DNSSEC Analyzer - nrc-gateway.gov

Domain Name:

Time: 2022-11-28 19:26:19 UTC, NTP stratum 16

Analyzing DNSSEC problems for nrc-gateway.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.5.5.241
	;; Response received from 192.5.5.241 (864 octets) ;; HEADER SECTION ;; id = 23925 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAeB54o2xvW6vY4qQZ0krDsEZCe6MsRWCqsXd4+cNJZMePnlV/xwDrIbbeH1SJzv742rOHzgA KM1/3SQHHSkoEIPx8XQdHAZBxfhaXl3e8c5WrE3aGXS5AeTWAkt85ccqWgKyitxjFmJEOol0BqS2 xueltaDwgWcC10nPUY+y5l/kTOYyptYQS4gg1uJNXIob/R1XIEJ10ZCurkYqZxgqyHc7tZv09N23 o9rnGdjnYiArH7FjlXD8Rvjde8YWkmfdbCEWnchrnxDK8KV2/ZvBpG/WYnRKXYPUceGCw59OJdJ5 M7utkm547RB3eEd8CVVhbXopZlsKq3GCrBwaIVe9ci0= ) ; Key ID = 18733 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20221211000000 20221120000000 20326 . Y8Or1olHbjYMKfZxcKA8mP9+GWhl66Cu6Mrjh9NzLuBZ+14JZodwSJ5JaXzJxRzgHxTd/TWvnI4b AM/DQ8NYyRX/QezQdGU4ZE5RcrZLanxuX/FQR/qIMlLttCsoPtlM677HA3CecqLljbrcayIDSKMg hh5iKV1iOoW1BP1KZwgH4Y87fiWbevk+AmN5xbJCPk1iCis+kMulacxTFC+g0jyLv1V0C2hneqZ5 8os/QvW7XNBWLd9OC1LbMVVkfgUsVYqfwLjcieQ5YVRshfy2Iazv2sLo87sGvBnLmSUx8F4hiotE K6UjTNNun1tKe0VTBVkXQyaIzfUOkPgoMoWojg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeB54o2xvW6vY4qQZ0krDsEZCe6MsRWCqsXd4+cNJZMePnlV/xwDrIbbeH1SJzv742rOHzgA KM1/3SQHHSkoEIPx8XQdHAZBxfhaXl3e8c5WrE3aGXS5AeTWAkt85ccqWgKyitxjFmJEOol0BqS2 xueltaDwgWcC10nPUY+y5l/kTOYyptYQS4gg1uJNXIob/R1XIEJ10ZCurkYqZxgqyHc7tZv09N23 o9rnGdjnYiArH7FjlXD8Rvjde8YWkmfdbCEWnchrnxDK8KV2/ZvBpG/WYnRKXYPUceGCw59OJdJ5 M7utkm547RB3eEd8CVVhbXopZlsKq3GCrBwaIVe9ci0= ) ; Key ID = 18733`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20221211000000 20221120000000 20326 . Y8Or1olHbjYMKfZxcKA8mP9+GWhl66Cu6Mrjh9NzLuBZ+14JZodwSJ5JaXzJxRzgHxTd/TWvnI4b AM/DQ8NYyRX/QezQdGU4ZE5RcrZLanxuX/FQR/qIMlLttCsoPtlM677HA3CecqLljbrcayIDSKMg hh5iKV1iOoW1BP1KZwgH4Y87fiWbevk+AmN5xbJCPk1iCis+kMulacxTFC+g0jyLv1V0C2hneqZ5 8os/QvW7XNBWLd9OC1LbMVVkfgUsVYqfwLjcieQ5YVRshfy2Iazv2sLo87sGvBnLmSUx8F4hiotE K6UjTNNun1tKe0VTBVkXQyaIzfUOkPgoMoWojg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=18733 is now in the chain-of-trust
	Query to i.root-servers.net for nrc-gateway.gov/A
	Received 634 bytes from 192.36.148.17
	;; Response received from 192.36.148.17 (634 octets) ;; HEADER SECTION ;; id = 13996 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nrc-gateway.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20221211170000 20221128160000 18733 . IKV+yYkguo8XVZD1TDliQX5qOkNDvzyDAUFQKYK1XjRM1HEEI/2SN4ab4ATDq+rmUso0vA6p5r7P O74Q1CyvTtajLoa3GGmq/uIW3e2yLlX875KUTlbTCFxHtWTOM03pF/alga8aiZM7V08WtD3c8b/j 9RtW40lYfRtbldaTdzrce9wY8GQumJmpO1knnmJLRZtHn1OvMwnWm6bQ4oyCgdRGwespvQx+6Lvq TPdSOd/TNjoDrw4lAxCFv7TUmXHSIoYMIvIWA+TRX3utgN6ZSgNm2UiJm1VtOSSVBWSzK23WakyL ucVs/ref0/OCCJf87jzelHE/QLjSgc7Y1ZrKfA== ) ;; ADDITIONAL SECTION (9 records) d.gov-servers.net. 172800 IN A 81.19.194.30 c.gov-servers.net. 172800 IN A 69.36.153.30 b.gov-servers.net. 172800 IN A 209.112.123.30 a.gov-servers.net. 172800 IN A 69.36.157.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to g.root-servers.net for gov/DNSKEY
	Received 622 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (622 octets) ;; HEADER SECTION ;; id = 54135 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20221211170000 20221128160000 18733 . IKV+yYkguo8XVZD1TDliQX5qOkNDvzyDAUFQKYK1XjRM1HEEI/2SN4ab4ATDq+rmUso0vA6p5r7P O74Q1CyvTtajLoa3GGmq/uIW3e2yLlX875KUTlbTCFxHtWTOM03pF/alga8aiZM7V08WtD3c8b/j 9RtW40lYfRtbldaTdzrce9wY8GQumJmpO1knnmJLRZtHn1OvMwnWm6bQ4oyCgdRGwespvQx+6Lvq TPdSOd/TNjoDrw4lAxCFv7TUmXHSIoYMIvIWA+TRX3utgN6ZSgNm2UiJm1VtOSSVBWSzK23WakyL ucVs/ref0/OCCJf87jzelHE/QLjSgc7Y1ZrKfA== ) ;; ADDITIONAL SECTION (9 records) d.gov-servers.net. 172800 IN A 81.19.194.30 c.gov-servers.net. 172800 IN A 69.36.153.30 b.gov-servers.net. 172800 IN A 209.112.123.30 a.gov-servers.net. 172800 IN A 69.36.157.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone gov

gov

	Checking DS between . and gov
	Query to e.root-servers.net for gov/DS
	Received 367 bytes from 192.203.230.10
	;; Response received from 192.203.230.10 (367 octets) ;; HEADER SECTION ;; id = 53375 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20221211170000 20221128160000 18733 . IKV+yYkguo8XVZD1TDliQX5qOkNDvzyDAUFQKYK1XjRM1HEEI/2SN4ab4ATDq+rmUso0vA6p5r7P O74Q1CyvTtajLoa3GGmq/uIW3e2yLlX875KUTlbTCFxHtWTOM03pF/alga8aiZM7V08WtD3c8b/j 9RtW40lYfRtbldaTdzrce9wY8GQumJmpO1knnmJLRZtHn1OvMwnWm6bQ4oyCgdRGwespvQx+6Lvq TPdSOd/TNjoDrw4lAxCFv7TUmXHSIoYMIvIWA+TRX3utgN6ZSgNm2UiJm1VtOSSVBWSzK23WakyL ucVs/ref0/OCCJf87jzelHE/QLjSgc7Y1ZrKfA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 1 DS records for gov in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20221211170000 20221128160000 18733 . IKV+yYkguo8XVZD1TDliQX5qOkNDvzyDAUFQKYK1XjRM1HEEI/2SN4ab4ATDq+rmUso0vA6p5r7P O74Q1CyvTtajLoa3GGmq/uIW3e2yLlX875KUTlbTCFxHtWTOM03pF/alga8aiZM7V08WtD3c8b/j 9RtW40lYfRtbldaTdzrce9wY8GQumJmpO1knnmJLRZtHn1OvMwnWm6bQ4oyCgdRGwespvQx+6Lvq TPdSOd/TNjoDrw4lAxCFv7TUmXHSIoYMIvIWA+TRX3utgN6ZSgNm2UiJm1VtOSSVBWSzK23WakyL ucVs/ref0/OCCJf87jzelHE/QLjSgc7Y1ZrKfA== )`
	RRSIG=18733 and DNSKEY=18733 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to c.gov-servers.net for gov/DNSKEY
	Received 777 bytes from 69.36.153.30
	;; Response received from 69.36.153.30 (777 octets) ;; HEADER SECTION ;; id = 52080 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 gov. 86400 IN DNSKEY ( 256 3 8 AwEAAdTUAXnPaU/j+tBXBKqj7wf6CTR5erm5HMRumZ8tyIXi4rmbOdvpGcGLEu3YjqwkGoht1S4B a555IpEt+oUsjN57HbQ6eAMxBCX50EC1ipBmnnznhgoflu+DE+4No9wXHHh9pa6Vn8N7QiG1zZ4e kc9rS0to56mkLfNzJ+gjzH3tOfB9W5qnEqkqRuqXHnXxQQLBQ1I6vh1VZ5uQKYIe2H0= ) ; Key ID = 56278 gov. 86400 IN RRSIG ( DNSKEY 8 1 86400 20221205200254 20221120195754 7698 gov. FZUGnVFsKhKrSxuAbI6JdAQxCbzoP6JvsFLwKXwCMHIoBB2la/7+jwQ3DWB1LuJVqt/6SlSzTZbz mcq4Irnwjmwg+EQECsqhA7KIybCpPSiq/XsXPxvHrXes7+sVKa0UJ2wNq3yiKKzkAAlBOJfkEu5o 6jVpHpQ1NQG28rY1X4Ati7PE6ny3m3LkkrYEflE2YfXXOge+bCFjUBCBCX3YFTkJvrBuWUdfdyan 0FuN+tjFDUOzwz0t3RsiYrSfy8/Ozv8lzSI1Mip6f271uHgjpi51in8shWZibER4MxShpHa0zEQo kMiGRx3cxnAble1onSgEDfnovYe7Z7hm3ReLUQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for gov
	`gov. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`gov. 86400 IN DNSKEY ( 256 3 8 AwEAAdTUAXnPaU/j+tBXBKqj7wf6CTR5erm5HMRumZ8tyIXi4rmbOdvpGcGLEu3YjqwkGoht1S4B a555IpEt+oUsjN57HbQ6eAMxBCX50EC1ipBmnnznhgoflu+DE+4No9wXHHh9pa6Vn8N7QiG1zZ4e kc9rS0to56mkLfNzJ+gjzH3tOfB9W5qnEqkqRuqXHnXxQQLBQ1I6vh1VZ5uQKYIe2H0= ) ; Key ID = 56278`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 86400 IN RRSIG ( DNSKEY 8 1 86400 20221205200254 20221120195754 7698 gov. FZUGnVFsKhKrSxuAbI6JdAQxCbzoP6JvsFLwKXwCMHIoBB2la/7+jwQ3DWB1LuJVqt/6SlSzTZbz mcq4Irnwjmwg+EQECsqhA7KIybCpPSiq/XsXPxvHrXes7+sVKa0UJ2wNq3yiKKzkAAlBOJfkEu5o 6jVpHpQ1NQG28rY1X4Ati7PE6ny3m3LkkrYEflE2YfXXOge+bCFjUBCBCX3YFTkJvrBuWUdfdyan 0FuN+tjFDUOzwz0t3RsiYrSfy8/Ozv8lzSI1Mip6f271uHgjpi51in8shWZibER4MxShpHa0zEQo kMiGRx3cxnAble1onSgEDfnovYe7Z7hm3ReLUQ== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=56278 is now in the chain-of-trust
	Query to c.gov-servers.net for nrc-gateway.gov/A
	Received 428 bytes from 69.36.153.30
	;; Response received from 69.36.153.30 (428 octets) ;; HEADER SECTION ;; id = 6860 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nrc-gateway.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) nrc-gateway.gov. 86400 IN NS dnssec14.datamtn.com. nrc-gateway.gov. 86400 IN NS a10-67.akam.net. nrc-gateway.gov. 86400 IN NS a13-66.akam.net. nrc-gateway.gov. 86400 IN NS a1-154.akam.net. nrc-gateway.gov. 3600 IN DS ( 24730 8 1 f08dc2c2d0ea7c1f2154d650f4e0c3be291706cf ) nrc-gateway.gov. 3600 IN DS ( 24730 8 2 e1343f5dda1317c34d1efd9b4a7419a6cac805cd28379ac759ce87213037871d ) nrc-gateway.gov. 3600 IN RRSIG ( DS 8 2 3600 20221205104310 20221128104310 56278 gov. RF0ZCkxWmbnY13/WcXBlO3hGtDc/C8drs81mAZ5pgHqRIXYxivF1sWEFjAoveG/xWFWi2tXadG+f dHF08ZTMLgmq6e2c2a3k2U6svQt3T0BR6LEbL0P306bTmEwT8KMH/mzAw2++lLiCcZ+2XyesAh1o Jt/LQxttFeaSQdbQA2vh3/2J45nLI6d9NZFVmRGgYuZalJHWz/NVbAAmUd12nw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.gov-servers.net for nrc-gateway.gov/DNSKEY
	Received 428 bytes from 81.19.194.30
	;; Response received from 81.19.194.30 (428 octets) ;; HEADER SECTION ;; id = 4644 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nrc-gateway.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) nrc-gateway.gov. 86400 IN NS dnssec14.datamtn.com. nrc-gateway.gov. 86400 IN NS a10-67.akam.net. nrc-gateway.gov. 86400 IN NS a13-66.akam.net. nrc-gateway.gov. 86400 IN NS a1-154.akam.net. nrc-gateway.gov. 3600 IN DS ( 24730 8 1 f08dc2c2d0ea7c1f2154d650f4e0c3be291706cf ) nrc-gateway.gov. 3600 IN DS ( 24730 8 2 e1343f5dda1317c34d1efd9b4a7419a6cac805cd28379ac759ce87213037871d ) nrc-gateway.gov. 3600 IN RRSIG ( DS 8 2 3600 20221205104310 20221128104310 56278 gov. RF0ZCkxWmbnY13/WcXBlO3hGtDc/C8drs81mAZ5pgHqRIXYxivF1sWEFjAoveG/xWFWi2tXadG+f dHF08ZTMLgmq6e2c2a3k2U6svQt3T0BR6LEbL0P306bTmEwT8KMH/mzAw2++lLiCcZ+2XyesAh1o Jt/LQxttFeaSQdbQA2vh3/2J45nLI6d9NZFVmRGgYuZalJHWz/NVbAAmUd12nw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone nrc-gateway.gov

nrc-gateway.gov

	Checking DS between gov and nrc-gateway.gov
	Query to a.gov-servers.net for nrc-gateway.gov/DS
	Received 323 bytes from 69.36.157.30
	;; Response received from 69.36.157.30 (323 octets) ;; HEADER SECTION ;; id = 59566 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nrc-gateway.gov. IN DS ;; ANSWER SECTION (3 records) nrc-gateway.gov. 3600 IN DS ( 24730 8 1 f08dc2c2d0ea7c1f2154d650f4e0c3be291706cf ) nrc-gateway.gov. 3600 IN DS ( 24730 8 2 e1343f5dda1317c34d1efd9b4a7419a6cac805cd28379ac759ce87213037871d ) nrc-gateway.gov. 3600 IN RRSIG ( DS 8 2 3600 20221205104310 20221128104310 56278 gov. RF0ZCkxWmbnY13/WcXBlO3hGtDc/C8drs81mAZ5pgHqRIXYxivF1sWEFjAoveG/xWFWi2tXadG+f dHF08ZTMLgmq6e2c2a3k2U6svQt3T0BR6LEbL0P306bTmEwT8KMH/mzAw2++lLiCcZ+2XyesAh1o Jt/LQxttFeaSQdbQA2vh3/2J45nLI6d9NZFVmRGgYuZalJHWz/NVbAAmUd12nw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for nrc-gateway.gov in the gov zone
	DS=24730/SHA-1 has algorithm RSASHA256
	DS=24730/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`nrc-gateway.gov. 3600 IN RRSIG ( DS 8 2 3600 20221205104310 20221128104310 56278 gov. RF0ZCkxWmbnY13/WcXBlO3hGtDc/C8drs81mAZ5pgHqRIXYxivF1sWEFjAoveG/xWFWi2tXadG+f dHF08ZTMLgmq6e2c2a3k2U6svQt3T0BR6LEbL0P306bTmEwT8KMH/mzAw2++lLiCcZ+2XyesAh1o Jt/LQxttFeaSQdbQA2vh3/2J45nLI6d9NZFVmRGgYuZalJHWz/NVbAAmUd12nw== )`
	RRSIG=56278 and DNSKEY=56278 verifies the DS RRset
	DS=24730/SHA-1 is now in the chain-of-trust
	`nrc-gateway.gov. 3600 IN DS ( 24730 8 1 f08dc2c2d0ea7c1f2154d650f4e0c3be291706cf )`
	`nrc-gateway.gov. 3600 IN DS ( 24730 8 2 e1343f5dda1317c34d1efd9b4a7419a6cac805cd28379ac759ce87213037871d )`
	Query to a10-67.akam.net for nrc-gateway.gov/DNSKEY
	Received 1525 bytes from 96.7.50.67
	;; Response received from 96.7.50.67 (1525 octets) ;; HEADER SECTION ;; id = 8294 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nrc-gateway.gov. IN DNSKEY ;; ANSWER SECTION (6 records) nrc-gateway.gov. 172800 IN DNSKEY ( 256 3 8 AwEAAd/PkPSDMiBuwVUVcv7+D4G7ZgBZjxYA8bZXbquWcsoEYK5N0Ol19se1dVPG8Gyt0Jk0tR07 XqSpsw0IJqYWNVWSA5lDU6jWdVhiq9dKCMBsVmnbQ24vBixT+86zwWjnqKtuIzsNFLJVnMIjvzRd v7iT6OkRa58SOa3AOnaMiREn ) ; Key ID = 26220 nrc-gateway.gov. 172800 IN DNSKEY ( 257 3 8 AwEAAbcXGnUyowci0euuzWRVP6kg8CpTO8VfSd7nlx1qu9kh5TFSbOs3Cg1FhHNIM6nOQQDPGQUq aJz14cUiKd+/p7kj4GUDQOI+/6srIEHrSnC5Jxo/b57jy33mxzX8x6bQlejxAba/wbau38PDloZN sMV3TMbjN38HZbY7n7I7T/PXk9QSIFFcdJZsokKKfHHZd/AdqIqTf8A9fxP/cLJ7jYGooB7O2lXK XB1eoB7RhmMp5WMwA2gDElYOfFqvilnzArcTBG6uCBDQG2Tpxh3yBe3yoiqUAN65Q3Gr2/dl2vW2 tksEMB/VuleTcDIoTMfVZF6gPrH2Ds/Rcc9pKWn1f0U= ) ; Key ID = 55186 nrc-gateway.gov. 172800 IN DNSKEY ( 257 3 8 AwEAAcYrH9Y7Xw2VncgPXe0RhqSjO31s/WhvYIXbDnKBhCrc2I8Q4C5YCFznRsLtHhOOrQfT0OVI ljL+kus81o1zr4Jnf7nSMvLR3jm6mjnT51jJXttNIuPgmq4JOiJ01o38IRc2efKTghnbej4I1jew QOwiGYfTXNSDzyVbHdo6F2DlyXvpAS3STpIVUiN/IMoVWIxDxQt1EvDzR/I4Ycx2bSze95QkhzUI KV9rNh45DrJQ1dfzkB4iZs+PpxCQjiHFLZxhFEHKm1FEwGHIo10exOHa4qtzRunUl/kZfnnG7y0R B9weMfLbr1fAoajjXzW+NbUDZtcnO0tALByYVUYNL28= ) ; Key ID = 24730 nrc-gateway.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20221202150005 20221128140759 26220 nrc-gateway.gov. Da894N5LoxdZ66JzhwByGuqsYBo0+f2Vxjoqg6FPZa6U/rLXyCSgFbIXCkBjQCIbH8zDNqx1R0LQ O5vKjsprTqHmxJCN43CHt9P5HzzH8BnHtFhxnMb40Z4ZzE9GVkHRldTVUmz+dAPb78SadWfSevEX YZio92DGPWOusru9ABA= ) nrc-gateway.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20221202150005 20221128140759 55186 nrc-gateway.gov. UeZfroTiJZG+DxZGAL2dGpRxNh2d0lwzpZZe8GGbzKtWdExjt5+W5e+TgbJhN0U45LRF4cgjbvhw 93cOmXZk1KkC7vXNEa9WkeSX0OilXmWuCrHxoSoWA2HQW8m04bQl0kpBgxC0UJc3QLs4jDpABmHU lCWnjxPwjLJ4GekI5FwuJWoRVcMZJyS7GapcB0ks2vlvmfOxX6PGqcavv7xumJc7Q6ScWQvNqxF3 myVMF6voZWAdQ0GKsa9OzmdW9sKBQCS1dytaUMzJbfhwQwStA7e2DI/4MdZ+Ot855CC8CdRbbMXL csuYazyvFXu6JUeLzz2ZEiz+H67zuDmlRZfwew== ) nrc-gateway.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20221202150005 20221128140759 24730 nrc-gateway.gov. b3xcgbzr64wNANKs9Rta1nXaeTjFkQPyhzHtbvBYK8qG2onwc0lqPkJX/wXPqJ/cUkNmAWGCSDVW 2HB+MM9YzGGZza2zGtl95tW4CKrUguDkME24721yCLm7jKkJm1PC/ZPPuAcaSwXMa4R3CQvojikl pl7MrVJ3zuS0uwWLwhaPr8YdVQqkfiWh+y521p2CoQE+bWRIBmQITbaSPQG/HAi81/dv0GxBLxi0 OznoWcArxFJiRs7WrOLl2XP7ZTOY/fGiex/vxT41S8hE4U1l4R1emJTGYverscrqoSQE6+QqBSPg z6t0+u77iDPMIHd8pn/n4BuxoXL/hosS086tKg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for nrc-gateway.gov
	`nrc-gateway.gov. 172800 IN DNSKEY ( 256 3 8 AwEAAd/PkPSDMiBuwVUVcv7+D4G7ZgBZjxYA8bZXbquWcsoEYK5N0Ol19se1dVPG8Gyt0Jk0tR07 XqSpsw0IJqYWNVWSA5lDU6jWdVhiq9dKCMBsVmnbQ24vBixT+86zwWjnqKtuIzsNFLJVnMIjvzRd v7iT6OkRa58SOa3AOnaMiREn ) ; Key ID = 26220`
	`nrc-gateway.gov. 172800 IN DNSKEY ( 257 3 8 AwEAAbcXGnUyowci0euuzWRVP6kg8CpTO8VfSd7nlx1qu9kh5TFSbOs3Cg1FhHNIM6nOQQDPGQUq aJz14cUiKd+/p7kj4GUDQOI+/6srIEHrSnC5Jxo/b57jy33mxzX8x6bQlejxAba/wbau38PDloZN sMV3TMbjN38HZbY7n7I7T/PXk9QSIFFcdJZsokKKfHHZd/AdqIqTf8A9fxP/cLJ7jYGooB7O2lXK XB1eoB7RhmMp5WMwA2gDElYOfFqvilnzArcTBG6uCBDQG2Tpxh3yBe3yoiqUAN65Q3Gr2/dl2vW2 tksEMB/VuleTcDIoTMfVZF6gPrH2Ds/Rcc9pKWn1f0U= ) ; Key ID = 55186`
	`nrc-gateway.gov. 172800 IN DNSKEY ( 257 3 8 AwEAAcYrH9Y7Xw2VncgPXe0RhqSjO31s/WhvYIXbDnKBhCrc2I8Q4C5YCFznRsLtHhOOrQfT0OVI ljL+kus81o1zr4Jnf7nSMvLR3jm6mjnT51jJXttNIuPgmq4JOiJ01o38IRc2efKTghnbej4I1jew QOwiGYfTXNSDzyVbHdo6F2DlyXvpAS3STpIVUiN/IMoVWIxDxQt1EvDzR/I4Ycx2bSze95QkhzUI KV9rNh45DrJQ1dfzkB4iZs+PpxCQjiHFLZxhFEHKm1FEwGHIo10exOHa4qtzRunUl/kZfnnG7y0R B9weMfLbr1fAoajjXzW+NbUDZtcnO0tALByYVUYNL28= ) ; Key ID = 24730`
	DNSKEY=24730/SEP is now in the chain-of-trust
	DS=24730/SHA-1 verifies DNSKEY=24730/SEP
	DS=24730/SHA-256 verifies DNSKEY=24730/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`nrc-gateway.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20221202150005 20221128140759 26220 nrc-gateway.gov. Da894N5LoxdZ66JzhwByGuqsYBo0+f2Vxjoqg6FPZa6U/rLXyCSgFbIXCkBjQCIbH8zDNqx1R0LQ O5vKjsprTqHmxJCN43CHt9P5HzzH8BnHtFhxnMb40Z4ZzE9GVkHRldTVUmz+dAPb78SadWfSevEX YZio92DGPWOusru9ABA= )`
	`nrc-gateway.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20221202150005 20221128140759 55186 nrc-gateway.gov. UeZfroTiJZG+DxZGAL2dGpRxNh2d0lwzpZZe8GGbzKtWdExjt5+W5e+TgbJhN0U45LRF4cgjbvhw 93cOmXZk1KkC7vXNEa9WkeSX0OilXmWuCrHxoSoWA2HQW8m04bQl0kpBgxC0UJc3QLs4jDpABmHU lCWnjxPwjLJ4GekI5FwuJWoRVcMZJyS7GapcB0ks2vlvmfOxX6PGqcavv7xumJc7Q6ScWQvNqxF3 myVMF6voZWAdQ0GKsa9OzmdW9sKBQCS1dytaUMzJbfhwQwStA7e2DI/4MdZ+Ot855CC8CdRbbMXL csuYazyvFXu6JUeLzz2ZEiz+H67zuDmlRZfwew== )`
	`nrc-gateway.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20221202150005 20221128140759 24730 nrc-gateway.gov. b3xcgbzr64wNANKs9Rta1nXaeTjFkQPyhzHtbvBYK8qG2onwc0lqPkJX/wXPqJ/cUkNmAWGCSDVW 2HB+MM9YzGGZza2zGtl95tW4CKrUguDkME24721yCLm7jKkJm1PC/ZPPuAcaSwXMa4R3CQvojikl pl7MrVJ3zuS0uwWLwhaPr8YdVQqkfiWh+y521p2CoQE+bWRIBmQITbaSPQG/HAi81/dv0GxBLxi0 OznoWcArxFJiRs7WrOLl2XP7ZTOY/fGiex/vxT41S8hE4U1l4R1emJTGYverscrqoSQE6+QqBSPg z6t0+u77iDPMIHd8pn/n4BuxoXL/hosS086tKg== )`
	RRSIG=26220 and DNSKEY=26220 verifies the DNSKEY RRset
	RRSIG=55186 and DNSKEY=55186/SEP verifies the DNSKEY RRset
	RRSIG=24730 and DNSKEY=24730/SEP verifies the DNSKEY RRset
	DNSKEY=26220 is now in the chain-of-trust
	DNSKEY=55186/SEP is now in the chain-of-trust
	Query to a10-67.akam.net for nrc-gateway.gov/A
	Received 235 bytes from 96.7.50.67
	;; Response received from 96.7.50.67 (235 octets) ;; HEADER SECTION ;; id = 63389 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nrc-gateway.gov. IN A ;; ANSWER SECTION (2 records) nrc-gateway.gov. 14400 IN A 52.179.234.25 nrc-gateway.gov. 14400 IN RRSIG ( A 8 2 14400 20221202084656 20221128075940 26220 nrc-gateway.gov. wZEAc4pPOyVpBxYIsmRdlmObmoVF0Q+gNzJYIXOcQMNR7IoHETy/inrRtZgNQOLgf/iquVCoq4OT Jr+GF/mU3f6Wx0wVHVLlnhFL7VpHkGm9RPSda+pac1j5DLNH60Kw7fYR6F8S1MNQszKw3+K+d1O0 2zLOHuT7Bd5mzKVgoBA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	a10-67.akam.net is authoritative for nrc-gateway.gov
	Found RRSIG signed by nrc-gateway.gov zone
	Query to dnssec14.datamtn.com for nrc-gateway.gov/SOA
	Received 290 bytes from 65.49.37.203
	;; Response received from 65.49.37.203 (290 octets) ;; HEADER SECTION ;; id = 12345 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nrc-gateway.gov. IN SOA ;; ANSWER SECTION (2 records) nrc-gateway.gov. 14400 IN SOA ( dnssec14.datamtn.com. postmaster.nrc.gov. 2022038503 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) nrc-gateway.gov. 14400 IN RRSIG ( SOA 8 2 14400 20221202191402 20221128181402 26220 nrc-gateway.gov. z1NfAq1J+8eFa0kLQVY8oPf2FMb07QggEcWwyzSbbRbqz0opxWQpCDx0RiwkaXYnaXVFv8j7RFN6 1TK8iWnMSyZWSD05z1QqPR6hyj6O1dGSJjll+sW8MJPoZSXJWbHeRiZj+PaLRZPrDGTCDciTxCHh ndKV0v220N/oF3T1sOQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a1-154.akam.net for nrc-gateway.gov/SOA
	Received 550 bytes from 193.108.91.154
	;; Response received from 193.108.91.154 (550 octets) ;; HEADER SECTION ;; id = 4143 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nrc-gateway.gov. IN SOA ;; ANSWER SECTION (2 records) nrc-gateway.gov. 14400 IN SOA ( dnssec14.datamtn.com. postmaster.nrc.gov. 2022038503 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) nrc-gateway.gov. 14400 IN RRSIG ( SOA 8 2 14400 20221202191402 20221128181402 26220 nrc-gateway.gov. z1NfAq1J+8eFa0kLQVY8oPf2FMb07QggEcWwyzSbbRbqz0opxWQpCDx0RiwkaXYnaXVFv8j7RFN6 1TK8iWnMSyZWSD05z1QqPR6hyj6O1dGSJjll+sW8MJPoZSXJWbHeRiZj+PaLRZPrDGTCDciTxCHh ndKV0v220N/oF3T1sOQ= ) ;; AUTHORITY SECTION (5 records) nrc-gateway.gov. 14400 IN NS a1-154.akam.net. nrc-gateway.gov. 14400 IN NS a13-66.akam.net. nrc-gateway.gov. 14400 IN NS dnssec14.datamtn.com. nrc-gateway.gov. 14400 IN NS a10-67.akam.net. nrc-gateway.gov. 14400 IN RRSIG ( NS 8 2 14400 20221202134354 20221128134130 26220 nrc-gateway.gov. kMTNevOH9MPaap0Ioi232H3R8W/2htWpZtgBmeuaOMt0NY678dffMP1ciwWdtI9kdGLNiY5O+fvQ ylKO5ByvB2WbH0gUXMHtvMLwUfBx6U7+mVVS5+tqrvqxXuZqcrGs9A/QgeF60QxuQK7fTkEVm9Kw XzY//B0oryBfuz7oNV0= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a13-66.akam.net for nrc-gateway.gov/SOA
	Received 550 bytes from 2.22.230.66
	;; Response received from 2.22.230.66 (550 octets) ;; HEADER SECTION ;; id = 43077 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nrc-gateway.gov. IN SOA ;; ANSWER SECTION (2 records) nrc-gateway.gov. 14400 IN SOA ( dnssec14.datamtn.com. postmaster.nrc.gov. 2022038503 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) nrc-gateway.gov. 14400 IN RRSIG ( SOA 8 2 14400 20221202191402 20221128181402 26220 nrc-gateway.gov. z1NfAq1J+8eFa0kLQVY8oPf2FMb07QggEcWwyzSbbRbqz0opxWQpCDx0RiwkaXYnaXVFv8j7RFN6 1TK8iWnMSyZWSD05z1QqPR6hyj6O1dGSJjll+sW8MJPoZSXJWbHeRiZj+PaLRZPrDGTCDciTxCHh ndKV0v220N/oF3T1sOQ= ) ;; AUTHORITY SECTION (5 records) nrc-gateway.gov. 14400 IN NS dnssec14.datamtn.com. nrc-gateway.gov. 14400 IN NS a1-154.akam.net. nrc-gateway.gov. 14400 IN NS a10-67.akam.net. nrc-gateway.gov. 14400 IN NS a13-66.akam.net. nrc-gateway.gov. 14400 IN RRSIG ( NS 8 2 14400 20221202134354 20221128134130 26220 nrc-gateway.gov. kMTNevOH9MPaap0Ioi232H3R8W/2htWpZtgBmeuaOMt0NY678dffMP1ciwWdtI9kdGLNiY5O+fvQ ylKO5ByvB2WbH0gUXMHtvMLwUfBx6U7+mVVS5+tqrvqxXuZqcrGs9A/QgeF60QxuQK7fTkEVm9Kw XzY//B0oryBfuz7oNV0= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a10-67.akam.net for nrc-gateway.gov/A
	Received 235 bytes from 96.7.50.67
	;; Response received from 96.7.50.67 (235 octets) ;; HEADER SECTION ;; id = 57292 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nrc-gateway.gov. IN A ;; ANSWER SECTION (2 records) nrc-gateway.gov. 14400 IN A 52.179.234.25 nrc-gateway.gov. 14400 IN RRSIG ( A 8 2 14400 20221202084656 20221128075940 26220 nrc-gateway.gov. wZEAc4pPOyVpBxYIsmRdlmObmoVF0Q+gNzJYIXOcQMNR7IoHETy/inrRtZgNQOLgf/iquVCoq4OT Jr+GF/mU3f6Wx0wVHVLlnhFL7VpHkGm9RPSda+pac1j5DLNH60Kw7fYR6F8S1MNQszKw3+K+d1O0 2zLOHuT7Bd5mzKVgoBA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	nrc-gateway.gov A RR has value 52.179.234.25
	Found 1 RRSIGs over A RRset
	`nrc-gateway.gov. 14400 IN RRSIG ( A 8 2 14400 20221202084656 20221128075940 26220 nrc-gateway.gov. wZEAc4pPOyVpBxYIsmRdlmObmoVF0Q+gNzJYIXOcQMNR7IoHETy/inrRtZgNQOLgf/iquVCoq4OT Jr+GF/mU3f6Wx0wVHVLlnhFL7VpHkGm9RPSda+pac1j5DLNH60Kw7fYR6F8S1MNQszKw3+K+d1O0 2zLOHuT7Bd5mzKVgoBA= )`
	RRSIG=26220 and DNSKEY=26220 verifies the A RRset

nrc-gateway.gov

	Query to a1-154.akam.net for nrc-gateway.gov/A
	Received 235 bytes from 193.108.91.154
	;; Response received from 193.108.91.154 (235 octets) ;; HEADER SECTION ;; id = 56804 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nrc-gateway.gov. IN A ;; ANSWER SECTION (2 records) nrc-gateway.gov. 14400 IN A 52.179.234.25 nrc-gateway.gov. 14400 IN RRSIG ( A 8 2 14400 20221202084656 20221128075940 26220 nrc-gateway.gov. wZEAc4pPOyVpBxYIsmRdlmObmoVF0Q+gNzJYIXOcQMNR7IoHETy/inrRtZgNQOLgf/iquVCoq4OT Jr+GF/mU3f6Wx0wVHVLlnhFL7VpHkGm9RPSda+pac1j5DLNH60Kw7fYR6F8S1MNQszKw3+K+d1O0 2zLOHuT7Bd5mzKVgoBA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	a1-154.akam.net is authoritative for nrc-gateway.gov
	Found RRSIG signed by nrc-gateway.gov zone
	Query to a1-154.akam.net for nrc-gateway.gov/A
	Received 235 bytes from 193.108.91.154
	;; Response received from 193.108.91.154 (235 octets) ;; HEADER SECTION ;; id = 65397 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nrc-gateway.gov. IN A ;; ANSWER SECTION (2 records) nrc-gateway.gov. 14400 IN A 52.179.234.25 nrc-gateway.gov. 14400 IN RRSIG ( A 8 2 14400 20221202084656 20221128075940 26220 nrc-gateway.gov. wZEAc4pPOyVpBxYIsmRdlmObmoVF0Q+gNzJYIXOcQMNR7IoHETy/inrRtZgNQOLgf/iquVCoq4OT Jr+GF/mU3f6Wx0wVHVLlnhFL7VpHkGm9RPSda+pac1j5DLNH60Kw7fYR6F8S1MNQszKw3+K+d1O0 2zLOHuT7Bd5mzKVgoBA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	nrc-gateway.gov A RR has value 52.179.234.25
	Found 1 RRSIGs over A RRset
	`nrc-gateway.gov. 14400 IN RRSIG ( A 8 2 14400 20221202084656 20221128075940 26220 nrc-gateway.gov. wZEAc4pPOyVpBxYIsmRdlmObmoVF0Q+gNzJYIXOcQMNR7IoHETy/inrRtZgNQOLgf/iquVCoq4OT Jr+GF/mU3f6Wx0wVHVLlnhFL7VpHkGm9RPSda+pac1j5DLNH60Kw7fYR6F8S1MNQszKw3+K+d1O0 2zLOHuT7Bd5mzKVgoBA= )`
	RRSIG=26220 and DNSKEY=26220 verifies the A RRset

nrc-gateway.gov

	Query to a13-66.akam.net for nrc-gateway.gov/A
	Received 235 bytes from 2.22.230.66
	;; Response received from 2.22.230.66 (235 octets) ;; HEADER SECTION ;; id = 36529 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nrc-gateway.gov. IN A ;; ANSWER SECTION (2 records) nrc-gateway.gov. 14400 IN A 52.179.234.25 nrc-gateway.gov. 14400 IN RRSIG ( A 8 2 14400 20221202084656 20221128075940 26220 nrc-gateway.gov. wZEAc4pPOyVpBxYIsmRdlmObmoVF0Q+gNzJYIXOcQMNR7IoHETy/inrRtZgNQOLgf/iquVCoq4OT Jr+GF/mU3f6Wx0wVHVLlnhFL7VpHkGm9RPSda+pac1j5DLNH60Kw7fYR6F8S1MNQszKw3+K+d1O0 2zLOHuT7Bd5mzKVgoBA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	a13-66.akam.net is authoritative for nrc-gateway.gov
	Found RRSIG signed by nrc-gateway.gov zone
	Query to a13-66.akam.net for nrc-gateway.gov/A
	Received 235 bytes from 2.22.230.66
	;; Response received from 2.22.230.66 (235 octets) ;; HEADER SECTION ;; id = 15256 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nrc-gateway.gov. IN A ;; ANSWER SECTION (2 records) nrc-gateway.gov. 14400 IN A 52.179.234.25 nrc-gateway.gov. 14400 IN RRSIG ( A 8 2 14400 20221202084656 20221128075940 26220 nrc-gateway.gov. wZEAc4pPOyVpBxYIsmRdlmObmoVF0Q+gNzJYIXOcQMNR7IoHETy/inrRtZgNQOLgf/iquVCoq4OT Jr+GF/mU3f6Wx0wVHVLlnhFL7VpHkGm9RPSda+pac1j5DLNH60Kw7fYR6F8S1MNQszKw3+K+d1O0 2zLOHuT7Bd5mzKVgoBA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	nrc-gateway.gov A RR has value 52.179.234.25
	Found 1 RRSIGs over A RRset
	`nrc-gateway.gov. 14400 IN RRSIG ( A 8 2 14400 20221202084656 20221128075940 26220 nrc-gateway.gov. wZEAc4pPOyVpBxYIsmRdlmObmoVF0Q+gNzJYIXOcQMNR7IoHETy/inrRtZgNQOLgf/iquVCoq4OT Jr+GF/mU3f6Wx0wVHVLlnhFL7VpHkGm9RPSda+pac1j5DLNH60Kw7fYR6F8S1MNQszKw3+K+d1O0 2zLOHuT7Bd5mzKVgoBA= )`
	RRSIG=26220 and DNSKEY=26220 verifies the A RRset

nrc-gateway.gov

	Query to dnssec14.datamtn.com for nrc-gateway.gov/A
	Received 235 bytes from 65.49.37.203
	;; Response received from 65.49.37.203 (235 octets) ;; HEADER SECTION ;; id = 45658 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nrc-gateway.gov. IN A ;; ANSWER SECTION (2 records) nrc-gateway.gov. 14400 IN A 52.179.234.25 nrc-gateway.gov. 14400 IN RRSIG ( A 8 2 14400 20221202084656 20221128075940 26220 nrc-gateway.gov. wZEAc4pPOyVpBxYIsmRdlmObmoVF0Q+gNzJYIXOcQMNR7IoHETy/inrRtZgNQOLgf/iquVCoq4OT Jr+GF/mU3f6Wx0wVHVLlnhFL7VpHkGm9RPSda+pac1j5DLNH60Kw7fYR6F8S1MNQszKw3+K+d1O0 2zLOHuT7Bd5mzKVgoBA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dnssec14.datamtn.com is authoritative for nrc-gateway.gov
	Found RRSIG signed by nrc-gateway.gov zone
	Query to dnssec14.datamtn.com for nrc-gateway.gov/A
	Received 235 bytes from 65.49.37.203
	;; Response received from 65.49.37.203 (235 octets) ;; HEADER SECTION ;; id = 9142 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nrc-gateway.gov. IN A ;; ANSWER SECTION (2 records) nrc-gateway.gov. 14400 IN A 52.179.234.25 nrc-gateway.gov. 14400 IN RRSIG ( A 8 2 14400 20221202084656 20221128075940 26220 nrc-gateway.gov. wZEAc4pPOyVpBxYIsmRdlmObmoVF0Q+gNzJYIXOcQMNR7IoHETy/inrRtZgNQOLgf/iquVCoq4OT Jr+GF/mU3f6Wx0wVHVLlnhFL7VpHkGm9RPSda+pac1j5DLNH60Kw7fYR6F8S1MNQszKw3+K+d1O0 2zLOHuT7Bd5mzKVgoBA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	nrc-gateway.gov A RR has value 52.179.234.25
	Found 1 RRSIGs over A RRset
	`nrc-gateway.gov. 14400 IN RRSIG ( A 8 2 14400 20221202084656 20221128075940 26220 nrc-gateway.gov. wZEAc4pPOyVpBxYIsmRdlmObmoVF0Q+gNzJYIXOcQMNR7IoHETy/inrRtZgNQOLgf/iquVCoq4OT Jr+GF/mU3f6Wx0wVHVLlnhFL7VpHkGm9RPSda+pac1j5DLNH60Kw7fYR6F8S1MNQszKw3+K+d1O0 2zLOHuT7Bd5mzKVgoBA= )`
	RRSIG=26220 and DNSKEY=26220 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test nrc-gateway.gov at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: