DNSSEC Debugger

Domain Name:

Time: 2024-10-13 02:03:58 UTC

Analyzing DNSSEC problems for leo.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to k.root-servers.net for ./DNSKEY
	Received 864 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 864 octets ;; HEADER SECTION ;; id = 53835 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAc0SunbHdS0KFEyZbYII/+tzsrNzIwurKxmJA+0fhAYlTPA/5LrMGkGEqvvufzM0w/CaVtdm 5eWkZYQcsoSKT5bycx0C4jxnLEb3ZiZUQSqu1rWcKGF1fj/GyDWLkOu7a5h3el+gPmglj/4l4V31 ugNYfqYq84vCB+3D6Sodrd+85KyonnzWJ8cS7aZ57x0d0sGqsAKA+6tRnIXjVNVe7Ro5xJuz8IR7 rOxdzfuRLriN+Z00EL3U5E7s9SISU/hDh7Q7N70W1mLMc1o2+tCRGjEWrw4wmCWMzc1kegbLES/d UOWFvPjJz0+AEeWDhd2GqtXk02BzAhdfeIAEIv68FTs= ) ; Key ID = 61050 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20241101000000 20241011000000 20326 . aA+m3YA9Bcrh9TblnApamOx9eSL7dPcKbcFsVBvqD7UlHGz0GY8iHeR8OXvjIKg0Y9qw7mgN1N4v Ok0DXpMAxzbtPeUGEmnvIsGS0TJKF+mFELMOne5Qno7//GMWbaZ5fr7KlMPL514OXzFM+RgA7w5H s28QV/fLAOHsvp7yokvPhZ6wOCHsvkgox/gZ1KAhMJI7zW16NYgBXViFBsjKh6POQeLeT1iH2tYN L+QkVApGib3MN0F4VhcpCPhJp7bsEnCXrWiRxULzq5OyFljKHtbX/0W03PDBQSwSCHq/ute5mksE h3jmJFc/p7OX/zE2/3vluUYY6uR5XXf1I8hbvA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAc0SunbHdS0KFEyZbYII/+tzsrNzIwurKxmJA+0fhAYlTPA/5LrMGkGEqvvufzM0w/CaVtdm 5eWkZYQcsoSKT5bycx0C4jxnLEb3ZiZUQSqu1rWcKGF1fj/GyDWLkOu7a5h3el+gPmglj/4l4V31 ugNYfqYq84vCB+3D6Sodrd+85KyonnzWJ8cS7aZ57x0d0sGqsAKA+6tRnIXjVNVe7Ro5xJuz8IR7 rOxdzfuRLriN+Z00EL3U5E7s9SISU/hDh7Q7N70W1mLMc1o2+tCRGjEWrw4wmCWMzc1kegbLES/d UOWFvPjJz0+AEeWDhd2GqtXk02BzAhdfeIAEIv68FTs= ) ; Key ID = 61050`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20241101000000 20241011000000 20326 . aA+m3YA9Bcrh9TblnApamOx9eSL7dPcKbcFsVBvqD7UlHGz0GY8iHeR8OXvjIKg0Y9qw7mgN1N4v Ok0DXpMAxzbtPeUGEmnvIsGS0TJKF+mFELMOne5Qno7//GMWbaZ5fr7KlMPL514OXzFM+RgA7w5H s28QV/fLAOHsvp7yokvPhZ6wOCHsvkgox/gZ1KAhMJI7zW16NYgBXViFBsjKh6POQeLeT1iH2tYN L+QkVApGib3MN0F4VhcpCPhJp7bsEnCXrWiRxULzq5OyFljKHtbX/0W03PDBQSwSCHq/ute5mksE h3jmJFc/p7OX/zE2/3vluUYY6uR5XXf1I8hbvA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=61050 is now in the chain-of-trust
	Query to d.root-servers.net for leo.gov/A
	Received 614 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 614 octets ;; HEADER SECTION ;; id = 49489 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; leo.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20241025170000 20241012160000 61050 . ZLlUjJoDKe7wpOiKHvbWBEucdgeCqWj6u/YgK3dgXVoIn36IhewTIKKfxaADA8gpLzPgdbJOr4kK B5UiyebXQZ+B3Ij+AKPg3D3vlfLqokeVA6lFu9gMknsRVSqb+6SQuDkxEG/WiBVjKq75tZ4WI45l PhESgfL9Cm64yhJzVIolZg2eD5yCByYRYj9qNG1bc755yga2L2eMMlL4Z5+YuUgsgvrrVyiY52d0 FwbcJqewZSKT0ZqlHInxrEb7qZ7yX71B98H7A6FplrS4gEDcYMdtiVxHvNBv21Y4gCSe1lZAj0vq lwbQ9yr933B4rAJ5dCnpnnK5MJA1mYdPPxAM6Q== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to k.root-servers.net for gov/DNSKEY
	Received 610 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 610 octets ;; HEADER SECTION ;; id = 37349 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20241025170000 20241012160000 61050 . ZLlUjJoDKe7wpOiKHvbWBEucdgeCqWj6u/YgK3dgXVoIn36IhewTIKKfxaADA8gpLzPgdbJOr4kK B5UiyebXQZ+B3Ij+AKPg3D3vlfLqokeVA6lFu9gMknsRVSqb+6SQuDkxEG/WiBVjKq75tZ4WI45l PhESgfL9Cm64yhJzVIolZg2eD5yCByYRYj9qNG1bc755yga2L2eMMlL4Z5+YuUgsgvrrVyiY52d0 FwbcJqewZSKT0ZqlHInxrEb7qZ7yX71B98H7A6FplrS4gEDcYMdtiVxHvNBv21Y4gCSe1lZAj0vq lwbQ9yr933B4rAJ5dCnpnnK5MJA1mYdPPxAM6Q== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to h.root-servers.net for gov/DS
	Received 367 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 367 octets ;; HEADER SECTION ;; id = 26160 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20241025170000 20241012160000 61050 . ZLlUjJoDKe7wpOiKHvbWBEucdgeCqWj6u/YgK3dgXVoIn36IhewTIKKfxaADA8gpLzPgdbJOr4kK B5UiyebXQZ+B3Ij+AKPg3D3vlfLqokeVA6lFu9gMknsRVSqb+6SQuDkxEG/WiBVjKq75tZ4WI45l PhESgfL9Cm64yhJzVIolZg2eD5yCByYRYj9qNG1bc755yga2L2eMMlL4Z5+YuUgsgvrrVyiY52d0 FwbcJqewZSKT0ZqlHInxrEb7qZ7yX71B98H7A6FplrS4gEDcYMdtiVxHvNBv21Y4gCSe1lZAj0vq lwbQ9yr933B4rAJ5dCnpnnK5MJA1mYdPPxAM6Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20241025170000 20241012160000 61050 . ZLlUjJoDKe7wpOiKHvbWBEucdgeCqWj6u/YgK3dgXVoIn36IhewTIKKfxaADA8gpLzPgdbJOr4kK B5UiyebXQZ+B3Ij+AKPg3D3vlfLqokeVA6lFu9gMknsRVSqb+6SQuDkxEG/WiBVjKq75tZ4WI45l PhESgfL9Cm64yhJzVIolZg2eD5yCByYRYj9qNG1bc755yga2L2eMMlL4Z5+YuUgsgvrrVyiY52d0 FwbcJqewZSKT0ZqlHInxrEb7qZ7yX71B98H7A6FplrS4gEDcYMdtiVxHvNBv21Y4gCSe1lZAj0vq lwbQ9yr933B4rAJ5dCnpnnK5MJA1mYdPPxAM6Q== )`
	RRSIG=61050 and DNSKEY=61050 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to a.ns.gov for gov/DNSKEY
	Received 291 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 291 octets ;; HEADER SECTION ;; id = 35712 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; Key ID = 2536 gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; Key ID = 35496 gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20241130110534 20240930110534 2536 gov. h+Iyb0tqmydmCz6R4wG6Ldr2zopf1WBr/SM7MutctneoFWjCjO/k0ErdVLVoXEXenkMNv5My6iIv oCnmSrJeOQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; Key ID = 2536`
	`gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; Key ID = 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20241130110534 20240930110534 2536 gov. h+Iyb0tqmydmCz6R4wG6Ldr2zopf1WBr/SM7MutctneoFWjCjO/k0ErdVLVoXEXenkMNv5My6iIv oCnmSrJeOQ== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to b.ns.gov for leo.gov/A
	Received 396 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 396 octets ;; HEADER SECTION ;; id = 60950 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; leo.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) leo.gov. 10800 IN NS ns1.cjis.gov. leo.gov. 10800 IN NS ns2.cjis.gov. leo.gov. 3600 IN DS ( 30679 8 2 77896e447d8dfb78ffec117bb3e46ebe5543836bdd5576f48140104da0f45b60 ) leo.gov. 3600 IN DS 7270 8 1 778ceea4d86867742076344e9972710a83a7107b leo.gov. 3600 IN DS ( 7270 8 2 36bd60e7beb1213fd62ea0bb69b794c7a17bb5369bb4e58f06df5877e98150fc ) leo.gov. 3600 IN RRSIG ( DS 13 2 3600 20241014030358 20241012010358 35496 gov. 8YSCk9GSWLwXnVwU85S8OruW1F+smsyRf9wo8NUThp6GUmpvR89h128cfD1GqyAjFBN0wToA1o7n PWbfGe3OEw== ) ;; ADDITIONAL SECTION (5 records) ns1.cjis.gov. 3600 IN A 153.31.113.139 ns1.cjis.gov. 3600 IN AAAA 2607:f330:2002:403::201 ns2.cjis.gov. 3600 IN A 153.31.192.139 ns2.cjis.gov. 3600 IN AAAA 2607:f330:2003:403::201 ;; { "EDNS-VERSION": 0 }
	Query to c.ns.gov for leo.gov/DNSKEY
	Received 396 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 396 octets ;; HEADER SECTION ;; id = 60725 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; leo.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) leo.gov. 10800 IN NS ns1.cjis.gov. leo.gov. 10800 IN NS ns2.cjis.gov. leo.gov. 3600 IN DS ( 30679 8 2 77896e447d8dfb78ffec117bb3e46ebe5543836bdd5576f48140104da0f45b60 ) leo.gov. 3600 IN DS 7270 8 1 778ceea4d86867742076344e9972710a83a7107b leo.gov. 3600 IN DS ( 7270 8 2 36bd60e7beb1213fd62ea0bb69b794c7a17bb5369bb4e58f06df5877e98150fc ) leo.gov. 3600 IN RRSIG ( DS 13 2 3600 20241014030358 20241012010358 35496 gov. 6pea0t1jOrZXSxDEdnBEc6M6CI6u6kpPvgpt9bNln/n+SYN9KhS35cC5hlJUw9QmStsFod5X6TUH Fky4xWjxvw== ) ;; ADDITIONAL SECTION (5 records) ns1.cjis.gov. 3600 IN A 153.31.113.139 ns1.cjis.gov. 3600 IN AAAA 2607:f330:2002:403::201 ns2.cjis.gov. 3600 IN A 153.31.192.139 ns2.cjis.gov. 3600 IN AAAA 2607:f330:2003:403::201 ;; { "EDNS-VERSION": 0 }
	Found child zone leo.gov

leo.gov

	Checking DS between gov and leo.gov
	Query to a.ns.gov for leo.gov/DS
	Received 267 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 267 octets ;; HEADER SECTION ;; id = 44903 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; leo.gov. IN DS ;; ANSWER SECTION (4 records) leo.gov. 3600 IN DS ( 30679 8 2 77896e447d8dfb78ffec117bb3e46ebe5543836bdd5576f48140104da0f45b60 ) leo.gov. 3600 IN DS 7270 8 1 778ceea4d86867742076344e9972710a83a7107b leo.gov. 3600 IN DS ( 7270 8 2 36bd60e7beb1213fd62ea0bb69b794c7a17bb5369bb4e58f06df5877e98150fc ) leo.gov. 3600 IN RRSIG ( DS 13 2 3600 20241014030358 20241012010358 35496 gov. xIrFPaM9bSnFdBd18JdIYjzRBnUiRB1Hfk0j6O9kr19ESJnw3KuyUfXY7sn1bSW7aRtLQ/EebsS9 vCsGqLzjpw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DS records for leo.gov in the gov zone
	DS=7270/SHA-1 uses a deprecated digest algorithm
	DS=30679/SHA-256 has algorithm RSASHA256
	DS=7270/SHA-1 has algorithm RSASHA256
	DS=7270/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`leo.gov. 3600 IN RRSIG ( DS 13 2 3600 20241014030358 20241012010358 35496 gov. xIrFPaM9bSnFdBd18JdIYjzRBnUiRB1Hfk0j6O9kr19ESJnw3KuyUfXY7sn1bSW7aRtLQ/EebsS9 vCsGqLzjpw== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=30679/SHA-256 is now in the chain-of-trust
	DS=7270/SHA-1 is now in the chain-of-trust
	`leo.gov. 3600 IN DS ( 30679 8 2 77896e447d8dfb78ffec117bb3e46ebe5543836bdd5576f48140104da0f45b60 )`
	`leo.gov. 3600 IN DS 7270 8 1 778ceea4d86867742076344e9972710a83a7107b`
	`leo.gov. 3600 IN DS ( 7270 8 2 36bd60e7beb1213fd62ea0bb69b794c7a17bb5369bb4e58f06df5877e98150fc )`
	Query to ns2.cjis.gov for leo.gov/DNSKEY
	Received 1493 bytes from 153.31.192.139
	;; Response received from [153.31.192.139] 1493 octets ;; HEADER SECTION ;; id = 3231 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; leo.gov. IN DNSKEY ;; ANSWER SECTION (6 records) leo.gov. 172800 IN DNSKEY ( 257 3 8 AwEAAdTb4/dbu0/xNyLjRQLV2H69UB5tEj1/XWwMgSAhUFsWgTjyLkMV+N3ffZkOCuX3olZFD6t5 9km3uI9bZ+hQ5DlgXYhvEf1W/cqsgcygaEPCBt4I1MVbHCos6lcO66o49l+4/3uz8L1QNbA9QU5q jT5vrSbgNFT3NsXr1tAKfJewXWN3STQOG/Em0VLtHxoVN1DMzEuoPYp6amPN6bu0BY+/jD6sdpwK xydrKujyjg1BGJYd+aFdERVEFYBPswcGwWMaF8cDd04WJz6Dkao1CPr6X1rLMZyiftXEmYi50BSy x2Cle2LzAQ+d6jEP1eGJh1gpBeNt5h1Mh0IkaqN5sI0= ) ; Key ID = 30679 leo.gov. 172800 IN DNSKEY ( 256 3 8 AwEAAfJRjL8BGSJ0ZjwH1W+otjteeLse2E3+cgojgzdlo3tTBiPJ9pkDszM49Hjd3jUZ1cO7dqgw Ulh33HvPl1uFWwgaEqzbbuHtvAAQyDVDwjVRv1ENH0/W2MEYIZ9vE6LxY//azHt35AvMo0BKdlLw lkb2dSGUqHCGI3uCYREZ3iTf ) ; Key ID = 10158 leo.gov. 172800 IN DNSKEY ( 257 3 8 AwEAAeO1abl1SeCqC03Jft2dXA5ltIpLPtzgljfckqYMw9UTPG5W/WeXIhrmED61hirglg3va+rj qm3jGssa20FxrWfbikan0igIfiF2jnk+5iW2+qAwNPGybBOx6hGU0PzolXPPZixYFlgBprG+Pvs4 2mLll+jrfIuuhxfWu5buCxu4VsrKqA1bYIP+AFZB2SglQIST2JnubLhzxJfR6XGDL6+qMuRn4tb+ 4GPCELmQ2yW6uSjQbsaa/JwVo7qKIvGgGP6dYCUBAbLFoS2VTGpMkJLkEZk0g6ykYBf2vc0q6IR0 9RF+sHjM33do1lczwHveNeIE1qnvTwrUea5+kUglfdM= ) ; Key ID = 25351 leo.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20241016161838 20241012161553 10158 leo.gov. 0KlGJO0pR8tSkdyaa8uEGPw77EB2Dv8P/NlnhNM5EHWRrIqOYJfvEtHWSfUAz0ByqmuVTeFZAQYX AAabwYsCL2N/M5l2El+owmMJA360eyuRiJ9aGS3mSwkYcKpk9jUzPuFEL4tuD5ddP9CTAxOR9SfY OI0m1SgVSUOs9f2+vz8= ) leo.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20241016161838 20241012161553 25351 leo.gov. ZUlnTa2LsQEpPuJ6/eZwqgZdNL7BtdSjEzLJzDNNUp5/BNyca4+pIIOABjJOvGl63kr03RO3nIdT lJHLl43Hjzb+1b0JwnnTq86YgSZWyw7++4wdtQwicA3xE6CwjMb8AKu/pUsYsTXief5aJXkkMp5f NKJoSfKQdEwblLIXgyzipgCA2PVoRUXVxU8RTPZmoVCzJmgaE+FQ96GYoIRDHIBBwznr+s3qA3t0 NT/t8Kdfmia7AoGCPoapJeC+AXRpSRVp/baVpljSz9XL3gk9LR+9U5CQk6YUBIy+hg88qNhVyCf7 OTvMYtGi9UGSjEk5iVz0rNq85PwowzNGMEtaXg== ) leo.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20241016161838 20241012161553 30679 leo.gov. Lr24EvwEZQ5q5/ZxXVnLJ5G0fu0IKsjJVvaQ3pD0umVq1OMVgyFbT96PWcNnERIE3PM3sCQpvvVZ q5BSbRGSrhItbs3GXe1ixHuSqQlCPx6f8C5ZXA59HejfQGzMEv6rswdeHgF8RYME5i+RUm2mzx4G goGnzX409GKWpcB+mXNn62cJg4DhNMoLhquk+qf27lpY1jp4Hv8CMJMNb83bcwNqAR8JfnfPD3QX EnnJi9BlxmDW5S6Y3mEjVKj0huz7CSAbEPFAu1Cwycgak7Y2FVmMMkIH86gvvHF9ytRTeF751eoc wiBQckwgIhUaWkIY84XsHLnYeJRARg9ZBLPQDg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for leo.gov
	`leo.gov. 172800 IN DNSKEY ( 257 3 8 AwEAAdTb4/dbu0/xNyLjRQLV2H69UB5tEj1/XWwMgSAhUFsWgTjyLkMV+N3ffZkOCuX3olZFD6t5 9km3uI9bZ+hQ5DlgXYhvEf1W/cqsgcygaEPCBt4I1MVbHCos6lcO66o49l+4/3uz8L1QNbA9QU5q jT5vrSbgNFT3NsXr1tAKfJewXWN3STQOG/Em0VLtHxoVN1DMzEuoPYp6amPN6bu0BY+/jD6sdpwK xydrKujyjg1BGJYd+aFdERVEFYBPswcGwWMaF8cDd04WJz6Dkao1CPr6X1rLMZyiftXEmYi50BSy x2Cle2LzAQ+d6jEP1eGJh1gpBeNt5h1Mh0IkaqN5sI0= ) ; Key ID = 30679`
	`leo.gov. 172800 IN DNSKEY ( 256 3 8 AwEAAfJRjL8BGSJ0ZjwH1W+otjteeLse2E3+cgojgzdlo3tTBiPJ9pkDszM49Hjd3jUZ1cO7dqgw Ulh33HvPl1uFWwgaEqzbbuHtvAAQyDVDwjVRv1ENH0/W2MEYIZ9vE6LxY//azHt35AvMo0BKdlLw lkb2dSGUqHCGI3uCYREZ3iTf ) ; Key ID = 10158`
	`leo.gov. 172800 IN DNSKEY ( 257 3 8 AwEAAeO1abl1SeCqC03Jft2dXA5ltIpLPtzgljfckqYMw9UTPG5W/WeXIhrmED61hirglg3va+rj qm3jGssa20FxrWfbikan0igIfiF2jnk+5iW2+qAwNPGybBOx6hGU0PzolXPPZixYFlgBprG+Pvs4 2mLll+jrfIuuhxfWu5buCxu4VsrKqA1bYIP+AFZB2SglQIST2JnubLhzxJfR6XGDL6+qMuRn4tb+ 4GPCELmQ2yW6uSjQbsaa/JwVo7qKIvGgGP6dYCUBAbLFoS2VTGpMkJLkEZk0g6ykYBf2vc0q6IR0 9RF+sHjM33do1lczwHveNeIE1qnvTwrUea5+kUglfdM= ) ; Key ID = 25351`
	DNSKEY=30679/SEP is now in the chain-of-trust
	DS=30679/SHA-256 verifies DNSKEY=30679/SEP
	DS=7270/SHA-1 is published, but a corresponding DNSKEY is not
	Found 3 RRSIGs over DNSKEY RRset
	`leo.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20241016161838 20241012161553 10158 leo.gov. 0KlGJO0pR8tSkdyaa8uEGPw77EB2Dv8P/NlnhNM5EHWRrIqOYJfvEtHWSfUAz0ByqmuVTeFZAQYX AAabwYsCL2N/M5l2El+owmMJA360eyuRiJ9aGS3mSwkYcKpk9jUzPuFEL4tuD5ddP9CTAxOR9SfY OI0m1SgVSUOs9f2+vz8= )`
	`leo.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20241016161838 20241012161553 25351 leo.gov. ZUlnTa2LsQEpPuJ6/eZwqgZdNL7BtdSjEzLJzDNNUp5/BNyca4+pIIOABjJOvGl63kr03RO3nIdT lJHLl43Hjzb+1b0JwnnTq86YgSZWyw7++4wdtQwicA3xE6CwjMb8AKu/pUsYsTXief5aJXkkMp5f NKJoSfKQdEwblLIXgyzipgCA2PVoRUXVxU8RTPZmoVCzJmgaE+FQ96GYoIRDHIBBwznr+s3qA3t0 NT/t8Kdfmia7AoGCPoapJeC+AXRpSRVp/baVpljSz9XL3gk9LR+9U5CQk6YUBIy+hg88qNhVyCf7 OTvMYtGi9UGSjEk5iVz0rNq85PwowzNGMEtaXg== )`
	`leo.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20241016161838 20241012161553 30679 leo.gov. Lr24EvwEZQ5q5/ZxXVnLJ5G0fu0IKsjJVvaQ3pD0umVq1OMVgyFbT96PWcNnERIE3PM3sCQpvvVZ q5BSbRGSrhItbs3GXe1ixHuSqQlCPx6f8C5ZXA59HejfQGzMEv6rswdeHgF8RYME5i+RUm2mzx4G goGnzX409GKWpcB+mXNn62cJg4DhNMoLhquk+qf27lpY1jp4Hv8CMJMNb83bcwNqAR8JfnfPD3QX EnnJi9BlxmDW5S6Y3mEjVKj0huz7CSAbEPFAu1Cwycgak7Y2FVmMMkIH86gvvHF9ytRTeF751eoc wiBQckwgIhUaWkIY84XsHLnYeJRARg9ZBLPQDg== )`
	RRSIG=10158 and DNSKEY=10158 verifies the DNSKEY RRset
	RRSIG=25351 and DNSKEY=25351/SEP verifies the DNSKEY RRset
	RRSIG=30679 and DNSKEY=30679/SEP verifies the DNSKEY RRset
	DNSKEY=10158 is now in the chain-of-trust
	DNSKEY=25351/SEP is now in the chain-of-trust
	Query to ns2.cjis.gov for leo.gov/A
	Received 518 bytes from 153.31.192.139
	;; Response received from [153.31.192.139] 518 octets ;; HEADER SECTION ;; id = 54644 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; leo.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) leo.gov. 60 IN SOA ( ns1.cjis.gov. dns-admin.leo.gov. 36603 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) leo.gov. 60 IN RRSIG ( SOA 8 2 60 20241016200246 20241012190246 10158 leo.gov. sHczG4vQ5zpBseFzGdLXdpeXOHbRNXilt2O9IZzDWRbTB/cZ4EodP/hfmFe42OLXkkOX93jcgUB2 1bovqFvM5ZzceiqUokxAyqM53kkCazvQ/fmH/+rfzrHRXP8anF4LDjvzk2OCsHCt57M2kbqM0zPL f6Zc6pnq0SqE7IjKzTk= ) P0HTFGJ7AIIGO51ONMC01Q1VAUGOPV12.leo.gov. 900 IN NSEC3 ( 1 0 10 795935faa9870990f2c2 ueprsb9lokcfv75p5i70cjm1k832pa96 NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM CAA ) P0HTFGJ7AIIGO51ONMC01Q1VAUGOPV12.leo.gov. 900 IN RRSIG ( NSEC3 8 3 900 20241016103709 20241012095848 10158 leo.gov. 8XVHiQ/a8mqBJHGmcAL6nRveLa8lmvZIp6hX/Bnq9lO2lqTxJVII7TZRfGScy+3J+cI80Na7M8Xm Z+Nlr2JtPtSN54h8bRlZPpUDVzG4kDm7LDy11RFFDacftrAtOmJvh7LmdxwzX8MfYYOajXCSyfzR wCB37j0oemIEyc4/LGA= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.cjis.gov is authoritative for leo.gov
	Found RRSIG signed by leo.gov zone
	Query to ns1.cjis.gov for leo.gov/SOA
	Received 258 bytes from 153.31.113.139
	;; Response received from [153.31.113.139] 258 octets ;; HEADER SECTION ;; id = 63834 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; leo.gov. IN SOA ;; ANSWER SECTION (2 records) leo.gov. 60 IN SOA ( ns1.cjis.gov. dns-admin.leo.gov. 36603 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) leo.gov. 60 IN RRSIG ( SOA 8 2 60 20241016200246 20241012190246 10158 leo.gov. sHczG4vQ5zpBseFzGdLXdpeXOHbRNXilt2O9IZzDWRbTB/cZ4EodP/hfmFe42OLXkkOX93jcgUB2 1bovqFvM5ZzceiqUokxAyqM53kkCazvQ/fmH/+rfzrHRXP8anF4LDjvzk2OCsHCt57M2kbqM0zPL f6Zc6pnq0SqE7IjKzTk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns2.cjis.gov for leo.gov/A
	Received 518 bytes from 153.31.192.139
	;; Response received from [153.31.192.139] 518 octets ;; HEADER SECTION ;; id = 43352 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; leo.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) leo.gov. 60 IN SOA ( ns1.cjis.gov. dns-admin.leo.gov. 36603 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) leo.gov. 60 IN RRSIG ( SOA 8 2 60 20241016200246 20241012190246 10158 leo.gov. sHczG4vQ5zpBseFzGdLXdpeXOHbRNXilt2O9IZzDWRbTB/cZ4EodP/hfmFe42OLXkkOX93jcgUB2 1bovqFvM5ZzceiqUokxAyqM53kkCazvQ/fmH/+rfzrHRXP8anF4LDjvzk2OCsHCt57M2kbqM0zPL f6Zc6pnq0SqE7IjKzTk= ) P0HTFGJ7AIIGO51ONMC01Q1VAUGOPV12.leo.gov. 900 IN NSEC3 ( 1 0 10 795935faa9870990f2c2 ueprsb9lokcfv75p5i70cjm1k832pa96 NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM CAA ) P0HTFGJ7AIIGO51ONMC01Q1VAUGOPV12.leo.gov. 900 IN RRSIG ( NSEC3 8 3 900 20241016103709 20241012095848 10158 leo.gov. 8XVHiQ/a8mqBJHGmcAL6nRveLa8lmvZIp6hX/Bnq9lO2lqTxJVII7TZRfGScy+3J+cI80Na7M8Xm Z+Nlr2JtPtSN54h8bRlZPpUDVzG4kDm7LDy11RFFDacftrAtOmJvh7LmdxwzX8MfYYOajXCSyfzR wCB37j0oemIEyc4/LGA= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`leo.gov. 60 IN RRSIG ( SOA 8 2 60 20241016200246 20241012190246 10158 leo.gov. sHczG4vQ5zpBseFzGdLXdpeXOHbRNXilt2O9IZzDWRbTB/cZ4EodP/hfmFe42OLXkkOX93jcgUB2 1bovqFvM5ZzceiqUokxAyqM53kkCazvQ/fmH/+rfzrHRXP8anF4LDjvzk2OCsHCt57M2kbqM0zPL f6Zc6pnq0SqE7IjKzTk= )`
	RRSIG=10158 and DNSKEY=10158 verifies the SOA RRset

leo.gov

	Query to ns1.cjis.gov for leo.gov/A
	Received 518 bytes from 153.31.113.139
	;; Response received from [153.31.113.139] 518 octets ;; HEADER SECTION ;; id = 21926 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; leo.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) leo.gov. 60 IN SOA ( ns1.cjis.gov. dns-admin.leo.gov. 36603 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) leo.gov. 60 IN RRSIG ( SOA 8 2 60 20241016200246 20241012190246 10158 leo.gov. sHczG4vQ5zpBseFzGdLXdpeXOHbRNXilt2O9IZzDWRbTB/cZ4EodP/hfmFe42OLXkkOX93jcgUB2 1bovqFvM5ZzceiqUokxAyqM53kkCazvQ/fmH/+rfzrHRXP8anF4LDjvzk2OCsHCt57M2kbqM0zPL f6Zc6pnq0SqE7IjKzTk= ) P0HTFGJ7AIIGO51ONMC01Q1VAUGOPV12.leo.gov. 900 IN NSEC3 ( 1 0 10 795935faa9870990f2c2 ueprsb9lokcfv75p5i70cjm1k832pa96 NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM CAA ) P0HTFGJ7AIIGO51ONMC01Q1VAUGOPV12.leo.gov. 900 IN RRSIG ( NSEC3 8 3 900 20241016103709 20241012095848 10158 leo.gov. 8XVHiQ/a8mqBJHGmcAL6nRveLa8lmvZIp6hX/Bnq9lO2lqTxJVII7TZRfGScy+3J+cI80Na7M8Xm Z+Nlr2JtPtSN54h8bRlZPpUDVzG4kDm7LDy11RFFDacftrAtOmJvh7LmdxwzX8MfYYOajXCSyfzR wCB37j0oemIEyc4/LGA= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.cjis.gov is authoritative for leo.gov
	Found RRSIG signed by leo.gov zone
	Query to ns1.cjis.gov for leo.gov/A
	Received 518 bytes from 153.31.113.139
	;; Response received from [153.31.113.139] 518 octets ;; HEADER SECTION ;; id = 6043 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; leo.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) leo.gov. 60 IN SOA ( ns1.cjis.gov. dns-admin.leo.gov. 36603 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) leo.gov. 60 IN RRSIG ( SOA 8 2 60 20241016200246 20241012190246 10158 leo.gov. sHczG4vQ5zpBseFzGdLXdpeXOHbRNXilt2O9IZzDWRbTB/cZ4EodP/hfmFe42OLXkkOX93jcgUB2 1bovqFvM5ZzceiqUokxAyqM53kkCazvQ/fmH/+rfzrHRXP8anF4LDjvzk2OCsHCt57M2kbqM0zPL f6Zc6pnq0SqE7IjKzTk= ) P0HTFGJ7AIIGO51ONMC01Q1VAUGOPV12.leo.gov. 900 IN NSEC3 ( 1 0 10 795935faa9870990f2c2 ueprsb9lokcfv75p5i70cjm1k832pa96 NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM CAA ) P0HTFGJ7AIIGO51ONMC01Q1VAUGOPV12.leo.gov. 900 IN RRSIG ( NSEC3 8 3 900 20241016103709 20241012095848 10158 leo.gov. 8XVHiQ/a8mqBJHGmcAL6nRveLa8lmvZIp6hX/Bnq9lO2lqTxJVII7TZRfGScy+3J+cI80Na7M8Xm Z+Nlr2JtPtSN54h8bRlZPpUDVzG4kDm7LDy11RFFDacftrAtOmJvh7LmdxwzX8MfYYOajXCSyfzR wCB37j0oemIEyc4/LGA= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`leo.gov. 60 IN RRSIG ( SOA 8 2 60 20241016200246 20241012190246 10158 leo.gov. sHczG4vQ5zpBseFzGdLXdpeXOHbRNXilt2O9IZzDWRbTB/cZ4EodP/hfmFe42OLXkkOX93jcgUB2 1bovqFvM5ZzceiqUokxAyqM53kkCazvQ/fmH/+rfzrHRXP8anF4LDjvzk2OCsHCt57M2kbqM0zPL f6Zc6pnq0SqE7IjKzTk= )`
	RRSIG=10158 and DNSKEY=10158 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test leo.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: