DNSSEC Debugger - nasa.gov

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-09-16 18:08:35 UTC

Analyzing DNSSEC problems for nasa.gov

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to m.root-servers.net for ./DNSKEY
	Received 1141 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 1141 octets ;; HEADER SECTION ;; id = 50545 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260930000000 20260909000000 20326 . oYSvB9Md+++cwEvRgKH+7O3u5mSWT8tgQ6zxO+A22wU/xfavUVWD6q0A4Tpr1ez840UhnuYEZll3 AoYA+Gv06zGip99UY71evaZ/cSG04Ipz2t6erwiKMbMVQDf4Cx25g28PTJjGuFG62BQxN9GOF8aT F+4KgY3/6kAoLiGVtALiW9d+Pa5LvbLicTif3qvus0u6c63BJ22rK8RXEKaXFD93TlyLprBR80Zv 4smHeqO5hVuVtwxq7/daXiv8laEVQfs9Joq/yjPxz7vaFbaJn00/LgpbpLG6r+y2GteVTLrtvT3v FrxfNH9b9NeYogbF7eUFujmm9TukkkjVxp5tKg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260930000000 20260909000000 20326 . oYSvB9Md+++cwEvRgKH+7O3u5mSWT8tgQ6zxO+A22wU/xfavUVWD6q0A4Tpr1ez840UhnuYEZll3 AoYA+Gv06zGip99UY71evaZ/cSG04Ipz2t6erwiKMbMVQDf4Cx25g28PTJjGuFG62BQxN9GOF8aT F+4KgY3/6kAoLiGVtALiW9d+Pa5LvbLicTif3qvus0u6c63BJ22rK8RXEKaXFD93TlyLprBR80Zv 4smHeqO5hVuVtwxq7/daXiv8laEVQfs9Joq/yjPxz7vaFbaJn00/LgpbpLG6r+y2GteVTLrtvT3v FrxfNH9b9NeYogbF7eUFujmm9TukkkjVxp5tKg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=57780 is now in the chain-of-trust
	Query to h.root-servers.net for nasa.gov/A
	Received 615 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 615 octets ;; HEADER SECTION ;; id = 40696 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nasa.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260929170000 20260916160000 57780 . CUbuzde/QAwjRKmNFu5eDY2Hv0199BY0AHzJ5FUkBvjZ6VYma1+RXRo7nc46SK2P30zh1Z5w0ARb twmdk8BMB7Tg3wApu4wmNsnAiiRaqGERrX2gc/ejkstgCp0WA6K0fN2N3NqMTV3pL5m9Y49/0pbg Qgg+jbTgk5rf4zqj2qJDCQ1B3Lh0OjgWc6sqtzaWw4/oalrLuEEqNE/yceR1YZajlqE3nHH4hLMY 3JPzuy28HtpnYPTstgp2xTNVXTzAfjs6EZxHcAgzATFpPwqawEv8glZuiDTE5LYWpOfLAxuUFAAS HZMqVvZKbmrrY5g3znLOdLKkQCdK8ArV0TxWyA== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Query to d.root-servers.net for gov/DNSKEY
	Received 610 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 610 octets ;; HEADER SECTION ;; id = 28077 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260929170000 20260916160000 57780 . CUbuzde/QAwjRKmNFu5eDY2Hv0199BY0AHzJ5FUkBvjZ6VYma1+RXRo7nc46SK2P30zh1Z5w0ARb twmdk8BMB7Tg3wApu4wmNsnAiiRaqGERrX2gc/ejkstgCp0WA6K0fN2N3NqMTV3pL5m9Y49/0pbg Qgg+jbTgk5rf4zqj2qJDCQ1B3Lh0OjgWc6sqtzaWw4/oalrLuEEqNE/yceR1YZajlqE3nHH4hLMY 3JPzuy28HtpnYPTstgp2xTNVXTzAfjs6EZxHcAgzATFpPwqawEv8glZuiDTE5LYWpOfLAxuUFAAS HZMqVvZKbmrrY5g3znLOdLKkQCdK8ArV0TxWyA== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to b.root-servers.net for gov/DS
	Received 367 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 367 octets ;; HEADER SECTION ;; id = 49930 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20260929170000 20260916160000 57780 . CUbuzde/QAwjRKmNFu5eDY2Hv0199BY0AHzJ5FUkBvjZ6VYma1+RXRo7nc46SK2P30zh1Z5w0ARb twmdk8BMB7Tg3wApu4wmNsnAiiRaqGERrX2gc/ejkstgCp0WA6K0fN2N3NqMTV3pL5m9Y49/0pbg Qgg+jbTgk5rf4zqj2qJDCQ1B3Lh0OjgWc6sqtzaWw4/oalrLuEEqNE/yceR1YZajlqE3nHH4hLMY 3JPzuy28HtpnYPTstgp2xTNVXTzAfjs6EZxHcAgzATFpPwqawEv8glZuiDTE5LYWpOfLAxuUFAAS HZMqVvZKbmrrY5g3znLOdLKkQCdK8ArV0TxWyA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=2536/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20260929170000 20260916160000 57780 . CUbuzde/QAwjRKmNFu5eDY2Hv0199BY0AHzJ5FUkBvjZ6VYma1+RXRo7nc46SK2P30zh1Z5w0ARb twmdk8BMB7Tg3wApu4wmNsnAiiRaqGERrX2gc/ejkstgCp0WA6K0fN2N3NqMTV3pL5m9Y49/0pbg Qgg+jbTgk5rf4zqj2qJDCQ1B3Lh0OjgWc6sqtzaWw4/oalrLuEEqNE/yceR1YZajlqE3nHH4hLMY 3JPzuy28HtpnYPTstgp2xTNVXTzAfjs6EZxHcAgzATFpPwqawEv8glZuiDTE5LYWpOfLAxuUFAAS HZMqVvZKbmrrY5g3znLOdLKkQCdK8ArV0TxWyA== )`
	RRSIG=57780 and DNSKEY=57780 verifies the DS RRset
	DS=2536/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 2536 13 2 0baf26b7bbf313a859046fd3b1ee49ddfba33934cfb3e717c21e2a2935c2f259 )`
	Query to c.ns.gov for gov/DNSKEY
	Received 291 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 291 octets ;; HEADER SECTION ;; id = 44858 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536 gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496 gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20261027110638 20260827110638 2536 gov. PtRLa+tjVuHiye3klDjS7yugV+CJgjvDc9nmgh/T1kZfHsYlKKP7AZC5rN3tuCnWUBN0JLaqMvvB aOtx0rt13Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 13 D6ZhJTObQw3+kcewWf5iTHbzD3uTdbs5xf0kQfP/VXZcDovWJd0DUgHlp2VC002aLDCwhLoPPVN2 VfyoPnjCqg== ) ; keytag 2536`
	`gov. 3600 IN DNSKEY ( 256 3 13 Of5kU9k4XfdcPwCK9k/zRJNu+Xspnw/BDd+1V6ZpDXRIpHe35BnHTZUBJN9gd6++HkiGXx2YnTji iO7/q+Yamg== ) ; keytag 35496`
	DNSKEY=2536/SEP is now in the chain-of-trust
	DS=2536/SHA-256 verifies DNSKEY=2536/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 13 1 3600 20261027110638 20260827110638 2536 gov. PtRLa+tjVuHiye3klDjS7yugV+CJgjvDc9nmgh/T1kZfHsYlKKP7AZC5rN3tuCnWUBN0JLaqMvvB aOtx0rt13Q== )`
	RRSIG=2536 and DNSKEY=2536/SEP verifies the DNSKEY RRset
	DNSKEY=35496 is now in the chain-of-trust
	Query to b.ns.gov for nasa.gov/A
	Received 314 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 314 octets ;; HEADER SECTION ;; id = 47226 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nasa.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) nasa.gov. 10800 IN NS a1-32.akam.net. nasa.gov. 10800 IN NS a12-64.akam.net. nasa.gov. 10800 IN NS a14-67.akam.net. nasa.gov. 10800 IN NS a5-66.akam.net. nasa.gov. 10800 IN NS a8-66.akam.net. nasa.gov. 10800 IN NS a9-64.akam.net. nasa.gov. 3600 IN DS ( 59470 8 2 a4d0e150872a3b60e0984c005ebdc7a7fb860ee69d8334db924989ee4175e30e ) nasa.gov. 3600 IN RRSIG ( DS 13 2 3600 20260917190835 20260915170835 35496 gov. cXSXtSgu/LjFC1pvqTmklXdlyBosswBkq9CQZ12bdwtPsWsrQ3ZghMAOan67FV+ywrGpAgtnPdjv /FKE55U4yA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a.ns.gov for nasa.gov/DNSKEY
	Received 314 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 314 octets ;; HEADER SECTION ;; id = 328 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nasa.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) nasa.gov. 10800 IN NS a1-32.akam.net. nasa.gov. 10800 IN NS a12-64.akam.net. nasa.gov. 10800 IN NS a14-67.akam.net. nasa.gov. 10800 IN NS a5-66.akam.net. nasa.gov. 10800 IN NS a8-66.akam.net. nasa.gov. 10800 IN NS a9-64.akam.net. nasa.gov. 3600 IN DS ( 59470 8 2 a4d0e150872a3b60e0984c005ebdc7a7fb860ee69d8334db924989ee4175e30e ) nasa.gov. 3600 IN RRSIG ( DS 13 2 3600 20260917190835 20260915170835 35496 gov. nu0/896jhNoevdELhDRfmKZx0iKbrUR3pMvKI6qfBGNnfNr2rxYPHZ8Hg2if3Aolkr1tlmbJrcaU ctltmMIPUQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone nasa.gov

nasa.gov

	Checking DS between gov and nasa.gov
	Query to b.ns.gov for nasa.gov/DS
	Received 184 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 184 octets ;; HEADER SECTION ;; id = 57453 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nasa.gov. IN DS ;; ANSWER SECTION (2 records) nasa.gov. 3600 IN DS ( 59470 8 2 a4d0e150872a3b60e0984c005ebdc7a7fb860ee69d8334db924989ee4175e30e ) nasa.gov. 3600 IN RRSIG ( DS 13 2 3600 20260917190835 20260915170835 35496 gov. Pc2DB/NVKr1D6TUJ4/OC7Jd7a1K+t7UqaYvLIAhJc+Az8GcWt+3mkGYNnyAnX3gcsTFbJXKRVWO3 hNTiAafjFw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for nasa.gov in the gov zone
	DS=59470/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`nasa.gov. 3600 IN RRSIG ( DS 13 2 3600 20260917190835 20260915170835 35496 gov. Pc2DB/NVKr1D6TUJ4/OC7Jd7a1K+t7UqaYvLIAhJc+Az8GcWt+3mkGYNnyAnX3gcsTFbJXKRVWO3 hNTiAafjFw== )`
	RRSIG=35496 and DNSKEY=35496 verifies the DS RRset
	DS=59470/SHA-256 is now in the chain-of-trust
	`nasa.gov. 3600 IN DS ( 59470 8 2 a4d0e150872a3b60e0984c005ebdc7a7fb860ee69d8334db924989ee4175e30e )`
	Query to a14-67.akam.net for nasa.gov/DNSKEY
	Received 1073 bytes from 184.26.161.67
	;; Response received from [184.26.161.67] 1073 octets ;; HEADER SECTION ;; id = 52069 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nasa.gov. IN DNSKEY ;; ANSWER SECTION (5 records) nasa.gov. 1296000 IN DNSKEY ( 257 3 8 AwEAAaVHl+Usrsz7U7QX/Vn+vtVusAbHAFHlu1vaD41IUrUDRbsNVB/AwlVZvLDhE7VO7nJ2BfqM vpWhBKMurLhiUTEZsHk9bUori/Gl3RZx2MGI88CHrB5XT4X2oEYxoj84PO14YPlE9Srotx1zVkgI UDxmOAkw5C0Dxl8LrCEoXf/KBl9EYSjM7KI/HuJ88G+qpyJV7F6jCpTGyd+o+j9BgP1U9uXkgj+Q e2U95UdbW+v56ln3ly+2atBqk8eZpQMuU/O7nxDYdRwLvBus5i+OtJiepg3YybF298EHeITkjCv7 29DxKvZdWfuouczoyhAp2sAUZp7bDKtAyrCgn1FDuT8= ) ; keytag 59470 nasa.gov. 1296000 IN DNSKEY ( 256 3 8 AwEAActiQnHQRS2OQILbVnIJN6Fdq5i+L3dX+Jvf2d1jEwbwU6BEXHmFDzndz3UwBO68DDE8BX/+ TAh6WLnra5rUr2tNYDWCfO13PaXjlJ8wsC0nsiAC5qXjMZyH8P4KYUuaTBr+Kxuph+W/x6PCQ0IK OwKi4Tg87WdKaYLC4NHvMR99 ) ; keytag 46455 nasa.gov. 1296000 IN DNSKEY ( 256 3 8 AwEAAatcqM7t4W9S3OlCHgXJMxAwljiAY7RBnwgq69jQqKjY7X7l51KMBqamc9SmRvcPAdZv3ZFr US6bPcjrZ1BDu26xmTgNTOQV9SVyGn6KzJ6R9jSgkZvFZA5rq1JnJRZ1vNSeSjcL1URCz6cJx9AA 645TWxcvjVXIbb+/L1o99d// ) ; keytag 33613 nasa.gov. 1296000 IN RRSIG ( DNSKEY 8 2 1296000 20261009220854 20260909210855 33613 nasa.gov. QIpjpKBLFt5wyHy542EzsRnHXnQPSCJ5YoCfP/VGF2HQJ0f0Iw6DxOE2KQAdBNFa2O107XO+KZx8 YL9gOZGXQT2MoliCOUD8CMuZZTRHL5vbxUb73vVNzXH4oTrEyI0/KWaAIIXCaA3vEzf+NznXhZC9 YBEzAjWQ7kFtTzmC5XI= ) nasa.gov. 1296000 IN RRSIG ( DNSKEY 8 2 1296000 20261009220854 20260909210855 59470 nasa.gov. nmPmmb309PiS+MXMFpzMxV37sGHFUgU1FM69dtQRFnWVYHDLE9vKGsM2XFr9sl8aJoJFOT0TaVEX VujoBuBqIIeuRp5/SloCdXgjo/JuiAwWqVlrlCvzaQBSKuF3wTtyOm4UA2uznktxX90UpFO9by1E tMzVkdxvszFGzS0KXrI9fQiFW8Souv0L1lNkJmsPfIvPJcsnAqIi/h5ulKweyezFxnlbORP7r7rz cq0lPhcjs1Nn7k1lZ83rSGGtOCjyWp+5BvUnjwpWG2qodCWbP9jWE7uXkkRCGpvghwkbDryepn3M m80aHzS1/nxefdMQK+19rXStvITnApvdVSailA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for nasa.gov
	`nasa.gov. 1296000 IN DNSKEY ( 257 3 8 AwEAAaVHl+Usrsz7U7QX/Vn+vtVusAbHAFHlu1vaD41IUrUDRbsNVB/AwlVZvLDhE7VO7nJ2BfqM vpWhBKMurLhiUTEZsHk9bUori/Gl3RZx2MGI88CHrB5XT4X2oEYxoj84PO14YPlE9Srotx1zVkgI UDxmOAkw5C0Dxl8LrCEoXf/KBl9EYSjM7KI/HuJ88G+qpyJV7F6jCpTGyd+o+j9BgP1U9uXkgj+Q e2U95UdbW+v56ln3ly+2atBqk8eZpQMuU/O7nxDYdRwLvBus5i+OtJiepg3YybF298EHeITkjCv7 29DxKvZdWfuouczoyhAp2sAUZp7bDKtAyrCgn1FDuT8= ) ; keytag 59470`
	`nasa.gov. 1296000 IN DNSKEY ( 256 3 8 AwEAActiQnHQRS2OQILbVnIJN6Fdq5i+L3dX+Jvf2d1jEwbwU6BEXHmFDzndz3UwBO68DDE8BX/+ TAh6WLnra5rUr2tNYDWCfO13PaXjlJ8wsC0nsiAC5qXjMZyH8P4KYUuaTBr+Kxuph+W/x6PCQ0IK OwKi4Tg87WdKaYLC4NHvMR99 ) ; keytag 46455`
	`nasa.gov. 1296000 IN DNSKEY ( 256 3 8 AwEAAatcqM7t4W9S3OlCHgXJMxAwljiAY7RBnwgq69jQqKjY7X7l51KMBqamc9SmRvcPAdZv3ZFr US6bPcjrZ1BDu26xmTgNTOQV9SVyGn6KzJ6R9jSgkZvFZA5rq1JnJRZ1vNSeSjcL1URCz6cJx9AA 645TWxcvjVXIbb+/L1o99d// ) ; keytag 33613`
	DNSKEY=59470/SEP is now in the chain-of-trust
	DS=59470/SHA-256 verifies DNSKEY=59470/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`nasa.gov. 1296000 IN RRSIG ( DNSKEY 8 2 1296000 20261009220854 20260909210855 33613 nasa.gov. QIpjpKBLFt5wyHy542EzsRnHXnQPSCJ5YoCfP/VGF2HQJ0f0Iw6DxOE2KQAdBNFa2O107XO+KZx8 YL9gOZGXQT2MoliCOUD8CMuZZTRHL5vbxUb73vVNzXH4oTrEyI0/KWaAIIXCaA3vEzf+NznXhZC9 YBEzAjWQ7kFtTzmC5XI= )`
	`nasa.gov. 1296000 IN RRSIG ( DNSKEY 8 2 1296000 20261009220854 20260909210855 59470 nasa.gov. nmPmmb309PiS+MXMFpzMxV37sGHFUgU1FM69dtQRFnWVYHDLE9vKGsM2XFr9sl8aJoJFOT0TaVEX VujoBuBqIIeuRp5/SloCdXgjo/JuiAwWqVlrlCvzaQBSKuF3wTtyOm4UA2uznktxX90UpFO9by1E tMzVkdxvszFGzS0KXrI9fQiFW8Souv0L1lNkJmsPfIvPJcsnAqIi/h5ulKweyezFxnlbORP7r7rz cq0lPhcjs1Nn7k1lZ83rSGGtOCjyWp+5BvUnjwpWG2qodCWbP9jWE7uXkkRCGpvghwkbDryepn3M m80aHzS1/nxefdMQK+19rXStvITnApvdVSailA== )`
	RRSIG=33613 and DNSKEY=33613 verifies the DNSKEY RRset
	RRSIG=59470 and DNSKEY=59470/SEP verifies the DNSKEY RRset
	DNSKEY=46455 is now in the chain-of-trust
	DNSKEY=33613 is now in the chain-of-trust
	Query to a1-32.akam.net for nasa.gov/A
	Received 221 bytes from 193.108.91.32
	;; Response received from [193.108.91.32] 221 octets ;; HEADER SECTION ;; id = 50391 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nasa.gov. IN A ;; ANSWER SECTION (2 records) nasa.gov. 600 IN A 192.0.66.108 nasa.gov. 600 IN RRSIG ( A 8 2 600 20261007095500 20260907094026 33613 nasa.gov. XF6UI82/I2xnu0c5fhaSmB8M85F17bKnzSp2frOOzQHSC1156W3nfPLKVd9fnOnTBrZYhMu1j11y vrn2dFWMwCgvjh2bBLEOk9/57XRW1NxK9ngeEVYhxQDuXv42rx3hAEdKmwr3agq/4Tz4WJdPeqP8 kBd7pfETyS9FGti6O/I= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a1-32.akam.net is authoritative for nasa.gov
	Found RRSIG signed by nasa.gov zone
	Query to a12-64.akam.net for nasa.gov/SOA
	Received 543 bytes from 184.26.160.64
	;; Response received from [184.26.160.64] 543 octets ;; HEADER SECTION ;; id = 24738 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nasa.gov. IN SOA ;; ANSWER SECTION (2 records) nasa.gov. 600 IN SOA ( a1-32.akam.net. dns.nasa.gov. 202299942 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 300 ;minimum ) nasa.gov. 600 IN RRSIG ( SOA 8 2 600 20261016174609 20260916164609 33613 nasa.gov. TB2XJZIoHCNBEdgaXvmc/z7sZdRBfp+nYlcedoZmmbp66t2lTxMsPC5WnJ+4emxJppaffrCteyQQ IAgVprQlSc13fz0odQKQ5absJB+4h4+rpCo5fnB3p+ZQk6/Ut+x3BlxDlsbpOCcJxn+MSzMRgG8l 8kWXtKG4ut1/8mjr18w= ) ;; AUTHORITY SECTION (7 records) nasa.gov. 600 IN NS a1-32.akam.net. nasa.gov. 600 IN NS a14-67.akam.net. nasa.gov. 600 IN NS a12-64.akam.net. nasa.gov. 600 IN NS a5-66.akam.net. nasa.gov. 600 IN NS a9-64.akam.net. nasa.gov. 600 IN NS a8-66.akam.net. nasa.gov. 600 IN RRSIG ( NS 8 2 600 20261007095500 20260907094026 33613 nasa.gov. hM7SLl7twfd85FnaXj/qRcAK3FQFAXKK5He8Nk9IEZX7YK/95Sn84vP6xErT7xkYGrjhfA0lBzxx 87qqarSyW4KR/Z+ttucD+CnusZ6+XsVkzitXrEm+yhgtH7QcsfhB7SXJWy8A5hO/NcCI1nYHwrGh rqS7ns8P3tXV9b9W2MU= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a9-64.akam.net for nasa.gov/SOA
	Received 543 bytes from 184.85.248.64
	;; Response received from [184.85.248.64] 543 octets ;; HEADER SECTION ;; id = 33488 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nasa.gov. IN SOA ;; ANSWER SECTION (2 records) nasa.gov. 600 IN SOA ( a1-32.akam.net. dns.nasa.gov. 202299942 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 300 ;minimum ) nasa.gov. 600 IN RRSIG ( SOA 8 2 600 20261016174609 20260916164609 33613 nasa.gov. TB2XJZIoHCNBEdgaXvmc/z7sZdRBfp+nYlcedoZmmbp66t2lTxMsPC5WnJ+4emxJppaffrCteyQQ IAgVprQlSc13fz0odQKQ5absJB+4h4+rpCo5fnB3p+ZQk6/Ut+x3BlxDlsbpOCcJxn+MSzMRgG8l 8kWXtKG4ut1/8mjr18w= ) ;; AUTHORITY SECTION (7 records) nasa.gov. 600 IN NS a1-32.akam.net. nasa.gov. 600 IN NS a14-67.akam.net. nasa.gov. 600 IN NS a5-66.akam.net. nasa.gov. 600 IN NS a9-64.akam.net. nasa.gov. 600 IN NS a8-66.akam.net. nasa.gov. 600 IN NS a12-64.akam.net. nasa.gov. 600 IN RRSIG ( NS 8 2 600 20261007095500 20260907094026 33613 nasa.gov. hM7SLl7twfd85FnaXj/qRcAK3FQFAXKK5He8Nk9IEZX7YK/95Sn84vP6xErT7xkYGrjhfA0lBzxx 87qqarSyW4KR/Z+ttucD+CnusZ6+XsVkzitXrEm+yhgtH7QcsfhB7SXJWy8A5hO/NcCI1nYHwrGh rqS7ns8P3tXV9b9W2MU= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a14-67.akam.net for nasa.gov/SOA
	Received 543 bytes from 184.26.161.67
	;; Response received from [184.26.161.67] 543 octets ;; HEADER SECTION ;; id = 2238 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nasa.gov. IN SOA ;; ANSWER SECTION (2 records) nasa.gov. 600 IN SOA ( a1-32.akam.net. dns.nasa.gov. 202299942 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 300 ;minimum ) nasa.gov. 600 IN RRSIG ( SOA 8 2 600 20261016174609 20260916164609 33613 nasa.gov. TB2XJZIoHCNBEdgaXvmc/z7sZdRBfp+nYlcedoZmmbp66t2lTxMsPC5WnJ+4emxJppaffrCteyQQ IAgVprQlSc13fz0odQKQ5absJB+4h4+rpCo5fnB3p+ZQk6/Ut+x3BlxDlsbpOCcJxn+MSzMRgG8l 8kWXtKG4ut1/8mjr18w= ) ;; AUTHORITY SECTION (7 records) nasa.gov. 600 IN NS a8-66.akam.net. nasa.gov. 600 IN NS a1-32.akam.net. nasa.gov. 600 IN NS a14-67.akam.net. nasa.gov. 600 IN NS a9-64.akam.net. nasa.gov. 600 IN NS a12-64.akam.net. nasa.gov. 600 IN NS a5-66.akam.net. nasa.gov. 600 IN RRSIG ( NS 8 2 600 20261007095500 20260907094026 33613 nasa.gov. hM7SLl7twfd85FnaXj/qRcAK3FQFAXKK5He8Nk9IEZX7YK/95Sn84vP6xErT7xkYGrjhfA0lBzxx 87qqarSyW4KR/Z+ttucD+CnusZ6+XsVkzitXrEm+yhgtH7QcsfhB7SXJWy8A5hO/NcCI1nYHwrGh rqS7ns8P3tXV9b9W2MU= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a8-66.akam.net for nasa.gov/SOA
	Received 543 bytes from 2.16.40.66
	;; Response received from [2.16.40.66] 543 octets ;; HEADER SECTION ;; id = 36675 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nasa.gov. IN SOA ;; ANSWER SECTION (2 records) nasa.gov. 600 IN SOA ( a1-32.akam.net. dns.nasa.gov. 202299942 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 300 ;minimum ) nasa.gov. 600 IN RRSIG ( SOA 8 2 600 20261016174609 20260916164609 33613 nasa.gov. TB2XJZIoHCNBEdgaXvmc/z7sZdRBfp+nYlcedoZmmbp66t2lTxMsPC5WnJ+4emxJppaffrCteyQQ IAgVprQlSc13fz0odQKQ5absJB+4h4+rpCo5fnB3p+ZQk6/Ut+x3BlxDlsbpOCcJxn+MSzMRgG8l 8kWXtKG4ut1/8mjr18w= ) ;; AUTHORITY SECTION (7 records) nasa.gov. 600 IN NS a9-64.akam.net. nasa.gov. 600 IN NS a5-66.akam.net. nasa.gov. 600 IN NS a1-32.akam.net. nasa.gov. 600 IN NS a12-64.akam.net. nasa.gov. 600 IN NS a8-66.akam.net. nasa.gov. 600 IN NS a14-67.akam.net. nasa.gov. 600 IN RRSIG ( NS 8 2 600 20261007095500 20260907094026 33613 nasa.gov. hM7SLl7twfd85FnaXj/qRcAK3FQFAXKK5He8Nk9IEZX7YK/95Sn84vP6xErT7xkYGrjhfA0lBzxx 87qqarSyW4KR/Z+ttucD+CnusZ6+XsVkzitXrEm+yhgtH7QcsfhB7SXJWy8A5hO/NcCI1nYHwrGh rqS7ns8P3tXV9b9W2MU= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a5-66.akam.net for nasa.gov/SOA
	Received 543 bytes from 95.100.168.66
	;; Response received from [95.100.168.66] 543 octets ;; HEADER SECTION ;; id = 52408 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nasa.gov. IN SOA ;; ANSWER SECTION (2 records) nasa.gov. 600 IN SOA ( a1-32.akam.net. dns.nasa.gov. 202299942 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 300 ;minimum ) nasa.gov. 600 IN RRSIG ( SOA 8 2 600 20261016174609 20260916164609 33613 nasa.gov. TB2XJZIoHCNBEdgaXvmc/z7sZdRBfp+nYlcedoZmmbp66t2lTxMsPC5WnJ+4emxJppaffrCteyQQ IAgVprQlSc13fz0odQKQ5absJB+4h4+rpCo5fnB3p+ZQk6/Ut+x3BlxDlsbpOCcJxn+MSzMRgG8l 8kWXtKG4ut1/8mjr18w= ) ;; AUTHORITY SECTION (7 records) nasa.gov. 600 IN NS a5-66.akam.net. nasa.gov. 600 IN NS a8-66.akam.net. nasa.gov. 600 IN NS a12-64.akam.net. nasa.gov. 600 IN NS a1-32.akam.net. nasa.gov. 600 IN NS a14-67.akam.net. nasa.gov. 600 IN NS a9-64.akam.net. nasa.gov. 600 IN RRSIG ( NS 8 2 600 20261007095500 20260907094026 33613 nasa.gov. hM7SLl7twfd85FnaXj/qRcAK3FQFAXKK5He8Nk9IEZX7YK/95Sn84vP6xErT7xkYGrjhfA0lBzxx 87qqarSyW4KR/Z+ttucD+CnusZ6+XsVkzitXrEm+yhgtH7QcsfhB7SXJWy8A5hO/NcCI1nYHwrGh rqS7ns8P3tXV9b9W2MU= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a1-32.akam.net for nasa.gov/A
	nasa.gov A RR has value 192.0.66.108
	Found 1 RRSIGs over A RRset
	`nasa.gov. 600 IN RRSIG ( A 8 2 600 20261007095500 20260907094026 33613 nasa.gov. XF6UI82/I2xnu0c5fhaSmB8M85F17bKnzSp2frOOzQHSC1156W3nfPLKVd9fnOnTBrZYhMu1j11y vrn2dFWMwCgvjh2bBLEOk9/57XRW1NxK9ngeEVYhxQDuXv42rx3hAEdKmwr3agq/4Tz4WJdPeqP8 kBd7pfETyS9FGti6O/I= )`
	RRSIG=33613 and DNSKEY=33613 verifies the A RRset

nasa.gov

	Query to a8-66.akam.net for nasa.gov/A
	Received 221 bytes from 2.16.40.66
	;; Response received from [2.16.40.66] 221 octets ;; HEADER SECTION ;; id = 23236 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nasa.gov. IN A ;; ANSWER SECTION (2 records) nasa.gov. 600 IN A 192.0.66.108 nasa.gov. 600 IN RRSIG ( A 8 2 600 20261007095500 20260907094026 33613 nasa.gov. XF6UI82/I2xnu0c5fhaSmB8M85F17bKnzSp2frOOzQHSC1156W3nfPLKVd9fnOnTBrZYhMu1j11y vrn2dFWMwCgvjh2bBLEOk9/57XRW1NxK9ngeEVYhxQDuXv42rx3hAEdKmwr3agq/4Tz4WJdPeqP8 kBd7pfETyS9FGti6O/I= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a8-66.akam.net is authoritative for nasa.gov
	Found RRSIG signed by nasa.gov zone
	Query to a8-66.akam.net for nasa.gov/A
	nasa.gov A RR has value 192.0.66.108
	Found 1 RRSIGs over A RRset
	`nasa.gov. 600 IN RRSIG ( A 8 2 600 20261007095500 20260907094026 33613 nasa.gov. XF6UI82/I2xnu0c5fhaSmB8M85F17bKnzSp2frOOzQHSC1156W3nfPLKVd9fnOnTBrZYhMu1j11y vrn2dFWMwCgvjh2bBLEOk9/57XRW1NxK9ngeEVYhxQDuXv42rx3hAEdKmwr3agq/4Tz4WJdPeqP8 kBd7pfETyS9FGti6O/I= )`
	RRSIG=33613 and DNSKEY=33613 verifies the A RRset

nasa.gov

	Query to a9-64.akam.net for nasa.gov/A
	Received 221 bytes from 184.85.248.64
	;; Response received from [184.85.248.64] 221 octets ;; HEADER SECTION ;; id = 49822 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nasa.gov. IN A ;; ANSWER SECTION (2 records) nasa.gov. 600 IN A 192.0.66.108 nasa.gov. 600 IN RRSIG ( A 8 2 600 20261007095500 20260907094026 33613 nasa.gov. XF6UI82/I2xnu0c5fhaSmB8M85F17bKnzSp2frOOzQHSC1156W3nfPLKVd9fnOnTBrZYhMu1j11y vrn2dFWMwCgvjh2bBLEOk9/57XRW1NxK9ngeEVYhxQDuXv42rx3hAEdKmwr3agq/4Tz4WJdPeqP8 kBd7pfETyS9FGti6O/I= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a9-64.akam.net is authoritative for nasa.gov
	Found RRSIG signed by nasa.gov zone
	Query to a9-64.akam.net for nasa.gov/A
	nasa.gov A RR has value 192.0.66.108
	Found 1 RRSIGs over A RRset
	`nasa.gov. 600 IN RRSIG ( A 8 2 600 20261007095500 20260907094026 33613 nasa.gov. XF6UI82/I2xnu0c5fhaSmB8M85F17bKnzSp2frOOzQHSC1156W3nfPLKVd9fnOnTBrZYhMu1j11y vrn2dFWMwCgvjh2bBLEOk9/57XRW1NxK9ngeEVYhxQDuXv42rx3hAEdKmwr3agq/4Tz4WJdPeqP8 kBd7pfETyS9FGti6O/I= )`
	RRSIG=33613 and DNSKEY=33613 verifies the A RRset

nasa.gov

	Query to a12-64.akam.net for nasa.gov/A
	Received 221 bytes from 184.26.160.64
	;; Response received from [184.26.160.64] 221 octets ;; HEADER SECTION ;; id = 33271 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nasa.gov. IN A ;; ANSWER SECTION (2 records) nasa.gov. 600 IN A 192.0.66.108 nasa.gov. 600 IN RRSIG ( A 8 2 600 20261007095500 20260907094026 33613 nasa.gov. XF6UI82/I2xnu0c5fhaSmB8M85F17bKnzSp2frOOzQHSC1156W3nfPLKVd9fnOnTBrZYhMu1j11y vrn2dFWMwCgvjh2bBLEOk9/57XRW1NxK9ngeEVYhxQDuXv42rx3hAEdKmwr3agq/4Tz4WJdPeqP8 kBd7pfETyS9FGti6O/I= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a12-64.akam.net is authoritative for nasa.gov
	Found RRSIG signed by nasa.gov zone
	Query to a12-64.akam.net for nasa.gov/A
	nasa.gov A RR has value 192.0.66.108
	Found 1 RRSIGs over A RRset
	`nasa.gov. 600 IN RRSIG ( A 8 2 600 20261007095500 20260907094026 33613 nasa.gov. XF6UI82/I2xnu0c5fhaSmB8M85F17bKnzSp2frOOzQHSC1156W3nfPLKVd9fnOnTBrZYhMu1j11y vrn2dFWMwCgvjh2bBLEOk9/57XRW1NxK9ngeEVYhxQDuXv42rx3hAEdKmwr3agq/4Tz4WJdPeqP8 kBd7pfETyS9FGti6O/I= )`
	RRSIG=33613 and DNSKEY=33613 verifies the A RRset

nasa.gov

	Query to a14-67.akam.net for nasa.gov/A
	Received 221 bytes from 184.26.161.67
	;; Response received from [184.26.161.67] 221 octets ;; HEADER SECTION ;; id = 40639 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nasa.gov. IN A ;; ANSWER SECTION (2 records) nasa.gov. 600 IN A 192.0.66.108 nasa.gov. 600 IN RRSIG ( A 8 2 600 20261007095500 20260907094026 33613 nasa.gov. XF6UI82/I2xnu0c5fhaSmB8M85F17bKnzSp2frOOzQHSC1156W3nfPLKVd9fnOnTBrZYhMu1j11y vrn2dFWMwCgvjh2bBLEOk9/57XRW1NxK9ngeEVYhxQDuXv42rx3hAEdKmwr3agq/4Tz4WJdPeqP8 kBd7pfETyS9FGti6O/I= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a14-67.akam.net is authoritative for nasa.gov
	Found RRSIG signed by nasa.gov zone
	Query to a14-67.akam.net for nasa.gov/A
	nasa.gov A RR has value 192.0.66.108
	Found 1 RRSIGs over A RRset
	`nasa.gov. 600 IN RRSIG ( A 8 2 600 20261007095500 20260907094026 33613 nasa.gov. XF6UI82/I2xnu0c5fhaSmB8M85F17bKnzSp2frOOzQHSC1156W3nfPLKVd9fnOnTBrZYhMu1j11y vrn2dFWMwCgvjh2bBLEOk9/57XRW1NxK9ngeEVYhxQDuXv42rx3hAEdKmwr3agq/4Tz4WJdPeqP8 kBd7pfETyS9FGti6O/I= )`
	RRSIG=33613 and DNSKEY=33613 verifies the A RRset

nasa.gov

	Query to a5-66.akam.net for nasa.gov/A
	Received 221 bytes from 95.100.168.66
	;; Response received from [95.100.168.66] 221 octets ;; HEADER SECTION ;; id = 25455 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nasa.gov. IN A ;; ANSWER SECTION (2 records) nasa.gov. 600 IN A 192.0.66.108 nasa.gov. 600 IN RRSIG ( A 8 2 600 20261007095500 20260907094026 33613 nasa.gov. XF6UI82/I2xnu0c5fhaSmB8M85F17bKnzSp2frOOzQHSC1156W3nfPLKVd9fnOnTBrZYhMu1j11y vrn2dFWMwCgvjh2bBLEOk9/57XRW1NxK9ngeEVYhxQDuXv42rx3hAEdKmwr3agq/4Tz4WJdPeqP8 kBd7pfETyS9FGti6O/I= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a5-66.akam.net is authoritative for nasa.gov
	Found RRSIG signed by nasa.gov zone
	Query to a5-66.akam.net for nasa.gov/A
	nasa.gov A RR has value 192.0.66.108
	Found 1 RRSIGs over A RRset
	`nasa.gov. 600 IN RRSIG ( A 8 2 600 20261007095500 20260907094026 33613 nasa.gov. XF6UI82/I2xnu0c5fhaSmB8M85F17bKnzSp2frOOzQHSC1156W3nfPLKVd9fnOnTBrZYhMu1j11y vrn2dFWMwCgvjh2bBLEOk9/57XRW1NxK9ngeEVYhxQDuXv42rx3hAEdKmwr3agq/4Tz4WJdPeqP8 kBd7pfETyS9FGti6O/I= )`
	RRSIG=33613 and DNSKEY=33613 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test nasa.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: