DNSSEC Analyzer - TTLPLUS.GOV

Domain Name:

Time: 2020-10-26 12:49:42 UTC, NTP stratum 4

Analyzing DNSSEC problems for TTLPLUS.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to a.root-servers.net for ./DNSKEY
	Received 864 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (864 bytes) ;; HEADER SECTION ;; id = 20918 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20201111000000 20201021000000 20326 . UfytpVL3Ka5rmqF/Lm/9frJl/ygXTjW0MEaGgecsmHbmLfTrJF3XAgPS5Tp/xc9TkaDf9HCEzk48 R4cfHOI22Ul9AnyBGZX7FiVfVo0NaseADRwt6G3K9jsMwHMIuVmAMTnvFfR32/+CwMMgmXGhBXdZ JVXR71aARAMKZlSgJK7DlOia8h2yC+RaWK0DvHMLwqyA+uwAeLxixmrtu3Olj2Rzmx2MSNDZZUP9 I+vghq7K0rzK7CYrXiAgY2q5WvwtKjJPw6T/qB8Ojqru/XN1LxSa2zYeITAq58IyijgLr6EupAdA 6HB3iPPfhHGKiwafsmcfcRcds90WfxG7UQFAMg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20201111000000 20201021000000 20326 . UfytpVL3Ka5rmqF/Lm/9frJl/ygXTjW0MEaGgecsmHbmLfTrJF3XAgPS5Tp/xc9TkaDf9HCEzk48 R4cfHOI22Ul9AnyBGZX7FiVfVo0NaseADRwt6G3K9jsMwHMIuVmAMTnvFfR32/+CwMMgmXGhBXdZ JVXR71aARAMKZlSgJK7DlOia8h2yC+RaWK0DvHMLwqyA+uwAeLxixmrtu3Olj2Rzmx2MSNDZZUP9 I+vghq7K0rzK7CYrXiAgY2q5WvwtKjJPw6T/qB8Ojqru/XN1LxSa2zYeITAq58IyijgLr6EupAdA 6HB3iPPfhHGKiwafsmcfcRcds90WfxG7UQFAMg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=26116 is now in the chain-of-trust
	Query to i.root-servers.net for TTLPLUS.GOV/A
	Received 669 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (669 bytes) ;; HEADER SECTION ;; id = 3379 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TTLPLUS.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20201108050000 20201026040000 26116 . llwgKSTf7uT+COBzTPtQOYgFVxUgNLRI5e4ak+TKaSR2oUSxUMsJ1BauRGcHe/18LQTQ6nubrSrh /imaxL1i0lmJNzT+2nLY+hRcGTnqWQr0x+yH+Ovh8Am7CJrvf1AHuuFaEAxC6AnThDVBBZnTHwQs 5sUdoHB4cepyPmQk/E/30Jlrp7tedz7dgLi3eW7W5d8OA/tH0t1iRSVrqQgKL8S1as3YcTjUzadx BLlgLMCqW8QnAwjkvilc+nI/8Ie6QkfB+vfsl/0yIOOwUVrM/uTeQ3w+DjlbOFyRfwRDXKfKlCZA Q6mZbBgOPnRZob7U1L7K1jd4WIxyXEJRdIvgrg== ) ;; ADDITIONAL SECTION (9 records) d.gov-servers.net. 172800 IN A 81.19.194.30 c.gov-servers.net. 172800 IN A 69.36.153.30 b.gov-servers.net. 172800 IN A 209.112.123.30 a.gov-servers.net. 172800 IN A 69.36.157.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to f.root-servers.net for GOV/DNSKEY
	Received 658 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (658 bytes) ;; HEADER SECTION ;; id = 45152 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20201108050000 20201026040000 26116 . llwgKSTf7uT+COBzTPtQOYgFVxUgNLRI5e4ak+TKaSR2oUSxUMsJ1BauRGcHe/18LQTQ6nubrSrh /imaxL1i0lmJNzT+2nLY+hRcGTnqWQr0x+yH+Ovh8Am7CJrvf1AHuuFaEAxC6AnThDVBBZnTHwQs 5sUdoHB4cepyPmQk/E/30Jlrp7tedz7dgLi3eW7W5d8OA/tH0t1iRSVrqQgKL8S1as3YcTjUzadx BLlgLMCqW8QnAwjkvilc+nI/8Ie6QkfB+vfsl/0yIOOwUVrM/uTeQ3w+DjlbOFyRfwRDXKfKlCZA Q6mZbBgOPnRZob7U1L7K1jd4WIxyXEJRdIvgrg== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to h.root-servers.net for GOV/DS
	Received 403 bytes from 198.97.190.53
	;; Answer received from 198.97.190.53 (403 bytes) ;; HEADER SECTION ;; id = 19101 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20201108050000 20201026040000 26116 . llwgKSTf7uT+COBzTPtQOYgFVxUgNLRI5e4ak+TKaSR2oUSxUMsJ1BauRGcHe/18LQTQ6nubrSrh /imaxL1i0lmJNzT+2nLY+hRcGTnqWQr0x+yH+Ovh8Am7CJrvf1AHuuFaEAxC6AnThDVBBZnTHwQs 5sUdoHB4cepyPmQk/E/30Jlrp7tedz7dgLi3eW7W5d8OA/tH0t1iRSVrqQgKL8S1as3YcTjUzadx BLlgLMCqW8QnAwjkvilc+nI/8Ie6QkfB+vfsl/0yIOOwUVrM/uTeQ3w+DjlbOFyRfwRDXKfKlCZA Q6mZbBgOPnRZob7U1L7K1jd4WIxyXEJRdIvgrg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20201108050000 20201026040000 26116 . llwgKSTf7uT+COBzTPtQOYgFVxUgNLRI5e4ak+TKaSR2oUSxUMsJ1BauRGcHe/18LQTQ6nubrSrh /imaxL1i0lmJNzT+2nLY+hRcGTnqWQr0x+yH+Ovh8Am7CJrvf1AHuuFaEAxC6AnThDVBBZnTHwQs 5sUdoHB4cepyPmQk/E/30Jlrp7tedz7dgLi3eW7W5d8OA/tH0t1iRSVrqQgKL8S1as3YcTjUzadx BLlgLMCqW8QnAwjkvilc+nI/8Ie6QkfB+vfsl/0yIOOwUVrM/uTeQ3w+DjlbOFyRfwRDXKfKlCZA Q6mZbBgOPnRZob7U1L7K1jd4WIxyXEJRdIvgrg== )`
	RRSIG=26116 and DNSKEY=26116 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to d.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (777 bytes) ;; HEADER SECTION ;; id = 42049 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAeFoiC01j4zIdBfR1vxBGp7WmV8q6IgTQ/pvbQJhCd9+sE16txuz6M81FPFkWhTk1nsXR4tI UZLQZpvgme+q3dqWuqtFA2amB99IM9B9iq6kwSrkZNVFv6zav3eP+5BlL/OA9FNFQHXCj5qj2noA j2le7j8umVcc+4zH677ytdtIImoAY45H8wWxVrGR4kxqM54O10fPHXEPu84irfaZGrM= ) ; Key ID = 15489 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20201031190254 20201016185754 7698 gov. MBslq9pa5Huymkksu4UJkxc3V8MuBRq61akodufo1kf25kme1yYKfE3a+wT5j4t9my5aOjvgOuq0 vGNOI7DyjdG6GR0R3PO3HBT2mFBMtCSqK9AA3UGjx8brf1SDyKGz8VCDaF0C+QH5kLEgVQIqCSrH waJnXt9s5LRufxVP2NOfszOmpOEHvAKeZttbTZdBow9GQNxKi/l/SgejJ2midsslQYxsXz1TPUFa jdlT6Ne9d3+8Jg4QTkF/ARRQkpA42A0pfSZ6PP5k1u3dISqCd6mOUN2iutzj5qZhaTZbrR0NW40A yg+X7Ut4oPmCwYsXuqR2WDVrPWyqYfxIVFHV4A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAeFoiC01j4zIdBfR1vxBGp7WmV8q6IgTQ/pvbQJhCd9+sE16txuz6M81FPFkWhTk1nsXR4tI UZLQZpvgme+q3dqWuqtFA2amB99IM9B9iq6kwSrkZNVFv6zav3eP+5BlL/OA9FNFQHXCj5qj2noA j2le7j8umVcc+4zH677ytdtIImoAY45H8wWxVrGR4kxqM54O10fPHXEPu84irfaZGrM= ) ; Key ID = 15489`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20201031190254 20201016185754 7698 gov. MBslq9pa5Huymkksu4UJkxc3V8MuBRq61akodufo1kf25kme1yYKfE3a+wT5j4t9my5aOjvgOuq0 vGNOI7DyjdG6GR0R3PO3HBT2mFBMtCSqK9AA3UGjx8brf1SDyKGz8VCDaF0C+QH5kLEgVQIqCSrH waJnXt9s5LRufxVP2NOfszOmpOEHvAKeZttbTZdBow9GQNxKi/l/SgejJ2midsslQYxsXz1TPUFa jdlT6Ne9d3+8Jg4QTkF/ARRQkpA42A0pfSZ6PP5k1u3dISqCd6mOUN2iutzj5qZhaTZbrR0NW40A yg+X7Ut4oPmCwYsXuqR2WDVrPWyqYfxIVFHV4A== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=15489 is now in the chain-of-trust
	Query to a.gov-servers.net for TTLPLUS.GOV/A
	Received 452 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (452 bytes) ;; HEADER SECTION ;; id = 43576 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TTLPLUS.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) TTLPLUS.GOV. 86400 IN NS ns1.treasury.GOV. TTLPLUS.GOV. 86400 IN NS ns3.treasury.GOV. TTLPLUS.GOV. 3600 IN DS 57907 8 1 1023b4011331c14c93f75ea3ab5d1d364c93be19 TTLPLUS.GOV. 3600 IN DS ( 57907 8 2 245195f3eebb97753ceddf56af7ffbde263753096b7e6f7c0b8fe631caf83e49 ) TTLPLUS.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201102111008 20201026111008 15489 gov. vM6FL0fkYv5XF/E/ZQ9fkQqYy3U7ZWVi5kdlXKA1spzlPt/1Qsa8LsC/rNmKWZAehVNNznKiNH+h FcG6zaHQaIt3uw0b8wYhdosu9PPC2pqkBi91p057p5y5y4xhuFf7xRMbnkj3sAuj6KYgFt1amLd1 FrQrRDNe8Z4rgJN8JZejRAaib65MZaE8pQHuZLl4mOWyjvEB0Re7kS15iuvecA== ) ;; ADDITIONAL SECTION (5 records) ns1.treasury.GOV. 86400 IN A 166.123.208.249 ns1.treasury.GOV. 86400 IN AAAA 2610:108:4000:100a::249 ns3.treasury.GOV. 86400 IN A 164.95.95.155 ns3.treasury.GOV. 86400 IN AAAA 2610:108:3000:100a::155 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.gov-servers.net for TTLPLUS.GOV/DNSKEY
	Received 452 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (452 bytes) ;; HEADER SECTION ;; id = 29131 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TTLPLUS.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) TTLPLUS.GOV. 86400 IN NS ns1.treasury.GOV. TTLPLUS.GOV. 86400 IN NS ns3.treasury.GOV. TTLPLUS.GOV. 3600 IN DS 57907 8 1 1023b4011331c14c93f75ea3ab5d1d364c93be19 TTLPLUS.GOV. 3600 IN DS ( 57907 8 2 245195f3eebb97753ceddf56af7ffbde263753096b7e6f7c0b8fe631caf83e49 ) TTLPLUS.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201102111008 20201026111008 15489 gov. vM6FL0fkYv5XF/E/ZQ9fkQqYy3U7ZWVi5kdlXKA1spzlPt/1Qsa8LsC/rNmKWZAehVNNznKiNH+h FcG6zaHQaIt3uw0b8wYhdosu9PPC2pqkBi91p057p5y5y4xhuFf7xRMbnkj3sAuj6KYgFt1amLd1 FrQrRDNe8Z4rgJN8JZejRAaib65MZaE8pQHuZLl4mOWyjvEB0Re7kS15iuvecA== ) ;; ADDITIONAL SECTION (5 records) ns1.treasury.GOV. 86400 IN A 166.123.208.249 ns1.treasury.GOV. 86400 IN AAAA 2610:108:4000:100a::249 ns3.treasury.GOV. 86400 IN A 164.95.95.155 ns3.treasury.GOV. 86400 IN AAAA 2610:108:3000:100a::155 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone TTLPLUS.GOV

TTLPLUS.GOV

	Checking DS between GOV and TTLPLUS.GOV
	Query to b.gov-servers.net for TTLPLUS.GOV/DS
	Received 319 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (319 bytes) ;; HEADER SECTION ;; id = 29607 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TTLPLUS.GOV. IN DS ;; ANSWER SECTION (3 records) TTLPLUS.GOV. 3600 IN DS 57907 8 1 1023b4011331c14c93f75ea3ab5d1d364c93be19 TTLPLUS.GOV. 3600 IN DS ( 57907 8 2 245195f3eebb97753ceddf56af7ffbde263753096b7e6f7c0b8fe631caf83e49 ) TTLPLUS.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201102111008 20201026111008 15489 gov. vM6FL0fkYv5XF/E/ZQ9fkQqYy3U7ZWVi5kdlXKA1spzlPt/1Qsa8LsC/rNmKWZAehVNNznKiNH+h FcG6zaHQaIt3uw0b8wYhdosu9PPC2pqkBi91p057p5y5y4xhuFf7xRMbnkj3sAuj6KYgFt1amLd1 FrQrRDNe8Z4rgJN8JZejRAaib65MZaE8pQHuZLl4mOWyjvEB0Re7kS15iuvecA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for TTLPLUS.GOV in the GOV zone
	DS=57907/SHA-1 has algorithm RSASHA256
	DS=57907/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`TTLPLUS.GOV. 3600 IN RRSIG ( DS 8 2 3600 20201102111008 20201026111008 15489 gov. vM6FL0fkYv5XF/E/ZQ9fkQqYy3U7ZWVi5kdlXKA1spzlPt/1Qsa8LsC/rNmKWZAehVNNznKiNH+h FcG6zaHQaIt3uw0b8wYhdosu9PPC2pqkBi91p057p5y5y4xhuFf7xRMbnkj3sAuj6KYgFt1amLd1 FrQrRDNe8Z4rgJN8JZejRAaib65MZaE8pQHuZLl4mOWyjvEB0Re7kS15iuvecA== )`
	RRSIG=15489 and DNSKEY=15489 verifies the DS RRset
	DS=57907/SHA-1 is now in the chain-of-trust
	`TTLPLUS.GOV. 3600 IN DS 57907 8 1 1023b4011331c14c93f75ea3ab5d1d364c93be19`
	`TTLPLUS.GOV. 3600 IN DS ( 57907 8 2 245195f3eebb97753ceddf56af7ffbde263753096b7e6f7c0b8fe631caf83e49 )`
	Query to ns1.treasury.GOV for TTLPLUS.GOV/DNSKEY
	Received 997 bytes from 166.123.208.249
	;; Answer received from 166.123.208.249 (997 bytes) ;; HEADER SECTION ;; id = 26947 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TTLPLUS.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) TTLPLUS.GOV. 300 IN DNSKEY ( 256 3 8 AwEAAcUKLGDFvavv5oC5W94mpNGAHamKS9hg42NR1Wa80bQjZtmOKzJQxFQgOtQUlAcD2fAFhpYD /o/G+1Ln4q+8I9jWQpcAQ+pryp2aqcutypE11oZT3UO5VBnlydl/eGO6CTJ8o/Bg+OHe0mPwwPsm Ej4dD9a4AU4ZMDqQOyvf9K53 ) ; Key ID = 39318 TTLPLUS.GOV. 300 IN DNSKEY ( 256 3 8 AwEAAfEvTkQL+rsUOesVy9RAYQERcPnFBTLQHrVNfcO8IzvI3refxhQ4KDQEgrB+tJQhamg3g/Oa YwOhgMGPrD2ek+luLL/CGGnsZ76Re3ZHjBIO/XhQNDv7iM/ayt8y9MwBt0TKNUA8ojKtlK1a5FQo 05hbHTUW/EXgo8kMEqHqdeQZ ) ; Key ID = 61821 TTLPLUS.GOV. 300 IN DNSKEY ( 257 3 8 AwEAAbWGz595d8pNZINAQAUGnfLGP8AnSGCBn69eFfMQbLVcONO6l6mRlitS+gjOG2phQn4R9Lh3 C+GBkTY1Qwj5qdJ+3jASuWbZbPAjvC/O7WUTDAs6fHhs4fbJ/5AKOKkt4Ura0QJH/uYCmaAWuXvD nOjSdb/XZsbGygS8+sUDjEVb ) ; Key ID = 57907 TTLPLUS.GOV. 300 IN RRSIG ( DNSKEY 8 2 300 20201101163921 20201025163921 39318 ttlplus.gov. QiVvxSVQUtqr5DW7mQXCLWcKhrXAZ6IELg+O5c19R4fh+Ry+FnxhwQQS8MTsOuEKSHWQQNh2Kftm eTNVmlCARcFrn54RKQuvmsfzh/+0o7zecs+xa6bz0H/i+E+mQaXRMFlLTfUAbtggyVxaPEFpo2mk /n7P6cPKPQKwDWUkBhk= ) TTLPLUS.GOV. 300 IN RRSIG ( DNSKEY 8 2 300 20201101163921 20201025163921 61821 ttlplus.gov. PqjvVTGY3x3hveX6NqGiBqWUOBbKZX5RiDVuTDzZ4D/G0+GWktc03qwGeUiyfI0prq2a6tILBfvv v/cIJI1lECvoparqcAHI7gMpS23qzHVQazwHICqFc61aEX3E5STnhfMf5UA1g7tVBoB4AOvmxIYQ krm3M8wKh5q4sI5X0uA= ) TTLPLUS.GOV. 300 IN RRSIG ( DNSKEY 8 2 300 20201101163921 20201025163921 57907 ttlplus.gov. TqZmEETDwRxm83CutEdRYuK2BSWUyW5hv+NY2gjgvQRXqgKIaWiU0T/l6AehQtbgIzErSlUOkgKH MBXTX8TUFSFCyMTJhACe27BKjjmSmeyYeU95ylSa3jYyN2FKwteaL4ndo6v2P9VWeiYYBvZvGY7r 56LcJcTWE3NrNcGvLp8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for TTLPLUS.GOV
	`TTLPLUS.GOV. 300 IN DNSKEY ( 256 3 8 AwEAAcUKLGDFvavv5oC5W94mpNGAHamKS9hg42NR1Wa80bQjZtmOKzJQxFQgOtQUlAcD2fAFhpYD /o/G+1Ln4q+8I9jWQpcAQ+pryp2aqcutypE11oZT3UO5VBnlydl/eGO6CTJ8o/Bg+OHe0mPwwPsm Ej4dD9a4AU4ZMDqQOyvf9K53 ) ; Key ID = 39318`
	`TTLPLUS.GOV. 300 IN DNSKEY ( 256 3 8 AwEAAfEvTkQL+rsUOesVy9RAYQERcPnFBTLQHrVNfcO8IzvI3refxhQ4KDQEgrB+tJQhamg3g/Oa YwOhgMGPrD2ek+luLL/CGGnsZ76Re3ZHjBIO/XhQNDv7iM/ayt8y9MwBt0TKNUA8ojKtlK1a5FQo 05hbHTUW/EXgo8kMEqHqdeQZ ) ; Key ID = 61821`
	`TTLPLUS.GOV. 300 IN DNSKEY ( 257 3 8 AwEAAbWGz595d8pNZINAQAUGnfLGP8AnSGCBn69eFfMQbLVcONO6l6mRlitS+gjOG2phQn4R9Lh3 C+GBkTY1Qwj5qdJ+3jASuWbZbPAjvC/O7WUTDAs6fHhs4fbJ/5AKOKkt4Ura0QJH/uYCmaAWuXvD nOjSdb/XZsbGygS8+sUDjEVb ) ; Key ID = 57907`
	DNSKEY=57907/SEP is now in the chain-of-trust
	DS=57907/SHA-1 verifies DNSKEY=57907/SEP
	DS=57907/SHA-256 verifies DNSKEY=57907/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`TTLPLUS.GOV. 300 IN RRSIG ( DNSKEY 8 2 300 20201101163921 20201025163921 39318 ttlplus.gov. QiVvxSVQUtqr5DW7mQXCLWcKhrXAZ6IELg+O5c19R4fh+Ry+FnxhwQQS8MTsOuEKSHWQQNh2Kftm eTNVmlCARcFrn54RKQuvmsfzh/+0o7zecs+xa6bz0H/i+E+mQaXRMFlLTfUAbtggyVxaPEFpo2mk /n7P6cPKPQKwDWUkBhk= )`
	`TTLPLUS.GOV. 300 IN RRSIG ( DNSKEY 8 2 300 20201101163921 20201025163921 61821 ttlplus.gov. PqjvVTGY3x3hveX6NqGiBqWUOBbKZX5RiDVuTDzZ4D/G0+GWktc03qwGeUiyfI0prq2a6tILBfvv v/cIJI1lECvoparqcAHI7gMpS23qzHVQazwHICqFc61aEX3E5STnhfMf5UA1g7tVBoB4AOvmxIYQ krm3M8wKh5q4sI5X0uA= )`
	`TTLPLUS.GOV. 300 IN RRSIG ( DNSKEY 8 2 300 20201101163921 20201025163921 57907 ttlplus.gov. TqZmEETDwRxm83CutEdRYuK2BSWUyW5hv+NY2gjgvQRXqgKIaWiU0T/l6AehQtbgIzErSlUOkgKH MBXTX8TUFSFCyMTJhACe27BKjjmSmeyYeU95ylSa3jYyN2FKwteaL4ndo6v2P9VWeiYYBvZvGY7r 56LcJcTWE3NrNcGvLp8= )`
	RRSIG=39318 and DNSKEY=39318 verifies the DNSKEY RRset
	RRSIG=61821 and DNSKEY=61821 verifies the DNSKEY RRset
	RRSIG=57907 and DNSKEY=57907/SEP verifies the DNSKEY RRset
	DNSKEY=39318 is now in the chain-of-trust
	DNSKEY=61821 is now in the chain-of-trust
	Query to ns1.treasury.GOV for TTLPLUS.GOV/A
	Received 880 bytes from 166.123.208.249
	;; Answer received from 166.123.208.249 (880 bytes) ;; HEADER SECTION ;; id = 28138 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TTLPLUS.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) TTLPLUS.GOV. 1800 IN SOA ( ns1.treasury.GOV. ecb-hosting.fiscal.treasury.GOV. 85813 ;serial 10800 ;refresh 1080 ;retry 1209600 ;expire 1800 ;minimum ) TTLPLUS.GOV. 1800 IN RRSIG ( SOA 8 2 1800 20201101095518 20201025095518 39318 ttlplus.gov. CTE3g7vvgcc3Z9CQVA7WrJMZl8KLwegypirv2OQj90uNPDJ1X1d/lmroTaQc+8S4oK2G9rCCyL3l IJoopX5GaSTytnytI1fC9fU5w81g7a5pXGsxNLSMO3CO4MB4l7Pt7879kg8zk9piYBY9xnqeSQ2u ZyBOKf7GmgeinfVL/OE= ) TTLPLUS.GOV. 1800 IN RRSIG ( SOA 8 2 1800 20201101095518 20201025095518 61821 ttlplus.gov. 8NBsEiniWMkHXF5X5Yfg/AjQ0UZ5QpRS3L2IqJAlA7a9BaFUvqHKjIoRnMrZ0i8m15NiNGLX/H8X hiHz75U0eVHQUazRibh3jOmM3JaRQYBGRKoYrEy0tbApg8EnfB+geN0KlQAQY8LfN6YnBMD9MmkP W/pXkb8a+iF4GW//2eE= ) 093d2npb97e6f23e24ppmuc82vlfhoha.TTLPLUS.GOV. 1800 IN NSEC3 ( 1 0 1 96cd0fd3d42772b4 093d2npb97e6f23e24ppmuc82vlfhohb NS SOA RRSIG DNSKEY NSEC3PARAM ) 093d2npb97e6f23e24ppmuc82vlfhoha.TTLPLUS.GOV. 1800 IN RRSIG ( NSEC3 8 3 1800 20201101190939 20201025190939 39318 ttlplus.gov. TqM7bznKWzn7qVjn4TsvFVkYTvnN+l1pX1NebDpjCilkjfxmMXozcY+qn+Tey+mV7z0gXw/YiESv arCVMA6HyaiIKbU+HZBYHEYmLt0iOjZ23qor4NuHl54nWwCRcdgdA4IlKSMXATn3h59ezK2c/iVn 1klmpyBz/hsbz64XhiU= ) 093d2npb97e6f23e24ppmuc82vlfhoha.TTLPLUS.GOV. 1800 IN RRSIG ( NSEC3 8 3 1800 20201101190939 20201025190939 61821 ttlplus.gov. aanreLuTlIYKz5M2LWJMWHGC8Ox9Hq1IJrn4h19MHCqYyV+iQatvwC8jFYD9GR56EMBz8Ejy8QqM VQwXm14puwUibwLnZFjFxnOesxNhrwpeNACv5doBfVmYj7lRVwThfy27Q8MfWXMPh8CsvjUm8G/K 40iL9JoSxHzGlpUPGdc= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	TTLPLUS.GOV is authoritative for TTLPLUS.GOV
	Found RRSIG signed by ttlplus.gov zone
	Query to ns3.treasury.GOV for TTLPLUS.GOV/SOA
	Received 1600 bytes from 164.95.95.155
	;; Answer received from 164.95.95.155 (1600 bytes) ;; HEADER SECTION ;; id = 48821 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TTLPLUS.GOV. IN SOA ;; ANSWER SECTION (3 records) TTLPLUS.GOV. 1800 IN SOA ( ns1.treasury.GOV. ecb-hosting.fiscal.treasury.GOV. 85813 ;serial 10800 ;refresh 1080 ;retry 1209600 ;expire 1800 ;minimum ) TTLPLUS.GOV. 1800 IN RRSIG ( SOA 8 2 1800 20201101172530 20201025172530 39318 ttlplus.gov. YaiGzlTrcqTS4b7y4KypZw1+RO8AyQ8FUNyyxX6u2FC78IQUKjdev7vb0gOkrFVhlujXqQgc8Vr6 oY0MG4SXP7Wa0/9CazXKlZ+BuZbDYy7fsDj0Ex+ySMjdvvFV6pV407T9LjjxsWbSr/yP5nentzB8 e/3FJVOHD/nirmNlaes= ) TTLPLUS.GOV. 1800 IN RRSIG ( SOA 8 2 1800 20201101172530 20201025172530 61821 ttlplus.gov. mHNO/sbH5z0F9q3/773qNf5sdTZCc0mlvXsM2Xb+Cjo5icG0b3CV2Ck3v0jZJFZtNV8ghX9YxZdm olRVsboaae0ZAds/d8YfljGkSaBdSMrKFcF7ZHLsgVALbESC5Vg6gPz3ObDYRy/a2QmAOmNHhd0w E04+iHhATYk47XXD0v4= ) ;; AUTHORITY SECTION (4 records) TTLPLUS.GOV. 1800 IN NS ns3.treasury.GOV. TTLPLUS.GOV. 1800 IN NS ns1.treasury.GOV. TTLPLUS.GOV. 1800 IN RRSIG ( NS 8 2 1800 20201031103628 20201024103628 39318 ttlplus.gov. LV6CCrhjzxPH9eO29EpPA0WL+3VRrCMm2lYbHMZx7Fmp+yXcn5C8pBAt6nggT0TNibmzQ0EOUIgi 21VehKxVFVOlzeDohBSAr16q1mww4r+vsQhLGSdrNcrH/HNLLkuFQh6qDQe4yqzrU8gp8UM9xXL9 YSM7X4TnH6dDsqHD2wY= ) TTLPLUS.GOV. 1800 IN RRSIG ( NS 8 2 1800 20201101193535 20201025193535 61821 ttlplus.gov. Z0LRYEH1BsrC6meKZE+u9SemI+Yixl0tXtcPmfHQsgGe+3XKAQgpOy0UGNLLxJ8tifLKIbR2TG/9 Y4lRp8IMGVGfQmR69Wjn6J5ADeTzetyS75Zld5V0RkKVCxZ+2q693iHubf+T1VBv3ADZMa3FoQnO NLeHJ6jWOPwn/PJvx2c= ) ;; ADDITIONAL SECTION (9 records) ns3.treasury.GOV. 300 IN A 164.95.95.155 ns3.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20201030020936 20201023020936 13 treasury.gov. XSakiVUAb8VJPPsy9/nwe1K0XlMG1xyyIAct1UEgyXYiVGx9LaaGVt6Rclct+Ku7ANJRtm8jT8dS 2XsvMDnwxkXqqkDsH+CdIwNcEGyhqtvQQ4evsAtE+ob0LphsM0bhJo+ItvpJhumouBMQI468UlFl EdubgvVY+znvfoKazl4= ) ns3.treasury.GOV. 300 IN AAAA 2610:108:3000:100a::155 ns3.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20201030020936 20201023020936 13 treasury.gov. VDldIoxOJKlEBL0dSKK1w6xEPszXp8QG7aZfnGg1l7n+MtZobyX8+X1fZD8+bzJUeF7Kh5uEma+S ls9VGU9YyKWAPfH4aU2/bry2EKjkVpq9o1kWWtJ4NQqLEdw6dGWo2fWqyp1VKu37MHrP4K3ru+Ub DupqruNU5yx3yAj5dKs= ) ns1.treasury.GOV. 300 IN A 166.123.208.249 ns1.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20201030020936 20201023020936 13 treasury.gov. PhkXA0pnk5sLg8NAVu/SIeaDqOELN6/Vp2qmkwME4dgCOdIwJjn/j8sY7O8ZmXAqTpRz3gKvcp2J Gb688I8LHLz9bzOa+7m88O9axvtflujkpOzl7Jj6TP0muHp76QBRKoPh4c8nO8P32Cm6EHUTlojo L87FgTnnZ9t/yFsUNFY= ) ns1.treasury.GOV. 300 IN AAAA 2610:108:4000:100a::249 ns1.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20201030020936 20201023020936 13 treasury.gov. F6Njj6l+SHzOzrPguR6gGw2GS8Rey+T8y3QP45CmqUUngB4ynt1/qSrHwvTVVs/xggc+BMnvVHXk evS+XLK6rJ4sm+R25e5n2GspnN39ycLO2kl7XCFAOxAAHW1jahXYkBN7ciHWXI6s826ZFPi7mhtT GUQPd4U19euylmWEacU= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.treasury.GOV for TTLPLUS.GOV/SOA
	Received 1600 bytes from 166.123.208.249
	;; Answer received from 166.123.208.249 (1600 bytes) ;; HEADER SECTION ;; id = 28266 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TTLPLUS.GOV. IN SOA ;; ANSWER SECTION (3 records) TTLPLUS.GOV. 1800 IN SOA ( ns1.treasury.GOV. ecb-hosting.fiscal.treasury.GOV. 85813 ;serial 10800 ;refresh 1080 ;retry 1209600 ;expire 1800 ;minimum ) TTLPLUS.GOV. 1800 IN RRSIG ( SOA 8 2 1800 20201101095523 20201025095523 39318 ttlplus.gov. mwD5zrOcQrinpqaDlboYGJMlVgsTvlZFNE1qFjCpXgBp1aWiu6woTdxD0tjtFK1v2DvSChRyTlqM VpBI4QyWdV+cxhqga5rL90yHETuz+5PLkVT7wqfs7ckqUSn4ngraFy2QQbAmME/2YrLZdakhczIH ZriZf/0XqtzW3G1SN4Y= ) TTLPLUS.GOV. 1800 IN RRSIG ( SOA 8 2 1800 20201101095523 20201025095523 61821 ttlplus.gov. fcamX1gCZxq8Dhb/OtL77EAnV7GA4WdnZgMWeV3uGWfIVLtYpYJSxvq50ryp9eCd9DxRNQsCkpyk wm29szuIeTwAjSTBVi4/MrdjVj0d3w8WTmVM8vBLZtTiI0XU+GSMEd1P8zM3MFAl6o5cuBPraOCP w2CRwYB2QoDT8hX4C7g= ) ;; AUTHORITY SECTION (4 records) TTLPLUS.GOV. 1800 IN NS ns1.treasury.GOV. TTLPLUS.GOV. 1800 IN NS ns3.treasury.GOV. TTLPLUS.GOV. 1800 IN RRSIG ( NS 8 2 1800 20201101180922 20201025180922 39318 ttlplus.gov. WLIpDBUuxAeJeG0QExFNW83HiGyWJOF+JRu/G31VaFWtKkoUiMfaUJTZt7XZq2lKdQuucIYiJBxW rceJtYR0RkpioEi/BrEbDsTo7JBJivsRNGGf4ggYww1jG363U/WOVUvu2OT9QYOMxRU0G5PY+KEC j6kpL+Pr+Q2+pXyAzs4= ) TTLPLUS.GOV. 1800 IN RRSIG ( NS 8 2 1800 20201101180922 20201025180922 61821 ttlplus.gov. fQL49QIyjlxCfOr1ctrEbD8TvZXuraYYB0xnF7DZzmmhjzsMLRk3HtLvsdcgRWYP+Yh+QMN4MAvY c8/Lm9dOhO3GB3X7lWRFqWxmg8STV9vRCzEhhizAVl+13aLx6OKHa7OaPChlW4nnC2nMu54wvYes 4/KOFxpYoJypxmboKv0= ) ;; ADDITIONAL SECTION (9 records) ns3.treasury.GOV. 300 IN A 164.95.95.155 ns3.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20201101171613 20201025171613 13 treasury.gov. TChKC/focstecl+VdlDM+4SYsOKHLeHm3VK1frvlNMit7l2FsEDpyMqIYykj8FqlnEFIb540V47T xMJggbdn540UV/cB2v2QAxR5YaX22HJUhZoNg85a9j4lzjqhUILSTrowpepnchz5Wl5vA6n0kPez zizrsyeNyDCXhqcGAWU= ) ns3.treasury.GOV. 300 IN AAAA 2610:108:3000:100a::155 ns3.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20201101172534 20201025172534 13 treasury.gov. aFxiXWTxrZA3MWIyBWsTvscAta62ZsBPSqitEZYD9tnae2juzGE+0tuah3O+474yqozL+eGQhKaC Xnl6UyuwpyzxgoILjR6xHrhhJI2lnyrQWQ7NZKk+tVSbXvFuXC4GCONq6x352ywnpEASyCwUX9s0 +RAhnWJW71SNgo8PmUs= ) ns1.treasury.GOV. 300 IN A 166.123.208.249 ns1.treasury.GOV. 300 IN RRSIG ( A 7 3 300 20201101174425 20201025174425 13 treasury.gov. etq0UW8tEGZ7c+oT5gaV14h6IKurqvxsJRT4t0HLmBs5/3txUmysIRJulAG4YiZGfPUyUoW3o/2b tf+JtZZ3dS4poXBf8oBMmfcSzyTZ2kZ8Rqo9j4yMkfnUUkF+iwg5o515bfBRANVAVFwNE09phIfw YewwAR3JKbE+cLHEfpE= ) ns1.treasury.GOV. 300 IN AAAA 2610:108:4000:100a::249 ns1.treasury.GOV. 300 IN RRSIG ( AAAA 7 3 300 20201101172845 20201025172845 13 treasury.gov. X+cqMgn/ge94Fk5qo5R1opsya0OzL2UyaMKxnYxphADncrRICtjavfkoc+l1zXAADNVhsnIDrABv 4Xy8tDrlYZ1/grGbr6y/N3LYrP5GwkWC9oMtihtf7leLd3/hXKeCvOTe8luJ01qa/0NdmRxgNHFS vF5NYapJFSQxEEKsmfs= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.treasury.GOV for TTLPLUS.GOV/A
	Received 880 bytes from 166.123.208.249
	;; Answer received from 166.123.208.249 (880 bytes) ;; HEADER SECTION ;; id = 60294 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; TTLPLUS.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) TTLPLUS.GOV. 1800 IN SOA ( ns1.treasury.GOV. ecb-hosting.fiscal.treasury.GOV. 85813 ;serial 10800 ;refresh 1080 ;retry 1209600 ;expire 1800 ;minimum ) TTLPLUS.GOV. 1800 IN RRSIG ( SOA 8 2 1800 20201101102517 20201025102517 39318 ttlplus.gov. NhlKRILYfURR3uz7JWbRTlq6XEW3SgH5NVFo1T4ccmQLBKYhT/Aq2PBq3WRqgw0989ZKd6I1xBQP LBFv03RtnU20iSqoWxro0oiQdfL9UJyMpuPSl1XU/bRXbZ9GNRg4HgyLTdYFx6WCg/Qr3RBpkBlu TYQcUug18PJVfb7agtY= ) TTLPLUS.GOV. 1800 IN RRSIG ( SOA 8 2 1800 20201101102517 20201025102517 61821 ttlplus.gov. uaeL7/zkbeyjs+bl2rRaU05bJ8Kbnzvf/MxOkbkq0Vf5ZwQJ/utsLRG4mtHiSFZEobDC+zDfgn7F F10SkA+4mBn1dT6Wf087sT9knwhDBwbUTzN0ZWaglhlVi91Sn2ebwTXuQ0pR4NVr7HIBKGnoyL6E YfxMF4An/RJ8T39pnGc= ) nptfamcmokm2kfkl0havv40ol2bitsi8.TTLPLUS.GOV. 1800 IN NSEC3 ( 1 0 1 68075381987b4835 nptfamcmokm2kfkl0havv40ol2bitsi9 NS SOA RRSIG DNSKEY NSEC3PARAM ) nptfamcmokm2kfkl0havv40ol2bitsi8.TTLPLUS.GOV. 1800 IN RRSIG ( NSEC3 8 3 1800 20201101182624 20201025182624 39318 ttlplus.gov. gtXFR2deYo1ILhhQFKN8E7eDgBP16z61fhCILiJmnLdFXQHw08XptrWeSF32HqWuK8Oxxy/+/Ezp 3lVTu9eok9R0amNdefniNELc6XFXN5k9BKWG8nCIUKhbkdmjsTRbZgybTgz0oRGKx91EfEZ/9ysF 8EyM4XpBxOmSn/MML7c= ) nptfamcmokm2kfkl0havv40ol2bitsi8.TTLPLUS.GOV. 1800 IN RRSIG ( NSEC3 8 3 1800 20201101182624 20201025182624 61821 ttlplus.gov. g5z9z4EBQU+XRjRkMCgUzFyo3eNQvrT7qJ3JDNljID6Ly0yKeJQEOuUjhnyM1ZjbnVWTYTnsYr7y UAWUpk/fZZ3+is/npSojzWfEb62IdBHMEWR+Q8wPFjB2+AB6g42MNMfsPU6sqdqAqVgiAyVNqL8a Ia5Mdv7MQavdSIMxpMQ= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`TTLPLUS.GOV. 1800 IN RRSIG ( SOA 8 2 1800 20201101095518 20201025095518 39318 ttlplus.gov. CTE3g7vvgcc3Z9CQVA7WrJMZl8KLwegypirv2OQj90uNPDJ1X1d/lmroTaQc+8S4oK2G9rCCyL3l IJoopX5GaSTytnytI1fC9fU5w81g7a5pXGsxNLSMO3CO4MB4l7Pt7879kg8zk9piYBY9xnqeSQ2u ZyBOKf7GmgeinfVL/OE= )`
	`TTLPLUS.GOV. 1800 IN RRSIG ( SOA 8 2 1800 20201101095518 20201025095518 61821 ttlplus.gov. 8NBsEiniWMkHXF5X5Yfg/AjQ0UZ5QpRS3L2IqJAlA7a9BaFUvqHKjIoRnMrZ0i8m15NiNGLX/H8X hiHz75U0eVHQUazRibh3jOmM3JaRQYBGRKoYrEy0tbApg8EnfB+geN0KlQAQY8LfN6YnBMD9MmkP W/pXkb8a+iF4GW//2eE= )`
	RRSIG=39318 and DNSKEY=39318 verifies the SOA RRset
	RRSIG=61821 and DNSKEY=61821 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test TTLPLUS.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: