DNSSEC Analyzer - TSPTEST.GOV

Domain Name:

Time: 2019-07-16 00:57:57 UTC, NTP stratum 4

Analyzing DNSSEC problems for TSPTEST.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (864 bytes) ;; HEADER SECTION ;; id = 19743 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAcTQyaIe6nt3xSPOG2L/YfwBkOVTJN6mlnZ249O5Rtt3ZSRQHxQSW61AODYw6bvgxrrGq8ee OuenFjcSYgNAMcBYoEYYmKDW6e9EryW4ZaT/MCq+8Am06oR40xAA3fClOM6QjRcT85tP41Go946A icBGP8XOP/Aj1aI/oPRGzRnboUPUok/AzTNnW5npBU69+BuiIwYE7mQOiNBFePyvjQBdoiuYbmuD 3Py0IyjlBxzZUXbqLsRL9gYFkCqeTY29Ik7usuzMTa+JRSLz6KGS5RSJ7CTSMjZg8aNaUbN2dvGh akJPh92HnLvMA3TefFgbKJphFNPA3BWSKLZ02cRWXqM= ) ; Key ID = 59944 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190801000000 20190711000000 20326 . ObbqvQHw4LDKM7cf6evXeKyg5mBF0AjevpEmKeFps91EclUrTx6THb0WC6jAZVdL3XK8EHC3oRAI X3p4S3jVKm/ShYJT93FASZmmA5EIXbxuuJ10UE6XM+OVzBP6i4GTwy8TmA4xF5oV29JteUtvGjvJ WkrohydpNWCjCdFwwp2FZd8iU8QCNW/YLihzERDRYtwUPjFW956+P8SgDxyecgijQTtZJno2/N87 LePEY7F/T7bWVwgjJvUz9qK+xD4OzNjs5EGNe1BDUFlRP8HcOVY8L2QFsZOOGepf/lUv4sZnE5IY JV0Xq1CDIHuS5ph6R68gvMIB2LuWCxXg/h9DOQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcTQyaIe6nt3xSPOG2L/YfwBkOVTJN6mlnZ249O5Rtt3ZSRQHxQSW61AODYw6bvgxrrGq8ee OuenFjcSYgNAMcBYoEYYmKDW6e9EryW4ZaT/MCq+8Am06oR40xAA3fClOM6QjRcT85tP41Go946A icBGP8XOP/Aj1aI/oPRGzRnboUPUok/AzTNnW5npBU69+BuiIwYE7mQOiNBFePyvjQBdoiuYbmuD 3Py0IyjlBxzZUXbqLsRL9gYFkCqeTY29Ik7usuzMTa+JRSLz6KGS5RSJ7CTSMjZg8aNaUbN2dvGh akJPh92HnLvMA3TefFgbKJphFNPA3BWSKLZ02cRWXqM= ) ; Key ID = 59944`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190801000000 20190711000000 20326 . ObbqvQHw4LDKM7cf6evXeKyg5mBF0AjevpEmKeFps91EclUrTx6THb0WC6jAZVdL3XK8EHC3oRAI X3p4S3jVKm/ShYJT93FASZmmA5EIXbxuuJ10UE6XM+OVzBP6i4GTwy8TmA4xF5oV29JteUtvGjvJ WkrohydpNWCjCdFwwp2FZd8iU8QCNW/YLihzERDRYtwUPjFW956+P8SgDxyecgijQTtZJno2/N87 LePEY7F/T7bWVwgjJvUz9qK+xD4OzNjs5EGNe1BDUFlRP8HcOVY8L2QFsZOOGepf/lUv4sZnE5IY JV0Xq1CDIHuS5ph6R68gvMIB2LuWCxXg/h9DOQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=59944 is now in the chain-of-trust
	Query to j.root-servers.net for TSPTEST.GOV/A
	Error querying j.root-servers.net/2001:503:c27:0:0:0:2:30 for TSPTEST.GOV/A: 'IPv6 transport disabled'
	Received 666 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (666 bytes) ;; HEADER SECTION ;; id = 8520 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; TSPTEST.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20190728170000 20190715160000 59944 . OxBumstJ//5NFdXoF2ZhU6GJ1DYiizl1fNiKf+byqbWSss+a+slvKgYUA20DNJSFo1GBSu0X7NVN aU3fr7uf1kkw8wUFWIC2RaLczjV8DDL6P8/dPraRQpVjv62IsJoOSpgFb9Uza/MgUvIMyn5TLYqT jKZz3CEwN+Er06DTHe4TKfhZhnXxVNTMaXe42Gm52LajpxMcwuuRw+w539++17pFXSZE2njs5NAI DK7zpzCBy82jGjf6R9T4P/GIjefANkhpc1KYTP0C7f5eDaWkYjq6L7TMV4qrvZwXOi1XGMW3XTzX ODBKB9xJRsoJBm/7dsbt4yJuc7OAB9AWDbn8xg== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to b.root-servers.net for GOV/DNSKEY
	Error querying b.root-servers.net/2001:500:200:0:0:0:0:b for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 661 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (661 bytes) ;; HEADER SECTION ;; id = 49324 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20190728170000 20190715160000 59944 . OxBumstJ//5NFdXoF2ZhU6GJ1DYiizl1fNiKf+byqbWSss+a+slvKgYUA20DNJSFo1GBSu0X7NVN aU3fr7uf1kkw8wUFWIC2RaLczjV8DDL6P8/dPraRQpVjv62IsJoOSpgFb9Uza/MgUvIMyn5TLYqT jKZz3CEwN+Er06DTHe4TKfhZhnXxVNTMaXe42Gm52LajpxMcwuuRw+w539++17pFXSZE2njs5NAI DK7zpzCBy82jGjf6R9T4P/GIjefANkhpc1KYTP0C7f5eDaWkYjq6L7TMV4qrvZwXOi1XGMW3XTzX ODBKB9xJRsoJBm/7dsbt4yJuc7OAB9AWDbn8xg== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to i.root-servers.net for GOV/DS
	Error querying i.root-servers.net/2001:7fe:0:0:0:0:0:53 for GOV/DS: 'IPv6 transport disabled'
	Received 406 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (406 bytes) ;; HEADER SECTION ;; id = 29364 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20190728170000 20190715160000 59944 . OxBumstJ//5NFdXoF2ZhU6GJ1DYiizl1fNiKf+byqbWSss+a+slvKgYUA20DNJSFo1GBSu0X7NVN aU3fr7uf1kkw8wUFWIC2RaLczjV8DDL6P8/dPraRQpVjv62IsJoOSpgFb9Uza/MgUvIMyn5TLYqT jKZz3CEwN+Er06DTHe4TKfhZhnXxVNTMaXe42Gm52LajpxMcwuuRw+w539++17pFXSZE2njs5NAI DK7zpzCBy82jGjf6R9T4P/GIjefANkhpc1KYTP0C7f5eDaWkYjq6L7TMV4qrvZwXOi1XGMW3XTzX ODBKB9xJRsoJBm/7dsbt4yJuc7OAB9AWDbn8xg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	DS=7698/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20190728170000 20190715160000 59944 . OxBumstJ//5NFdXoF2ZhU6GJ1DYiizl1fNiKf+byqbWSss+a+slvKgYUA20DNJSFo1GBSu0X7NVN aU3fr7uf1kkw8wUFWIC2RaLczjV8DDL6P8/dPraRQpVjv62IsJoOSpgFb9Uza/MgUvIMyn5TLYqT jKZz3CEwN+Er06DTHe4TKfhZhnXxVNTMaXe42Gm52LajpxMcwuuRw+w539++17pFXSZE2njs5NAI DK7zpzCBy82jGjf6R9T4P/GIjefANkhpc1KYTP0C7f5eDaWkYjq6L7TMV4qrvZwXOi1XGMW3XTzX ODBKB9xJRsoJBm/7dsbt4yJuc7OAB9AWDbn8xg== )`
	RRSIG=59944 and DNSKEY=59944 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	Query to c.gov-servers.net for GOV/DNSKEY
	Received 889 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (889 bytes) ;; HEADER SECTION ;; id = 12782 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (4 records) GOV. 86400 IN DNSKEY ( 256 3 8 AQPnviCbt0HB2CQze767dPf3TQFosiEwOIkUQaJmcSoNlVSquo3Mox7noTQGzKSdTbKAh0zfkGIb thSb6zyPceMJPpVv2RQUAj9WWTZr4yvO0J5/KllhGqr3sZndrV1lF/rrFzjnnLO8egQTS7bXHbsU 9sM71w5Xiow+isEEPrc5KQ== ) ; Key ID = 7877 GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AQPO0gfZTyKZiRSwF/XvW9ta+joX/SlCfvNcTsNT4t5edmGhhiRNf45246Z4L6Cx3n93FPHtW91n F+M1gCPyxewRyAM0/UVrqBwutdPQnR8vsQ/WzdsAk50loby/jGN7UAStU/FzllD2qIq4uJ8HcLZW Qth9JV8vKuqVYXgPfhx5lw== ) ; Key ID = 43583 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190721214731 20190706214231 7698 gov. OuMwmznpkhp5lF26dwwiOxgCzuV3OpYNfrgTTbt43gzc7fSsXGpQcc4xQoXGEOmjrEQfYWSuH597 t6z8AUl2Px6dUecnSrDYDF8UML0MDFCOSpFe2Y8pgG0Bhou8P/1cC73NNameKFx8/WS3NpqP5pzU 5dmo+czGHEtoL0X5+os+eZ7hYqWqtyLakNYCXjqGFu7I2GemHIs7xHKWjmpWk5S9rlHx3m8o0yEH 3flGm42Ijlqgrxi1FxwwldCuOa7whg2+TQ46zReDZk4h8FcKM7D0E2R+BVTJYuVz1QRpHrdEmVze 50ivP69OWTofWzmiUg9LoU2l8yKqlI/87NWFDA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQPnviCbt0HB2CQze767dPf3TQFosiEwOIkUQaJmcSoNlVSquo3Mox7noTQGzKSdTbKAh0zfkGIb thSb6zyPceMJPpVv2RQUAj9WWTZr4yvO0J5/KllhGqr3sZndrV1lF/rrFzjnnLO8egQTS7bXHbsU 9sM71w5Xiow+isEEPrc5KQ== ) ; Key ID = 7877`
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQPO0gfZTyKZiRSwF/XvW9ta+joX/SlCfvNcTsNT4t5edmGhhiRNf45246Z4L6Cx3n93FPHtW91n F+M1gCPyxewRyAM0/UVrqBwutdPQnR8vsQ/WzdsAk50loby/jGN7UAStU/FzllD2qIq4uJ8HcLZW Qth9JV8vKuqVYXgPfhx5lw== ) ; Key ID = 43583`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190721214731 20190706214231 7698 gov. OuMwmznpkhp5lF26dwwiOxgCzuV3OpYNfrgTTbt43gzc7fSsXGpQcc4xQoXGEOmjrEQfYWSuH597 t6z8AUl2Px6dUecnSrDYDF8UML0MDFCOSpFe2Y8pgG0Bhou8P/1cC73NNameKFx8/WS3NpqP5pzU 5dmo+czGHEtoL0X5+os+eZ7hYqWqtyLakNYCXjqGFu7I2GemHIs7xHKWjmpWk5S9rlHx3m8o0yEH 3flGm42Ijlqgrxi1FxwwldCuOa7whg2+TQ46zReDZk4h8FcKM7D0E2R+BVTJYuVz1QRpHrdEmVze 50ivP69OWTofWzmiUg9LoU2l8yKqlI/87NWFDA== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=7877 is now in the chain-of-trust
	DNSKEY=43583 is now in the chain-of-trust
	Query to b.gov-servers.net for TSPTEST.GOV/A
	Received 439 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (439 bytes) ;; HEADER SECTION ;; id = 9733 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TSPTEST.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) TSPTEST.GOV. 86400 IN NS ns3.TSPTEST.GOV. TSPTEST.GOV. 86400 IN NS ns4.TSPTEST.GOV. TSPTEST.GOV. 3600 IN DS ( 64561 8 2 835f4d178dbbd8271b2ac05a8680774e586560c573fb7fd8f123412f2da1bc4b ) TSPTEST.GOV. 3600 IN DS ( 37134 7 2 830169823c1766b8e417074d8accde2e33e696849074be096270421d56d30b6a ) TSPTEST.GOV. 3600 IN DS 37134 7 1 db41c85f731102ed92f8fd139856806792e588a7 TSPTEST.GOV. 3600 IN DS 64561 8 1 2a408029eebcb5f8a446aa8223658f81f8de48f7 TSPTEST.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190722221007 20190715221007 7877 gov. 1is/0Luqij6SdduOeRDDpFKsoBTpL2WFtgS0J47QJ/BLwlsC43ljPndwCytde6bij7IqLOV//BTj VQl/qWNj+F6gSqpnG9THpIF5fpJ3I19yvoAB0TZJ1whQmMiYzWCAgOT3c5u2Bh7XEN6r7sqh6Uv1 7oTNlu6G763gERm7CoQ= ) ;; ADDITIONAL SECTION (3 records) ns3.TSPTEST.GOV. 86400 IN A 74.113.204.36 ns4.TSPTEST.GOV. 86400 IN A 74.113.206.36 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.gov-servers.net for TSPTEST.GOV/DNSKEY
	Error querying c.gov-servers.net/2620:74:28:0:0:0:2:30 for TSPTEST.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 439 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (439 bytes) ;; HEADER SECTION ;; id = 38084 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TSPTEST.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) TSPTEST.GOV. 86400 IN NS ns3.TSPTEST.GOV. TSPTEST.GOV. 86400 IN NS ns4.TSPTEST.GOV. TSPTEST.GOV. 3600 IN DS ( 64561 8 2 835f4d178dbbd8271b2ac05a8680774e586560c573fb7fd8f123412f2da1bc4b ) TSPTEST.GOV. 3600 IN DS ( 37134 7 2 830169823c1766b8e417074d8accde2e33e696849074be096270421d56d30b6a ) TSPTEST.GOV. 3600 IN DS 37134 7 1 db41c85f731102ed92f8fd139856806792e588a7 TSPTEST.GOV. 3600 IN DS 64561 8 1 2a408029eebcb5f8a446aa8223658f81f8de48f7 TSPTEST.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190722221007 20190715221007 7877 gov. 1is/0Luqij6SdduOeRDDpFKsoBTpL2WFtgS0J47QJ/BLwlsC43ljPndwCytde6bij7IqLOV//BTj VQl/qWNj+F6gSqpnG9THpIF5fpJ3I19yvoAB0TZJ1whQmMiYzWCAgOT3c5u2Bh7XEN6r7sqh6Uv1 7oTNlu6G763gERm7CoQ= ) ;; ADDITIONAL SECTION (3 records) ns3.TSPTEST.GOV. 86400 IN A 74.113.204.36 ns4.TSPTEST.GOV. 86400 IN A 74.113.206.36 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone TSPTEST.GOV

TSPTEST.GOV

	Checking DS between GOV and TSPTEST.GOV
	Query to d.gov-servers.net for TSPTEST.GOV/DS
	Error querying d.gov-servers.net/2620:74:29:0:0:0:2:30 for TSPTEST.GOV/DS: 'IPv6 transport disabled'
	Received 371 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (371 bytes) ;; HEADER SECTION ;; id = 53798 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TSPTEST.GOV. IN DS ;; ANSWER SECTION (5 records) TSPTEST.GOV. 3600 IN DS ( 64561 8 2 835f4d178dbbd8271b2ac05a8680774e586560c573fb7fd8f123412f2da1bc4b ) TSPTEST.GOV. 3600 IN DS ( 37134 7 2 830169823c1766b8e417074d8accde2e33e696849074be096270421d56d30b6a ) TSPTEST.GOV. 3600 IN DS 37134 7 1 db41c85f731102ed92f8fd139856806792e588a7 TSPTEST.GOV. 3600 IN DS 64561 8 1 2a408029eebcb5f8a446aa8223658f81f8de48f7 TSPTEST.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190722221007 20190715221007 7877 gov. 1is/0Luqij6SdduOeRDDpFKsoBTpL2WFtgS0J47QJ/BLwlsC43ljPndwCytde6bij7IqLOV//BTj VQl/qWNj+F6gSqpnG9THpIF5fpJ3I19yvoAB0TZJ1whQmMiYzWCAgOT3c5u2Bh7XEN6r7sqh6Uv1 7oTNlu6G763gERm7CoQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for TSPTEST.GOV in the GOV zone
	DS=64561/SHA-256 has algorithm RSASHA256
	DS=37134/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=37134/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=64561/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`TSPTEST.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190722221007 20190715221007 7877 gov. 1is/0Luqij6SdduOeRDDpFKsoBTpL2WFtgS0J47QJ/BLwlsC43ljPndwCytde6bij7IqLOV//BTj VQl/qWNj+F6gSqpnG9THpIF5fpJ3I19yvoAB0TZJ1whQmMiYzWCAgOT3c5u2Bh7XEN6r7sqh6Uv1 7oTNlu6G763gERm7CoQ= )`
	RRSIG=7877 and DNSKEY=7877 verifies the DS RRset
	DS=64561/SHA-256 is now in the chain-of-trust
	DS=37134/SHA-256 is now in the chain-of-trust
	`TSPTEST.GOV. 3600 IN DS ( 64561 8 2 835f4d178dbbd8271b2ac05a8680774e586560c573fb7fd8f123412f2da1bc4b )`
	`TSPTEST.GOV. 3600 IN DS ( 37134 7 2 830169823c1766b8e417074d8accde2e33e696849074be096270421d56d30b6a )`
	`TSPTEST.GOV. 3600 IN DS 37134 7 1 db41c85f731102ed92f8fd139856806792e588a7`
	`TSPTEST.GOV. 3600 IN DS 64561 8 1 2a408029eebcb5f8a446aa8223658f81f8de48f7`
	Query to ns3.TSPTEST.GOV for TSPTEST.GOV/DNSKEY
	Received 1828 bytes from 74.113.204.36
	;; Answer received from 74.113.204.36 (1828 bytes) ;; HEADER SECTION ;; id = 37141 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TSPTEST.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) TSPTEST.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAa/waj7fpgHSO+MJcapI/EDMNDhGdW/UMKfR65Q5RQ3l3iGXClQVLRAsXPDcCd+ih7WSYGtp ncMK5izuAv5W2VO1iwllJfrmsbAeUdiOXLJWcOXHILvHxl6M1XBUAlv8O6bX14CeNb+4p+gHjMgV +MfgIBp6ibk97DtG6NEOSzmV ) ; Key ID = 1205 TSPTEST.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAa0RtwesbDZOFVfw+Do78FUc1qXzHixcc8mTtnRZc+2flrFDbS7czgrEEU6S9cWvUtTdxNS2 OTqdV3Q93wRi8Ar5VtyWvBM1NMFfaNCxr+VI2aAZh6r2Cz258EdHLihkhLb58+TN4xn3cgU6XvOg 2WZTylthfKaaTE25jLMoua3f ) ; Key ID = 28473 TSPTEST.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAan3SdvQjkbYOAeknzjh3OhRF+d2tXOCxWrOvaEeb2Qtg+/N2AstikHL+P2zpcO76yAGlJya 6o7NoONoZwgY9DLmxm9QebDe4spikxANIodFccDcuTV8OUzmFpW7dGjaQUgMgseYpJDGZHP6U+l2 yLsF/LfmuP63TxZBBOLvP9HGb2d+e9AywSQd2qdDj5u+NmD0ORjWIPZG2lJDm3gMrESF4B7/PpNn wESFSJw2h0Dd5EKIBpWTJggeo3e3V/gf6P7Bu62bYdf749y/B5ORoDpui9X/oZzYtnluDOEZocST QEYX3dcMldU0yfoF8D/ZXEtKGp3K4m4dQt4pXjdiWZc= ) ; Key ID = 37134 TSPTEST.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAbnCw/8mmyE4lLx0qennwW4w1CxT4uUe24DpsmE6D7S4a6Oe4gWvJlaZdMWMlQi3TqbL2zOD LzzYBdZ330DLegoXGekv4Q6dzwanMvWG3Q11NnELDWTnRpl2Q730VvsybDkvsMC/5SL61jbtdbT9 9e5QGJhagUgnD6M7FTt8F3v5tp3yA+nJTg/Axj/bgDP7Vxp8jYmdC1AFHGg6dNV1G9uVyhxzGMg7 DO1XO9l+QigXXU+0VlYOvHKjAmsNXdNo+z8Fm4mX/BP8XqZs1H+Mb7wxLRB0PqI1+tZYEBdGa9Ta 5h07UkeoyraVCVDN7uMA7DZ/Srtc7bFmu6mBSSElMAc= ) ; Key ID = 64561 TSPTEST.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20190721013131 20190714013131 1205 tsptest.gov. nnuXUfHJwNuWjprIJeC5NYysmpqwlUWY8L0mtpyt0OGy4iORmRr1T5PA079HC4fhThaaWJL4M+g+ 7IDCbC4MihXmIcFe/7n1PWOeeNFnujFoZVy46x74HnIyJTGIWgURUjZEIzrJx9E18rWL40AhDOOA 83HRV7u/WjEa/kGtKFE= ) TSPTEST.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190721013131 20190714013131 28473 tsptest.gov. qxdDdpZGaoqz03u2fzRUgr1SBDGr4BEQEe8D1XqmpCuGYschDuXWznIFWGB/o2lOvrk8++xkJNJv S4Di/kqmlhJkUEF350UbEjFYALTHM3/oEXKJI1JJu3WWC3n0bQKZ3v2A2eUcdpwcDGqbm+5yKaCA keg6Mr/LIfVT6BLm3FA= ) TSPTEST.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20190721013131 20190714013131 37134 tsptest.gov. NEvtfGoUgpl2x6Cc2x6tfCxGC10kwSIIevb5+/I6+E1cYHro8KohoDL0D7MdQaEcMxU/p/CNcTon iDra6IAEIPSmCJZpUby36oHWlRLztzS0WK8FOimKGU4G1Jp1uCfr+/LKt9X871IDLiavECoi//Tx 42pq9R7Cdc7f32rsDzOH2EWmHakk1/MEiW/iICnPh6cpbqIqMZt/ZwLcJDXYSt1OKpHKwkhk6wEl 0Fkt5dAPtTvIdSY0X7QcqrIuCxeLjYarKRWnAHu0Rec1f2ZpBHdFQK9F5snnD6HX+7e2gedh6vPX NdUrE1zRTRDUqS6s9bV5H4ZATPFZ7/iAd3KheQ== ) TSPTEST.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190721013131 20190714013131 64561 tsptest.gov. Y8qcqwmnPDAAFdbywngWEEel7zkCDiAA+OW7da8VAzBQb1G1QjYeNnf5Zq0kHLgBdj2Bniof/+ov eiN7Xd2z2IzTCm4LTDuDJ3fVIy7wWv6Aawbm2T87Q4dpFdKnrZjo0ww6DpA84bV6P/Qk2f95vpeC 3ENYZdEL0Q3DpgF0zzRMUUHFRAV4LpbdlakaSWkaTShVle77vN2NP3rmU7tPxF4wffFKraqwrrH6 b9wMLt+j4EXgOpkcQMeBOQtRvmq8y+LNcUofgf0BJibNtks30UCauVmwufvnm11Q34zY166CX6n7 WTy1152+/XvPgxLLvB8VkoTS/oW8+fWG8XTUrQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for TSPTEST.GOV
	`TSPTEST.GOV. 86400 IN DNSKEY ( 256 3 7 AwEAAa/waj7fpgHSO+MJcapI/EDMNDhGdW/UMKfR65Q5RQ3l3iGXClQVLRAsXPDcCd+ih7WSYGtp ncMK5izuAv5W2VO1iwllJfrmsbAeUdiOXLJWcOXHILvHxl6M1XBUAlv8O6bX14CeNb+4p+gHjMgV +MfgIBp6ibk97DtG6NEOSzmV ) ; Key ID = 1205`
	`TSPTEST.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAa0RtwesbDZOFVfw+Do78FUc1qXzHixcc8mTtnRZc+2flrFDbS7czgrEEU6S9cWvUtTdxNS2 OTqdV3Q93wRi8Ar5VtyWvBM1NMFfaNCxr+VI2aAZh6r2Cz258EdHLihkhLb58+TN4xn3cgU6XvOg 2WZTylthfKaaTE25jLMoua3f ) ; Key ID = 28473`
	`TSPTEST.GOV. 86400 IN DNSKEY ( 257 3 7 AwEAAan3SdvQjkbYOAeknzjh3OhRF+d2tXOCxWrOvaEeb2Qtg+/N2AstikHL+P2zpcO76yAGlJya 6o7NoONoZwgY9DLmxm9QebDe4spikxANIodFccDcuTV8OUzmFpW7dGjaQUgMgseYpJDGZHP6U+l2 yLsF/LfmuP63TxZBBOLvP9HGb2d+e9AywSQd2qdDj5u+NmD0ORjWIPZG2lJDm3gMrESF4B7/PpNn wESFSJw2h0Dd5EKIBpWTJggeo3e3V/gf6P7Bu62bYdf749y/B5ORoDpui9X/oZzYtnluDOEZocST QEYX3dcMldU0yfoF8D/ZXEtKGp3K4m4dQt4pXjdiWZc= ) ; Key ID = 37134`
	`TSPTEST.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAbnCw/8mmyE4lLx0qennwW4w1CxT4uUe24DpsmE6D7S4a6Oe4gWvJlaZdMWMlQi3TqbL2zOD LzzYBdZ330DLegoXGekv4Q6dzwanMvWG3Q11NnELDWTnRpl2Q730VvsybDkvsMC/5SL61jbtdbT9 9e5QGJhagUgnD6M7FTt8F3v5tp3yA+nJTg/Axj/bgDP7Vxp8jYmdC1AFHGg6dNV1G9uVyhxzGMg7 DO1XO9l+QigXXU+0VlYOvHKjAmsNXdNo+z8Fm4mX/BP8XqZs1H+Mb7wxLRB0PqI1+tZYEBdGa9Ta 5h07UkeoyraVCVDN7uMA7DZ/Srtc7bFmu6mBSSElMAc= ) ; Key ID = 64561`
	DNSKEY=37134/SEP is now in the chain-of-trust
	DS=37134/SHA-256 verifies DNSKEY=37134/SEP
	DS=37134/SHA-1 verifies DNSKEY=37134/SEP
	DNSKEY=64561/SEP is now in the chain-of-trust
	DS=64561/SHA-256 verifies DNSKEY=64561/SEP
	DS=64561/SHA-1 verifies DNSKEY=64561/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`TSPTEST.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20190721013131 20190714013131 1205 tsptest.gov. nnuXUfHJwNuWjprIJeC5NYysmpqwlUWY8L0mtpyt0OGy4iORmRr1T5PA079HC4fhThaaWJL4M+g+ 7IDCbC4MihXmIcFe/7n1PWOeeNFnujFoZVy46x74HnIyJTGIWgURUjZEIzrJx9E18rWL40AhDOOA 83HRV7u/WjEa/kGtKFE= )`
	`TSPTEST.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190721013131 20190714013131 28473 tsptest.gov. qxdDdpZGaoqz03u2fzRUgr1SBDGr4BEQEe8D1XqmpCuGYschDuXWznIFWGB/o2lOvrk8++xkJNJv S4Di/kqmlhJkUEF350UbEjFYALTHM3/oEXKJI1JJu3WWC3n0bQKZ3v2A2eUcdpwcDGqbm+5yKaCA keg6Mr/LIfVT6BLm3FA= )`
	`TSPTEST.GOV. 86400 IN RRSIG ( DNSKEY 7 2 86400 20190721013131 20190714013131 37134 tsptest.gov. NEvtfGoUgpl2x6Cc2x6tfCxGC10kwSIIevb5+/I6+E1cYHro8KohoDL0D7MdQaEcMxU/p/CNcTon iDra6IAEIPSmCJZpUby36oHWlRLztzS0WK8FOimKGU4G1Jp1uCfr+/LKt9X871IDLiavECoi//Tx 42pq9R7Cdc7f32rsDzOH2EWmHakk1/MEiW/iICnPh6cpbqIqMZt/ZwLcJDXYSt1OKpHKwkhk6wEl 0Fkt5dAPtTvIdSY0X7QcqrIuCxeLjYarKRWnAHu0Rec1f2ZpBHdFQK9F5snnD6HX+7e2gedh6vPX NdUrE1zRTRDUqS6s9bV5H4ZATPFZ7/iAd3KheQ== )`
	`TSPTEST.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190721013131 20190714013131 64561 tsptest.gov. Y8qcqwmnPDAAFdbywngWEEel7zkCDiAA+OW7da8VAzBQb1G1QjYeNnf5Zq0kHLgBdj2Bniof/+ov eiN7Xd2z2IzTCm4LTDuDJ3fVIy7wWv6Aawbm2T87Q4dpFdKnrZjo0ww6DpA84bV6P/Qk2f95vpeC 3ENYZdEL0Q3DpgF0zzRMUUHFRAV4LpbdlakaSWkaTShVle77vN2NP3rmU7tPxF4wffFKraqwrrH6 b9wMLt+j4EXgOpkcQMeBOQtRvmq8y+LNcUofgf0BJibNtks30UCauVmwufvnm11Q34zY166CX6n7 WTy1152+/XvPgxLLvB8VkoTS/oW8+fWG8XTUrQ== )`
	RRSIG=1205 and DNSKEY=1205 verifies the DNSKEY RRset
	RRSIG=28473 and DNSKEY=28473 verifies the DNSKEY RRset
	RRSIG=37134 and DNSKEY=37134/SEP verifies the DNSKEY RRset
	RRSIG=64561 and DNSKEY=64561/SEP verifies the DNSKEY RRset
	DNSKEY=1205 is now in the chain-of-trust
	DNSKEY=28473 is now in the chain-of-trust
	Query to ns3.TSPTEST.GOV for TSPTEST.GOV/A
	Received 863 bytes from 74.113.204.36
	;; Answer received from 74.113.204.36 (863 bytes) ;; HEADER SECTION ;; id = 58398 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TSPTEST.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) TSPTEST.GOV. 1200 IN SOA ( ns4.TSPTEST.GOV. hostmaster.ns4.TSPTEST.GOV. 2018050102 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) TSPTEST.GOV. 1200 IN RRSIG ( SOA 7 2 1200 20190721090033 20190714090033 1205 tsptest.gov. ILK/qAQBtLdHHBWfxCrPOMTna7AHFdTd2Y3D8BNCILZiVfVBL7IEz3hCoubfbExBOobPR8HlMa4i tereiclM9LOfTTEb+7L89ABi81z9niQOylNyLPMvTWCBs1fPBY7/bi8E5/+arFtQhFtBr/sFOdS7 tFIlAr+K5E3AmWLvnOk= ) TSPTEST.GOV. 1200 IN RRSIG ( SOA 8 2 1200 20190721090033 20190714090033 28473 tsptest.gov. JX2cV6ctILBCXQT4zUJ04+c0KsZ1dQ0QbH0xMYxyq2AYqXnuYjd+MD4m0tHd5dg8nnWzWhS4cLC+ zs+tDZSucxPA9Rlh+GpixyuL4eOjq3U10jhmxV0kD4Z2WrYb9jr694WBfUcpAcTYXX+c/x2OZF97 Yyl8g9SWLmErhBpQMjg= ) uok0oet6lh67pvj15o2i729252lsm3mb.TSPTEST.GOV. 86400 IN NSEC3 ( 1 0 1 e3455986df2e4b3e uok0oet6lh67pvj15o2i729252lsm3mc NS SOA RRSIG DNSKEY NSEC3PARAM ) uok0oet6lh67pvj15o2i729252lsm3mb.TSPTEST.GOV. 86400 IN RRSIG ( NSEC3 7 3 86400 20190721123427 20190714123427 1205 tsptest.gov. TjyFZjwedk/H9qoNxikdEuB1vyNSuYgonE9sUgqdwqPUkQQqt/IfNC/oe+vtKxwwDkSWGtntQgZp G4XWOutNPUJjJTzxY+nvsAaUdGZ3LN4tNbpFyuPiXYenV4bwAAhDg0DfcsNM3cydP8n1X034j08f 1wUA3w+JduufOSmxde0= ) uok0oet6lh67pvj15o2i729252lsm3mb.TSPTEST.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20190721123427 20190714123427 28473 tsptest.gov. a7Q4v4r4TyTsvUIA+rtqHQHbvZjjsffrT6Y+4zusxFes+JUBHb/luQh9qO9Af50/lV9a5ls6L+Wt Z1GFcvc2L2J1cZTgMYNoUP7jjxWMtrUiSdiraOQDgHwh/OPq6pfHlRLbo3sgwNE0mm4Q5Svm7pW/ FLgVXEgoFogJaBTYAmA= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	TSPTEST.GOV is authoritative for TSPTEST.GOV
	Found RRSIG signed by tsptest.gov zone
	Query to ns4.TSPTEST.GOV for TSPTEST.GOV/SOA
	Received 1523 bytes from 74.113.206.36
	;; Answer received from 74.113.206.36 (1523 bytes) ;; HEADER SECTION ;; id = 47057 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TSPTEST.GOV. IN SOA ;; ANSWER SECTION (3 records) TSPTEST.GOV. 1200 IN SOA ( ns4.TSPTEST.GOV. hostmaster.ns4.TSPTEST.GOV. 2018050102 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) TSPTEST.GOV. 1200 IN RRSIG ( SOA 7 2 1200 20190721153930 20190714153930 1205 tsptest.gov. cYdkrRYlyfRbqUwWXT2C/C201dt3KRSrl5Ta7SZlOvehREpDzpYEvABUwUOxQjDAJn18eHAcdIrI KZdiBXARYTVjqjRY+G9TjFgIcHEHVcbWvyey7zH6eIfnnjTUs7fvgCSekRihEWHABIocJTwlQS0V yX5ItZ0qWnGnvVKgM00= ) TSPTEST.GOV. 1200 IN RRSIG ( SOA 8 2 1200 20190721153930 20190714153930 28473 tsptest.gov. XRBpFPBXkA13b40wJEw5dRuhC9RBx2S8WfMPvk+AQYvBRyZB2XUwzrRUdqez2WZaIbHcIhVRVblH 1d5CqPEBHrr79oTShHTGitq9DYqtx23bC60ZzpjM9hssyORJ/m5wsBKKmyLlhyqvBGQuEqZGYf+I 6sZ35whAz9SgCxUSvk0= ) ;; AUTHORITY SECTION (4 records) TSPTEST.GOV. 1200 IN NS ns3.TSPTEST.GOV. TSPTEST.GOV. 1200 IN NS ns4.TSPTEST.GOV. TSPTEST.GOV. 1200 IN RRSIG ( NS 7 2 1200 20190722090139 20190715090139 1205 tsptest.gov. XzqwuKPIBWT/jGnXiVveWoz6Kh+ToTwBiy5PlmBQtVMPkowxFCmn2dXSda1PgTsWykliyvO+mSP9 tDh2hhGxmD29gK6eeg1Tu2El40NoP3tzXe+79ZpnBnpc8IApSlfa2NCFuY1Y2emIXB4MoKrmMzS0 P0StmMHUvAdK+1hhjZo= ) TSPTEST.GOV. 1200 IN RRSIG ( NS 8 2 1200 20190722090139 20190715090139 28473 tsptest.gov. hUTt9M/gbPO0/paGCO4BnsgpFyGmpLZ0qr+YHSTODwfF17uo2dTUVrqXukIPmupxCl40dTLfnkUM 2UL88j5yckXSwJ5lmIbRChW1qnrOj2RsHr7ZLdGE8gynLUr2dsfiHUmuTMtY4quHj1lqCulBHEKQ 8wSG5IZJD0NqGxTPS+o= ) ;; ADDITIONAL SECTION (7 records) ns4.TSPTEST.GOV. 1200 IN A 74.113.206.36 ns4.TSPTEST.GOV. 1200 IN RRSIG ( A 7 3 1200 20190722090139 20190715090139 1205 tsptest.gov. fHnMTJPjLmGIt7D/WEVUYufpkmJzedcdInzFKIduQWbijsVUW8gHBA4x4fZbAu9/J+h2Hi7PiKlZ DID222vahdHRpodQJRynwtVn2iSScXfBbK2QfwAW21bl766Vae2lcvzt8P2Ev9/1fLfazCc/SWaG 4AR1S2Ikmu82ZpdPa74= ) ns4.TSPTEST.GOV. 1200 IN RRSIG ( A 8 3 1200 20190722090139 20190715090139 28473 tsptest.gov. Ee4jBj0hC1CqmDFgS2qCiCPcJlKHpfj2dcdRlval65wcHEXEAOgJhNxeIcLZeuPXb4DUvGrsVlfV TxuytiDnieMbcdbLViA5FvL5ERMuX/t97Yx0Jz6dvD6zFCg1IyoyuehzM5H9Oik43bEFeQfXk+hb 9mKABHX9hPp0Rl0HpkQ= ) ns3.TSPTEST.GOV. 1200 IN A 74.113.204.36 ns3.TSPTEST.GOV. 1200 IN RRSIG ( A 7 3 1200 20190722090139 20190715090139 1205 tsptest.gov. UWLE774I+KlaZpIu8DUmBEsYtsx5syNtnPJWrKHJhvm7H/FH+Ue/0bB3T6COTC7ZvsiXIIwPfKRX ZwOelYcxoxSYeJreEELgwfxerFJgUgnSBTwym1QgP1seB+QfhYvrqGOt+k5NjwxwvFdSFBQsFqXr +VJK6m7X8JQDmxgAN3M= ) ns3.TSPTEST.GOV. 1200 IN RRSIG ( A 8 3 1200 20190722090139 20190715090139 28473 tsptest.gov. lOaM99cB1zldzvKI5TGmW2HmP9qytGIm7KgHdMkKdfUingQz/r+/t/9Evq4THYlNYDkhdjONqe8/ SAsyUFpdj083+WTlkm1kraQVh3NJ0Avdr/1fVQwSZqQrHcWCjuIJSTVyOicRRRLS3R48I5m/Jk6Y z8XjphcXzyd2UF82P8g= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns3.TSPTEST.GOV for TSPTEST.GOV/SOA
	Received 1523 bytes from 74.113.204.36
	;; Answer received from 74.113.204.36 (1523 bytes) ;; HEADER SECTION ;; id = 54205 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TSPTEST.GOV. IN SOA ;; ANSWER SECTION (3 records) TSPTEST.GOV. 1200 IN SOA ( ns4.TSPTEST.GOV. hostmaster.ns4.TSPTEST.GOV. 2018050102 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) TSPTEST.GOV. 1200 IN RRSIG ( SOA 7 2 1200 20190721084700 20190714084700 1205 tsptest.gov. jwuFoK5YBqk7qe14Dm76WtchH7VXlGAKGypV+sa5DcHmRudJPnR3WHSaO4quPW+tJUHxpAou5mHK 3cYAhUwn/SLuBdo6jSVIVzjdIP1RFvjr2kUAp7+ISDH4OBT6PbO0VPfgJ8pHAJ5wm0T2KVqohhYC W/F+5cpJ/TnnFoTrU3U= ) TSPTEST.GOV. 1200 IN RRSIG ( SOA 8 2 1200 20190721102856 20190714102856 28473 tsptest.gov. mEjREuZ5jCmxyYvmp98bLFFb7jekf/75KZK9uNC90/qhtdG4JV4iQztNg25ia0mbRO6VjbreaEyh +/RgnzMaREjtc+cd+nlixkBPNSBlR/CywiXg2mNdF5n1aNoh5xB/7uenQv4TF4/m7OpUHx7XV372 JVEid/2A77xLuGgGWM8= ) ;; AUTHORITY SECTION (4 records) TSPTEST.GOV. 1200 IN NS ns4.TSPTEST.GOV. TSPTEST.GOV. 1200 IN NS ns3.TSPTEST.GOV. TSPTEST.GOV. 1200 IN RRSIG ( NS 7 2 1200 20190721175650 20190714175650 1205 tsptest.gov. IryBi6jO+hfWBsZJ8b96V2NtYY5rOgiD+/05m6PDlMkcKD9EXkewlmh7LOZGseLhwpzsldrNGe0f xyj0b1RfeekZvT2tAsg6FYg1zx/59XhpBUkmMum02nHmP6W7a9ycD6oE9l/k63sN7lOcMHgtP2JH LYUuxmKbZVKRUUQ1Qnw= ) TSPTEST.GOV. 1200 IN RRSIG ( NS 8 2 1200 20190721175650 20190714175650 28473 tsptest.gov. nOqobIsRPgolTAow27kUmwzxwtFObvoAbz13IR7SlfTpvtPKmmswWT/p4QTucl7wwJaTimdjU19Q AM4I/0PTDJj13xztiBu0+6nAY/Fj2HyBe+l37JW+6xcUoTNjCq5FwRN6uaEXHPfwnuTSDv1oMArQ RBuJNItqnQk3/1jyd3g= ) ;; ADDITIONAL SECTION (7 records) ns4.TSPTEST.GOV. 1200 IN A 74.113.206.36 ns4.TSPTEST.GOV. 1200 IN RRSIG ( A 7 3 1200 20190721175650 20190714175650 1205 tsptest.gov. oNYwH2pnuqyf0PbpxEMAe42aa9jHMkrOooyyu8C2diQrsF803A0bbFEY9+enUsDALyXuGQQgMUtS RrLy/hijwuBjvrmlD5acGsb1dFnegbqTZKMpUpRs3IvIDsqS2Oo6A7eF2HBrfy4AlE9fSCUEPYbS YpFtOVlGHu5d2+gXI/s= ) ns4.TSPTEST.GOV. 1200 IN RRSIG ( A 8 3 1200 20190721175650 20190714175650 28473 tsptest.gov. I+pKJMBgkHQ8iZYo2qfjdScK9qDEidCX9Rcbd9yI1HA2KlYf+XJZuXzlGw0cvCFZf9yUJLy4ESrb rDsesMfdLNswMargfJCHQ5DmiDoBPVVQqFp2F6tbd85hF4GiZhPvRxIdkpnsqIDcP4xBxrqHdoug d3rdJ+pYg3npuOUnEIA= ) ns3.TSPTEST.GOV. 1200 IN A 74.113.204.36 ns3.TSPTEST.GOV. 1200 IN RRSIG ( A 7 3 1200 20190721175650 20190714175650 1205 tsptest.gov. TiFHKpJDwk2U1fATT3k6MkRIDK4L7a9DCKLcXhY+vEBSyhYk+HEG8zkwXW3KZT3nTibfdxk8taWX Bg+Okyw4DCRrSP/5QAm3/fyi7/Ds6YzH3Vli2gV6tFoDOxinjeDSstdCjqIHEIpfEldR0dkV/tda mNKjkku/6kXAA9v/jHo= ) ns3.TSPTEST.GOV. 1200 IN RRSIG ( A 8 3 1200 20190721175650 20190714175650 28473 tsptest.gov. FyakQRf4WdR98wxBu1/dPQBL+CNSMYSjLZeMeLPSknSrXiDZoN3/+iTxaSVTtOAYLXQ4ZN5BS6ga kEEcbpdZI3ZPUcoLxke6MlP1ACsRm3b4JzlEZmkUnM+t1YytSCJDUYFCj9o0VjP4Gd2QiFf6xo2D XBJwv12MTN1fLy1H7SE= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns3.TSPTEST.GOV for TSPTEST.GOV/A
	Received 863 bytes from 74.113.204.36
	;; Answer received from 74.113.204.36 (863 bytes) ;; HEADER SECTION ;; id = 51310 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TSPTEST.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) TSPTEST.GOV. 1200 IN SOA ( ns4.TSPTEST.GOV. hostmaster.ns4.TSPTEST.GOV. 2018050102 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) TSPTEST.GOV. 1200 IN RRSIG ( SOA 7 2 1200 20190721090033 20190714090033 1205 tsptest.gov. ILK/qAQBtLdHHBWfxCrPOMTna7AHFdTd2Y3D8BNCILZiVfVBL7IEz3hCoubfbExBOobPR8HlMa4i tereiclM9LOfTTEb+7L89ABi81z9niQOylNyLPMvTWCBs1fPBY7/bi8E5/+arFtQhFtBr/sFOdS7 tFIlAr+K5E3AmWLvnOk= ) TSPTEST.GOV. 1200 IN RRSIG ( SOA 8 2 1200 20190721090033 20190714090033 28473 tsptest.gov. JX2cV6ctILBCXQT4zUJ04+c0KsZ1dQ0QbH0xMYxyq2AYqXnuYjd+MD4m0tHd5dg8nnWzWhS4cLC+ zs+tDZSucxPA9Rlh+GpixyuL4eOjq3U10jhmxV0kD4Z2WrYb9jr694WBfUcpAcTYXX+c/x2OZF97 Yyl8g9SWLmErhBpQMjg= ) uok0oet6lh67pvj15o2i729252lsm3mb.TSPTEST.GOV. 86400 IN NSEC3 ( 1 0 1 e3455986df2e4b3e uok0oet6lh67pvj15o2i729252lsm3mc NS SOA RRSIG DNSKEY NSEC3PARAM ) uok0oet6lh67pvj15o2i729252lsm3mb.TSPTEST.GOV. 86400 IN RRSIG ( NSEC3 7 3 86400 20190721123427 20190714123427 1205 tsptest.gov. TjyFZjwedk/H9qoNxikdEuB1vyNSuYgonE9sUgqdwqPUkQQqt/IfNC/oe+vtKxwwDkSWGtntQgZp G4XWOutNPUJjJTzxY+nvsAaUdGZ3LN4tNbpFyuPiXYenV4bwAAhDg0DfcsNM3cydP8n1X034j08f 1wUA3w+JduufOSmxde0= ) uok0oet6lh67pvj15o2i729252lsm3mb.TSPTEST.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20190721123427 20190714123427 28473 tsptest.gov. a7Q4v4r4TyTsvUIA+rtqHQHbvZjjsffrT6Y+4zusxFes+JUBHb/luQh9qO9Af50/lV9a5ls6L+Wt Z1GFcvc2L2J1cZTgMYNoUP7jjxWMtrUiSdiraOQDgHwh/OPq6pfHlRLbo3sgwNE0mm4Q5Svm7pW/ FLgVXEgoFogJaBTYAmA= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`TSPTEST.GOV. 1200 IN RRSIG ( SOA 7 2 1200 20190721090033 20190714090033 1205 tsptest.gov. ILK/qAQBtLdHHBWfxCrPOMTna7AHFdTd2Y3D8BNCILZiVfVBL7IEz3hCoubfbExBOobPR8HlMa4i tereiclM9LOfTTEb+7L89ABi81z9niQOylNyLPMvTWCBs1fPBY7/bi8E5/+arFtQhFtBr/sFOdS7 tFIlAr+K5E3AmWLvnOk= )`
	`TSPTEST.GOV. 1200 IN RRSIG ( SOA 8 2 1200 20190721090033 20190714090033 28473 tsptest.gov. JX2cV6ctILBCXQT4zUJ04+c0KsZ1dQ0QbH0xMYxyq2AYqXnuYjd+MD4m0tHd5dg8nnWzWhS4cLC+ zs+tDZSucxPA9Rlh+GpixyuL4eOjq3U10jhmxV0kD4Z2WrYb9jr694WBfUcpAcTYXX+c/x2OZF97 Yyl8g9SWLmErhBpQMjg= )`
	RRSIG=1205 and DNSKEY=1205 verifies the SOA RRset
	RRSIG=28473 and DNSKEY=28473 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test TSPTEST.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: