DNSSEC Analyzer - nasa.gov

Domain Name:

Time: 2021-12-01 09:24:28 UTC, NTP stratum 16

Analyzing DNSSEC problems for nasa.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.33.4.12
	;; Response received from 192.33.4.12 (864 octets) ;; HEADER SECTION ;; id = 14158 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAY+oUaY0b7Z45vRD1ef/GykZqgHJtfdzRcnQNvGVQAqlH22QChtG+n1EMugw7T/6uDBAGlRI kXASdtHXhxStb9lPpyQe5/JIuMIlg+NhxKxEJ5e3J9SSPCavvDhH/BPrBCJwn8b68QAWRjVW6Rgd x63pUm7lfsimiWGMfplHNvcZWgVbKA9OI2o2lU8rT8n7zuwtlZPNpDLSI5GzrJgIiKR2Id16fmAg TJBOw14Xye/t4/BxTdxeMiiVFwA4KUV2VeqspHKSHFOz+lUIIqBRknEmYpSvnxnyi0n1n4tGnGP8 z6ZwRACi1Rw0nCu7BGOU9M6LpInRoW/W4KXLODr6xqU= ) ; Key ID = 14748 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20211221000000 20211130000000 20326 . bzGxyBzXDHcqGZwZ3v4L373VyBkgwi9l0Cb0p1ODHCvAa8AgLzJzj7SmksXFpbe3I28TlnigIF/G gl/wYYmRMtQW8C7XViKSsR110V426t1N+ZO66yegIe318yXcg4t3nFcWK1HwwJl0jD5LMaE7Cc99 ylyFYe0vI2d66MEq7BAmZDPs/5uDwId+RX47oP+WG06QcDqgx1NE48LebNW5DVnVyzkHvG6KZ1KX TdyRihH085reUqFokixQu3opu8YECy/WXv1mBPbdn0rRK7jWQBgF+3XkHVboVySr0J405H26MnwO flrP7qwIw+QupVopGAsC3O+YdQdrvjKn26k+GA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAY+oUaY0b7Z45vRD1ef/GykZqgHJtfdzRcnQNvGVQAqlH22QChtG+n1EMugw7T/6uDBAGlRI kXASdtHXhxStb9lPpyQe5/JIuMIlg+NhxKxEJ5e3J9SSPCavvDhH/BPrBCJwn8b68QAWRjVW6Rgd x63pUm7lfsimiWGMfplHNvcZWgVbKA9OI2o2lU8rT8n7zuwtlZPNpDLSI5GzrJgIiKR2Id16fmAg TJBOw14Xye/t4/BxTdxeMiiVFwA4KUV2VeqspHKSHFOz+lUIIqBRknEmYpSvnxnyi0n1n4tGnGP8 z6ZwRACi1Rw0nCu7BGOU9M6LpInRoW/W4KXLODr6xqU= ) ; Key ID = 14748`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20211221000000 20211130000000 20326 . bzGxyBzXDHcqGZwZ3v4L373VyBkgwi9l0Cb0p1ODHCvAa8AgLzJzj7SmksXFpbe3I28TlnigIF/G gl/wYYmRMtQW8C7XViKSsR110V426t1N+ZO66yegIe318yXcg4t3nFcWK1HwwJl0jD5LMaE7Cc99 ylyFYe0vI2d66MEq7BAmZDPs/5uDwId+RX47oP+WG06QcDqgx1NE48LebNW5DVnVyzkHvG6KZ1KX TdyRihH085reUqFokixQu3opu8YECy/WXv1mBPbdn0rRK7jWQBgF+3XkHVboVySr0J405H26MnwO flrP7qwIw+QupVopGAsC3O+YdQdrvjKn26k+GA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=14748 is now in the chain-of-trust
	Query to i.root-servers.net for nasa.gov/A
	Received 627 bytes from 192.36.148.17
	;; Response received from 192.36.148.17 (627 octets) ;; HEADER SECTION ;; id = 39951 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nasa.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20211214050000 20211201040000 14748 . FkEuYTk2B9gnNaLdKLKm2HZUfU+PqDUXq1sntyNO/QSlb7s/xkEzYNSxlzsXM+c4qOIu+MnoeH/b Qy5Awlub5iqarSM+YKuQcZSulImnMZp2D8nmixZHZIuTZ33nuzwAq6Y7+BTv5Chfnrc0HrBKcwPy PzrF1Cgp3ZT6fzTDehzg1mlzIaf4/vpoO2WnLsetOzMAA/eZVyROAqse0jvGTvFtPGhrHJp+e7/m aBtIC8HkbgDzcAV7Z6DTl3mgDvdWXoweAVt4ZkwVp9XPY1tUSysThRTR8I/RjjhTFOh6B+JUGpqK slW6IuxyWvVJiuMhRyweFfxA7FnOZ07/wng5fA== ) ;; ADDITIONAL SECTION (9 records) d.gov-servers.net. 172800 IN A 81.19.194.30 c.gov-servers.net. 172800 IN A 69.36.153.30 b.gov-servers.net. 172800 IN A 209.112.123.30 a.gov-servers.net. 172800 IN A 69.36.157.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to j.root-servers.net for gov/DNSKEY
	Received 622 bytes from 192.58.128.30
	;; Response received from 192.58.128.30 (622 octets) ;; HEADER SECTION ;; id = 26174 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20211214050000 20211201040000 14748 . FkEuYTk2B9gnNaLdKLKm2HZUfU+PqDUXq1sntyNO/QSlb7s/xkEzYNSxlzsXM+c4qOIu+MnoeH/b Qy5Awlub5iqarSM+YKuQcZSulImnMZp2D8nmixZHZIuTZ33nuzwAq6Y7+BTv5Chfnrc0HrBKcwPy PzrF1Cgp3ZT6fzTDehzg1mlzIaf4/vpoO2WnLsetOzMAA/eZVyROAqse0jvGTvFtPGhrHJp+e7/m aBtIC8HkbgDzcAV7Z6DTl3mgDvdWXoweAVt4ZkwVp9XPY1tUSysThRTR8I/RjjhTFOh6B+JUGpqK slW6IuxyWvVJiuMhRyweFfxA7FnOZ07/wng5fA== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone gov

gov

	Checking DS between . and gov
	Query to j.root-servers.net for gov/DS
	Received 367 bytes from 192.58.128.30
	;; Response received from 192.58.128.30 (367 octets) ;; HEADER SECTION ;; id = 14524 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20211214050000 20211201040000 14748 . FkEuYTk2B9gnNaLdKLKm2HZUfU+PqDUXq1sntyNO/QSlb7s/xkEzYNSxlzsXM+c4qOIu+MnoeH/b Qy5Awlub5iqarSM+YKuQcZSulImnMZp2D8nmixZHZIuTZ33nuzwAq6Y7+BTv5Chfnrc0HrBKcwPy PzrF1Cgp3ZT6fzTDehzg1mlzIaf4/vpoO2WnLsetOzMAA/eZVyROAqse0jvGTvFtPGhrHJp+e7/m aBtIC8HkbgDzcAV7Z6DTl3mgDvdWXoweAVt4ZkwVp9XPY1tUSysThRTR8I/RjjhTFOh6B+JUGpqK slW6IuxyWvVJiuMhRyweFfxA7FnOZ07/wng5fA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 1 DS records for gov in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20211214050000 20211201040000 14748 . FkEuYTk2B9gnNaLdKLKm2HZUfU+PqDUXq1sntyNO/QSlb7s/xkEzYNSxlzsXM+c4qOIu+MnoeH/b Qy5Awlub5iqarSM+YKuQcZSulImnMZp2D8nmixZHZIuTZ33nuzwAq6Y7+BTv5Chfnrc0HrBKcwPy PzrF1Cgp3ZT6fzTDehzg1mlzIaf4/vpoO2WnLsetOzMAA/eZVyROAqse0jvGTvFtPGhrHJp+e7/m aBtIC8HkbgDzcAV7Z6DTl3mgDvdWXoweAVt4ZkwVp9XPY1tUSysThRTR8I/RjjhTFOh6B+JUGpqK slW6IuxyWvVJiuMhRyweFfxA7FnOZ07/wng5fA== )`
	RRSIG=14748 and DNSKEY=14748 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to b.gov-servers.net for gov/DNSKEY
	Received 777 bytes from 209.112.123.30
	;; Response received from 209.112.123.30 (777 octets) ;; HEADER SECTION ;; id = 21519 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 gov. 86400 IN DNSKEY ( 256 3 8 AwEAAa3P+8n+GirNhbYEPYFwmMnTA1mFaJrXBX/+HB6zAOiQNrj73Itfm0sdk1PX4wkHEgvP3Mis rlHqKS8o/gzkYetRB7GpfIiG9KMih3Oq0zi0hB0ItG2DlE9VfW83TRRBVfUI5wSydNofIVnvkYFQ jLPYzy1B9mIHGqYMtpxjY7KCkyYcKMWWhbmF0Uk4WrHJcYZlkiTMH7k1SHamjrGDed0= ) ; Key ID = 6229 gov. 86400 IN RRSIG ( DNSKEY 8 1 86400 20211215200254 20211130195754 7698 gov. HyJwjZI2azxx9z0s/OnsYcN6w5/8dK5rfeN2Jw1PCir3Lxb5RsopE5/kW1m5/U6pJkjiUsK/vo5w HZ2kJa16dDNb8NuzrFT3efS39gYBkWncGkV+b/HjSaTMSuLUb0l9g8/Cxi8s1LsyGguslAV62Hfp pJU4DJg5LRXKQAMzWw9AuuUqkHEkefTNJynV3bImgmxl8Lu7aa0bgVX6EipmtrsRpB/VuSZvAyTp YGP4W/rXA7MIdkMDhP0bTbvnDECNwdbzwRW44Nk4tlY2+0WEC8cuUfrIQ/Erv7P2SNz1JWpkPgEI OjsExI69ca6PvwZYvKyK2RU8KHb9MKhXeIQ7YA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for gov
	`gov. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`gov. 86400 IN DNSKEY ( 256 3 8 AwEAAa3P+8n+GirNhbYEPYFwmMnTA1mFaJrXBX/+HB6zAOiQNrj73Itfm0sdk1PX4wkHEgvP3Mis rlHqKS8o/gzkYetRB7GpfIiG9KMih3Oq0zi0hB0ItG2DlE9VfW83TRRBVfUI5wSydNofIVnvkYFQ jLPYzy1B9mIHGqYMtpxjY7KCkyYcKMWWhbmF0Uk4WrHJcYZlkiTMH7k1SHamjrGDed0= ) ; Key ID = 6229`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 86400 IN RRSIG ( DNSKEY 8 1 86400 20211215200254 20211130195754 7698 gov. HyJwjZI2azxx9z0s/OnsYcN6w5/8dK5rfeN2Jw1PCir3Lxb5RsopE5/kW1m5/U6pJkjiUsK/vo5w HZ2kJa16dDNb8NuzrFT3efS39gYBkWncGkV+b/HjSaTMSuLUb0l9g8/Cxi8s1LsyGguslAV62Hfp pJU4DJg5LRXKQAMzWw9AuuUqkHEkefTNJynV3bImgmxl8Lu7aa0bgVX6EipmtrsRpB/VuSZvAyTp YGP4W/rXA7MIdkMDhP0bTbvnDECNwdbzwRW44Nk4tlY2+0WEC8cuUfrIQ/Erv7P2SNz1JWpkPgEI OjsExI69ca6PvwZYvKyK2RU8KHb9MKhXeIQ7YA== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=6229 is now in the chain-of-trust
	Query to d.gov-servers.net for nasa.gov/A
	Received 530 bytes from 81.19.194.30
	;; Response received from 81.19.194.30 (530 octets) ;; HEADER SECTION ;; id = 56616 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 11 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nasa.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) nasa.gov. 86400 IN NS a14-67.akam.net. nasa.gov. 86400 IN NS a5-66.akam.net. nasa.gov. 86400 IN NS a9-64.akam.net. nasa.gov. 86400 IN NS a12-64.akam.net. nasa.gov. 86400 IN NS a1-32.akam.net. nasa.gov. 86400 IN NS a8-66.akam.net. nasa.gov. 3600 IN DS 53827 8 1 149b2cbb800f5fe26926a8d2f0e922ccd4ce98ba nasa.gov. 3600 IN DS 41452 8 1 83bb6c5ac559bbe1e8b17a98465145265a3cafc4 nasa.gov. 3600 IN DS ( 53827 8 2 8ca2f0aa7ad8345b7c444b5e6fcbb22cd613d9420c85b7cdcaec1accf7482b09 ) nasa.gov. 3600 IN DS ( 41452 8 2 7490b7f47af44d4c0bed3a7a2fefeb50cf55e3209e5a82e30a44f9d4aa9ae688 ) nasa.gov. 3600 IN RRSIG ( DS 8 2 3600 20211206154008 20211129154008 6229 gov. URpaVioRC8Fo8X0UObSivxYHM7KW+D1Nn4i8m/Vt5WT+K+GTHWsOOWCSnQ/7gllAXW4F+Y2TaQKq s3ih4t0FItEBFAW2glM+HjPXew8S5Pp3+HLvRXhUG1EF5E/Z4hHCQTuHJy3Ce3GsgMWkS79OnI0w 0f3TCY1ZLlxC3dLu7sYxrNtsPyRSzVzSvl4FVdyYDSbfU0TXk3Fo96xjex37aA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.gov-servers.net for nasa.gov/DNSKEY
	Received 530 bytes from 209.112.123.30
	;; Response received from 209.112.123.30 (530 octets) ;; HEADER SECTION ;; id = 45692 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 11 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nasa.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) nasa.gov. 86400 IN NS a14-67.akam.net. nasa.gov. 86400 IN NS a5-66.akam.net. nasa.gov. 86400 IN NS a9-64.akam.net. nasa.gov. 86400 IN NS a12-64.akam.net. nasa.gov. 86400 IN NS a1-32.akam.net. nasa.gov. 86400 IN NS a8-66.akam.net. nasa.gov. 3600 IN DS 53827 8 1 149b2cbb800f5fe26926a8d2f0e922ccd4ce98ba nasa.gov. 3600 IN DS 41452 8 1 83bb6c5ac559bbe1e8b17a98465145265a3cafc4 nasa.gov. 3600 IN DS ( 53827 8 2 8ca2f0aa7ad8345b7c444b5e6fcbb22cd613d9420c85b7cdcaec1accf7482b09 ) nasa.gov. 3600 IN DS ( 41452 8 2 7490b7f47af44d4c0bed3a7a2fefeb50cf55e3209e5a82e30a44f9d4aa9ae688 ) nasa.gov. 3600 IN RRSIG ( DS 8 2 3600 20211206154008 20211129154008 6229 gov. URpaVioRC8Fo8X0UObSivxYHM7KW+D1Nn4i8m/Vt5WT+K+GTHWsOOWCSnQ/7gllAXW4F+Y2TaQKq s3ih4t0FItEBFAW2glM+HjPXew8S5Pp3+HLvRXhUG1EF5E/Z4hHCQTuHJy3Ce3GsgMWkS79OnI0w 0f3TCY1ZLlxC3dLu7sYxrNtsPyRSzVzSvl4FVdyYDSbfU0TXk3Fo96xjex37aA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone nasa.gov

nasa.gov

	Checking DS between gov and nasa.gov
	Query to a.gov-servers.net for nasa.gov/DS
	Received 400 bytes from 69.36.157.30
	;; Response received from 69.36.157.30 (400 octets) ;; HEADER SECTION ;; id = 62198 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nasa.gov. IN DS ;; ANSWER SECTION (5 records) nasa.gov. 3600 IN DS 53827 8 1 149b2cbb800f5fe26926a8d2f0e922ccd4ce98ba nasa.gov. 3600 IN DS 41452 8 1 83bb6c5ac559bbe1e8b17a98465145265a3cafc4 nasa.gov. 3600 IN DS ( 53827 8 2 8ca2f0aa7ad8345b7c444b5e6fcbb22cd613d9420c85b7cdcaec1accf7482b09 ) nasa.gov. 3600 IN DS ( 41452 8 2 7490b7f47af44d4c0bed3a7a2fefeb50cf55e3209e5a82e30a44f9d4aa9ae688 ) nasa.gov. 3600 IN RRSIG ( DS 8 2 3600 20211206154008 20211129154008 6229 gov. URpaVioRC8Fo8X0UObSivxYHM7KW+D1Nn4i8m/Vt5WT+K+GTHWsOOWCSnQ/7gllAXW4F+Y2TaQKq s3ih4t0FItEBFAW2glM+HjPXew8S5Pp3+HLvRXhUG1EF5E/Z4hHCQTuHJy3Ce3GsgMWkS79OnI0w 0f3TCY1ZLlxC3dLu7sYxrNtsPyRSzVzSvl4FVdyYDSbfU0TXk3Fo96xjex37aA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for nasa.gov in the gov zone
	DS=53827/SHA-1 has algorithm RSASHA256
	DS=41452/SHA-1 has algorithm RSASHA256
	DS=53827/SHA-256 has algorithm RSASHA256
	DS=41452/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`nasa.gov. 3600 IN RRSIG ( DS 8 2 3600 20211206154008 20211129154008 6229 gov. URpaVioRC8Fo8X0UObSivxYHM7KW+D1Nn4i8m/Vt5WT+K+GTHWsOOWCSnQ/7gllAXW4F+Y2TaQKq s3ih4t0FItEBFAW2glM+HjPXew8S5Pp3+HLvRXhUG1EF5E/Z4hHCQTuHJy3Ce3GsgMWkS79OnI0w 0f3TCY1ZLlxC3dLu7sYxrNtsPyRSzVzSvl4FVdyYDSbfU0TXk3Fo96xjex37aA== )`
	RRSIG=6229 and DNSKEY=6229 verifies the DS RRset
	DS=53827/SHA-1 is now in the chain-of-trust
	DS=41452/SHA-1 is now in the chain-of-trust
	`nasa.gov. 3600 IN DS 53827 8 1 149b2cbb800f5fe26926a8d2f0e922ccd4ce98ba`
	`nasa.gov. 3600 IN DS 41452 8 1 83bb6c5ac559bbe1e8b17a98465145265a3cafc4`
	`nasa.gov. 3600 IN DS ( 53827 8 2 8ca2f0aa7ad8345b7c444b5e6fcbb22cd613d9420c85b7cdcaec1accf7482b09 )`
	`nasa.gov. 3600 IN DS ( 41452 8 2 7490b7f47af44d4c0bed3a7a2fefeb50cf55e3209e5a82e30a44f9d4aa9ae688 )`
	Query to a1-32.akam.net for nasa.gov/DNSKEY
	Received 1645 bytes from 193.108.91.32
	;; Response received from 193.108.91.32 (1645 octets) ;; HEADER SECTION ;; id = 63415 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 7 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nasa.gov. IN DNSKEY ;; ANSWER SECTION (7 records) nasa.gov. 1296000 IN DNSKEY ( 256 3 8 AwEAAcjrGsbTiQeRA9MPfeE3cZ4sf0bQJd31Bnvj4tCmfIV6OP2VB5fibhFnc6ofRvE4JN11VPyE 0SvnGYFMf6qvxQUHEYsEMVf5fYcr2vj+pXKHzwMwPPh4nFUA9n5c2hp7CABEgb6wPel7JsKTLg1W A5oYf00Rt2XulbElJ0P7yRYX ) ; Key ID = 14226 nasa.gov. 1296000 IN DNSKEY ( 257 3 8 AwEAAbia6M0VxbJoSAepTxnd1k+meeslZ4oDP1biiQ7tWZQnq9YwiW5hsqPST5BmATPpLnAREZyl qbejgiaFHC6Dti1AGpBBpK36YuKkpg2MUSh+iXDPZ/GHYxu8RPH/7aL3M2cvz94mBRCNV8sZM5eT PyNQ6KOGyvduCGj7rrLyyz/BsP/QSv0+lp/Oh3jwscfuFjH0SnnzEesogfChdbtIh+eqE1grw/6l BAq9vpg31KR9pfTu4NgpS+LsxGdLZMHNLQIxmd1MJPeqJn/3208MV6WlC3Jj9X3X/+lc2XJYn1ql mmIQk2w38ivVx6w++wKisM1zYVyW8StfCdkY2w9VmJ0= ) ; Key ID = 53827 nasa.gov. 1296000 IN DNSKEY ( 256 3 8 AwEAAcjRI6hAw5NZmVjPpvpDomc4AL2m7mrFMRdfxhLqCr3O9b4RF9mg+p18d97TtOFs+mJcZZi1 JmolmrtfnoT4fODBKziy0fdBuYqzMJ8OaosjlTKgttnG5/qN41Cvymc2AT2NzeX0xZJZwlnaw9nf BOUoOG+cFoh0ATO0+RQ2EYrl ) ; Key ID = 36660 nasa.gov. 1296000 IN DNSKEY ( 257 3 8 AwEAAbo7ImTCXl2KuV8NK+0zEvLC+OrNM0/6rT/kKZncFc0CqIIQwZUJtdurpvi3mUFY0J6Pv394 E2gu/OLOe+EcIRatjxSvKITBM+PJTJq0OtwsGtBQyu4uU8hS2SNEg1hEJVGHE5q5LWIAy01TBnib yGOyVJE4N3M50ezp4E7DqEYG6WkhZQxLDjn0T4exKPDqIkP+QUB6OwF2CWKtWtpPIpI1i9h9OgIW UfXb3uLEgcnJlAYYAf9Jw35hPPDoFP+Zi9fJ4mQ0olm8gj4668QZoCJ57MDr3p3Rntfw5Ca+AQVN wnaqcB7iUWHYPZP0KLk7V02NloWXpwNHOA8O1TsOYtc= ) ; Key ID = 41452 nasa.gov. 1296000 IN RRSIG ( DNSKEY 8 2 1296000 20211228012317 20211128002317 41452 nasa.gov. KXfr8F3I9XnT9XL+IVqAr6AWAOR1ecHBMKH95y1Oeq1PMz0O/EK17w0ukR+nXmArNPfF7u1vmYzE +9N74Nz+BU7HK3ocZGExC+iwSXInENzczWN4DJHxqdld66ksi6vwjstnKeazU1eiQVXEXuCaEH/O 4zJk621Im379jQjcQi+u54Wm9saMIMmumYTbMZ3kv5X2OJeUI2u1qMK85Tv25H94uxZyrMHm7aJj X920dGCARJWPoWw9Y4GwgGi8JVBg6whtdQ7jC28eZh+OGgtGEB+DeQ2fZVgCreqWoJvYSaSaZI8z 1WFMl3oZeEx60lzZpWcPh6DikjNZirVqtg6d0g== ) nasa.gov. 1296000 IN RRSIG ( DNSKEY 8 2 1296000 20211228012317 20211128002317 36660 nasa.gov. TmhxL415If8o7Vo/RcpwiUXpXHGYXSCSsO2mRsmKHjKbGIaL3PzuNjKZPPb9pkQvO/arXuEtJPEv pRk+I/yn3vJKf4V8WaZ9r+ZFC4JaF+50YNgc3WjMrHy4U88RDZqYGV9YC0wpnLmFf/nvrsoyR7Ka KfsW6Ulzjy+Nrxzvo+I= ) nasa.gov. 1296000 IN RRSIG ( DNSKEY 8 2 1296000 20211228012317 20211128002317 53827 nasa.gov. lBmtbyYLG/lyvTv/Kj9he4fD5ZXJC3e9eiipD8eYhi9dVa/QgIoXzf9fMm8P20ECoauRYK7jNDbV 6sIKnJYvjOOJR8xXAZHCtXmh9O2w+vOd9FtnxVVRYg792OioIwi49ZYptNhsvWVNL84lJ7V0KBmT umKXKYc++LgjIDH3alHWBPOKf0WTfOJ3iJQboGf27lZVa+opTEtKDkpCrMx7MpnelxLk2a+vUs95 8Q8CQsxlYQNez5rxxcNM8JX/RZJMG0/2N1yTPgt2JL6/nsxk/OOLnoikLK6KhpzO8a+qX4ECeb+f oXDE4eioRDCF/YYKruPHLkuvStFP/be3/dgCWg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for nasa.gov
	`nasa.gov. 1296000 IN DNSKEY ( 256 3 8 AwEAAcjrGsbTiQeRA9MPfeE3cZ4sf0bQJd31Bnvj4tCmfIV6OP2VB5fibhFnc6ofRvE4JN11VPyE 0SvnGYFMf6qvxQUHEYsEMVf5fYcr2vj+pXKHzwMwPPh4nFUA9n5c2hp7CABEgb6wPel7JsKTLg1W A5oYf00Rt2XulbElJ0P7yRYX ) ; Key ID = 14226`
	`nasa.gov. 1296000 IN DNSKEY ( 257 3 8 AwEAAbia6M0VxbJoSAepTxnd1k+meeslZ4oDP1biiQ7tWZQnq9YwiW5hsqPST5BmATPpLnAREZyl qbejgiaFHC6Dti1AGpBBpK36YuKkpg2MUSh+iXDPZ/GHYxu8RPH/7aL3M2cvz94mBRCNV8sZM5eT PyNQ6KOGyvduCGj7rrLyyz/BsP/QSv0+lp/Oh3jwscfuFjH0SnnzEesogfChdbtIh+eqE1grw/6l BAq9vpg31KR9pfTu4NgpS+LsxGdLZMHNLQIxmd1MJPeqJn/3208MV6WlC3Jj9X3X/+lc2XJYn1ql mmIQk2w38ivVx6w++wKisM1zYVyW8StfCdkY2w9VmJ0= ) ; Key ID = 53827`
	`nasa.gov. 1296000 IN DNSKEY ( 256 3 8 AwEAAcjRI6hAw5NZmVjPpvpDomc4AL2m7mrFMRdfxhLqCr3O9b4RF9mg+p18d97TtOFs+mJcZZi1 JmolmrtfnoT4fODBKziy0fdBuYqzMJ8OaosjlTKgttnG5/qN41Cvymc2AT2NzeX0xZJZwlnaw9nf BOUoOG+cFoh0ATO0+RQ2EYrl ) ; Key ID = 36660`
	`nasa.gov. 1296000 IN DNSKEY ( 257 3 8 AwEAAbo7ImTCXl2KuV8NK+0zEvLC+OrNM0/6rT/kKZncFc0CqIIQwZUJtdurpvi3mUFY0J6Pv394 E2gu/OLOe+EcIRatjxSvKITBM+PJTJq0OtwsGtBQyu4uU8hS2SNEg1hEJVGHE5q5LWIAy01TBnib yGOyVJE4N3M50ezp4E7DqEYG6WkhZQxLDjn0T4exKPDqIkP+QUB6OwF2CWKtWtpPIpI1i9h9OgIW UfXb3uLEgcnJlAYYAf9Jw35hPPDoFP+Zi9fJ4mQ0olm8gj4668QZoCJ57MDr3p3Rntfw5Ca+AQVN wnaqcB7iUWHYPZP0KLk7V02NloWXpwNHOA8O1TsOYtc= ) ; Key ID = 41452`
	DNSKEY=53827/SEP is now in the chain-of-trust
	DS=53827/SHA-1 verifies DNSKEY=53827/SEP
	DS=53827/SHA-256 verifies DNSKEY=53827/SEP
	DNSKEY=41452/SEP is now in the chain-of-trust
	DS=41452/SHA-1 verifies DNSKEY=41452/SEP
	DS=41452/SHA-256 verifies DNSKEY=41452/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`nasa.gov. 1296000 IN RRSIG ( DNSKEY 8 2 1296000 20211228012317 20211128002317 41452 nasa.gov. KXfr8F3I9XnT9XL+IVqAr6AWAOR1ecHBMKH95y1Oeq1PMz0O/EK17w0ukR+nXmArNPfF7u1vmYzE +9N74Nz+BU7HK3ocZGExC+iwSXInENzczWN4DJHxqdld66ksi6vwjstnKeazU1eiQVXEXuCaEH/O 4zJk621Im379jQjcQi+u54Wm9saMIMmumYTbMZ3kv5X2OJeUI2u1qMK85Tv25H94uxZyrMHm7aJj X920dGCARJWPoWw9Y4GwgGi8JVBg6whtdQ7jC28eZh+OGgtGEB+DeQ2fZVgCreqWoJvYSaSaZI8z 1WFMl3oZeEx60lzZpWcPh6DikjNZirVqtg6d0g== )`
	`nasa.gov. 1296000 IN RRSIG ( DNSKEY 8 2 1296000 20211228012317 20211128002317 36660 nasa.gov. TmhxL415If8o7Vo/RcpwiUXpXHGYXSCSsO2mRsmKHjKbGIaL3PzuNjKZPPb9pkQvO/arXuEtJPEv pRk+I/yn3vJKf4V8WaZ9r+ZFC4JaF+50YNgc3WjMrHy4U88RDZqYGV9YC0wpnLmFf/nvrsoyR7Ka KfsW6Ulzjy+Nrxzvo+I= )`
	`nasa.gov. 1296000 IN RRSIG ( DNSKEY 8 2 1296000 20211228012317 20211128002317 53827 nasa.gov. lBmtbyYLG/lyvTv/Kj9he4fD5ZXJC3e9eiipD8eYhi9dVa/QgIoXzf9fMm8P20ECoauRYK7jNDbV 6sIKnJYvjOOJR8xXAZHCtXmh9O2w+vOd9FtnxVVRYg792OioIwi49ZYptNhsvWVNL84lJ7V0KBmT umKXKYc++LgjIDH3alHWBPOKf0WTfOJ3iJQboGf27lZVa+opTEtKDkpCrMx7MpnelxLk2a+vUs95 8Q8CQsxlYQNez5rxxcNM8JX/RZJMG0/2N1yTPgt2JL6/nsxk/OOLnoikLK6KhpzO8a+qX4ECeb+f oXDE4eioRDCF/YYKruPHLkuvStFP/be3/dgCWg== )`
	RRSIG=41452 and DNSKEY=41452/SEP verifies the DNSKEY RRset
	RRSIG=36660 and DNSKEY=36660 verifies the DNSKEY RRset
	RRSIG=53827 and DNSKEY=53827/SEP verifies the DNSKEY RRset
	DNSKEY=14226 is now in the chain-of-trust
	DNSKEY=36660 is now in the chain-of-trust
	Query to a8-66.akam.net for nasa.gov/A
	Received 237 bytes from 2.16.40.66
	;; Response received from 2.16.40.66 (237 octets) ;; HEADER SECTION ;; id = 1194 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nasa.gov. IN A ;; ANSWER SECTION (3 records) nasa.gov. 600 IN A 23.22.39.120 nasa.gov. 600 IN A 52.0.14.116 nasa.gov. 600 IN RRSIG ( A 8 2 600 20211218103638 20211118093832 14226 nasa.gov. paWdveNx+lxgRP4ch6XXGEuyxEO0QaHBI5ro7A5XM8Rn0O92aVIsRI1YU79QpXFCBzQkOx0Ud531 mw6cko8keaueemgkm4BMxOgOZj8+uhduPWlb3WmuijSVIo172Edex85M3biA12QmG3elEeY3TRez LlXVIP6S6HGTnFXKo+I= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	a8-66.akam.net is authoritative for nasa.gov
	Found RRSIG signed by nasa.gov zone
	Query to a14-67.akam.net for nasa.gov/SOA
	Received 543 bytes from 184.26.161.67
	;; Response received from 184.26.161.67 (543 octets) ;; HEADER SECTION ;; id = 20324 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nasa.gov. IN SOA ;; ANSWER SECTION (2 records) nasa.gov. 600 IN SOA ( a1-32.akam.net. dns.nasa.gov. 201366772 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 300 ;minimum ) nasa.gov. 600 IN RRSIG ( SOA 8 2 600 20211231081254 20211201071254 36660 nasa.gov. YEhk0o/1eTEiep0XmDI9AQSvwoMWAylNFgZ2ABUVrsxn5/45NdqlbdC4nULsg8e/rDGJugTxHQBx xnxDTamt3UKnC9DT+2qW3gBKBB6gqqQVnHyZEH4AE0LFh8UgWH5RprLw6BiXFAJYi5tkGyPziT5c NyTsbRIJyYoP4dWMtV4= ) ;; AUTHORITY SECTION (7 records) nasa.gov. 600 IN NS a9-64.akam.net. nasa.gov. 600 IN NS a14-67.akam.net. nasa.gov. 600 IN NS a1-32.akam.net. nasa.gov. 600 IN NS a12-64.akam.net. nasa.gov. 600 IN NS a5-66.akam.net. nasa.gov. 600 IN NS a8-66.akam.net. nasa.gov. 600 IN RRSIG ( NS 8 2 600 20211223045301 20211123042322 14226 nasa.gov. dyAUytGpPMe3omLiFw4gfpugQrmlGmwiBxoIeQ6yXXdoC0/SDSyaCMnS9pjdOWNY/WYKUydcXKt+ Ty795wPfDjOZ1yUxZezU+kQdvNU4pfi0CK8uGKWDX6F7Kwgb8Dlh8B81+u9vJsmuNNi8+aeOUkOH UdZmpwDXH45jYWcDsU4= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a12-64.akam.net for nasa.gov/SOA
	Received 543 bytes from 184.26.160.64
	;; Response received from 184.26.160.64 (543 octets) ;; HEADER SECTION ;; id = 35414 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nasa.gov. IN SOA ;; ANSWER SECTION (2 records) nasa.gov. 600 IN SOA ( a1-32.akam.net. dns.nasa.gov. 201366772 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 300 ;minimum ) nasa.gov. 600 IN RRSIG ( SOA 8 2 600 20211231081254 20211201071254 36660 nasa.gov. YEhk0o/1eTEiep0XmDI9AQSvwoMWAylNFgZ2ABUVrsxn5/45NdqlbdC4nULsg8e/rDGJugTxHQBx xnxDTamt3UKnC9DT+2qW3gBKBB6gqqQVnHyZEH4AE0LFh8UgWH5RprLw6BiXFAJYi5tkGyPziT5c NyTsbRIJyYoP4dWMtV4= ) ;; AUTHORITY SECTION (7 records) nasa.gov. 600 IN NS a12-64.akam.net. nasa.gov. 600 IN NS a14-67.akam.net. nasa.gov. 600 IN NS a8-66.akam.net. nasa.gov. 600 IN NS a1-32.akam.net. nasa.gov. 600 IN NS a9-64.akam.net. nasa.gov. 600 IN NS a5-66.akam.net. nasa.gov. 600 IN RRSIG ( NS 8 2 600 20211223045301 20211123042322 14226 nasa.gov. dyAUytGpPMe3omLiFw4gfpugQrmlGmwiBxoIeQ6yXXdoC0/SDSyaCMnS9pjdOWNY/WYKUydcXKt+ Ty795wPfDjOZ1yUxZezU+kQdvNU4pfi0CK8uGKWDX6F7Kwgb8Dlh8B81+u9vJsmuNNi8+aeOUkOH UdZmpwDXH45jYWcDsU4= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a5-66.akam.net for nasa.gov/SOA
	Received 543 bytes from 95.100.168.66
	;; Response received from 95.100.168.66 (543 octets) ;; HEADER SECTION ;; id = 53803 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nasa.gov. IN SOA ;; ANSWER SECTION (2 records) nasa.gov. 600 IN SOA ( a1-32.akam.net. dns.nasa.gov. 201366772 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 300 ;minimum ) nasa.gov. 600 IN RRSIG ( SOA 8 2 600 20211231081254 20211201071254 36660 nasa.gov. YEhk0o/1eTEiep0XmDI9AQSvwoMWAylNFgZ2ABUVrsxn5/45NdqlbdC4nULsg8e/rDGJugTxHQBx xnxDTamt3UKnC9DT+2qW3gBKBB6gqqQVnHyZEH4AE0LFh8UgWH5RprLw6BiXFAJYi5tkGyPziT5c NyTsbRIJyYoP4dWMtV4= ) ;; AUTHORITY SECTION (7 records) nasa.gov. 600 IN NS a14-67.akam.net. nasa.gov. 600 IN NS a5-66.akam.net. nasa.gov. 600 IN NS a8-66.akam.net. nasa.gov. 600 IN NS a12-64.akam.net. nasa.gov. 600 IN NS a9-64.akam.net. nasa.gov. 600 IN NS a1-32.akam.net. nasa.gov. 600 IN RRSIG ( NS 8 2 600 20211223045301 20211123042322 14226 nasa.gov. dyAUytGpPMe3omLiFw4gfpugQrmlGmwiBxoIeQ6yXXdoC0/SDSyaCMnS9pjdOWNY/WYKUydcXKt+ Ty795wPfDjOZ1yUxZezU+kQdvNU4pfi0CK8uGKWDX6F7Kwgb8Dlh8B81+u9vJsmuNNi8+aeOUkOH UdZmpwDXH45jYWcDsU4= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a1-32.akam.net for nasa.gov/SOA
	Received 543 bytes from 193.108.91.32
	;; Response received from 193.108.91.32 (543 octets) ;; HEADER SECTION ;; id = 40842 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nasa.gov. IN SOA ;; ANSWER SECTION (2 records) nasa.gov. 600 IN SOA ( a1-32.akam.net. dns.nasa.gov. 201366772 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 300 ;minimum ) nasa.gov. 600 IN RRSIG ( SOA 8 2 600 20211231081254 20211201071254 36660 nasa.gov. YEhk0o/1eTEiep0XmDI9AQSvwoMWAylNFgZ2ABUVrsxn5/45NdqlbdC4nULsg8e/rDGJugTxHQBx xnxDTamt3UKnC9DT+2qW3gBKBB6gqqQVnHyZEH4AE0LFh8UgWH5RprLw6BiXFAJYi5tkGyPziT5c NyTsbRIJyYoP4dWMtV4= ) ;; AUTHORITY SECTION (7 records) nasa.gov. 600 IN NS a5-66.akam.net. nasa.gov. 600 IN NS a12-64.akam.net. nasa.gov. 600 IN NS a14-67.akam.net. nasa.gov. 600 IN NS a1-32.akam.net. nasa.gov. 600 IN NS a9-64.akam.net. nasa.gov. 600 IN NS a8-66.akam.net. nasa.gov. 600 IN RRSIG ( NS 8 2 600 20211223045301 20211123042322 14226 nasa.gov. dyAUytGpPMe3omLiFw4gfpugQrmlGmwiBxoIeQ6yXXdoC0/SDSyaCMnS9pjdOWNY/WYKUydcXKt+ Ty795wPfDjOZ1yUxZezU+kQdvNU4pfi0CK8uGKWDX6F7Kwgb8Dlh8B81+u9vJsmuNNi8+aeOUkOH UdZmpwDXH45jYWcDsU4= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a9-64.akam.net for nasa.gov/SOA
	Received 543 bytes from 184.85.248.64
	;; Response received from 184.85.248.64 (543 octets) ;; HEADER SECTION ;; id = 35197 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nasa.gov. IN SOA ;; ANSWER SECTION (2 records) nasa.gov. 600 IN SOA ( a1-32.akam.net. dns.nasa.gov. 201366772 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 300 ;minimum ) nasa.gov. 600 IN RRSIG ( SOA 8 2 600 20211231081254 20211201071254 36660 nasa.gov. YEhk0o/1eTEiep0XmDI9AQSvwoMWAylNFgZ2ABUVrsxn5/45NdqlbdC4nULsg8e/rDGJugTxHQBx xnxDTamt3UKnC9DT+2qW3gBKBB6gqqQVnHyZEH4AE0LFh8UgWH5RprLw6BiXFAJYi5tkGyPziT5c NyTsbRIJyYoP4dWMtV4= ) ;; AUTHORITY SECTION (7 records) nasa.gov. 600 IN NS a5-66.akam.net. nasa.gov. 600 IN NS a8-66.akam.net. nasa.gov. 600 IN NS a14-67.akam.net. nasa.gov. 600 IN NS a9-64.akam.net. nasa.gov. 600 IN NS a1-32.akam.net. nasa.gov. 600 IN NS a12-64.akam.net. nasa.gov. 600 IN RRSIG ( NS 8 2 600 20211223045301 20211123042322 14226 nasa.gov. dyAUytGpPMe3omLiFw4gfpugQrmlGmwiBxoIeQ6yXXdoC0/SDSyaCMnS9pjdOWNY/WYKUydcXKt+ Ty795wPfDjOZ1yUxZezU+kQdvNU4pfi0CK8uGKWDX6F7Kwgb8Dlh8B81+u9vJsmuNNi8+aeOUkOH UdZmpwDXH45jYWcDsU4= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a8-66.akam.net for nasa.gov/A
	Received 237 bytes from 2.16.40.66
	;; Response received from 2.16.40.66 (237 octets) ;; HEADER SECTION ;; id = 4926 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nasa.gov. IN A ;; ANSWER SECTION (3 records) nasa.gov. 600 IN A 52.0.14.116 nasa.gov. 600 IN A 23.22.39.120 nasa.gov. 600 IN RRSIG ( A 8 2 600 20211218103638 20211118093832 14226 nasa.gov. paWdveNx+lxgRP4ch6XXGEuyxEO0QaHBI5ro7A5XM8Rn0O92aVIsRI1YU79QpXFCBzQkOx0Ud531 mw6cko8keaueemgkm4BMxOgOZj8+uhduPWlb3WmuijSVIo172Edex85M3biA12QmG3elEeY3TRez LlXVIP6S6HGTnFXKo+I= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	nasa.gov A RR has value 52.0.14.116
	nasa.gov A RR has value 23.22.39.120
	Found 1 RRSIGs over A RRset
	`nasa.gov. 600 IN RRSIG ( A 8 2 600 20211218103638 20211118093832 14226 nasa.gov. paWdveNx+lxgRP4ch6XXGEuyxEO0QaHBI5ro7A5XM8Rn0O92aVIsRI1YU79QpXFCBzQkOx0Ud531 mw6cko8keaueemgkm4BMxOgOZj8+uhduPWlb3WmuijSVIo172Edex85M3biA12QmG3elEeY3TRez LlXVIP6S6HGTnFXKo+I= )`
	RRSIG=14226 and DNSKEY=14226 verifies the A RRset

nasa.gov

	Query to a9-64.akam.net for nasa.gov/A
	Received 237 bytes from 184.85.248.64
	;; Response received from 184.85.248.64 (237 octets) ;; HEADER SECTION ;; id = 23071 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nasa.gov. IN A ;; ANSWER SECTION (3 records) nasa.gov. 600 IN A 52.0.14.116 nasa.gov. 600 IN A 23.22.39.120 nasa.gov. 600 IN RRSIG ( A 8 2 600 20211218103638 20211118093832 14226 nasa.gov. paWdveNx+lxgRP4ch6XXGEuyxEO0QaHBI5ro7A5XM8Rn0O92aVIsRI1YU79QpXFCBzQkOx0Ud531 mw6cko8keaueemgkm4BMxOgOZj8+uhduPWlb3WmuijSVIo172Edex85M3biA12QmG3elEeY3TRez LlXVIP6S6HGTnFXKo+I= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	a9-64.akam.net is authoritative for nasa.gov
	Found RRSIG signed by nasa.gov zone
	Query to a9-64.akam.net for nasa.gov/A
	Received 237 bytes from 184.85.248.64
	;; Response received from 184.85.248.64 (237 octets) ;; HEADER SECTION ;; id = 45277 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nasa.gov. IN A ;; ANSWER SECTION (3 records) nasa.gov. 600 IN A 52.0.14.116 nasa.gov. 600 IN A 23.22.39.120 nasa.gov. 600 IN RRSIG ( A 8 2 600 20211218103638 20211118093832 14226 nasa.gov. paWdveNx+lxgRP4ch6XXGEuyxEO0QaHBI5ro7A5XM8Rn0O92aVIsRI1YU79QpXFCBzQkOx0Ud531 mw6cko8keaueemgkm4BMxOgOZj8+uhduPWlb3WmuijSVIo172Edex85M3biA12QmG3elEeY3TRez LlXVIP6S6HGTnFXKo+I= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	nasa.gov A RR has value 52.0.14.116
	nasa.gov A RR has value 23.22.39.120
	Found 1 RRSIGs over A RRset
	`nasa.gov. 600 IN RRSIG ( A 8 2 600 20211218103638 20211118093832 14226 nasa.gov. paWdveNx+lxgRP4ch6XXGEuyxEO0QaHBI5ro7A5XM8Rn0O92aVIsRI1YU79QpXFCBzQkOx0Ud531 mw6cko8keaueemgkm4BMxOgOZj8+uhduPWlb3WmuijSVIo172Edex85M3biA12QmG3elEeY3TRez LlXVIP6S6HGTnFXKo+I= )`
	RRSIG=14226 and DNSKEY=14226 verifies the A RRset

nasa.gov

	Query to a5-66.akam.net for nasa.gov/A
	Received 237 bytes from 95.100.168.66
	;; Response received from 95.100.168.66 (237 octets) ;; HEADER SECTION ;; id = 55343 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nasa.gov. IN A ;; ANSWER SECTION (3 records) nasa.gov. 600 IN A 52.0.14.116 nasa.gov. 600 IN A 23.22.39.120 nasa.gov. 600 IN RRSIG ( A 8 2 600 20211218103638 20211118093832 14226 nasa.gov. paWdveNx+lxgRP4ch6XXGEuyxEO0QaHBI5ro7A5XM8Rn0O92aVIsRI1YU79QpXFCBzQkOx0Ud531 mw6cko8keaueemgkm4BMxOgOZj8+uhduPWlb3WmuijSVIo172Edex85M3biA12QmG3elEeY3TRez LlXVIP6S6HGTnFXKo+I= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	a5-66.akam.net is authoritative for nasa.gov
	Found RRSIG signed by nasa.gov zone
	Query to a5-66.akam.net for nasa.gov/A
	Received 237 bytes from 95.100.168.66
	;; Response received from 95.100.168.66 (237 octets) ;; HEADER SECTION ;; id = 29260 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nasa.gov. IN A ;; ANSWER SECTION (3 records) nasa.gov. 600 IN A 23.22.39.120 nasa.gov. 600 IN A 52.0.14.116 nasa.gov. 600 IN RRSIG ( A 8 2 600 20211218103638 20211118093832 14226 nasa.gov. paWdveNx+lxgRP4ch6XXGEuyxEO0QaHBI5ro7A5XM8Rn0O92aVIsRI1YU79QpXFCBzQkOx0Ud531 mw6cko8keaueemgkm4BMxOgOZj8+uhduPWlb3WmuijSVIo172Edex85M3biA12QmG3elEeY3TRez LlXVIP6S6HGTnFXKo+I= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	nasa.gov A RR has value 23.22.39.120
	nasa.gov A RR has value 52.0.14.116
	Found 1 RRSIGs over A RRset
	`nasa.gov. 600 IN RRSIG ( A 8 2 600 20211218103638 20211118093832 14226 nasa.gov. paWdveNx+lxgRP4ch6XXGEuyxEO0QaHBI5ro7A5XM8Rn0O92aVIsRI1YU79QpXFCBzQkOx0Ud531 mw6cko8keaueemgkm4BMxOgOZj8+uhduPWlb3WmuijSVIo172Edex85M3biA12QmG3elEeY3TRez LlXVIP6S6HGTnFXKo+I= )`
	RRSIG=14226 and DNSKEY=14226 verifies the A RRset

nasa.gov

	Query to a1-32.akam.net for nasa.gov/A
	Received 237 bytes from 193.108.91.32
	;; Response received from 193.108.91.32 (237 octets) ;; HEADER SECTION ;; id = 62418 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nasa.gov. IN A ;; ANSWER SECTION (3 records) nasa.gov. 600 IN A 23.22.39.120 nasa.gov. 600 IN A 52.0.14.116 nasa.gov. 600 IN RRSIG ( A 8 2 600 20211218103638 20211118093832 14226 nasa.gov. paWdveNx+lxgRP4ch6XXGEuyxEO0QaHBI5ro7A5XM8Rn0O92aVIsRI1YU79QpXFCBzQkOx0Ud531 mw6cko8keaueemgkm4BMxOgOZj8+uhduPWlb3WmuijSVIo172Edex85M3biA12QmG3elEeY3TRez LlXVIP6S6HGTnFXKo+I= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	a1-32.akam.net is authoritative for nasa.gov
	Found RRSIG signed by nasa.gov zone
	Query to a1-32.akam.net for nasa.gov/A
	Received 237 bytes from 193.108.91.32
	;; Response received from 193.108.91.32 (237 octets) ;; HEADER SECTION ;; id = 50645 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nasa.gov. IN A ;; ANSWER SECTION (3 records) nasa.gov. 600 IN A 52.0.14.116 nasa.gov. 600 IN A 23.22.39.120 nasa.gov. 600 IN RRSIG ( A 8 2 600 20211218103638 20211118093832 14226 nasa.gov. paWdveNx+lxgRP4ch6XXGEuyxEO0QaHBI5ro7A5XM8Rn0O92aVIsRI1YU79QpXFCBzQkOx0Ud531 mw6cko8keaueemgkm4BMxOgOZj8+uhduPWlb3WmuijSVIo172Edex85M3biA12QmG3elEeY3TRez LlXVIP6S6HGTnFXKo+I= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	nasa.gov A RR has value 52.0.14.116
	nasa.gov A RR has value 23.22.39.120
	Found 1 RRSIGs over A RRset
	`nasa.gov. 600 IN RRSIG ( A 8 2 600 20211218103638 20211118093832 14226 nasa.gov. paWdveNx+lxgRP4ch6XXGEuyxEO0QaHBI5ro7A5XM8Rn0O92aVIsRI1YU79QpXFCBzQkOx0Ud531 mw6cko8keaueemgkm4BMxOgOZj8+uhduPWlb3WmuijSVIo172Edex85M3biA12QmG3elEeY3TRez LlXVIP6S6HGTnFXKo+I= )`
	RRSIG=14226 and DNSKEY=14226 verifies the A RRset

nasa.gov

	Query to a14-67.akam.net for nasa.gov/A
	Received 237 bytes from 184.26.161.67
	;; Response received from 184.26.161.67 (237 octets) ;; HEADER SECTION ;; id = 7163 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nasa.gov. IN A ;; ANSWER SECTION (3 records) nasa.gov. 600 IN A 23.22.39.120 nasa.gov. 600 IN A 52.0.14.116 nasa.gov. 600 IN RRSIG ( A 8 2 600 20211218103638 20211118093832 14226 nasa.gov. paWdveNx+lxgRP4ch6XXGEuyxEO0QaHBI5ro7A5XM8Rn0O92aVIsRI1YU79QpXFCBzQkOx0Ud531 mw6cko8keaueemgkm4BMxOgOZj8+uhduPWlb3WmuijSVIo172Edex85M3biA12QmG3elEeY3TRez LlXVIP6S6HGTnFXKo+I= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	a14-67.akam.net is authoritative for nasa.gov
	Found RRSIG signed by nasa.gov zone
	Query to a14-67.akam.net for nasa.gov/A
	Received 237 bytes from 184.26.161.67
	;; Response received from 184.26.161.67 (237 octets) ;; HEADER SECTION ;; id = 62253 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nasa.gov. IN A ;; ANSWER SECTION (3 records) nasa.gov. 600 IN A 52.0.14.116 nasa.gov. 600 IN A 23.22.39.120 nasa.gov. 600 IN RRSIG ( A 8 2 600 20211218103638 20211118093832 14226 nasa.gov. paWdveNx+lxgRP4ch6XXGEuyxEO0QaHBI5ro7A5XM8Rn0O92aVIsRI1YU79QpXFCBzQkOx0Ud531 mw6cko8keaueemgkm4BMxOgOZj8+uhduPWlb3WmuijSVIo172Edex85M3biA12QmG3elEeY3TRez LlXVIP6S6HGTnFXKo+I= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	nasa.gov A RR has value 52.0.14.116
	nasa.gov A RR has value 23.22.39.120
	Found 1 RRSIGs over A RRset
	`nasa.gov. 600 IN RRSIG ( A 8 2 600 20211218103638 20211118093832 14226 nasa.gov. paWdveNx+lxgRP4ch6XXGEuyxEO0QaHBI5ro7A5XM8Rn0O92aVIsRI1YU79QpXFCBzQkOx0Ud531 mw6cko8keaueemgkm4BMxOgOZj8+uhduPWlb3WmuijSVIo172Edex85M3biA12QmG3elEeY3TRez LlXVIP6S6HGTnFXKo+I= )`
	RRSIG=14226 and DNSKEY=14226 verifies the A RRset

nasa.gov

	Query to a12-64.akam.net for nasa.gov/A
	Received 237 bytes from 184.26.160.64
	;; Response received from 184.26.160.64 (237 octets) ;; HEADER SECTION ;; id = 40748 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nasa.gov. IN A ;; ANSWER SECTION (3 records) nasa.gov. 600 IN A 52.0.14.116 nasa.gov. 600 IN A 23.22.39.120 nasa.gov. 600 IN RRSIG ( A 8 2 600 20211218103638 20211118093832 14226 nasa.gov. paWdveNx+lxgRP4ch6XXGEuyxEO0QaHBI5ro7A5XM8Rn0O92aVIsRI1YU79QpXFCBzQkOx0Ud531 mw6cko8keaueemgkm4BMxOgOZj8+uhduPWlb3WmuijSVIo172Edex85M3biA12QmG3elEeY3TRez LlXVIP6S6HGTnFXKo+I= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	a12-64.akam.net is authoritative for nasa.gov
	Found RRSIG signed by nasa.gov zone
	Query to a12-64.akam.net for nasa.gov/A
	Received 237 bytes from 184.26.160.64
	;; Response received from 184.26.160.64 (237 octets) ;; HEADER SECTION ;; id = 24016 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nasa.gov. IN A ;; ANSWER SECTION (3 records) nasa.gov. 600 IN A 23.22.39.120 nasa.gov. 600 IN A 52.0.14.116 nasa.gov. 600 IN RRSIG ( A 8 2 600 20211218103638 20211118093832 14226 nasa.gov. paWdveNx+lxgRP4ch6XXGEuyxEO0QaHBI5ro7A5XM8Rn0O92aVIsRI1YU79QpXFCBzQkOx0Ud531 mw6cko8keaueemgkm4BMxOgOZj8+uhduPWlb3WmuijSVIo172Edex85M3biA12QmG3elEeY3TRez LlXVIP6S6HGTnFXKo+I= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	nasa.gov A RR has value 23.22.39.120
	nasa.gov A RR has value 52.0.14.116
	Found 1 RRSIGs over A RRset
	`nasa.gov. 600 IN RRSIG ( A 8 2 600 20211218103638 20211118093832 14226 nasa.gov. paWdveNx+lxgRP4ch6XXGEuyxEO0QaHBI5ro7A5XM8Rn0O92aVIsRI1YU79QpXFCBzQkOx0Ud531 mw6cko8keaueemgkm4BMxOgOZj8+uhduPWlb3WmuijSVIo172Edex85M3biA12QmG3elEeY3TRez LlXVIP6S6HGTnFXKo+I= )`
	RRSIG=14226 and DNSKEY=14226 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test nasa.gov at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: