DNSSEC Analyzer - clinicaltrials.gov

Domain Name:

Time: 2023-09-24 17:32:07 UTC, NTP stratum 4

Analyzing DNSSEC problems for clinicaltrials.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 1141 bytes from 192.33.4.12
	;; Response received from 192.33.4.12 (1141 octets) ;; HEADER SECTION ;; id = 44984 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780 . 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20231010000000 20230919000000 20326 . Xx8gfV3qemuf4ffCr2jq6aUIn15oFbjiocYWvFF9GGoLqOqZEMrkiNHmCcAfnyEjltWTwx2YdnAM CmQO8KJ4+6hSbSsRbDWwVnBI+3lkqvdpEIMlgkVuKsK012s19eERCPqYV+eyrW8YR1IQhXljVgy7 zISHkomWGtf0AY8jXlGABCLbHQj0/x0kuNM2gOz/gSWqKVt3Nwbpu/0gh9mrjQPH29q/p0vVjlEV J4SQgYvBBuxQZMxwupvrn4a4hr3zbGbiUkR772gra0DfNUIVB9A+GEcCpFwazbjcV476xAtuUC8R 8g44qtKhL+vezd4Mnm/hOPGf1ZGinAPlsylkiA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20231010000000 20230919000000 20326 . Xx8gfV3qemuf4ffCr2jq6aUIn15oFbjiocYWvFF9GGoLqOqZEMrkiNHmCcAfnyEjltWTwx2YdnAM CmQO8KJ4+6hSbSsRbDWwVnBI+3lkqvdpEIMlgkVuKsK012s19eERCPqYV+eyrW8YR1IQhXljVgy7 zISHkomWGtf0AY8jXlGABCLbHQj0/x0kuNM2gOz/gSWqKVt3Nwbpu/0gh9mrjQPH29q/p0vVjlEV J4SQgYvBBuxQZMxwupvrn4a4hr3zbGbiUkR772gra0DfNUIVB9A+GEcCpFwazbjcV476xAtuUC8R 8g44qtKhL+vezd4Mnm/hOPGf1ZGinAPlsylkiA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=46780 is now in the chain-of-trust
	DNSKEY=11019 is now in the chain-of-trust
	Query to l.root-servers.net for clinicaltrials.gov/A
	Received 685 bytes from 199.7.83.42
	;; Response received from 199.7.83.42 (685 octets) ;; HEADER SECTION ;; id = 23443 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; clinicaltrials.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . tTg+S05iF6tYI24Bs0KpnTfZUrJRHfORGjX4O1p8LMJ5WY19q4RUSt0ffmvXevhckeu0dqffzgpH 8u/NC1op8S0O+OP3KvPpmARx6H3BVKeRWp+q+nwtz6kseqIg3ukiVAksmxACElnqHwwSTpK4ku5V H48TesoBva54U1V2MhS1iD8gUEStt8s1aD+mdd/oVQ3Wvd1c5dHU9oteSwzZQfOsyFAmThi7fjCl 8la+1DGXtmVQ2sVvpSaJJrIF90rzGKyxKGCrz3ffqxSRTOIT96+MgKTmXN+8QmDyD/ACJAe1zmGD ZuRj3FL7ul0X9Kfv6fM6zGQNf4d/m8+ZiKz3nw== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to m.root-servers.net for gov/DNSKEY
	Received 670 bytes from 202.12.27.33
	;; Response received from 202.12.27.33 (670 octets) ;; HEADER SECTION ;; id = 27904 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . tTg+S05iF6tYI24Bs0KpnTfZUrJRHfORGjX4O1p8LMJ5WY19q4RUSt0ffmvXevhckeu0dqffzgpH 8u/NC1op8S0O+OP3KvPpmARx6H3BVKeRWp+q+nwtz6kseqIg3ukiVAksmxACElnqHwwSTpK4ku5V H48TesoBva54U1V2MhS1iD8gUEStt8s1aD+mdd/oVQ3Wvd1c5dHU9oteSwzZQfOsyFAmThi7fjCl 8la+1DGXtmVQ2sVvpSaJJrIF90rzGKyxKGCrz3ffqxSRTOIT96+MgKTmXN+8QmDyD/ACJAe1zmGD ZuRj3FL7ul0X9Kfv6fM6zGQNf4d/m8+ZiKz3nw== ) ;; ADDITIONAL SECTION (9 records) d.gov-servers.net. 172800 IN A 81.19.194.30 c.gov-servers.net. 172800 IN A 69.36.153.30 b.gov-servers.net. 172800 IN A 209.112.123.30 a.gov-servers.net. 172800 IN A 69.36.157.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone gov

gov

	Checking DS between . and gov
	Query to f.root-servers.net for gov/DS
	Received 415 bytes from 192.5.5.241
	;; Response received from 192.5.5.241 (415 octets) ;; HEADER SECTION ;; id = 48437 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . tTg+S05iF6tYI24Bs0KpnTfZUrJRHfORGjX4O1p8LMJ5WY19q4RUSt0ffmvXevhckeu0dqffzgpH 8u/NC1op8S0O+OP3KvPpmARx6H3BVKeRWp+q+nwtz6kseqIg3ukiVAksmxACElnqHwwSTpK4ku5V H48TesoBva54U1V2MhS1iD8gUEStt8s1aD+mdd/oVQ3Wvd1c5dHU9oteSwzZQfOsyFAmThi7fjCl 8la+1DGXtmVQ2sVvpSaJJrIF90rzGKyxKGCrz3ffqxSRTOIT96+MgKTmXN+8QmDyD/ACJAe1zmGD ZuRj3FL7ul0X9Kfv6fM6zGQNf4d/m8+ZiKz3nw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DS records for gov in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	DS=64280/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . tTg+S05iF6tYI24Bs0KpnTfZUrJRHfORGjX4O1p8LMJ5WY19q4RUSt0ffmvXevhckeu0dqffzgpH 8u/NC1op8S0O+OP3KvPpmARx6H3BVKeRWp+q+nwtz6kseqIg3ukiVAksmxACElnqHwwSTpK4ku5V H48TesoBva54U1V2MhS1iD8gUEStt8s1aD+mdd/oVQ3Wvd1c5dHU9oteSwzZQfOsyFAmThi7fjCl 8la+1DGXtmVQ2sVvpSaJJrIF90rzGKyxKGCrz3ffqxSRTOIT96+MgKTmXN+8QmDyD/ACJAe1zmGD ZuRj3FL7ul0X9Kfv6fM6zGQNf4d/m8+ZiKz3nw== )`
	RRSIG=11019 and DNSKEY=11019 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	DS=64280/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	`gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 )`
	Query to c.gov-servers.net for gov/DNSKEY
	Received 1233 bytes from 69.36.153.30
	;; Response received from 69.36.153.30 (1233 octets) ;; HEADER SECTION ;; id = 19335 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (5 records) gov. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 gov. 86400 IN DNSKEY ( 256 3 8 AwEAAcvA+2gDUzQ8CrZNef0l31+89Y1gUM8rPtvpC9E3HNsYoOxe3r0NVuWjafg5zXzkRnHhw0L9 nBIQH8cqEeFKg3bJx2i8dj4N9YXmmhkLHuE0JJ9+JrZQpWRY9AQPsG3l2RLnL6Vato0IIweFWF+7 oWVM0xMoB6wjI0XTB+tO1x3a/wuGs7cTPBM4RzvKqsY36/bICi+QNVIesASaGNrFqs0= ) ; Key ID = 40921 gov. 86400 IN DNSKEY ( 256 3 8 AwEAAcbYvlY667qXEzHsDTkft9cgKy5F0S9CAP+aFK9+sJumGqvpMaOyOzsilJ+OSVFhopJ1aRFp CUpLVIcVJ3E3YATGpzB45M0D5c4oJ0RjEIUakBwcPghmSW8K1GPqj/eUs4fbVPytXwtwvUll9Lxf gUvi5DA6xD6d2ckwDyRxfcMhXYydr2hIsgfrBLmRDMi4BkxMvA23eShPd/tPvnR0gJk= ) ; Key ID = 10104 gov. 86400 IN DNSKEY ( 257 3 8 AwEAAZp0vliR0TOBCJXmdagY36BI5ZveSPE3OSrcXKDs8IZa86x1+gwbheJcfLB6Fw6cWYUXaNgA mFcbxqIqWc5VJSyPS9yCPdEOLEIiegwCmcWnNsEyc0snKTyypXnvJ5JNhoznpFILDqlksAqP/aiq 1/l0w8TMkRbRrViLrJ1ayaScZ0nn/ge5wNpX09T9RI+gF1OIMJDdgH1vi0a+t6smSy4pUrerFTsu y8JAL+PP85MZiOssT9yoERfWSjFKde6PrQX5vj090AxT+hztb+q2EFXnF1a2L73/3UarB19k5NR3 MT1uM7ddag64Q0lg3aTy3MglDCzP7/StUxdeyL5qIX8= ) ; Key ID = 64280 gov. 86400 IN RRSIG ( DNSKEY 8 1 86400 20231008040000 20230923035500 7698 gov. ZwUS8pkBdeVIiXrdTNAFO7hm3WBpzd5rmcMSg3ewi7Z7Gb6jjyqePCEVUOzrTZzY+CRSknDVQQc7 QAHTkqPG6pvFDWxDkEgBMAU33rSxxussGS6IROb6Pz/REaEHbxsdYmIdfk/HhDNj9v2XQlK4/O7g iIVqwiTlwTBRyryqKZYVBgXCvIWd5wWVPAz5ncDjgrelVa3WlsKK9R9wdMrIWpBO8hkZl8b/nUiO P66iKOJ/u08cZ3hJFvyGNMBBG8hdydVlTcebkU20eeEfI4ajEuzPUKhV7sEOvD4CXSbQaChutrFP ZaCgmk85dtnzdxBQqyeLstU7LY0KOFw/Iwz2fw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for gov
	`gov. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`gov. 86400 IN DNSKEY ( 256 3 8 AwEAAcvA+2gDUzQ8CrZNef0l31+89Y1gUM8rPtvpC9E3HNsYoOxe3r0NVuWjafg5zXzkRnHhw0L9 nBIQH8cqEeFKg3bJx2i8dj4N9YXmmhkLHuE0JJ9+JrZQpWRY9AQPsG3l2RLnL6Vato0IIweFWF+7 oWVM0xMoB6wjI0XTB+tO1x3a/wuGs7cTPBM4RzvKqsY36/bICi+QNVIesASaGNrFqs0= ) ; Key ID = 40921`
	`gov. 86400 IN DNSKEY ( 256 3 8 AwEAAcbYvlY667qXEzHsDTkft9cgKy5F0S9CAP+aFK9+sJumGqvpMaOyOzsilJ+OSVFhopJ1aRFp CUpLVIcVJ3E3YATGpzB45M0D5c4oJ0RjEIUakBwcPghmSW8K1GPqj/eUs4fbVPytXwtwvUll9Lxf gUvi5DA6xD6d2ckwDyRxfcMhXYydr2hIsgfrBLmRDMi4BkxMvA23eShPd/tPvnR0gJk= ) ; Key ID = 10104`
	`gov. 86400 IN DNSKEY ( 257 3 8 AwEAAZp0vliR0TOBCJXmdagY36BI5ZveSPE3OSrcXKDs8IZa86x1+gwbheJcfLB6Fw6cWYUXaNgA mFcbxqIqWc5VJSyPS9yCPdEOLEIiegwCmcWnNsEyc0snKTyypXnvJ5JNhoznpFILDqlksAqP/aiq 1/l0w8TMkRbRrViLrJ1ayaScZ0nn/ge5wNpX09T9RI+gF1OIMJDdgH1vi0a+t6smSy4pUrerFTsu y8JAL+PP85MZiOssT9yoERfWSjFKde6PrQX5vj090AxT+hztb+q2EFXnF1a2L73/3UarB19k5NR3 MT1uM7ddag64Q0lg3aTy3MglDCzP7/StUxdeyL5qIX8= ) ; Key ID = 64280`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	DNSKEY=64280/SEP is now in the chain-of-trust
	DS=64280/SHA-256 verifies DNSKEY=64280/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 86400 IN RRSIG ( DNSKEY 8 1 86400 20231008040000 20230923035500 7698 gov. ZwUS8pkBdeVIiXrdTNAFO7hm3WBpzd5rmcMSg3ewi7Z7Gb6jjyqePCEVUOzrTZzY+CRSknDVQQc7 QAHTkqPG6pvFDWxDkEgBMAU33rSxxussGS6IROb6Pz/REaEHbxsdYmIdfk/HhDNj9v2XQlK4/O7g iIVqwiTlwTBRyryqKZYVBgXCvIWd5wWVPAz5ncDjgrelVa3WlsKK9R9wdMrIWpBO8hkZl8b/nUiO P66iKOJ/u08cZ3hJFvyGNMBBG8hdydVlTcebkU20eeEfI4ajEuzPUKhV7sEOvD4CXSbQaChutrFP ZaCgmk85dtnzdxBQqyeLstU7LY0KOFw/Iwz2fw== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=40921 is now in the chain-of-trust
	DNSKEY=10104 is now in the chain-of-trust
	Query to c.gov-servers.net for clinicaltrials.gov/A
	Received 493 bytes from 69.36.153.30
	;; Response received from 69.36.153.30 (493 octets) ;; HEADER SECTION ;; id = 6300 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; clinicaltrials.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) clinicaltrials.gov. 86400 IN NS gslb03.nlm.nih.gov. clinicaltrials.gov. 86400 IN NS gslb01.nlm.nih.gov. clinicaltrials.gov. 86400 IN NS gslb02.nlm.nih.gov. clinicaltrials.gov. 3600 IN DS ( 58792 8 2 d2fac885a76e20e7968387ed755edfb48a6c41662e4916ccc58ac4b972c17148 ) clinicaltrials.gov. 3600 IN RRSIG ( DS 8 2 3600 20230929154010 20230922154010 40921 gov. IQ3pnyEFzms4nydXed2yWaK9Q2ZbEOqdPQcckojVGqAhSP6/4qpSxUxKDvWT3pMNAKNRW48IfwVc N92KBfw60/7fdnzGJV2Kin3JEH0MoysLhf/dpPGo5T+19IKjXSmzTHA+NcMZiv3Ijo1viq3n3YFL PKvZEuVp/XplRqXUdng37iM8MTFsh3Yf8CdJQcCXMrzHjmg4Qv8iRZNwopKDfw== ) ;; ADDITIONAL SECTION (7 records) gslb01.nlm.nih.gov. 86400 IN A 130.14.252.50 gslb02.nlm.nih.gov. 86400 IN A 165.112.6.3 gslb03.nlm.nih.gov. 86400 IN A 130.14.252.53 gslb01.nlm.nih.gov. 86400 IN AAAA 2607:f220:41e:252::50 gslb02.nlm.nih.gov. 86400 IN AAAA 2607:f220:41f:1405::3 gslb03.nlm.nih.gov. 86400 IN AAAA 2607:f220:41e:252::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.gov-servers.net for clinicaltrials.gov/DNSKEY
	Received 493 bytes from 81.19.194.30
	;; Response received from 81.19.194.30 (493 octets) ;; HEADER SECTION ;; id = 38458 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; clinicaltrials.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) clinicaltrials.gov. 86400 IN NS gslb03.nlm.nih.gov. clinicaltrials.gov. 86400 IN NS gslb01.nlm.nih.gov. clinicaltrials.gov. 86400 IN NS gslb02.nlm.nih.gov. clinicaltrials.gov. 3600 IN DS ( 58792 8 2 d2fac885a76e20e7968387ed755edfb48a6c41662e4916ccc58ac4b972c17148 ) clinicaltrials.gov. 3600 IN RRSIG ( DS 8 2 3600 20230929154010 20230922154010 40921 gov. IQ3pnyEFzms4nydXed2yWaK9Q2ZbEOqdPQcckojVGqAhSP6/4qpSxUxKDvWT3pMNAKNRW48IfwVc N92KBfw60/7fdnzGJV2Kin3JEH0MoysLhf/dpPGo5T+19IKjXSmzTHA+NcMZiv3Ijo1viq3n3YFL PKvZEuVp/XplRqXUdng37iM8MTFsh3Yf8CdJQcCXMrzHjmg4Qv8iRZNwopKDfw== ) ;; ADDITIONAL SECTION (7 records) gslb01.nlm.nih.gov. 86400 IN A 130.14.252.50 gslb02.nlm.nih.gov. 86400 IN A 165.112.6.3 gslb03.nlm.nih.gov. 86400 IN A 130.14.252.53 gslb01.nlm.nih.gov. 86400 IN AAAA 2607:f220:41e:252::50 gslb02.nlm.nih.gov. 86400 IN AAAA 2607:f220:41f:1405::3 gslb03.nlm.nih.gov. 86400 IN AAAA 2607:f220:41e:252::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone clinicaltrials.gov

clinicaltrials.gov

	Checking DS between gov and clinicaltrials.gov
	Query to a.gov-servers.net for clinicaltrials.gov/DS
	Received 290 bytes from 69.36.157.30
	;; Response received from 69.36.157.30 (290 octets) ;; HEADER SECTION ;; id = 47090 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; clinicaltrials.gov. IN DS ;; ANSWER SECTION (2 records) clinicaltrials.gov. 3600 IN DS ( 58792 8 2 d2fac885a76e20e7968387ed755edfb48a6c41662e4916ccc58ac4b972c17148 ) clinicaltrials.gov. 3600 IN RRSIG ( DS 8 2 3600 20230929154010 20230922154010 40921 gov. IQ3pnyEFzms4nydXed2yWaK9Q2ZbEOqdPQcckojVGqAhSP6/4qpSxUxKDvWT3pMNAKNRW48IfwVc N92KBfw60/7fdnzGJV2Kin3JEH0MoysLhf/dpPGo5T+19IKjXSmzTHA+NcMZiv3Ijo1viq3n3YFL PKvZEuVp/XplRqXUdng37iM8MTFsh3Yf8CdJQcCXMrzHjmg4Qv8iRZNwopKDfw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for clinicaltrials.gov in the gov zone
	DS=58792/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`clinicaltrials.gov. 3600 IN RRSIG ( DS 8 2 3600 20230929154010 20230922154010 40921 gov. IQ3pnyEFzms4nydXed2yWaK9Q2ZbEOqdPQcckojVGqAhSP6/4qpSxUxKDvWT3pMNAKNRW48IfwVc N92KBfw60/7fdnzGJV2Kin3JEH0MoysLhf/dpPGo5T+19IKjXSmzTHA+NcMZiv3Ijo1viq3n3YFL PKvZEuVp/XplRqXUdng37iM8MTFsh3Yf8CdJQcCXMrzHjmg4Qv8iRZNwopKDfw== )`
	RRSIG=40921 and DNSKEY=40921 verifies the DS RRset
	DS=58792/SHA-256 is now in the chain-of-trust
	`clinicaltrials.gov. 3600 IN DS ( 58792 8 2 d2fac885a76e20e7968387ed755edfb48a6c41662e4916ccc58ac4b972c17148 )`
	Query to gslb03.nlm.nih.gov for clinicaltrials.gov/DNSKEY
	Received 1211 bytes from 130.14.252.53
	;; Response received from 130.14.252.53 (1211 octets) ;; HEADER SECTION ;; id = 1195 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; clinicaltrials.gov. IN DNSKEY ;; ANSWER SECTION (4 records) clinicaltrials.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAZhNHbhoZEh//yj/m+L9IPunwrLDytv+y9x8PV+1Pt+U7YAyQQCm6klDlVulF1M4CrC2gcT5 uPqP2lb2GmdNChO+MyN6VlghzWhSv8ylVqzWgjhvlbsyFb5/7LMJ/nT1XO31ZZ95QKqxUH2TLDGO XqkkfKzuSL0DQvyVal/Us4Lyht73KX42+IPXmqUHue4JBc6leLR2Ptw51fg9TtkeYy3yHXwa2Dq0 YmferMIe1TxdxrqJyAbYu7qO4MpnqLWzuINhLOPZHRtBO7J+RHeMvAJe3MNez/oYN1i1A4PF6/7o 8CeWawbt58Rwmhp+jj79xEJzQwAwXS7Cy1UFczyhLes= ) ; Key ID = 58792 clinicaltrials.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAbb8cjQ3lzWe+dtSDHW8IBHTdyt4KBQQhKmpK7VmNL4K9HXPmCoQQfsJSixsJ06tLpj9j8Mb LZK7daM5e+t9T/oUiUgxdaVxdNsTwRNkzOe4pz2HrYvW8tJ7SDYjEL3B/MKZgs+JlPjmf+TxqJYG hacZMqMTjfHF4s4GTzxTZaQIWGtK1+UcsCO5Q0rGR4kEexQOtHiPpCvLrX1pp7O49Ezxdm1PBzpn +4ITKxJqJR6nf+HBYgLhesjiqDk6TSw2W7IrOsUV+jLxjdndVM6GqAc/VjwhF/pYHZy3Tof+5CEz KqdQxqCEx3Lwp0KE7rs0m93TknaS9o03Fc1tEUR+Hls= ) ; Key ID = 28818 clinicaltrials.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20230930203446 20230923193446 58792 clinicaltrials.gov. ZirbBY2Yl5ea8F7/OoQBPBch+XqNxKWaRLFftyDW+RA3s9nLBSF5sxbXbUke7bf5O/riTsUnm927 s/qYukfw6tpUvB4Nuw2+5nnODEmwPWpCjLhK98zYZibyQxAHtpBBBlhczJZItCFo/sFkDURyqT4q QneNbDCNDnjt68nCmiWE0zFl6d8r9aOZmnHiYQ7o9ZRWEvLu+2IQh9XvCGcL6A3BcI2l+6CtDFr0 KpL5sO3LmA9s6GrMt2OPkBGHog4pBRtsEl4n7voI7DhsMTHjdNVdcbuTO6oxRN5IvZO//nV9a+94 Jrx/hi/dH7idMtuo4mpDlULSBCFCTis4wFgQ3Q== ) clinicaltrials.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20230930203446 20230923193446 28818 clinicaltrials.gov. F3Rsr+citGQQAlNxP/2vpXmX4I5j9BfGthgapEsqiJsaYwjkHwCK1wu2kUDzxghECJdQRRtCI2ii SwcAC6MuxGCRUsOQBsIgqdDDstFCOkSoC641AWC6Q7OjvomAgdSLtLG4ghrdRzFK+lvfozAZ/1Hv 3FynKIq1zHFTCHyZU/BqUmlRW7Q2llCsOG0MwyxnxL49o1HOfPVHQSshS3f7QwUu6ObNLcebGR22 xeZf1BkM3uMkheGghSZYzllgOTvG/9Ot+5du4uaZRQqcQuROWCgMggkVAz9Td9+B3rXKLK+U67SK Hjst03TPOhptTgKrLsG1/+aG2YtdPdJfh9y2zQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for clinicaltrials.gov
	`clinicaltrials.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAZhNHbhoZEh//yj/m+L9IPunwrLDytv+y9x8PV+1Pt+U7YAyQQCm6klDlVulF1M4CrC2gcT5 uPqP2lb2GmdNChO+MyN6VlghzWhSv8ylVqzWgjhvlbsyFb5/7LMJ/nT1XO31ZZ95QKqxUH2TLDGO XqkkfKzuSL0DQvyVal/Us4Lyht73KX42+IPXmqUHue4JBc6leLR2Ptw51fg9TtkeYy3yHXwa2Dq0 YmferMIe1TxdxrqJyAbYu7qO4MpnqLWzuINhLOPZHRtBO7J+RHeMvAJe3MNez/oYN1i1A4PF6/7o 8CeWawbt58Rwmhp+jj79xEJzQwAwXS7Cy1UFczyhLes= ) ; Key ID = 58792`
	`clinicaltrials.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAbb8cjQ3lzWe+dtSDHW8IBHTdyt4KBQQhKmpK7VmNL4K9HXPmCoQQfsJSixsJ06tLpj9j8Mb LZK7daM5e+t9T/oUiUgxdaVxdNsTwRNkzOe4pz2HrYvW8tJ7SDYjEL3B/MKZgs+JlPjmf+TxqJYG hacZMqMTjfHF4s4GTzxTZaQIWGtK1+UcsCO5Q0rGR4kEexQOtHiPpCvLrX1pp7O49Ezxdm1PBzpn +4ITKxJqJR6nf+HBYgLhesjiqDk6TSw2W7IrOsUV+jLxjdndVM6GqAc/VjwhF/pYHZy3Tof+5CEz KqdQxqCEx3Lwp0KE7rs0m93TknaS9o03Fc1tEUR+Hls= ) ; Key ID = 28818`
	DNSKEY=58792/SEP is now in the chain-of-trust
	DS=58792/SHA-256 verifies DNSKEY=58792/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`clinicaltrials.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20230930203446 20230923193446 58792 clinicaltrials.gov. ZirbBY2Yl5ea8F7/OoQBPBch+XqNxKWaRLFftyDW+RA3s9nLBSF5sxbXbUke7bf5O/riTsUnm927 s/qYukfw6tpUvB4Nuw2+5nnODEmwPWpCjLhK98zYZibyQxAHtpBBBlhczJZItCFo/sFkDURyqT4q QneNbDCNDnjt68nCmiWE0zFl6d8r9aOZmnHiYQ7o9ZRWEvLu+2IQh9XvCGcL6A3BcI2l+6CtDFr0 KpL5sO3LmA9s6GrMt2OPkBGHog4pBRtsEl4n7voI7DhsMTHjdNVdcbuTO6oxRN5IvZO//nV9a+94 Jrx/hi/dH7idMtuo4mpDlULSBCFCTis4wFgQ3Q== )`
	`clinicaltrials.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20230930203446 20230923193446 28818 clinicaltrials.gov. F3Rsr+citGQQAlNxP/2vpXmX4I5j9BfGthgapEsqiJsaYwjkHwCK1wu2kUDzxghECJdQRRtCI2ii SwcAC6MuxGCRUsOQBsIgqdDDstFCOkSoC641AWC6Q7OjvomAgdSLtLG4ghrdRzFK+lvfozAZ/1Hv 3FynKIq1zHFTCHyZU/BqUmlRW7Q2llCsOG0MwyxnxL49o1HOfPVHQSshS3f7QwUu6ObNLcebGR22 xeZf1BkM3uMkheGghSZYzllgOTvG/9Ot+5du4uaZRQqcQuROWCgMggkVAz9Td9+B3rXKLK+U67SK Hjst03TPOhptTgKrLsG1/+aG2YtdPdJfh9y2zQ== )`
	RRSIG=58792 and DNSKEY=58792/SEP verifies the DNSKEY RRset
	RRSIG=28818 and DNSKEY=28818 verifies the DNSKEY RRset
	DNSKEY=28818 is now in the chain-of-trust
	Query to gslb01.nlm.nih.gov for clinicaltrials.gov/A
	Received 369 bytes from 130.14.252.50
	;; Response received from 130.14.252.50 (369 octets) ;; HEADER SECTION ;; id = 38736 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; clinicaltrials.gov. IN A ;; ANSWER SECTION (2 records) clinicaltrials.gov. 300 IN A 34.107.134.59 clinicaltrials.gov. 300 IN RRSIG ( A 8 2 300 20230929043424 20230922033424 28818 clinicaltrials.gov. VUHvNqpcBOvkKNSXGC3T/iZwgn511ihmoJclKicSWvWU1RuiyP1KdhbLr5GnqVfSZApeJUBW2Hw0 vXkxPE3y0qqtY6XTUY/z5q+zxPgpZCwnvMtaUSEHmY3RVcwRf1UnTisoeHznRTOatqCYJNlHaDIf yY60PSB16phPTtC1oeTxwAFzkF+EePdpupcJXeE1YfspULBM6i5SV4UgYc+tKRAwbFYBlgZ9vS2k xX96cHUbrWyaJJPMCaPRwxsrOj++CA/jzmzaGvUHRZhQP/xaAELFXr4jTwnK9AFpbOlQPuCIAFbo vDTEX40h3XknKEGe/pOYp1tPLbSK/1AaqmEQTw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	gslb01.nlm.nih.gov is authoritative for clinicaltrials.gov
	Found RRSIG signed by clinicaltrials.gov zone
	Query to gslb03.nlm.nih.gov for clinicaltrials.gov/SOA
	Received 788 bytes from 130.14.252.53
	;; Response received from 130.14.252.53 (788 octets) ;; HEADER SECTION ;; id = 11347 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; clinicaltrials.gov. IN SOA ;; ANSWER SECTION (2 records) clinicaltrials.gov. 60 IN SOA ( gslb01.nlm.nih.gov. nlmdnshostmaster.mail.nih.gov. 2023071901 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) clinicaltrials.gov. 60 IN RRSIG ( SOA 8 2 60 20230930092040 20230923082040 28818 clinicaltrials.gov. rk97Te3+rB/wRV9ISO1xKmo0dY0JWzrNx2moS9WoWWh7I7ms70GWqb7lkQv+1IBqsc6R1t1QBIEy KCnYrbAVfRz5E791ft4SE1ys1jK84PYfx3pmmaZVyQISzXWk/Oe4MiRkd7dhkhe34uXmsG5kHBoe aPJz5CXF2QM8R0jgGyjpUrZhp0uVMxlNAuMBYPJaseS9pn1b1xc1B8lz3oEeYAbGM63G+s1yRQWv AuqvJhXMMk1RJZP3jM89AdSU8kRAXSbSfWyNbOzSPMBQVwBWnZTZ2gfU3cAiA/IaBojtG73HbuYH M0/CjHtcchWEf/FfG4zvsNWqGB0FXVFFvxKxZA== ) ;; AUTHORITY SECTION (4 records) clinicaltrials.gov. 3600 IN NS gslb03.nlm.nih.gov. clinicaltrials.gov. 3600 IN NS gslb01.nlm.nih.gov. clinicaltrials.gov. 3600 IN NS gslb02.nlm.nih.gov. clinicaltrials.gov. 3600 IN RRSIG ( NS 8 2 3600 20230930032142 20230923022142 28818 clinicaltrials.gov. g51EvKOvTDHxs0l59YhfvF62kZ/HIKsaqEb/HTt/DKc7rO08/nEvna4aRRN8Cn0qNAEccPXu6bx/ EoaEhaatvdBwdgDrz2wfZrsekYc2TsYz02/wnQRJC73n2rCsjiwCEQSzYlpMqW1biqt4ZxIJDqeb 4USW50j0qzcDk+wWw4Dw5KhpZv/24BOh3ClBPtMQhqfJ5iEutCVxPWhFBWLn91bmlSXtgwwNrREx elJidaCYzdmKHwu/sihX6cyrtF/XMqZD783WzguedrSigwLsRTYn0nJK7h81uxlkzWbUMRZ8wWu7 fblv89k//jvSy8hS1YdfloxPYyEZaKBqZQpoQA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to gslb02.nlm.nih.gov for clinicaltrials.gov/SOA
	Received 788 bytes from 165.112.6.3
	;; Response received from 165.112.6.3 (788 octets) ;; HEADER SECTION ;; id = 48215 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; clinicaltrials.gov. IN SOA ;; ANSWER SECTION (2 records) clinicaltrials.gov. 60 IN SOA ( gslb01.nlm.nih.gov. nlmdnshostmaster.mail.nih.gov. 2023071901 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) clinicaltrials.gov. 60 IN RRSIG ( SOA 8 2 60 20230929222748 20230922212748 28818 clinicaltrials.gov. tZEd23Zc4Eh7pAZ0lOPhaFU0gkTg7E7fOqk/LPWT9EFU6AEuMoC+lDwZ25g3h9tOGbuC3NbHDYor P9A4R3vG7lkcLIR5LDl8MRRTWJjDsfq2q7MMVB9lvOXcPR+LC9yDP6NgO3CxXXKp0n0MVcAPnFtx LCEVvyHYZODyWT7nCcmfMd1oQej+iuu/W8BS2EhN8qjgGDurp7hjFJkjjuYWxYXD2+D5C1ZBSNag +W8Y6pFcgWK79Nl7s8Mr8x0iPs38nZTrnTRrzqP1EUOrSzkMFYgsrhzFlK5VKHp56YDbDOYhbJYk wPG26Tb7khZb4khDf0pwud8nOejJZ98r3dDE2g== ) ;; AUTHORITY SECTION (4 records) clinicaltrials.gov. 3600 IN NS gslb02.nlm.nih.gov. clinicaltrials.gov. 3600 IN NS gslb03.nlm.nih.gov. clinicaltrials.gov. 3600 IN NS gslb01.nlm.nih.gov. clinicaltrials.gov. 3600 IN RRSIG ( NS 8 2 3600 20230929044116 20230922034116 28818 clinicaltrials.gov. X8pe5wTtEWhqE7C31r5Alq4fa/IqLLOq1xHEhAhp4W/DY2OdzotxSElQLFsmSz/rTePQ65jTDSLT iIEjKj0GwsGcjOziuqgdsn9TBqEWJNO1UW4Pdmx+JeSoUNDiGjeyC4zKTUBz/eq2DdAstiDda6EP pY1SXP2wc2vIWxMJn8cO6pC5L5Oqa2moSJQoLPOafH/avr/tV7i1gUN3LLAkabERPSEMXSOjkaCz 4wICkeCUZmQyBk60DsotErqX9Tr5j0UFYCz4hzq6kIm+310qcNn+DmjfS9wqHFNvFrxbFkXTCnrZ 6ypcEqJPXg9C/o1yK8sHOxBCqnl54OX+ykSzHg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to gslb01.nlm.nih.gov for clinicaltrials.gov/A
	Received 369 bytes from 130.14.252.50
	;; Response received from 130.14.252.50 (369 octets) ;; HEADER SECTION ;; id = 3811 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; clinicaltrials.gov. IN A ;; ANSWER SECTION (2 records) clinicaltrials.gov. 300 IN A 34.107.134.59 clinicaltrials.gov. 300 IN RRSIG ( A 8 2 300 20230929043421 20230922033421 28818 clinicaltrials.gov. h8d3fil/jsHbUrYWdgLAvMmRbV5oZ7VbBODQF5Hg/bLhioGss0cO8YaQdyD588W4v3lxsNLhX5Ck n0EluU4ZB3cNuHr+yJj+zSID5KmHA/YFKjhvriGsqrMGm8EEpFePCteQmCjN+KwUYHQIezkmSAwF eQ/GYvrWYQGG2tXe27TmQspLAgQREmn7+y66IRuAO6BH6dfy8ePRIw/ymbyaix+8At6LH2lD5ZEs AulX/7214Gv2bWZsAE208qUYnaiKxcYMWMsxwMWb5F+f0n5OPhLktJlmSyzqoDIoOAAIgKr7qUIx yKMJysuGeiMO4xd992sYlsoT2gj2pQYxl6KOnw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	clinicaltrials.gov A RR has value 34.107.134.59
	Found 1 RRSIGs over A RRset
	`clinicaltrials.gov. 300 IN RRSIG ( A 8 2 300 20230929043421 20230922033421 28818 clinicaltrials.gov. h8d3fil/jsHbUrYWdgLAvMmRbV5oZ7VbBODQF5Hg/bLhioGss0cO8YaQdyD588W4v3lxsNLhX5Ck n0EluU4ZB3cNuHr+yJj+zSID5KmHA/YFKjhvriGsqrMGm8EEpFePCteQmCjN+KwUYHQIezkmSAwF eQ/GYvrWYQGG2tXe27TmQspLAgQREmn7+y66IRuAO6BH6dfy8ePRIw/ymbyaix+8At6LH2lD5ZEs AulX/7214Gv2bWZsAE208qUYnaiKxcYMWMsxwMWb5F+f0n5OPhLktJlmSyzqoDIoOAAIgKr7qUIx yKMJysuGeiMO4xd992sYlsoT2gj2pQYxl6KOnw== )`
	RRSIG=28818 and DNSKEY=28818 verifies the A RRset

clinicaltrials.gov

	Query to gslb03.nlm.nih.gov for clinicaltrials.gov/A
	Timeout querying gslb03.nlm.nih.gov/130.14.252.53 for clinicaltrials.gov/A
	All Queries to gslb03.nlm.nih.gov for clinicaltrials.gov/A timed out or failed
	Query to gslb02.nlm.nih.gov for clinicaltrials.gov/A
	Received 369 bytes from 165.112.6.3
	;; Response received from 165.112.6.3 (369 octets) ;; HEADER SECTION ;; id = 26110 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; clinicaltrials.gov. IN A ;; ANSWER SECTION (2 records) clinicaltrials.gov. 300 IN A 34.107.134.59 clinicaltrials.gov. 300 IN RRSIG ( A 8 2 300 20230929043426 20230922033426 28818 clinicaltrials.gov. ShNuGWlmstcggn+Fseq2ttaZatRc/7Hz3TIZhI3ADjU/dP3IF9upOV6sLKzBZB8qfb6dYjkhC9/m XYr3ojRjFNQTIWDo0TVI3A+Mrx05Z2D7Z//iYdPqKVpiqiyH3gq968UjMilJDr42DB9muARtKGqP pOd7hRp7Cb9vyXMCcEG+/HTWU+NQtl+rewybnHEDZbUs3mNhautfKPVr/vPNozLRzsyVn2XYSiFD wZpPwsBuyqtnuf0DDkGC/cI5jvOgfiyNbIy6KsMqClDyT6VIjBPHS6dXxcTYZXWpbQ73fOdBKM4/ kko89QdTX0fNvrNp0O673Jma0UcejVGb8P1+oQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	gslb02.nlm.nih.gov is authoritative for clinicaltrials.gov
	Found RRSIG signed by clinicaltrials.gov zone
	Query to gslb02.nlm.nih.gov for clinicaltrials.gov/A
	Received 369 bytes from 165.112.6.3
	;; Response received from 165.112.6.3 (369 octets) ;; HEADER SECTION ;; id = 47407 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; clinicaltrials.gov. IN A ;; ANSWER SECTION (2 records) clinicaltrials.gov. 300 IN A 34.107.134.59 clinicaltrials.gov. 300 IN RRSIG ( A 8 2 300 20230929043426 20230922033426 28818 clinicaltrials.gov. ShNuGWlmstcggn+Fseq2ttaZatRc/7Hz3TIZhI3ADjU/dP3IF9upOV6sLKzBZB8qfb6dYjkhC9/m XYr3ojRjFNQTIWDo0TVI3A+Mrx05Z2D7Z//iYdPqKVpiqiyH3gq968UjMilJDr42DB9muARtKGqP pOd7hRp7Cb9vyXMCcEG+/HTWU+NQtl+rewybnHEDZbUs3mNhautfKPVr/vPNozLRzsyVn2XYSiFD wZpPwsBuyqtnuf0DDkGC/cI5jvOgfiyNbIy6KsMqClDyT6VIjBPHS6dXxcTYZXWpbQ73fOdBKM4/ kko89QdTX0fNvrNp0O673Jma0UcejVGb8P1+oQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	clinicaltrials.gov A RR has value 34.107.134.59
	Found 1 RRSIGs over A RRset
	`clinicaltrials.gov. 300 IN RRSIG ( A 8 2 300 20230929043426 20230922033426 28818 clinicaltrials.gov. ShNuGWlmstcggn+Fseq2ttaZatRc/7Hz3TIZhI3ADjU/dP3IF9upOV6sLKzBZB8qfb6dYjkhC9/m XYr3ojRjFNQTIWDo0TVI3A+Mrx05Z2D7Z//iYdPqKVpiqiyH3gq968UjMilJDr42DB9muARtKGqP pOd7hRp7Cb9vyXMCcEG+/HTWU+NQtl+rewybnHEDZbUs3mNhautfKPVr/vPNozLRzsyVn2XYSiFD wZpPwsBuyqtnuf0DDkGC/cI5jvOgfiyNbIy6KsMqClDyT6VIjBPHS6dXxcTYZXWpbQ73fOdBKM4/ kko89QdTX0fNvrNp0O673Jma0UcejVGb8P1+oQ== )`
	RRSIG=28818 and DNSKEY=28818 verifies the A RRset

clinicaltrials.gov

No response from clinicaltrials.gov nameservers

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test clinicaltrials.gov at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: