DNSSEC Analyzer - WORKPLACE.GOV

Domain Name:

Time: 2022-08-19 03:05:33 UTC, NTP stratum 16

Analyzing DNSSEC problems for WORKPLACE.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to e.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.203.230.10
	;; Response received from 192.203.230.10 (864 octets) ;; HEADER SECTION ;; id = 64780 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20220831000000 20220810000000 20326 . FJNYHZUipwrjUsDOPlE6hwUza6fRp2vwI294cL6vn5P9B5V2NT4Uf/wWoJvJlUdKPYhLSu2mfTM+ 2ufpNU9sHB+0Z1YXBj2zK8qQlT9S/BW5v4trLo1sZzK8uvl0hXKOwBsoOiNWdvqqtfqBTpz+mzWO bVSoCnNSUyIJkDyydvbJ9W2zqP+EY448BC87+BOGn+rY0yYy9dp5NYbrAOTQDF0pudHp43LHYedc AfDtjwVREPVEWYkisVpJoT3EZbF31h1Gb/+P7v84UHi6Mykq5hgQ1fV0PIMczp53moxgJxfzr1Y8 TIQnMy3xxmDxIiLXbaeUtkyBU2iMA1JJfWExyg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20220831000000 20220810000000 20326 . FJNYHZUipwrjUsDOPlE6hwUza6fRp2vwI294cL6vn5P9B5V2NT4Uf/wWoJvJlUdKPYhLSu2mfTM+ 2ufpNU9sHB+0Z1YXBj2zK8qQlT9S/BW5v4trLo1sZzK8uvl0hXKOwBsoOiNWdvqqtfqBTpz+mzWO bVSoCnNSUyIJkDyydvbJ9W2zqP+EY448BC87+BOGn+rY0yYy9dp5NYbrAOTQDF0pudHp43LHYedc AfDtjwVREPVEWYkisVpJoT3EZbF31h1Gb/+P7v84UHi6Mykq5hgQ1fV0PIMczp53moxgJxfzr1Y8 TIQnMy3xxmDxIiLXbaeUtkyBU2iMA1JJfWExyg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=20826 is now in the chain-of-trust
	Query to e.root-servers.net for WORKPLACE.GOV/A
	Received 632 bytes from 192.203.230.10
	;; Response received from 192.203.230.10 (632 octets) ;; HEADER SECTION ;; id = 28355 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; WORKPLACE.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20220831150000 20220818140000 20826 . mzCPn6Cwt1A72uAbW7d6oQuzkiy3cxEJ4FXajDHcPj4E0G/e503HlCdqQkV2K7Pw/hzpvCtIj8KM gCNiJoD/i9LhxPn024hKvpmvtpB9fZXyBDIkegy85R3zWO9ad5Txu5c/uA8z8zZVkpivQlxfe1JO 3hc80x5jUpIynZ6pX40lBLkWowMe/MPFHUvwnRpzWiRl+B9/BLB7/zYqwQHnhEIVffIZVNLF4zaI iR+BFCbkW6dCtmI40tGxG2c20bDLTcEHyPTStPSIWmQa7ZMn5boXs7fxKPpcUTUGcJ30kw093X16 MLu4yZW9Y52CEFomvUoMU2PIQWpPTpPFMI4Jtg== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to e.root-servers.net for GOV/DNSKEY
	Received 622 bytes from 192.203.230.10
	;; Response received from 192.203.230.10 (622 octets) ;; HEADER SECTION ;; id = 33749 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20220831150000 20220818140000 20826 . mzCPn6Cwt1A72uAbW7d6oQuzkiy3cxEJ4FXajDHcPj4E0G/e503HlCdqQkV2K7Pw/hzpvCtIj8KM gCNiJoD/i9LhxPn024hKvpmvtpB9fZXyBDIkegy85R3zWO9ad5Txu5c/uA8z8zZVkpivQlxfe1JO 3hc80x5jUpIynZ6pX40lBLkWowMe/MPFHUvwnRpzWiRl+B9/BLB7/zYqwQHnhEIVffIZVNLF4zaI iR+BFCbkW6dCtmI40tGxG2c20bDLTcEHyPTStPSIWmQa7ZMn5boXs7fxKPpcUTUGcJ30kw093X16 MLu4yZW9Y52CEFomvUoMU2PIQWpPTpPFMI4Jtg== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to a.root-servers.net for GOV/DS
	Received 367 bytes from 198.41.0.4
	;; Response received from 198.41.0.4 (367 octets) ;; HEADER SECTION ;; id = 6286 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20220831150000 20220818140000 20826 . mzCPn6Cwt1A72uAbW7d6oQuzkiy3cxEJ4FXajDHcPj4E0G/e503HlCdqQkV2K7Pw/hzpvCtIj8KM gCNiJoD/i9LhxPn024hKvpmvtpB9fZXyBDIkegy85R3zWO9ad5Txu5c/uA8z8zZVkpivQlxfe1JO 3hc80x5jUpIynZ6pX40lBLkWowMe/MPFHUvwnRpzWiRl+B9/BLB7/zYqwQHnhEIVffIZVNLF4zaI iR+BFCbkW6dCtmI40tGxG2c20bDLTcEHyPTStPSIWmQa7ZMn5boXs7fxKPpcUTUGcJ30kw093X16 MLu4yZW9Y52CEFomvUoMU2PIQWpPTpPFMI4Jtg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20220831150000 20220818140000 20826 . mzCPn6Cwt1A72uAbW7d6oQuzkiy3cxEJ4FXajDHcPj4E0G/e503HlCdqQkV2K7Pw/hzpvCtIj8KM gCNiJoD/i9LhxPn024hKvpmvtpB9fZXyBDIkegy85R3zWO9ad5Txu5c/uA8z8zZVkpivQlxfe1JO 3hc80x5jUpIynZ6pX40lBLkWowMe/MPFHUvwnRpzWiRl+B9/BLB7/zYqwQHnhEIVffIZVNLF4zaI iR+BFCbkW6dCtmI40tGxG2c20bDLTcEHyPTStPSIWmQa7ZMn5boXs7fxKPpcUTUGcJ30kw093X16 MLu4yZW9Y52CEFomvUoMU2PIQWpPTpPFMI4Jtg== )`
	RRSIG=20826 and DNSKEY=20826 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to b.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 209.112.123.30
	;; Response received from 209.112.123.30 (777 octets) ;; HEADER SECTION ;; id = 20171 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbSW4ocEzPbMwUkqAURZNNLAAZ9XoKgSLoPQVtMdnKBkrDoIwWxYO0nk3n/seSHxNb4I+Shq HeLM0bydpkqpMPCesMKazwq2YfQD0t0NdN4kiApakMBOO6foEa9UKHg8YbF5ZeZ2oZzIyFVlDhZB qtVeCM7SIEfxp8VR4/TWRHaoqoOnScTAoVZA9+YknqERZeQoUecTd1xXBHV0dQawxlc= ) ; Key ID = 261 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20220901190254 20220817185754 7698 gov. CAUF2dUSWIxgy0kbX/6uROO/4YSi2zqc2haaEz0UWYeZAKcoiIGLLSIcFOw8KIZpimFOAmnIvIzf uHTuMUbg1BiUv81R8c2ZHONoeY5sh3/mPa9wnpBkJotuq5UjA8pL9nUZpSb4XQHGXQGzdu7e/vfx kdkWaJCMxTQV0SQ3lPAmxGt6RK/IiLvsytFpwQKgBzTIJ+vyHtpgVeQvGRGkxeVMQ3xmq9FTr5Mv h5q3lbMZCxpUhGmugeJXs7LSzItWx75wHqHkblfW/notU2obtNmJrOptNJchlYQ8LoWMqYLscBPp /CAoSP/Yeou62I+v6D7l5C5Rv9hNzyitiZpKlQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbSW4ocEzPbMwUkqAURZNNLAAZ9XoKgSLoPQVtMdnKBkrDoIwWxYO0nk3n/seSHxNb4I+Shq HeLM0bydpkqpMPCesMKazwq2YfQD0t0NdN4kiApakMBOO6foEa9UKHg8YbF5ZeZ2oZzIyFVlDhZB qtVeCM7SIEfxp8VR4/TWRHaoqoOnScTAoVZA9+YknqERZeQoUecTd1xXBHV0dQawxlc= ) ; Key ID = 261`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20220901190254 20220817185754 7698 gov. CAUF2dUSWIxgy0kbX/6uROO/4YSi2zqc2haaEz0UWYeZAKcoiIGLLSIcFOw8KIZpimFOAmnIvIzf uHTuMUbg1BiUv81R8c2ZHONoeY5sh3/mPa9wnpBkJotuq5UjA8pL9nUZpSb4XQHGXQGzdu7e/vfx kdkWaJCMxTQV0SQ3lPAmxGt6RK/IiLvsytFpwQKgBzTIJ+vyHtpgVeQvGRGkxeVMQ3xmq9FTr5Mv h5q3lbMZCxpUhGmugeJXs7LSzItWx75wHqHkblfW/notU2obtNmJrOptNJchlYQ8LoWMqYLscBPp /CAoSP/Yeou62I+v6D7l5C5Rv9hNzyitiZpKlQ== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=261 is now in the chain-of-trust
	Query to d.gov-servers.net for WORKPLACE.GOV/A
	Received 461 bytes from 81.19.194.30
	;; Response received from 81.19.194.30 (461 octets) ;; HEADER SECTION ;; id = 60769 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; WORKPLACE.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) WORKPLACE.GOV. 86400 IN NS ceextauth1.treasury.GOV. WORKPLACE.GOV. 86400 IN NS ns1.treasury.GOV. WORKPLACE.GOV. 3600 IN DS ( 37150 8 1 222ff957e57105f23c4866ccc03152f2d29f0cc7 ) WORKPLACE.GOV. 3600 IN DS ( 37150 8 2 ef012a50d9c93eed837c6c9799e660d6df527be8f0fa0974d9848648dbf8abb8 ) WORKPLACE.GOV. 3600 IN RRSIG ( DS 8 2 3600 20220825234206 20220818234206 261 gov. sEPD2p0PLGNDQjx2MRWPCo2ZrF2KUqWeYCI2ruvACn4177ZpMXSpR/xxAUW5SUcwK0EYkKhJbgEq 4+8E2btgmovMhp8gk+OFr5Gqcn2aG2Pck5LK50A9vdVE+HD/RNCrn7VUOef1uLlUgdAKiCa6C07/ bJ7PvCKQPjyodTm+rIrEXphoaG2ClxpTpSwaDOXJ/a7V+DY9vPHfkv/RtgOCwA== ) ;; ADDITIONAL SECTION (5 records) ns1.treasury.GOV. 86400 IN A 166.123.208.249 ceextauth1.treasury.GOV. 86400 IN A 164.95.20.53 ns1.treasury.GOV. 86400 IN AAAA 2610:108:4000:100a::249 ceextauth1.treasury.GOV. 86400 IN AAAA 2610:108:3100:100a::20:53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.gov-servers.net for WORKPLACE.GOV/DNSKEY
	Received 461 bytes from 69.36.153.30
	;; Response received from 69.36.153.30 (461 octets) ;; HEADER SECTION ;; id = 32759 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; WORKPLACE.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) WORKPLACE.GOV. 86400 IN NS ceextauth1.treasury.GOV. WORKPLACE.GOV. 86400 IN NS ns1.treasury.GOV. WORKPLACE.GOV. 3600 IN DS ( 37150 8 1 222ff957e57105f23c4866ccc03152f2d29f0cc7 ) WORKPLACE.GOV. 3600 IN DS ( 37150 8 2 ef012a50d9c93eed837c6c9799e660d6df527be8f0fa0974d9848648dbf8abb8 ) WORKPLACE.GOV. 3600 IN RRSIG ( DS 8 2 3600 20220825234206 20220818234206 261 gov. sEPD2p0PLGNDQjx2MRWPCo2ZrF2KUqWeYCI2ruvACn4177ZpMXSpR/xxAUW5SUcwK0EYkKhJbgEq 4+8E2btgmovMhp8gk+OFr5Gqcn2aG2Pck5LK50A9vdVE+HD/RNCrn7VUOef1uLlUgdAKiCa6C07/ bJ7PvCKQPjyodTm+rIrEXphoaG2ClxpTpSwaDOXJ/a7V+DY9vPHfkv/RtgOCwA== ) ;; ADDITIONAL SECTION (5 records) ns1.treasury.GOV. 86400 IN A 166.123.208.249 ceextauth1.treasury.GOV. 86400 IN A 164.95.20.53 ns1.treasury.GOV. 86400 IN AAAA 2610:108:4000:100a::249 ceextauth1.treasury.GOV. 86400 IN AAAA 2610:108:3100:100a::20:53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone WORKPLACE.GOV

WORKPLACE.GOV

	Checking DS between GOV and WORKPLACE.GOV
	Query to b.gov-servers.net for WORKPLACE.GOV/DS
	Received 321 bytes from 209.112.123.30
	;; Response received from 209.112.123.30 (321 octets) ;; HEADER SECTION ;; id = 26992 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; WORKPLACE.GOV. IN DS ;; ANSWER SECTION (3 records) WORKPLACE.GOV. 3600 IN DS ( 37150 8 1 222ff957e57105f23c4866ccc03152f2d29f0cc7 ) WORKPLACE.GOV. 3600 IN DS ( 37150 8 2 ef012a50d9c93eed837c6c9799e660d6df527be8f0fa0974d9848648dbf8abb8 ) WORKPLACE.GOV. 3600 IN RRSIG ( DS 8 2 3600 20220825234206 20220818234206 261 gov. sEPD2p0PLGNDQjx2MRWPCo2ZrF2KUqWeYCI2ruvACn4177ZpMXSpR/xxAUW5SUcwK0EYkKhJbgEq 4+8E2btgmovMhp8gk+OFr5Gqcn2aG2Pck5LK50A9vdVE+HD/RNCrn7VUOef1uLlUgdAKiCa6C07/ bJ7PvCKQPjyodTm+rIrEXphoaG2ClxpTpSwaDOXJ/a7V+DY9vPHfkv/RtgOCwA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for WORKPLACE.GOV in the GOV zone
	DS=37150/SHA-1 has algorithm RSASHA256
	DS=37150/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`WORKPLACE.GOV. 3600 IN RRSIG ( DS 8 2 3600 20220825234206 20220818234206 261 gov. sEPD2p0PLGNDQjx2MRWPCo2ZrF2KUqWeYCI2ruvACn4177ZpMXSpR/xxAUW5SUcwK0EYkKhJbgEq 4+8E2btgmovMhp8gk+OFr5Gqcn2aG2Pck5LK50A9vdVE+HD/RNCrn7VUOef1uLlUgdAKiCa6C07/ bJ7PvCKQPjyodTm+rIrEXphoaG2ClxpTpSwaDOXJ/a7V+DY9vPHfkv/RtgOCwA== )`
	RRSIG=261 and DNSKEY=261 verifies the DS RRset
	DS=37150/SHA-1 is now in the chain-of-trust
	`WORKPLACE.GOV. 3600 IN DS ( 37150 8 1 222ff957e57105f23c4866ccc03152f2d29f0cc7 )`
	`WORKPLACE.GOV. 3600 IN DS ( 37150 8 2 ef012a50d9c93eed837c6c9799e660d6df527be8f0fa0974d9848648dbf8abb8 )`
	Query to ceextauth1.treasury.GOV for WORKPLACE.GOV/DNSKEY
	Received 684 bytes from 164.95.20.53
	;; Response received from 164.95.20.53 (684 octets) ;; HEADER SECTION ;; id = 16367 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; WORKPLACE.GOV. IN DNSKEY ;; ANSWER SECTION (4 records) WORKPLACE.GOV. 3600 IN DNSKEY ( 257 3 8 AwEAAcY1Ccsm8u/+wG5kM9ZkGPb9damee3RFdL3yTg6Ty+WuBwZNxQQ07+VOX1w75oDc6Ghm5chd rFfX2NS7W58FNPBB+y0n2IasoOcY6xfIJJ6vfvDeueTNCnFOO1Tbt4E3SQFMpbkR1NJ9Y1J5aHzz DlkGX4eMkrtd+l+2WE8Dx0UB ) ; Key ID = 37150 WORKPLACE.GOV. 3600 IN DNSKEY ( 256 3 8 AwEAAcRE6plxk/MM1O2jpH9RybNRCLz+LGZ03rl5AjITYHXe5ObJY6mlYj4QESsAffeoRpEuhpQR JJFJdSjYBZzN4Ki7OXcLNUlxMGl6O6jXiOJmHWighpb+6E73VmxaBJT0uSQQrHkpPqf5H/0QK+PO EmAXU80O9U185nLq7pR6hU15 ) ; Key ID = 35556 WORKPLACE.GOV. 3600 IN RRSIG ( DNSKEY 8 2 3600 20220825102515 20220818092515 37150 workplace.gov. TmmzCJZoqo8oAOppOXwkO7Rt2nGIqLaEItajpnr9OjuLlDSZlno/gNKei26wxRaqqMs1oNpJdvXc 95GAUJISufTx6HlcpAyq648d4empKSpp0NWVwE1+vel8dAFebnuBOEHZtCAauzS7ZDML/DGvzmfY r95lYOWZjxyYtzm33rQ= ) WORKPLACE.GOV. 3600 IN RRSIG ( DNSKEY 8 2 3600 20220825102515 20220818092515 35556 workplace.gov. WCnRJKf2rwxzV8ZwjoRQsIGLgeQwKyn7TZsMa5pmmhDWxN2ifJkrxEPjGN+ly+EgucvE8ENnZ9o2 qFJN+41avN1lp0P5F9cxtOhOLwJ4tgFc9oyJye1yiKaA15aMxqll+sgcXx4Z9SVyq1a0pdH09xsm PChbswIJiSgSKSfyEUI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for WORKPLACE.GOV
	`WORKPLACE.GOV. 3600 IN DNSKEY ( 257 3 8 AwEAAcY1Ccsm8u/+wG5kM9ZkGPb9damee3RFdL3yTg6Ty+WuBwZNxQQ07+VOX1w75oDc6Ghm5chd rFfX2NS7W58FNPBB+y0n2IasoOcY6xfIJJ6vfvDeueTNCnFOO1Tbt4E3SQFMpbkR1NJ9Y1J5aHzz DlkGX4eMkrtd+l+2WE8Dx0UB ) ; Key ID = 37150`
	`WORKPLACE.GOV. 3600 IN DNSKEY ( 256 3 8 AwEAAcRE6plxk/MM1O2jpH9RybNRCLz+LGZ03rl5AjITYHXe5ObJY6mlYj4QESsAffeoRpEuhpQR JJFJdSjYBZzN4Ki7OXcLNUlxMGl6O6jXiOJmHWighpb+6E73VmxaBJT0uSQQrHkpPqf5H/0QK+PO EmAXU80O9U185nLq7pR6hU15 ) ; Key ID = 35556`
	DNSKEY=37150/SEP is now in the chain-of-trust
	DS=37150/SHA-1 verifies DNSKEY=37150/SEP
	DS=37150/SHA-256 verifies DNSKEY=37150/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`WORKPLACE.GOV. 3600 IN RRSIG ( DNSKEY 8 2 3600 20220825102515 20220818092515 37150 workplace.gov. TmmzCJZoqo8oAOppOXwkO7Rt2nGIqLaEItajpnr9OjuLlDSZlno/gNKei26wxRaqqMs1oNpJdvXc 95GAUJISufTx6HlcpAyq648d4empKSpp0NWVwE1+vel8dAFebnuBOEHZtCAauzS7ZDML/DGvzmfY r95lYOWZjxyYtzm33rQ= )`
	`WORKPLACE.GOV. 3600 IN RRSIG ( DNSKEY 8 2 3600 20220825102515 20220818092515 35556 workplace.gov. WCnRJKf2rwxzV8ZwjoRQsIGLgeQwKyn7TZsMa5pmmhDWxN2ifJkrxEPjGN+ly+EgucvE8ENnZ9o2 qFJN+41avN1lp0P5F9cxtOhOLwJ4tgFc9oyJye1yiKaA15aMxqll+sgcXx4Z9SVyq1a0pdH09xsm PChbswIJiSgSKSfyEUI= )`
	RRSIG=37150 and DNSKEY=37150/SEP verifies the DNSKEY RRset
	RRSIG=35556 and DNSKEY=35556 verifies the DNSKEY RRset
	DNSKEY=35556 is now in the chain-of-trust
	Query to ceextauth1.treasury.GOV for WORKPLACE.GOV/A
	Received 544 bytes from 164.95.20.53
	;; Response received from 164.95.20.53 (544 octets) ;; HEADER SECTION ;; id = 5819 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; WORKPLACE.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) WORKPLACE.GOV. 900 IN SOA ( ns1.treasury.GOV. ecb-hosting.fiscal.treasury.GOV. 201013877 ;serial 3600 ;refresh 900 ;retry 1209600 ;expire 900 ;minimum ) WORKPLACE.GOV. 900 IN RRSIG ( SOA 8 2 900 20220823033414 20220816023414 35556 workplace.gov. sk2zJBtBdG5fnk30GBImNopT2FsV/9TAQ3d8izniU2QNJOwrPIovHKw8SjZTsfh0gy1b8rdNUzDV sXhrZ2CN/73lhPd68yJeLdTFkoccVkoT3JtEVytxu5qatFRV4c6dDVFHUZwm/VcqhzjrRvIga57N n02i5p4Et8SHy9eT4A0= ) i5r7tsgfh2i1qm9ntt36afvkbg2k5aa8.WORKPLACE.GOV. 900 IN NSEC3 ( 1 0 1 9d323eac580afc7d i5r7tsgfh2i1qm9ntt36afvkbg2k5aa9 NS SOA RRSIG DNSKEY NSEC3PARAM ) i5r7tsgfh2i1qm9ntt36afvkbg2k5aa8.WORKPLACE.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20220821182826 20220814172826 35556 workplace.gov. f5UmptSakRNzg6JuVdQ2hqTazFM5Ez9idrVyF0Ny66HwHu7A6mKjm7Z00rbXma96xqtdYpNWBAJ9 W2xIaEyjAyDj9RI+rdKBrU6LY9l7afgA9hdim4EndKpB1TXWM27x9kyacpXlnXoXHTcP+zVqDKXY a/hJud9evvbyX9BpOWA= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ceextauth1.treasury.GOV is authoritative for WORKPLACE.GOV
	Found RRSIG signed by workplace.gov zone
	Query to ns1.treasury.GOV for WORKPLACE.GOV/SOA
	Received 1271 bytes from 166.123.208.249
	;; Response received from 166.123.208.249 (1271 octets) ;; HEADER SECTION ;; id = 13849 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; WORKPLACE.GOV. IN SOA ;; ANSWER SECTION (2 records) WORKPLACE.GOV. 900 IN SOA ( ns1.treasury.GOV. ecb-hosting.fiscal.treasury.GOV. 201013877 ;serial 3600 ;refresh 900 ;retry 1209600 ;expire 900 ;minimum ) WORKPLACE.GOV. 900 IN RRSIG ( SOA 8 2 900 20220824184417 20220817174417 35556 workplace.gov. fzZWo72AepRtazgiH3yf4YlsxwnoWxC1iytodavjx8sXGbSf/Gip9ywRbx1Z5yJyxAV+xJpFnRsU dCdKPuYLij0VN57Ae55Y9CH66MSUtaCGMFdSqNi1FSRlktc4tGQbPkavbM89pIwL7TmgQbOoydzX /YTVJsX7czJFmD7NFvc= ) ;; AUTHORITY SECTION (3 records) WORKPLACE.GOV. 900 IN NS ceextauth1.treasury.GOV. WORKPLACE.GOV. 900 IN NS ns1.treasury.GOV. WORKPLACE.GOV. 900 IN RRSIG ( NS 8 2 900 20220824184249 20220817174249 35556 workplace.gov. hiC+PLSQkNiY6/R3NLmh4Za0wAfG0cgSGvY983jxpTEB66epW4ZT6HtyfjlgQbbaU7p+EXffU3l9 8sD3FXbsO9xp50mHCbVhe5RuKN51/k9d7Ts+zdmFyqPE07SS8cpHkeF4/MFbPZTmXkZdnGFTp7na BK6qk5LVu3ny6mCKpRs= ) ;; ADDITIONAL SECTION (9 records) ns1.treasury.GOV. 900 IN A 166.123.208.249 ns1.treasury.GOV. 900 IN RRSIG ( A 7 3 900 20220824182439 20220817172439 3599 treasury.gov. acVkjnopVTLcj3q7j12pgVqRGH+AmWH0D7obTIQjtGHyHJgewQ1lwDBEXxxUNwH38nwOV8c+s8w3 SVMfhldjGuriu2PcIUkfRX05soH3Sg+a1xYzQWaQ2z/3cqkzVE3idjg5xCyJKHr1A4M0pS0xChtA pVQOaEEoN2MO3+p2A+k= ) ceextauth1.treasury.GOV. 900 IN A 164.95.20.53 ceextauth1.treasury.GOV. 900 IN RRSIG ( A 7 3 900 20220824182439 20220817172439 3599 treasury.gov. kxpMQwy/KEHyhC0HBTnBVJxpbs9Lg6cCh+GDLDJGG5X8IwqG7nIdK6Ort/xsEuVgzwOGrcSAqHoV UAjobo0MfMaO0+H9GFLC+6Ty/c0HeJMqtgFpRPfFvnmaQQqEugluYOygcRvFHMo45AcNvpu0PkoS S4tzvDZaIPvIFoa2PRE= ) ns1.treasury.GOV. 900 IN AAAA 2610:108:4000:100a::249 ns1.treasury.GOV. 900 IN RRSIG ( AAAA 7 3 900 20220824182439 20220817172439 3599 treasury.gov. W8O3CpQuGxr9O6PyjIBxLKeK1pBP0TZdrLlZciRCmr3A20S3VAUFDoXbUv3UT+pdxiEYajtZDQPJ HDdkDEG4kpysYgogPMOT44wa6ezgXktlALoUjrXkNJyne5mVCRcMLQD8vF7Y5OpFWUE8x2wzVKYD 3siqKzWEhaKkgwho7eU= ) ceextauth1.treasury.GOV. 900 IN AAAA 2610:108:3100:100a::20:53 ceextauth1.treasury.GOV. 900 IN RRSIG ( AAAA 7 3 900 20220824182439 20220817172439 3599 treasury.gov. Z+86pJjZ6IMlWhGm7II8rmASGFVpzO2EOx1cb0q0sqR4nEbcLkaUtPMellnm7KDOBrtEoNjtcMXu T8x9PomHB4OEFNKfryCy4mcgJeQxgKYPUddAUSGBu4OFIslb91+hovkXDdP5XnylgQhXWOgi3TRV DcKQM6S+ZEZH8l33/M0= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ceextauth1.treasury.GOV for WORKPLACE.GOV/A
	Received 544 bytes from 164.95.20.53
	;; Response received from 164.95.20.53 (544 octets) ;; HEADER SECTION ;; id = 28089 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; WORKPLACE.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) WORKPLACE.GOV. 900 IN SOA ( ns1.treasury.GOV. ecb-hosting.fiscal.treasury.GOV. 201013877 ;serial 3600 ;refresh 900 ;retry 1209600 ;expire 900 ;minimum ) WORKPLACE.GOV. 900 IN RRSIG ( SOA 8 2 900 20220822220237 20220815210237 35556 workplace.gov. t2heOOJlbDcfw9NvOoRnZX/fgIl2slrL/PvvblPNlTtLCg2EbEP37gbC/RG3Bv+KD/3CcpRlUrjl hF1K84/dnItgfW9TvZnoEkmILeYgIvELmMv9xgJAzRL4b+fdG3AyJac5I7X+RmahalBklp6MAr1Z Eq6lp9pFm3rRW7A+u9c= ) 3d21b8rouorg405prjbj77lqg6pplc7g.WORKPLACE.GOV. 900 IN NSEC3 ( 1 0 1 c9cec202ede3642a 3d21b8rouorg405prjbj77lqg6pplc7h NS SOA RRSIG DNSKEY NSEC3PARAM ) 3d21b8rouorg405prjbj77lqg6pplc7g.WORKPLACE.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20220824135632 20220817125632 35556 workplace.gov. GQCGX/uy+x1XCWOD00sTknLbShImfGNBRETbi6BfFFfj6bjE7kNSDpJdy6UyosYZ9cMqTwJzesz/ orLJ+J1SscYqQ5OTtyfMe5RIYFy/TektFhjc9XdO2vu+sQBa4KFLe7gs90710hsDLe2yWia4rhYM Ycodnp9sL8gSMij0DuM= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`WORKPLACE.GOV. 900 IN RRSIG ( SOA 8 2 900 20220823033414 20220816023414 35556 workplace.gov. sk2zJBtBdG5fnk30GBImNopT2FsV/9TAQ3d8izniU2QNJOwrPIovHKw8SjZTsfh0gy1b8rdNUzDV sXhrZ2CN/73lhPd68yJeLdTFkoccVkoT3JtEVytxu5qatFRV4c6dDVFHUZwm/VcqhzjrRvIga57N n02i5p4Et8SHy9eT4A0= )`
	RRSIG=35556 and DNSKEY=35556 verifies the SOA RRset

WORKPLACE.GOV

	Query to ns1.treasury.GOV for WORKPLACE.GOV/A
	Received 544 bytes from 166.123.208.249
	;; Response received from 166.123.208.249 (544 octets) ;; HEADER SECTION ;; id = 35360 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; WORKPLACE.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) WORKPLACE.GOV. 900 IN SOA ( ns1.treasury.GOV. ecb-hosting.fiscal.treasury.GOV. 201013877 ;serial 3600 ;refresh 900 ;retry 1209600 ;expire 900 ;minimum ) WORKPLACE.GOV. 900 IN RRSIG ( SOA 8 2 900 20220824183149 20220817173149 35556 workplace.gov. dhXwn2ANeYxw22tIAHuHhD2TVPN0VZ76RtcET1m8oe8v6P12MR/84tSr+hL/hEfMpwKR/QpVfRjg PcjkUodX72QsClob6ZCzMAhBsDKJZlK1T6L2tN0uJLvXoOSYQjY5+WXShEZHJHJq5D6MyuP6CXdT AZ1LKqb6rwa9n0zP9hc= ) doafl57uhqm50vqf714s2e4mtuogkcdl.WORKPLACE.GOV. 900 IN NSEC3 ( 1 0 1 b2c48b91088df61d doafl57uhqm50vqf714s2e4mtuogkcdm NS SOA RRSIG DNSKEY NSEC3PARAM ) doafl57uhqm50vqf714s2e4mtuogkcdl.WORKPLACE.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20220824095924 20220817085924 35556 workplace.gov. ahYHH60JuUbsobP6yp/mnvQx2MGqTL0aIGfiPnMdKaye3vD/9wxw3iJ7p9MndeHpWNRtVFfZVtmO n29H2trg21TI0pqvuEe+cg9zm87EEfMzlO6b/gjqlVUrow8a3jfDqVbG3jK5fJjpunozVdigdSI6 BcIKd/xFM0J1uUrkyos= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns1.treasury.GOV is authoritative for WORKPLACE.GOV
	Found RRSIG signed by workplace.gov zone
	Query to ns1.treasury.GOV for WORKPLACE.GOV/A
	Received 544 bytes from 166.123.208.249
	;; Response received from 166.123.208.249 (544 octets) ;; HEADER SECTION ;; id = 31505 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; WORKPLACE.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) WORKPLACE.GOV. 900 IN SOA ( ns1.treasury.GOV. ecb-hosting.fiscal.treasury.GOV. 201013877 ;serial 3600 ;refresh 900 ;retry 1209600 ;expire 900 ;minimum ) WORKPLACE.GOV. 900 IN RRSIG ( SOA 8 2 900 20220824184417 20220817174417 35556 workplace.gov. fzZWo72AepRtazgiH3yf4YlsxwnoWxC1iytodavjx8sXGbSf/Gip9ywRbx1Z5yJyxAV+xJpFnRsU dCdKPuYLij0VN57Ae55Y9CH66MSUtaCGMFdSqNi1FSRlktc4tGQbPkavbM89pIwL7TmgQbOoydzX /YTVJsX7czJFmD7NFvc= ) t0vbboq1hrf0c0iud4jm1l9bpg3f095r.WORKPLACE.GOV. 900 IN NSEC3 ( 1 0 1 53791d714c601300 t0vbboq1hrf0c0iud4jm1l9bpg3f095s NS SOA RRSIG DNSKEY NSEC3PARAM ) t0vbboq1hrf0c0iud4jm1l9bpg3f095r.WORKPLACE.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20220822214038 20220815204038 35556 workplace.gov. kelrqm7nRkf7n3bEltE3PR52ozYjElEoIPUZs2UYYRDpZhpAghbcKKommA7asVqLRG4sz/mvkmrA koP44kHEElrfu29NBfF0bgpwT4f+MNnt1YEBRgXr8n8+6jETvKCXgjFaoZISUXAW1cWGjYj3+Aol s3/eceklkxjC30f7qLk= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`WORKPLACE.GOV. 900 IN RRSIG ( SOA 8 2 900 20220824183149 20220817173149 35556 workplace.gov. dhXwn2ANeYxw22tIAHuHhD2TVPN0VZ76RtcET1m8oe8v6P12MR/84tSr+hL/hEfMpwKR/QpVfRjg PcjkUodX72QsClob6ZCzMAhBsDKJZlK1T6L2tN0uJLvXoOSYQjY5+WXShEZHJHJq5D6MyuP6CXdT AZ1LKqb6rwa9n0zP9hc= )`
	RRSIG=35556 and DNSKEY=35556 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test WORKPLACE.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: