DNSSEC Debugger - fishwatch.gov

Domain Name:

Time: 2024-07-27 03:19:57 UTC

Analyzing DNSSEC problems for fishwatch.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 865 octets ;; HEADER SECTION ;; id = 48829 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAdSiy6sslYrcZSGcuMEK4DtE8DZZY1A08kAsviAD49tocYO5m37AvIOyzeiKBWuPuJ4m9u5H onCM/ntxklZKYFyMftv8XoRwbiXdpSjfdpNHiMYTTV2oDUNMjdLFnF6HYSY48xrPbevQOYbAFGHp xqcXAQT0+BaBiAx3Ls6lXBQ3/hSVOprvDWJCQiI2OT+9+saKLddSIX6DwTVy0S5T4YY4EGg5R3c/ eKUb2/8XgKWUzlOIZsVAZZUSTKW0tX54ccAALO7Grvsx/NW62jc1xv6wWAXocOEVgB7+4Lzb7q9p 5o30+sYoGpOsKgFvMSy4oCZTQMQx2Sjd/NG2bMMw6nM= ) ; Key ID = 20038 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240811000000 20240721000000 20326 . oHsHLvNMC6b1tY+OF7BG9etZbZMixRQiBD6gzpzdD32m4l0Vdh6yO0vA6ECQ3PMHihplvZGlYgZc aow5WFWod7FGAufSncGrrX+55sXKn4I/cZhBfPYh3WCCI+H7Ug29tV81VkeHSJgVd3q5LfUVYkun Czoysi01iU48KefmKZAGqzPINkOwRJT76+lyrOzSVQWvYStWsR5EGSvPQ1/tJQXOIzaEzuDDFp50 2fCJqX9CK9LcjCeleXpeDfdH+7Kk1TqRMrRHt3ehRsqh4yuR5buq+p+lCsHht28vdgjADBehrqmb hv6MGoBE3QK+rW5xuHqlu3jRV15JBY3/NnDSyQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdSiy6sslYrcZSGcuMEK4DtE8DZZY1A08kAsviAD49tocYO5m37AvIOyzeiKBWuPuJ4m9u5H onCM/ntxklZKYFyMftv8XoRwbiXdpSjfdpNHiMYTTV2oDUNMjdLFnF6HYSY48xrPbevQOYbAFGHp xqcXAQT0+BaBiAx3Ls6lXBQ3/hSVOprvDWJCQiI2OT+9+saKLddSIX6DwTVy0S5T4YY4EGg5R3c/ eKUb2/8XgKWUzlOIZsVAZZUSTKW0tX54ccAALO7Grvsx/NW62jc1xv6wWAXocOEVgB7+4Lzb7q9p 5o30+sYoGpOsKgFvMSy4oCZTQMQx2Sjd/NG2bMMw6nM= ) ; Key ID = 20038`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240811000000 20240721000000 20326 . oHsHLvNMC6b1tY+OF7BG9etZbZMixRQiBD6gzpzdD32m4l0Vdh6yO0vA6ECQ3PMHihplvZGlYgZc aow5WFWod7FGAufSncGrrX+55sXKn4I/cZhBfPYh3WCCI+H7Ug29tV81VkeHSJgVd3q5LfUVYkun Czoysi01iU48KefmKZAGqzPINkOwRJT76+lyrOzSVQWvYStWsR5EGSvPQ1/tJQXOIzaEzuDDFp50 2fCJqX9CK9LcjCeleXpeDfdH+7Kk1TqRMrRHt3ehRsqh4yuR5buq+p+lCsHht28vdgjADBehrqmb hv6MGoBE3QK+rW5xuHqlu3jRV15JBY3/NnDSyQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=20038 is now in the chain-of-trust
	Query to m.root-servers.net for fishwatch.gov/A
	Received 623 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 623 octets ;; HEADER SECTION ;; id = 31438 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fishwatch.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240808170000 20240726160000 20038 . MkhK+ObGfAmfWylt1G+YckaU7tEEp0RHlsKq8Ht9QUBgHDl1a0F5AY5Ac0+yU+nvVs9ulbKAyUHQ 08q9/xB9+4ahH5t3zz6bRcZ+fQKZq4w6uuT7wLIQNrxv2fV3LwWNJmP9c7hbso9l4V5q9KRicgvC 4nOoOtjiFMrdS9lDi7oTgyhfqWOp9fTUvGZ6pylfJS/TESnPx5rOUdbObLy6XuzyBra2jXk57RyZ dcHOwiMib1i3kXQpRp3+UPxSiXqxZlM2Ptzyxho6R1hrxyqU8J2QZVfk6y2eN8QhUHzQPeVjzbsD OJSlzrqZY1Ql1GwjbEAj7POKZYrf/fAq57MriA== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Query to b.root-servers.net for gov/DNSKEY
	Received 610 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 610 octets ;; HEADER SECTION ;; id = 30813 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240808170000 20240726160000 20038 . MkhK+ObGfAmfWylt1G+YckaU7tEEp0RHlsKq8Ht9QUBgHDl1a0F5AY5Ac0+yU+nvVs9ulbKAyUHQ 08q9/xB9+4ahH5t3zz6bRcZ+fQKZq4w6uuT7wLIQNrxv2fV3LwWNJmP9c7hbso9l4V5q9KRicgvC 4nOoOtjiFMrdS9lDi7oTgyhfqWOp9fTUvGZ6pylfJS/TESnPx5rOUdbObLy6XuzyBra2jXk57RyZ dcHOwiMib1i3kXQpRp3+UPxSiXqxZlM2Ptzyxho6R1hrxyqU8J2QZVfk6y2eN8QhUHzQPeVjzbsD OJSlzrqZY1Ql1GwjbEAj7POKZYrf/fAq57MriA== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN A 199.33.231.1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN A 199.33.232.1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN A 199.33.233.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to d.root-servers.net for gov/DS
	Received 367 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 367 octets ;; HEADER SECTION ;; id = 59366 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240808170000 20240726160000 20038 . MkhK+ObGfAmfWylt1G+YckaU7tEEp0RHlsKq8Ht9QUBgHDl1a0F5AY5Ac0+yU+nvVs9ulbKAyUHQ 08q9/xB9+4ahH5t3zz6bRcZ+fQKZq4w6uuT7wLIQNrxv2fV3LwWNJmP9c7hbso9l4V5q9KRicgvC 4nOoOtjiFMrdS9lDi7oTgyhfqWOp9fTUvGZ6pylfJS/TESnPx5rOUdbObLy6XuzyBra2jXk57RyZ dcHOwiMib1i3kXQpRp3+UPxSiXqxZlM2Ptzyxho6R1hrxyqU8J2QZVfk6y2eN8QhUHzQPeVjzbsD OJSlzrqZY1Ql1GwjbEAj7POKZYrf/fAq57MriA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20240808170000 20240726160000 20038 . MkhK+ObGfAmfWylt1G+YckaU7tEEp0RHlsKq8Ht9QUBgHDl1a0F5AY5Ac0+yU+nvVs9ulbKAyUHQ 08q9/xB9+4ahH5t3zz6bRcZ+fQKZq4w6uuT7wLIQNrxv2fV3LwWNJmP9c7hbso9l4V5q9KRicgvC 4nOoOtjiFMrdS9lDi7oTgyhfqWOp9fTUvGZ6pylfJS/TESnPx5rOUdbObLy6XuzyBra2jXk57RyZ dcHOwiMib1i3kXQpRp3+UPxSiXqxZlM2Ptzyxho6R1hrxyqU8J2QZVfk6y2eN8QhUHzQPeVjzbsD OJSlzrqZY1Ql1GwjbEAj7POKZYrf/fAq57MriA== )`
	RRSIG=20038 and DNSKEY=20038 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to d.ns.gov for gov/DNSKEY
	Received 291 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 291 octets ;; HEADER SECTION ;; id = 3127 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; Key ID = 2536 gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; Key ID = 35496 gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240919110526 20240720110526 2536 gov. HdS8shIfEbsTrkW5QWcemVuIGkuI/xGvzvDYxBTf/LuRRNzN5FvUA1PbOTLXYLEfPZkeLTC07umN zFbL4Pqx9w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; Key ID = 2536`
	`gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; Key ID = 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240919110526 20240720110526 2536 gov. HdS8shIfEbsTrkW5QWcemVuIGkuI/xGvzvDYxBTf/LuRRNzN5FvUA1PbOTLXYLEfPZkeLTC07umN zFbL4Pqx9w== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to d.ns.gov for fishwatch.gov/A
	Received 386 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 386 octets ;; HEADER SECTION ;; id = 34242 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fishwatch.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) fishwatch.gov. 10800 IN NS ns-01.noaa.gov. fishwatch.gov. 10800 IN NS ns-02.noaa.gov. fishwatch.gov. 10800 IN NS ns-03.noaa.gov. fishwatch.gov. 3600 IN DS ( 37619 8 2 dc3689b675d714ad789483d4727145517b11ebc4e6b1e8e16eb5a8bea543b8bd ) fishwatch.gov. 3600 IN RRSIG ( DS 13 2 3600 20240728041957 20240726021957 35496 gov. CXFRJpVvfSgA+OIb47VEbBwhgSFGEYt6GPaPv9SFZTWJ3BPJlztbTFrvICyzvmSAEeX8sc4Pym6I 7XwzIhpODg== ) ;; ADDITIONAL SECTION (7 records) ns-01.noaa.gov. 3600 IN A 137.75.116.93 ns-01.noaa.gov. 3600 IN AAAA 2610:20:9200:0:137:75:116:93 ns-02.noaa.gov. 3600 IN A 137.75.112.7 ns-02.noaa.gov. 3600 IN AAAA 2610:20:9300:0:137:75:112:7 ns-03.noaa.gov. 3600 IN A 137.75.112.58 ns-03.noaa.gov. 3600 IN AAAA 2610:20:9300:1:137:75:112:58 ;; { "EDNS-VERSION": 0 }
	Query to b.ns.gov for fishwatch.gov/DNSKEY
	Received 386 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 386 octets ;; HEADER SECTION ;; id = 33724 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fishwatch.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) fishwatch.gov. 10800 IN NS ns-01.noaa.gov. fishwatch.gov. 10800 IN NS ns-02.noaa.gov. fishwatch.gov. 10800 IN NS ns-03.noaa.gov. fishwatch.gov. 3600 IN DS ( 37619 8 2 dc3689b675d714ad789483d4727145517b11ebc4e6b1e8e16eb5a8bea543b8bd ) fishwatch.gov. 3600 IN RRSIG ( DS 13 2 3600 20240728041957 20240726021957 35496 gov. ACyqEmmBnzkQ7bBd4HduBSiLi2PVv3Nioqv+tw2S97mULCyf9qhC6EKqMemDzsmIfQitVFJWayMr HKbXrXgihA== ) ;; ADDITIONAL SECTION (7 records) ns-01.noaa.gov. 3600 IN A 137.75.116.93 ns-01.noaa.gov. 3600 IN AAAA 2610:20:9200:0:137:75:116:93 ns-02.noaa.gov. 3600 IN A 137.75.112.7 ns-02.noaa.gov. 3600 IN AAAA 2610:20:9300:0:137:75:112:7 ns-03.noaa.gov. 3600 IN A 137.75.112.58 ns-03.noaa.gov. 3600 IN AAAA 2610:20:9300:1:137:75:112:58 ;; { "EDNS-VERSION": 0 }
	Found child zone fishwatch.gov

fishwatch.gov

	Checking DS between gov and fishwatch.gov
	Query to b.ns.gov for fishwatch.gov/DS
	Received 189 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 189 octets ;; HEADER SECTION ;; id = 34233 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fishwatch.gov. IN DS ;; ANSWER SECTION (2 records) fishwatch.gov. 3600 IN DS ( 37619 8 2 dc3689b675d714ad789483d4727145517b11ebc4e6b1e8e16eb5a8bea543b8bd ) fishwatch.gov. 3600 IN RRSIG ( DS 13 2 3600 20240728041957 20240726021957 35496 gov. mcmQcSu0GhMvKOLsaUBkRsENWVMTL2gM7z/9Z2DyABExjGDb+NtLs0cYaKaRCAvBJhK3rmJVqvcq 3M4k8bBWKw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for fishwatch.gov in the gov zone
	DS=37619/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`fishwatch.gov. 3600 IN RRSIG ( DS 13 2 3600 20240728041957 20240726021957 35496 gov. mcmQcSu0GhMvKOLsaUBkRsENWVMTL2gM7z/9Z2DyABExjGDb+NtLs0cYaKaRCAvBJhK3rmJVqvcq 3M4k8bBWKw== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=37619/SHA-256 is now in the chain-of-trust
	`fishwatch.gov. 3600 IN DS ( 37619 8 2 dc3689b675d714ad789483d4727145517b11ebc4e6b1e8e16eb5a8bea543b8bd )`
	Query to ns-03.noaa.gov for fishwatch.gov/DNSKEY
	Received 940 bytes from 137.75.112.58
	;; Response received from [137.75.112.58] 940 octets ;; HEADER SECTION ;; id = 47531 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fishwatch.gov. IN DNSKEY ;; ANSWER SECTION (4 records) fishwatch.gov. 3600 IN DNSKEY ( 257 3 8 AwEAAbTHPyUBEsJhDiBKCh6OSCBtW1Npm84rJcCK1ux22otkbRENWerGR4j8Q3be30ISbxAvxVcY LUGOtUU6gDqW8d2/I1TeCvA/ariDUQjjxS6QilX3wS/oJ1s0wHDe3rbi3QrYXrlbdf68AWmCPgag 4WXpnTtRTuuGfnFQo1eR/WmhBsM9N0wbHTPjHUAhjKb6kSPRWIMMlBhdHjhtlC9xqmoXP/LfVwHB Qfk6qZYBWGT9Q065WSwyPFVejlvQSnF6NdR371nhmFsUumEVsncpAe8QFnaNf/NVgOPjSsMk/pDc xTCjD3Qj7rPiTk3sgOcLNN9H+NqAHHQLbojZGx8r7x0= ) ; Key ID = 37619 fishwatch.gov. 3600 IN DNSKEY ( 256 3 8 AwEAAZUEElIW9wuBtGgQV+hzKPrJ0vzqVON5tO57HDzTKwl4954BggbVTuukaVblLruRDiXRE3gX DHRYlIb/dx5cpU5F9SoFMA8jjeB/RXFRYXaCXSwfPzJRae1sWtX812xZtjjf6QNex5NKSXHWedyL kh2ABBJaTabC6mBDXMmoFNYn ) ; Key ID = 2140 fishwatch.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20240824010121 20240725010121 2140 fishwatch.gov. QHeH/JZrMO0rRBsYNClhho/nGJ6s3KotHjiPDKGp9DveBTQQNGD4P7hSEMI89xq6gyXCHP6CgULD IA+UcPlAB4ZcXKIGCYvmAleFT6p2xhNwVXXcpLFg0Wpbcu1MqHuNnTebT81clX9C9yd2cUqwVsc6 AfNTqBtkkhQyC5iLF50= ) fishwatch.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20240824010121 20240725010121 37619 fishwatch.gov. c6TJnZ+0pwRRTXiPZI/yYbeHAQjM8HT+tDGZ3fhv/7XthhuPPlPy+kfk0+eRUieBq6/3p7CzgffJ WPCDyyS5c/z1JzDH0Idn3Yz0Qkg6aHYi53jkAGIiCjs1+5x8D3gIWlVM7MCK6JW5yvq03y2RPPyn +w63lBvqtEo7oOBg8gu7/jpvjaImIRmh+YN49Qht04X7IGW4RpJyU47Ik91/ASVh6Mz9GaAQY5pG W7UKJEvaZO44IzF8MmFtBL/5wlcFpxRJFVi3j4PwqmooyxevMiSOV2K+1+9Z7PFksEAY8oYv1Oy7 eDIAX9EJWXw85bOt5TYFQOrAXABInvYh1gX0bQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for fishwatch.gov
	`fishwatch.gov. 3600 IN DNSKEY ( 257 3 8 AwEAAbTHPyUBEsJhDiBKCh6OSCBtW1Npm84rJcCK1ux22otkbRENWerGR4j8Q3be30ISbxAvxVcY LUGOtUU6gDqW8d2/I1TeCvA/ariDUQjjxS6QilX3wS/oJ1s0wHDe3rbi3QrYXrlbdf68AWmCPgag 4WXpnTtRTuuGfnFQo1eR/WmhBsM9N0wbHTPjHUAhjKb6kSPRWIMMlBhdHjhtlC9xqmoXP/LfVwHB Qfk6qZYBWGT9Q065WSwyPFVejlvQSnF6NdR371nhmFsUumEVsncpAe8QFnaNf/NVgOPjSsMk/pDc xTCjD3Qj7rPiTk3sgOcLNN9H+NqAHHQLbojZGx8r7x0= ) ; Key ID = 37619`
	`fishwatch.gov. 3600 IN DNSKEY ( 256 3 8 AwEAAZUEElIW9wuBtGgQV+hzKPrJ0vzqVON5tO57HDzTKwl4954BggbVTuukaVblLruRDiXRE3gX DHRYlIb/dx5cpU5F9SoFMA8jjeB/RXFRYXaCXSwfPzJRae1sWtX812xZtjjf6QNex5NKSXHWedyL kh2ABBJaTabC6mBDXMmoFNYn ) ; Key ID = 2140`
	DNSKEY=37619/SEP is now in the chain-of-trust
	DS=37619/SHA-256 verifies DNSKEY=37619/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`fishwatch.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20240824010121 20240725010121 2140 fishwatch.gov. QHeH/JZrMO0rRBsYNClhho/nGJ6s3KotHjiPDKGp9DveBTQQNGD4P7hSEMI89xq6gyXCHP6CgULD IA+UcPlAB4ZcXKIGCYvmAleFT6p2xhNwVXXcpLFg0Wpbcu1MqHuNnTebT81clX9C9yd2cUqwVsc6 AfNTqBtkkhQyC5iLF50= )`
	`fishwatch.gov. 3600 IN RRSIG ( DNSKEY 8 2 3600 20240824010121 20240725010121 37619 fishwatch.gov. c6TJnZ+0pwRRTXiPZI/yYbeHAQjM8HT+tDGZ3fhv/7XthhuPPlPy+kfk0+eRUieBq6/3p7CzgffJ WPCDyyS5c/z1JzDH0Idn3Yz0Qkg6aHYi53jkAGIiCjs1+5x8D3gIWlVM7MCK6JW5yvq03y2RPPyn +w63lBvqtEo7oOBg8gu7/jpvjaImIRmh+YN49Qht04X7IGW4RpJyU47Ik91/ASVh6Mz9GaAQY5pG W7UKJEvaZO44IzF8MmFtBL/5wlcFpxRJFVi3j4PwqmooyxevMiSOV2K+1+9Z7PFksEAY8oYv1Oy7 eDIAX9EJWXw85bOt5TYFQOrAXABInvYh1gX0bQ== )`
	RRSIG=2140 and DNSKEY=2140 verifies the DNSKEY RRset
	RRSIG=37619 and DNSKEY=37619/SEP verifies the DNSKEY RRset
	DNSKEY=2140 is now in the chain-of-trust
	Query to ns-02.noaa.gov for fishwatch.gov/A
	Received 1121 bytes from 137.75.112.7
	;; Response received from [137.75.112.7] 1121 octets ;; HEADER SECTION ;; id = 38058 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 10 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fishwatch.gov. IN A ;; ANSWER SECTION (3 records) fishwatch.gov. 300 IN A 137.75.88.52 fishwatch.gov. 300 IN A 137.75.88.7 fishwatch.gov. 300 IN RRSIG ( A 8 2 300 20240824010121 20240725010121 2140 fishwatch.gov. BGVuFyRFpQ6CvKY2BUHkRIIjf6IWnEb7GV1tVAn5NKVjcqJtKpyEY2gkWusdtDb9fyIOt+rFkhD5 R+HG2kiAz9WFk2YWs0ICOMDre38vxMeOXWzbpkm2c9t1rDe+OT4C+qzxBTDSKZpyVeKi2ojRJf9q 7qr9cU4f0nh0lQp1oJA= ) ;; AUTHORITY SECTION (4 records) fishwatch.gov. 300 IN NS ns-02.noaa.gov. fishwatch.gov. 300 IN NS ns-03.noaa.gov. fishwatch.gov. 300 IN NS ns-01.noaa.gov. fishwatch.gov. 300 IN RRSIG ( NS 8 2 300 20240824010121 20240725010121 2140 fishwatch.gov. CEBomKxDRM4IIUsN2TfXA/OPwJvBy47tiEldCU5nYIIAkCTFgIPs8uDjz+ybkrKjJday30FoPOQU 7X9RKedL9izNvluUlAvDeiWqipsbSBP3ME0i23Q/4MXYIZqOrPe/GWsdn5zB3Sjvy7EOdkl3knct SlZlQK7HSCX6seeBED4= ) ;; ADDITIONAL SECTION (10 records) ns-01.noaa.gov. 86400 IN A 137.75.116.93 ns-02.noaa.gov. 86400 IN A 137.75.112.7 ns-03.noaa.gov. 86400 IN A 137.75.112.58 ns-01.noaa.gov. 86400 IN AAAA 2610:20:9200:0:137:75:116:93 ns-02.noaa.gov. 86400 IN AAAA 2610:20:9300:0:137:75:112:7 ns-03.noaa.gov. 86400 IN AAAA 2610:20:9300:1:137:75:112:58 ns-01.noaa.gov. 86400 IN RRSIG ( A 8 3 86400 20240825134803 20240726134803 22179 noaa.gov. HYL8cY8GpnQUEMkJMIFgKBaeuh+L6FwRY4puXXhUFq8bq6ly/pn28plpui1PIm418B6kTCoaWL6/ 4f+pwpXS1SlaWYUzKpSoJkva6lOkbomz5tFWfAMgjifyMCUnskwoZJeEW4/yBKWjTGjwHskXNT9P AAamAbjnMQcEEDXBkG8= ) ns-01.noaa.gov. 86400 IN RRSIG ( AAAA 8 3 86400 20240825134803 20240726134803 22179 noaa.gov. lg73oREjlg+KpmIaesqw2Z0qpoi83tSAzLw6dhoE0k+E2DKg6vssV1L//NoJuC0T/e6OqcoqfY7s XruwtmHWRG66idBwJ4B8sCL47T95BmX68lds/9LTF0rc6p+1nR8RVkVh/YioT2KazkxbkwpMVQxz YUhIiMala5Hb6Jrdh3A= ) ns-02.noaa.gov. 86400 IN RRSIG ( A 8 3 86400 20240825134803 20240726134803 22179 noaa.gov. ZvTOx1xE9Pcj2i0A+v0z+cFgpaOlAFZIsOAP0HgtZ5iQkCdhlZLaapMkntZAacWmqcZQv4kixSoN LISdR4kcNFujaskl0Soa/Sjv4eszVzmjHXYDjvEojpOrFGX+783SiveoTRRs3h7rfHDTVEnb0VUO p53IMfm01/qfh0BI/f4= ) ;; { "EDNS-VERSION": 0 }
	ns-02.noaa.gov is authoritative for fishwatch.gov
	Found RRSIG signed by fishwatch.gov zone
	Query to ns-01.noaa.gov for fishwatch.gov/SOA
	Received 1146 bytes from 137.75.116.93
	;; Response received from [137.75.116.93] 1146 octets ;; HEADER SECTION ;; id = 16423 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 10 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fishwatch.gov. IN SOA ;; ANSWER SECTION (2 records) fishwatch.gov. 86400 IN SOA ( dns02.woc.noaa.gov. hostmaster.noaa.gov. 1721872881 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) fishwatch.gov. 86400 IN RRSIG ( SOA 8 2 86400 20240824010121 20240725010121 2140 fishwatch.gov. eergW1BmG1d/oVDb/+9qW4rEUIu1TB9cPkrJ10udEg8ohU24Gkz7W7EN55AAg5SBwtFD4l2NRRpL u2KJPyL+tBJN7gr/W1qcKvGejLL3OkQ/jnZU2OH8MpghtJQ3W5LHfDZ/o46FbrjGMxvWsTaDww28 h1Xi+ktTQE1/bGWmPqY= ) ;; AUTHORITY SECTION (4 records) fishwatch.gov. 300 IN NS ns-01.noaa.gov. fishwatch.gov. 300 IN NS ns-02.noaa.gov. fishwatch.gov. 300 IN NS ns-03.noaa.gov. fishwatch.gov. 300 IN RRSIG ( NS 8 2 300 20240824010121 20240725010121 2140 fishwatch.gov. CEBomKxDRM4IIUsN2TfXA/OPwJvBy47tiEldCU5nYIIAkCTFgIPs8uDjz+ybkrKjJday30FoPOQU 7X9RKedL9izNvluUlAvDeiWqipsbSBP3ME0i23Q/4MXYIZqOrPe/GWsdn5zB3Sjvy7EOdkl3knct SlZlQK7HSCX6seeBED4= ) ;; ADDITIONAL SECTION (10 records) ns-01.noaa.gov. 86400 IN A 137.75.116.93 ns-02.noaa.gov. 86400 IN A 137.75.112.7 ns-03.noaa.gov. 86400 IN A 137.75.112.58 ns-01.noaa.gov. 86400 IN AAAA 2610:20:9200:0:137:75:116:93 ns-02.noaa.gov. 86400 IN AAAA 2610:20:9300:0:137:75:112:7 ns-03.noaa.gov. 86400 IN AAAA 2610:20:9300:1:137:75:112:58 ns-01.noaa.gov. 86400 IN RRSIG ( A 8 3 86400 20240825134803 20240726134803 22179 noaa.gov. HYL8cY8GpnQUEMkJMIFgKBaeuh+L6FwRY4puXXhUFq8bq6ly/pn28plpui1PIm418B6kTCoaWL6/ 4f+pwpXS1SlaWYUzKpSoJkva6lOkbomz5tFWfAMgjifyMCUnskwoZJeEW4/yBKWjTGjwHskXNT9P AAamAbjnMQcEEDXBkG8= ) ns-01.noaa.gov. 86400 IN RRSIG ( AAAA 8 3 86400 20240825134803 20240726134803 22179 noaa.gov. lg73oREjlg+KpmIaesqw2Z0qpoi83tSAzLw6dhoE0k+E2DKg6vssV1L//NoJuC0T/e6OqcoqfY7s XruwtmHWRG66idBwJ4B8sCL47T95BmX68lds/9LTF0rc6p+1nR8RVkVh/YioT2KazkxbkwpMVQxz YUhIiMala5Hb6Jrdh3A= ) ns-02.noaa.gov. 86400 IN RRSIG ( A 8 3 86400 20240825134803 20240726134803 22179 noaa.gov. ZvTOx1xE9Pcj2i0A+v0z+cFgpaOlAFZIsOAP0HgtZ5iQkCdhlZLaapMkntZAacWmqcZQv4kixSoN LISdR4kcNFujaskl0Soa/Sjv4eszVzmjHXYDjvEojpOrFGX+783SiveoTRRs3h7rfHDTVEnb0VUO p53IMfm01/qfh0BI/f4= ) ;; { "EDNS-VERSION": 0 }
	Query to ns-03.noaa.gov for fishwatch.gov/SOA
	Received 1146 bytes from 137.75.112.58
	;; Response received from [137.75.112.58] 1146 octets ;; HEADER SECTION ;; id = 14796 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 10 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fishwatch.gov. IN SOA ;; ANSWER SECTION (2 records) fishwatch.gov. 86400 IN SOA ( dns02.woc.noaa.gov. hostmaster.noaa.gov. 1721872881 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) fishwatch.gov. 86400 IN RRSIG ( SOA 8 2 86400 20240824010121 20240725010121 2140 fishwatch.gov. eergW1BmG1d/oVDb/+9qW4rEUIu1TB9cPkrJ10udEg8ohU24Gkz7W7EN55AAg5SBwtFD4l2NRRpL u2KJPyL+tBJN7gr/W1qcKvGejLL3OkQ/jnZU2OH8MpghtJQ3W5LHfDZ/o46FbrjGMxvWsTaDww28 h1Xi+ktTQE1/bGWmPqY= ) ;; AUTHORITY SECTION (4 records) fishwatch.gov. 300 IN NS ns-03.noaa.gov. fishwatch.gov. 300 IN NS ns-02.noaa.gov. fishwatch.gov. 300 IN NS ns-01.noaa.gov. fishwatch.gov. 300 IN RRSIG ( NS 8 2 300 20240824010121 20240725010121 2140 fishwatch.gov. CEBomKxDRM4IIUsN2TfXA/OPwJvBy47tiEldCU5nYIIAkCTFgIPs8uDjz+ybkrKjJday30FoPOQU 7X9RKedL9izNvluUlAvDeiWqipsbSBP3ME0i23Q/4MXYIZqOrPe/GWsdn5zB3Sjvy7EOdkl3knct SlZlQK7HSCX6seeBED4= ) ;; ADDITIONAL SECTION (10 records) ns-01.noaa.gov. 86400 IN A 137.75.116.93 ns-02.noaa.gov. 86400 IN A 137.75.112.7 ns-03.noaa.gov. 86400 IN A 137.75.112.58 ns-01.noaa.gov. 86400 IN AAAA 2610:20:9200:0:137:75:116:93 ns-02.noaa.gov. 86400 IN AAAA 2610:20:9300:0:137:75:112:7 ns-03.noaa.gov. 86400 IN AAAA 2610:20:9300:1:137:75:112:58 ns-01.noaa.gov. 86400 IN RRSIG ( A 8 3 86400 20240825134803 20240726134803 22179 noaa.gov. HYL8cY8GpnQUEMkJMIFgKBaeuh+L6FwRY4puXXhUFq8bq6ly/pn28plpui1PIm418B6kTCoaWL6/ 4f+pwpXS1SlaWYUzKpSoJkva6lOkbomz5tFWfAMgjifyMCUnskwoZJeEW4/yBKWjTGjwHskXNT9P AAamAbjnMQcEEDXBkG8= ) ns-01.noaa.gov. 86400 IN RRSIG ( AAAA 8 3 86400 20240825134803 20240726134803 22179 noaa.gov. lg73oREjlg+KpmIaesqw2Z0qpoi83tSAzLw6dhoE0k+E2DKg6vssV1L//NoJuC0T/e6OqcoqfY7s XruwtmHWRG66idBwJ4B8sCL47T95BmX68lds/9LTF0rc6p+1nR8RVkVh/YioT2KazkxbkwpMVQxz YUhIiMala5Hb6Jrdh3A= ) ns-02.noaa.gov. 86400 IN RRSIG ( A 8 3 86400 20240825134803 20240726134803 22179 noaa.gov. ZvTOx1xE9Pcj2i0A+v0z+cFgpaOlAFZIsOAP0HgtZ5iQkCdhlZLaapMkntZAacWmqcZQv4kixSoN LISdR4kcNFujaskl0Soa/Sjv4eszVzmjHXYDjvEojpOrFGX+783SiveoTRRs3h7rfHDTVEnb0VUO p53IMfm01/qfh0BI/f4= ) ;; { "EDNS-VERSION": 0 }
	Query to ns-02.noaa.gov for fishwatch.gov/A
	Received 1121 bytes from 137.75.112.7
	;; Response received from [137.75.112.7] 1121 octets ;; HEADER SECTION ;; id = 15465 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 10 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fishwatch.gov. IN A ;; ANSWER SECTION (3 records) fishwatch.gov. 300 IN A 137.75.88.52 fishwatch.gov. 300 IN A 137.75.88.7 fishwatch.gov. 300 IN RRSIG ( A 8 2 300 20240824010121 20240725010121 2140 fishwatch.gov. BGVuFyRFpQ6CvKY2BUHkRIIjf6IWnEb7GV1tVAn5NKVjcqJtKpyEY2gkWusdtDb9fyIOt+rFkhD5 R+HG2kiAz9WFk2YWs0ICOMDre38vxMeOXWzbpkm2c9t1rDe+OT4C+qzxBTDSKZpyVeKi2ojRJf9q 7qr9cU4f0nh0lQp1oJA= ) ;; AUTHORITY SECTION (4 records) fishwatch.gov. 300 IN NS ns-02.noaa.gov. fishwatch.gov. 300 IN NS ns-03.noaa.gov. fishwatch.gov. 300 IN NS ns-01.noaa.gov. fishwatch.gov. 300 IN RRSIG ( NS 8 2 300 20240824010121 20240725010121 2140 fishwatch.gov. CEBomKxDRM4IIUsN2TfXA/OPwJvBy47tiEldCU5nYIIAkCTFgIPs8uDjz+ybkrKjJday30FoPOQU 7X9RKedL9izNvluUlAvDeiWqipsbSBP3ME0i23Q/4MXYIZqOrPe/GWsdn5zB3Sjvy7EOdkl3knct SlZlQK7HSCX6seeBED4= ) ;; ADDITIONAL SECTION (10 records) ns-01.noaa.gov. 86400 IN A 137.75.116.93 ns-02.noaa.gov. 86400 IN A 137.75.112.7 ns-03.noaa.gov. 86400 IN A 137.75.112.58 ns-01.noaa.gov. 86400 IN AAAA 2610:20:9200:0:137:75:116:93 ns-02.noaa.gov. 86400 IN AAAA 2610:20:9300:0:137:75:112:7 ns-03.noaa.gov. 86400 IN AAAA 2610:20:9300:1:137:75:112:58 ns-01.noaa.gov. 86400 IN RRSIG ( A 8 3 86400 20240825134803 20240726134803 22179 noaa.gov. HYL8cY8GpnQUEMkJMIFgKBaeuh+L6FwRY4puXXhUFq8bq6ly/pn28plpui1PIm418B6kTCoaWL6/ 4f+pwpXS1SlaWYUzKpSoJkva6lOkbomz5tFWfAMgjifyMCUnskwoZJeEW4/yBKWjTGjwHskXNT9P AAamAbjnMQcEEDXBkG8= ) ns-01.noaa.gov. 86400 IN RRSIG ( AAAA 8 3 86400 20240825134803 20240726134803 22179 noaa.gov. lg73oREjlg+KpmIaesqw2Z0qpoi83tSAzLw6dhoE0k+E2DKg6vssV1L//NoJuC0T/e6OqcoqfY7s XruwtmHWRG66idBwJ4B8sCL47T95BmX68lds/9LTF0rc6p+1nR8RVkVh/YioT2KazkxbkwpMVQxz YUhIiMala5Hb6Jrdh3A= ) ns-02.noaa.gov. 86400 IN RRSIG ( A 8 3 86400 20240825134803 20240726134803 22179 noaa.gov. ZvTOx1xE9Pcj2i0A+v0z+cFgpaOlAFZIsOAP0HgtZ5iQkCdhlZLaapMkntZAacWmqcZQv4kixSoN LISdR4kcNFujaskl0Soa/Sjv4eszVzmjHXYDjvEojpOrFGX+783SiveoTRRs3h7rfHDTVEnb0VUO p53IMfm01/qfh0BI/f4= ) ;; { "EDNS-VERSION": 0 }
	fishwatch.gov A RR has value 137.75.88.52
	fishwatch.gov A RR has value 137.75.88.7
	Found 1 RRSIGs over A RRset
	`fishwatch.gov. 300 IN RRSIG ( A 8 2 300 20240824010121 20240725010121 2140 fishwatch.gov. BGVuFyRFpQ6CvKY2BUHkRIIjf6IWnEb7GV1tVAn5NKVjcqJtKpyEY2gkWusdtDb9fyIOt+rFkhD5 R+HG2kiAz9WFk2YWs0ICOMDre38vxMeOXWzbpkm2c9t1rDe+OT4C+qzxBTDSKZpyVeKi2ojRJf9q 7qr9cU4f0nh0lQp1oJA= )`
	RRSIG=2140 and DNSKEY=2140 verifies the A RRset

fishwatch.gov

	Query to ns-01.noaa.gov for fishwatch.gov/A
	Received 1121 bytes from 137.75.116.93
	;; Response received from [137.75.116.93] 1121 octets ;; HEADER SECTION ;; id = 21586 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 10 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fishwatch.gov. IN A ;; ANSWER SECTION (3 records) fishwatch.gov. 300 IN A 137.75.88.52 fishwatch.gov. 300 IN A 137.75.88.7 fishwatch.gov. 300 IN RRSIG ( A 8 2 300 20240824010121 20240725010121 2140 fishwatch.gov. BGVuFyRFpQ6CvKY2BUHkRIIjf6IWnEb7GV1tVAn5NKVjcqJtKpyEY2gkWusdtDb9fyIOt+rFkhD5 R+HG2kiAz9WFk2YWs0ICOMDre38vxMeOXWzbpkm2c9t1rDe+OT4C+qzxBTDSKZpyVeKi2ojRJf9q 7qr9cU4f0nh0lQp1oJA= ) ;; AUTHORITY SECTION (4 records) fishwatch.gov. 300 IN NS ns-02.noaa.gov. fishwatch.gov. 300 IN NS ns-01.noaa.gov. fishwatch.gov. 300 IN NS ns-03.noaa.gov. fishwatch.gov. 300 IN RRSIG ( NS 8 2 300 20240824010121 20240725010121 2140 fishwatch.gov. CEBomKxDRM4IIUsN2TfXA/OPwJvBy47tiEldCU5nYIIAkCTFgIPs8uDjz+ybkrKjJday30FoPOQU 7X9RKedL9izNvluUlAvDeiWqipsbSBP3ME0i23Q/4MXYIZqOrPe/GWsdn5zB3Sjvy7EOdkl3knct SlZlQK7HSCX6seeBED4= ) ;; ADDITIONAL SECTION (10 records) ns-01.noaa.gov. 86400 IN A 137.75.116.93 ns-02.noaa.gov. 86400 IN A 137.75.112.7 ns-03.noaa.gov. 86400 IN A 137.75.112.58 ns-01.noaa.gov. 86400 IN AAAA 2610:20:9200:0:137:75:116:93 ns-02.noaa.gov. 86400 IN AAAA 2610:20:9300:0:137:75:112:7 ns-03.noaa.gov. 86400 IN AAAA 2610:20:9300:1:137:75:112:58 ns-01.noaa.gov. 86400 IN RRSIG ( A 8 3 86400 20240825134803 20240726134803 22179 noaa.gov. HYL8cY8GpnQUEMkJMIFgKBaeuh+L6FwRY4puXXhUFq8bq6ly/pn28plpui1PIm418B6kTCoaWL6/ 4f+pwpXS1SlaWYUzKpSoJkva6lOkbomz5tFWfAMgjifyMCUnskwoZJeEW4/yBKWjTGjwHskXNT9P AAamAbjnMQcEEDXBkG8= ) ns-01.noaa.gov. 86400 IN RRSIG ( AAAA 8 3 86400 20240825134803 20240726134803 22179 noaa.gov. lg73oREjlg+KpmIaesqw2Z0qpoi83tSAzLw6dhoE0k+E2DKg6vssV1L//NoJuC0T/e6OqcoqfY7s XruwtmHWRG66idBwJ4B8sCL47T95BmX68lds/9LTF0rc6p+1nR8RVkVh/YioT2KazkxbkwpMVQxz YUhIiMala5Hb6Jrdh3A= ) ns-02.noaa.gov. 86400 IN RRSIG ( A 8 3 86400 20240825134803 20240726134803 22179 noaa.gov. ZvTOx1xE9Pcj2i0A+v0z+cFgpaOlAFZIsOAP0HgtZ5iQkCdhlZLaapMkntZAacWmqcZQv4kixSoN LISdR4kcNFujaskl0Soa/Sjv4eszVzmjHXYDjvEojpOrFGX+783SiveoTRRs3h7rfHDTVEnb0VUO p53IMfm01/qfh0BI/f4= ) ;; { "EDNS-VERSION": 0 }
	ns-01.noaa.gov is authoritative for fishwatch.gov
	Found RRSIG signed by fishwatch.gov zone
	Query to ns-01.noaa.gov for fishwatch.gov/A
	Received 1121 bytes from 137.75.116.93
	;; Response received from [137.75.116.93] 1121 octets ;; HEADER SECTION ;; id = 63870 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 10 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fishwatch.gov. IN A ;; ANSWER SECTION (3 records) fishwatch.gov. 300 IN A 137.75.88.7 fishwatch.gov. 300 IN A 137.75.88.52 fishwatch.gov. 300 IN RRSIG ( A 8 2 300 20240824010121 20240725010121 2140 fishwatch.gov. BGVuFyRFpQ6CvKY2BUHkRIIjf6IWnEb7GV1tVAn5NKVjcqJtKpyEY2gkWusdtDb9fyIOt+rFkhD5 R+HG2kiAz9WFk2YWs0ICOMDre38vxMeOXWzbpkm2c9t1rDe+OT4C+qzxBTDSKZpyVeKi2ojRJf9q 7qr9cU4f0nh0lQp1oJA= ) ;; AUTHORITY SECTION (4 records) fishwatch.gov. 300 IN NS ns-01.noaa.gov. fishwatch.gov. 300 IN NS ns-02.noaa.gov. fishwatch.gov. 300 IN NS ns-03.noaa.gov. fishwatch.gov. 300 IN RRSIG ( NS 8 2 300 20240824010121 20240725010121 2140 fishwatch.gov. CEBomKxDRM4IIUsN2TfXA/OPwJvBy47tiEldCU5nYIIAkCTFgIPs8uDjz+ybkrKjJday30FoPOQU 7X9RKedL9izNvluUlAvDeiWqipsbSBP3ME0i23Q/4MXYIZqOrPe/GWsdn5zB3Sjvy7EOdkl3knct SlZlQK7HSCX6seeBED4= ) ;; ADDITIONAL SECTION (10 records) ns-01.noaa.gov. 86400 IN A 137.75.116.93 ns-02.noaa.gov. 86400 IN A 137.75.112.7 ns-03.noaa.gov. 86400 IN A 137.75.112.58 ns-01.noaa.gov. 86400 IN AAAA 2610:20:9200:0:137:75:116:93 ns-02.noaa.gov. 86400 IN AAAA 2610:20:9300:0:137:75:112:7 ns-03.noaa.gov. 86400 IN AAAA 2610:20:9300:1:137:75:112:58 ns-01.noaa.gov. 86400 IN RRSIG ( A 8 3 86400 20240825134803 20240726134803 22179 noaa.gov. HYL8cY8GpnQUEMkJMIFgKBaeuh+L6FwRY4puXXhUFq8bq6ly/pn28plpui1PIm418B6kTCoaWL6/ 4f+pwpXS1SlaWYUzKpSoJkva6lOkbomz5tFWfAMgjifyMCUnskwoZJeEW4/yBKWjTGjwHskXNT9P AAamAbjnMQcEEDXBkG8= ) ns-01.noaa.gov. 86400 IN RRSIG ( AAAA 8 3 86400 20240825134803 20240726134803 22179 noaa.gov. lg73oREjlg+KpmIaesqw2Z0qpoi83tSAzLw6dhoE0k+E2DKg6vssV1L//NoJuC0T/e6OqcoqfY7s XruwtmHWRG66idBwJ4B8sCL47T95BmX68lds/9LTF0rc6p+1nR8RVkVh/YioT2KazkxbkwpMVQxz YUhIiMala5Hb6Jrdh3A= ) ns-02.noaa.gov. 86400 IN RRSIG ( A 8 3 86400 20240825134803 20240726134803 22179 noaa.gov. ZvTOx1xE9Pcj2i0A+v0z+cFgpaOlAFZIsOAP0HgtZ5iQkCdhlZLaapMkntZAacWmqcZQv4kixSoN LISdR4kcNFujaskl0Soa/Sjv4eszVzmjHXYDjvEojpOrFGX+783SiveoTRRs3h7rfHDTVEnb0VUO p53IMfm01/qfh0BI/f4= ) ;; { "EDNS-VERSION": 0 }
	fishwatch.gov A RR has value 137.75.88.7
	fishwatch.gov A RR has value 137.75.88.52
	Found 1 RRSIGs over A RRset
	`fishwatch.gov. 300 IN RRSIG ( A 8 2 300 20240824010121 20240725010121 2140 fishwatch.gov. BGVuFyRFpQ6CvKY2BUHkRIIjf6IWnEb7GV1tVAn5NKVjcqJtKpyEY2gkWusdtDb9fyIOt+rFkhD5 R+HG2kiAz9WFk2YWs0ICOMDre38vxMeOXWzbpkm2c9t1rDe+OT4C+qzxBTDSKZpyVeKi2ojRJf9q 7qr9cU4f0nh0lQp1oJA= )`
	RRSIG=2140 and DNSKEY=2140 verifies the A RRset

fishwatch.gov

	Query to ns-03.noaa.gov for fishwatch.gov/A
	Received 1121 bytes from 137.75.112.58
	;; Response received from [137.75.112.58] 1121 octets ;; HEADER SECTION ;; id = 29901 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 10 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fishwatch.gov. IN A ;; ANSWER SECTION (3 records) fishwatch.gov. 300 IN A 137.75.88.7 fishwatch.gov. 300 IN A 137.75.88.52 fishwatch.gov. 300 IN RRSIG ( A 8 2 300 20240824010121 20240725010121 2140 fishwatch.gov. BGVuFyRFpQ6CvKY2BUHkRIIjf6IWnEb7GV1tVAn5NKVjcqJtKpyEY2gkWusdtDb9fyIOt+rFkhD5 R+HG2kiAz9WFk2YWs0ICOMDre38vxMeOXWzbpkm2c9t1rDe+OT4C+qzxBTDSKZpyVeKi2ojRJf9q 7qr9cU4f0nh0lQp1oJA= ) ;; AUTHORITY SECTION (4 records) fishwatch.gov. 300 IN NS ns-03.noaa.gov. fishwatch.gov. 300 IN NS ns-01.noaa.gov. fishwatch.gov. 300 IN NS ns-02.noaa.gov. fishwatch.gov. 300 IN RRSIG ( NS 8 2 300 20240824010121 20240725010121 2140 fishwatch.gov. CEBomKxDRM4IIUsN2TfXA/OPwJvBy47tiEldCU5nYIIAkCTFgIPs8uDjz+ybkrKjJday30FoPOQU 7X9RKedL9izNvluUlAvDeiWqipsbSBP3ME0i23Q/4MXYIZqOrPe/GWsdn5zB3Sjvy7EOdkl3knct SlZlQK7HSCX6seeBED4= ) ;; ADDITIONAL SECTION (10 records) ns-01.noaa.gov. 86400 IN A 137.75.116.93 ns-02.noaa.gov. 86400 IN A 137.75.112.7 ns-03.noaa.gov. 86400 IN A 137.75.112.58 ns-01.noaa.gov. 86400 IN AAAA 2610:20:9200:0:137:75:116:93 ns-02.noaa.gov. 86400 IN AAAA 2610:20:9300:0:137:75:112:7 ns-03.noaa.gov. 86400 IN AAAA 2610:20:9300:1:137:75:112:58 ns-01.noaa.gov. 86400 IN RRSIG ( A 8 3 86400 20240825134803 20240726134803 22179 noaa.gov. HYL8cY8GpnQUEMkJMIFgKBaeuh+L6FwRY4puXXhUFq8bq6ly/pn28plpui1PIm418B6kTCoaWL6/ 4f+pwpXS1SlaWYUzKpSoJkva6lOkbomz5tFWfAMgjifyMCUnskwoZJeEW4/yBKWjTGjwHskXNT9P AAamAbjnMQcEEDXBkG8= ) ns-01.noaa.gov. 86400 IN RRSIG ( AAAA 8 3 86400 20240825134803 20240726134803 22179 noaa.gov. lg73oREjlg+KpmIaesqw2Z0qpoi83tSAzLw6dhoE0k+E2DKg6vssV1L//NoJuC0T/e6OqcoqfY7s XruwtmHWRG66idBwJ4B8sCL47T95BmX68lds/9LTF0rc6p+1nR8RVkVh/YioT2KazkxbkwpMVQxz YUhIiMala5Hb6Jrdh3A= ) ns-02.noaa.gov. 86400 IN RRSIG ( A 8 3 86400 20240825134803 20240726134803 22179 noaa.gov. ZvTOx1xE9Pcj2i0A+v0z+cFgpaOlAFZIsOAP0HgtZ5iQkCdhlZLaapMkntZAacWmqcZQv4kixSoN LISdR4kcNFujaskl0Soa/Sjv4eszVzmjHXYDjvEojpOrFGX+783SiveoTRRs3h7rfHDTVEnb0VUO p53IMfm01/qfh0BI/f4= ) ;; { "EDNS-VERSION": 0 }
	ns-03.noaa.gov is authoritative for fishwatch.gov
	Found RRSIG signed by fishwatch.gov zone
	Query to ns-03.noaa.gov for fishwatch.gov/A
	Received 1121 bytes from 137.75.112.58
	;; Response received from [137.75.112.58] 1121 octets ;; HEADER SECTION ;; id = 36536 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 10 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fishwatch.gov. IN A ;; ANSWER SECTION (3 records) fishwatch.gov. 300 IN A 137.75.88.7 fishwatch.gov. 300 IN A 137.75.88.52 fishwatch.gov. 300 IN RRSIG ( A 8 2 300 20240824010121 20240725010121 2140 fishwatch.gov. BGVuFyRFpQ6CvKY2BUHkRIIjf6IWnEb7GV1tVAn5NKVjcqJtKpyEY2gkWusdtDb9fyIOt+rFkhD5 R+HG2kiAz9WFk2YWs0ICOMDre38vxMeOXWzbpkm2c9t1rDe+OT4C+qzxBTDSKZpyVeKi2ojRJf9q 7qr9cU4f0nh0lQp1oJA= ) ;; AUTHORITY SECTION (4 records) fishwatch.gov. 300 IN NS ns-01.noaa.gov. fishwatch.gov. 300 IN NS ns-02.noaa.gov. fishwatch.gov. 300 IN NS ns-03.noaa.gov. fishwatch.gov. 300 IN RRSIG ( NS 8 2 300 20240824010121 20240725010121 2140 fishwatch.gov. CEBomKxDRM4IIUsN2TfXA/OPwJvBy47tiEldCU5nYIIAkCTFgIPs8uDjz+ybkrKjJday30FoPOQU 7X9RKedL9izNvluUlAvDeiWqipsbSBP3ME0i23Q/4MXYIZqOrPe/GWsdn5zB3Sjvy7EOdkl3knct SlZlQK7HSCX6seeBED4= ) ;; ADDITIONAL SECTION (10 records) ns-01.noaa.gov. 86400 IN A 137.75.116.93 ns-02.noaa.gov. 86400 IN A 137.75.112.7 ns-03.noaa.gov. 86400 IN A 137.75.112.58 ns-01.noaa.gov. 86400 IN AAAA 2610:20:9200:0:137:75:116:93 ns-02.noaa.gov. 86400 IN AAAA 2610:20:9300:0:137:75:112:7 ns-03.noaa.gov. 86400 IN AAAA 2610:20:9300:1:137:75:112:58 ns-01.noaa.gov. 86400 IN RRSIG ( A 8 3 86400 20240825134803 20240726134803 22179 noaa.gov. HYL8cY8GpnQUEMkJMIFgKBaeuh+L6FwRY4puXXhUFq8bq6ly/pn28plpui1PIm418B6kTCoaWL6/ 4f+pwpXS1SlaWYUzKpSoJkva6lOkbomz5tFWfAMgjifyMCUnskwoZJeEW4/yBKWjTGjwHskXNT9P AAamAbjnMQcEEDXBkG8= ) ns-01.noaa.gov. 86400 IN RRSIG ( AAAA 8 3 86400 20240825134803 20240726134803 22179 noaa.gov. lg73oREjlg+KpmIaesqw2Z0qpoi83tSAzLw6dhoE0k+E2DKg6vssV1L//NoJuC0T/e6OqcoqfY7s XruwtmHWRG66idBwJ4B8sCL47T95BmX68lds/9LTF0rc6p+1nR8RVkVh/YioT2KazkxbkwpMVQxz YUhIiMala5Hb6Jrdh3A= ) ns-02.noaa.gov. 86400 IN RRSIG ( A 8 3 86400 20240825134803 20240726134803 22179 noaa.gov. ZvTOx1xE9Pcj2i0A+v0z+cFgpaOlAFZIsOAP0HgtZ5iQkCdhlZLaapMkntZAacWmqcZQv4kixSoN LISdR4kcNFujaskl0Soa/Sjv4eszVzmjHXYDjvEojpOrFGX+783SiveoTRRs3h7rfHDTVEnb0VUO p53IMfm01/qfh0BI/f4= ) ;; { "EDNS-VERSION": 0 }
	fishwatch.gov A RR has value 137.75.88.7
	fishwatch.gov A RR has value 137.75.88.52
	Found 1 RRSIGs over A RRset
	`fishwatch.gov. 300 IN RRSIG ( A 8 2 300 20240824010121 20240725010121 2140 fishwatch.gov. BGVuFyRFpQ6CvKY2BUHkRIIjf6IWnEb7GV1tVAn5NKVjcqJtKpyEY2gkWusdtDb9fyIOt+rFkhD5 R+HG2kiAz9WFk2YWs0ICOMDre38vxMeOXWzbpkm2c9t1rDe+OT4C+qzxBTDSKZpyVeKi2ojRJf9q 7qr9cU4f0nh0lQp1oJA= )`
	RRSIG=2140 and DNSKEY=2140 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test fishwatch.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: