DNSSEC Debugger

Domain Name:

Time: 2024-07-27 07:39:56 UTC

Analyzing DNSSEC problems for bpa.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to a.root-servers.net for ./DNSKEY
	Received 864 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 864 octets ;; HEADER SECTION ;; id = 8428 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAdSiy6sslYrcZSGcuMEK4DtE8DZZY1A08kAsviAD49tocYO5m37AvIOyzeiKBWuPuJ4m9u5H onCM/ntxklZKYFyMftv8XoRwbiXdpSjfdpNHiMYTTV2oDUNMjdLFnF6HYSY48xrPbevQOYbAFGHp xqcXAQT0+BaBiAx3Ls6lXBQ3/hSVOprvDWJCQiI2OT+9+saKLddSIX6DwTVy0S5T4YY4EGg5R3c/ eKUb2/8XgKWUzlOIZsVAZZUSTKW0tX54ccAALO7Grvsx/NW62jc1xv6wWAXocOEVgB7+4Lzb7q9p 5o30+sYoGpOsKgFvMSy4oCZTQMQx2Sjd/NG2bMMw6nM= ) ; Key ID = 20038 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240811000000 20240721000000 20326 . oHsHLvNMC6b1tY+OF7BG9etZbZMixRQiBD6gzpzdD32m4l0Vdh6yO0vA6ECQ3PMHihplvZGlYgZc aow5WFWod7FGAufSncGrrX+55sXKn4I/cZhBfPYh3WCCI+H7Ug29tV81VkeHSJgVd3q5LfUVYkun Czoysi01iU48KefmKZAGqzPINkOwRJT76+lyrOzSVQWvYStWsR5EGSvPQ1/tJQXOIzaEzuDDFp50 2fCJqX9CK9LcjCeleXpeDfdH+7Kk1TqRMrRHt3ehRsqh4yuR5buq+p+lCsHht28vdgjADBehrqmb hv6MGoBE3QK+rW5xuHqlu3jRV15JBY3/NnDSyQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdSiy6sslYrcZSGcuMEK4DtE8DZZY1A08kAsviAD49tocYO5m37AvIOyzeiKBWuPuJ4m9u5H onCM/ntxklZKYFyMftv8XoRwbiXdpSjfdpNHiMYTTV2oDUNMjdLFnF6HYSY48xrPbevQOYbAFGHp xqcXAQT0+BaBiAx3Ls6lXBQ3/hSVOprvDWJCQiI2OT+9+saKLddSIX6DwTVy0S5T4YY4EGg5R3c/ eKUb2/8XgKWUzlOIZsVAZZUSTKW0tX54ccAALO7Grvsx/NW62jc1xv6wWAXocOEVgB7+4Lzb7q9p 5o30+sYoGpOsKgFvMSy4oCZTQMQx2Sjd/NG2bMMw6nM= ) ; Key ID = 20038`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240811000000 20240721000000 20326 . oHsHLvNMC6b1tY+OF7BG9etZbZMixRQiBD6gzpzdD32m4l0Vdh6yO0vA6ECQ3PMHihplvZGlYgZc aow5WFWod7FGAufSncGrrX+55sXKn4I/cZhBfPYh3WCCI+H7Ug29tV81VkeHSJgVd3q5LfUVYkun Czoysi01iU48KefmKZAGqzPINkOwRJT76+lyrOzSVQWvYStWsR5EGSvPQ1/tJQXOIzaEzuDDFp50 2fCJqX9CK9LcjCeleXpeDfdH+7Kk1TqRMrRHt3ehRsqh4yuR5buq+p+lCsHht28vdgjADBehrqmb hv6MGoBE3QK+rW5xuHqlu3jRV15JBY3/NnDSyQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=20038 is now in the chain-of-trust
	Query to f.root-servers.net for bpa.gov/A
	Received 614 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 614 octets ;; HEADER SECTION ;; id = 38434 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240809050000 20240727040000 20038 . AUJBLpsUhWKjE6dvMcdfbNONvje+uhwNLO9U8w0BFf/JStvB2H0cug3378rsp9TixmL2Pl6iTnxd lIfGy7ce2UkJPmpABWGQvbaWBcMX8soIXD030Mcbhv+h41nzZxVt9/WdlTodaIporR4FVILyk+oE RwKwb9OCynYtshegCeic9ZY7wQvFCu9loycFBl8e3GXXzYE3MSNK9n5+PKNfF+MDRU1y8c9p9zOI dDogCAmpnHkIMy3LIr7EAWv0wQTYXji7Voiune7KF9bI/ziD+mGiX1h0B3+ubkK9XkKiMFVc+LX9 hn8F07K6wY1AhiYRgcg3u7mxEAZnJ36jApTVtQ== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN A 199.33.231.1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN A 199.33.232.1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN A 199.33.233.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to h.root-servers.net for gov/DNSKEY
	Received 610 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 610 octets ;; HEADER SECTION ;; id = 56897 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240809050000 20240727040000 20038 . AUJBLpsUhWKjE6dvMcdfbNONvje+uhwNLO9U8w0BFf/JStvB2H0cug3378rsp9TixmL2Pl6iTnxd lIfGy7ce2UkJPmpABWGQvbaWBcMX8soIXD030Mcbhv+h41nzZxVt9/WdlTodaIporR4FVILyk+oE RwKwb9OCynYtshegCeic9ZY7wQvFCu9loycFBl8e3GXXzYE3MSNK9n5+PKNfF+MDRU1y8c9p9zOI dDogCAmpnHkIMy3LIr7EAWv0wQTYXji7Voiune7KF9bI/ziD+mGiX1h0B3+ubkK9XkKiMFVc+LX9 hn8F07K6wY1AhiYRgcg3u7mxEAZnJ36jApTVtQ== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to b.root-servers.net for gov/DS
	Received 367 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 367 octets ;; HEADER SECTION ;; id = 34926 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240809050000 20240727040000 20038 . AUJBLpsUhWKjE6dvMcdfbNONvje+uhwNLO9U8w0BFf/JStvB2H0cug3378rsp9TixmL2Pl6iTnxd lIfGy7ce2UkJPmpABWGQvbaWBcMX8soIXD030Mcbhv+h41nzZxVt9/WdlTodaIporR4FVILyk+oE RwKwb9OCynYtshegCeic9ZY7wQvFCu9loycFBl8e3GXXzYE3MSNK9n5+PKNfF+MDRU1y8c9p9zOI dDogCAmpnHkIMy3LIr7EAWv0wQTYXji7Voiune7KF9bI/ziD+mGiX1h0B3+ubkK9XkKiMFVc+LX9 hn8F07K6wY1AhiYRgcg3u7mxEAZnJ36jApTVtQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20240809050000 20240727040000 20038 . AUJBLpsUhWKjE6dvMcdfbNONvje+uhwNLO9U8w0BFf/JStvB2H0cug3378rsp9TixmL2Pl6iTnxd lIfGy7ce2UkJPmpABWGQvbaWBcMX8soIXD030Mcbhv+h41nzZxVt9/WdlTodaIporR4FVILyk+oE RwKwb9OCynYtshegCeic9ZY7wQvFCu9loycFBl8e3GXXzYE3MSNK9n5+PKNfF+MDRU1y8c9p9zOI dDogCAmpnHkIMy3LIr7EAWv0wQTYXji7Voiune7KF9bI/ziD+mGiX1h0B3+ubkK9XkKiMFVc+LX9 hn8F07K6wY1AhiYRgcg3u7mxEAZnJ36jApTVtQ== )`
	RRSIG=20038 and DNSKEY=20038 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to c.ns.gov for gov/DNSKEY
	Received 291 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 291 octets ;; HEADER SECTION ;; id = 51152 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; Key ID = 2536 gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; Key ID = 35496 gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240919110526 20240720110526 2536 gov. HdS8shIfEbsTrkW5QWcemVuIGkuI/xGvzvDYxBTf/LuRRNzN5FvUA1PbOTLXYLEfPZkeLTC07umN zFbL4Pqx9w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; Key ID = 2536`
	`gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; Key ID = 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240919110526 20240720110526 2536 gov. HdS8shIfEbsTrkW5QWcemVuIGkuI/xGvzvDYxBTf/LuRRNzN5FvUA1PbOTLXYLEfPZkeLTC07umN zFbL4Pqx9w== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to a.ns.gov for bpa.gov/A
	Received 299 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 299 octets ;; HEADER SECTION ;; id = 52994 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) bpa.gov. 10800 IN NS ns1.bpa.gov. bpa.gov. 10800 IN NS ns2.bpa.gov. bpa.gov. 3600 IN DS ( 16399 8 2 2602a2d73b485a5ffca736cc03e0f1bc8d6a23497be8b860c0099a00589b1934 ) bpa.gov. 3600 IN DS ( 49754 8 2 4c8771fa2d0364aa76eaadecde082c12eab45843652488382c66799f3a675513 ) bpa.gov. 3600 IN RRSIG ( DS 13 2 3600 20240728083956 20240726063956 35496 gov. VBR8DacGj+uYbDEHRLZ89jsnCzToswjHYkH9O2o6yDzBu9SZoZzrYQB2nPEX6DVmtdzMaSz6CYRA HXt13xl/jg== ) ;; ADDITIONAL SECTION (3 records) ns1.bpa.gov. 3600 IN A 170.160.36.10 ns2.bpa.gov. 3600 IN A 170.160.100.10 ;; { "EDNS-VERSION": 0 }
	Query to c.ns.gov for bpa.gov/DNSKEY
	Received 299 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 299 octets ;; HEADER SECTION ;; id = 54167 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) bpa.gov. 10800 IN NS ns1.bpa.gov. bpa.gov. 10800 IN NS ns2.bpa.gov. bpa.gov. 3600 IN DS ( 16399 8 2 2602a2d73b485a5ffca736cc03e0f1bc8d6a23497be8b860c0099a00589b1934 ) bpa.gov. 3600 IN DS ( 49754 8 2 4c8771fa2d0364aa76eaadecde082c12eab45843652488382c66799f3a675513 ) bpa.gov. 3600 IN RRSIG ( DS 13 2 3600 20240728083956 20240726063956 35496 gov. inWwEsOQlZEoAFPt8zt1NcMN1wdBO80qjZobtUBSSBunmB8bv+GRIOI5Bht17uQMGdG9ap8sjzVT q2wphEAs0w== ) ;; ADDITIONAL SECTION (3 records) ns1.bpa.gov. 3600 IN A 170.160.36.10 ns2.bpa.gov. 3600 IN A 170.160.100.10 ;; { "EDNS-VERSION": 0 }
	Found child zone bpa.gov

bpa.gov

	Checking DS between gov and bpa.gov
	Query to b.ns.gov for bpa.gov/DS
	Received 231 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 231 octets ;; HEADER SECTION ;; id = 6003 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN DS ;; ANSWER SECTION (3 records) bpa.gov. 3600 IN DS ( 16399 8 2 2602a2d73b485a5ffca736cc03e0f1bc8d6a23497be8b860c0099a00589b1934 ) bpa.gov. 3600 IN DS ( 49754 8 2 4c8771fa2d0364aa76eaadecde082c12eab45843652488382c66799f3a675513 ) bpa.gov. 3600 IN RRSIG ( DS 13 2 3600 20240728083956 20240726063956 35496 gov. /vjG6UI8btLqfOyac9ORRqkCWk972B0Im0W8+g+Ni/BNGfDeNEt92VwyeDfZWoYPe9DXR4SNtNhG ojzSnXZlBA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for bpa.gov in the gov zone
	DS=16399/SHA-256 has algorithm RSASHA256
	DS=49754/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`bpa.gov. 3600 IN RRSIG ( DS 13 2 3600 20240728083956 20240726063956 35496 gov. /vjG6UI8btLqfOyac9ORRqkCWk972B0Im0W8+g+Ni/BNGfDeNEt92VwyeDfZWoYPe9DXR4SNtNhG ojzSnXZlBA== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=16399/SHA-256 is now in the chain-of-trust
	DS=49754/SHA-256 is now in the chain-of-trust
	`bpa.gov. 3600 IN DS ( 16399 8 2 2602a2d73b485a5ffca736cc03e0f1bc8d6a23497be8b860c0099a00589b1934 )`
	`bpa.gov. 3600 IN DS ( 49754 8 2 4c8771fa2d0364aa76eaadecde082c12eab45843652488382c66799f3a675513 )`
	Query to ns1.bpa.gov for bpa.gov/DNSKEY
	Received 2320 bytes from 170.160.36.10
	;; Response received from [170.160.36.10] 2320 octets ;; HEADER SECTION ;; id = 54291 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN DNSKEY ;; ANSWER SECTION (8 records) bpa.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAcOcCF8kWXibbaTkQ43q2vnJOr2m6wmKdZuS+vSnu9wmFqAH3zLNg0F3tO1bTV4y+yV6AyDt eOvroRGR4+rbISfLVPINnkTzOJtYazoCQrXERWSvot6A0e7/AS66yXMZpZWh6UF6vpe+LXVqVlFS 3c+ctwnBCLiCsMSfAAjjOCm4GSOYEYL5dvzS0hI7jgavtobuRUJbTTRV8VTRc6lm8QMtRboDo84n ygvEvxrZRuGgAXbFQy8H9H8PdnEMd1TupmkkXWQMGhwDRBZPHmK38i6IY/KeAZZjxLA56Ae1REpz 94Qvs4dQtwJ31UTH9oY/68fVzEP2VuaWRsd9ynGohvM= ) ; Key ID = 49754 bpa.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAc434F4QXjWA9ydXl+DCd1cgb58Ep7Phle0S5+K0jM4KD8bb2r9WmtGdrpmEOXV5sCR8QugI 1sjZMhfqpssk8SAl0P2PNP1z+cgl+/tPmO0qHFoqWvwVwsATgJwIM/Lp1FqmGl1x6kx4Nx+PQIBM etCb2vFL1f1Jpu3wW8V92ru2tPsZ1S9VYhXg+Aw6hnBdHqS1iVEN3lTXu/8WYMBFdO8V4RyTwyFl s8EQDya4SYcdcQ3cPItXxZxQrJKAcnblZhtM2g5bWMcrdkjfRf9N6VtJfBdhYqweTbFeLs02rREt xbKvZHoQtTVcTze8SBkcVVo/i1uaRIKt9oAr/+U+4Y0= ) ; Key ID = 16399 bpa.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAbAm8p8S0RjH9kI/DGvC51x0SHMeO/NCxhwxDvwtVhFDKnTXuNJAuH26w1r3KEpodBUi+F2W BLs3g1cUOCNq/Ub9Ri8ReLZol3yuh5O42RHs4A17HrEHL/D7c2tTNAJ6+odfy/603mH/kqPdiv+W kmmX1he9LO5aFybxLKLio/j9xr5FUkgUMgaIi654dyhBQqy4CNkfi338NjOjFwztg1D9S0h0Xo1n slXV629MJ5fsbRer6DA9BOB94EspBLD8w0QJyyl5vU2K8gwZhzgmnpz89mFtcSPbV3mGF+BbtW1+ 4EACfJKMrHjYKq1wL4SQBPoWhAgSFDxZ4HYO2QT4cO8= ) ; Key ID = 19479 bpa.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAbdJCNTI740SrSrlYtuFxWFlettnurvCerClEuOep90s4N6EZlS1q94zztS9HKPPY5MwW23y DjA8sbjUOOWXU2s7bMsQLCKjFcn6/ZF1oV+gkrI47Dj+adeUTWcinT/0edlpKxLV8N1u++2Sm58R KszC9uEGbaROpnST6UWDRt3AyQx4fn2otmTccd8cKmnzb4YmXDn8+y/gRXwOs/IwrT20HwlEQz8v WBrzVRzAQW3d2z1/NTyYUfoeTaDSCNWXIkIagdjfqq335Mz4UKmiTErpQbLcPUQoZoNjxlMdNesw MkERynJGJgIrFm9UiwGnrF40qKJEfdNzNC1T25fBVkc= ) ; Key ID = 13531 bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20240730022324 20240723012324 49754 bpa.gov. eZ9EDMSc/UDV8g+5ngq+YMtWMopnsxGEoGXIPI5TyVxD9JR+iY+xNV7UY70c51hmg1GVPgcYW2YB PBQGivVUhZF4zYqm8CFCe5PlOSbxAYDxt/eXTAHlFW75gXh6OopN+BBqNNODw7rRHLCFB7/aaoGp HcWH21Uk3XN3RlKmGqVPmDGoqAkIoT4im6B7PxSu5g5uvlw7pZyo9w/8XA7ouI8gsAvBpqYm5wPB 7uizqMHrHFzbkkE1dC7Ze/QJ12uLrpO62nIOOxGzN0engpFJ7tjpAU2caVs1FqvXVCRXwhjX/dVC Vf41XzmP6Tp6KdLMryxaHqhxwPyBKsO+1QCZeg== ) bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20240730022324 20240723012324 16399 bpa.gov. CSl0BJEEoDR9Ob4BZIWEiDFO/5TMalZA8+mcZWnJmRqbsY4lQOaauLnlFYa7oXEEoKGmfbsdIMpN r8DK4saOOSUvm64Be/TduCO+Gyr2EFZ8ieBWK1RKvkA0IXfPKLWm2WluABnOuPm1XG1cztp5XvSB vaTo227fWRGPOlhWzalUh4RWNiD56pBi5gD4Gq4fKaAqABAI1j2crj7MfhQBe21NNwNuJ2ocaIej n0RNvqjW6AonS11FiErBoGKlxX+8JgZme+LUvNJoMcZyhqLgt29G1sHJo1a++ovJoTFOM2CHejuD 0g1PXFCOZHjW7I13LLDQoNrmj1uVa58qe6r6Bw== ) bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20240730022324 20240723012324 19479 bpa.gov. dF5lxaUA8drf6Uknyd9+kHLz1hFJ1LXtFhD3ioXgOjodMhCeXy3BddtxY0NGUtv16CTXBAYKf3cI SPjd8Yon6U6tcBu/ylW1+B0jbihjQLMSTPFMAbY6bQMEm0FtWt4nc0fmrtVJCnWd2cUKjR0sSnmr MEwFsZGj/xM4ey21+Wuj6EkGx4Pa7Ek+HfORisX/QAvTEg+XUeBk020rBGqh9TBl8a8nYT6E+ucV kSSdkUdsDch+fNYm1u9m1+bDaOV+S/FYDIXpWmZ2wquUf9zFvOlCU3bzx3QwG9yQ3TKi6PPpJG5d EzoSVvgK5UYWv3yKqlz7NangLqGsCzeP0Rzetw== ) bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20240730022324 20240723012324 13531 bpa.gov. QZZCh7eK83qnrTP7eOi/IrnVgQHaZ23GuKDRTf1Z700IXxjnkix7kkqlr0QM67/CZUERsBU81CLM nH+uET7DkahYM1RIR6MKOVwR4eoCYfsjUvBp/Bw6ssRF/aU35IzQNVoxt5gB4L7N+5KI2AMCFJgb oBXbwGOSmDBUo5s8RW0sXnhcTBF6vgvqjhoCoxM1egop7nqj6wAWDA+yc4hehiT701lalMC/mqcL H9e/WWKXSZtlPPKQd7sro1EWtD/6KPHjO/dpV2Jrq90r/wal8NLUW3//1M0Oo+ssUmFn57G0U3NM +O1PggNZatkZAgP5h4steZaWgK4ijKrx8Z1q8g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for bpa.gov
	`bpa.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAcOcCF8kWXibbaTkQ43q2vnJOr2m6wmKdZuS+vSnu9wmFqAH3zLNg0F3tO1bTV4y+yV6AyDt eOvroRGR4+rbISfLVPINnkTzOJtYazoCQrXERWSvot6A0e7/AS66yXMZpZWh6UF6vpe+LXVqVlFS 3c+ctwnBCLiCsMSfAAjjOCm4GSOYEYL5dvzS0hI7jgavtobuRUJbTTRV8VTRc6lm8QMtRboDo84n ygvEvxrZRuGgAXbFQy8H9H8PdnEMd1TupmkkXWQMGhwDRBZPHmK38i6IY/KeAZZjxLA56Ae1REpz 94Qvs4dQtwJ31UTH9oY/68fVzEP2VuaWRsd9ynGohvM= ) ; Key ID = 49754`
	`bpa.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAc434F4QXjWA9ydXl+DCd1cgb58Ep7Phle0S5+K0jM4KD8bb2r9WmtGdrpmEOXV5sCR8QugI 1sjZMhfqpssk8SAl0P2PNP1z+cgl+/tPmO0qHFoqWvwVwsATgJwIM/Lp1FqmGl1x6kx4Nx+PQIBM etCb2vFL1f1Jpu3wW8V92ru2tPsZ1S9VYhXg+Aw6hnBdHqS1iVEN3lTXu/8WYMBFdO8V4RyTwyFl s8EQDya4SYcdcQ3cPItXxZxQrJKAcnblZhtM2g5bWMcrdkjfRf9N6VtJfBdhYqweTbFeLs02rREt xbKvZHoQtTVcTze8SBkcVVo/i1uaRIKt9oAr/+U+4Y0= ) ; Key ID = 16399`
	`bpa.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAbAm8p8S0RjH9kI/DGvC51x0SHMeO/NCxhwxDvwtVhFDKnTXuNJAuH26w1r3KEpodBUi+F2W BLs3g1cUOCNq/Ub9Ri8ReLZol3yuh5O42RHs4A17HrEHL/D7c2tTNAJ6+odfy/603mH/kqPdiv+W kmmX1he9LO5aFybxLKLio/j9xr5FUkgUMgaIi654dyhBQqy4CNkfi338NjOjFwztg1D9S0h0Xo1n slXV629MJ5fsbRer6DA9BOB94EspBLD8w0QJyyl5vU2K8gwZhzgmnpz89mFtcSPbV3mGF+BbtW1+ 4EACfJKMrHjYKq1wL4SQBPoWhAgSFDxZ4HYO2QT4cO8= ) ; Key ID = 19479`
	`bpa.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAbdJCNTI740SrSrlYtuFxWFlettnurvCerClEuOep90s4N6EZlS1q94zztS9HKPPY5MwW23y DjA8sbjUOOWXU2s7bMsQLCKjFcn6/ZF1oV+gkrI47Dj+adeUTWcinT/0edlpKxLV8N1u++2Sm58R KszC9uEGbaROpnST6UWDRt3AyQx4fn2otmTccd8cKmnzb4YmXDn8+y/gRXwOs/IwrT20HwlEQz8v WBrzVRzAQW3d2z1/NTyYUfoeTaDSCNWXIkIagdjfqq335Mz4UKmiTErpQbLcPUQoZoNjxlMdNesw MkERynJGJgIrFm9UiwGnrF40qKJEfdNzNC1T25fBVkc= ) ; Key ID = 13531`
	DNSKEY=49754/SEP is now in the chain-of-trust
	DS=49754/SHA-256 verifies DNSKEY=49754/SEP
	DNSKEY=16399/SEP is now in the chain-of-trust
	DS=16399/SHA-256 verifies DNSKEY=16399/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20240730022324 20240723012324 49754 bpa.gov. eZ9EDMSc/UDV8g+5ngq+YMtWMopnsxGEoGXIPI5TyVxD9JR+iY+xNV7UY70c51hmg1GVPgcYW2YB PBQGivVUhZF4zYqm8CFCe5PlOSbxAYDxt/eXTAHlFW75gXh6OopN+BBqNNODw7rRHLCFB7/aaoGp HcWH21Uk3XN3RlKmGqVPmDGoqAkIoT4im6B7PxSu5g5uvlw7pZyo9w/8XA7ouI8gsAvBpqYm5wPB 7uizqMHrHFzbkkE1dC7Ze/QJ12uLrpO62nIOOxGzN0engpFJ7tjpAU2caVs1FqvXVCRXwhjX/dVC Vf41XzmP6Tp6KdLMryxaHqhxwPyBKsO+1QCZeg== )`
	`bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20240730022324 20240723012324 16399 bpa.gov. CSl0BJEEoDR9Ob4BZIWEiDFO/5TMalZA8+mcZWnJmRqbsY4lQOaauLnlFYa7oXEEoKGmfbsdIMpN r8DK4saOOSUvm64Be/TduCO+Gyr2EFZ8ieBWK1RKvkA0IXfPKLWm2WluABnOuPm1XG1cztp5XvSB vaTo227fWRGPOlhWzalUh4RWNiD56pBi5gD4Gq4fKaAqABAI1j2crj7MfhQBe21NNwNuJ2ocaIej n0RNvqjW6AonS11FiErBoGKlxX+8JgZme+LUvNJoMcZyhqLgt29G1sHJo1a++ovJoTFOM2CHejuD 0g1PXFCOZHjW7I13LLDQoNrmj1uVa58qe6r6Bw== )`
	`bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20240730022324 20240723012324 19479 bpa.gov. dF5lxaUA8drf6Uknyd9+kHLz1hFJ1LXtFhD3ioXgOjodMhCeXy3BddtxY0NGUtv16CTXBAYKf3cI SPjd8Yon6U6tcBu/ylW1+B0jbihjQLMSTPFMAbY6bQMEm0FtWt4nc0fmrtVJCnWd2cUKjR0sSnmr MEwFsZGj/xM4ey21+Wuj6EkGx4Pa7Ek+HfORisX/QAvTEg+XUeBk020rBGqh9TBl8a8nYT6E+ucV kSSdkUdsDch+fNYm1u9m1+bDaOV+S/FYDIXpWmZ2wquUf9zFvOlCU3bzx3QwG9yQ3TKi6PPpJG5d EzoSVvgK5UYWv3yKqlz7NangLqGsCzeP0Rzetw== )`
	`bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20240730022324 20240723012324 13531 bpa.gov. QZZCh7eK83qnrTP7eOi/IrnVgQHaZ23GuKDRTf1Z700IXxjnkix7kkqlr0QM67/CZUERsBU81CLM nH+uET7DkahYM1RIR6MKOVwR4eoCYfsjUvBp/Bw6ssRF/aU35IzQNVoxt5gB4L7N+5KI2AMCFJgb oBXbwGOSmDBUo5s8RW0sXnhcTBF6vgvqjhoCoxM1egop7nqj6wAWDA+yc4hehiT701lalMC/mqcL H9e/WWKXSZtlPPKQd7sro1EWtD/6KPHjO/dpV2Jrq90r/wal8NLUW3//1M0Oo+ssUmFn57G0U3NM +O1PggNZatkZAgP5h4steZaWgK4ijKrx8Z1q8g== )`
	RRSIG=49754 and DNSKEY=49754/SEP verifies the DNSKEY RRset
	RRSIG=16399 and DNSKEY=16399/SEP verifies the DNSKEY RRset
	RRSIG=19479 and DNSKEY=19479 verifies the DNSKEY RRset
	RRSIG=13531 and DNSKEY=13531 verifies the DNSKEY RRset
	DNSKEY=19479 is now in the chain-of-trust
	DNSKEY=13531 is now in the chain-of-trust
	Query to ns1.bpa.gov for bpa.gov/A
	Received 2480 bytes from 170.160.36.10
	;; Response received from [170.160.36.10] 2480 octets ;; HEADER SECTION ;; id = 60278 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 7 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN A ;; ANSWER SECTION (3 records) bpa.gov. 300 IN A 20.42.128.100 bpa.gov. 300 IN RRSIG ( A 8 2 300 20240731204912 20240724194912 19479 bpa.gov. YeGh2H7/x3H2Cs5++3SfCZaSJ8jAK82eBam1EHidrVAj03dSsXlFJDHy8oypFgmPd6z1bHJ5nE7P ji+StjbIoK1Y+kouuOI08UOirvQe1lHJNZL8v4R+u5rPPuQ5B7Qk8Qzf4IJpPmECyWPa06P+EyiX AxFaz6zzUPk6aTVGfO8XPbGCjdX/7kLIU7xvoONt8K2liA/a+S47iX8v12NCYIIv3aGdpvNIzAVy 6gHhcFf8gk3vNjM/VI85PO0q+fwqBcuX7osUECipRc3IndXtSRajHXb/o0XLRI5FE9EjPGjSjNgt /LdIOvE7zijwo5c1TRhVZ9Kzm1cXp+0EUBxlZw== ) bpa.gov. 300 IN RRSIG ( A 8 2 300 20240730022439 20240723012439 13531 bpa.gov. I1M+a/A1xY4vUSFDa9Gi6qVY8cTsiahO4kJInZ5r8wDGbkRPfqqysDVp9kzvKUvyuFAIlIMoEnhD XEeYLbBu+DAHXsPV6CCF8ADBLFurWe6muGnovJ8tFzHnzRPJ2Y45UcXAOYe8HEeHE8Uyu8M6O8sn 7rZZCOL0PvQKIaQmgHfHsUFUiWgLeE1688TiP6ugOmIodRgVdajAut03VouK36Fq9sgdEUBNIRU3 4sM1AXpAuVOU/bRxO0GeSI0ywSXOUpTQq4AR7suVtF4msJPiuqInJdlP+KZ7XYfOInaCIZo9owCm D6iGgy9tUMxm+bTh0hATVDjqqxh2DYnQiijbvA== ) ;; AUTHORITY SECTION (4 records) bpa.gov. 86400 IN NS ns1.bpa.gov. bpa.gov. 86400 IN NS ns2.bpa.gov. bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20240731204810 20240724194810 19479 bpa.gov. Jhbv2rwMo49gpQ6RDDhfyPcFeOccS0FIMvkK7IqcZTwBRGQOMcOAe8iPi/yOpd67+0CRGZHzGA78 gSu4rFb9mQgBmOXwoGmHnFKlLdYaZVDfyEWxH8KTDrvXvgnDgsIlG3jqyH51dXaMkZz/ny/FNH9Q iFTENCfhSZdyDXNlBXq85G7us5nrM0t2skbRj4GaAiYkpPjLvCE1lxvOEaYKLUbmINNsLexfhjFG gskQdCc9u0cA3YFIMqkI7NqA+0xMwxe1J5qv/5dS1dWPkD27zt6nV9dylnY0/Lmp6r/o5pJnMBxU dmhbBfmPVd6N9MEY0AI2N1zEaLADVCn6P80oBA== ) bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20240730022337 20240723012337 13531 bpa.gov. pS6PLHGs51CubQEiB9Fcgdj8IzKuogx26r1TU93LFV5FjvUFVX4HEqoXWWrZiC35TjDAf9ipMUW9 lFir86aISmK0WLGCYYLNzk7mpAfhhTSnwk+GOThPLjTyMEwxJLOmCve171xp0qRJKHtEC0yGT5zR CeBY3fVFyCepY2k3Z88q0VWGkIJNKMWFFvK4eakCXwCtPFY21kxc9jNBBMfragz+3dwi/HjYpm1Q yFZ9Zs3wrdYmb2jtpjSp7CQNhu4vvbIteEHe/xxhuEg7aGmVkIxbpagwpi4j/8n29J9xdFuMfrsY TN0guqnKOD0CU3nLWbvOBZGz1HWFZ3Q4KIg5iQ== ) ;; ADDITIONAL SECTION (7 records) ns1.bpa.gov. 86400 IN A 170.160.36.10 ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20240731204810 20240724194810 19479 bpa.gov. HVwCYO5HftXFTgGLzoEjzhKsvf1gMQf0qlycsQuzc9GA4xi3UvbhSUykJ50Z15YKectrbhRgXelr lXSFwuuSWDNvOt54j+hqQYjgp895uTihgh1MnzjA0/gXc10kS/VW7JMTHh0cDG+dZznIBpu5jBGf Sel6VNApyPljJbrnBcbZ5dqYDDdgPMJMgAEb3GEEMo916Sa3ANRFC/hrEIPiDntxXEeG2dJ9bMx1 /Zueb7F6OYUKZG+R6DIuxLrVZyrf5aVGX1BuCe1eKXyuzvC867dwmkkaeJC7kN0zfeN7YoD/pk6U bhdsPIAqfD+V2QS+tLbTXGKle+hVFZ908uH0LA== ) ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20240730022337 20240723012337 13531 bpa.gov. iqHZWLXl1ROp3+vUPZ45UKQjH6gCxBp7JZ/aRwAwfeMGZ5eh6U5sFCN3j0e3ocLMFHeOsK675774 ZPw0GSg7Lc3aweGf+mLpTja5nsDeGeV5cUMV6hQ0XJtRiotN8OT1BY5QKP12rBd5jDXlb4DbnABO 39OW7RNFiqwW3bY3r+Qc+7mw7co+2PYYL8Pm5Sq2K+J+6g5vsygNI3XCC4BL3FFnGxozPpSncScS VbH6CqMWd2TexnsbknS/PonwYYABwN8qfhWmfUM1m6yQHLM/eo6cfUI8nN4cchpkjzKTSvU67Pdu CaEHXvqtMzZAuh0CqDyfJbV/z1nOBIg9y8kAzw== ) ns2.bpa.gov. 86400 IN A 170.160.100.10 ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20240731204810 20240724194810 19479 bpa.gov. EmMBpxg9hPlu8TVyPNBqijO7Rsxkd0nPlvqT7LgQHmoMX8XbQyr5K7iXSMk0fmXSs2BwdJj5qEBq 48um2F4nBj/aIXRAMKbJGcwqXt8P1Xfx7C8SOMobvlBxQN1nuE/RqUw0/dmMjCERvCBzYi7VTsPG kl2AYPGnaEAfexraS7aB/a4adu9K4uy3lWGW4wvxcjQsUuia12FQ4SEnlQLTVQiCsZMvZ//PpO00 k4bm2aqreB0c18cTW5oiFmDBms47Wf2GVmYjvWMlFaOBsx/IDV+Xkz5e0jQDAR1MQUh3O7Yc814s 9a/qmqjacHQr1HWzUd2iofN8ewcsBjiJjFwXtQ== ) ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20240730022337 20240723012337 13531 bpa.gov. Hwdfa/1FIH0JM5KWMT5aEwo/JY3toEdhHRbuhjRqVu28t7mxpEfHR8/De6YfSqPre4/SjX6t539M uJ0PaKOWQ1UjdO8/+vU4ZxBEtzDtyyqPtckjIA9Ipb0Ye2GdTx7yRlo9jWyGQFzhy3DoN4uCJB7S nE7NWTvCCIarqd5nttzl91pxVbwQuO+RG1ZeZbChm2H0VebRYbCMr3Yhu5IHitK0n2+o0R7pzrgs mxvw3T8xqbwh0k8sm9TYiW40ZeuXOXOlOoWfeyfVzClUCriNG7Qt3yba71jYsNjEUHmEIW0/11bu upWeP4LlIQElrLc9ENvEKiDWYW366QaWo8SKJA== ) ;; { "EDNS-VERSION": 0 }
	ns1.bpa.gov is authoritative for bpa.gov
	Found RRSIG signed by bpa.gov zone
	Query to ns2.bpa.gov for bpa.gov/SOA
	Received 2511 bytes from 170.160.100.10
	;; Response received from [170.160.100.10] 2511 octets ;; HEADER SECTION ;; id = 57465 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 7 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN SOA ;; ANSWER SECTION (3 records) bpa.gov. 43200 IN SOA ( ns1.bpa.gov. hostmaster.bpa.gov. 2024070302 ;serial 43200 ;refresh 3600 ;retry 1209600 ;expire 3600 ;minimum ) bpa.gov. 43200 IN RRSIG ( SOA 8 2 43200 20240731201813 20240724191813 19479 bpa.gov. hzn5YoLF86p90m8eq8+QVUC/81IIEyxzyLNNV2/viq6LvO/1efKcrtwDPnhCzTSJ5ssdjiRln985 NcOjQLUNjTeGi2mMDzcl0OogQY2bFUkmrmtEKPd2Bk8Breu2+LlHd4an+bkWqmZM7/M9Zq1DBYCA 54DGUYPGX/RivW8CwF8G2CoexlB2+tGbwFanBKR+mj2mZdQt3KUDaUe4LxQoLCZip69kgv08h/PW /gU4MpIfaA/afhEOc97UzPTrTAFrvlEGwimrcXxLPQwd2FNJohvzseIe/CL6iN+K8e1ikdh6PbN3 x/XTkCij3lkFND62+CQC2xvnJnvYYXW6q90Faw== ) bpa.gov. 43200 IN RRSIG ( SOA 8 2 43200 20240730023011 20240723013011 13531 bpa.gov. f2sG0JQXKcmVGO344oq0eFs3sgnOabl15OWodIj94H1sI1pUGI0EkI0oeNeOACxuxJ6zO2wamraq 5z7f/4jaC6H1dh9wEqhCDn37kG8sLHGRT1n5mPCPkHtDBUTV8ObEO1Oj7IhA4A+5RCw/w1QbA4Za 8Rs+jK5tdEgmUw3gXhU2ARjVu1xmJ+PILH+qkMiWZq5yV0grLy9oqcTzR3uZIz8O0t4N3LvL/47f 35IU1XQEi7NRfYHPKAzDevrwZiYlu/Kjjcy0T/swBC6kqc56BNpP1unM21AkBtkrMcUufMIbBAmm QBCoW3wvfyu4fZYvzXauWL9V17VZfz66+7hAwg== ) ;; AUTHORITY SECTION (4 records) bpa.gov. 86400 IN NS ns2.bpa.gov. bpa.gov. 86400 IN NS ns1.bpa.gov. bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20240731184608 20240724174608 19479 bpa.gov. nC2p5BJ3IrbL3dvfqbXLm66ZWYnG0SAQEVkCVZ1xRcs3MPDawuAXERSSYn2PHzlZRqsawu0W+VC/ 3qLiRuCdubkHcTkhDcwAEsI0mqwJiKgXofQUauUqFBYAAhqjVeAusiG3ir+ZmKpIwG70DVaNROrJ Pi39j/WNmfvdXCjo9GOwy/QLj8gIScHHWjP7xNAMkj+mLypIzxY17qAldMNhrHrAnEqcjZQDhV6u aCb4GAjYnFexuDPQs7EOtD/vxYolvCSaDqH8Q/eV2AalltlIhxubT0OONT6R09iDNDWQSDpMwRrN Ym79YngZcGWKW8BkJjW4XMGdQTXTxbK5/nTKeA== ) bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20240730022328 20240723012328 13531 bpa.gov. GigPJCu6vAGGAs999xkWumWz6eCOFhZHYsqvky1mWyOT56KkOPROiJ+Lm0YMuSh6vsnBE4vJGkmi GfZBD1/OHKHr8fyKd9XQT9K2AzuHAu0oKpB31POOqt3vndPp3PU0WY1ydQyyXj6SYTNvanm8jvkI WpE5dDiwXO1jmaAPM5nxmuqmYa6c7W+u7RfFWHqxGBz+N+nfehvvp7BJTnNiFSeijTtAa6F7lNNt 6eN/ErhkksCNJ0z5woGfE3ug5XJMZbddUFIC4zO7cmXGt8fjpL9W8icCV/JL6b76EcFu/Btc9Q1T sT/OWp1cHI9Tp1mhkniOMMssbS0l3/ZDqbLvaQ== ) ;; ADDITIONAL SECTION (7 records) ns1.bpa.gov. 86400 IN A 170.160.36.10 ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20240731184608 20240724174608 19479 bpa.gov. ifAJ/64jJHo6CaFd5AVDBtz2zjqsdFSy3a5/yAmeyOe8/7F9JQ71sX1wvGJh3k0havuB5aTa2pfM GMUr52GO4TaoSEQSqXBm6GwzsavYTaxXRXf6TfatHyE9BKJcoVAmCFmkDcICFvO2RFKu/cf3TBn4 LnDvVYLJb6VT9YeGnwVupZbfHD5EhDXlf9y2IayBCEnM5bRVqlalwMQBtF0MoAA25J07cAYv03tf IC0cBBW2mCMiM/YzXJZRmcPm/Z6crFlboO1ClRNVa4XFLSZ6bktPQB6sk8AxWv2tEVrPzlfpqqkh MT56AmY+6fTcK8931ZQDcGZCiID3SkDdYj/uWA== ) ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20240730022328 20240723012328 13531 bpa.gov. MOyUy7nBORWlyOzWoXzMyMOBb6bTLr43Vejs7liZo0sfcpBvfuH/XC9MJorXCfahA+y0Bm+cjSE+ DlHBmraDWEW9DQTJTJy/9ibjLSdH8UjTOijC+52NzXXJkrVx5GM/kwLRtZRcoNxEYg2S9jHbnTt+ Nj2QDcpZDq6KiisGl/iwTN2n3igybbPsxPcgUlEc8yuuXSWDtg1QZ4pNXL83YII8SYfv0wedpZh4 68BAyqOKnulHsHX+9lDcjLeEkcpFVDmCCIuRxdDBGkUwcDQiQYjM6NoUhXWsN90CSHlbtM+4vGnI YTUKqw2GGlZAYVynBqxN3Nd5WGmnQvU+Ty4DEA== ) ns2.bpa.gov. 86400 IN A 170.160.100.10 ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20240731184608 20240724174608 19479 bpa.gov. omcQO8TERezEYy4CvNEFTkffr2Xv2H6pvjvI+/VmTjk2XBX5whsUd/wH6xP12KxVAb+3k2qHAeVV 0ContiyP3cDFDEoTczP4TZsm8eDj2hZ4k1XKQc2jjACg+e+UNmXGAr/D1ga7/kf+0UoBvavD694L oZ20IkDOUI4DY/l7/4BXS0436Tib9VfCs2MImr785452I3Zyy2gJqwm/L7qlYFvppFgYX0LI+Ofx Jb6jn1ftGmBydzU+FUytjLKtWIEJl99ufGoOMcawROVN0ZfhenJpwuoNHc0GsSqH9Z9eCW7MIujl mbDwWBQygz5ZkNAm9graAQauIOq1Wbd2UapdZw== ) ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20240730022328 20240723012328 13531 bpa.gov. jQ3noOlX1ElQnhsastx5Z3k/SE5agkzk+CY41bvQPCu7rnWyVIkWXlqDjV1L0DPVhxlnvgC0qotE jQBFF4EitiRH4l4eXYcm7NAWoHOgJLWT/INTTSVXewG4N+NuyNanD+moExl/U9Bl8zXL4G5SEgEe RYtK1Ya37c12TltcALwjXk1M9BYNZ/Xj+9begxBHb++W63R/qC69yLyJhtvs5BsSUaZcNNOgYP4u Cqxkkr0MODfAoDr46jud14FpwhxJE/ZVni65/ObzjSTVnyIpTg9fVUleOzfqdo2FaTofeEp7bnIc HBfodmdMoSNfHJ0Fobi6px0yjzxhmoH0BpXwuQ== ) ;; { "EDNS-VERSION": 0 }
	Query to ns1.bpa.gov for bpa.gov/A
	Received 2480 bytes from 170.160.36.10
	;; Response received from [170.160.36.10] 2480 octets ;; HEADER SECTION ;; id = 35645 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 7 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN A ;; ANSWER SECTION (3 records) bpa.gov. 300 IN A 20.42.128.100 bpa.gov. 300 IN RRSIG ( A 8 2 300 20240731205136 20240724195136 19479 bpa.gov. pv8PZBkHHxIvkJn9FL+a5Eayyw3ZNXy5MfScTGahWU4PHsIzYYLOFKyGgyOmTig8NsQ+khZeKqn9 wlFk8AMyYRIKVEKYVBt6TlkuQUGdMWo8Wi176YsTQNvuOC7IGeSRZfRXmGgBVL4L2UvWIOjXUrca wfFrJpEG/x/o0esoIWPyjhoVOh8uaWcn62hpBaHc7KM6SuUuY2HC18ouotjX6M7CTmvbw42QlKfp 9KbTp4VJ6J7mWNXwYabe4Lbyj4sSXsCUj1MeP1O9iSSeGlGVsfBJqr0mx6tre7FjfmKVNMeZnzBM Ru/AmRS/GG0sDmiz158rbb0zdc9GclFLu9jl8A== ) bpa.gov. 300 IN RRSIG ( A 8 2 300 20240730022326 20240723012326 13531 bpa.gov. pe3lj8XfAqEJ+tZNbFkdWaUybmCu7vkG4u8zEcNHCLGwQ50Sw2YzfqfbZ7kPDEX8ILje6f2eBesp 5rk8jb742hyHUp82AiV2wC3JjpXycJJ54gRJMwZlLkFhc/Hw+qnp0v9KqVBOQ37Sk05TctD0gpwH 7WhDlbtTh3a1mt5lhpUKhA8G22iNpHgrkvZfeYo8ATCy1mZUt5Z37Et1aLKLWtpbzGRfu658L3p8 SrpCQ6syWXWBl7GVVpBNQSrKffW8jH1AT181oul7n6RFbC7QL6IQmuR41td8kVcEfg5M9k/craoc ImPvF6AW3RbuFoJRopAuMlRnaQvjXKbwJQ7mwQ== ) ;; AUTHORITY SECTION (4 records) bpa.gov. 86400 IN NS ns2.bpa.gov. bpa.gov. 86400 IN NS ns1.bpa.gov. bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20240731204818 20240724194818 19479 bpa.gov. mSC5kPSDBf3ADolCLSL9yh3mBhQvSafMK/2O9rpxOstxBfQPhg+BZzTtIoru4doPhyND/o13GPXK B8RC7H6DdBDO8YiRqrKpZ0qnwDSLELh46PDgSLWSWlOQWzRmckqBVR3ZwJdPI2O9aILtgKMbxFiV oItdRwqKH+qj2f8CpO81fItRQC+wePgpfgrDepdDrnXDtej93MeSVasgf3h7fYQ17xj2JWj/oYlU wD+nHYmBB703KZgVsaXMP5qjOytTa9BTQsAiBi+w1VX0K7JVaz7zeDPeb0j6yUhrDq/y5ktuKpnF wfb5ezXgmiY3pQ4v3CTCa3UNLyPZtBR9QHFKDg== ) bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20240730022325 20240723012325 13531 bpa.gov. X7z9vUeuhVRAOARhycon0v1Nw9RszhJTsQnk5JFNlx5vDXQzRTHnVvkEl3bgMq5QoNamDOSMJA8u d7a/r3NC1iUVP0Ei3b2br0uV8eMfcVrrDUUdiZY+ajQLerYfdbgH7kH2SUSzqJQl9YjNf+jbxUKm ILAjg2cbdGeFmCv0D6ktghl3OmQxjQQt1J79Whn16EworhkAS81APdKZt6HSixceqPfX6OPIXMZt zuXElP2ywVRM+5WC95hGQ77o8DYTyvdbSPHgaGtauN4bDvQ1bPnULfjQzxu56m4Ttt9tHvSeTq51 sSd8TAzg6qRlLGaxLCiVf2/QFEM9EAfs/rN76A== ) ;; ADDITIONAL SECTION (7 records) ns1.bpa.gov. 86400 IN A 170.160.36.10 ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20240731204818 20240724194818 19479 bpa.gov. fMCaY6uLLjkQaLIMRfDsBAjNZ0VWpFey3hYbhwI/hulIWUFFpny9rKSdp1++eMJ9gv0gFQJJuSQ/ 1DoKqhmWHqrWz7zJS2lgcg6ifo1pZ9JSvJuG3iOih292XUjGr56XwgTusuk72mgliZ4aP4/byi/6 FH1QRKwgINyhT2UG3GjnFoABfxej9XHUU1BB5DWTlURRi0jKu5juMZbSpCSYtHZEt5zt/BhOJHz3 pgWm7YD/W+n4bLlGMdA/eymKSQsMt3gIbBVuwaXT6i+TnA+sek2WYK423q5Z9P4Y50x9DvSd4jzZ F0ZVqkVMlsozW/mD1J5S+NfVQChbjPP0Vhgy5Q== ) ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20240730022325 20240723012325 13531 bpa.gov. tRlpXn0aDJ5Ha4UAaRmJ/soMwiThHEee3rDz3OvN76q27EK3WdOvwHKk9APQ5otwYcKXpkMT1rjH H7TW+wPqU0ljG1qw+0F/x5G9S0OHaJyEXjfMvdrSTPKZOlcl5k/cMt3bWp1Fr0XQAF4j6HwWiANn /GXIIHMBXD2njk3R1rYuu88KwX1wHamoW+ONlE/WR+vyyHtUG/Rl7M+0c/Jmo7FrPCdxcxJqNVyC X6/6hN6B8laTYr9py2YJcNmIXCuq1Kjjb65A6pwdeywHF4rfH9ZOcgRsjmKunQlEvvIgl9qlGr/5 Zp6ebxGzDQz+xOoR62QKH6HMR4ULPPxvipKJXA== ) ns2.bpa.gov. 86400 IN A 170.160.100.10 ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20240731204818 20240724194818 19479 bpa.gov. rbPh6yT/JIixNtB0xA/UXswJ1NoLiMySdBXMY0VtkbqrdtrHe73qPZcL8oe3IaAoNPpzYQKGe5gB 7o6fg7sNfTISB4EqZT5J2b1gJ8R6G0GkhhTG1VfNv70v0gfPyGIUYzcBolD7bMFjYZm/4RIW4Tq6 tpZgRHv5aWNN+HNJqIpXcwltTsrgaR/BBDFGlfa+8cxRPf3DJx+av4uv2Nusi3/ft8vaYQNk4CFP /6JBuaYrm4Bo/16waqNC76SbEOWlFj+rF+yzb+1fP0WqHYoOaOisJhTXTr+n4GWWNP9XfrFmEjwC l8EaJFBMguk/XfpM5GjYSPIy/IqiHuUhHs3Y8w== ) ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20240730022325 20240723012325 13531 bpa.gov. bpcz+n1k9tTohf3jLaRNZWDESjR5VL514xnOJQdgf2FlFEFpQvdxFax/xsWCFRkKeqoYXJdSfIDb YDu/USP7609/jj/RoH4uU50iIG+IZmLZRkHDPGvzlJ6M5jZQOXQL/s6k/UOCNDHI0Sz5w0HIshEG 3jW4Y2vj0idzoMmS+uP3xVFoW0/FvuZFUzhNjU2L1E08YYYS9lLoN4upmGgI3Evu5NnaIkFwWvx8 UXtjIuVbGtw+DpoASM6Gv2fZHS3JGfTCxfmaQDw1zbkNqt1DxI92cR7WfvD6o+iWU0RpBaghMPh2 meU7Tn3nbHFYnpciq2dhn15LpGbipS/M2epQfg== ) ;; { "EDNS-VERSION": 0 }
	bpa.gov A RR has value 20.42.128.100
	Found 2 RRSIGs over A RRset
	`bpa.gov. 300 IN RRSIG ( A 8 2 300 20240731205136 20240724195136 19479 bpa.gov. pv8PZBkHHxIvkJn9FL+a5Eayyw3ZNXy5MfScTGahWU4PHsIzYYLOFKyGgyOmTig8NsQ+khZeKqn9 wlFk8AMyYRIKVEKYVBt6TlkuQUGdMWo8Wi176YsTQNvuOC7IGeSRZfRXmGgBVL4L2UvWIOjXUrca wfFrJpEG/x/o0esoIWPyjhoVOh8uaWcn62hpBaHc7KM6SuUuY2HC18ouotjX6M7CTmvbw42QlKfp 9KbTp4VJ6J7mWNXwYabe4Lbyj4sSXsCUj1MeP1O9iSSeGlGVsfBJqr0mx6tre7FjfmKVNMeZnzBM Ru/AmRS/GG0sDmiz158rbb0zdc9GclFLu9jl8A== )`
	`bpa.gov. 300 IN RRSIG ( A 8 2 300 20240730022326 20240723012326 13531 bpa.gov. pe3lj8XfAqEJ+tZNbFkdWaUybmCu7vkG4u8zEcNHCLGwQ50Sw2YzfqfbZ7kPDEX8ILje6f2eBesp 5rk8jb742hyHUp82AiV2wC3JjpXycJJ54gRJMwZlLkFhc/Hw+qnp0v9KqVBOQ37Sk05TctD0gpwH 7WhDlbtTh3a1mt5lhpUKhA8G22iNpHgrkvZfeYo8ATCy1mZUt5Z37Et1aLKLWtpbzGRfu658L3p8 SrpCQ6syWXWBl7GVVpBNQSrKffW8jH1AT181oul7n6RFbC7QL6IQmuR41td8kVcEfg5M9k/craoc ImPvF6AW3RbuFoJRopAuMlRnaQvjXKbwJQ7mwQ== )`
	RRSIG=19479 and DNSKEY=19479 verifies the A RRset
	RRSIG=13531 and DNSKEY=13531 verifies the A RRset

bpa.gov

	Query to ns2.bpa.gov for bpa.gov/A
	Received 2480 bytes from 170.160.100.10
	;; Response received from [170.160.100.10] 2480 octets ;; HEADER SECTION ;; id = 12000 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 7 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN A ;; ANSWER SECTION (3 records) bpa.gov. 300 IN A 20.42.128.100 bpa.gov. 300 IN RRSIG ( A 8 2 300 20240731184646 20240724174646 19479 bpa.gov. VJaa4Su+Ti2NlI0Ng9HBFgVT/v6JhwmwXroB4oXClvO2iTvDcXGosdhfSprUwT8ZfFY9UkKeq3Nq AsuysKennDmSGI5nG90AqBs41GzP5BjzT8D2HXahW5ig9ywMOAU493L5qMrPe8adHdYgWJFysDB/ jqjSD3sa0Ec9yZGl/E1Cw7LStAQ3cSwGyXbnGFCee4OQFt0jBOKBgH7/3jrESn+BRcscvoDtp+WH 8Ga78wg29edFNncnTTziVnlgqBgOtpJXpTjNm01YEXtvbPL35W7BhGothq+ujy7N59xL59dC2WuW zQ6y97QwVJTM6vuAfL+pQGQCFMbciDyDrnFmJw== ) bpa.gov. 300 IN RRSIG ( A 8 2 300 20240730022407 20240723012407 13531 bpa.gov. jzc6tzN3VNxRqbc+u/zaZh44QFv0APjMGE8E2OPyHCKDHHikBlVE307ulmUSjrgx1IykNOAu4PDr IqNDxJxCQfNIzCiOMb7X0Yli31gS7OGYccIQqJ2Gy7CC+0bQCtqEJxUOpLEILuhhaVBggv1gAxPn 8KFUHizTPGzsQmrqPwaG3inK5WQG7l7HxhVqoEzRilbbR51lHZx8iyrhdQfYwHpaPZaZKtv68FOs UOYWG+abeAlQ+Wp3xT6se5z01804Ain+3ewIJabvlMZ3sMpgD7iltT1sIfCnWdoXVocbZY0nBeFv cTAoHMEHnhqXoyPbVVwES+oSjJPMXcY7wJODMQ== ) ;; AUTHORITY SECTION (4 records) bpa.gov. 86400 IN NS ns1.bpa.gov. bpa.gov. 86400 IN NS ns2.bpa.gov. bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20240731184607 20240724174607 19479 bpa.gov. oZIom0w8mTgGkfsyyp5ZS0hA1V86O11r8CRKFTdkDXXoaRHudP9ZugbRajKKp78UL6kIeUcBbpKI MwjFhbah6Ah3T2pNkvavto2i3DdyxZL3TC2kV6WwAf2oGu831h0AncGAig43+6oPSGV7jVYRDMMV SMLe5QR5zS6WOOQyCi6N3RBiCB/zo2ZqUa5ztPwmoB4b9Fe9oflNjV4dbiSG5ZLaE6KBR0mimg7n n/MhZ/z6IqS9f8q3+Pbp7wm5x9tc1Dw67nXDPfLsHnHvNASXY+Xb/8f45AK6UMxZDk6SB41Sel8H EryI7W9LuGAPbI/W+wHv+SL1/FWd1iZJg8IEZA== ) bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20240730022324 20240723012324 13531 bpa.gov. rjDTpAoV5u5TFREWXP3r7OHsHLwqI1aYxVTuVl+1YpbssB6fqBENTKbw7Fjw9C2C+CUuSyTYf/Z1 dt94i2/sn/L/gJcSrMNDJSvj7g0Dg2QZxU2wod3HWFD6Yw1rvUZKBdldGmf9zHv0n2sETiGFEl7C 0d5llIZkNwa4/PZgk7adicrYTTvob6bcX6FEqGgq4hfnqCWfRe5DTyJVR1CSWe3jIcyTBenhMYdV aOsRU12bYGRg7vF9fBeczymblTjCCGwt+/rXmiw7BG4KS6akATXS2HpgRlukU689Pw4HZDTrAz+q FWTMV53LUfKFLhAh0awAC7CSK/7uQpbw98HViA== ) ;; ADDITIONAL SECTION (7 records) ns1.bpa.gov. 86400 IN A 170.160.36.10 ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20240731184607 20240724174607 19479 bpa.gov. igexV/2P/QW93oGlyCMORcpIBKCUS7/qM512T7ozpx8F0mzLVU5IHrcsNqX6QlHv5uR/IM87ZJeP eCHpjsr1ZBm8mC1zZ9M7o2LYmB0wc2W50m1nMqesGR10yLcSk8f68LVOPi+NFjwVJt6QlFQwYwJG ZxUJGAly6Xd8qOSww1ygamTYnA+lFpjjSekSeubtpeCFz7Vz/k3UgvEkbPVtTo/Ty9SX/liO1tFV PxpIeecOSI/x0dR/KzNHfqKEsFLwgz8W4NYG5VULOVulJM0RB5VJvQDCMfs84WRdwEaW4SzDfLVP d8aAkiVur9lAFsbO8e/P5ipTHpwccAaZKKofyw== ) ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20240730022324 20240723012324 13531 bpa.gov. epIuLZswz1ACRQdhkRsvQJ6tze8gDJJDuvhxJ3yCEaqxexilXvzcX4roqbI93YilosGzOoOS46al M66xR003XbmQz+x+vvFOrl7axBmJnFa8xfR67ND5Jjy90AM8eRw3NZ4hARzRtObrWBE2B5MTZ54s TE3AZh8l3ZrZaEBLPBEemPy4O9nI9zWwXLi5hkugRgZ8jCHFvzAJRJA3jV3NL9PiTo/bQ3WLaSYD 69u/0pmUyDjJws004gTdCieuwwjOeWoFAet7W5jBuPW2zEstTvwuibQi29c+8LrzlUDx94ycK1Xy 1ilGiARRegUsUxIcRxyNDyg3Mall0SSk7KVwsA== ) ns2.bpa.gov. 86400 IN A 170.160.100.10 ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20240731184607 20240724174607 19479 bpa.gov. UCBk7SM8leLe7AT5CsSETw6JVadQoxFkN90jQ9GIfdvHW56/s8q6x8+t8hkV3k/vxUt8FtLlILUH rY5HKeaWLs8a303hAtWFdph8vLcPcYT3nViAxim695qQkaaCcxtMZlFCgaMJHEs/vsCsv2VcaqC0 aWfmD8iG2xXgK7lzmlKICUaV2PqmsffZw7VPW4qmPM1zIgHwgh11EL9tnNVPxu+S544C+jgW0UAo SefdRQTWpWLSaDwj6aaD3kP6/mAKAFvHE5HpEqqU3Pj8VklQth2KHLAuDtaRHf1DaSyy3v3OtST0 GSKN43XddsTOjrHUmrWo5fFGv2+MxsXPgJLSzg== ) ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20240730022324 20240723012324 13531 bpa.gov. eo6b7mg8CKVoX00UrwTJOlhrgXQ20aMmiuclzawAYjLxN+rDb0velIUxJpEItmNUphYDkYnsOScC 0WFfB9c02xnefiNQwscWBezdBQxeRcUCMfOV6tJLeUfKw77iqDZItWi8nsXSr7chIV9mP1gPkcnr 2hoGYtk5G+zb/XJIPRaZPJhYFdhqht1Vf0jikrLmhmeFXd2OsBkTvxqRV4+btzfqBr89jM8fQLrA uMkS+tVRqvBDOgEXFxq588qzdO/LivsYvr2ENJ6TnvDXrHZ7yPzsofavnY75E36ovgbUb+2qlb1q iSA4UoeMhT43JCpAy2psmkfcJ4B0zvs1JTKHEQ== ) ;; { "EDNS-VERSION": 0 }
	ns2.bpa.gov is authoritative for bpa.gov
	Found RRSIG signed by bpa.gov zone
	Query to ns2.bpa.gov for bpa.gov/A
	Received 2480 bytes from 170.160.100.10
	;; Response received from [170.160.100.10] 2480 octets ;; HEADER SECTION ;; id = 56070 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 7 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bpa.gov. IN A ;; ANSWER SECTION (3 records) bpa.gov. 300 IN A 20.42.128.100 bpa.gov. 300 IN RRSIG ( A 8 2 300 20240731184801 20240724174801 19479 bpa.gov. iGtDa66GP4MoJqfQ4lc/fn0L+Ojl/hjZxe89zLzTdAdn+3/QFxEPmZ9jdKXfvqpwg0omrR9jlFGK EySu5/gNssTc5vQLdrek5LysmdkSxZqTiGzSWi1yzlvm1gY6sUCyGjq0x+3x5WYJZCnocs/if65d C6ff4lNb9ozPP9CrUpl3Lop10baGWU4c/Xh7cHmZ2YuhlGYRgzP7uIvWExzZM6b8FztQQB3fZ7au iMBlDyQ7N7FsEDph512UY1+AZiKZk7MPU39nATUPI7ByJMy/kG4uAB5hoUrx2X8k8mTFgu61yLUw dp+/k++RL6aaVPAct2e+4XA+HY8VdJtqhGvNZQ== ) bpa.gov. 300 IN RRSIG ( A 8 2 300 20240730022337 20240723012337 13531 bpa.gov. svvm7or+BeTUM5Az1SsmlC22qxba5u6SeuD7zndZBydynEkkFh/md5PP94e393Xkyo4IqqYJTUf1 6fafuc9P7gACyjIKqJYqcCAp9OIFphB4UEZskxFBlLHheYOzMlZj2EPrrbjkDdL3FD8uV1fZt88K BE4Heq02YmnImHcQey5v8K2WPfXfONOJvj9LkQ00Fx0Ig2r/eMzv/1EF7Wk+8EqAfYZ/FO1clhj2 GsR53av1dQjoFjoy1fMfBM4cvrYX66w0agBzNZj4uH8qK3VPfsTSoiAADAwgznNIOH7DIUNIEWGZ CTKUqQF5CFuny1Vr5giVvs93r1WgbShGPbrC5w== ) ;; AUTHORITY SECTION (4 records) bpa.gov. 86400 IN NS ns1.bpa.gov. bpa.gov. 86400 IN NS ns2.bpa.gov. bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20240731184608 20240724174608 19479 bpa.gov. nC2p5BJ3IrbL3dvfqbXLm66ZWYnG0SAQEVkCVZ1xRcs3MPDawuAXERSSYn2PHzlZRqsawu0W+VC/ 3qLiRuCdubkHcTkhDcwAEsI0mqwJiKgXofQUauUqFBYAAhqjVeAusiG3ir+ZmKpIwG70DVaNROrJ Pi39j/WNmfvdXCjo9GOwy/QLj8gIScHHWjP7xNAMkj+mLypIzxY17qAldMNhrHrAnEqcjZQDhV6u aCb4GAjYnFexuDPQs7EOtD/vxYolvCSaDqH8Q/eV2AalltlIhxubT0OONT6R09iDNDWQSDpMwRrN Ym79YngZcGWKW8BkJjW4XMGdQTXTxbK5/nTKeA== ) bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20240730022328 20240723012328 13531 bpa.gov. GigPJCu6vAGGAs999xkWumWz6eCOFhZHYsqvky1mWyOT56KkOPROiJ+Lm0YMuSh6vsnBE4vJGkmi GfZBD1/OHKHr8fyKd9XQT9K2AzuHAu0oKpB31POOqt3vndPp3PU0WY1ydQyyXj6SYTNvanm8jvkI WpE5dDiwXO1jmaAPM5nxmuqmYa6c7W+u7RfFWHqxGBz+N+nfehvvp7BJTnNiFSeijTtAa6F7lNNt 6eN/ErhkksCNJ0z5woGfE3ug5XJMZbddUFIC4zO7cmXGt8fjpL9W8icCV/JL6b76EcFu/Btc9Q1T sT/OWp1cHI9Tp1mhkniOMMssbS0l3/ZDqbLvaQ== ) ;; ADDITIONAL SECTION (7 records) ns1.bpa.gov. 86400 IN A 170.160.36.10 ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20240731184608 20240724174608 19479 bpa.gov. ifAJ/64jJHo6CaFd5AVDBtz2zjqsdFSy3a5/yAmeyOe8/7F9JQ71sX1wvGJh3k0havuB5aTa2pfM GMUr52GO4TaoSEQSqXBm6GwzsavYTaxXRXf6TfatHyE9BKJcoVAmCFmkDcICFvO2RFKu/cf3TBn4 LnDvVYLJb6VT9YeGnwVupZbfHD5EhDXlf9y2IayBCEnM5bRVqlalwMQBtF0MoAA25J07cAYv03tf IC0cBBW2mCMiM/YzXJZRmcPm/Z6crFlboO1ClRNVa4XFLSZ6bktPQB6sk8AxWv2tEVrPzlfpqqkh MT56AmY+6fTcK8931ZQDcGZCiID3SkDdYj/uWA== ) ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20240730022328 20240723012328 13531 bpa.gov. MOyUy7nBORWlyOzWoXzMyMOBb6bTLr43Vejs7liZo0sfcpBvfuH/XC9MJorXCfahA+y0Bm+cjSE+ DlHBmraDWEW9DQTJTJy/9ibjLSdH8UjTOijC+52NzXXJkrVx5GM/kwLRtZRcoNxEYg2S9jHbnTt+ Nj2QDcpZDq6KiisGl/iwTN2n3igybbPsxPcgUlEc8yuuXSWDtg1QZ4pNXL83YII8SYfv0wedpZh4 68BAyqOKnulHsHX+9lDcjLeEkcpFVDmCCIuRxdDBGkUwcDQiQYjM6NoUhXWsN90CSHlbtM+4vGnI YTUKqw2GGlZAYVynBqxN3Nd5WGmnQvU+Ty4DEA== ) ns2.bpa.gov. 86400 IN A 170.160.100.10 ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20240731184608 20240724174608 19479 bpa.gov. omcQO8TERezEYy4CvNEFTkffr2Xv2H6pvjvI+/VmTjk2XBX5whsUd/wH6xP12KxVAb+3k2qHAeVV 0ContiyP3cDFDEoTczP4TZsm8eDj2hZ4k1XKQc2jjACg+e+UNmXGAr/D1ga7/kf+0UoBvavD694L oZ20IkDOUI4DY/l7/4BXS0436Tib9VfCs2MImr785452I3Zyy2gJqwm/L7qlYFvppFgYX0LI+Ofx Jb6jn1ftGmBydzU+FUytjLKtWIEJl99ufGoOMcawROVN0ZfhenJpwuoNHc0GsSqH9Z9eCW7MIujl mbDwWBQygz5ZkNAm9graAQauIOq1Wbd2UapdZw== ) ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20240730022328 20240723012328 13531 bpa.gov. jQ3noOlX1ElQnhsastx5Z3k/SE5agkzk+CY41bvQPCu7rnWyVIkWXlqDjV1L0DPVhxlnvgC0qotE jQBFF4EitiRH4l4eXYcm7NAWoHOgJLWT/INTTSVXewG4N+NuyNanD+moExl/U9Bl8zXL4G5SEgEe RYtK1Ya37c12TltcALwjXk1M9BYNZ/Xj+9begxBHb++W63R/qC69yLyJhtvs5BsSUaZcNNOgYP4u Cqxkkr0MODfAoDr46jud14FpwhxJE/ZVni65/ObzjSTVnyIpTg9fVUleOzfqdo2FaTofeEp7bnIc HBfodmdMoSNfHJ0Fobi6px0yjzxhmoH0BpXwuQ== ) ;; { "EDNS-VERSION": 0 }
	bpa.gov A RR has value 20.42.128.100
	Found 2 RRSIGs over A RRset
	`bpa.gov. 300 IN RRSIG ( A 8 2 300 20240731184801 20240724174801 19479 bpa.gov. iGtDa66GP4MoJqfQ4lc/fn0L+Ojl/hjZxe89zLzTdAdn+3/QFxEPmZ9jdKXfvqpwg0omrR9jlFGK EySu5/gNssTc5vQLdrek5LysmdkSxZqTiGzSWi1yzlvm1gY6sUCyGjq0x+3x5WYJZCnocs/if65d C6ff4lNb9ozPP9CrUpl3Lop10baGWU4c/Xh7cHmZ2YuhlGYRgzP7uIvWExzZM6b8FztQQB3fZ7au iMBlDyQ7N7FsEDph512UY1+AZiKZk7MPU39nATUPI7ByJMy/kG4uAB5hoUrx2X8k8mTFgu61yLUw dp+/k++RL6aaVPAct2e+4XA+HY8VdJtqhGvNZQ== )`
	`bpa.gov. 300 IN RRSIG ( A 8 2 300 20240730022337 20240723012337 13531 bpa.gov. svvm7or+BeTUM5Az1SsmlC22qxba5u6SeuD7zndZBydynEkkFh/md5PP94e393Xkyo4IqqYJTUf1 6fafuc9P7gACyjIKqJYqcCAp9OIFphB4UEZskxFBlLHheYOzMlZj2EPrrbjkDdL3FD8uV1fZt88K BE4Heq02YmnImHcQey5v8K2WPfXfONOJvj9LkQ00Fx0Ig2r/eMzv/1EF7Wk+8EqAfYZ/FO1clhj2 GsR53av1dQjoFjoy1fMfBM4cvrYX66w0agBzNZj4uH8qK3VPfsTSoiAADAwgznNIOH7DIUNIEWGZ CTKUqQF5CFuny1Vr5giVvs93r1WgbShGPbrC5w== )`
	RRSIG=19479 and DNSKEY=19479 verifies the A RRset
	RRSIG=13531 and DNSKEY=13531 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test bpa.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: