DNSSEC Debugger - evaluation.gov

Domain Name:

Time: 2024-12-08 17:31:09 UTC

Analyzing DNSSEC problems for evaluation.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to h.root-servers.net for ./DNSKEY
	Received 864 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 864 octets ;; HEADER SECTION ;; id = 45464 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAc0SunbHdS0KFEyZbYII/+tzsrNzIwurKxmJA+0fhAYlTPA/5LrMGkGEqvvufzM0w/CaVtdm 5eWkZYQcsoSKT5bycx0C4jxnLEb3ZiZUQSqu1rWcKGF1fj/GyDWLkOu7a5h3el+gPmglj/4l4V31 ugNYfqYq84vCB+3D6Sodrd+85KyonnzWJ8cS7aZ57x0d0sGqsAKA+6tRnIXjVNVe7Ro5xJuz8IR7 rOxdzfuRLriN+Z00EL3U5E7s9SISU/hDh7Q7N70W1mLMc1o2+tCRGjEWrw4wmCWMzc1kegbLES/d UOWFvPjJz0+AEeWDhd2GqtXk02BzAhdfeIAEIv68FTs= ) ; keytag 61050 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20241221000000 20241130000000 20326 . Afur/CKj8hp6NpFXod3vI0DPq0Mfb6dXrdNvnqjVxElNIogO2Tnj660bCYKD/39HjMAGn1JhfXN1 8A1bSvEJO/qkfErGf0VtlhgsdjPpzlOufhu/hIkA1TTanRzQNa9rYvPcwdwHgVTA3C4t13wiRMwR spG1W22Mcw9+hnkH/MAcXcbD2hxepUTxxjM7JvoZPl6om973u1rvVnk1RIEUe6wR51OhYNoLe/mj sy5BjM/uDXnHYTYLdau9gYElsvHV9Dogs0Alvgf6kK+z21LeOjjOdziP6xgF0vbNPVR8ovJbvw14 NEwAY4LOaa2XXocwqOjr8URoMrNa/zKP66Othw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAc0SunbHdS0KFEyZbYII/+tzsrNzIwurKxmJA+0fhAYlTPA/5LrMGkGEqvvufzM0w/CaVtdm 5eWkZYQcsoSKT5bycx0C4jxnLEb3ZiZUQSqu1rWcKGF1fj/GyDWLkOu7a5h3el+gPmglj/4l4V31 ugNYfqYq84vCB+3D6Sodrd+85KyonnzWJ8cS7aZ57x0d0sGqsAKA+6tRnIXjVNVe7Ro5xJuz8IR7 rOxdzfuRLriN+Z00EL3U5E7s9SISU/hDh7Q7N70W1mLMc1o2+tCRGjEWrw4wmCWMzc1kegbLES/d UOWFvPjJz0+AEeWDhd2GqtXk02BzAhdfeIAEIv68FTs= ) ; keytag 61050`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20241221000000 20241130000000 20326 . Afur/CKj8hp6NpFXod3vI0DPq0Mfb6dXrdNvnqjVxElNIogO2Tnj660bCYKD/39HjMAGn1JhfXN1 8A1bSvEJO/qkfErGf0VtlhgsdjPpzlOufhu/hIkA1TTanRzQNa9rYvPcwdwHgVTA3C4t13wiRMwR spG1W22Mcw9+hnkH/MAcXcbD2hxepUTxxjM7JvoZPl6om973u1rvVnk1RIEUe6wR51OhYNoLe/mj sy5BjM/uDXnHYTYLdau9gYElsvHV9Dogs0Alvgf6kK+z21LeOjjOdziP6xgF0vbNPVR8ovJbvw14 NEwAY4LOaa2XXocwqOjr8URoMrNa/zKP66Othw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=61050 is now in the chain-of-trust
	Query to l.root-servers.net for evaluation.gov/A
	Received 621 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 621 octets ;; HEADER SECTION ;; id = 49828 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; evaluation.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20241221050000 20241208040000 61050 . BxOpXgycmDAibw+2f0B1EINdBeYaLuqMlwbt1JFYChpKqxBdsez7mGwI4N9TVTBt0l0f8rUzAIuH WLVoEPbYQeV6H6xVC3Q/fXr0cNVOZCxPfp71ewni8hvMazN+AVoCtaPDvPd9D5E1VEoX6Wv5Xlbe Wxt0B30xX39ySJvvHAjsddex1CmMg0B+MubOLfRNF5w8CxZLshms25+Z9C7EOPmk99aD+L3qJY7J wGOruo7qQhsktyD9bfxdp4lggouT1xJDXv5g2EYj/5Ec4ivth3vLpqrt1bp2U9C1/QniPNvDmQy1 QqTPkIvgl8fdZ1EH4phpvJ4tSdtP+0AjTOm5Hg== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to i.root-servers.net for gov/DNSKEY
	Received 613 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 613 octets ;; HEADER SECTION ;; id = 37331 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20241221050000 20241208040000 61050 . BxOpXgycmDAibw+2f0B1EINdBeYaLuqMlwbt1JFYChpKqxBdsez7mGwI4N9TVTBt0l0f8rUzAIuH WLVoEPbYQeV6H6xVC3Q/fXr0cNVOZCxPfp71ewni8hvMazN+AVoCtaPDvPd9D5E1VEoX6Wv5Xlbe Wxt0B30xX39ySJvvHAjsddex1CmMg0B+MubOLfRNF5w8CxZLshms25+Z9C7EOPmk99aD+L3qJY7J wGOruo7qQhsktyD9bfxdp4lggouT1xJDXv5g2EYj/5Ec4ivth3vLpqrt1bp2U9C1/QniPNvDmQy1 QqTPkIvgl8fdZ1EH4phpvJ4tSdtP+0AjTOm5Hg== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to f.root-servers.net for gov/DS
	Received 367 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 367 octets ;; HEADER SECTION ;; id = 54187 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20241221050000 20241208040000 61050 . BxOpXgycmDAibw+2f0B1EINdBeYaLuqMlwbt1JFYChpKqxBdsez7mGwI4N9TVTBt0l0f8rUzAIuH WLVoEPbYQeV6H6xVC3Q/fXr0cNVOZCxPfp71ewni8hvMazN+AVoCtaPDvPd9D5E1VEoX6Wv5Xlbe Wxt0B30xX39ySJvvHAjsddex1CmMg0B+MubOLfRNF5w8CxZLshms25+Z9C7EOPmk99aD+L3qJY7J wGOruo7qQhsktyD9bfxdp4lggouT1xJDXv5g2EYj/5Ec4ivth3vLpqrt1bp2U9C1/QniPNvDmQy1 QqTPkIvgl8fdZ1EH4phpvJ4tSdtP+0AjTOm5Hg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20241221050000 20241208040000 61050 . BxOpXgycmDAibw+2f0B1EINdBeYaLuqMlwbt1JFYChpKqxBdsez7mGwI4N9TVTBt0l0f8rUzAIuH WLVoEPbYQeV6H6xVC3Q/fXr0cNVOZCxPfp71ewni8hvMazN+AVoCtaPDvPd9D5E1VEoX6Wv5Xlbe Wxt0B30xX39ySJvvHAjsddex1CmMg0B+MubOLfRNF5w8CxZLshms25+Z9C7EOPmk99aD+L3qJY7J wGOruo7qQhsktyD9bfxdp4lggouT1xJDXv5g2EYj/5Ec4ivth3vLpqrt1bp2U9C1/QniPNvDmQy1 QqTPkIvgl8fdZ1EH4phpvJ4tSdtP+0AjTOm5Hg== )`
	RRSIG=61050 and DNSKEY=61050 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to a.ns.gov for gov/DNSKEY
	Received 291 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 291 octets ;; HEADER SECTION ;; id = 5720 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20250117110541 20241117110541 2536 gov. MInVr90HZ2BfgHpBap4wOVV/pv9rvEdbJmpCxp8tyxgY7hBmR0Lxwc44hD8EWViyTG8QMlHhQtUY t1QdHShDCQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20250117110541 20241117110541 2536 gov. MInVr90HZ2BfgHpBap4wOVV/pv9rvEdbJmpCxp8tyxgY7hBmR0Lxwc44hD8EWViyTG8QMlHhQtUY t1QdHShDCQ== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to a.ns.gov for evaluation.gov/A
	Received 1106 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 1106 octets ;; HEADER SECTION ;; id = 34318 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 15 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; evaluation.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) evaluation.gov. 10800 IN NS dns.gsa.gov. evaluation.gov. 10800 IN NS dns2.gsa.gov. evaluation.gov. 10800 IN NS dns3.gsa.gov. evaluation.gov. 10800 IN NS dns4.gsa.gov. evaluation.gov. 10800 IN NS dns5.gsa.gov. evaluation.gov. 1800 IN NSEC evaluation\000.gov. NS RRSIG NSEC evaluation.gov. 1800 IN RRSIG ( NSEC 13 2 1800 20241209183109 20241207163109 35496 gov. Igof53nAPBW/LMzYHYElFwh+jaIKDVeDSC3w9k58tBXqLTjPUejY8IMPX5XGa4Tegwj9bFKm8NZX 0o9HEvwAFA== ) ;; ADDITIONAL SECTION (15 records) dns.gsa.gov. 3600 IN A 13.248.142.184 dns.gsa.gov. 3600 IN AAAA 2600:1f16:8f2:d500::4 dns2.gsa.gov. 3600 IN A 76.223.24.135 dns3.gsa.gov. 3600 IN A 13.248.144.182 dns4.gsa.gov. 3600 IN A 13.248.149.147 dns4.gsa.gov. 3600 IN AAAA 2600:1f14:653:bb00:b24e:739c:b87d:8fee dns5.gsa.gov. 3600 IN A 76.223.9.162 dns3.gsa.gov. 3600 IN RRSIG ( A 13 3 3600 20241209183109 20241207163109 35496 gov. Gl1kMl4aqFicE2b4srBll00zBLDE3WMAlFZUOhhCSY7a5rfNEANICNlTohdfCKveqeKiwUtxCm0P xsKnv0iskA== ) dns4.gsa.gov. 3600 IN RRSIG ( A 13 3 3600 20241209183109 20241207163109 35496 gov. ybF0j+IpPXvFk5idQQOo1opfKDTAGfx6SSyY3zd5rglE9tihmly69OZhZW/2GPLXZuQn9NrW1BR0 tjWqDjUVSA== ) dns4.gsa.gov. 3600 IN RRSIG ( AAAA 13 3 3600 20241209183109 20241207163109 35496 gov. hVpFXZ9useAWX6fQugRyqHEp6LOUKyQ7dnu3NEy2eA8T/yh/Q0Dv/CCUh92K03J99b5uR4Jn6Sdm /WVrlJNbAA== ) dns5.gsa.gov. 3600 IN RRSIG ( A 13 3 3600 20241209183109 20241207163109 35496 gov. ST/W4ii0nvl+vg/yHj7/OyTIBLGRzlnoeTmR6ZkKQROyYJ/MEip8C26RtY3/DKeCRcZFS9fr+Lsp NxxP+4Y8TQ== ) dns.gsa.gov. 3600 IN RRSIG ( A 13 3 3600 20241209183109 20241207163109 35496 gov. +0+4dA/hMELnOvdEvbo6+Pn615SdOs4Ud0k2GbYhXHCqpzoP9eHIo0xj9wTLTGb3opu3rduK5Ee3 ePKIIZkHVg== ) dns.gsa.gov. 3600 IN RRSIG ( AAAA 13 3 3600 20241209183109 20241207163109 35496 gov. 2mZPqTeLrvOwxljAX9LouVVB9lWmw0hjXSC4sGnfVoREiiLsHoyoKheG400NuFCodYh9vYZpOkWL UDqsRGDHmQ== ) dns2.gsa.gov. 3600 IN RRSIG ( A 13 3 3600 20241209183109 20241207163109 35496 gov. k6z4oDS0V72qo7WjSfrGQzYnT/U/uAQ7QcYVnoCIptJ7H5Gf3ajHQS5Cr5K8OhBOtWIXjk4/sCEx 4wYtzDwzjg== ) ;; { "EDNS-VERSION": 0 }
	Query to a.ns.gov for evaluation.gov/DNSKEY
	Received 1106 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 1106 octets ;; HEADER SECTION ;; id = 2631 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 15 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; evaluation.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) evaluation.gov. 10800 IN NS dns.gsa.gov. evaluation.gov. 10800 IN NS dns2.gsa.gov. evaluation.gov. 10800 IN NS dns3.gsa.gov. evaluation.gov. 10800 IN NS dns4.gsa.gov. evaluation.gov. 10800 IN NS dns5.gsa.gov. evaluation.gov. 1800 IN NSEC evaluation\000.gov. NS RRSIG NSEC evaluation.gov. 1800 IN RRSIG ( NSEC 13 2 1800 20241209183109 20241207163109 35496 gov. HGUosW47KiDu/ivsVq2sAu6gxO0NRgTIDKIVz1HlCrxIoX2u8nYqkPHEfHvIVtlhf4HKziNUSyJE Xqgq248g2g== ) ;; ADDITIONAL SECTION (15 records) dns.gsa.gov. 3600 IN A 13.248.142.184 dns.gsa.gov. 3600 IN AAAA 2600:1f16:8f2:d500::4 dns2.gsa.gov. 3600 IN A 76.223.24.135 dns3.gsa.gov. 3600 IN A 13.248.144.182 dns4.gsa.gov. 3600 IN A 13.248.149.147 dns4.gsa.gov. 3600 IN AAAA 2600:1f14:653:bb00:b24e:739c:b87d:8fee dns5.gsa.gov. 3600 IN A 76.223.9.162 dns5.gsa.gov. 3600 IN RRSIG ( A 13 3 3600 20241209183109 20241207163109 35496 gov. Rkg8wkWMyWz1Y8KToOuiDgwspq9yu5dA66RJP/XbVcTc/x21/5ME+yxSAFsK1J8zdKMsHdcXbqB/ KZ6sQ1YTig== ) dns.gsa.gov. 3600 IN RRSIG ( A 13 3 3600 20241209183109 20241207163109 35496 gov. 0ZUekY35VTNc/iYpBnX7CxNrP+Qg4Mby03eWOv9qcgsQBUge0tJ7sxzleOwxtPv+VLW81JYhVdOW pwfWn9uRDA== ) dns.gsa.gov. 3600 IN RRSIG ( AAAA 13 3 3600 20241209183109 20241207163109 35496 gov. CLD7MSPyFqBRH1+V/x4DJ40lxgqnSEDsNB5BeR4ln7UrmtIbzGRzzJYAqgwD+lZDqc+ucSKFtWSo YQ1F3t3u3Q== ) dns2.gsa.gov. 3600 IN RRSIG ( A 13 3 3600 20241209183109 20241207163109 35496 gov. lmWVCdw3504H70wfdzb/MZR5k/T9NqplbQtPDuoV1U4R2SG5xSlr3RKCJsm3/YO9AJ18tl4sAv5F NJ26ItA6Fw== ) dns3.gsa.gov. 3600 IN RRSIG ( A 13 3 3600 20241209183109 20241207163109 35496 gov. mzYbRuO7OUTomV5edUgiwPqlM/I1uP9AdiSAbwsgA2vdaxkvtq1Akr+GjNCmVFULKvIgjdeFa1j0 uOpKgvtOtA== ) dns4.gsa.gov. 3600 IN RRSIG ( A 13 3 3600 20241209183109 20241207163109 35496 gov. MtI76owp+6pkD0GFl/NgnBBRNVK0SQBWMsI2s5Y4/i7i+Zhkv2368rIixj5DsgzMJXhOt0jwnF4i r2clnZ+HAw== ) dns4.gsa.gov. 3600 IN RRSIG ( AAAA 13 3 3600 20241209183109 20241207163109 35496 gov. DTFz+V5BJkwP816hW1QhImCaOSei5L9IO2A2qBYFKrfKQPFpoL2KPNPCR6d/RlhdC7h3jugGeGLt 5m9r00twQw== ) ;; { "EDNS-VERSION": 0 }
	Found child zone evaluation.gov

evaluation.gov

	Checking DS between gov and evaluation.gov
	Query to a.ns.gov for evaluation.gov/DS
	Received 337 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 337 octets ;; HEADER SECTION ;; id = 27053 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; evaluation.gov. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gov. 300 IN SOA ( a.ns.gov. dns.cloudflare.com. 1733678701 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 300 ;minimum ) evaluation.gov. 300 IN NSEC evaluation\000.gov. NS RRSIG NSEC gov. 300 IN RRSIG ( SOA 13 1 300 20241209183109 20241207163109 35496 gov. eCsMSooHf6DPkBjET6tIUZIkszSY57FBvXP/zlBgzlnAiGOJ9t6aJLRg23uQbESFIVUZVKp1NtPt e6yqcpRXmg== ) evaluation.gov. 300 IN RRSIG ( NSEC 13 2 300 20241209183109 20241207163109 35496 gov. eFgXsLgholOtAEO4HOLnMsRMcnNV0w7kUoOrwzCLjhvkD0kKXhUSFpoDR4CDzaMC52ycSDox5WD1 8HlumycgZg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for evaluation.gov in the gov zone
	Query to dns5.gsa.gov for evaluation.gov/DNSKEY
	Received 687 bytes from 76.223.9.162
	;; Response received from [76.223.9.162] 687 octets ;; HEADER SECTION ;; id = 3592 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; evaluation.gov. IN DNSKEY ;; ANSWER SECTION (4 records) evaluation.gov. 10800 IN DNSKEY ( 256 3 8 AwEAAclsLLqP53ojSn+tb1wQpsAs8D7H3+G9VNAvK1ZACQbOhMc6H1KatxHEtG8xV52Gfjhy3thy r4Y9+1cPCl8Al/XfEPDSvOv4zxdV2pMicRLfjqVBCGE7ql9YgXYT4Xy2Kzx2OS0rFbji3q2VwQ3R C/+0dn5fEsPFtryG63YT248F ) ; keytag 26068 evaluation.gov. 10800 IN DNSKEY ( 257 3 8 AwEAAct6GlZd8S9p9mmS1inES8LK+xQtnqkKHAIgj+fvYHNGSlFmmCGW9bM4I41OhE8D/KNqj00d prlqIKfVXFyGFpyN4P8cBHCFPvwGFonnO7p/w8HZOBU6DQ43zjAdtpKhnZ4KbXcU/nv6R8G8EaC8 NhODawmTj7EeXYr4zaXusWnZ ) ; keytag 11302 evaluation.gov. 10800 IN RRSIG ( DNSKEY 8 2 10800 20241222140025 20241122135525 11302 evaluation.gov. fSEOMCsWkHZYglOjGxT/ABoZsC4UBQXMRI3cqF+25pWXPK52pZSMBE8/7a/+y2G3Hq2W6I8OhsAb 7z3sKnn7UNCnt2eYMz9XvSAzsL9n7Q2I1al6YXnDsSi+WzEnbGMzJspoKCDY1bq6nziVFBry6TUn pW5Y3hLYkPQD1eXZBok= ) evaluation.gov. 10800 IN RRSIG ( DNSKEY 8 2 10800 20241222140025 20241122135525 26068 evaluation.gov. rzwK36B2UPKMU/2GPwipTiBVX9jc1OWWCm/NJChzr+1TO3eoVs2J5HTLwboDR1YX42biu65Q6wIW L2rZsieewcvBAhxJrJHdLwHlNNgwfFE4M6VUKeqavZqhZf4FjJNKUINsPILkmhwL0ST4DKi2R8k0 vlOlrvpUWzxELluJoJE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for evaluation.gov
	`evaluation.gov. 10800 IN DNSKEY ( 256 3 8 AwEAAclsLLqP53ojSn+tb1wQpsAs8D7H3+G9VNAvK1ZACQbOhMc6H1KatxHEtG8xV52Gfjhy3thy r4Y9+1cPCl8Al/XfEPDSvOv4zxdV2pMicRLfjqVBCGE7ql9YgXYT4Xy2Kzx2OS0rFbji3q2VwQ3R C/+0dn5fEsPFtryG63YT248F ) ; keytag 26068`
	`evaluation.gov. 10800 IN DNSKEY ( 257 3 8 AwEAAct6GlZd8S9p9mmS1inES8LK+xQtnqkKHAIgj+fvYHNGSlFmmCGW9bM4I41OhE8D/KNqj00d prlqIKfVXFyGFpyN4P8cBHCFPvwGFonnO7p/w8HZOBU6DQ43zjAdtpKhnZ4KbXcU/nv6R8G8EaC8 NhODawmTj7EeXYr4zaXusWnZ ) ; keytag 11302`
	Found 2 RRSIGs over DNSKEY RRset
	`evaluation.gov. 10800 IN RRSIG ( DNSKEY 8 2 10800 20241222140025 20241122135525 11302 evaluation.gov. fSEOMCsWkHZYglOjGxT/ABoZsC4UBQXMRI3cqF+25pWXPK52pZSMBE8/7a/+y2G3Hq2W6I8OhsAb 7z3sKnn7UNCnt2eYMz9XvSAzsL9n7Q2I1al6YXnDsSi+WzEnbGMzJspoKCDY1bq6nziVFBry6TUn pW5Y3hLYkPQD1eXZBok= )`
	`evaluation.gov. 10800 IN RRSIG ( DNSKEY 8 2 10800 20241222140025 20241122135525 26068 evaluation.gov. rzwK36B2UPKMU/2GPwipTiBVX9jc1OWWCm/NJChzr+1TO3eoVs2J5HTLwboDR1YX42biu65Q6wIW L2rZsieewcvBAhxJrJHdLwHlNNgwfFE4M6VUKeqavZqhZf4FjJNKUINsPILkmhwL0ST4DKi2R8k0 vlOlrvpUWzxELluJoJE= )`
	RRSIG=11302 and DNSKEY=11302/SEP verifies the DNSKEY RRset
	RRSIG=26068 and DNSKEY=26068 verifies the DNSKEY RRset
	Query to dns5.gsa.gov for evaluation.gov/A
	Received 233 bytes from 76.223.9.162
	;; Response received from [76.223.9.162] 233 octets ;; HEADER SECTION ;; id = 58663 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; evaluation.gov. IN A ;; ANSWER SECTION (2 records) evaluation.gov. 10800 IN A 159.142.191.107 evaluation.gov. 10800 IN RRSIG ( A 8 2 10800 20241222140025 20241122135525 26068 evaluation.gov. vM6sYQtkPBBQXqEk568IiV9E4RDFVPvWw7HEgY2rhxJkFmfYI6TcPZ1DofWKaSnRAyWCUCpHv7c3 Zi2DGf0CLu/GimuyryyqZj20ocNmvG4Kz5wj3K1QO8KfLsHavyjbWAVTveCGTTNZ9+nLZLhECN1r J35nz6WuPpEr0kkv+nI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns5.gsa.gov is authoritative for evaluation.gov
	Found RRSIG signed by evaluation.gov zone
	Query to dns4.gsa.gov for evaluation.gov/SOA
	Received 275 bytes from 13.248.149.147
	;; Response received from [13.248.149.147] 275 octets ;; HEADER SECTION ;; id = 61395 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; evaluation.gov. IN SOA ;; ANSWER SECTION (2 records) evaluation.gov. 10800 IN SOA ( dns.gsa.gov. hostmaster.gsa.gov. 751298426 ;serial 3600 ;refresh 180 ;retry 1209600 ;expire 3600 ;minimum ) evaluation.gov. 10800 IN RRSIG ( SOA 8 2 10800 20241222140025 20241122135525 26068 evaluation.gov. MgSVC7BCFdpubhkydNh9kcIC/SK+1VZ6NhpuEdJb+K9pDfX+iOGxa9kMtIkV3uSyFsacUb4pbgU7 a+IfLGCaSabLaUtHrdxL5Ntw65qYQSBGwG6KVX/uq7C4yxRaHcKscLvchhOwSq1zLlLIsDhI0L4Y BaP94o6JwA8VROM9DLQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns2.gsa.gov for evaluation.gov/SOA
	Received 275 bytes from 76.223.24.135
	;; Response received from [76.223.24.135] 275 octets ;; HEADER SECTION ;; id = 13406 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; evaluation.gov. IN SOA ;; ANSWER SECTION (2 records) evaluation.gov. 10800 IN SOA ( dns.gsa.gov. hostmaster.gsa.gov. 751298426 ;serial 3600 ;refresh 180 ;retry 1209600 ;expire 3600 ;minimum ) evaluation.gov. 10800 IN RRSIG ( SOA 8 2 10800 20241222140025 20241122135525 26068 evaluation.gov. MgSVC7BCFdpubhkydNh9kcIC/SK+1VZ6NhpuEdJb+K9pDfX+iOGxa9kMtIkV3uSyFsacUb4pbgU7 a+IfLGCaSabLaUtHrdxL5Ntw65qYQSBGwG6KVX/uq7C4yxRaHcKscLvchhOwSq1zLlLIsDhI0L4Y BaP94o6JwA8VROM9DLQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns.gsa.gov for evaluation.gov/SOA
	Received 275 bytes from 13.248.142.184
	;; Response received from [13.248.142.184] 275 octets ;; HEADER SECTION ;; id = 12724 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; evaluation.gov. IN SOA ;; ANSWER SECTION (2 records) evaluation.gov. 10800 IN SOA ( dns.gsa.gov. hostmaster.gsa.gov. 751298426 ;serial 3600 ;refresh 180 ;retry 1209600 ;expire 3600 ;minimum ) evaluation.gov. 10800 IN RRSIG ( SOA 8 2 10800 20241222140025 20241122135525 26068 evaluation.gov. MgSVC7BCFdpubhkydNh9kcIC/SK+1VZ6NhpuEdJb+K9pDfX+iOGxa9kMtIkV3uSyFsacUb4pbgU7 a+IfLGCaSabLaUtHrdxL5Ntw65qYQSBGwG6KVX/uq7C4yxRaHcKscLvchhOwSq1zLlLIsDhI0L4Y BaP94o6JwA8VROM9DLQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns3.gsa.gov for evaluation.gov/SOA
	Received 275 bytes from 13.248.144.182
	;; Response received from [13.248.144.182] 275 octets ;; HEADER SECTION ;; id = 25739 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; evaluation.gov. IN SOA ;; ANSWER SECTION (2 records) evaluation.gov. 10800 IN SOA ( dns.gsa.gov. hostmaster.gsa.gov. 751298426 ;serial 3600 ;refresh 180 ;retry 1209600 ;expire 3600 ;minimum ) evaluation.gov. 10800 IN RRSIG ( SOA 8 2 10800 20241222140025 20241122135525 26068 evaluation.gov. MgSVC7BCFdpubhkydNh9kcIC/SK+1VZ6NhpuEdJb+K9pDfX+iOGxa9kMtIkV3uSyFsacUb4pbgU7 a+IfLGCaSabLaUtHrdxL5Ntw65qYQSBGwG6KVX/uq7C4yxRaHcKscLvchhOwSq1zLlLIsDhI0L4Y BaP94o6JwA8VROM9DLQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns5.gsa.gov for evaluation.gov/A
	Received 233 bytes from 76.223.9.162
	;; Response received from [76.223.9.162] 233 octets ;; HEADER SECTION ;; id = 51582 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; evaluation.gov. IN A ;; ANSWER SECTION (2 records) evaluation.gov. 10800 IN A 159.142.191.107 evaluation.gov. 10800 IN RRSIG ( A 8 2 10800 20241222140025 20241122135525 26068 evaluation.gov. vM6sYQtkPBBQXqEk568IiV9E4RDFVPvWw7HEgY2rhxJkFmfYI6TcPZ1DofWKaSnRAyWCUCpHv7c3 Zi2DGf0CLu/GimuyryyqZj20ocNmvG4Kz5wj3K1QO8KfLsHavyjbWAVTveCGTTNZ9+nLZLhECN1r J35nz6WuPpEr0kkv+nI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	evaluation.gov A RR has value 159.142.191.107
	Found 1 RRSIGs over A RRset
	`evaluation.gov. 10800 IN RRSIG ( A 8 2 10800 20241222140025 20241122135525 26068 evaluation.gov. vM6sYQtkPBBQXqEk568IiV9E4RDFVPvWw7HEgY2rhxJkFmfYI6TcPZ1DofWKaSnRAyWCUCpHv7c3 Zi2DGf0CLu/GimuyryyqZj20ocNmvG4Kz5wj3K1QO8KfLsHavyjbWAVTveCGTTNZ9+nLZLhECN1r J35nz6WuPpEr0kkv+nI= )`
	RRSIG=26068 and DNSKEY=26068 verifies the A RRset

evaluation.gov

	Query to dns4.gsa.gov for evaluation.gov/A
	Received 233 bytes from 13.248.149.147
	;; Response received from [13.248.149.147] 233 octets ;; HEADER SECTION ;; id = 17121 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; evaluation.gov. IN A ;; ANSWER SECTION (2 records) evaluation.gov. 10800 IN A 159.142.191.107 evaluation.gov. 10800 IN RRSIG ( A 8 2 10800 20241222140025 20241122135525 26068 evaluation.gov. vM6sYQtkPBBQXqEk568IiV9E4RDFVPvWw7HEgY2rhxJkFmfYI6TcPZ1DofWKaSnRAyWCUCpHv7c3 Zi2DGf0CLu/GimuyryyqZj20ocNmvG4Kz5wj3K1QO8KfLsHavyjbWAVTveCGTTNZ9+nLZLhECN1r J35nz6WuPpEr0kkv+nI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns4.gsa.gov is authoritative for evaluation.gov
	Found RRSIG signed by evaluation.gov zone
	Query to dns4.gsa.gov for evaluation.gov/A
	Received 233 bytes from 13.248.149.147
	;; Response received from [13.248.149.147] 233 octets ;; HEADER SECTION ;; id = 18051 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; evaluation.gov. IN A ;; ANSWER SECTION (2 records) evaluation.gov. 10800 IN A 159.142.191.107 evaluation.gov. 10800 IN RRSIG ( A 8 2 10800 20241222140025 20241122135525 26068 evaluation.gov. vM6sYQtkPBBQXqEk568IiV9E4RDFVPvWw7HEgY2rhxJkFmfYI6TcPZ1DofWKaSnRAyWCUCpHv7c3 Zi2DGf0CLu/GimuyryyqZj20ocNmvG4Kz5wj3K1QO8KfLsHavyjbWAVTveCGTTNZ9+nLZLhECN1r J35nz6WuPpEr0kkv+nI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	evaluation.gov A RR has value 159.142.191.107
	Found 1 RRSIGs over A RRset
	`evaluation.gov. 10800 IN RRSIG ( A 8 2 10800 20241222140025 20241122135525 26068 evaluation.gov. vM6sYQtkPBBQXqEk568IiV9E4RDFVPvWw7HEgY2rhxJkFmfYI6TcPZ1DofWKaSnRAyWCUCpHv7c3 Zi2DGf0CLu/GimuyryyqZj20ocNmvG4Kz5wj3K1QO8KfLsHavyjbWAVTveCGTTNZ9+nLZLhECN1r J35nz6WuPpEr0kkv+nI= )`
	RRSIG=26068 and DNSKEY=26068 verifies the A RRset

evaluation.gov

	Query to dns2.gsa.gov for evaluation.gov/A
	Received 233 bytes from 76.223.24.135
	;; Response received from [76.223.24.135] 233 octets ;; HEADER SECTION ;; id = 23294 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; evaluation.gov. IN A ;; ANSWER SECTION (2 records) evaluation.gov. 10800 IN A 159.142.191.107 evaluation.gov. 10800 IN RRSIG ( A 8 2 10800 20241222140025 20241122135525 26068 evaluation.gov. vM6sYQtkPBBQXqEk568IiV9E4RDFVPvWw7HEgY2rhxJkFmfYI6TcPZ1DofWKaSnRAyWCUCpHv7c3 Zi2DGf0CLu/GimuyryyqZj20ocNmvG4Kz5wj3K1QO8KfLsHavyjbWAVTveCGTTNZ9+nLZLhECN1r J35nz6WuPpEr0kkv+nI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns2.gsa.gov is authoritative for evaluation.gov
	Found RRSIG signed by evaluation.gov zone
	Query to dns2.gsa.gov for evaluation.gov/A
	Received 233 bytes from 76.223.24.135
	;; Response received from [76.223.24.135] 233 octets ;; HEADER SECTION ;; id = 17884 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; evaluation.gov. IN A ;; ANSWER SECTION (2 records) evaluation.gov. 10800 IN A 159.142.191.107 evaluation.gov. 10800 IN RRSIG ( A 8 2 10800 20241222140025 20241122135525 26068 evaluation.gov. vM6sYQtkPBBQXqEk568IiV9E4RDFVPvWw7HEgY2rhxJkFmfYI6TcPZ1DofWKaSnRAyWCUCpHv7c3 Zi2DGf0CLu/GimuyryyqZj20ocNmvG4Kz5wj3K1QO8KfLsHavyjbWAVTveCGTTNZ9+nLZLhECN1r J35nz6WuPpEr0kkv+nI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	evaluation.gov A RR has value 159.142.191.107
	Found 1 RRSIGs over A RRset
	`evaluation.gov. 10800 IN RRSIG ( A 8 2 10800 20241222140025 20241122135525 26068 evaluation.gov. vM6sYQtkPBBQXqEk568IiV9E4RDFVPvWw7HEgY2rhxJkFmfYI6TcPZ1DofWKaSnRAyWCUCpHv7c3 Zi2DGf0CLu/GimuyryyqZj20ocNmvG4Kz5wj3K1QO8KfLsHavyjbWAVTveCGTTNZ9+nLZLhECN1r J35nz6WuPpEr0kkv+nI= )`
	RRSIG=26068 and DNSKEY=26068 verifies the A RRset

evaluation.gov

	Query to dns.gsa.gov for evaluation.gov/A
	Received 233 bytes from 13.248.142.184
	;; Response received from [13.248.142.184] 233 octets ;; HEADER SECTION ;; id = 29287 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; evaluation.gov. IN A ;; ANSWER SECTION (2 records) evaluation.gov. 10800 IN A 159.142.191.107 evaluation.gov. 10800 IN RRSIG ( A 8 2 10800 20241222140025 20241122135525 26068 evaluation.gov. vM6sYQtkPBBQXqEk568IiV9E4RDFVPvWw7HEgY2rhxJkFmfYI6TcPZ1DofWKaSnRAyWCUCpHv7c3 Zi2DGf0CLu/GimuyryyqZj20ocNmvG4Kz5wj3K1QO8KfLsHavyjbWAVTveCGTTNZ9+nLZLhECN1r J35nz6WuPpEr0kkv+nI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns.gsa.gov is authoritative for evaluation.gov
	Found RRSIG signed by evaluation.gov zone
	Query to dns.gsa.gov for evaluation.gov/A
	Received 233 bytes from 13.248.142.184
	;; Response received from [13.248.142.184] 233 octets ;; HEADER SECTION ;; id = 48783 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; evaluation.gov. IN A ;; ANSWER SECTION (2 records) evaluation.gov. 10800 IN A 159.142.191.107 evaluation.gov. 10800 IN RRSIG ( A 8 2 10800 20241222140025 20241122135525 26068 evaluation.gov. vM6sYQtkPBBQXqEk568IiV9E4RDFVPvWw7HEgY2rhxJkFmfYI6TcPZ1DofWKaSnRAyWCUCpHv7c3 Zi2DGf0CLu/GimuyryyqZj20ocNmvG4Kz5wj3K1QO8KfLsHavyjbWAVTveCGTTNZ9+nLZLhECN1r J35nz6WuPpEr0kkv+nI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	evaluation.gov A RR has value 159.142.191.107
	Found 1 RRSIGs over A RRset
	`evaluation.gov. 10800 IN RRSIG ( A 8 2 10800 20241222140025 20241122135525 26068 evaluation.gov. vM6sYQtkPBBQXqEk568IiV9E4RDFVPvWw7HEgY2rhxJkFmfYI6TcPZ1DofWKaSnRAyWCUCpHv7c3 Zi2DGf0CLu/GimuyryyqZj20ocNmvG4Kz5wj3K1QO8KfLsHavyjbWAVTveCGTTNZ9+nLZLhECN1r J35nz6WuPpEr0kkv+nI= )`
	RRSIG=26068 and DNSKEY=26068 verifies the A RRset

evaluation.gov

	Query to dns3.gsa.gov for evaluation.gov/A
	Received 233 bytes from 13.248.144.182
	;; Response received from [13.248.144.182] 233 octets ;; HEADER SECTION ;; id = 63805 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; evaluation.gov. IN A ;; ANSWER SECTION (2 records) evaluation.gov. 10800 IN A 159.142.191.107 evaluation.gov. 10800 IN RRSIG ( A 8 2 10800 20241222140025 20241122135525 26068 evaluation.gov. vM6sYQtkPBBQXqEk568IiV9E4RDFVPvWw7HEgY2rhxJkFmfYI6TcPZ1DofWKaSnRAyWCUCpHv7c3 Zi2DGf0CLu/GimuyryyqZj20ocNmvG4Kz5wj3K1QO8KfLsHavyjbWAVTveCGTTNZ9+nLZLhECN1r J35nz6WuPpEr0kkv+nI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns3.gsa.gov is authoritative for evaluation.gov
	Found RRSIG signed by evaluation.gov zone
	Query to dns3.gsa.gov for evaluation.gov/A
	Received 233 bytes from 13.248.144.182
	;; Response received from [13.248.144.182] 233 octets ;; HEADER SECTION ;; id = 52111 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; evaluation.gov. IN A ;; ANSWER SECTION (2 records) evaluation.gov. 10800 IN A 159.142.191.107 evaluation.gov. 10800 IN RRSIG ( A 8 2 10800 20241222140025 20241122135525 26068 evaluation.gov. vM6sYQtkPBBQXqEk568IiV9E4RDFVPvWw7HEgY2rhxJkFmfYI6TcPZ1DofWKaSnRAyWCUCpHv7c3 Zi2DGf0CLu/GimuyryyqZj20ocNmvG4Kz5wj3K1QO8KfLsHavyjbWAVTveCGTTNZ9+nLZLhECN1r J35nz6WuPpEr0kkv+nI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	evaluation.gov A RR has value 159.142.191.107
	Found 1 RRSIGs over A RRset
	`evaluation.gov. 10800 IN RRSIG ( A 8 2 10800 20241222140025 20241122135525 26068 evaluation.gov. vM6sYQtkPBBQXqEk568IiV9E4RDFVPvWw7HEgY2rhxJkFmfYI6TcPZ1DofWKaSnRAyWCUCpHv7c3 Zi2DGf0CLu/GimuyryyqZj20ocNmvG4Kz5wj3K1QO8KfLsHavyjbWAVTveCGTTNZ9+nLZLhECN1r J35nz6WuPpEr0kkv+nI= )`
	RRSIG=26068 and DNSKEY=26068 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test evaluation.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: