TSPTEST.GOV. 3600 IN DS 7834 8 1 8fa84b1c8be75c5ee8c385551cc08e44fe3f8c55 TSPTEST.GOV. 3600 IN DS 38208 7 1 ec12f9a96a053397c4d178c2985f0cf91b71c746 TSPTEST.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210524211009 20210517211009 48498 gov. iZVi88QfsEo9bhAkkrpE7ubmvOHm09GHRCKaGsJ9zCydsMsLXbnd/TO7d0Haae83KLgCTORYrvMU e5TxkVo8Mwv6DG5l5s0C4QRhm+7cX34f+fdNkxJh7XM/iH6eyTNiBwYb1rbeg74JD6Vpef8ScAdy UE3er/qCa9pObBzXhJHCpT6cToTfAmV+pBkr63nYwWAl4XyAHm9WcU9r9M1LJQ== ) ;; ADDITIONAL SECTION (3 records) ns3.TSPTEST.GOV. 86400 IN A 74.113.204.36 ns4.TSPTEST.GOV. 86400 IN A 74.113.206.36 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.gov-servers.net for TSPTEST.GOV/DNSKEY
	Received 471 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (471 bytes) ;; HEADER SECTION ;; id = 37516 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TSPTEST.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) TSPTEST.GOV. 86400 IN NS ns3.TSPTEST.GOV. TSPTEST.GOV. 86400 IN NS ns4.TSPTEST.GOV. TSPTEST.GOV. 3600 IN DS ( 7834 8 2 8c249d67d962c4afa044e2731b1da3623876da20ec31553b615046d5839765b7 ) TSPTEST.GOV. 3600 IN DS ( 38208 7 2 b2076e6c0e741ff4717e07df79ff867528e53b94b2c99d5c343d720cca7b12b0 ) TSPTEST.GOV. 3600 IN DS 7834 8 1 8fa84b1c8be75c5ee8c385551cc08e44fe3f8c55 TSPTEST.GOV. 3600 IN DS 38208 7 1 ec12f9a96a053397c4d178c2985f0cf91b71c746 TSPTEST.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210524211009 20210517211009 48498 gov. iZVi88QfsEo9bhAkkrpE7ubmvOHm09GHRCKaGsJ9zCydsMsLXbnd/TO7d0Haae83KLgCTORYrvMU e5TxkVo8Mwv6DG5l5s0C4QRhm+7cX34f+fdNkxJh7XM/iH6eyTNiBwYb1rbeg74JD6Vpef8ScAdy UE3er/qCa9pObBzXhJHCpT6cToTfAmV+pBkr63nYwWAl4XyAHm9WcU9r9M1LJQ== ) ;; ADDITIONAL SECTION (3 records) ns3.TSPTEST.GOV. 86400 IN A 74.113.204.36 ns4.TSPTEST.GOV. 86400 IN A 74.113.206.36 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone TSPTEST.GOV

TSPTEST.GOV

	Checking DS between GOV and TSPTEST.GOV
	Query to a.gov-servers.net for TSPTEST.GOV/DS
	Received 403 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (403 bytes) ;; HEADER SECTION ;; id = 43015 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TSPTEST.GOV. IN DS ;; ANSWER SECTION (5 records) TSPTEST.GOV. 3600 IN DS ( 7834 8 2 8c249d67d962c4afa044e2731b1da3623876da20ec31553b615046d5839765b7 ) TSPTEST.GOV. 3600 IN DS ( 38208 7 2 b2076e6c0e741ff4717e07df79ff867528e53b94b2c99d5c343d720cca7b12b0 ) TSPTEST.GOV. 3600 IN DS 7834 8 1 8fa84b1c8be75c5ee8c385551cc08e44fe3f8c55 TSPTEST.GOV. 3600 IN DS 38208 7 1 ec12f9a96a053397c4d178c2985f0cf91b71c746 TSPTEST.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210524211009 20210517211009 48498 gov. iZVi88QfsEo9bhAkkrpE7ubmvOHm09GHRCKaGsJ9zCydsMsLXbnd/TO7d0Haae83KLgCTORYrvMU e5TxkVo8Mwv6DG5l5s0C4QRhm+7cX34f+fdNkxJh7XM/iH6eyTNiBwYb1rbeg74JD6Vpef8ScAdy UE3er/qCa9pObBzXhJHCpT6cToTfAmV+pBkr63nYwWAl4XyAHm9WcU9r9M1LJQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for TSPTEST.GOV in the GOV zone
	DS=7834/SHA-256 has algorithm RSASHA256
	DS=38208/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=7834/SHA-1 has algorithm RSASHA256
	DS=38208/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`TSPTEST.GOV. 3600 IN RRSIG ( DS 8 2 3600 20210524211009 20210517211009 48498 gov. iZVi88QfsEo9bhAkkrpE7ubmvOHm09GHRCKaGsJ9zCydsMsLXbnd/TO7d0Haae83KLgCTORYrvMU e5TxkVo8Mwv6DG5l5s0C4QRhm+7cX34f+fdNkxJh7XM/iH6eyTNiBwYb1rbeg74JD6Vpef8ScAdy UE3er/qCa9pObBzXhJHCpT6cToTfAmV+pBkr63nYwWAl4XyAHm9WcU9r9M1LJQ== )`
	RRSIG=48498 and DNSKEY=48498 verifies the DS RRset
	DS=7834/SHA-256 is now in the chain-of-trust
	DS=38208/SHA-256 is now in the chain-of-trust
	`TSPTEST.GOV. 3600 IN DS ( 7834 8 2 8c249d67d962c4afa044e2731b1da3623876da20ec31553b615046d5839765b7 )`
	`TSPTEST.GOV. 3600 IN DS ( 38208 7 2 b2076e6c0e741ff4717e07df79ff867528e53b94b2c99d5c343d720cca7b12b0 )`
	`TSPTEST.GOV. 3600 IN DS 7834 8 1 8fa84b1c8be75c5ee8c385551cc08e44fe3f8c55`
	`TSPTEST.GOV. 3600 IN DS 38208 7 1 ec12f9a96a053397c4d178c2985f0cf91b71c746`
	Query to ns3.TSPTEST.GOV for TSPTEST.GOV/DNSKEY
	Received 1828 bytes from 74.113.204.36
	;; Answer received from 74.113.204.36 (1828 bytes) ;; HEADER SECTION ;; id = 131 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TSPTEST.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) TSPTEST.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAe2rAFg/vhaVjO2NPQ0UMR1p4AyjA1mGC1dmiUaFFlMO+ZB6iF6MDzTYdR/IhEY9ZlChYh5P nF1PlsfpR/a6p9/N71zJySHphLWiZ+OhlFgo3If2tpgHIs7cFvfPx596gfNyKqgauPrOnuLpJL8q OtUi1C2AUElmPrwovsGCp7CUAGLuIOcglmNIkbxoJhEF3gIs80M2gAWAI00lEuT9mSDpKhAyxJ5y rKeBBeHy6E+IMmcuVV/UisAHi5YsysKRWNnC7oLvO0GpQsz//OvyytYtZFgI9RmFv+IVJExZt+8k T3ShksQHRkENsQldcQzrblt2Crv20Mb1PpN+hBsx/L8= ) ; Key ID = 7834 TSPTEST.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAdMnksybMyYorjFeK39oK607+8zhGfkFQDe13Ng48yRekzUcmaEsRqn2qIX0UX+N++B62K1D UKwrFmwuNqpF57nBx1oD0Ok1tKFFPIj6BKvR38LZkzbmAjgdufo/4dN8T0quVNEMo6E6gjFW4auC cVnyNOIdAj3czygUeYRmci7DCFOVIDcM7wnhzYVi1dxEIxnO0AgPqGOZuf20fpuOVmb7dCwRGYLV 1hoDbdtH+OuT2x4hh1fWv9/YfjW3OKgKpk/Xj1HUoO1Y0MsxOYGFM5woojzmTq6B8gZVJ8jFrJIQ cj418OjHTLjmFoISsADAf9LPmeURaEoU7F0tBeGGnjE= ) ; Key ID = 38208 TSPTEST.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAacLMNjCXkaViujnxiPuHqpUKWY8WpThlzzgxy9LlR8tH/2EIFn/HG/dH/Dku9k6rndiHyi4 lZKMZ5HKw3fYV2KbaFcEGp47jsLiIwcOk/3uduLdS2DqVy9zOvoiqAMlvVaNFuEb2aZ6ptQadrJl VYKXisEPlh3ys+pK5tlk5wVl ) ; Key ID = 23840 TSPTEST.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAby7eG3eMiWAr9sDH8a32G6TssCx+06+w6pe4NVAnE4JLsFl0gMEdLXuTXFqIAfYlVsZoaUH Lj7nAY607e93QbbIo9fT8MP/Ib1M4MUlCeXCrALSz051yq1NB6k/mo8tgrcN3HL1CNeG1EW6IM8N kNx/5gPnl+I8ZMIgBevQfURn ) ; Key ID = 23658 TSPTEST.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210522142455 20210515132455 7834 tsptest.gov. OVr7XU5u6wUVbhezSHbwLypV5MkYSxN6pMAKtFQ4T7DaYPkGqsdu/IuAWBG4E9Q5fStFFijhHoYt dLUq1h0v93hNISJX9UJCf3cyPD83+hBs/jy7cUTIPrRu12Wh3YA9EjpLj7CR3LO34pFGv06a/GQX +diLIrait/8PGcQrBxMPjZVfj9eo/wCM4r/LiKP6JyKijGomV2VMhcVeBtdKs6xMzb23TkKvBb+s 0oYpE15DnLEGEmyyDBW320pKCfBHn2FaaBmdjUekDN5zjOtOos2H4TNtelDYVLahzulsVShNb5c9 CgHTZhl8dMxpTwJl3vgYf0LbuKvaJetZZgfBqw== ) TSPTEST.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20210522142455 20210515132455 38208 tsptest.gov. RpA+mN1lJ8BSLtU891xqliuIFBP1XgiE6C04VkmPGJIVKgNUm7qKoEbHb4hp9/osQ+959WdOVCLh okDwyIL3+Esa+d6wcLn4sVcHH6DgQZOAe5QK55usS/YNMjWDNoQ3tHJdNFG2i84Eq+wZ5a4xbWQ8 TMdeNxbOMMTYVb85kn85pJj7hiDui8Q9uaxbiWHP2jUmwlM44zzmGexJkzI8eNC7NNuAdU0OPId1 xJ2k5digAYzDIN0xv3gwWcYx7RdufIVQYl6KPWo4V7RI04QDNFUEnAt3CrPFgJrIpJMGuB1cPS0L o6Qtf7yEO1fZhaTZ9k8RDUhlGbFkLIOcME8QIg== ) TSPTEST.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20210522142455 20210515132455 23840 tsptest.gov. Wqe7FB1YJ0B83oNR4uYWeSWqpINWFwc+61J9SF8sQIFonqyyI50WlGVXPLnAdUw+ISbA0gOcOsWb xBduvcN4Fb1xfOhg71tii0xD1vym7JA2lzFLPMUYWaRUF3Z3+posQQJuCIi3Hl6nRX8MckxUY+LZ 8c9UNxkziW8TJn+vQgE= ) TSPTEST.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210522142455 20210515132455 23658 tsptest.gov. cHQObsKkGdXAWjNatsDOpzHR9WuOtPAUPxYY8tNQU1gFDzjPjT/njvv5IgsDdhJixwoCUN0SthSH N4wbuupIEM+UJ6N0PnZrBlug7bAitdHOz1zGHTxS6/YB3mgVbr4GA0QUK/qXQSjhGHg9oY4iw88A JFrPQRDOAnpmFgzy9VE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for TSPTEST.GOV
	`TSPTEST.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAe2rAFg/vhaVjO2NPQ0UMR1p4AyjA1mGC1dmiUaFFlMO+ZB6iF6MDzTYdR/IhEY9ZlChYh5P nF1PlsfpR/a6p9/N71zJySHphLWiZ+OhlFgo3If2tpgHIs7cFvfPx596gfNyKqgauPrOnuLpJL8q OtUi1C2AUElmPrwovsGCp7CUAGLuIOcglmNIkbxoJhEF3gIs80M2gAWAI00lEuT9mSDpKhAyxJ5y rKeBBeHy6E+IMmcuVV/UisAHi5YsysKRWNnC7oLvO0GpQsz//OvyytYtZFgI9RmFv+IVJExZt+8k T3ShksQHRkENsQldcQzrblt2Crv20Mb1PpN+hBsx/L8= ) ; Key ID = 7834`
	`TSPTEST.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAdMnksybMyYorjFeK39oK607+8zhGfkFQDe13Ng48yRekzUcmaEsRqn2qIX0UX+N++B62K1D UKwrFmwuNqpF57nBx1oD0Ok1tKFFPIj6BKvR38LZkzbmAjgdufo/4dN8T0quVNEMo6E6gjFW4auC cVnyNOIdAj3czygUeYRmci7DCFOVIDcM7wnhzYVi1dxEIxnO0AgPqGOZuf20fpuOVmb7dCwRGYLV 1hoDbdtH+OuT2x4hh1fWv9/YfjW3OKgKpk/Xj1HUoO1Y0MsxOYGFM5woojzmTq6B8gZVJ8jFrJIQ cj418OjHTLjmFoISsADAf9LPmeURaEoU7F0tBeGGnjE= ) ; Key ID = 38208`
	`TSPTEST.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAacLMNjCXkaViujnxiPuHqpUKWY8WpThlzzgxy9LlR8tH/2EIFn/HG/dH/Dku9k6rndiHyi4 lZKMZ5HKw3fYV2KbaFcEGp47jsLiIwcOk/3uduLdS2DqVy9zOvoiqAMlvVaNFuEb2aZ6ptQadrJl VYKXisEPlh3ys+pK5tlk5wVl ) ; Key ID = 23840`
	`TSPTEST.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAby7eG3eMiWAr9sDH8a32G6TssCx+06+w6pe4NVAnE4JLsFl0gMEdLXuTXFqIAfYlVsZoaUH Lj7nAY607e93QbbIo9fT8MP/Ib1M4MUlCeXCrALSz051yq1NB6k/mo8tgrcN3HL1CNeG1EW6IM8N kNx/5gPnl+I8ZMIgBevQfURn ) ; Key ID = 23658`
	DNSKEY=7834/SEP is now in the chain-of-trust
	DS=7834/SHA-256 verifies DNSKEY=7834/SEP
	DS=7834/SHA-1 verifies DNSKEY=7834/SEP
	DNSKEY=38208/SEP is now in the chain-of-trust
	DS=38208/SHA-256 verifies DNSKEY=38208/SEP
	DS=38208/SHA-1 verifies DNSKEY=38208/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`TSPTEST.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210522142455 20210515132455 7834 tsptest.gov. OVr7XU5u6wUVbhezSHbwLypV5MkYSxN6pMAKtFQ4T7DaYPkGqsdu/IuAWBG4E9Q5fStFFijhHoYt dLUq1h0v93hNISJX9UJCf3cyPD83+hBs/jy7cUTIPrRu12Wh3YA9EjpLj7CR3LO34pFGv06a/GQX +diLIrait/8PGcQrBxMPjZVfj9eo/wCM4r/LiKP6JyKijGomV2VMhcVeBtdKs6xMzb23TkKvBb+s 0oYpE15DnLEGEmyyDBW320pKCfBHn2FaaBmdjUekDN5zjOtOos2H4TNtelDYVLahzulsVShNb5c9 CgHTZhl8dMxpTwJl3vgYf0LbuKvaJetZZgfBqw== )`
	`TSPTEST.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20210522142455 20210515132455 38208 tsptest.gov. RpA+mN1lJ8BSLtU891xqliuIFBP1XgiE6C04VkmPGJIVKgNUm7qKoEbHb4hp9/osQ+959WdOVCLh okDwyIL3+Esa+d6wcLn4sVcHH6DgQZOAe5QK55usS/YNMjWDNoQ3tHJdNFG2i84Eq+wZ5a4xbWQ8 TMdeNxbOMMTYVb85kn85pJj7hiDui8Q9uaxbiWHP2jUmwlM44zzmGexJkzI8eNC7NNuAdU0OPId1 xJ2k5digAYzDIN0xv3gwWcYx7RdufIVQYl6KPWo4V7RI04QDNFUEnAt3CrPFgJrIpJMGuB1cPS0L o6Qtf7yEO1fZhaTZ9k8RDUhlGbFkLIOcME8QIg== )`
	`TSPTEST.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20210522142455 20210515132455 23840 tsptest.gov. Wqe7FB1YJ0B83oNR4uYWeSWqpINWFwc+61J9SF8sQIFonqyyI50WlGVXPLnAdUw+ISbA0gOcOsWb xBduvcN4Fb1xfOhg71tii0xD1vym7JA2lzFLPMUYWaRUF3Z3+posQQJuCIi3Hl6nRX8MckxUY+LZ 8c9UNxkziW8TJn+vQgE= )`
	`TSPTEST.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20210522142455 20210515132455 23658 tsptest.gov. cHQObsKkGdXAWjNatsDOpzHR9WuOtPAUPxYY8tNQU1gFDzjPjT/njvv5IgsDdhJixwoCUN0SthSH N4wbuupIEM+UJ6N0PnZrBlug7bAitdHOz1zGHTxS6/YB3mgVbr4GA0QUK/qXQSjhGHg9oY4iw88A JFrPQRDOAnpmFgzy9VE= )`
	RRSIG=7834 and DNSKEY=7834/SEP verifies the DNSKEY RRset
	RRSIG=38208 and DNSKEY=38208/SEP verifies the DNSKEY RRset
	RRSIG=23840 and DNSKEY=23840 verifies the DNSKEY RRset
	RRSIG=23658 and DNSKEY=23658 verifies the DNSKEY RRset
	DNSKEY=23840 is now in the chain-of-trust
	DNSKEY=23658 is now in the chain-of-trust
	Query to ns3.TSPTEST.GOV for TSPTEST.GOV/A
	Received 863 bytes from 74.113.204.36
	;; Answer received from 74.113.204.36 (863 bytes) ;; HEADER SECTION ;; id = 12974 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TSPTEST.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) TSPTEST.GOV. 1200 IN SOA ( ns4.TSPTEST.GOV. hostmaster.ns4.TSPTEST.GOV. 2018050102 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) TSPTEST.GOV. 1200 IN RRSIG ( SOA 7 2 1200 20210522222620 20210515212620 23840 tsptest.gov. jwTHcB2BlIxEMFICoRDsa7SykEnTpN0YOJBZgnHmcbeQur3habgovyGLSKqMPuwrfNPRLQfxnFah yWw2xiwGPGhBKccHOrShddCScC6tr51T/rKMaUi4WlIJpdePxfKQjTUpCHZmCLfObBp5aN6AHsLg zCT+4MslpMCzIl59mVU= ) TSPTEST.GOV. 1200 IN RRSIG ( SOA 8 2 1200 20210522222620 20210515212620 23658 tsptest.gov. LABOAsi/VUgdGs3r/ovyOoutT2kO2o6Np4y0ihb27C24gTvwVQc4UhfdG2qo3DhCKjwMKBufvhKC VSCDSmU1H7kjxKyDZrShyLF9aPkznthX1plQpY8+gvVFXJs3J8uyyphbYeQDGDLUsoufetFL4/Xv VU79zDUryEmvo6WkELI= ) osumqnft08i0b54btdh43b7pp9cq4gmu.TSPTEST.GOV. 86400 IN NSEC3 ( 1 0 1 ef1cb619bc2ef711 osumqnft08i0b54btdh43b7pp9cq4gmv NS SOA RRSIG DNSKEY NSEC3PARAM ) osumqnft08i0b54btdh43b7pp9cq4gmu.TSPTEST.GOV. 86400 IN RRSIG ( NSEC3 7 3 86400 20210522232936 20210515222936 23840 tsptest.gov. MCa4R55eed6uZdXkbONouUpv1ESEXNj7XfrJJzOcHtMeKqp0SjDEGkUL5Nyf2YsgUk95UTAjw283 E/eInmRHPuC09d0MzD67EdRE7LZubRRTgGdxrtcFLVa4PuqYpSLMvzg1P2/B02GZbrmWBYsp82/3 VV1Q74qCZZbSR4wwoUM= ) osumqnft08i0b54btdh43b7pp9cq4gmu.TSPTEST.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20210522232936 20210515222936 23658 tsptest.gov. oQZ8GNVgZ8F8HbovJDyKzsmqKLXbtWpuiIMKdr16GK5juIbl2X6JZZkie3ET4r5YY8h9/81gjGHn kPQJ7JcoRIraIAwjP5Xp/hZLtMlx+ezHpD0P3oQMsRNAXTpWtpen5MHDbAxBCPvT4vp+2PveNr2L tJ78rUqmldc/wx7pTfE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns3.TSPTEST.GOV is authoritative for TSPTEST.GOV
	Found RRSIG signed by tsptest.gov zone
	Query to ns4.TSPTEST.GOV for TSPTEST.GOV/SOA
	Received 1523 bytes from 74.113.206.36
	;; Answer received from 74.113.206.36 (1523 bytes) ;; HEADER SECTION ;; id = 39716 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TSPTEST.GOV. IN SOA ;; ANSWER SECTION (3 records) TSPTEST.GOV. 1200 IN SOA ( ns4.TSPTEST.GOV. hostmaster.ns4.TSPTEST.GOV. 2018050102 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) TSPTEST.GOV. 1200 IN RRSIG ( SOA 8 2 1200 20210522232936 20210515222936 23658 tsptest.gov. cwL3YIgst6hTiNpol/guLHPPpo8C3ouv7hX50ZZ+/jbI7y4P99WyI2kaJOa4WzzmWPbKnnTJdhCy DPspUkmuAMz90RyMv12qnHw6qDiNVLO4QA4jQT+Y57niV1Wz4V/Ax6WVdhvTv7VfsNw3mil746x3 a1mWv3OCX10iUHksmyY= ) TSPTEST.GOV. 1200 IN RRSIG ( SOA 7 2 1200 20210522232936 20210515222936 23840 tsptest.gov. Nh1IhHuzQ+c8b3UcIdGtLCqVsMUdzVJNgevNKLzXODNsc4Ea/Tp9m5FFj87NRhvCAFtY9RqEIaI3 KtlPLRmion3hXfuqBKrh5lVxUzI1fjNiA2lotb3esYLMUUBMxSedcuUBJGAdnmg+CXtyvo+eSZ0w 3vN3iPTTYMXrGYc01GU= ) ;; AUTHORITY SECTION (4 records) TSPTEST.GOV. 1200 IN NS ns4.TSPTEST.GOV. TSPTEST.GOV. 1200 IN NS ns3.TSPTEST.GOV. TSPTEST.GOV. 1200 IN RRSIG ( NS 8 2 1200 20210523092439 20210516082439 23658 tsptest.gov. nVfxYVFiZiQyMxHCXbSmUyadiYszdB9qM8B0EHwD9vh7lO52vNwVYyA5+elQ7V39U0YpUgZy6awd pGnD5mOXipSuboztU+mQI8YtT8Z9XHb1dg8smjzp1FOOHqZQ8rG/2f3q2afnid3c+A5DiaY2DeGy 0v6gunxarueZ6y9Xjq8= ) TSPTEST.GOV. 1200 IN RRSIG ( NS 7 2 1200 20210523092439 20210516082439 23840 tsptest.gov. j7AXYh+NpIzFp+s8sXpoFe8UuwGk887kCwGouZSJ1VzXrgVtxXZtqewPkB7gfhtiVo6a65IV8Zbm ht3Ut8PZxfiN9ii0wh27iY9kVtR6Bb8i2sl70uU+HUmFjL9MJsSD3256mT/OeMZ5zJjAl2CfhnB0 aZ9hyxkx4g6hIY3DZFM= ) ;; ADDITIONAL SECTION (7 records) ns4.TSPTEST.GOV. 1200 IN A 74.113.206.36 ns4.TSPTEST.GOV. 1200 IN RRSIG ( A 8 3 1200 20210523092439 20210516082439 23658 tsptest.gov. eQEUoHcOwHEGeEpYS20TkA2wogplJL+NheJ0htx/zWGo+SH2ScB568D5ZoqZiNxN+mBa3MNhNJ03 gy/sT7piMJ26l+m/G2J66Fp59osHuIkxhgY4WRLYvPhLEnjXWLcLrKsj9oJXXBlnmQeD1ZtRyFYp 1ZHEGQqGH80cX52sB1g= ) ns4.TSPTEST.GOV. 1200 IN RRSIG ( A 7 3 1200 20210523092439 20210516082439 23840 tsptest.gov. lGliO+wdaIhnQLDLH5DGWuif/6GNyi46oo7u1+DcWC2p0Do2DFThUWesm171y3WV0J7rG41bCx/z 3U7EKLyZ/DxQS1HRv7Gn4ccD/imGI5mWs4PPLcTTaTe79YOEkrFquLA76rMHT/pCfh2JZUlepz4F TQGv8jktaHNUUmbuVWs= ) ns3.TSPTEST.GOV. 1200 IN A 74.113.204.36 ns3.TSPTEST.GOV. 1200 IN RRSIG ( A 8 3 1200 20210523092439 20210516082439 23658 tsptest.gov. mErScZVj2ZKY6iKVXnfPeIVbfcjnK9zBfo+BHA+2L/iWi0U2aoQ3FdeQTEzsa1DQZ1aJ2pJ5FlZH R7/0eFGZDoQR6migFqjNp2/HugoN0kaGTG5f5087aGyR0uDc9EWZm7efVrix94s+xF5ByRT0qugk 5yfIzdmqKn7Bwnlg2Yo= ) ns3.TSPTEST.GOV. 1200 IN RRSIG ( A 7 3 1200 20210523092439 20210516082439 23840 tsptest.gov. amo9gzooCF93Ee7cvxAgG+XnKiWutEBRsWpBpRyNVFiwx8cJ2FrxEJ2xDkrgpGXn4qMgUg3X6nQ8 XK+wyxBsflKQBo5xh+9ENdd8JEbiruL6ASDsuXBMnM5/EqimAx5knL/Jcl8g2Ze5+OMPlpDGVTCw dtvI8JBhRQBB4zGqNs0= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns3.TSPTEST.GOV for TSPTEST.GOV/A
	Received 863 bytes from 74.113.204.36
	;; Answer received from 74.113.204.36 (863 bytes) ;; HEADER SECTION ;; id = 33099 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TSPTEST.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) TSPTEST.GOV. 1200 IN SOA ( ns4.TSPTEST.GOV. hostmaster.ns4.TSPTEST.GOV. 2018050102 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) TSPTEST.GOV. 1200 IN RRSIG ( SOA 7 2 1200 20210522222620 20210515212620 23840 tsptest.gov. jwTHcB2BlIxEMFICoRDsa7SykEnTpN0YOJBZgnHmcbeQur3habgovyGLSKqMPuwrfNPRLQfxnFah yWw2xiwGPGhBKccHOrShddCScC6tr51T/rKMaUi4WlIJpdePxfKQjTUpCHZmCLfObBp5aN6AHsLg zCT+4MslpMCzIl59mVU= ) TSPTEST.GOV. 1200 IN RRSIG ( SOA 8 2 1200 20210522222620 20210515212620 23658 tsptest.gov. LABOAsi/VUgdGs3r/ovyOoutT2kO2o6Np4y0ihb27C24gTvwVQc4UhfdG2qo3DhCKjwMKBufvhKC VSCDSmU1H7kjxKyDZrShyLF9aPkznthX1plQpY8+gvVFXJs3J8uyyphbYeQDGDLUsoufetFL4/Xv VU79zDUryEmvo6WkELI= ) osumqnft08i0b54btdh43b7pp9cq4gmu.TSPTEST.GOV. 86400 IN NSEC3 ( 1 0 1 ef1cb619bc2ef711 osumqnft08i0b54btdh43b7pp9cq4gmv NS SOA RRSIG DNSKEY NSEC3PARAM ) osumqnft08i0b54btdh43b7pp9cq4gmu.TSPTEST.GOV. 86400 IN RRSIG ( NSEC3 7 3 86400 20210522232936 20210515222936 23840 tsptest.gov. MCa4R55eed6uZdXkbONouUpv1ESEXNj7XfrJJzOcHtMeKqp0SjDEGkUL5Nyf2YsgUk95UTAjw283 E/eInmRHPuC09d0MzD67EdRE7LZubRRTgGdxrtcFLVa4PuqYpSLMvzg1P2/B02GZbrmWBYsp82/3 VV1Q74qCZZbSR4wwoUM= ) osumqnft08i0b54btdh43b7pp9cq4gmu.TSPTEST.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20210522232936 20210515222936 23658 tsptest.gov. oQZ8GNVgZ8F8HbovJDyKzsmqKLXbtWpuiIMKdr16GK5juIbl2X6JZZkie3ET4r5YY8h9/81gjGHn kPQJ7JcoRIraIAwjP5Xp/hZLtMlx+ezHpD0P3oQMsRNAXTpWtpen5MHDbAxBCPvT4vp+2PveNr2L tJ78rUqmldc/wx7pTfE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`TSPTEST.GOV. 1200 IN RRSIG ( SOA 7 2 1200 20210522222620 20210515212620 23840 tsptest.gov. jwTHcB2BlIxEMFICoRDsa7SykEnTpN0YOJBZgnHmcbeQur3habgovyGLSKqMPuwrfNPRLQfxnFah yWw2xiwGPGhBKccHOrShddCScC6tr51T/rKMaUi4WlIJpdePxfKQjTUpCHZmCLfObBp5aN6AHsLg zCT+4MslpMCzIl59mVU= )`
	`TSPTEST.GOV. 1200 IN RRSIG ( SOA 8 2 1200 20210522222620 20210515212620 23658 tsptest.gov. LABOAsi/VUgdGs3r/ovyOoutT2kO2o6Np4y0ihb27C24gTvwVQc4UhfdG2qo3DhCKjwMKBufvhKC VSCDSmU1H7kjxKyDZrShyLF9aPkznthX1plQpY8+gvVFXJs3J8uyyphbYeQDGDLUsoufetFL4/Xv VU79zDUryEmvo6WkELI= )`
	RRSIG=23840 and DNSKEY=23840 verifies the SOA RRset
	RRSIG=23658 and DNSKEY=23658 verifies the SOA RRset

TSPTEST.GOV

	Query to ns4.TSPTEST.GOV for TSPTEST.GOV/A
	Received 863 bytes from 74.113.206.36
	;; Answer received from 74.113.206.36 (863 bytes) ;; HEADER SECTION ;; id = 59894 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TSPTEST.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) TSPTEST.GOV. 1200 IN SOA ( ns4.TSPTEST.GOV. hostmaster.ns4.TSPTEST.GOV. 2018050102 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) TSPTEST.GOV. 1200 IN RRSIG ( SOA 8 2 1200 20210522232936 20210515222936 23658 tsptest.gov. cwL3YIgst6hTiNpol/guLHPPpo8C3ouv7hX50ZZ+/jbI7y4P99WyI2kaJOa4WzzmWPbKnnTJdhCy DPspUkmuAMz90RyMv12qnHw6qDiNVLO4QA4jQT+Y57niV1Wz4V/Ax6WVdhvTv7VfsNw3mil746x3 a1mWv3OCX10iUHksmyY= ) TSPTEST.GOV. 1200 IN RRSIG ( SOA 7 2 1200 20210522232936 20210515222936 23840 tsptest.gov. Nh1IhHuzQ+c8b3UcIdGtLCqVsMUdzVJNgevNKLzXODNsc4Ea/Tp9m5FFj87NRhvCAFtY9RqEIaI3 KtlPLRmion3hXfuqBKrh5lVxUzI1fjNiA2lotb3esYLMUUBMxSedcuUBJGAdnmg+CXtyvo+eSZ0w 3vN3iPTTYMXrGYc01GU= ) 1fvn9939v8gkm87gmona5p8glegvkkj4.TSPTEST.GOV. 86400 IN NSEC3 ( 1 0 1 60fbc4c9e91799d9 1fvn9939v8gkm87gmona5p8glegvkkj5 NS SOA RRSIG DNSKEY NSEC3PARAM ) 1fvn9939v8gkm87gmona5p8glegvkkj4.TSPTEST.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20210522232938 20210515222938 23658 tsptest.gov. H4Nbv6/eQuHXGwmt3L41cmkeDqfm5oaJvP3zDWNneZk6eLfiRtUPmU0i4R2/UR7gFQl1OHJOZqPU ukCwrS18KGRLUT6rvt9/bhVRBqjnbFA/ZHDMWB+93jGH9jQr6SMtn7Eaw6MIrIiW4YROrjgvpwJz hC66wdA8GfKxlo8oW44= ) 1fvn9939v8gkm87gmona5p8glegvkkj4.TSPTEST.GOV. 86400 IN RRSIG ( NSEC3 7 3 86400 20210522232938 20210515222938 23840 tsptest.gov. ENBk0sdd5SInZkBnE51JNNahnvvSauQvHJ0bRzqf6au1dJqgoKtn4XKDU5W3UMacmg/d50ivrUE6 WNtgztrdf4eirP3nvvFspgTG0H+1n4ND8ZWu8pvqe8L44II21jtR9BPMF5KX+U5RHfZqpQwvnlBz vV6pk65VNCEYZ/YP1kE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns4.TSPTEST.GOV is authoritative for TSPTEST.GOV
	Found RRSIG signed by tsptest.gov zone
	Query to ns4.TSPTEST.GOV for TSPTEST.GOV/A
	Received 863 bytes from 74.113.206.36
	;; Answer received from 74.113.206.36 (863 bytes) ;; HEADER SECTION ;; id = 250 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TSPTEST.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) TSPTEST.GOV. 1200 IN SOA ( ns4.TSPTEST.GOV. hostmaster.ns4.TSPTEST.GOV. 2018050102 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) TSPTEST.GOV. 1200 IN RRSIG ( SOA 8 2 1200 20210522232936 20210515222936 23658 tsptest.gov. cwL3YIgst6hTiNpol/guLHPPpo8C3ouv7hX50ZZ+/jbI7y4P99WyI2kaJOa4WzzmWPbKnnTJdhCy DPspUkmuAMz90RyMv12qnHw6qDiNVLO4QA4jQT+Y57niV1Wz4V/Ax6WVdhvTv7VfsNw3mil746x3 a1mWv3OCX10iUHksmyY= ) TSPTEST.GOV. 1200 IN RRSIG ( SOA 7 2 1200 20210522232936 20210515222936 23840 tsptest.gov. Nh1IhHuzQ+c8b3UcIdGtLCqVsMUdzVJNgevNKLzXODNsc4Ea/Tp9m5FFj87NRhvCAFtY9RqEIaI3 KtlPLRmion3hXfuqBKrh5lVxUzI1fjNiA2lotb3esYLMUUBMxSedcuUBJGAdnmg+CXtyvo+eSZ0w 3vN3iPTTYMXrGYc01GU= ) 1fvn9939v8gkm87gmona5p8glegvkkj4.TSPTEST.GOV. 86400 IN NSEC3 ( 1 0 1 60fbc4c9e91799d9 1fvn9939v8gkm87gmona5p8glegvkkj5 NS SOA RRSIG DNSKEY NSEC3PARAM ) 1fvn9939v8gkm87gmona5p8glegvkkj4.TSPTEST.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20210522232938 20210515222938 23658 tsptest.gov. H4Nbv6/eQuHXGwmt3L41cmkeDqfm5oaJvP3zDWNneZk6eLfiRtUPmU0i4R2/UR7gFQl1OHJOZqPU ukCwrS18KGRLUT6rvt9/bhVRBqjnbFA/ZHDMWB+93jGH9jQr6SMtn7Eaw6MIrIiW4YROrjgvpwJz hC66wdA8GfKxlo8oW44= ) 1fvn9939v8gkm87gmona5p8glegvkkj4.TSPTEST.GOV. 86400 IN RRSIG ( NSEC3 7 3 86400 20210522232938 20210515222938 23840 tsptest.gov. ENBk0sdd5SInZkBnE51JNNahnvvSauQvHJ0bRzqf6au1dJqgoKtn4XKDU5W3UMacmg/d50ivrUE6 WNtgztrdf4eirP3nvvFspgTG0H+1n4ND8ZWu8pvqe8L44II21jtR9BPMF5KX+U5RHfZqpQwvnlBz vV6pk65VNCEYZ/YP1kE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`TSPTEST.GOV. 1200 IN RRSIG ( SOA 8 2 1200 20210522232936 20210515222936 23658 tsptest.gov. cwL3YIgst6hTiNpol/guLHPPpo8C3ouv7hX50ZZ+/jbI7y4P99WyI2kaJOa4WzzmWPbKnnTJdhCy DPspUkmuAMz90RyMv12qnHw6qDiNVLO4QA4jQT+Y57niV1Wz4V/Ax6WVdhvTv7VfsNw3mil746x3 a1mWv3OCX10iUHksmyY= )`
	`TSPTEST.GOV. 1200 IN RRSIG ( SOA 7 2 1200 20210522232936 20210515222936 23840 tsptest.gov. Nh1IhHuzQ+c8b3UcIdGtLCqVsMUdzVJNgevNKLzXODNsc4Ea/Tp9m5FFj87NRhvCAFtY9RqEIaI3 KtlPLRmion3hXfuqBKrh5lVxUzI1fjNiA2lotb3esYLMUUBMxSedcuUBJGAdnmg+CXtyvo+eSZ0w 3vN3iPTTYMXrGYc01GU= )`
	RRSIG=23658 and DNSKEY=23658 verifies the SOA RRset
	RRSIG=23840 and DNSKEY=23840 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test TSPTEST.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: