DNSSEC Debugger - llnl.gov

Domain Name:

Time: 2024-07-27 03:07:47 UTC

Analyzing DNSSEC problems for llnl.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 865 octets ;; HEADER SECTION ;; id = 819 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAdSiy6sslYrcZSGcuMEK4DtE8DZZY1A08kAsviAD49tocYO5m37AvIOyzeiKBWuPuJ4m9u5H onCM/ntxklZKYFyMftv8XoRwbiXdpSjfdpNHiMYTTV2oDUNMjdLFnF6HYSY48xrPbevQOYbAFGHp xqcXAQT0+BaBiAx3Ls6lXBQ3/hSVOprvDWJCQiI2OT+9+saKLddSIX6DwTVy0S5T4YY4EGg5R3c/ eKUb2/8XgKWUzlOIZsVAZZUSTKW0tX54ccAALO7Grvsx/NW62jc1xv6wWAXocOEVgB7+4Lzb7q9p 5o30+sYoGpOsKgFvMSy4oCZTQMQx2Sjd/NG2bMMw6nM= ) ; Key ID = 20038 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240811000000 20240721000000 20326 . oHsHLvNMC6b1tY+OF7BG9etZbZMixRQiBD6gzpzdD32m4l0Vdh6yO0vA6ECQ3PMHihplvZGlYgZc aow5WFWod7FGAufSncGrrX+55sXKn4I/cZhBfPYh3WCCI+H7Ug29tV81VkeHSJgVd3q5LfUVYkun Czoysi01iU48KefmKZAGqzPINkOwRJT76+lyrOzSVQWvYStWsR5EGSvPQ1/tJQXOIzaEzuDDFp50 2fCJqX9CK9LcjCeleXpeDfdH+7Kk1TqRMrRHt3ehRsqh4yuR5buq+p+lCsHht28vdgjADBehrqmb hv6MGoBE3QK+rW5xuHqlu3jRV15JBY3/NnDSyQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdSiy6sslYrcZSGcuMEK4DtE8DZZY1A08kAsviAD49tocYO5m37AvIOyzeiKBWuPuJ4m9u5H onCM/ntxklZKYFyMftv8XoRwbiXdpSjfdpNHiMYTTV2oDUNMjdLFnF6HYSY48xrPbevQOYbAFGHp xqcXAQT0+BaBiAx3Ls6lXBQ3/hSVOprvDWJCQiI2OT+9+saKLddSIX6DwTVy0S5T4YY4EGg5R3c/ eKUb2/8XgKWUzlOIZsVAZZUSTKW0tX54ccAALO7Grvsx/NW62jc1xv6wWAXocOEVgB7+4Lzb7q9p 5o30+sYoGpOsKgFvMSy4oCZTQMQx2Sjd/NG2bMMw6nM= ) ; Key ID = 20038`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240811000000 20240721000000 20326 . oHsHLvNMC6b1tY+OF7BG9etZbZMixRQiBD6gzpzdD32m4l0Vdh6yO0vA6ECQ3PMHihplvZGlYgZc aow5WFWod7FGAufSncGrrX+55sXKn4I/cZhBfPYh3WCCI+H7Ug29tV81VkeHSJgVd3q5LfUVYkun Czoysi01iU48KefmKZAGqzPINkOwRJT76+lyrOzSVQWvYStWsR5EGSvPQ1/tJQXOIzaEzuDDFp50 2fCJqX9CK9LcjCeleXpeDfdH+7Kk1TqRMrRHt3ehRsqh4yuR5buq+p+lCsHht28vdgjADBehrqmb hv6MGoBE3QK+rW5xuHqlu3jRV15JBY3/NnDSyQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=20038 is now in the chain-of-trust
	Query to b.root-servers.net for llnl.gov/A
	Received 615 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 615 octets ;; HEADER SECTION ;; id = 63221 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; llnl.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240808170000 20240726160000 20038 . MkhK+ObGfAmfWylt1G+YckaU7tEEp0RHlsKq8Ht9QUBgHDl1a0F5AY5Ac0+yU+nvVs9ulbKAyUHQ 08q9/xB9+4ahH5t3zz6bRcZ+fQKZq4w6uuT7wLIQNrxv2fV3LwWNJmP9c7hbso9l4V5q9KRicgvC 4nOoOtjiFMrdS9lDi7oTgyhfqWOp9fTUvGZ6pylfJS/TESnPx5rOUdbObLy6XuzyBra2jXk57RyZ dcHOwiMib1i3kXQpRp3+UPxSiXqxZlM2Ptzyxho6R1hrxyqU8J2QZVfk6y2eN8QhUHzQPeVjzbsD OJSlzrqZY1Ql1GwjbEAj7POKZYrf/fAq57MriA== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN A 199.33.231.1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN A 199.33.232.1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN A 199.33.233.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to l.root-servers.net for gov/DNSKEY
	Received 610 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 610 octets ;; HEADER SECTION ;; id = 42958 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240808170000 20240726160000 20038 . MkhK+ObGfAmfWylt1G+YckaU7tEEp0RHlsKq8Ht9QUBgHDl1a0F5AY5Ac0+yU+nvVs9ulbKAyUHQ 08q9/xB9+4ahH5t3zz6bRcZ+fQKZq4w6uuT7wLIQNrxv2fV3LwWNJmP9c7hbso9l4V5q9KRicgvC 4nOoOtjiFMrdS9lDi7oTgyhfqWOp9fTUvGZ6pylfJS/TESnPx5rOUdbObLy6XuzyBra2jXk57RyZ dcHOwiMib1i3kXQpRp3+UPxSiXqxZlM2Ptzyxho6R1hrxyqU8J2QZVfk6y2eN8QhUHzQPeVjzbsD OJSlzrqZY1Ql1GwjbEAj7POKZYrf/fAq57MriA== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to l.root-servers.net for gov/DS
	Received 367 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 367 octets ;; HEADER SECTION ;; id = 3386 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240808170000 20240726160000 20038 . MkhK+ObGfAmfWylt1G+YckaU7tEEp0RHlsKq8Ht9QUBgHDl1a0F5AY5Ac0+yU+nvVs9ulbKAyUHQ 08q9/xB9+4ahH5t3zz6bRcZ+fQKZq4w6uuT7wLIQNrxv2fV3LwWNJmP9c7hbso9l4V5q9KRicgvC 4nOoOtjiFMrdS9lDi7oTgyhfqWOp9fTUvGZ6pylfJS/TESnPx5rOUdbObLy6XuzyBra2jXk57RyZ dcHOwiMib1i3kXQpRp3+UPxSiXqxZlM2Ptzyxho6R1hrxyqU8J2QZVfk6y2eN8QhUHzQPeVjzbsD OJSlzrqZY1Ql1GwjbEAj7POKZYrf/fAq57MriA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20240808170000 20240726160000 20038 . MkhK+ObGfAmfWylt1G+YckaU7tEEp0RHlsKq8Ht9QUBgHDl1a0F5AY5Ac0+yU+nvVs9ulbKAyUHQ 08q9/xB9+4ahH5t3zz6bRcZ+fQKZq4w6uuT7wLIQNrxv2fV3LwWNJmP9c7hbso9l4V5q9KRicgvC 4nOoOtjiFMrdS9lDi7oTgyhfqWOp9fTUvGZ6pylfJS/TESnPx5rOUdbObLy6XuzyBra2jXk57RyZ dcHOwiMib1i3kXQpRp3+UPxSiXqxZlM2Ptzyxho6R1hrxyqU8J2QZVfk6y2eN8QhUHzQPeVjzbsD OJSlzrqZY1Ql1GwjbEAj7POKZYrf/fAq57MriA== )`
	RRSIG=20038 and DNSKEY=20038 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to c.ns.gov for gov/DNSKEY
	Received 291 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 291 octets ;; HEADER SECTION ;; id = 4478 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; Key ID = 2536 gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; Key ID = 35496 gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240919110526 20240720110526 2536 gov. HdS8shIfEbsTrkW5QWcemVuIGkuI/xGvzvDYxBTf/LuRRNzN5FvUA1PbOTLXYLEfPZkeLTC07umN zFbL4Pqx9w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; Key ID = 2536`
	`gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; Key ID = 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240919110526 20240720110526 2536 gov. HdS8shIfEbsTrkW5QWcemVuIGkuI/xGvzvDYxBTf/LuRRNzN5FvUA1PbOTLXYLEfPZkeLTC07umN zFbL4Pqx9w== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to d.ns.gov for llnl.gov/A
	Received 300 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 300 octets ;; HEADER SECTION ;; id = 25966 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 2 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; llnl.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) llnl.gov. 10800 IN NS adns1.es.net. llnl.gov. 10800 IN NS adns2.es.net. llnl.gov. 10800 IN NS ns0.llnl.gov. llnl.gov. 3600 IN DS 21150 7 1 84a457d0aa0d5342c9c9bd992ff08112d75e84b5 llnl.gov. 3600 IN DS ( 21150 7 2 7de1b56e9c8b497ec8b5d0aca4db0253cbd4bf4ead8eea307df8112f8b0394a9 ) llnl.gov. 3600 IN RRSIG ( DS 13 2 3600 20240728040747 20240726020747 35496 gov. bqcSSvnAen3AG5zZzUuwjNMuEW8ZxbPSTumP6DFmgKxrpC/boFbtc+dqtmaHpYKVIZvkwCR8XsUu XQmrs4KNzg== ) ;; ADDITIONAL SECTION (2 records) ns0.llnl.gov. 3600 IN A 192.12.17.1 ;; { "EDNS-VERSION": 0 }
	Query to a.ns.gov for llnl.gov/DNSKEY
	Received 300 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 300 octets ;; HEADER SECTION ;; id = 49501 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 2 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; llnl.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) llnl.gov. 10800 IN NS adns1.es.net. llnl.gov. 10800 IN NS adns2.es.net. llnl.gov. 10800 IN NS ns0.llnl.gov. llnl.gov. 3600 IN DS 21150 7 1 84a457d0aa0d5342c9c9bd992ff08112d75e84b5 llnl.gov. 3600 IN DS ( 21150 7 2 7de1b56e9c8b497ec8b5d0aca4db0253cbd4bf4ead8eea307df8112f8b0394a9 ) llnl.gov. 3600 IN RRSIG ( DS 13 2 3600 20240728040747 20240726020747 35496 gov. NsKHmrWZEU5yasErTdrZ7S3NptoaTBUpwO7SwydyEVgZsZpvqNoqy13jGtb2kelrCkR61/x//+wh Fr4KIxpN0g== ) ;; ADDITIONAL SECTION (2 records) ns0.llnl.gov. 3600 IN A 192.12.17.1 ;; { "EDNS-VERSION": 0 }
	Found child zone llnl.gov

llnl.gov

	Checking DS between gov and llnl.gov
	Query to b.ns.gov for llnl.gov/DS
	Received 220 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 220 octets ;; HEADER SECTION ;; id = 43126 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; llnl.gov. IN DS ;; ANSWER SECTION (3 records) llnl.gov. 3600 IN DS 21150 7 1 84a457d0aa0d5342c9c9bd992ff08112d75e84b5 llnl.gov. 3600 IN DS ( 21150 7 2 7de1b56e9c8b497ec8b5d0aca4db0253cbd4bf4ead8eea307df8112f8b0394a9 ) llnl.gov. 3600 IN RRSIG ( DS 13 2 3600 20240728040747 20240726020747 35496 gov. +wbCTHWElkAUBKbudziQXbjR06DWaLdLzJptnLNNSUtC0dHlR1a9QlPcdnhI1UOHPRrvcsRgCv8Z WE8LAkQHGQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for llnl.gov in the gov zone
	DS=21150/SHA-1 uses a deprecated digest algorithm
	DS=21150/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=21150/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`llnl.gov. 3600 IN RRSIG ( DS 13 2 3600 20240728040747 20240726020747 35496 gov. +wbCTHWElkAUBKbudziQXbjR06DWaLdLzJptnLNNSUtC0dHlR1a9QlPcdnhI1UOHPRrvcsRgCv8Z WE8LAkQHGQ== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=21150/SHA-1 is now in the chain-of-trust
	`llnl.gov. 3600 IN DS 21150 7 1 84a457d0aa0d5342c9c9bd992ff08112d75e84b5`
	`llnl.gov. 3600 IN DS ( 21150 7 2 7de1b56e9c8b497ec8b5d0aca4db0253cbd4bf4ead8eea307df8112f8b0394a9 )`
	Query to adns2.es.net for llnl.gov/DNSKEY
	Received 769 bytes from 192.188.22.52
	;; Response received from [192.188.22.52] 769 octets ;; HEADER SECTION ;; id = 63007 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; llnl.gov. IN DNSKEY ;; ANSWER SECTION (3 records) llnl.gov. 300 IN DNSKEY ( 256 3 7 AwEAAaqKCzYnKyjBS7d0c+MIjEeuMp21ErpvPoMXTMd04+b2SQ1c9TkuGTeElVts7beNi5Zth4zA reeni/5aV/kC7Ti3GwXX3Y+UOxAVC3D5gUnH4ldpamkashnnv+aw+aitjXt9MLEw3pMshTg6Y1mZ c7B+HQz+iHHxDy41waxfe0on ) ; Key ID = 8645 llnl.gov. 300 IN DNSKEY ( 257 3 7 AwEAAabCBKINJWc8b3ex9Yf1KS8sJybGoQfYx+TzcigC6fZI89LwBdHVyEqTCriM1aCuISOBB+mT SvO7XORgLx9vumf6P0zqlOG1HL3rFMiKQWUZwDlbKGmR2YKPTVBo4Ml5IzBrAWQZ9k4fbMrh7zj5 E47qT+IuxLA/DlICWWYQ5mjHwC/annb87lkVJViUsFxPOCNWUYAN4Q2TnK4HcfQf462iQRbKkweD WQnB2loUWTdmD0WkpxBePWryqQwRXX4MQIrfYd87sATREdLRoLdLJLJpcosuPj+PTWlwyAtom0dJ ock7fu9w4Jki34jWQJYVhfWOrWedkUSil4To4inv0hFmzUt4uVk= ) ; Key ID = 21150 llnl.gov. 300 IN RRSIG ( DNSKEY 7 2 300 20240810115927 20240711113857 21150 llnl.gov. R9l3aUeqilkNzFaVr6QcU8BBZQxdaijVPaXSzgNOno9aIphEBvxXHhLgEY7eJRc6O+krbVcQPvzS U8eC6pfplF2K3HSRaQnKZm+abt6E3PJbti/piAaIEWfobLl2SdE5tUJl619lXwZYqeTLMwP5krvV AZ405nIomIPA3JBW1IBdIZpM+li0m3rQNftbynLr2Jg8OfUETvmzhOFZSue/un0RoizxENds4Xlx uyUUB0HsKTzas85s+4Sik2KE3+R/8FKZjedDUq6HU/p0AWaZpJJ5E8fRY90T7eCkDJTHGEPUgUy1 0q6SAuJ7PXrxz7Ox2L80LOY+QumHKUssMVXoANEq3RE6kQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for llnl.gov
	`llnl.gov. 300 IN DNSKEY ( 256 3 7 AwEAAaqKCzYnKyjBS7d0c+MIjEeuMp21ErpvPoMXTMd04+b2SQ1c9TkuGTeElVts7beNi5Zth4zA reeni/5aV/kC7Ti3GwXX3Y+UOxAVC3D5gUnH4ldpamkashnnv+aw+aitjXt9MLEw3pMshTg6Y1mZ c7B+HQz+iHHxDy41waxfe0on ) ; Key ID = 8645`
	`llnl.gov. 300 IN DNSKEY ( 257 3 7 AwEAAabCBKINJWc8b3ex9Yf1KS8sJybGoQfYx+TzcigC6fZI89LwBdHVyEqTCriM1aCuISOBB+mT SvO7XORgLx9vumf6P0zqlOG1HL3rFMiKQWUZwDlbKGmR2YKPTVBo4Ml5IzBrAWQZ9k4fbMrh7zj5 E47qT+IuxLA/DlICWWYQ5mjHwC/annb87lkVJViUsFxPOCNWUYAN4Q2TnK4HcfQf462iQRbKkweD WQnB2loUWTdmD0WkpxBePWryqQwRXX4MQIrfYd87sATREdLRoLdLJLJpcosuPj+PTWlwyAtom0dJ ock7fu9w4Jki34jWQJYVhfWOrWedkUSil4To4inv0hFmzUt4uVk= ) ; Key ID = 21150`
	DNSKEY=21150/SEP is now in the chain-of-trust
	DS=21150/SHA-1 verifies DNSKEY=21150/SEP
	DS=21150/SHA-256 verifies DNSKEY=21150/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`llnl.gov. 300 IN RRSIG ( DNSKEY 7 2 300 20240810115927 20240711113857 21150 llnl.gov. R9l3aUeqilkNzFaVr6QcU8BBZQxdaijVPaXSzgNOno9aIphEBvxXHhLgEY7eJRc6O+krbVcQPvzS U8eC6pfplF2K3HSRaQnKZm+abt6E3PJbti/piAaIEWfobLl2SdE5tUJl619lXwZYqeTLMwP5krvV AZ405nIomIPA3JBW1IBdIZpM+li0m3rQNftbynLr2Jg8OfUETvmzhOFZSue/un0RoizxENds4Xlx uyUUB0HsKTzas85s+4Sik2KE3+R/8FKZjedDUq6HU/p0AWaZpJJ5E8fRY90T7eCkDJTHGEPUgUy1 0q6SAuJ7PXrxz7Ox2L80LOY+QumHKUssMVXoANEq3RE6kQ== )`
	RRSIG=21150 and DNSKEY=21150/SEP verifies the DNSKEY RRset
	DNSKEY=8645 is now in the chain-of-trust
	Query to ns0.llnl.gov for llnl.gov/A
	Received 637 bytes from 192.12.17.1
	;; Response received from [192.12.17.1] 637 octets ;; HEADER SECTION ;; id = 61441 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; llnl.gov. IN A ;; ANSWER SECTION (2 records) llnl.gov. 300 IN A 198.128.246.5 llnl.gov. 300 IN RRSIG ( A 7 2 300 20240810033125 20240711025303 8645 llnl.gov. RowOwZtgeP2fNV1V308WmlcvqJYlenK1jgNbc4U8XNsYbxAVLNpy4TqmuB9EMli5y96A9zPTpnNQ yL4rEVz9/rSwbg9Ppj3vSIwifQXV7on6qGFvTG39KMXhE0x++DHloblqXGBsJ7A3g0HUMxSn3OPD rqj+aX/TaB01y16J7OM= ) ;; AUTHORITY SECTION (4 records) llnl.gov. 14400 IN NS ns0.llnl.gov. llnl.gov. 14400 IN NS adns1.es.net. llnl.gov. 14400 IN NS adns2.es.net. llnl.gov. 14400 IN RRSIG ( NS 7 2 14400 20240811072341 20240712062435 8645 llnl.gov. b13ExkDAozRvIMQ/VgTRJgbYFZfaQc4SYqumvaUwQjP4a0ZFP8zOnwje4vn6CLfs8e3jwcCApmQI J8auV+NgQHiTpp1E1xblfGPMXPKXr+rxl/e6wU6Q75mqGR1H5oo40XZnAO+Lp+RGTfC6u8nZE6Mt O5xCDg1U8RcnCb2Cr4M= ) ;; ADDITIONAL SECTION (3 records) ns0.llnl.gov. 14400 IN A 192.12.17.1 ns0.llnl.gov. 14400 IN RRSIG ( A 7 3 14400 20240811022723 20240712012924 8645 llnl.gov. Np4Gz4hteL6pIlJVJvbm6RkLRkTZ09oCiDiQLfT6XVknOApyg4Q+hPumMQkzGGlQymr/HKzql3R1 V65QGXhFzj24f39/tBvR2fBZi0+gNUp1PfFK+9iPcEGPEt2yBSQKEs/1JYTV4h4AXF2MPee/FiaW 9WxeBAm6nROYfz8ZO34= ) ;; { "EDNS-VERSION": 0 }
	ns0.llnl.gov is authoritative for llnl.gov
	Found RRSIG signed by llnl.gov zone
	Query to adns2.es.net for llnl.gov/SOA
	Received 667 bytes from 192.188.22.52
	;; Response received from [192.188.22.52] 667 octets ;; HEADER SECTION ;; id = 64002 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; llnl.gov. IN SOA ;; ANSWER SECTION (2 records) llnl.gov. 300 IN SOA ( ns0.llnl.gov. dns-admin.llnl.gov. 2017827616 ;serial 300 ;refresh 300 ;retry 2592000 ;expire 300 ;minimum ) llnl.gov. 300 IN RRSIG ( SOA 7 2 300 20240826030524 20240727020524 8645 llnl.gov. e0VxNup75UczJwdjTBbFNqKgrsUZo8ma0yeCpb+0aQR98B9qQohMaLuHq60QgeiBdcwQGOiaPXT1 D2kN4H/dOR+JN3ZZnwtpnlA3KK5UxEi76PmFSs1BeVvfEbfDfymHNEPaa+D756H4alguVIwEEAdo F5P7DHLq9hL+VwylYC0= ) ;; AUTHORITY SECTION (4 records) llnl.gov. 14400 IN NS adns2.es.net. llnl.gov. 14400 IN NS ns0.llnl.gov. llnl.gov. 14400 IN NS adns1.es.net. llnl.gov. 14400 IN RRSIG ( NS 7 2 14400 20240811072341 20240712062435 8645 llnl.gov. b13ExkDAozRvIMQ/VgTRJgbYFZfaQc4SYqumvaUwQjP4a0ZFP8zOnwje4vn6CLfs8e3jwcCApmQI J8auV+NgQHiTpp1E1xblfGPMXPKXr+rxl/e6wU6Q75mqGR1H5oo40XZnAO+Lp+RGTfC6u8nZE6Mt O5xCDg1U8RcnCb2Cr4M= ) ;; ADDITIONAL SECTION (3 records) ns0.llnl.gov. 14400 IN A 192.12.17.1 ns0.llnl.gov. 14400 IN RRSIG ( A 7 3 14400 20240811022723 20240712012924 8645 llnl.gov. Np4Gz4hteL6pIlJVJvbm6RkLRkTZ09oCiDiQLfT6XVknOApyg4Q+hPumMQkzGGlQymr/HKzql3R1 V65QGXhFzj24f39/tBvR2fBZi0+gNUp1PfFK+9iPcEGPEt2yBSQKEs/1JYTV4h4AXF2MPee/FiaW 9WxeBAm6nROYfz8ZO34= ) ;; { "EDNS-VERSION": 0 }
	Query to adns1.es.net for llnl.gov/SOA
	Received 255 bytes from 192.188.22.22
	;; Response received from [192.188.22.22] 255 octets ;; HEADER SECTION ;; id = 31569 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; llnl.gov. IN SOA ;; ANSWER SECTION (2 records) llnl.gov. 300 IN SOA ( ns0.llnl.gov. dns-admin.llnl.gov. 2017827616 ;serial 300 ;refresh 300 ;retry 2592000 ;expire 300 ;minimum ) llnl.gov. 300 IN RRSIG ( SOA 7 2 300 20240826030524 20240727020524 8645 llnl.gov. e0VxNup75UczJwdjTBbFNqKgrsUZo8ma0yeCpb+0aQR98B9qQohMaLuHq60QgeiBdcwQGOiaPXT1 D2kN4H/dOR+JN3ZZnwtpnlA3KK5UxEi76PmFSs1BeVvfEbfDfymHNEPaa+D756H4alguVIwEEAdo F5P7DHLq9hL+VwylYC0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns0.llnl.gov for llnl.gov/A
	Received 637 bytes from 192.12.17.1
	;; Response received from [192.12.17.1] 637 octets ;; HEADER SECTION ;; id = 42986 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; llnl.gov. IN A ;; ANSWER SECTION (2 records) llnl.gov. 300 IN A 198.128.246.5 llnl.gov. 300 IN RRSIG ( A 7 2 300 20240810033125 20240711025303 8645 llnl.gov. RowOwZtgeP2fNV1V308WmlcvqJYlenK1jgNbc4U8XNsYbxAVLNpy4TqmuB9EMli5y96A9zPTpnNQ yL4rEVz9/rSwbg9Ppj3vSIwifQXV7on6qGFvTG39KMXhE0x++DHloblqXGBsJ7A3g0HUMxSn3OPD rqj+aX/TaB01y16J7OM= ) ;; AUTHORITY SECTION (4 records) llnl.gov. 14400 IN NS adns2.es.net. llnl.gov. 14400 IN NS ns0.llnl.gov. llnl.gov. 14400 IN NS adns1.es.net. llnl.gov. 14400 IN RRSIG ( NS 7 2 14400 20240811072341 20240712062435 8645 llnl.gov. b13ExkDAozRvIMQ/VgTRJgbYFZfaQc4SYqumvaUwQjP4a0ZFP8zOnwje4vn6CLfs8e3jwcCApmQI J8auV+NgQHiTpp1E1xblfGPMXPKXr+rxl/e6wU6Q75mqGR1H5oo40XZnAO+Lp+RGTfC6u8nZE6Mt O5xCDg1U8RcnCb2Cr4M= ) ;; ADDITIONAL SECTION (3 records) ns0.llnl.gov. 14400 IN A 192.12.17.1 ns0.llnl.gov. 14400 IN RRSIG ( A 7 3 14400 20240811022723 20240712012924 8645 llnl.gov. Np4Gz4hteL6pIlJVJvbm6RkLRkTZ09oCiDiQLfT6XVknOApyg4Q+hPumMQkzGGlQymr/HKzql3R1 V65QGXhFzj24f39/tBvR2fBZi0+gNUp1PfFK+9iPcEGPEt2yBSQKEs/1JYTV4h4AXF2MPee/FiaW 9WxeBAm6nROYfz8ZO34= ) ;; { "EDNS-VERSION": 0 }
	llnl.gov A RR has value 198.128.246.5
	Found 1 RRSIGs over A RRset
	`llnl.gov. 300 IN RRSIG ( A 7 2 300 20240810033125 20240711025303 8645 llnl.gov. RowOwZtgeP2fNV1V308WmlcvqJYlenK1jgNbc4U8XNsYbxAVLNpy4TqmuB9EMli5y96A9zPTpnNQ yL4rEVz9/rSwbg9Ppj3vSIwifQXV7on6qGFvTG39KMXhE0x++DHloblqXGBsJ7A3g0HUMxSn3OPD rqj+aX/TaB01y16J7OM= )`
	RRSIG=8645 and DNSKEY=8645 verifies the A RRset

llnl.gov

	Query to adns2.es.net for llnl.gov/A
	Received 637 bytes from 192.188.22.52
	;; Response received from [192.188.22.52] 637 octets ;; HEADER SECTION ;; id = 35326 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; llnl.gov. IN A ;; ANSWER SECTION (2 records) llnl.gov. 300 IN A 198.128.246.5 llnl.gov. 300 IN RRSIG ( A 7 2 300 20240810033125 20240711025303 8645 llnl.gov. RowOwZtgeP2fNV1V308WmlcvqJYlenK1jgNbc4U8XNsYbxAVLNpy4TqmuB9EMli5y96A9zPTpnNQ yL4rEVz9/rSwbg9Ppj3vSIwifQXV7on6qGFvTG39KMXhE0x++DHloblqXGBsJ7A3g0HUMxSn3OPD rqj+aX/TaB01y16J7OM= ) ;; AUTHORITY SECTION (4 records) llnl.gov. 14400 IN NS adns2.es.net. llnl.gov. 14400 IN NS ns0.llnl.gov. llnl.gov. 14400 IN NS adns1.es.net. llnl.gov. 14400 IN RRSIG ( NS 7 2 14400 20240811072341 20240712062435 8645 llnl.gov. b13ExkDAozRvIMQ/VgTRJgbYFZfaQc4SYqumvaUwQjP4a0ZFP8zOnwje4vn6CLfs8e3jwcCApmQI J8auV+NgQHiTpp1E1xblfGPMXPKXr+rxl/e6wU6Q75mqGR1H5oo40XZnAO+Lp+RGTfC6u8nZE6Mt O5xCDg1U8RcnCb2Cr4M= ) ;; ADDITIONAL SECTION (3 records) ns0.llnl.gov. 14400 IN A 192.12.17.1 ns0.llnl.gov. 14400 IN RRSIG ( A 7 3 14400 20240811022723 20240712012924 8645 llnl.gov. Np4Gz4hteL6pIlJVJvbm6RkLRkTZ09oCiDiQLfT6XVknOApyg4Q+hPumMQkzGGlQymr/HKzql3R1 V65QGXhFzj24f39/tBvR2fBZi0+gNUp1PfFK+9iPcEGPEt2yBSQKEs/1JYTV4h4AXF2MPee/FiaW 9WxeBAm6nROYfz8ZO34= ) ;; { "EDNS-VERSION": 0 }
	adns2.es.net is authoritative for llnl.gov
	Found RRSIG signed by llnl.gov zone
	Query to adns2.es.net for llnl.gov/A
	Received 637 bytes from 192.188.22.52
	;; Response received from [192.188.22.52] 637 octets ;; HEADER SECTION ;; id = 39332 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; llnl.gov. IN A ;; ANSWER SECTION (2 records) llnl.gov. 300 IN A 198.128.246.5 llnl.gov. 300 IN RRSIG ( A 7 2 300 20240810033125 20240711025303 8645 llnl.gov. RowOwZtgeP2fNV1V308WmlcvqJYlenK1jgNbc4U8XNsYbxAVLNpy4TqmuB9EMli5y96A9zPTpnNQ yL4rEVz9/rSwbg9Ppj3vSIwifQXV7on6qGFvTG39KMXhE0x++DHloblqXGBsJ7A3g0HUMxSn3OPD rqj+aX/TaB01y16J7OM= ) ;; AUTHORITY SECTION (4 records) llnl.gov. 14400 IN NS adns2.es.net. llnl.gov. 14400 IN NS ns0.llnl.gov. llnl.gov. 14400 IN NS adns1.es.net. llnl.gov. 14400 IN RRSIG ( NS 7 2 14400 20240811072341 20240712062435 8645 llnl.gov. b13ExkDAozRvIMQ/VgTRJgbYFZfaQc4SYqumvaUwQjP4a0ZFP8zOnwje4vn6CLfs8e3jwcCApmQI J8auV+NgQHiTpp1E1xblfGPMXPKXr+rxl/e6wU6Q75mqGR1H5oo40XZnAO+Lp+RGTfC6u8nZE6Mt O5xCDg1U8RcnCb2Cr4M= ) ;; ADDITIONAL SECTION (3 records) ns0.llnl.gov. 14400 IN A 192.12.17.1 ns0.llnl.gov. 14400 IN RRSIG ( A 7 3 14400 20240811022723 20240712012924 8645 llnl.gov. Np4Gz4hteL6pIlJVJvbm6RkLRkTZ09oCiDiQLfT6XVknOApyg4Q+hPumMQkzGGlQymr/HKzql3R1 V65QGXhFzj24f39/tBvR2fBZi0+gNUp1PfFK+9iPcEGPEt2yBSQKEs/1JYTV4h4AXF2MPee/FiaW 9WxeBAm6nROYfz8ZO34= ) ;; { "EDNS-VERSION": 0 }
	llnl.gov A RR has value 198.128.246.5
	Found 1 RRSIGs over A RRset
	`llnl.gov. 300 IN RRSIG ( A 7 2 300 20240810033125 20240711025303 8645 llnl.gov. RowOwZtgeP2fNV1V308WmlcvqJYlenK1jgNbc4U8XNsYbxAVLNpy4TqmuB9EMli5y96A9zPTpnNQ yL4rEVz9/rSwbg9Ppj3vSIwifQXV7on6qGFvTG39KMXhE0x++DHloblqXGBsJ7A3g0HUMxSn3OPD rqj+aX/TaB01y16J7OM= )`
	RRSIG=8645 and DNSKEY=8645 verifies the A RRset

llnl.gov

	Query to adns1.es.net for llnl.gov/A
	Received 221 bytes from 192.188.22.22
	;; Response received from [192.188.22.22] 221 octets ;; HEADER SECTION ;; id = 59061 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; llnl.gov. IN A ;; ANSWER SECTION (2 records) llnl.gov. 300 IN A 198.128.246.5 llnl.gov. 300 IN RRSIG ( A 7 2 300 20240810033125 20240711025303 8645 llnl.gov. RowOwZtgeP2fNV1V308WmlcvqJYlenK1jgNbc4U8XNsYbxAVLNpy4TqmuB9EMli5y96A9zPTpnNQ yL4rEVz9/rSwbg9Ppj3vSIwifQXV7on6qGFvTG39KMXhE0x++DHloblqXGBsJ7A3g0HUMxSn3OPD rqj+aX/TaB01y16J7OM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	adns1.es.net is authoritative for llnl.gov
	Found RRSIG signed by llnl.gov zone
	Query to adns1.es.net for llnl.gov/A
	Received 221 bytes from 192.188.22.22
	;; Response received from [192.188.22.22] 221 octets ;; HEADER SECTION ;; id = 8290 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; llnl.gov. IN A ;; ANSWER SECTION (2 records) llnl.gov. 300 IN A 198.128.246.5 llnl.gov. 300 IN RRSIG ( A 7 2 300 20240810033125 20240711025303 8645 llnl.gov. RowOwZtgeP2fNV1V308WmlcvqJYlenK1jgNbc4U8XNsYbxAVLNpy4TqmuB9EMli5y96A9zPTpnNQ yL4rEVz9/rSwbg9Ppj3vSIwifQXV7on6qGFvTG39KMXhE0x++DHloblqXGBsJ7A3g0HUMxSn3OPD rqj+aX/TaB01y16J7OM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	llnl.gov A RR has value 198.128.246.5
	Found 1 RRSIGs over A RRset
	`llnl.gov. 300 IN RRSIG ( A 7 2 300 20240810033125 20240711025303 8645 llnl.gov. RowOwZtgeP2fNV1V308WmlcvqJYlenK1jgNbc4U8XNsYbxAVLNpy4TqmuB9EMli5y96A9zPTpnNQ yL4rEVz9/rSwbg9Ppj3vSIwifQXV7on6qGFvTG39KMXhE0x++DHloblqXGBsJ7A3g0HUMxSn3OPD rqj+aX/TaB01y16J7OM= )`
	RRSIG=8645 and DNSKEY=8645 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test llnl.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: