DNSSEC Debugger

Domain Name:

Time: 2024-12-08 19:35:54 UTC

Analyzing DNSSEC problems for bpa.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to i.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 865 octets ;; HEADER SECTION ;; id = 62319 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAc0SunbHdS0KFEyZbYII/+tzsrNzIwurKxmJA+0fhAYlTPA/5LrMGkGEqvvufzM0w/CaVtdm 5eWkZYQcsoSKT5bycx0C4jxnLEb3ZiZUQSqu1rWcKGF1fj/GyDWLkOu7a5h3el+gPmglj/4l4V31 ugNYfqYq84vCB+3D6Sodrd+85KyonnzWJ8cS7aZ57x0d0sGqsAKA+6tRnIXjVNVe7Ro5xJuz8IR7 rOxdzfuRLriN+Z00EL3U5E7s9SISU/hDh7Q7N70W1mLMc1o2+tCRGjEWrw4wmCWMzc1kegbLES/d UOWFvPjJz0+AEeWDhd2GqtXk02BzAhdfeIAEIv68FTs= ) ; keytag 61050 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20241221000000 20241130000000 20326 . Afur/CKj8hp6NpFXod3vI0DPq0Mfb6dXrdNvnqjVxElNIogO2Tnj660bCYKD/39HjMAGn1JhfXN1 8A1bSvEJO/qkfErGf0VtlhgsdjPpzlOufhu/hIkA1TTanRzQNa9rYvPcwdwHgVTA3C4t13wiRMwR spG1W22Mcw9+hnkH/MAcXcbD2hxepUTxxjM7JvoZPl6om973u1rvVnk1RIEUe6wR51OhYNoLe/mj sy5BjM/uDXnHYTYLdau9gYElsvHV9Dogs0Alvgf6kK+z21LeOjjOdziP6xgF0vbNPVR8ovJbvw14 NEwAY4LOaa2XXocwqOjr8URoMrNa/zKP66Othw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAc0SunbHdS0KFEyZbYII/+tzsrNzIwurKxmJA+0fhAYlTPA/5LrMGkGEqvvufzM0w/CaVtdm 5eWkZYQcsoSKT5bycx0C4jxnLEb3ZiZUQSqu1rWcKGF1fj/GyDWLkOu7a5h3el+gPmglj/4l4V31 ugNYfqYq84vCB+3D6Sodrd+85KyonnzWJ8cS7aZ57x0d0sGqsAKA+6tRnIXjVNVe7Ro5xJuz8IR7 rOxdzfuRLriN+Z00EL3U5E7s9SISU/hDh7Q7N70W1mLMc1o2+tCRGjEWrw4wmCWMzc1kegbLES/d UOWFvPjJz0+AEeWDhd2GqtXk02BzAhdfeIAEIv68FTs= ) ; keytag 61050`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20241221000000 20241130000000 20326 . Afur/CKj8hp6NpFXod3vI0DPq0Mfb6dXrdNvnqjVxElNIogO2Tnj660bCYKD/39HjMAGn1JhfXN1 8A1bSvEJO/qkfErGf0VtlhgsdjPpzlOufhu/hIkA1TTanRzQNa9rYvPcwdwHgVTA3C4t13wiRMwR spG1W22Mcw9+hnkH/MAcXcbD2hxepUTxxjM7JvoZPl6om973u1rvVnk1RIEUe6wR51OhYNoLe/mj sy5BjM/uDXnHYTYLdau9gYElsvHV9Dogs0Alvgf6kK+z21LeOjjOdziP6xgF0vbNPVR8ovJbvw14 NEwAY4LOaa2XXocwqOjr8URoMrNa/zKP66Othw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=61050 is now in the chain-of-trust
	Query to d.root-servers.net for bpa.gov/A
	Received 614 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 614 octets ;; HEADER SECTION ;; id = 29779 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20241221170000 20241208160000 61050 . DnHgh7grWt/v7KgfLk+MSfSlSO4VtNbK2JpDOl5nlPc0k3pEPmCRtem2ItrDYoPXMWhR92AE/bUP ZaMGV3vXCR+HHDxy2Lwk4Fhmx+YfmeE0Vjbil+5Ux3aiWmO8g/C/7hmGNeDy2z0AdH1Rcy1eadas b3b5LOBBoKuehKq5Hd8YLTRaJ3TBq+jYdVhfkXvv8SHkndCXjLC2+ejeEAMmuTxC0fxnn1WaeXGY zUZ1gyvP3dRBtJ5yG7vBY15pVG5XYe1jkioKngtB2DyyRAsAhMgGFKK2dI2WZqr+Kd/NyEuJrtTu OAmQmfiHXMObSFHLNiSiHjEo/mv5rjuSbg7d/g== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to b.root-servers.net for gov/DNSKEY
	Received 610 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 610 octets ;; HEADER SECTION ;; id = 56969 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20241221170000 20241208160000 61050 . DnHgh7grWt/v7KgfLk+MSfSlSO4VtNbK2JpDOl5nlPc0k3pEPmCRtem2ItrDYoPXMWhR92AE/bUP ZaMGV3vXCR+HHDxy2Lwk4Fhmx+YfmeE0Vjbil+5Ux3aiWmO8g/C/7hmGNeDy2z0AdH1Rcy1eadas b3b5LOBBoKuehKq5Hd8YLTRaJ3TBq+jYdVhfkXvv8SHkndCXjLC2+ejeEAMmuTxC0fxnn1WaeXGY zUZ1gyvP3dRBtJ5yG7vBY15pVG5XYe1jkioKngtB2DyyRAsAhMgGFKK2dI2WZqr+Kd/NyEuJrtTu OAmQmfiHXMObSFHLNiSiHjEo/mv5rjuSbg7d/g== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN A 199.33.231.1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN A 199.33.232.1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN A 199.33.233.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to k.root-servers.net for gov/DS
	Received 367 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 367 octets ;; HEADER SECTION ;; id = 54554 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20241221170000 20241208160000 61050 . DnHgh7grWt/v7KgfLk+MSfSlSO4VtNbK2JpDOl5nlPc0k3pEPmCRtem2ItrDYoPXMWhR92AE/bUP ZaMGV3vXCR+HHDxy2Lwk4Fhmx+YfmeE0Vjbil+5Ux3aiWmO8g/C/7hmGNeDy2z0AdH1Rcy1eadas b3b5LOBBoKuehKq5Hd8YLTRaJ3TBq+jYdVhfkXvv8SHkndCXjLC2+ejeEAMmuTxC0fxnn1WaeXGY zUZ1gyvP3dRBtJ5yG7vBY15pVG5XYe1jkioKngtB2DyyRAsAhMgGFKK2dI2WZqr+Kd/NyEuJrtTu OAmQmfiHXMObSFHLNiSiHjEo/mv5rjuSbg7d/g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20241221170000 20241208160000 61050 . DnHgh7grWt/v7KgfLk+MSfSlSO4VtNbK2JpDOl5nlPc0k3pEPmCRtem2ItrDYoPXMWhR92AE/bUP ZaMGV3vXCR+HHDxy2Lwk4Fhmx+YfmeE0Vjbil+5Ux3aiWmO8g/C/7hmGNeDy2z0AdH1Rcy1eadas b3b5LOBBoKuehKq5Hd8YLTRaJ3TBq+jYdVhfkXvv8SHkndCXjLC2+ejeEAMmuTxC0fxnn1WaeXGY zUZ1gyvP3dRBtJ5yG7vBY15pVG5XYe1jkioKngtB2DyyRAsAhMgGFKK2dI2WZqr+Kd/NyEuJrtTu OAmQmfiHXMObSFHLNiSiHjEo/mv5rjuSbg7d/g== )`
	RRSIG=61050 and DNSKEY=61050 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to b.ns.gov for gov/DNSKEY
	Received 291 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 291 octets ;; HEADER SECTION ;; id = 17791 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20250117110541 20241117110541 2536 gov. MInVr90HZ2BfgHpBap4wOVV/pv9rvEdbJmpCxp8tyxgY7hBmR0Lxwc44hD8EWViyTG8QMlHhQtUY t1QdHShDCQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20250117110541 20241117110541 2536 gov. MInVr90HZ2BfgHpBap4wOVV/pv9rvEdbJmpCxp8tyxgY7hBmR0Lxwc44hD8EWViyTG8QMlHhQtUY t1QdHShDCQ== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to d.ns.gov for bpa.gov/A
	Received 299 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 299 octets ;; HEADER SECTION ;; id = 34064 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) bpa.gov. 10800 IN NS ns1.bpa.gov. bpa.gov. 10800 IN NS ns2.bpa.gov. bpa.gov. 3600 IN DS ( 29440 8 2 afb48fdefd7829c8f5ab749b33d153f1407d6ea1f356e1c8d7fccfc4ae407db3 ) bpa.gov. 3600 IN DS ( 49754 8 2 4c8771fa2d0364aa76eaadecde082c12eab45843652488382c66799f3a675513 ) bpa.gov. 3600 IN RRSIG ( DS 13 2 3600 20241209203555 20241207183555 35496 gov. msLVUMN39CGsq46w6r8GLszmbf626WW6vxQ/gP4t2YOKcgvf4HiBoAdo/RrEqNtWTIlExSW48xHd SyYDEQurRw== ) ;; ADDITIONAL SECTION (3 records) ns1.bpa.gov. 3600 IN A 170.160.36.10 ns2.bpa.gov. 3600 IN A 170.160.100.10 ;; { "EDNS-VERSION": 0 }
	Query to d.ns.gov for bpa.gov/DNSKEY
	Received 299 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 299 octets ;; HEADER SECTION ;; id = 4278 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) bpa.gov. 10800 IN NS ns1.bpa.gov. bpa.gov. 10800 IN NS ns2.bpa.gov. bpa.gov. 3600 IN DS ( 29440 8 2 afb48fdefd7829c8f5ab749b33d153f1407d6ea1f356e1c8d7fccfc4ae407db3 ) bpa.gov. 3600 IN DS ( 49754 8 2 4c8771fa2d0364aa76eaadecde082c12eab45843652488382c66799f3a675513 ) bpa.gov. 3600 IN RRSIG ( DS 13 2 3600 20241209203555 20241207183555 35496 gov. TnxsD5TNP6SlunT3bE2g2f/BFpr/nP58TwaB2SJuDtITCl7/4LmeW4gTuEiSDaN705rvIQup8HBr bckSAHJtjA== ) ;; ADDITIONAL SECTION (3 records) ns1.bpa.gov. 3600 IN A 170.160.36.10 ns2.bpa.gov. 3600 IN A 170.160.100.10 ;; { "EDNS-VERSION": 0 }
	Found child zone bpa.gov

bpa.gov

	Checking DS between gov and bpa.gov
	Query to a.ns.gov for bpa.gov/DS
	Received 231 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 231 octets ;; HEADER SECTION ;; id = 20343 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN DS ;; ANSWER SECTION (3 records) bpa.gov. 3600 IN DS ( 29440 8 2 afb48fdefd7829c8f5ab749b33d153f1407d6ea1f356e1c8d7fccfc4ae407db3 ) bpa.gov. 3600 IN DS ( 49754 8 2 4c8771fa2d0364aa76eaadecde082c12eab45843652488382c66799f3a675513 ) bpa.gov. 3600 IN RRSIG ( DS 13 2 3600 20241209203555 20241207183555 35496 gov. opoRf/W3EaUbmC+rZYBoW3yARWKqcqunEj3Nz1K14NIlTk3a8CM3UolwPfp/MRwXTErIhI/NSzTj PrUM+2Ra8A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for bpa.gov in the gov zone
	DS=29440/SHA-256 has algorithm RSASHA256
	DS=49754/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`bpa.gov. 3600 IN RRSIG ( DS 13 2 3600 20241209203555 20241207183555 35496 gov. opoRf/W3EaUbmC+rZYBoW3yARWKqcqunEj3Nz1K14NIlTk3a8CM3UolwPfp/MRwXTErIhI/NSzTj PrUM+2Ra8A== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=29440/SHA-256 is now in the chain-of-trust
	DS=49754/SHA-256 is now in the chain-of-trust
	`bpa.gov. 3600 IN DS ( 29440 8 2 afb48fdefd7829c8f5ab749b33d153f1407d6ea1f356e1c8d7fccfc4ae407db3 )`
	`bpa.gov. 3600 IN DS ( 49754 8 2 4c8771fa2d0364aa76eaadecde082c12eab45843652488382c66799f3a675513 )`
	Query to ns1.bpa.gov for bpa.gov/DNSKEY
	Received 2320 bytes from 170.160.36.10
	;; Response received from [170.160.36.10] 2320 octets ;; HEADER SECTION ;; id = 41110 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 8 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN DNSKEY ;; ANSWER SECTION (8 records) bpa.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAZuYG3zrVRP/LI3E03PBN1zLQxlJhPqdoms/k1mubkkus9TwI6T5CmUgBcY5Xxc9czahnsv2 4vMSYmWycJZZTOcy+R8mGWSQ03TL4I3yNaFlvBXYM/p5YdtEMxjgkmbAbQ3n9G2mNvZ5K6xeYz8Q TB11JmgPjp2DVNXR+Zx6N6sCtpClcEj5IF8U5L46bFd4tZVHdHKXPWea3IuNnU6n9WmQe4ZXNQj6 8J428n7J1wugDOIN897pCZmDYGeSCxnqfB0Jh3Rr0gCc837Q2ww7hxlRGtADN7be7KdnfgSPbQIx 1n3TJ1xwDcTuM0y/HwQs7SjhBY6qobni5ZU1U1e0KGs= ) ; keytag 59425 bpa.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAY2NFm1RivYacYPdR69ULgljbux5s+ccYzTMA0bWBUrbCbTfb1knEWrZeUQJ9VfbRSkivE9l WF+TGBbmTsEjXJv1B7uNJDj/QKXGMfFqseRaCbMyigJbUsfTMeEYQTqFg21z/XugXFUvx76QfBWN ZM2MCftX3CQRBB1oPgdT9yrXPdKe39umThYGi+xdOD3HdlYoBbewja9xArwuGxMR3hymk0t+XLfD VrgIr+BCX7IU9SFPXj8t5jfnRZ5YTG0oiKa5qfAePJfZyy/rky2qowTEQzAMSMfUmuN8Lv7PCg3y CrKIMWcux6EIiH03DqUKCZGZUr1e7l4At9B85r+ZVc0= ) ; keytag 44590 bpa.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAcCanpnvYUKS/IhoBzBfXZNDe+ANzXzUmf6F+loKXbPoQwxck1jk2TZ6Gn5/GTFb2yhZcK8+ q54CcdeaZ1Ol1dImO0wao8jwJVyfTBuUM6eQoEbhfYrQPlJgJJf6RJcQn23zTi6XPZdU4VU3lP1b EWbm5Muem94tNWG4etSZn4c/vQN+1JYFLYWhiBHM/vW2hBQxRzqzlFdyu7dtnJ29iHx1IxXK9YMl Vyb+kuGMkJ6xrVhMtoR/XQITebPO1ejtqycoPwWrqVcY7ncuWisKi1LuUvzpVPcMGzqfkYrn/mfZ b0AieLW62hfQ2TYVC/FtFDDNTuoWD1D6JHOx1joLJcE= ) ; keytag 29440 bpa.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAcOcCF8kWXibbaTkQ43q2vnJOr2m6wmKdZuS+vSnu9wmFqAH3zLNg0F3tO1bTV4y+yV6AyDt eOvroRGR4+rbISfLVPINnkTzOJtYazoCQrXERWSvot6A0e7/AS66yXMZpZWh6UF6vpe+LXVqVlFS 3c+ctwnBCLiCsMSfAAjjOCm4GSOYEYL5dvzS0hI7jgavtobuRUJbTTRV8VTRc6lm8QMtRboDo84n ygvEvxrZRuGgAXbFQy8H9H8PdnEMd1TupmkkXWQMGhwDRBZPHmK38i6IY/KeAZZjxLA56Ae1REpz 94Qvs4dQtwJ31UTH9oY/68fVzEP2VuaWRsd9ynGohvM= ) ; keytag 49754 bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20241212022322 20241205012322 59425 bpa.gov. BhaWZSoxjFr299nObqd4hLpj/cYyxXhPUh2Sb4Bzy6+KTwI5bKRShrikuX0baU3l263GQNEIoFLW mZfM9idQp/7shP0cAuDkv9gXD9L8JUwWH0vGCw7XRIffLCx/gE0eFCNQqxdXal+C+dnG0utWSv/p X4Gf0em2LEdF1fGwRTryQB9neeqnLifA4ILZCt5DYQyjs6hZxIJE0ZT9BiUQ9qJ2U3aZgyAY9cjp LzVo/iZSZUZZ5cCHD9cgg/bFJERqLJjYldT3puCky7UF0lDtFEYKxMf1pdoFvGgMgZECYc99knPu HN3JLZn/De4I4HzIxysMpFBkAP8q+wsL60C7JQ== ) bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20241212022322 20241205012322 44590 bpa.gov. Oq5AYsEVUnJV7CDFNWOzFcTW/2O4F9ZeXJ7dxRQoqsw4+bXX2O7Znqtf8jrQ+QB3IGZfHFzpFjmS nTY0S9zZ4TwSlOZtQ701nbb0ueAuz+B1xpaTYhojRShS4LXxgJEHIY80OjBdfTitYyPUJiZSkQef V9UY022h7CAkxPiz4i9YsHNbX+c16qBW79ncf2j4r+GSwGEhNCqPkV/4EOs+qfyQT6KaBaSYNkIm mVzSulfUP2e6gkBSUv8MNjqXfJ00zwAiZTFhp8rGxQDG9xkwvp7Mk1Y5uV1yGEh/348DkbnxJyQ+ Sjk1uOO+odNBF7pNCV9jceLzKQeAMaG4nPNUfw== ) bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20241212022322 20241205012322 29440 bpa.gov. nIXE/EdX2bszwHAw7UXwnWrp8K7hL61DiI0eQPm1zkymVH/Fzpxdbg5msrf84CbfdtmHr72RgjGj n1+ijryhiFp9w5dMkN8xQFgBFM8OT6lzaDaUfA0EhFwK9Gn1tHH4Un6XepSVguYKsSPXsl3NQz0h VGLRcNSMdCXuTAZZnCVPjqkLQpCDRn0MVczlbLsW6j6pKVVimKZodNx/4SelROfbhDamdfa3Xt9S h9Mvp3Sf5HBPw4jrtLKgMNYrFNS2WguF3k07QuzhDWhR00Nvo4d9pBvJdXI6IUELb1RsmEOJKExa zbpc8Nc1S1fXZhwR4kfvmvYdiPnaTEdgbtKdDw== ) bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20241212022322 20241205012322 49754 bpa.gov. DEX7PYs8zlSEhQmwuUleOwV1uEFVS+4p6LS/syZ4o80YU40gXsVMXfNeJdT0CCai/F7M6mJpFsQw 5KfJ1lt8cF8Q1nZwBMlznacnBERMzbJtQx2lvjenQdNj1/eNjMn/MK/fNbsVQDhghg3z/Iykrpj/ 6cQe5CSRihy+35lAffWnR6+GL9BOcSPUljAjSJysaE3eEA4u6mLfFgG9RnUsCnEQ0vwSRKH2lTOD c2JDoFFc+EjVj2caa2Z+NtjSItLvVWqpHkWJ9TdyOX56jKIPODMWU9gRJk637vdpNC+U1kCmKa0R yOP9/u7ZJMer6GwSwjMHP1rAJS9dUSSXdkNruw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for bpa.gov
	`bpa.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAZuYG3zrVRP/LI3E03PBN1zLQxlJhPqdoms/k1mubkkus9TwI6T5CmUgBcY5Xxc9czahnsv2 4vMSYmWycJZZTOcy+R8mGWSQ03TL4I3yNaFlvBXYM/p5YdtEMxjgkmbAbQ3n9G2mNvZ5K6xeYz8Q TB11JmgPjp2DVNXR+Zx6N6sCtpClcEj5IF8U5L46bFd4tZVHdHKXPWea3IuNnU6n9WmQe4ZXNQj6 8J428n7J1wugDOIN897pCZmDYGeSCxnqfB0Jh3Rr0gCc837Q2ww7hxlRGtADN7be7KdnfgSPbQIx 1n3TJ1xwDcTuM0y/HwQs7SjhBY6qobni5ZU1U1e0KGs= ) ; keytag 59425`
	`bpa.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAY2NFm1RivYacYPdR69ULgljbux5s+ccYzTMA0bWBUrbCbTfb1knEWrZeUQJ9VfbRSkivE9l WF+TGBbmTsEjXJv1B7uNJDj/QKXGMfFqseRaCbMyigJbUsfTMeEYQTqFg21z/XugXFUvx76QfBWN ZM2MCftX3CQRBB1oPgdT9yrXPdKe39umThYGi+xdOD3HdlYoBbewja9xArwuGxMR3hymk0t+XLfD VrgIr+BCX7IU9SFPXj8t5jfnRZ5YTG0oiKa5qfAePJfZyy/rky2qowTEQzAMSMfUmuN8Lv7PCg3y CrKIMWcux6EIiH03DqUKCZGZUr1e7l4At9B85r+ZVc0= ) ; keytag 44590`
	`bpa.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAcCanpnvYUKS/IhoBzBfXZNDe+ANzXzUmf6F+loKXbPoQwxck1jk2TZ6Gn5/GTFb2yhZcK8+ q54CcdeaZ1Ol1dImO0wao8jwJVyfTBuUM6eQoEbhfYrQPlJgJJf6RJcQn23zTi6XPZdU4VU3lP1b EWbm5Muem94tNWG4etSZn4c/vQN+1JYFLYWhiBHM/vW2hBQxRzqzlFdyu7dtnJ29iHx1IxXK9YMl Vyb+kuGMkJ6xrVhMtoR/XQITebPO1ejtqycoPwWrqVcY7ncuWisKi1LuUvzpVPcMGzqfkYrn/mfZ b0AieLW62hfQ2TYVC/FtFDDNTuoWD1D6JHOx1joLJcE= ) ; keytag 29440`
	`bpa.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAcOcCF8kWXibbaTkQ43q2vnJOr2m6wmKdZuS+vSnu9wmFqAH3zLNg0F3tO1bTV4y+yV6AyDt eOvroRGR4+rbISfLVPINnkTzOJtYazoCQrXERWSvot6A0e7/AS66yXMZpZWh6UF6vpe+LXVqVlFS 3c+ctwnBCLiCsMSfAAjjOCm4GSOYEYL5dvzS0hI7jgavtobuRUJbTTRV8VTRc6lm8QMtRboDo84n ygvEvxrZRuGgAXbFQy8H9H8PdnEMd1TupmkkXWQMGhwDRBZPHmK38i6IY/KeAZZjxLA56Ae1REpz 94Qvs4dQtwJ31UTH9oY/68fVzEP2VuaWRsd9ynGohvM= ) ; keytag 49754`
	DNSKEY=29440/SEP is now in the chain-of-trust
	DS=29440/SHA-256 verifies DNSKEY=29440/SEP
	DNSKEY=49754/SEP is now in the chain-of-trust
	DS=49754/SHA-256 verifies DNSKEY=49754/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20241212022322 20241205012322 59425 bpa.gov. BhaWZSoxjFr299nObqd4hLpj/cYyxXhPUh2Sb4Bzy6+KTwI5bKRShrikuX0baU3l263GQNEIoFLW mZfM9idQp/7shP0cAuDkv9gXD9L8JUwWH0vGCw7XRIffLCx/gE0eFCNQqxdXal+C+dnG0utWSv/p X4Gf0em2LEdF1fGwRTryQB9neeqnLifA4ILZCt5DYQyjs6hZxIJE0ZT9BiUQ9qJ2U3aZgyAY9cjp LzVo/iZSZUZZ5cCHD9cgg/bFJERqLJjYldT3puCky7UF0lDtFEYKxMf1pdoFvGgMgZECYc99knPu HN3JLZn/De4I4HzIxysMpFBkAP8q+wsL60C7JQ== )`
	`bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20241212022322 20241205012322 44590 bpa.gov. Oq5AYsEVUnJV7CDFNWOzFcTW/2O4F9ZeXJ7dxRQoqsw4+bXX2O7Znqtf8jrQ+QB3IGZfHFzpFjmS nTY0S9zZ4TwSlOZtQ701nbb0ueAuz+B1xpaTYhojRShS4LXxgJEHIY80OjBdfTitYyPUJiZSkQef V9UY022h7CAkxPiz4i9YsHNbX+c16qBW79ncf2j4r+GSwGEhNCqPkV/4EOs+qfyQT6KaBaSYNkIm mVzSulfUP2e6gkBSUv8MNjqXfJ00zwAiZTFhp8rGxQDG9xkwvp7Mk1Y5uV1yGEh/348DkbnxJyQ+ Sjk1uOO+odNBF7pNCV9jceLzKQeAMaG4nPNUfw== )`
	`bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20241212022322 20241205012322 29440 bpa.gov. nIXE/EdX2bszwHAw7UXwnWrp8K7hL61DiI0eQPm1zkymVH/Fzpxdbg5msrf84CbfdtmHr72RgjGj n1+ijryhiFp9w5dMkN8xQFgBFM8OT6lzaDaUfA0EhFwK9Gn1tHH4Un6XepSVguYKsSPXsl3NQz0h VGLRcNSMdCXuTAZZnCVPjqkLQpCDRn0MVczlbLsW6j6pKVVimKZodNx/4SelROfbhDamdfa3Xt9S h9Mvp3Sf5HBPw4jrtLKgMNYrFNS2WguF3k07QuzhDWhR00Nvo4d9pBvJdXI6IUELb1RsmEOJKExa zbpc8Nc1S1fXZhwR4kfvmvYdiPnaTEdgbtKdDw== )`
	`bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20241212022322 20241205012322 49754 bpa.gov. DEX7PYs8zlSEhQmwuUleOwV1uEFVS+4p6LS/syZ4o80YU40gXsVMXfNeJdT0CCai/F7M6mJpFsQw 5KfJ1lt8cF8Q1nZwBMlznacnBERMzbJtQx2lvjenQdNj1/eNjMn/MK/fNbsVQDhghg3z/Iykrpj/ 6cQe5CSRihy+35lAffWnR6+GL9BOcSPUljAjSJysaE3eEA4u6mLfFgG9RnUsCnEQ0vwSRKH2lTOD c2JDoFFc+EjVj2caa2Z+NtjSItLvVWqpHkWJ9TdyOX56jKIPODMWU9gRJk637vdpNC+U1kCmKa0R yOP9/u7ZJMer6GwSwjMHP1rAJS9dUSSXdkNruw== )`
	RRSIG=59425 and DNSKEY=59425 verifies the DNSKEY RRset
	RRSIG=44590 and DNSKEY=44590 verifies the DNSKEY RRset
	RRSIG=29440 and DNSKEY=29440/SEP verifies the DNSKEY RRset
	RRSIG=49754 and DNSKEY=49754/SEP verifies the DNSKEY RRset
	DNSKEY=59425 is now in the chain-of-trust
	DNSKEY=44590 is now in the chain-of-trust
	Query to ns2.bpa.gov for bpa.gov/A
	Received 2480 bytes from 170.160.100.10
	;; Response received from [170.160.100.10] 2480 octets ;; HEADER SECTION ;; id = 61152 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN A ;; ANSWER SECTION (3 records) bpa.gov. 300 IN A 20.42.128.100 bpa.gov. 300 IN RRSIG ( A 8 2 300 20241215183109 20241208173109 59425 bpa.gov. OnJabeswBecMgjZnHfXEjyOG7RXe2MUyedhTUpyROl+4W9Yz+q3OXZcwPo/EziyilJkqgTfv1tCp 7IRIMHO1fcCv/xeR580k1EMLztSVgD6V3norodfZmkaa8vbch6kldxT2XvTTGf4IKrRAMgXextus XQZ23VoGI2XIhdeFqt3uAoC4fNJWaWm7qZMcqGFQNUdz9Hjaj0AVFF3Tvb4rW9MaLPrG3ig7gLpi mgVekUaT/YXWpUzapErg87qzLwNgAew3BCxG2Mu6QTPb4P5OLi6QLtgNCgkVoumkcWIeBKqblKh5 dKayvZaxlqRVbwPrfF8nQp+ZsV+V3R8Y2ZwVxA== ) bpa.gov. 300 IN RRSIG ( A 8 2 300 20241212022400 20241205012400 44590 bpa.gov. bKKpNsjrv/RDenVp2dBeTuboNvI6gq4RRLM0v8uKBK2eOqXTxJwQaXHalRNydl9Q+OdoWqVIU2X/ YHgsbHPXdEQJmaMpLkvA+C0Gqui4tW/MJDkkaAN9Rn4k76D2TzIX6iADdeuGI3CxBeogdde2+LkT vxDCL8/H/K5sgpsvR8UprScTPf/IYYQQdFkCqgJKvxp8nAO9wbxhwsHsVV0bO5V80QnV2ASXxqtb kFeobdyNiFSTpgllWLGrJjyi5EOAJElYDllwBJ2VagUbCNPPa9mS4MRu8rEMOTIn/P9A+l02/QaZ 10eb+LREMhgZlZgfT76E9onlLQDUGuHyRxo4kQ== ) ;; AUTHORITY SECTION (4 records) bpa.gov. 86400 IN NS ns1.bpa.gov. bpa.gov. 86400 IN NS ns2.bpa.gov. bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20241215182335 20241208172335 59425 bpa.gov. Bzmk6BvbdwvzyZL9e+KPBUi6Uz5I/NvaWYeyOv4j4xqCY0lkOh1xHZvtrUfaOqa5CPaeL6JUz9Oi qX29jfV6vuzKb3UBqihPcjrCT/g+rsgKAI+qmEz3jNZXuilcyCpczJvYFKsgXtzc+KfFFMsv1ScU OgRRlik5Gr8QbuvsvKbvfd5iYDiIGbqc6JQJdzpsk/cc/nyCFBhun47Hg0/uR9xgw7/HjlsQKV7Q mUZ6W5hONxLlTe3gSsRqINYcoQbkUau8UAlCRxEp7cnuSO7wip4kN3Ta8Wd+dOb8z6dHpn8lz2/R Rks3CZUH87RYSdhYAy+lZk4PFAALgUSaDSRCAw== ) bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20241212022323 20241205012323 44590 bpa.gov. bAZRRUsX/SfqkjcJn7/dmde5au9NrcYk+NVmYJgpAz/LWWaiXvReohjloTCxZU/YEnj+zRwmibO7 lROVgzTcTyOHIr6mah8w5yBP1kb9JbTEhXLr+g9qSYVKbNOVEH11ptyxN/OeFqsAXUR3ycEe+X+7 UG6ghfbYpWL5AnO8fraQxiQMm1KkmHOgkNNZIUFT5irgNGB5ivl3lFNbM20iCpZmTAixNv5y6mAg etq160rLyzDdU1ceqjL6y8HuWsW4zRhyp+HnY39AIXzH2S5vVZeQxkafGcXoLqyoO1ugDQYxNxB9 BgZnYZ5jK7Fu9QKmyxZX/Ts7DoXm3oIUnEeldA== ) ;; ADDITIONAL SECTION (7 records) ns1.bpa.gov. 86400 IN A 170.160.36.10 ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20241215182335 20241208172335 59425 bpa.gov. FeXszD04b4Fk0AOg7vaKSJDFKlaaTWgyO/NbecXfmRvs/MKze1Uc4ba9PLI1yPuTZLtYGu8o/nKI XvHHhrnKoy9I5SSMiM9j9MTY4lNHKVax6MWMg0BFp2c/tRnPOwj0h+IJ8XEwn0w/gAA94EGFxFOM HSuxxrNKYlQ7avo9iy83FL6+98TyVt4tsxveA5pTvpzR+prQEa4lPGzxyAXt7VOq3UZRQje0k4e2 2yLdB4O4fwY5AI33d3f3hR6khEY+K1DavmpER0/ByPelIRhlMzOuhq+lF7pFaSLl60gBKm4ICNh0 yoaTO40YfXeMcLUiZg1IDUnSXascNkC/P2oDSw== ) ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20241212022323 20241205012323 44590 bpa.gov. EjmT/OxMpHZyjatBXpwkdEqQDPNtl1/i/9iCKo3/wfinbe8+VU1nLZh7dM7OQyV0jzfaC+loRLW8 8sgiAPvUwhICm+vJX0lyE+X8bEMDgfZJ+tunhaavzVL0UY6gcZq8aFDVx/AWVdzY0wGc+5LBtn9E B9BrsJhvYNGCQPvBiiiJUcx04KIFfhILZSlVeJvxS4gIYiDymtFVmgXJTA+2JO42p6qJgijs7vMc UQeWgsZhv3oE64iL3g82Hv8JoO6Z1Wd1HpvjB8X2PzE3FuWKZYtBBbeFjuqmrX9ZpVVbBh72QNCi rWkhhVfOI/GoGxwA5fz3lZbTpV16MqbYFq+LpA== ) ns2.bpa.gov. 86400 IN A 170.160.100.10 ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20241215182335 20241208172335 59425 bpa.gov. IcJpM2sJhnjdxoL7es+EsyJuKLgh2c9si0AH2DlMxa/HYIXipvgdnvM6WHKtMVAD0CaHLbPiffld uCGOefQ/Z1mkzFWIW1FbZgZaXg9qzESoytt7jlwIjxzuY6b3hZahQ6sXKDcH2c6FR2iSbF+kfG71 wuK3asrdnOIvSpN7PvC8dj/NDK4IkqKJIZEpSgeRemTxMBg0o8qBL86NVq4SUtoXCxVq9pCm9fRM GlnTnoRmAWMbIsCurs7nhSipwQCjoitXkr7TnW3m5K2cBQPk1aCP/1DQqWS0FWWmqgJKwvXGbFU2 iafzt2pMyz93qTAEtjge24cr+a1rfGLcHIZNaA== ) ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20241212022323 20241205012323 44590 bpa.gov. HICHcnjyvpiGvuh4Ey2De9DckeGyC92lrhyt2TTSNdSwtkuVMvgxZ6ifBgf13T3yWzbLzoOz7BZs V5ArsDyA/DaBfLx1qYEWNdq20b8RUKso9QtaqR9hzPTc+0fVPBiQ1CtV25kRiMDXWWKfjVnoki/s JHLCV1jzoNdPBwbctYXwIk2YXW9+eS36D+6W/ggZyQh6AFgD8GCPjte8F/nXBwN7YlP1de6tZFKf qybtfuVwQhUE8OiLokIod3E3ttSaWiV5losb9BR5cs9fGfgYP6n4GIgm5FWTt1VxfDE+UW/kl19i /dAoreemv6Ma0jDa2AX6T//62IdE699SDIAk9A== ) ;; { "EDNS-VERSION": 0 }
	ns2.bpa.gov is authoritative for bpa.gov
	Found RRSIG signed by bpa.gov zone
	Query to ns1.bpa.gov for bpa.gov/SOA
	Received 2511 bytes from 170.160.36.10
	;; Response received from [170.160.36.10] 2511 octets ;; HEADER SECTION ;; id = 12028 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN SOA ;; ANSWER SECTION (3 records) bpa.gov. 43200 IN SOA ( ns1.bpa.gov. hostmaster.bpa.gov. 2024112203 ;serial 43200 ;refresh 3600 ;retry 1209600 ;expire 3600 ;minimum ) bpa.gov. 43200 IN RRSIG ( SOA 8 2 43200 20241213225241 20241206215241 59425 bpa.gov. PgWnp3yR0q6odYc4LYGCYORvvRcBf+YaLOBMT+ZPa5RwMNF4fFCtCqO7MkYlw7L9UIko7qgzycGv 2IpjDukIVWmxzWpElc2k6dyQxj1avNa7URDZdDDAG6d2Pe/m9LEBIdsCCnRn131JKmee9dJXcPRm OAKrqmYZJXKSLjmGwA9KtyZsLJcijeZJSUYXjg+e0IJphIXdYtSdKsVB69kiEta/jYRTsmFe4qdD 3sNjWUdez0b7Y0WEkJaIFPgXotLzLTFNXmDfraijoJxrk+0LyIc8yzMrdKrzHB2s6ZIbageGijKH S21tGFEmcdevLPgqpQ3XxkQ6eFM42aCOO5Mrqw== ) bpa.gov. 43200 IN RRSIG ( SOA 8 2 43200 20241212032927 20241205022927 44590 bpa.gov. XRv4cMJKVy+W7XyNO1yPFFKaBDNr6SEtqaVzDERE6/j09OQ3O5lnSnE4p8gd/Q4OHeyZ7yuEKxrR 2/T6aC15lOZTwynpnv21JS0wDjOZZQ4jwOW5ommBvaWPP7Qx0atj80LXBxG+FdC5542ifkPm8xZS knITWjD3Tpns5N2CwuOG1LzUCyEMQJMMisaET86xXkmn7qpups+G5F3MP6UVY4Lf7KgSx7YAiA6E w8cH0hSN1kzFbPgV8Aam9r+0/NUTTWMb+riM2dq2Th0numyO111ZWZ8pXtg5CdOo7rTwOAYrD7WG S0OUCa3PWhNvbJS9YOw4UNxqwssO3IY2fx3Fhw== ) ;; AUTHORITY SECTION (4 records) bpa.gov. 86400 IN NS ns2.bpa.gov. bpa.gov. 86400 IN NS ns1.bpa.gov. bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20241215182337 20241208172337 59425 bpa.gov. CX/ayr6SeZO3DHv7TtNoBN/9iZXZVNS5ooQMZPc5eQ9Pg6V2d2WUOlhU2w6/hh/87xAJPyteOq6j RdfOpEtVNP4fujWux49NvStWsxC4f0KCl0zwBnI15WdlLztP6y/DaJ2tnm8AeouJq9iUMoPWUeZf AZ2hsFdP7phRLIIU+tK7NsKu1n7o9yPP3XgCaOBHfyKIjDRF9aV+4uR8UEcYj3Ou2HSH9waUlz2L bV+4Xy+07wHzfJ6cSjXdGmadRgzjoj7Q+Tzy33MyFIOTvK3zCqSgu09scTXpok5Bz0aInDStqhiC 9Rwr9bnUr8w+62ccFjXQj2Co4KW3zn7DPfWeKQ== ) bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20241212022323 20241205012323 44590 bpa.gov. bAZRRUsX/SfqkjcJn7/dmde5au9NrcYk+NVmYJgpAz/LWWaiXvReohjloTCxZU/YEnj+zRwmibO7 lROVgzTcTyOHIr6mah8w5yBP1kb9JbTEhXLr+g9qSYVKbNOVEH11ptyxN/OeFqsAXUR3ycEe+X+7 UG6ghfbYpWL5AnO8fraQxiQMm1KkmHOgkNNZIUFT5irgNGB5ivl3lFNbM20iCpZmTAixNv5y6mAg etq160rLyzDdU1ceqjL6y8HuWsW4zRhyp+HnY39AIXzH2S5vVZeQxkafGcXoLqyoO1ugDQYxNxB9 BgZnYZ5jK7Fu9QKmyxZX/Ts7DoXm3oIUnEeldA== ) ;; ADDITIONAL SECTION (7 records) ns1.bpa.gov. 86400 IN A 170.160.36.10 ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20241215182337 20241208172337 59425 bpa.gov. Odxsb02I+0gI54JNi0wEamqAj/8YXcjURFGgMnGW4q7iyRs6fKxt+37P7hsBZV56M1A0MmYZHNb1 RL/SgJ3TOrf3tJDWZF56OvIjxpCXERtu2yQnZ0F+B2rN6S392fUgBn4LaoHbnnNEcYhQ9nyBrrqc rJmPKBJHuSGj9lGcO0rbV4OlszxdOWwJldvVVb/ZwwYdlDdl2jRsWV3OPgSgngAGCI77VHu/2xqF UVrvUBgByU+1iIbMG13wBKf8WtjLa5V1Lk23ZqPl+/QIEi223MDYktlY67X5Zd5xjlAgpVel1pqe DBkk0AO9WKiOeXmJGCFkdnQMkeVhVbkWaduYzw== ) ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20241212022323 20241205012323 44590 bpa.gov. EjmT/OxMpHZyjatBXpwkdEqQDPNtl1/i/9iCKo3/wfinbe8+VU1nLZh7dM7OQyV0jzfaC+loRLW8 8sgiAPvUwhICm+vJX0lyE+X8bEMDgfZJ+tunhaavzVL0UY6gcZq8aFDVx/AWVdzY0wGc+5LBtn9E B9BrsJhvYNGCQPvBiiiJUcx04KIFfhILZSlVeJvxS4gIYiDymtFVmgXJTA+2JO42p6qJgijs7vMc UQeWgsZhv3oE64iL3g82Hv8JoO6Z1Wd1HpvjB8X2PzE3FuWKZYtBBbeFjuqmrX9ZpVVbBh72QNCi rWkhhVfOI/GoGxwA5fz3lZbTpV16MqbYFq+LpA== ) ns2.bpa.gov. 86400 IN A 170.160.100.10 ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20241215182337 20241208172337 59425 bpa.gov. cTui1QaOevyg4q0I4myDUDZ6j2xWEFHJL20swJaeAgmMccbBdYqVf5ocsNYZbv5amwOBLHLaTSQi Do1BPh97hVmj9HJ+QOQCCa6TXNuVWeinGP7SlH62+rTqhn0zwm+r/RA/ijg4DNpTXNDXyp9W1qoR x98mmzwvjEanoTsN79RlR9BfBJYkZKz3GvYUauyHLPh0S2moz8U45pVAeE3SPch2Q8f3+T0q2REK hldQ34Add2W3B1iSu1Ie/1eXuAXMo/ltHjIecLz/kU4OXy9EsY3x6fl438YkU0Ziu2UdBLQ6fS0G YE2i6YrklmZKdAx5RDZO+d1ht6VOUs3d3Ru6qw== ) ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20241212022323 20241205012323 44590 bpa.gov. HICHcnjyvpiGvuh4Ey2De9DckeGyC92lrhyt2TTSNdSwtkuVMvgxZ6ifBgf13T3yWzbLzoOz7BZs V5ArsDyA/DaBfLx1qYEWNdq20b8RUKso9QtaqR9hzPTc+0fVPBiQ1CtV25kRiMDXWWKfjVnoki/s JHLCV1jzoNdPBwbctYXwIk2YXW9+eS36D+6W/ggZyQh6AFgD8GCPjte8F/nXBwN7YlP1de6tZFKf qybtfuVwQhUE8OiLokIod3E3ttSaWiV5losb9BR5cs9fGfgYP6n4GIgm5FWTt1VxfDE+UW/kl19i /dAoreemv6Ma0jDa2AX6T//62IdE699SDIAk9A== ) ;; { "EDNS-VERSION": 0 }
	Query to ns2.bpa.gov for bpa.gov/A
	Received 2480 bytes from 170.160.100.10
	;; Response received from [170.160.100.10] 2480 octets ;; HEADER SECTION ;; id = 54542 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN A ;; ANSWER SECTION (3 records) bpa.gov. 300 IN A 20.42.128.100 bpa.gov. 300 IN RRSIG ( A 8 2 300 20241215183040 20241208173040 59425 bpa.gov. LrMcnlORWr7KwfqwhxaU+jsCOi9Zm67PUYBQdAYpebd2NwyIKfAoe3pL05E4ZcB7uCIe/7GDBKD8 NZqOBQmP1WpM02dzrn64imGi48q253IoAtq56d5lVPD2Mel6WZPG3GpVvv6LmVFwHl5Zk2UGIyJN ZFgtHTmJqKPJBy3FoM60feY6H7iZCd56rvAOqo5t9ydfpMYAGsQCGcfVYI+gnx8XPacFPZjc9bzZ OTRCl3mwtyXkcCLNFqHLVktP5oxaKc3MHmV3nTU8yXROjeg7/AThoxJlleLjQaHw26ku3GbZ6gD/ OkXQK7Mwf1gaJ0CRsNM7vf0J9oU/YBlgJyyU8g== ) bpa.gov. 300 IN RRSIG ( A 8 2 300 20241212022338 20241205012338 44590 bpa.gov. UKL7PQOSG1IqStW7jK0Nn53rjmMxtEfOVfCi9v68bD5v+GKgEIFs60iXLZ+rbUOa80vZnjUNiATR kVGHmjjqzEWXhMVnE5does+A2mHpqracq6t9TguAeZwegdSWanVMfHWqAgDQsMF+IkaSdBa2L61T T9F3vsrnlJgMIzzYVijrPuegTUe1dShkfyXQv2l1mNuKHO+FyBR9EBkClShHsD5r1k8FGkSA7Nky vCoai6z63y2e86kQAJSuQglT0Qehm4roJtbQ1W/8VL/PGfR6t/mrx+o5AAgbagou5b/QI1Fyiu5L 2oExlQzScEowW0yZVJ9hc8cvh4R8fi/SNN8VXw== ) ;; AUTHORITY SECTION (4 records) bpa.gov. 86400 IN NS ns1.bpa.gov. bpa.gov. 86400 IN NS ns2.bpa.gov. bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20241215182344 20241208172344 59425 bpa.gov. mCI0APclrOJAGa6XdmWOX6kmv7tKbw4A+AzHsMCln4q/kb7ei+1DwTmsPdEkniJX0DfMQAaQyCsX q0douuGcnM36CjXUsk5blUz1sfBFp2QWZOoyzQpyWpzJvuO5CWx/udcwrbYQgENQr4xEYJk6p6iY 2fAXa3ku/+c/lwsEuDsjpsGQKhI0v8YEDYTm2YsZrDWCHZ6WVhQu7N6O2B8quCyJo6O8ab1R9DfA LaiAB5kEHY2Jx/Rd9V/shH22ucZyuqy3rFRSTxLp2PQ0Dw4jum24Pnft3fEsDQp+2tqyq8PKGlIr PDgdqQQYgkROEPQWC0OVdyezwqNHZ7ozFCBviQ== ) bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20241212022324 20241205012324 44590 bpa.gov. M5sfvMo0zAXt5XTvJuAVhuC8v7tZ0ig3JUiUov1nNi3HQ6tLtR0eqGN4A8iLc4Wh39ysm2H07WTQ ppyNE9Wf0s+F+rKXGGSkGUntQSUz6eOJk4qP9oOu7cEKVRCBaiPN4oZDYVo6CT8PzNbPtjWUHPt7 mcSV9L+CNexP4tZ9aw/H40A2jUgGMPxYuNquMBXY2nSIxvwgonkIGg6ggcsghR/TieoxW9ks7Tov nLl92GyD/LnSHTVug7wbgAy4/jvwbhilJQKcp/koZO2+VR8R8DmnMYf/QtinI7grS53jV88a1yA8 65gzp08iTki49IvbLF/jJdvENL2M4GgtzeqUsQ== ) ;; ADDITIONAL SECTION (7 records) ns1.bpa.gov. 86400 IN A 170.160.36.10 ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20241215182344 20241208172344 59425 bpa.gov. UnobspszW+dFSQyP6oshEkJ+IHisnmBXORNRzGb8fJAKq7+KqXqcnasaa0T15ArYvFegY1OBGM31 hF7Lklnt0ZoeYLnDIHszO1HyvJQhbFPMDZRGHwRndhHgdEOHmNTzaGL6axH3A4MEpRgcJjPncnBq RCXLbaqsxhDtvJHDlsApNJHt48AhGnrb1YsqB8zFz0Wn3v3klri30dZeYqdr+ruO+woG6ekjeD5z StUifETmF3chJHU7MQkngQAid3SAzDuDhDiAnQWwgA/i1uAs58AJ2qqUyg0yi3aZLfpW5Pq00DLK exY0V/zqUs0AcsDmCAYUBsrFPog6OfNCB/9Vsw== ) ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20241212022324 20241205012324 44590 bpa.gov. AnyqNColAkFWGgBaeB4/aQ3EZtiM5h35dtJtRuNFvsl8fO4ao8xFTzxPngHAopxiofi45aLqUa3J JTSr56xJq5YwC4/6AnHt7VRCT+MqMAT1ZGj+x+9zppVxrccmcctMVZV1OF6YaV/lA38+1CXY9/N2 zy6o+/JzfcN7ZjxrpvttROBGwkCbFzEV9JoEMRtf6ITijkR7tU4Mr9vPtLszFw0ZmrfAtPr5ur2R txNG9vI9x9wHOHgYrDSaAdbbxITSYEjnZOq6hSIRNHq0xiEiEDFX2v0nEUB2Jq3C1exSHiX8s4N1 /W7ZQH6IenBgFMspK9Nz6HBl3WFP+zlygLwCyg== ) ns2.bpa.gov. 86400 IN A 170.160.100.10 ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20241215182344 20241208172344 59425 bpa.gov. dK7WzIywTmosbmuwOjWimwsB9wt3IlqWE4Nl3g0jxHGsFZODVRXu03HVkutJXA9HR7AO3Ecu514u hE+0LwI5RUqiHC6kIyIH0lY85E2s+exzqEIFtqcHRvKhyqvzQcY4sks8JIlZ/JjBW1neqXvRwyLJ KOXpLdiyly7Ao58XSOznmaRfdceKhTpcASQa6ODsH+vnRCBrZeZCgaR8Q1MxVlQ8qvJBSbhufI6l S91erGlmz8isBDtOPvbGaA6VCWjxRm7nFGcumYoPhPjDEsjtrozy+8He4OM1LckQKFf2fPH/8Lwx 5535YlVvodV8pWJD/h/xbwXnh+OEu9kS8sREMA== ) ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20241212022324 20241205012324 44590 bpa.gov. IAtfDN1h8hqdRYlBkI/gKfeSbxF+g1pCfUAZfVwCNB/fuxS4Xz6gU+JhHd79iSfajN3hp4+yC3za a1nOfiBIodlXPQE51FSkmgQIfeorI2UGIR2Mh5/Fu5k8YYmyrz5msimv2nztu3Ag9gEIZKHwnrQi IAZ7qRZcSQKTGxep6IYEQOk0cvI5aXyCOX6rG/16dVHjr4EmdrFf54xna+tOq+0J1OuZ2fcqnUct d4gdtMpzAjXruVi8lb1+CmU6zuUzb0hE35ksPPkvb6aQrXfBVXq9kwyO3Wk2GJucBojzAC3cp8g1 prkxQVMqBQBzdOOeHmm9ixWRvPnYajRCY3hLQg== ) ;; { "EDNS-VERSION": 0 }
	bpa.gov A RR has value 20.42.128.100
	Found 2 RRSIGs over A RRset
	`bpa.gov. 300 IN RRSIG ( A 8 2 300 20241215183040 20241208173040 59425 bpa.gov. LrMcnlORWr7KwfqwhxaU+jsCOi9Zm67PUYBQdAYpebd2NwyIKfAoe3pL05E4ZcB7uCIe/7GDBKD8 NZqOBQmP1WpM02dzrn64imGi48q253IoAtq56d5lVPD2Mel6WZPG3GpVvv6LmVFwHl5Zk2UGIyJN ZFgtHTmJqKPJBy3FoM60feY6H7iZCd56rvAOqo5t9ydfpMYAGsQCGcfVYI+gnx8XPacFPZjc9bzZ OTRCl3mwtyXkcCLNFqHLVktP5oxaKc3MHmV3nTU8yXROjeg7/AThoxJlleLjQaHw26ku3GbZ6gD/ OkXQK7Mwf1gaJ0CRsNM7vf0J9oU/YBlgJyyU8g== )`
	`bpa.gov. 300 IN RRSIG ( A 8 2 300 20241212022338 20241205012338 44590 bpa.gov. UKL7PQOSG1IqStW7jK0Nn53rjmMxtEfOVfCi9v68bD5v+GKgEIFs60iXLZ+rbUOa80vZnjUNiATR kVGHmjjqzEWXhMVnE5does+A2mHpqracq6t9TguAeZwegdSWanVMfHWqAgDQsMF+IkaSdBa2L61T T9F3vsrnlJgMIzzYVijrPuegTUe1dShkfyXQv2l1mNuKHO+FyBR9EBkClShHsD5r1k8FGkSA7Nky vCoai6z63y2e86kQAJSuQglT0Qehm4roJtbQ1W/8VL/PGfR6t/mrx+o5AAgbagou5b/QI1Fyiu5L 2oExlQzScEowW0yZVJ9hc8cvh4R8fi/SNN8VXw== )`
	RRSIG=59425 and DNSKEY=59425 verifies the A RRset
	RRSIG=44590 and DNSKEY=44590 verifies the A RRset

bpa.gov

	Query to ns1.bpa.gov for bpa.gov/A
	Received 2480 bytes from 170.160.36.10
	;; Response received from [170.160.36.10] 2480 octets ;; HEADER SECTION ;; id = 16204 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN A ;; ANSWER SECTION (3 records) bpa.gov. 300 IN A 20.42.128.100 bpa.gov. 300 IN RRSIG ( A 8 2 300 20241215182909 20241208172909 59425 bpa.gov. GeK+OZQoPiigrT2dLUJyKcEiCQGmGDAjNvkrcxcjauU1Q91m+TZUixtNwzRb3YdgYvhOJUDp81K+ tJ+CaWZQvjqXZjMI4n2ZtR1pMNHTc1N/7rWfuTryh6y1KGUPb5zxvxeoXx0/6UW8M96IuFCZDXQq st6BlmKq+GkuXYOteus3l4RaGW2kiEWZ9G+VrPxvijfWQsmBpGcWYFmKCoTRxaOAqB7tJB+PkvIt Z8SK1auKvcR8k+QhVn/f4+W0AQzQKlbW6WB7ducqiW48ugcXqurKRTmzHUVvLkisCLjgdVNgvn4z pGteDyITff3A3WgW5ie0atnGOWAVida+a769nA== ) bpa.gov. 300 IN RRSIG ( A 8 2 300 20241212022328 20241205012328 44590 bpa.gov. K18QWIG5mtQLsoyQIo5BoXo1o7cmIyOeApj0B5+K6sTs5tRnK6AngW/Sp/zRHg/JFzw6Dez40VeL DXmKEEh4zidQC6noOX4jVe3ofPOdYKfL6vagTit+7npBdxozHF7sO8nviGLGexa6aK3M+QIk18Pp BgLU98YssADVZcUzoR2gsov0pU8ZreZVlae2/M0EugRzDbgSRaYBBkUNVSgdmB0HpVXSuoEaJ6KU rDJ5e58muUJz1cU3cbJx//B0X8HSSGXoCRJ9VK5o6iHUxfQEjdQd/m3d0SWugNxeEHu+RUGVuqho OvH24Wia47FzVHD4eBNpsR89QxV5YoYb1AL5JA== ) ;; AUTHORITY SECTION (4 records) bpa.gov. 86400 IN NS ns1.bpa.gov. bpa.gov. 86400 IN NS ns2.bpa.gov. bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20241215182401 20241208172401 59425 bpa.gov. TyEzGwtJMvT9+pABf4IMViLPVVXItYQj4y4NLVoIT9R0flKuQXgPiD5jRsPocOad+2cD+vtMLoKO AUgIQFQJuG7zPqddRzoxgYWzIjYUa2xR7c2iJkzbyWb2CKgHHUCHBimBsKcCcNgd5IJAcNA3I7E9 EGP3FQC9yPjAXv3D/3r6lZFl39Vzvk0siUmNOO7IX2o/MKk0/xQjgW9H1EWeSngSivXten2+e4FF VOpBGxWxppqn24SA+cPznL2HISBZcTsXkPo02dG41zReeUiIJrLyk2qerVtycBFFBnIDMjUm7RaJ tGPm2vxpDpsRcagGJ8tVcmPSgOghxAKb55aAsQ== ) bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20241212022323 20241205012323 44590 bpa.gov. bAZRRUsX/SfqkjcJn7/dmde5au9NrcYk+NVmYJgpAz/LWWaiXvReohjloTCxZU/YEnj+zRwmibO7 lROVgzTcTyOHIr6mah8w5yBP1kb9JbTEhXLr+g9qSYVKbNOVEH11ptyxN/OeFqsAXUR3ycEe+X+7 UG6ghfbYpWL5AnO8fraQxiQMm1KkmHOgkNNZIUFT5irgNGB5ivl3lFNbM20iCpZmTAixNv5y6mAg etq160rLyzDdU1ceqjL6y8HuWsW4zRhyp+HnY39AIXzH2S5vVZeQxkafGcXoLqyoO1ugDQYxNxB9 BgZnYZ5jK7Fu9QKmyxZX/Ts7DoXm3oIUnEeldA== ) ;; ADDITIONAL SECTION (7 records) ns1.bpa.gov. 86400 IN A 170.160.36.10 ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20241215182401 20241208172401 59425 bpa.gov. CWTsUxOkuL9YnOEvSg0Zf13ZPSLmlVXLcq6OXc+qZe2TP4XRwV6UZxooDbjywIUcRbigKhMvUFb/ yDYLTbxINRd5rQLN2uu/cqczQxI+bjk9aD6BJfcG4FTGjRoedf9KR54pANw6PBjbbLrk4+J0HhV9 4HEdlcdIQk579Q+SD9x4i/zZY9Hqdx1cDeJagU80UE+k/aA0RQfTGC2NOLLnO0XTfCnEuhpgIdo7 YWA7fJkdIbq03E/Jlqi7m1NHZOXG70pYAAJdQSaHW7By5hwio61yBZEFBB+UWphTxdiYvzHMQKv9 OCjyCmWoD/iRtWBzh2bfiTefcly3WnzxShr5NQ== ) ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20241212022323 20241205012323 44590 bpa.gov. EjmT/OxMpHZyjatBXpwkdEqQDPNtl1/i/9iCKo3/wfinbe8+VU1nLZh7dM7OQyV0jzfaC+loRLW8 8sgiAPvUwhICm+vJX0lyE+X8bEMDgfZJ+tunhaavzVL0UY6gcZq8aFDVx/AWVdzY0wGc+5LBtn9E B9BrsJhvYNGCQPvBiiiJUcx04KIFfhILZSlVeJvxS4gIYiDymtFVmgXJTA+2JO42p6qJgijs7vMc UQeWgsZhv3oE64iL3g82Hv8JoO6Z1Wd1HpvjB8X2PzE3FuWKZYtBBbeFjuqmrX9ZpVVbBh72QNCi rWkhhVfOI/GoGxwA5fz3lZbTpV16MqbYFq+LpA== ) ns2.bpa.gov. 86400 IN A 170.160.100.10 ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20241215182401 20241208172401 59425 bpa.gov. G2NSvolbycbIDv5pewCzdm5rtHlvlOCaQy5CFTInu6IHOZzvxfBAkOYTwGofk6/3sJYBixFeGqqY gO9wj+pMidyqDFV/137seiZYvf4TuYo3Lg5mQKKVNe1vatNDTKAAriPKa5PgRp+DlUOTBAtqJtqr h6pctS026BPBGE4nHToIdoF0kO3zsn1pWwOKal73d+iIBEvTN4ebNhcu0bM2sFn4BidRT6tH0DpS AyS1BRYtZqPj+rwDwN8shVSX7k8GXVwkH0pgOLjrGnhrgPRghf8lN+dgcTtchvhl/TWtmAxVgpTi gYbqFC27fVgOAAKyUuMs9TDNFyF568YAwc4nYA== ) ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20241212022323 20241205012323 44590 bpa.gov. HICHcnjyvpiGvuh4Ey2De9DckeGyC92lrhyt2TTSNdSwtkuVMvgxZ6ifBgf13T3yWzbLzoOz7BZs V5ArsDyA/DaBfLx1qYEWNdq20b8RUKso9QtaqR9hzPTc+0fVPBiQ1CtV25kRiMDXWWKfjVnoki/s JHLCV1jzoNdPBwbctYXwIk2YXW9+eS36D+6W/ggZyQh6AFgD8GCPjte8F/nXBwN7YlP1de6tZFKf qybtfuVwQhUE8OiLokIod3E3ttSaWiV5losb9BR5cs9fGfgYP6n4GIgm5FWTt1VxfDE+UW/kl19i /dAoreemv6Ma0jDa2AX6T//62IdE699SDIAk9A== ) ;; { "EDNS-VERSION": 0 }
	ns1.bpa.gov is authoritative for bpa.gov
	Found RRSIG signed by bpa.gov zone
	Query to ns1.bpa.gov for bpa.gov/A
	Received 2480 bytes from 170.160.36.10
	;; Response received from [170.160.36.10] 2480 octets ;; HEADER SECTION ;; id = 28467 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 4 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN A ;; ANSWER SECTION (3 records) bpa.gov. 300 IN A 20.42.128.100 bpa.gov. 300 IN RRSIG ( A 8 2 300 20241215182740 20241208172740 59425 bpa.gov. b4ACe0ExB12Mz48ptOwXlz1Og0+nxHeqKKs4oj363+x+Vqm43xXYtwOJMznf8yfhJiSIGqqHuioB lTRILDFNBKK1WASRa3wiDo+kgJbSuEkcQO470GtXMTreqGI1/ZNptDqi18/AImRaia8iHRPGPeP/ BFX7EujYcXN7FMJV5oQq0qOMUA945LdKHmrPUbG/lq+wkGZu8X46Y0lCRfpj9l+8rRo/AklcBoJd fYNeg3jtQsC79f0eEj5fOcEYQa0UYFbYHTz4y0CKlkQlxE+SST27VD2/bNMAOAAB6LhBY6A8WCWq QfvojBVrU902fVSIQgWI4huXGgnFp0dHrL4T8A== ) bpa.gov. 300 IN RRSIG ( A 8 2 300 20241212022356 20241205012356 44590 bpa.gov. EDrlbhbfJ+3ysW5l2HdRM8BIl78KLz98zHj7YHy0MyC0DiFKQIIwoF7ZR+wsQlj7ZM7IRfXrygFj YR+aRmVPHFzmL7dV1Ax2q60jG1cSTqvjLRSNlmZ4W1fP9X3XykSFfIXf0YOo/XWJLVa5PPFTGmQ3 fllK3qV4beL3x9gO+aM2JMH+m78W3Nsc/vb4MApyhCknP3/jzOuy0llSvB2/DRZ8er4OY2v6MNNV vpUnTwkHsSgsCP+TCZwGwwSRsDEcz9ylx3FTexU/qKZFk2NNQ25XydvrZgCpmhzvQq5Vi4CUnM02 PAsmQMZE2ztrjnVxXQ9pBf5SxNQFAkWamLwcqg== ) ;; AUTHORITY SECTION (4 records) bpa.gov. 86400 IN NS ns2.bpa.gov. bpa.gov. 86400 IN NS ns1.bpa.gov. bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20241215182337 20241208172337 59425 bpa.gov. CX/ayr6SeZO3DHv7TtNoBN/9iZXZVNS5ooQMZPc5eQ9Pg6V2d2WUOlhU2w6/hh/87xAJPyteOq6j RdfOpEtVNP4fujWux49NvStWsxC4f0KCl0zwBnI15WdlLztP6y/DaJ2tnm8AeouJq9iUMoPWUeZf AZ2hsFdP7phRLIIU+tK7NsKu1n7o9yPP3XgCaOBHfyKIjDRF9aV+4uR8UEcYj3Ou2HSH9waUlz2L bV+4Xy+07wHzfJ6cSjXdGmadRgzjoj7Q+Tzy33MyFIOTvK3zCqSgu09scTXpok5Bz0aInDStqhiC 9Rwr9bnUr8w+62ccFjXQj2Co4KW3zn7DPfWeKQ== ) bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20241212022323 20241205012323 44590 bpa.gov. bAZRRUsX/SfqkjcJn7/dmde5au9NrcYk+NVmYJgpAz/LWWaiXvReohjloTCxZU/YEnj+zRwmibO7 lROVgzTcTyOHIr6mah8w5yBP1kb9JbTEhXLr+g9qSYVKbNOVEH11ptyxN/OeFqsAXUR3ycEe+X+7 UG6ghfbYpWL5AnO8fraQxiQMm1KkmHOgkNNZIUFT5irgNGB5ivl3lFNbM20iCpZmTAixNv5y6mAg etq160rLyzDdU1ceqjL6y8HuWsW4zRhyp+HnY39AIXzH2S5vVZeQxkafGcXoLqyoO1ugDQYxNxB9 BgZnYZ5jK7Fu9QKmyxZX/Ts7DoXm3oIUnEeldA== ) ;; ADDITIONAL SECTION (7 records) ns1.bpa.gov. 86400 IN A 170.160.36.10 ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20241215182337 20241208172337 59425 bpa.gov. Odxsb02I+0gI54JNi0wEamqAj/8YXcjURFGgMnGW4q7iyRs6fKxt+37P7hsBZV56M1A0MmYZHNb1 RL/SgJ3TOrf3tJDWZF56OvIjxpCXERtu2yQnZ0F+B2rN6S392fUgBn4LaoHbnnNEcYhQ9nyBrrqc rJmPKBJHuSGj9lGcO0rbV4OlszxdOWwJldvVVb/ZwwYdlDdl2jRsWV3OPgSgngAGCI77VHu/2xqF UVrvUBgByU+1iIbMG13wBKf8WtjLa5V1Lk23ZqPl+/QIEi223MDYktlY67X5Zd5xjlAgpVel1pqe DBkk0AO9WKiOeXmJGCFkdnQMkeVhVbkWaduYzw== ) ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20241212022323 20241205012323 44590 bpa.gov. EjmT/OxMpHZyjatBXpwkdEqQDPNtl1/i/9iCKo3/wfinbe8+VU1nLZh7dM7OQyV0jzfaC+loRLW8 8sgiAPvUwhICm+vJX0lyE+X8bEMDgfZJ+tunhaavzVL0UY6gcZq8aFDVx/AWVdzY0wGc+5LBtn9E B9BrsJhvYNGCQPvBiiiJUcx04KIFfhILZSlVeJvxS4gIYiDymtFVmgXJTA+2JO42p6qJgijs7vMc UQeWgsZhv3oE64iL3g82Hv8JoO6Z1Wd1HpvjB8X2PzE3FuWKZYtBBbeFjuqmrX9ZpVVbBh72QNCi rWkhhVfOI/GoGxwA5fz3lZbTpV16MqbYFq+LpA== ) ns2.bpa.gov. 86400 IN A 170.160.100.10 ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20241215182337 20241208172337 59425 bpa.gov. cTui1QaOevyg4q0I4myDUDZ6j2xWEFHJL20swJaeAgmMccbBdYqVf5ocsNYZbv5amwOBLHLaTSQi Do1BPh97hVmj9HJ+QOQCCa6TXNuVWeinGP7SlH62+rTqhn0zwm+r/RA/ijg4DNpTXNDXyp9W1qoR x98mmzwvjEanoTsN79RlR9BfBJYkZKz3GvYUauyHLPh0S2moz8U45pVAeE3SPch2Q8f3+T0q2REK hldQ34Add2W3B1iSu1Ie/1eXuAXMo/ltHjIecLz/kU4OXy9EsY3x6fl438YkU0Ziu2UdBLQ6fS0G YE2i6YrklmZKdAx5RDZO+d1ht6VOUs3d3Ru6qw== ) ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20241212022323 20241205012323 44590 bpa.gov. HICHcnjyvpiGvuh4Ey2De9DckeGyC92lrhyt2TTSNdSwtkuVMvgxZ6ifBgf13T3yWzbLzoOz7BZs V5ArsDyA/DaBfLx1qYEWNdq20b8RUKso9QtaqR9hzPTc+0fVPBiQ1CtV25kRiMDXWWKfjVnoki/s JHLCV1jzoNdPBwbctYXwIk2YXW9+eS36D+6W/ggZyQh6AFgD8GCPjte8F/nXBwN7YlP1de6tZFKf qybtfuVwQhUE8OiLokIod3E3ttSaWiV5losb9BR5cs9fGfgYP6n4GIgm5FWTt1VxfDE+UW/kl19i /dAoreemv6Ma0jDa2AX6T//62IdE699SDIAk9A== ) ;; { "EDNS-VERSION": 0 }
	bpa.gov A RR has value 20.42.128.100
	Found 2 RRSIGs over A RRset
	`bpa.gov. 300 IN RRSIG ( A 8 2 300 20241215182740 20241208172740 59425 bpa.gov. b4ACe0ExB12Mz48ptOwXlz1Og0+nxHeqKKs4oj363+x+Vqm43xXYtwOJMznf8yfhJiSIGqqHuioB lTRILDFNBKK1WASRa3wiDo+kgJbSuEkcQO470GtXMTreqGI1/ZNptDqi18/AImRaia8iHRPGPeP/ BFX7EujYcXN7FMJV5oQq0qOMUA945LdKHmrPUbG/lq+wkGZu8X46Y0lCRfpj9l+8rRo/AklcBoJd fYNeg3jtQsC79f0eEj5fOcEYQa0UYFbYHTz4y0CKlkQlxE+SST27VD2/bNMAOAAB6LhBY6A8WCWq QfvojBVrU902fVSIQgWI4huXGgnFp0dHrL4T8A== )`
	`bpa.gov. 300 IN RRSIG ( A 8 2 300 20241212022356 20241205012356 44590 bpa.gov. EDrlbhbfJ+3ysW5l2HdRM8BIl78KLz98zHj7YHy0MyC0DiFKQIIwoF7ZR+wsQlj7ZM7IRfXrygFj YR+aRmVPHFzmL7dV1Ax2q60jG1cSTqvjLRSNlmZ4W1fP9X3XykSFfIXf0YOo/XWJLVa5PPFTGmQ3 fllK3qV4beL3x9gO+aM2JMH+m78W3Nsc/vb4MApyhCknP3/jzOuy0llSvB2/DRZ8er4OY2v6MNNV vpUnTwkHsSgsCP+TCZwGwwSRsDEcz9ylx3FTexU/qKZFk2NNQ25XydvrZgCpmhzvQq5Vi4CUnM02 PAsmQMZE2ztrjnVxXQ9pBf5SxNQFAkWamLwcqg== )`
	RRSIG=59425 and DNSKEY=59425 verifies the A RRset
	RRSIG=44590 and DNSKEY=44590 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test bpa.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: