DNSSEC Analyzer

Domain Name:

Time: 2023-12-08 03:30:46 UTC, NTP stratum 16

Analyzing DNSSEC problems for bpa.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to k.root-servers.net for ./DNSKEY
	Received 864 bytes from 193.0.14.129
	;; Response received from 193.0.14.129 (864 octets) ;; HEADER SECTION ;; id = 35564 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20231221000000 20231130000000 20326 . Vq+Z0sYiDdI6V+KCvfoTAYNxmsKiv703Lxyy4OREQPew0qYrrUySU54Jn+NiOlkHLm+o83YW7ZZ0 eyikQKrt42dD2Hdigy7YiOeML1W3wqkZYDg/DoHo5i8zP+B6461Z/yVrjkcTSgM6C8FZuOaDqj5X PMghMfDo0fQy0spEL6rtLzGNXDZ+j5D+hcoQPYtZu9svhm9AHqZoXLu5id7whpsVJhON4BM1pQRF 7JSlTIi0cn7SGhFpfypnj/2E5hUvJ1bRRkr+wItfi7B4+b19lDNgtLZiDs3opRMmStbaF3HEFgTh UZ+HcCRzQASdyuZ4Y8xr1SUX/MpSlct5EBFshg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20231221000000 20231130000000 20326 . Vq+Z0sYiDdI6V+KCvfoTAYNxmsKiv703Lxyy4OREQPew0qYrrUySU54Jn+NiOlkHLm+o83YW7ZZ0 eyikQKrt42dD2Hdigy7YiOeML1W3wqkZYDg/DoHo5i8zP+B6461Z/yVrjkcTSgM6C8FZuOaDqj5X PMghMfDo0fQy0spEL6rtLzGNXDZ+j5D+hcoQPYtZu9svhm9AHqZoXLu5id7whpsVJhON4BM1pQRF 7JSlTIi0cn7SGhFpfypnj/2E5hUvJ1bRRkr+wItfi7B4+b19lDNgtLZiDs3opRMmStbaF3HEFgTh UZ+HcCRzQASdyuZ4Y8xr1SUX/MpSlct5EBFshg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=46780 is now in the chain-of-trust
	Query to j.root-servers.net for bpa.gov/A
	Received 614 bytes from 192.58.128.30
	;; Response received from 192.58.128.30 (614 octets) ;; HEADER SECTION ;; id = 23037 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; bpa.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20231220220000 20231207210000 46780 . rf7MLL8/ECE1vfj6u+/IsVX0U3fwXse4pxnGXVL7TNksPUGGYfEhmNYufZBZvTTckD6aov1UpbJz 71TOGMW1ZaP92mHdYyIFv8jjZMN7tJhMZEgtuQdgL8S5nvGNMgQ2VvMa2nMZSOLkyWO4yBR5BXNb cLie8fjNmnIck9N9yYTEmfkP5UvyT+8mGT1iNB7/q0XzFQ5WWgla/O8LLYQn10XgnINpa3GGvX5U 7/NO5SL/bnJXA+igcnTETfwN2IjR4cEdBeUAwS4HaD6ZPrz2jGH32epSnAhBXlCrWB8Wsl3R2cHC spFtb+Dl41dCU8mMZl5eWLsHpk2YPRpGIw9EEA== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to d.root-servers.net for gov/DNSKEY
	Received 610 bytes from 199.7.91.13
	;; Response received from 199.7.91.13 (610 octets) ;; HEADER SECTION ;; id = 41618 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20231220220000 20231207210000 46780 . rf7MLL8/ECE1vfj6u+/IsVX0U3fwXse4pxnGXVL7TNksPUGGYfEhmNYufZBZvTTckD6aov1UpbJz 71TOGMW1ZaP92mHdYyIFv8jjZMN7tJhMZEgtuQdgL8S5nvGNMgQ2VvMa2nMZSOLkyWO4yBR5BXNb cLie8fjNmnIck9N9yYTEmfkP5UvyT+8mGT1iNB7/q0XzFQ5WWgla/O8LLYQn10XgnINpa3GGvX5U 7/NO5SL/bnJXA+igcnTETfwN2IjR4cEdBeUAwS4HaD6ZPrz2jGH32epSnAhBXlCrWB8Wsl3R2cHC spFtb+Dl41dCU8mMZl5eWLsHpk2YPRpGIw9EEA== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found child zone gov

gov

	Checking DS between . and gov
	Query to k.root-servers.net for gov/DS
	Received 367 bytes from 193.0.14.129
	;; Response received from 193.0.14.129 (367 octets) ;; HEADER SECTION ;; id = 62288 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20231220220000 20231207210000 46780 . rf7MLL8/ECE1vfj6u+/IsVX0U3fwXse4pxnGXVL7TNksPUGGYfEhmNYufZBZvTTckD6aov1UpbJz 71TOGMW1ZaP92mHdYyIFv8jjZMN7tJhMZEgtuQdgL8S5nvGNMgQ2VvMa2nMZSOLkyWO4yBR5BXNb cLie8fjNmnIck9N9yYTEmfkP5UvyT+8mGT1iNB7/q0XzFQ5WWgla/O8LLYQn10XgnINpa3GGvX5U 7/NO5SL/bnJXA+igcnTETfwN2IjR4cEdBeUAwS4HaD6ZPrz2jGH32epSnAhBXlCrWB8Wsl3R2cHC spFtb+Dl41dCU8mMZl5eWLsHpk2YPRpGIw9EEA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for gov in the . zone
	DS=64280/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20231220220000 20231207210000 46780 . rf7MLL8/ECE1vfj6u+/IsVX0U3fwXse4pxnGXVL7TNksPUGGYfEhmNYufZBZvTTckD6aov1UpbJz 71TOGMW1ZaP92mHdYyIFv8jjZMN7tJhMZEgtuQdgL8S5nvGNMgQ2VvMa2nMZSOLkyWO4yBR5BXNb cLie8fjNmnIck9N9yYTEmfkP5UvyT+8mGT1iNB7/q0XzFQ5WWgla/O8LLYQn10XgnINpa3GGvX5U 7/NO5SL/bnJXA+igcnTETfwN2IjR4cEdBeUAwS4HaD6ZPrz2jGH32epSnAhBXlCrWB8Wsl3R2cHC spFtb+Dl41dCU8mMZl5eWLsHpk2YPRpGIw9EEA== )`
	RRSIG=46780 and DNSKEY=46780 verifies the DS RRset
	DS=64280/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 )`
	Query to c.ns.gov for gov/DNSKEY
	Received 1233 bytes from 199.33.232.1
	;; Response received from 199.33.232.1 (1233 octets) ;; HEADER SECTION ;; id = 39770 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 65535 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (5 records) gov. 3600 IN DNSKEY ( 257 3 8 AwEAAZp0vliR0TOBCJXmdagY36BI5ZveSPE3OSrcXKDs8IZa86x1+gwbheJcfLB6Fw6cWYUXaNgA mFcbxqIqWc5VJSyPS9yCPdEOLEIiegwCmcWnNsEyc0snKTyypXnvJ5JNhoznpFILDqlksAqP/aiq 1/l0w8TMkRbRrViLrJ1ayaScZ0nn/ge5wNpX09T9RI+gF1OIMJDdgH1vi0a+t6smSy4pUrerFTsu y8JAL+PP85MZiOssT9yoERfWSjFKde6PrQX5vj090AxT+hztb+q2EFXnF1a2L73/3UarB19k5NR3 MT1uM7ddag64Q0lg3aTy3MglDCzP7/StUxdeyL5qIX8= ) ; Key ID = 64280 gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcbYvlY667qXEzHsDTkft9cgKy5F0S9CAP+aFK9+sJumGqvpMaOyOzsilJ+OSVFhopJ1aRFp CUpLVIcVJ3E3YATGpzB45M0D5c4oJ0RjEIUakBwcPghmSW8K1GPqj/eUs4fbVPytXwtwvUll9Lxf gUvi5DA6xD6d2ckwDyRxfcMhXYydr2hIsgfrBLmRDMi4BkxMvA23eShPd/tPvnR0gJk= ) ; Key ID = 10104 gov. 3600 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 gov. 3600 IN DNSKEY ( 256 3 8 AwEAAbT+wFfiTKtZbQlPbwFTqp9NfdYu5NVfU9blz6CHPZ2Uiy8tMVx4BcrAkHvLJcJmV+zMnuH0 kVbB9zjN9zwTJ9jfwXw9J2IGZhmo4gmed6j573ysMN5xSM13e7zDRnaQfeklEpITrM7biA9gXooU /GOZG1ex7gNh0+dpBdPqUc19mlu7O1U9V0Z53qNj4Dp/KbsAMuOyXLN3ImpXgwEYHg8= ) ; Key ID = 49735 gov. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240114223826 20231114223826 64280 gov. GcLTi+wyezkrKpy8CyIO/2WxxX3hteAiBqMWPVfp8Io1xdnIXP16NVdN8wHKe2rQ82Be6f6ozHot VDBeSwQRxwUDZJ8fDrAjwJk4eZE1Ck27tfIMIlhnI1cW5rDOuDvoYUUK+8NfuE4wCkYZwZiD08uD SXFJfHmWJBYrHWlxKzhhAvcanPpuD0haIw7pyKYF7kdqCKAIOAwgNq6NTWwWAzLwf6iDrZ3tzCiH 8YSP5biMA0zVOmqJ9Kr3bPfO8NDUr5CEeaaJM46QVmjweSjSeujtgV+eexOFIWEGaBBYUyHBiYCE XpLqr9u2rXsw4uvoKUhHXHt1WI35HSjKnNuCRQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 65535 ;; option:
	Found 4 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 8 AwEAAZp0vliR0TOBCJXmdagY36BI5ZveSPE3OSrcXKDs8IZa86x1+gwbheJcfLB6Fw6cWYUXaNgA mFcbxqIqWc5VJSyPS9yCPdEOLEIiegwCmcWnNsEyc0snKTyypXnvJ5JNhoznpFILDqlksAqP/aiq 1/l0w8TMkRbRrViLrJ1ayaScZ0nn/ge5wNpX09T9RI+gF1OIMJDdgH1vi0a+t6smSy4pUrerFTsu y8JAL+PP85MZiOssT9yoERfWSjFKde6PrQX5vj090AxT+hztb+q2EFXnF1a2L73/3UarB19k5NR3 MT1uM7ddag64Q0lg3aTy3MglDCzP7/StUxdeyL5qIX8= ) ; Key ID = 64280`
	`gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcbYvlY667qXEzHsDTkft9cgKy5F0S9CAP+aFK9+sJumGqvpMaOyOzsilJ+OSVFhopJ1aRFp CUpLVIcVJ3E3YATGpzB45M0D5c4oJ0RjEIUakBwcPghmSW8K1GPqj/eUs4fbVPytXwtwvUll9Lxf gUvi5DA6xD6d2ckwDyRxfcMhXYydr2hIsgfrBLmRDMi4BkxMvA23eShPd/tPvnR0gJk= ) ; Key ID = 10104`
	`gov. 3600 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`gov. 3600 IN DNSKEY ( 256 3 8 AwEAAbT+wFfiTKtZbQlPbwFTqp9NfdYu5NVfU9blz6CHPZ2Uiy8tMVx4BcrAkHvLJcJmV+zMnuH0 kVbB9zjN9zwTJ9jfwXw9J2IGZhmo4gmed6j573ysMN5xSM13e7zDRnaQfeklEpITrM7biA9gXooU /GOZG1ex7gNh0+dpBdPqUc19mlu7O1U9V0Z53qNj4Dp/KbsAMuOyXLN3ImpXgwEYHg8= ) ; Key ID = 49735`
	DNSKEY=64280/SEP is now in the chain-of-trust
	DS=64280/SHA-256 verifies DNSKEY=64280/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240114223826 20231114223826 64280 gov. GcLTi+wyezkrKpy8CyIO/2WxxX3hteAiBqMWPVfp8Io1xdnIXP16NVdN8wHKe2rQ82Be6f6ozHot VDBeSwQRxwUDZJ8fDrAjwJk4eZE1Ck27tfIMIlhnI1cW5rDOuDvoYUUK+8NfuE4wCkYZwZiD08uD SXFJfHmWJBYrHWlxKzhhAvcanPpuD0haIw7pyKYF7kdqCKAIOAwgNq6NTWwWAzLwf6iDrZ3tzCiH 8YSP5biMA0zVOmqJ9Kr3bPfO8NDUr5CEeaaJM46QVmjweSjSeujtgV+eexOFIWEGaBBYUyHBiYCE XpLqr9u2rXsw4uvoKUhHXHt1WI35HSjKnNuCRQ== )`
	RRSIG=64280 and DNSKEY=64280/SEP verifies the DNSKEY RRset
	DNSKEY=10104 is now in the chain-of-trust
	DNSKEY=7698/SEP is now in the chain-of-trust
	DNSKEY=49735 is now in the chain-of-trust
	Query to a.ns.gov for bpa.gov/A
	Received 395 bytes from 199.33.230.1
	;; Response received from 199.33.230.1 (395 octets) ;; HEADER SECTION ;; id = 49289 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; bpa.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) bpa.gov. 10800 IN NS ns1.bpa.gov. bpa.gov. 10800 IN NS ns2.bpa.gov. bpa.gov. 3600 IN DS ( 16399 8 2 2602a2d73b485a5ffca736cc03e0f1bc8d6a23497be8b860c0099a00589b1934 ) bpa.gov. 3600 IN DS ( 53797 8 2 6fb8f9cf98bdba2a4530324b83ec83779e8b870cecb4bc631c6af0baf228b916 ) bpa.gov. 3600 IN RRSIG ( DS 8 2 3600 20231209043046 20231207023046 10104 gov. sIYyF4rLHvcg9ML5lOheSALGsZSZYXTE7LLNer8yeohvXqSAK5MU/pvYRtgQKiGuku/7FBDmb2j+ KCzotdwXdlyF3IbXj4GzaEJfvhMHla22vUzjXZNGh9KRM3V3bSdZiOV76q1bMHLvVufxAiaZ7191 0bFMnB+hw5lSMlyXEU2i/iorGhMJF3Lqi1CtQVImbEXXs3/ZCCvnvnSFrL9dCg== ) ;; ADDITIONAL SECTION (3 records) ns1.bpa.gov. 3600 IN A 170.160.36.10 ns2.bpa.gov. 3600 IN A 170.160.100.10 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to d.ns.gov for bpa.gov/DNSKEY
	Received 395 bytes from 199.33.233.1
	;; Response received from 199.33.233.1 (395 octets) ;; HEADER SECTION ;; id = 8491 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; bpa.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) bpa.gov. 10800 IN NS ns1.bpa.gov. bpa.gov. 10800 IN NS ns2.bpa.gov. bpa.gov. 3600 IN DS ( 16399 8 2 2602a2d73b485a5ffca736cc03e0f1bc8d6a23497be8b860c0099a00589b1934 ) bpa.gov. 3600 IN DS ( 53797 8 2 6fb8f9cf98bdba2a4530324b83ec83779e8b870cecb4bc631c6af0baf228b916 ) bpa.gov. 3600 IN RRSIG ( DS 8 2 3600 20231209043046 20231207023046 10104 gov. sIYyF4rLHvcg9ML5lOheSALGsZSZYXTE7LLNer8yeohvXqSAK5MU/pvYRtgQKiGuku/7FBDmb2j+ KCzotdwXdlyF3IbXj4GzaEJfvhMHla22vUzjXZNGh9KRM3V3bSdZiOV76q1bMHLvVufxAiaZ7191 0bFMnB+hw5lSMlyXEU2i/iorGhMJF3Lqi1CtQVImbEXXs3/ZCCvnvnSFrL9dCg== ) ;; ADDITIONAL SECTION (3 records) ns1.bpa.gov. 3600 IN A 170.160.36.10 ns2.bpa.gov. 3600 IN A 170.160.100.10 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone bpa.gov

bpa.gov

	Checking DS between gov and bpa.gov
	Query to c.ns.gov for bpa.gov/DS
	Received 327 bytes from 199.33.232.1
	;; Response received from 199.33.232.1 (327 octets) ;; HEADER SECTION ;; id = 40322 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; bpa.gov. IN DS ;; ANSWER SECTION (3 records) bpa.gov. 3600 IN DS ( 16399 8 2 2602a2d73b485a5ffca736cc03e0f1bc8d6a23497be8b860c0099a00589b1934 ) bpa.gov. 3600 IN DS ( 53797 8 2 6fb8f9cf98bdba2a4530324b83ec83779e8b870cecb4bc631c6af0baf228b916 ) bpa.gov. 3600 IN RRSIG ( DS 8 2 3600 20231209043046 20231207023046 10104 gov. sIYyF4rLHvcg9ML5lOheSALGsZSZYXTE7LLNer8yeohvXqSAK5MU/pvYRtgQKiGuku/7FBDmb2j+ KCzotdwXdlyF3IbXj4GzaEJfvhMHla22vUzjXZNGh9KRM3V3bSdZiOV76q1bMHLvVufxAiaZ7191 0bFMnB+hw5lSMlyXEU2i/iorGhMJF3Lqi1CtQVImbEXXs3/ZCCvnvnSFrL9dCg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DS records for bpa.gov in the gov zone
	DS=16399/SHA-256 has algorithm RSASHA256
	DS=53797/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`bpa.gov. 3600 IN RRSIG ( DS 8 2 3600 20231209043046 20231207023046 10104 gov. sIYyF4rLHvcg9ML5lOheSALGsZSZYXTE7LLNer8yeohvXqSAK5MU/pvYRtgQKiGuku/7FBDmb2j+ KCzotdwXdlyF3IbXj4GzaEJfvhMHla22vUzjXZNGh9KRM3V3bSdZiOV76q1bMHLvVufxAiaZ7191 0bFMnB+hw5lSMlyXEU2i/iorGhMJF3Lqi1CtQVImbEXXs3/ZCCvnvnSFrL9dCg== )`
	RRSIG=10104 and DNSKEY=10104 verifies the DS RRset
	DS=16399/SHA-256 is now in the chain-of-trust
	DS=53797/SHA-256 is now in the chain-of-trust
	`bpa.gov. 3600 IN DS ( 16399 8 2 2602a2d73b485a5ffca736cc03e0f1bc8d6a23497be8b860c0099a00589b1934 )`
	`bpa.gov. 3600 IN DS ( 53797 8 2 6fb8f9cf98bdba2a4530324b83ec83779e8b870cecb4bc631c6af0baf228b916 )`
	Query to ns2.bpa.gov for bpa.gov/DNSKEY
	Received 2320 bytes from 170.160.100.10
	;; Response received from 170.160.100.10 (2320 octets) ;; HEADER SECTION ;; id = 12329 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; bpa.gov. IN DNSKEY ;; ANSWER SECTION (8 records) bpa.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAc434F4QXjWA9ydXl+DCd1cgb58Ep7Phle0S5+K0jM4KD8bb2r9WmtGdrpmEOXV5sCR8QugI 1sjZMhfqpssk8SAl0P2PNP1z+cgl+/tPmO0qHFoqWvwVwsATgJwIM/Lp1FqmGl1x6kx4Nx+PQIBM etCb2vFL1f1Jpu3wW8V92ru2tPsZ1S9VYhXg+Aw6hnBdHqS1iVEN3lTXu/8WYMBFdO8V4RyTwyFl s8EQDya4SYcdcQ3cPItXxZxQrJKAcnblZhtM2g5bWMcrdkjfRf9N6VtJfBdhYqweTbFeLs02rREt xbKvZHoQtTVcTze8SBkcVVo/i1uaRIKt9oAr/+U+4Y0= ) ; Key ID = 16399 bpa.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAZuWMV4rohaLMraSPQbTwpfgiblmzIxO2XF/3xhjUPHtge6mZXeBO+ESoz/Y+hEgn7+LMoh/ i+QhSRQpo9KeC9o1ezY2ca10f5oqFHtwi40lUJk8UGj8UeJirPslmtfNLCzkNZTXT/quhLx1SZ+m oatdVkl88pVQl7Yum6K2GwRrn1zKnbhMhWwhuc9DsovmZkkUOEQlySOsZB31WOjmw685Nnozuj52 YEE3JxA9R0DbLmaCiLtZUVXDtNw4VQsJog01FyPVSsXtFCTkMZTOd30iZUX9V9z/TfecCeKrHZ+s gLs7WrfR6ao0u/oP+a23jj+2PWX9fG0exemD9ePP2zE= ) ; Key ID = 59628 bpa.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAaUdZo50Ad+EVsIWhYomKh06cOkhk3ma8jjcJGiJzCksfce5wFJsqk4ZbO9NtfcBah4LXdLq cqZ4Ot0lnVdJAOi8Z8cDO9nFDU43bsQgDJ7Fs6yS8MzU/8AluJs/lxprOcQPwJSY/qoYCzqCiZTh XkOEimwzsouvwiW/EzriLC3d4HJdrYSKBq6B79kMCrYPZMtHckGdNf3ZxETFuTg0S3wwWChJXjkz exIg/Ul/WBoHXDIVaDkwBxVpJf1HakU+igC1J5Kkdg96mHTm6f4Z4Un/e7ePyDzV9+cYp+ahwo8h IYw1uVphfSoHiKVg8nFY1zEuB4JXiN/WUJuKS2X+xXM= ) ; Key ID = 50598 bpa.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAbneUhFazhVnq2EFnf+Cvur9msxXKppddNii5IziofjEeghvijYy7Liy5xjP7v+Eh6Pnmsm8 pLbd67DT7WbSZwVsAbeIrQtg1SxbPvP9gguD/Z9AFZv7HLH4f1HPdMrDut/XTaT+JuD3hkqRzPss kYpzgYB/+cGDEeUFxEY1L3KyeNzmsoHQvkfSCXIrJgSo+jDJunZ/XoqURW5Ow/OyPCOmo2PVNwjE s4+7B7MbKYuwUOZkyJy/fi0QJyydX+aL+WhWMDiS/b5op0ELJyz4lCUfJ9osP1kt7saoZ4pYgy8Y ZA6/AyxYPunBavm69NtK0yFY4EaHILFFuP0UtgXoHKU= ) ; Key ID = 53797 bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20231212102446 20231205092446 16399 bpa.gov. qCpd1O3eKeYWpAZG5zSMFzAV4z5GXOsGB4UT/L3shrRI0UFczA4Fv7SjpZHZG4O36IdOsjKnAdxo 4+ycsgkDkeNqfstoBPjJhKicgdax4txkbnHKZylJ4Pi2MBlsl2NkkteOQHmAy7S/DRWKVW2iUko/ hbMeYzBAiriihEoFDo3zCyxPbjdRd3CBdWhdN6OKyjUGEPBFOTemrScmjfzX6eJPvtTqH+N2wzRh U2taOKvBmVK5ClU3QQo9Sb5nrez09H5LmO5Ru7RYRZbPEnkM63ra2UwaAbtHxI4n8TEqAHfGTkIB BDCB6oEaQ/OthVqt0q7P0TS85gfCY2U9StX95g== ) bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20231212102446 20231205092446 59628 bpa.gov. J2TPWNnhYgG0/8vWjQEmmi1WA7hiRvgz6qddWhBYJZidLmDdrUmc3bQ+DQSbvbUIgF8ss8V8HB0y qz9cdVXy0QLN1gWXwE9RLquswVp8xBOSin20pyAur/Gn2NLQ4iKUlWxxeE+4jSh4DKuw5nq7Irvz CQldRCcB2vHIohSxcMQEcU+rdFI4M8k7S045OjuuxIM9qguRdrStnkNs5XlpJ2msouox9nMheAkH ckuyJD7jprvgRV0Zbhuva4AMxsXxbmsAa2OI84yLa6hta934EBuVnMQyYruqfdMI4ibXCWo/Oo/D K5ZADSFR1EjohceHNJKW9Y7tiZ3FXMqAUWH15Q== ) bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20231212102446 20231205092446 50598 bpa.gov. CPkX4qR5RtfaZJcq6ACSyF2pcBfeS/z9DlBBLGFvCP2FiZ/Jmpvk3Mto+Wj99PqIwHNc6UANgCG8 8CvkUQPYT7/c8ObhUc4ZWIMJ1r2UlnUlLTTSW4l2MiTdjPab/n1wdUjLkGGFxtNNhTyedzWKteUr coVi7Tr+nfD0Gvqp1bUDm7O9bO6i0JaBrZhhQUpBOAe/X7dXQlsSKMhjbhPkqYEXws5ZFTWlnvCx awO96+Ic27LIjSdMVhjmd9H7B5dpxcSk6zkTAp8+VueUqtLDl9oIUEL5qrS98pB4DlRAAJFebQql e3EpSHxMpOm9Yxunckh/Z5yFlmR8AaMxBfvBJg== ) bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20231212102446 20231205092446 53797 bpa.gov. JsSPdNVn7Af/TrttUA1Q3mJUAF5wwW/FCTkm8Mk0Y3Z3Mqwromviw7A8TxtGE3Zc9R/Z3me4W6QH cfQaUCwt8T6yEwa0XawsIUdvp2VSQYIMA9txwui83wXxqFytFirRtrG1bArU+iBZOmpBfXis05/w inLu2XUsKwDPTbLVxVNIOdkRc1uTBmV1kbb2xx/LIWBGl+AJxa9MTJkfd2zMrSZolU/V6MY+XqUb UsNEQ2TwRVKcLE0WYaEsqqL8LOod6593wWxzVGqi40+HfJkB5X+Xl7BM6O6IoOxzIUVgZDVKpEB9 we7jhBTQqtIMjEobcuDq+9dKeFUHSL2l2xAapg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for bpa.gov
	`bpa.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAc434F4QXjWA9ydXl+DCd1cgb58Ep7Phle0S5+K0jM4KD8bb2r9WmtGdrpmEOXV5sCR8QugI 1sjZMhfqpssk8SAl0P2PNP1z+cgl+/tPmO0qHFoqWvwVwsATgJwIM/Lp1FqmGl1x6kx4Nx+PQIBM etCb2vFL1f1Jpu3wW8V92ru2tPsZ1S9VYhXg+Aw6hnBdHqS1iVEN3lTXu/8WYMBFdO8V4RyTwyFl s8EQDya4SYcdcQ3cPItXxZxQrJKAcnblZhtM2g5bWMcrdkjfRf9N6VtJfBdhYqweTbFeLs02rREt xbKvZHoQtTVcTze8SBkcVVo/i1uaRIKt9oAr/+U+4Y0= ) ; Key ID = 16399`
	`bpa.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAZuWMV4rohaLMraSPQbTwpfgiblmzIxO2XF/3xhjUPHtge6mZXeBO+ESoz/Y+hEgn7+LMoh/ i+QhSRQpo9KeC9o1ezY2ca10f5oqFHtwi40lUJk8UGj8UeJirPslmtfNLCzkNZTXT/quhLx1SZ+m oatdVkl88pVQl7Yum6K2GwRrn1zKnbhMhWwhuc9DsovmZkkUOEQlySOsZB31WOjmw685Nnozuj52 YEE3JxA9R0DbLmaCiLtZUVXDtNw4VQsJog01FyPVSsXtFCTkMZTOd30iZUX9V9z/TfecCeKrHZ+s gLs7WrfR6ao0u/oP+a23jj+2PWX9fG0exemD9ePP2zE= ) ; Key ID = 59628`
	`bpa.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAaUdZo50Ad+EVsIWhYomKh06cOkhk3ma8jjcJGiJzCksfce5wFJsqk4ZbO9NtfcBah4LXdLq cqZ4Ot0lnVdJAOi8Z8cDO9nFDU43bsQgDJ7Fs6yS8MzU/8AluJs/lxprOcQPwJSY/qoYCzqCiZTh XkOEimwzsouvwiW/EzriLC3d4HJdrYSKBq6B79kMCrYPZMtHckGdNf3ZxETFuTg0S3wwWChJXjkz exIg/Ul/WBoHXDIVaDkwBxVpJf1HakU+igC1J5Kkdg96mHTm6f4Z4Un/e7ePyDzV9+cYp+ahwo8h IYw1uVphfSoHiKVg8nFY1zEuB4JXiN/WUJuKS2X+xXM= ) ; Key ID = 50598`
	`bpa.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAbneUhFazhVnq2EFnf+Cvur9msxXKppddNii5IziofjEeghvijYy7Liy5xjP7v+Eh6Pnmsm8 pLbd67DT7WbSZwVsAbeIrQtg1SxbPvP9gguD/Z9AFZv7HLH4f1HPdMrDut/XTaT+JuD3hkqRzPss kYpzgYB/+cGDEeUFxEY1L3KyeNzmsoHQvkfSCXIrJgSo+jDJunZ/XoqURW5Ow/OyPCOmo2PVNwjE s4+7B7MbKYuwUOZkyJy/fi0QJyydX+aL+WhWMDiS/b5op0ELJyz4lCUfJ9osP1kt7saoZ4pYgy8Y ZA6/AyxYPunBavm69NtK0yFY4EaHILFFuP0UtgXoHKU= ) ; Key ID = 53797`
	DNSKEY=16399/SEP is now in the chain-of-trust
	DS=16399/SHA-256 verifies DNSKEY=16399/SEP
	DNSKEY=53797/SEP is now in the chain-of-trust
	DS=53797/SHA-256 verifies DNSKEY=53797/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20231212102446 20231205092446 16399 bpa.gov. qCpd1O3eKeYWpAZG5zSMFzAV4z5GXOsGB4UT/L3shrRI0UFczA4Fv7SjpZHZG4O36IdOsjKnAdxo 4+ycsgkDkeNqfstoBPjJhKicgdax4txkbnHKZylJ4Pi2MBlsl2NkkteOQHmAy7S/DRWKVW2iUko/ hbMeYzBAiriihEoFDo3zCyxPbjdRd3CBdWhdN6OKyjUGEPBFOTemrScmjfzX6eJPvtTqH+N2wzRh U2taOKvBmVK5ClU3QQo9Sb5nrez09H5LmO5Ru7RYRZbPEnkM63ra2UwaAbtHxI4n8TEqAHfGTkIB BDCB6oEaQ/OthVqt0q7P0TS85gfCY2U9StX95g== )`
	`bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20231212102446 20231205092446 59628 bpa.gov. J2TPWNnhYgG0/8vWjQEmmi1WA7hiRvgz6qddWhBYJZidLmDdrUmc3bQ+DQSbvbUIgF8ss8V8HB0y qz9cdVXy0QLN1gWXwE9RLquswVp8xBOSin20pyAur/Gn2NLQ4iKUlWxxeE+4jSh4DKuw5nq7Irvz CQldRCcB2vHIohSxcMQEcU+rdFI4M8k7S045OjuuxIM9qguRdrStnkNs5XlpJ2msouox9nMheAkH ckuyJD7jprvgRV0Zbhuva4AMxsXxbmsAa2OI84yLa6hta934EBuVnMQyYruqfdMI4ibXCWo/Oo/D K5ZADSFR1EjohceHNJKW9Y7tiZ3FXMqAUWH15Q== )`
	`bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20231212102446 20231205092446 50598 bpa.gov. CPkX4qR5RtfaZJcq6ACSyF2pcBfeS/z9DlBBLGFvCP2FiZ/Jmpvk3Mto+Wj99PqIwHNc6UANgCG8 8CvkUQPYT7/c8ObhUc4ZWIMJ1r2UlnUlLTTSW4l2MiTdjPab/n1wdUjLkGGFxtNNhTyedzWKteUr coVi7Tr+nfD0Gvqp1bUDm7O9bO6i0JaBrZhhQUpBOAe/X7dXQlsSKMhjbhPkqYEXws5ZFTWlnvCx awO96+Ic27LIjSdMVhjmd9H7B5dpxcSk6zkTAp8+VueUqtLDl9oIUEL5qrS98pB4DlRAAJFebQql e3EpSHxMpOm9Yxunckh/Z5yFlmR8AaMxBfvBJg== )`
	`bpa.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20231212102446 20231205092446 53797 bpa.gov. JsSPdNVn7Af/TrttUA1Q3mJUAF5wwW/FCTkm8Mk0Y3Z3Mqwromviw7A8TxtGE3Zc9R/Z3me4W6QH cfQaUCwt8T6yEwa0XawsIUdvp2VSQYIMA9txwui83wXxqFytFirRtrG1bArU+iBZOmpBfXis05/w inLu2XUsKwDPTbLVxVNIOdkRc1uTBmV1kbb2xx/LIWBGl+AJxa9MTJkfd2zMrSZolU/V6MY+XqUb UsNEQ2TwRVKcLE0WYaEsqqL8LOod6593wWxzVGqi40+HfJkB5X+Xl7BM6O6IoOxzIUVgZDVKpEB9 we7jhBTQqtIMjEobcuDq+9dKeFUHSL2l2xAapg== )`
	RRSIG=16399 and DNSKEY=16399/SEP verifies the DNSKEY RRset
	RRSIG=59628 and DNSKEY=59628 verifies the DNSKEY RRset
	RRSIG=50598 and DNSKEY=50598 verifies the DNSKEY RRset
	RRSIG=53797 and DNSKEY=53797/SEP verifies the DNSKEY RRset
	DNSKEY=59628 is now in the chain-of-trust
	DNSKEY=50598 is now in the chain-of-trust
	Query to ns1.bpa.gov for bpa.gov/A
	Received 2480 bytes from 170.160.36.10
	;; Response received from 170.160.36.10 (2480 octets) ;; HEADER SECTION ;; id = 30184 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; bpa.gov. IN A ;; ANSWER SECTION (3 records) bpa.gov. 300 IN A 20.42.128.100 bpa.gov. 300 IN RRSIG ( A 8 2 300 20231211103320 20231204093320 59628 bpa.gov. RaapT/ZRamBoZRbMnwhPED4EAeRJVE4n1VEGb8ixo4yW5ifNhcapRw29HWGp2LQzgriZ0xy9sp/R uI8jaiD33y8ErE39q9BATiHrYS8E+Bx2IwqjtBY9rUGSdLcwc3GymyagfCBvfDqfIJRBLEVZOn76 CQDBmhuCAhAF4I4aFoPJ0dorQeeYBgzKp/9USQwPOp2orvhguvupuyqzAAXzIggjo96nZvuoQ17j VdiBMesGJYBGapi5y+5GcukkoM6Mu/LBRR3stqYz+OmZJ8wzQJ1uKbhI74vlm5NdopVZHqr2cPcS nFa1dt87NvmZeUz5X3NNbW0Z6d3u4cD1qB9I7A== ) bpa.gov. 300 IN RRSIG ( A 8 2 300 20231212102334 20231205092334 50598 bpa.gov. iFO2LBmyhxCHzG8ZJ9940Zi6wziRgh6SPPiVZRo9av6qgIOEUqaXnamK49UlXIS7mcXjUG5i2NUs m3T0CONdk9NWY8sAVfxOr0Q5otenIUHRxDqYy9V3lFhWHzNijv3HxoGv89Hs4pJIiQRR9p88Vh3m gWyUHab3yJQuDWKAy6avBbWmNE3lvC6EEQVsu4kjJYLZuObsddtrpewkdIb8HIHHTrqm6Oyuyqht 5cZgrezKri/Gu97c9OxgvWtBTfiMO3+KIckf5KqcVPle5EiEyQn+juCdNOcjyPE/VyqsFrpo3ISF egAkTQ/iw077jo/iR5IE4eSqMrbd8Y+J28ZMfQ== ) ;; AUTHORITY SECTION (4 records) bpa.gov. 86400 IN NS ns1.bpa.gov. bpa.gov. 86400 IN NS ns2.bpa.gov. bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20231211102339 20231204092339 59628 bpa.gov. Jn6ngl+PpYjC3PoR/gAKaAXDU1uiL9vblEXewR/d5O+rfynLs+45XPHMJ3/GCE1uYaTCKkYaclbB A1pd33H9z1QGDIRvIXBDNZUrg+Rfo0b8xRR4eRkYvXJua7ACkV58CSzk0A5GPy2lSX3J6ZTj/+Pz o2rlWHS33WyEhzXdbBUBS/rIl9hfBkl9/XIR2wnP0DxijIKX3QEJKi5phYQTT3L3ulywN0qdkysN OeGPnNAh51uUN3oXw1wXBky8maKbaHl4LXSuYHE6XUa+DVlPT6YVYCRJ5KDqW0zY9t/E5UvczGba CJbPL53iEZem1lBWif65g7xnoJEBjgbx+xWW8w== ) bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20231212102330 20231205092330 50598 bpa.gov. gIZVN4arzmjU8GtdrEZ24Y+4qC4M8N1H5vZm2QTvhMaYmdkDwSnoL2i3r0JK2nF55C9YnY8enixe kAJn8a5TjyjQKm8UZa7WdKXTZ5hA/Vwxz26ac0o8+nTByJaBQ10ylyhatwYveeEVGsWvhmyuAMh6 RDuzPhhDkBTFwnzAqsy8Trsfkj9M1M3/DG3Vbh4ev65rupz262pYzG7t80Md3mJpvktNKA2rC8al 4AemdgtzfxponvzRFgNsw0b5FKpPAcG2FF0PJA8TJqdU6P6D7A1gwXyUWtjGaPuDlmN4uq41SzmW 723K3WXDCjA1DyvoDhCeaTBKRKPAqBXRQrxggg== ) ;; ADDITIONAL SECTION (7 records) ns1.bpa.gov. 86400 IN A 170.160.36.10 ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20231211102339 20231204092339 59628 bpa.gov. QH1rkSG9z1jrPAmGzVp1B7jjE8RLOKMlA1+3BTfiVYGI5xTeIVLX5eSqZrg3fWdfscrB91Mea/Z3 Q/ezFClAasCnXAK7n5lpGpwvBb56bhWCXausZGtWU1jGVbpTwZCj3rgAs/UsYOEQH0vSSVq7Ees5 dN6ULqk5tB081OrVEUFDwIkI6mqgjjPRUPIU0uJOC6pntqxb9zykiJpefviZGGIvWWd8ae+ktFMd y3l0pReSf/yNzOMNKTFYMA+JJf4cvUCzMBG8b6oRjISHRbj3fKvxy5aNTs/uASC39l1ytJAiHpOS TNNcagIdmuEXiqTGGWFDewnt7t1lRn/Eczoq2w== ) ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20231212102330 20231205092330 50598 bpa.gov. bb1XCVgvmlMcfdK9m62HvL3NY9BgmREL5Eb1sZHBY34Qkp79qmpEK6EyydaAHN+YkNH8SAW/GvQG w6IHalIh0Z+CRRh8t4cTNbSWcAg8dQFAjYk+yTNo0MA5PKcnYPbv0KEnS7lOoF4ZrywYbTfpPPSd XitwrE2ibaDH7cZVrr+HJCIv7kNgN1nltQjUxW6TXveVw+WHFzojeV9XO6NTibHSKh1yoHmMDw3S QcHZucEmePoUa4bqzLSALbSgIrg/LKPkiRd3glMry2k5MqLgUS2mNWCxAeJgO39sBNLSN29xwCbv kMoytS/BkwJKHq4mljSpzgmfY05ptmUsA2Du6g== ) ns2.bpa.gov. 86400 IN A 170.160.100.10 ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20231211102339 20231204092339 59628 bpa.gov. FwZQgMBkxDX+TaOmtfdhYIo0HOkGbBQJMFvMapimLwiImOoZ87BFogaHQ1Rq5yJaj2fEqeKBflvJ xwvhmmoRLGSfa+x4BgQRDK1ZM+vD4TYON0nDrA02kB9bJ3kWW1VbOE5aSLBievRTPpFSjHVsb2XQ X3cBrzsJEW7xgFNtQ5bj0Mrhs9li9mLyPGiAliFc+gTK1scAbyfNw9hXh9n4Uet3/ZIi23Uxbci0 v9e0kx+VE0rpImRNWfKiL3yC/nFPeto2tiYnU+ZtaD5EB/XHzhQXLyrFtFCfxz26h0xQwTWJ+vRU mJA51F1HdPh+XgQ+aVFoF8hZeZGoUt4RvNRCDg== ) ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20231212102330 20231205092330 50598 bpa.gov. bp4IV6/UzsDkz4vZsCBVDeZWQXVaNbQs4gGh1aC/WeXOoeZnhCJ6tZulfFSkt3Td757kGVUBVAIE Nwdf+vKrjNmwghbnNIjoQXpPQShlxw1XzwI0pnDABQ2kFaLmSMmS62dk1Qe+jWvNn5OA496HL7Y1 wc7rET6RqB5LizWYjFeUoNdpbOUzcygVgrtWGWxX6FKoV+k6EMVfTkZ86Q2g7jfMW++7hrR9wOQv GR3Qg1iROxe6f1EDDeKZ8wLZVBGYlW0dzHKLRqkBsqOXl/sMCdTbTR+11UBKIYa8B0CYDHYjmijL tEukInrAeU5AHKBK65XaytjnPOO4/35CWOAV1Q== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns1.bpa.gov is authoritative for bpa.gov
	Found RRSIG signed by bpa.gov zone
	Query to ns2.bpa.gov for bpa.gov/SOA
	Received 2511 bytes from 170.160.100.10
	;; Response received from 170.160.100.10 (2511 octets) ;; HEADER SECTION ;; id = 31880 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; bpa.gov. IN SOA ;; ANSWER SECTION (3 records) bpa.gov. 43200 IN SOA ( ns1.bpa.gov. hostmaster.bpa.gov. 2023110803 ;serial 43200 ;refresh 3600 ;retry 1209600 ;expire 3600 ;minimum ) bpa.gov. 43200 IN RRSIG ( SOA 8 2 43200 20231211120950 20231204110950 59628 bpa.gov. RNw8CvQw5wQ1C++D02QqMtW0w4OsEdhZoDYHuqxdCP/E+zDksRoXs50Z8LYS0XFYiLwQOJzrL7vJ Fhj83BMFGIo4bROhUfSo+MnHD0D52uFhK+q/73u3B1D07f+IPiPNCcXy9Fi8spe4YCnnkqM8q/Uh 4HtxtC59tyLDy1nC7fXf5ATu+XLzyFRJlcFSaVuQWgAKGixjkSG0ZYn+/eJwOST2QlnqITFrQhZ0 pYLzRD1fABVdYKKOecMFnOlIDMH9svpK0kVHZMmFP5ooqXbUO5L2DezUdgymvjK3mZJ6Vx8Gm4wX 8mcYdmN2ttuO7Tt00iJNSU9pqRUFPkHE4XjT3Q== ) bpa.gov. 43200 IN RRSIG ( SOA 8 2 43200 20231212125554 20231205115554 50598 bpa.gov. H/x8nqnH0CeFHbqEerabo/4vbk4mk58nne9iKDTVM0Vrop7dixT6Kw+my2/7LsFiTJhnd7V69G3Z jdopqI258Ir20P9qrhW8+uZILaWUQHprwR2sHlODHBYEo2neFnmiTz2d14oU+Z4AdP18rCgaKZEx LoQ8p2tmg43ybfjb6lEexppdyNCHp8Q4UBCouoHW+Izjm/d3OlQgtQS4GkfD2a46oILLJDE1O7ce KiXflwlNtO9O8G8ZBfWdrJ0AZBSeRTTsv/p4Q+yiPbnyCrOIthcBMWxUW32BQDhIdVIVgovUdoyw /aA6Gzs8vtAn3Z6qrg58sRDltn2aj/K/VOJPSw== ) ;; AUTHORITY SECTION (4 records) bpa.gov. 86400 IN NS ns1.bpa.gov. bpa.gov. 86400 IN NS ns2.bpa.gov. bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20231211102342 20231204092342 59628 bpa.gov. IJVb1GVsBmfmlY8W4hCFseoHJ+/LkRugUXHeOMkp0ep1cUm7cDha2iXNpKp6f4RE3D1SVqu5QH5x Blao95hkuack6zDU2q4WagBMEVva0uy7FsJYwJ6r6iRZ9Dump895o2A8Fsbejn4wonLC7rsouTiT kKACWnF6m9VbvSjYhXXFIsqD315VQBbW9RM7dkAFXuCJ0vrBuZ08Luydkmdt24JD7yYkwOIArgH9 VzAaT+4e8Su5aj4g534e11maMWOKq2okV4CDhwOZN7tZQMn4UUMEghwuTREFkitQglKkIAfG5+m9 se+L8eLqgZ+oktivgIXiqc9iaUConpxC+JQiXw== ) bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20231212102332 20231205092332 50598 bpa.gov. mvrsUlNKZaty9FlFBOSTeOS6cOpJxKZza+DiCwZ42o3Ngx54cogFJVw2nQFRn7hvFoEFBR3dGBvo P46sKZgkFjeKAaebu0XKA+AFR2Eq8HTzaYVoRRQ349mknDILO6Ldv5ergWn1VUt1AxjfaOup5Qkx S6j3c2B/ry/5WM6efPoSssSXhIA5pI39su+ZGxDKCkQ5ODBOpTA0saIXqD3eQpjcqeHUaQZPk/0g 93oVK8K5emu15VVAA+E7BD7CxLHQ8d8KpO9GbhA/B3o593lC00idt28HnkPLXon87NKu6uDoYDGS NZHTGj4r+pWjToGiKNFPiYamwWauclWDey27uQ== ) ;; ADDITIONAL SECTION (7 records) ns1.bpa.gov. 86400 IN A 170.160.36.10 ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20231211102342 20231204092342 59628 bpa.gov. RaW7FYlmsznxiT+DWn2mMkwpmhXfVE7Bn9IvlTSQhjGuEE89OvQXAj7JLqui0c5VtMK+Sfad/eTx cXqn0q1PHcExno7w8jmxq25fg3dg9FHemlzJMJ9VczXHItCzP71M3PR6o2Alfsm5bReScN8s+dhq 0dc8gxf9j7ZCh+RU0rKU+JvXeqix/suc5F6v1lgkkffzut7mNpSAz8q8Y12CCIZjKZ153n2CicP5 2Lk3x3A8/nQ7kO5POKgim3MwOXDL5xrFkhF+6yziMP/J7Ap8rtAvczzc4MZbV4EhqEWvySOnvf1L tVcfnesrhgeH4W6us2qZU895gzEUWsi+e5gxTw== ) ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20231212102332 20231205092332 50598 bpa.gov. SktNBMzFN3c0Wiiwz6kROCkQwpweM34NnCiiOHsJzIsVJPVcjYMgRPszX8Z1xyh2X3Ms+iTJbwmT VFmxxmZuBl6EDKAm30DXeFW+VcDhFtqfm4yU8c4NWVNr3JfSSaHpE/p/C7h/cYRmXhqI1sOBSc/6 hv3eIG3SxRN8JxmSqW8UN0yMcPm4cOQI28woxiXvDtiU34v+cW1H9xXzEGpbjMVGp7xSU7O2Ot+i DOKtL3gZ1jXxXqI2LOEYvvd5XqUe9afpxZK0d9D2/jUexaCl+9HAmI/yaS0EVOIKvc14XyyGz6aQ XHEg6zQQx4iwppN1KfAUSIBCs/mCGjRws+nEPw== ) ns2.bpa.gov. 86400 IN A 170.160.100.10 ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20231211102342 20231204092342 59628 bpa.gov. E42djiXNbzPEDMx5wQ7uILopL5DeBQ8VWh97uWAjho3ZkHapEd51imvn1u44jsoVKCY+X+RLTycZ OeGilJ7spJXm7DxjoEIwY6Ov2jewQ2poDMfNryL+My/qVPvT7s5PQKKP6loFh7gZm/w0m8igziDW il8eXeSQvCW/3ShYvKLrvlguD0Nj7cf327GuXSxgRZWX65ciChqVHTtL/v3JYpqJVHQ1MQOzGaLu CYQVL5epxYAY+xYva6xAHdALc/e9SIhHgIZtAQsWyRn8UJES3r3K/BfXbjTjMgvjMKC/7S1T+tWW Dyxn6OxDmb3TNCKaSHvgMeHTJCNZN7TJTb+1QA== ) ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20231212102332 20231205092332 50598 bpa.gov. AfYUKz+4R3sLH03IRacIbEUwj0E08QOHb289FbfrbMTkzbm3Webs9j5CHkG5FWzBQhsVXEA36nDE WXOhlGHCji5m+tIUN8cQ6UISjsp9NPTYIjbOUWnlcj3DbusbHunblOvtAMgGUG0dXh+McivxsQGT e3+R2+tQ3XzlVx6fT2o8aVB3EP+WPdqDo5D2ZP1TqPZy3dOOjurs+GQA0rjLV7mFDmrsHZdzJx6C PkWunpapv/wbl6pNmF6ioNgyk+c5J/iShUN5M7ySireOkZDgSwXmuOBiXYjxMLfqFrzbDLqxsv2t CJz/6t/Bc1HKJ53h/TAhM4v4gQQtiJ+VlvB7VA== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.bpa.gov for bpa.gov/A
	Received 2480 bytes from 170.160.36.10
	;; Response received from 170.160.36.10 (2480 octets) ;; HEADER SECTION ;; id = 56353 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; bpa.gov. IN A ;; ANSWER SECTION (3 records) bpa.gov. 300 IN A 20.42.128.100 bpa.gov. 300 IN RRSIG ( A 8 2 300 20231211103320 20231204093320 59628 bpa.gov. RaapT/ZRamBoZRbMnwhPED4EAeRJVE4n1VEGb8ixo4yW5ifNhcapRw29HWGp2LQzgriZ0xy9sp/R uI8jaiD33y8ErE39q9BATiHrYS8E+Bx2IwqjtBY9rUGSdLcwc3GymyagfCBvfDqfIJRBLEVZOn76 CQDBmhuCAhAF4I4aFoPJ0dorQeeYBgzKp/9USQwPOp2orvhguvupuyqzAAXzIggjo96nZvuoQ17j VdiBMesGJYBGapi5y+5GcukkoM6Mu/LBRR3stqYz+OmZJ8wzQJ1uKbhI74vlm5NdopVZHqr2cPcS nFa1dt87NvmZeUz5X3NNbW0Z6d3u4cD1qB9I7A== ) bpa.gov. 300 IN RRSIG ( A 8 2 300 20231212102334 20231205092334 50598 bpa.gov. iFO2LBmyhxCHzG8ZJ9940Zi6wziRgh6SPPiVZRo9av6qgIOEUqaXnamK49UlXIS7mcXjUG5i2NUs m3T0CONdk9NWY8sAVfxOr0Q5otenIUHRxDqYy9V3lFhWHzNijv3HxoGv89Hs4pJIiQRR9p88Vh3m gWyUHab3yJQuDWKAy6avBbWmNE3lvC6EEQVsu4kjJYLZuObsddtrpewkdIb8HIHHTrqm6Oyuyqht 5cZgrezKri/Gu97c9OxgvWtBTfiMO3+KIckf5KqcVPle5EiEyQn+juCdNOcjyPE/VyqsFrpo3ISF egAkTQ/iw077jo/iR5IE4eSqMrbd8Y+J28ZMfQ== ) ;; AUTHORITY SECTION (4 records) bpa.gov. 86400 IN NS ns1.bpa.gov. bpa.gov. 86400 IN NS ns2.bpa.gov. bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20231211102339 20231204092339 59628 bpa.gov. Jn6ngl+PpYjC3PoR/gAKaAXDU1uiL9vblEXewR/d5O+rfynLs+45XPHMJ3/GCE1uYaTCKkYaclbB A1pd33H9z1QGDIRvIXBDNZUrg+Rfo0b8xRR4eRkYvXJua7ACkV58CSzk0A5GPy2lSX3J6ZTj/+Pz o2rlWHS33WyEhzXdbBUBS/rIl9hfBkl9/XIR2wnP0DxijIKX3QEJKi5phYQTT3L3ulywN0qdkysN OeGPnNAh51uUN3oXw1wXBky8maKbaHl4LXSuYHE6XUa+DVlPT6YVYCRJ5KDqW0zY9t/E5UvczGba CJbPL53iEZem1lBWif65g7xnoJEBjgbx+xWW8w== ) bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20231212102330 20231205092330 50598 bpa.gov. gIZVN4arzmjU8GtdrEZ24Y+4qC4M8N1H5vZm2QTvhMaYmdkDwSnoL2i3r0JK2nF55C9YnY8enixe kAJn8a5TjyjQKm8UZa7WdKXTZ5hA/Vwxz26ac0o8+nTByJaBQ10ylyhatwYveeEVGsWvhmyuAMh6 RDuzPhhDkBTFwnzAqsy8Trsfkj9M1M3/DG3Vbh4ev65rupz262pYzG7t80Md3mJpvktNKA2rC8al 4AemdgtzfxponvzRFgNsw0b5FKpPAcG2FF0PJA8TJqdU6P6D7A1gwXyUWtjGaPuDlmN4uq41SzmW 723K3WXDCjA1DyvoDhCeaTBKRKPAqBXRQrxggg== ) ;; ADDITIONAL SECTION (7 records) ns1.bpa.gov. 86400 IN A 170.160.36.10 ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20231211102339 20231204092339 59628 bpa.gov. QH1rkSG9z1jrPAmGzVp1B7jjE8RLOKMlA1+3BTfiVYGI5xTeIVLX5eSqZrg3fWdfscrB91Mea/Z3 Q/ezFClAasCnXAK7n5lpGpwvBb56bhWCXausZGtWU1jGVbpTwZCj3rgAs/UsYOEQH0vSSVq7Ees5 dN6ULqk5tB081OrVEUFDwIkI6mqgjjPRUPIU0uJOC6pntqxb9zykiJpefviZGGIvWWd8ae+ktFMd y3l0pReSf/yNzOMNKTFYMA+JJf4cvUCzMBG8b6oRjISHRbj3fKvxy5aNTs/uASC39l1ytJAiHpOS TNNcagIdmuEXiqTGGWFDewnt7t1lRn/Eczoq2w== ) ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20231212102330 20231205092330 50598 bpa.gov. bb1XCVgvmlMcfdK9m62HvL3NY9BgmREL5Eb1sZHBY34Qkp79qmpEK6EyydaAHN+YkNH8SAW/GvQG w6IHalIh0Z+CRRh8t4cTNbSWcAg8dQFAjYk+yTNo0MA5PKcnYPbv0KEnS7lOoF4ZrywYbTfpPPSd XitwrE2ibaDH7cZVrr+HJCIv7kNgN1nltQjUxW6TXveVw+WHFzojeV9XO6NTibHSKh1yoHmMDw3S QcHZucEmePoUa4bqzLSALbSgIrg/LKPkiRd3glMry2k5MqLgUS2mNWCxAeJgO39sBNLSN29xwCbv kMoytS/BkwJKHq4mljSpzgmfY05ptmUsA2Du6g== ) ns2.bpa.gov. 86400 IN A 170.160.100.10 ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20231211102339 20231204092339 59628 bpa.gov. FwZQgMBkxDX+TaOmtfdhYIo0HOkGbBQJMFvMapimLwiImOoZ87BFogaHQ1Rq5yJaj2fEqeKBflvJ xwvhmmoRLGSfa+x4BgQRDK1ZM+vD4TYON0nDrA02kB9bJ3kWW1VbOE5aSLBievRTPpFSjHVsb2XQ X3cBrzsJEW7xgFNtQ5bj0Mrhs9li9mLyPGiAliFc+gTK1scAbyfNw9hXh9n4Uet3/ZIi23Uxbci0 v9e0kx+VE0rpImRNWfKiL3yC/nFPeto2tiYnU+ZtaD5EB/XHzhQXLyrFtFCfxz26h0xQwTWJ+vRU mJA51F1HdPh+XgQ+aVFoF8hZeZGoUt4RvNRCDg== ) ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20231212102330 20231205092330 50598 bpa.gov. bp4IV6/UzsDkz4vZsCBVDeZWQXVaNbQs4gGh1aC/WeXOoeZnhCJ6tZulfFSkt3Td757kGVUBVAIE Nwdf+vKrjNmwghbnNIjoQXpPQShlxw1XzwI0pnDABQ2kFaLmSMmS62dk1Qe+jWvNn5OA496HL7Y1 wc7rET6RqB5LizWYjFeUoNdpbOUzcygVgrtWGWxX6FKoV+k6EMVfTkZ86Q2g7jfMW++7hrR9wOQv GR3Qg1iROxe6f1EDDeKZ8wLZVBGYlW0dzHKLRqkBsqOXl/sMCdTbTR+11UBKIYa8B0CYDHYjmijL tEukInrAeU5AHKBK65XaytjnPOO4/35CWOAV1Q== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	bpa.gov A RR has value 20.42.128.100
	Found 2 RRSIGs over A RRset
	`bpa.gov. 300 IN RRSIG ( A 8 2 300 20231211103320 20231204093320 59628 bpa.gov. RaapT/ZRamBoZRbMnwhPED4EAeRJVE4n1VEGb8ixo4yW5ifNhcapRw29HWGp2LQzgriZ0xy9sp/R uI8jaiD33y8ErE39q9BATiHrYS8E+Bx2IwqjtBY9rUGSdLcwc3GymyagfCBvfDqfIJRBLEVZOn76 CQDBmhuCAhAF4I4aFoPJ0dorQeeYBgzKp/9USQwPOp2orvhguvupuyqzAAXzIggjo96nZvuoQ17j VdiBMesGJYBGapi5y+5GcukkoM6Mu/LBRR3stqYz+OmZJ8wzQJ1uKbhI74vlm5NdopVZHqr2cPcS nFa1dt87NvmZeUz5X3NNbW0Z6d3u4cD1qB9I7A== )`
	`bpa.gov. 300 IN RRSIG ( A 8 2 300 20231212102334 20231205092334 50598 bpa.gov. iFO2LBmyhxCHzG8ZJ9940Zi6wziRgh6SPPiVZRo9av6qgIOEUqaXnamK49UlXIS7mcXjUG5i2NUs m3T0CONdk9NWY8sAVfxOr0Q5otenIUHRxDqYy9V3lFhWHzNijv3HxoGv89Hs4pJIiQRR9p88Vh3m gWyUHab3yJQuDWKAy6avBbWmNE3lvC6EEQVsu4kjJYLZuObsddtrpewkdIb8HIHHTrqm6Oyuyqht 5cZgrezKri/Gu97c9OxgvWtBTfiMO3+KIckf5KqcVPle5EiEyQn+juCdNOcjyPE/VyqsFrpo3ISF egAkTQ/iw077jo/iR5IE4eSqMrbd8Y+J28ZMfQ== )`
	RRSIG=59628 and DNSKEY=59628 verifies the A RRset
	RRSIG=50598 and DNSKEY=50598 verifies the A RRset

bpa.gov

	Query to ns2.bpa.gov for bpa.gov/A
	Received 2480 bytes from 170.160.100.10
	;; Response received from 170.160.100.10 (2480 octets) ;; HEADER SECTION ;; id = 58464 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; bpa.gov. IN A ;; ANSWER SECTION (3 records) bpa.gov. 300 IN A 20.42.128.100 bpa.gov. 300 IN RRSIG ( A 8 2 300 20231211102711 20231204092711 59628 bpa.gov. gSXgPS0vqNs7zINlbk/rq7IjuS1BVUNscSXsOIExmc39wpCtabnwx8Kd3wVxkMKCkvODyHBg9VzN lNQWdFIxP1KQBTYqO6gcq88EfAptSMx7FnzNEcNHz32bCt9sOQy0yMaHhzinvitV2/GLFBM4HsQX lVLZpQDkuA7RP0UGSmFqxwZ51DJfi1q5UuqEG8KcajD9KEgqNe+Rg4sq4oPCWR2oDMA1Zvkevv7X Plprw8K/Vfev00B5dmlvuVEgyUsLr09UtQd4/ANWN7yvMZvpKXPKXmA+yCAfboPs9aDlNdnBeh81 qw56ri4jFfBq0AbG0D3xYzijFsVRqigb86sBhQ== ) bpa.gov. 300 IN RRSIG ( A 8 2 300 20231212102515 20231205092515 50598 bpa.gov. U7lwsEKNqBSK+oto3j75qa1iQd44c3aiSeo1A08BribS/KqaOiawcuczTxzrOrogm3OrOvLhGCXB 7JYHdWzT7D4vTyYdAn6ZHi4mjNAFnGnglFj9Ol3GvFlDHqfR4weOuLlmHz10AJ4MaRPtdwRlx4Io Edqiukdr8Vr7hwndoCY+0eDoPE4ZFqIjBkSIj5ZbCDd6i4I5RKyH7j9f99BCA6TeTenPajvHDR2z LJwJv8HhdyIK57Ron1bGRwuwN4Oj9W4MgI8pLWADU9oWYPpQqzUvF5bnaBntmgtFg9kIFZf45q5V aZUznYyQ0XXRu/Y4KLtFa8NEyXQDSaekBiSdeA== ) ;; AUTHORITY SECTION (4 records) bpa.gov. 86400 IN NS ns1.bpa.gov. bpa.gov. 86400 IN NS ns2.bpa.gov. bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20231211102342 20231204092342 59628 bpa.gov. IJVb1GVsBmfmlY8W4hCFseoHJ+/LkRugUXHeOMkp0ep1cUm7cDha2iXNpKp6f4RE3D1SVqu5QH5x Blao95hkuack6zDU2q4WagBMEVva0uy7FsJYwJ6r6iRZ9Dump895o2A8Fsbejn4wonLC7rsouTiT kKACWnF6m9VbvSjYhXXFIsqD315VQBbW9RM7dkAFXuCJ0vrBuZ08Luydkmdt24JD7yYkwOIArgH9 VzAaT+4e8Su5aj4g534e11maMWOKq2okV4CDhwOZN7tZQMn4UUMEghwuTREFkitQglKkIAfG5+m9 se+L8eLqgZ+oktivgIXiqc9iaUConpxC+JQiXw== ) bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20231212102332 20231205092332 50598 bpa.gov. mvrsUlNKZaty9FlFBOSTeOS6cOpJxKZza+DiCwZ42o3Ngx54cogFJVw2nQFRn7hvFoEFBR3dGBvo P46sKZgkFjeKAaebu0XKA+AFR2Eq8HTzaYVoRRQ349mknDILO6Ldv5ergWn1VUt1AxjfaOup5Qkx S6j3c2B/ry/5WM6efPoSssSXhIA5pI39su+ZGxDKCkQ5ODBOpTA0saIXqD3eQpjcqeHUaQZPk/0g 93oVK8K5emu15VVAA+E7BD7CxLHQ8d8KpO9GbhA/B3o593lC00idt28HnkPLXon87NKu6uDoYDGS NZHTGj4r+pWjToGiKNFPiYamwWauclWDey27uQ== ) ;; ADDITIONAL SECTION (7 records) ns1.bpa.gov. 86400 IN A 170.160.36.10 ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20231211102342 20231204092342 59628 bpa.gov. RaW7FYlmsznxiT+DWn2mMkwpmhXfVE7Bn9IvlTSQhjGuEE89OvQXAj7JLqui0c5VtMK+Sfad/eTx cXqn0q1PHcExno7w8jmxq25fg3dg9FHemlzJMJ9VczXHItCzP71M3PR6o2Alfsm5bReScN8s+dhq 0dc8gxf9j7ZCh+RU0rKU+JvXeqix/suc5F6v1lgkkffzut7mNpSAz8q8Y12CCIZjKZ153n2CicP5 2Lk3x3A8/nQ7kO5POKgim3MwOXDL5xrFkhF+6yziMP/J7Ap8rtAvczzc4MZbV4EhqEWvySOnvf1L tVcfnesrhgeH4W6us2qZU895gzEUWsi+e5gxTw== ) ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20231212102332 20231205092332 50598 bpa.gov. SktNBMzFN3c0Wiiwz6kROCkQwpweM34NnCiiOHsJzIsVJPVcjYMgRPszX8Z1xyh2X3Ms+iTJbwmT VFmxxmZuBl6EDKAm30DXeFW+VcDhFtqfm4yU8c4NWVNr3JfSSaHpE/p/C7h/cYRmXhqI1sOBSc/6 hv3eIG3SxRN8JxmSqW8UN0yMcPm4cOQI28woxiXvDtiU34v+cW1H9xXzEGpbjMVGp7xSU7O2Ot+i DOKtL3gZ1jXxXqI2LOEYvvd5XqUe9afpxZK0d9D2/jUexaCl+9HAmI/yaS0EVOIKvc14XyyGz6aQ XHEg6zQQx4iwppN1KfAUSIBCs/mCGjRws+nEPw== ) ns2.bpa.gov. 86400 IN A 170.160.100.10 ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20231211102342 20231204092342 59628 bpa.gov. E42djiXNbzPEDMx5wQ7uILopL5DeBQ8VWh97uWAjho3ZkHapEd51imvn1u44jsoVKCY+X+RLTycZ OeGilJ7spJXm7DxjoEIwY6Ov2jewQ2poDMfNryL+My/qVPvT7s5PQKKP6loFh7gZm/w0m8igziDW il8eXeSQvCW/3ShYvKLrvlguD0Nj7cf327GuXSxgRZWX65ciChqVHTtL/v3JYpqJVHQ1MQOzGaLu CYQVL5epxYAY+xYva6xAHdALc/e9SIhHgIZtAQsWyRn8UJES3r3K/BfXbjTjMgvjMKC/7S1T+tWW Dyxn6OxDmb3TNCKaSHvgMeHTJCNZN7TJTb+1QA== ) ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20231212102332 20231205092332 50598 bpa.gov. AfYUKz+4R3sLH03IRacIbEUwj0E08QOHb289FbfrbMTkzbm3Webs9j5CHkG5FWzBQhsVXEA36nDE WXOhlGHCji5m+tIUN8cQ6UISjsp9NPTYIjbOUWnlcj3DbusbHunblOvtAMgGUG0dXh+McivxsQGT e3+R2+tQ3XzlVx6fT2o8aVB3EP+WPdqDo5D2ZP1TqPZy3dOOjurs+GQA0rjLV7mFDmrsHZdzJx6C PkWunpapv/wbl6pNmF6ioNgyk+c5J/iShUN5M7ySireOkZDgSwXmuOBiXYjxMLfqFrzbDLqxsv2t CJz/6t/Bc1HKJ53h/TAhM4v4gQQtiJ+VlvB7VA== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns2.bpa.gov is authoritative for bpa.gov
	Found RRSIG signed by bpa.gov zone
	Query to ns2.bpa.gov for bpa.gov/A
	Received 2480 bytes from 170.160.100.10
	;; Response received from 170.160.100.10 (2480 octets) ;; HEADER SECTION ;; id = 37342 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; bpa.gov. IN A ;; ANSWER SECTION (3 records) bpa.gov. 300 IN A 20.42.128.100 bpa.gov. 300 IN RRSIG ( A 8 2 300 20231211102928 20231204092928 59628 bpa.gov. A2AHMBynkM2VMnBFyf8FFwFkfmFtB9IHnnb5OEGfbABJzJF+rwwixDljb4A1li6VPxM7lmvXfPUH JISkdgzZAKbu0U4pewtInjMcB54GmW5JIBZfitm0Ey7tNPYH73hd+eD/XALyam8uZzymH/ldjve6 AxXd184ncOYjkkb9qwxfWqlAwDS/uwGR1Pl75x/OZhyc4Z310/aG5FHYR+3YFcyNz4Tfq4zyDGEp yzGwcsf+Yl9/lV0MdN0HeB4DRrsPmiyuLGfQRqqnxJO3B2tD1U77UqmbBawCi8bPb/Rdbc6EXmjx BSoKPMTag9r8tc82kXTseeXJEdwIvFIvZ6j3ZA== ) bpa.gov. 300 IN RRSIG ( A 8 2 300 20231212102435 20231205092435 50598 bpa.gov. HR1l3wV2s2Zk5GKEpgI72Qefso4+cll/ar3UZNlnJW/aaInau0t3IE5IoF6E3haY7ckjWDz7NrgS mAMM9xlyhBC9/nLSagRNG6Wv+vOkx26OY4l9JAp4ZBkvvHn5UD8dTHmzo2m7K+eyLhhaglKgoL6Z YksLnL8isubmsZEtMiu5XDSWrYOVd5MGpanGTWOtKKBwuVVG2xtysllAH8zpnut4TSTwfvzbKbc8 16hJabpZtSWGQqHoKIYsUVwFj4n7F4ZZN8yJqI1UJpVUzdvW7HehpgZ07KV6w6C1Uj06YehULyHo TUm35mgG1WgudYgGEdErn3/7bkCRwNohN6SQeQ== ) ;; AUTHORITY SECTION (4 records) bpa.gov. 86400 IN NS ns1.bpa.gov. bpa.gov. 86400 IN NS ns2.bpa.gov. bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20231211102346 20231204092346 59628 bpa.gov. jJk1Y0wKgKtrZL/PlJ9OORvKMv+IoaZwV/5cbJTjmQquuaIEPD35OBXfmUT7o93/Wx5TRJ9W00X7 v3h4xYXRAb6DoetkVoJ4i0M6YTM25fxcXZFvknNf4G7mT0iQ2bWmQBa+EuLUCoZHpYOB/vyfopfp JhGTJFnm02SeaJW38jZy1CH2AyIYmnCwNrnxVir4y23QfHjazZeDqgtN4xxxR5TvBHFkQVZTzjl7 wA9nYnrj6vHP7xe4WaQrHz6Q+3rN432d0fzZ39u3i5EOYxYkGyBXeK5auWfbNbTpJJi86kuwOzCO UfH3BStbcgNwoxSZ2BKK5SULRkDYcF/mTq4+3w== ) bpa.gov. 86400 IN RRSIG ( NS 8 2 86400 20231212102329 20231205092329 50598 bpa.gov. YopJRogdEXdPE9RM/9vd5OANHSRqTMpgTgud9CWFrmLm33aw1Fn//Z9pXklORMaAL2U7tdlISqVx QXyTBXObNT9YmZ5ggrghIr/6JS/TemfiJ0eOerMjwQY7uiWY1ElZ2/ZlP3mgTUlk2lrUQZ7QnGAl wzrLAwN92DtNGq1HoYkUmxw90ojsMYQ0aeRjrt8gNCISxVxsueUWBAfQC4gt77tCSoz0asjhfxvH s/Vfx6VoGcMeJIaXjSnuSoLScAF0DbTOpK5XCPnI3nfx0zBbGj0iV5F2BATcp5JapLR6al6rX5Os pqLJywv1WDyXUBmLTWQYTN4DLpz6D3Rz4RYEgg== ) ;; ADDITIONAL SECTION (7 records) ns1.bpa.gov. 86400 IN A 170.160.36.10 ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20231211102346 20231204092346 59628 bpa.gov. e28pG80tPJCYkmMheuR8JYw/N+h/5Dy6TuQCMpELSEV+HNKjkp7bZPHbE4qp/ftDeAXAtXlJVH0G mZrGbIR3yR0biLopcvxApaMGSByLP/tSsI3snqKPhJCZoMkO5dyyI6LOHmkLuWm1hTewGj5ce9WR lbKc9pax7eH09pe+Y/MwhqywjgJ8bxr3Fm3vmyFjMI4cFL3E5+F3uMHPtj+pqvQOcok2CpR1rmoa rlsEU9yRbbfZ1BAdKZpmSrwe/1Mdq/+yUBIWB6DTz5/ZuHhGdl624dIlAINW9L6GuGKFnq0R7lE4 FCe/kE9FhLdA+bmmOQieQLIhyzNMbw/l1+rObg== ) ns1.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20231212102329 20231205092329 50598 bpa.gov. L7+Xk8MS+yiy6vpet5doKAbjFSBin/ORoD1y2uQIsy1AEGThzyqnOXZlVJd6God0TsVKEBPHDRKv oy9dLae9xOLyCFsCSvsYY2gSIJ7rh0Y1T/68vTWDQih1swikq//oLtEY+lp10wNEUM5CuYEiXQHH Cbe4r/Phg7Z24YQQlCiD1f5fxq9swhAgz9QySkfNFeTN7elXIzVD4hadI32FZDzP0tAIk04gJbuh 2qUAKgIakkLfy+ZKlKvi2SEVXZlq2MxNf9Hb1GEbyCBfe9bdKgd8hXGIi1dkJl29A7CrW6mUb9WV aZZ4TGFKGX77KnDz6vasFTpozk7B9oe6DhCvAA== ) ns2.bpa.gov. 86400 IN A 170.160.100.10 ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20231211102346 20231204092346 59628 bpa.gov. WwJNsqoJb6WNH9SAcWbTwe9NBFLlwXaGxwSic2exf5eVlMII/6k3E0ynKI5YdvdypMffPr1k5cQ8 6z2L18xgX5iQb9Gz34eeBzdbCP7wrquIQZzMYvj61aSDdlAqwAyQCPIeUMNjR3Dy8xrxgisLi5m/ GNbjG1Do3bOKCaJlh5nsMCV6c2jTu5w+rzG8cD1kO2oI4qhs6fVLhI13gxSrjnStKXTIcDr5+S4I JWY/rQTIbVybUCuwXLwJwZzxpiF2Iet2oq11OfWw5BUjPQ3/0Z85/xrx6Zz5ladJCNsuu/PVV9pJ TruHwVtVRaF8NdML5sn6+T50i07Q395a5qSHMg== ) ns2.bpa.gov. 86400 IN RRSIG ( A 8 3 86400 20231212102329 20231205092329 50598 bpa.gov. NIAPQJa9D9ys04QCuYW92/QY7KAsv5YnEX+lCow0Qu93J8hioWh57yogDj9galkn/7+PnmX2XdyB dLdabHfuJBi9m9LVlRMvs8/tg7dca1YE+VWzJeD279grVLA2eDqb4lvweVb6t/zsQB3V9xKZKARt JMBX/9bOj7m61R7bOhvgltDSUarX91wCEKeyOD+Gm31qb9sr7sVNa9oibXaG8wXrNVAGucUjN2Li jBTo4hdui10YoZ2vBTmo5TM8vm72RyEaFOO+iJtcihIlOPHbL3eQSoQYhBLW9YpTJQ7RDdKlEHbh 3jOnEk1BqlLPfcIBc0reJKLvLMn5GNUotOTq9A== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	bpa.gov A RR has value 20.42.128.100
	Found 2 RRSIGs over A RRset
	`bpa.gov. 300 IN RRSIG ( A 8 2 300 20231211102928 20231204092928 59628 bpa.gov. A2AHMBynkM2VMnBFyf8FFwFkfmFtB9IHnnb5OEGfbABJzJF+rwwixDljb4A1li6VPxM7lmvXfPUH JISkdgzZAKbu0U4pewtInjMcB54GmW5JIBZfitm0Ey7tNPYH73hd+eD/XALyam8uZzymH/ldjve6 AxXd184ncOYjkkb9qwxfWqlAwDS/uwGR1Pl75x/OZhyc4Z310/aG5FHYR+3YFcyNz4Tfq4zyDGEp yzGwcsf+Yl9/lV0MdN0HeB4DRrsPmiyuLGfQRqqnxJO3B2tD1U77UqmbBawCi8bPb/Rdbc6EXmjx BSoKPMTag9r8tc82kXTseeXJEdwIvFIvZ6j3ZA== )`
	`bpa.gov. 300 IN RRSIG ( A 8 2 300 20231212102435 20231205092435 50598 bpa.gov. HR1l3wV2s2Zk5GKEpgI72Qefso4+cll/ar3UZNlnJW/aaInau0t3IE5IoF6E3haY7ckjWDz7NrgS mAMM9xlyhBC9/nLSagRNG6Wv+vOkx26OY4l9JAp4ZBkvvHn5UD8dTHmzo2m7K+eyLhhaglKgoL6Z YksLnL8isubmsZEtMiu5XDSWrYOVd5MGpanGTWOtKKBwuVVG2xtysllAH8zpnut4TSTwfvzbKbc8 16hJabpZtSWGQqHoKIYsUVwFj4n7F4ZZN8yJqI1UJpVUzdvW7HehpgZ07KV6w6C1Uj06YehULyHo TUm35mgG1WgudYgGEdErn3/7bkCRwNohN6SQeQ== )`
	RRSIG=59628 and DNSKEY=59628 verifies the A RRset
	RRSIG=50598 and DNSKEY=50598 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test bpa.gov at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: