DNSSEC Analyzer - pnnl.gov

Domain Name:

Time: 2022-11-28 19:32:22 UTC, NTP stratum 16

Analyzing DNSSEC problems for pnnl.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to m.root-servers.net for ./DNSKEY
	Received 865 bytes from 202.12.27.33
	;; Response received from 202.12.27.33 (865 octets) ;; HEADER SECTION ;; id = 61247 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeB54o2xvW6vY4qQZ0krDsEZCe6MsRWCqsXd4+cNJZMePnlV/xwDrIbbeH1SJzv742rOHzgA KM1/3SQHHSkoEIPx8XQdHAZBxfhaXl3e8c5WrE3aGXS5AeTWAkt85ccqWgKyitxjFmJEOol0BqS2 xueltaDwgWcC10nPUY+y5l/kTOYyptYQS4gg1uJNXIob/R1XIEJ10ZCurkYqZxgqyHc7tZv09N23 o9rnGdjnYiArH7FjlXD8Rvjde8YWkmfdbCEWnchrnxDK8KV2/ZvBpG/WYnRKXYPUceGCw59OJdJ5 M7utkm547RB3eEd8CVVhbXopZlsKq3GCrBwaIVe9ci0= ) ; Key ID = 18733 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20221211000000 20221120000000 20326 . Y8Or1olHbjYMKfZxcKA8mP9+GWhl66Cu6Mrjh9NzLuBZ+14JZodwSJ5JaXzJxRzgHxTd/TWvnI4b AM/DQ8NYyRX/QezQdGU4ZE5RcrZLanxuX/FQR/qIMlLttCsoPtlM677HA3CecqLljbrcayIDSKMg hh5iKV1iOoW1BP1KZwgH4Y87fiWbevk+AmN5xbJCPk1iCis+kMulacxTFC+g0jyLv1V0C2hneqZ5 8os/QvW7XNBWLd9OC1LbMVVkfgUsVYqfwLjcieQ5YVRshfy2Iazv2sLo87sGvBnLmSUx8F4hiotE K6UjTNNun1tKe0VTBVkXQyaIzfUOkPgoMoWojg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeB54o2xvW6vY4qQZ0krDsEZCe6MsRWCqsXd4+cNJZMePnlV/xwDrIbbeH1SJzv742rOHzgA KM1/3SQHHSkoEIPx8XQdHAZBxfhaXl3e8c5WrE3aGXS5AeTWAkt85ccqWgKyitxjFmJEOol0BqS2 xueltaDwgWcC10nPUY+y5l/kTOYyptYQS4gg1uJNXIob/R1XIEJ10ZCurkYqZxgqyHc7tZv09N23 o9rnGdjnYiArH7FjlXD8Rvjde8YWkmfdbCEWnchrnxDK8KV2/ZvBpG/WYnRKXYPUceGCw59OJdJ5 M7utkm547RB3eEd8CVVhbXopZlsKq3GCrBwaIVe9ci0= ) ; Key ID = 18733`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20221211000000 20221120000000 20326 . Y8Or1olHbjYMKfZxcKA8mP9+GWhl66Cu6Mrjh9NzLuBZ+14JZodwSJ5JaXzJxRzgHxTd/TWvnI4b AM/DQ8NYyRX/QezQdGU4ZE5RcrZLanxuX/FQR/qIMlLttCsoPtlM677HA3CecqLljbrcayIDSKMg hh5iKV1iOoW1BP1KZwgH4Y87fiWbevk+AmN5xbJCPk1iCis+kMulacxTFC+g0jyLv1V0C2hneqZ5 8os/QvW7XNBWLd9OC1LbMVVkfgUsVYqfwLjcieQ5YVRshfy2Iazv2sLo87sGvBnLmSUx8F4hiotE K6UjTNNun1tKe0VTBVkXQyaIzfUOkPgoMoWojg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=18733 is now in the chain-of-trust
	Query to b.root-servers.net for pnnl.gov/A
	Received 627 bytes from 199.9.14.201
	;; Response received from 199.9.14.201 (627 octets) ;; HEADER SECTION ;; id = 5761 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; pnnl.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20221211170000 20221128160000 18733 . IKV+yYkguo8XVZD1TDliQX5qOkNDvzyDAUFQKYK1XjRM1HEEI/2SN4ab4ATDq+rmUso0vA6p5r7P O74Q1CyvTtajLoa3GGmq/uIW3e2yLlX875KUTlbTCFxHtWTOM03pF/alga8aiZM7V08WtD3c8b/j 9RtW40lYfRtbldaTdzrce9wY8GQumJmpO1knnmJLRZtHn1OvMwnWm6bQ4oyCgdRGwespvQx+6Lvq TPdSOd/TNjoDrw4lAxCFv7TUmXHSIoYMIvIWA+TRX3utgN6ZSgNm2UiJm1VtOSSVBWSzK23WakyL ucVs/ref0/OCCJf87jzelHE/QLjSgc7Y1ZrKfA== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to j.root-servers.net for gov/DNSKEY
	Received 622 bytes from 192.58.128.30
	;; Response received from 192.58.128.30 (622 octets) ;; HEADER SECTION ;; id = 4138 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20221211170000 20221128160000 18733 . IKV+yYkguo8XVZD1TDliQX5qOkNDvzyDAUFQKYK1XjRM1HEEI/2SN4ab4ATDq+rmUso0vA6p5r7P O74Q1CyvTtajLoa3GGmq/uIW3e2yLlX875KUTlbTCFxHtWTOM03pF/alga8aiZM7V08WtD3c8b/j 9RtW40lYfRtbldaTdzrce9wY8GQumJmpO1knnmJLRZtHn1OvMwnWm6bQ4oyCgdRGwespvQx+6Lvq TPdSOd/TNjoDrw4lAxCFv7TUmXHSIoYMIvIWA+TRX3utgN6ZSgNm2UiJm1VtOSSVBWSzK23WakyL ucVs/ref0/OCCJf87jzelHE/QLjSgc7Y1ZrKfA== ) ;; ADDITIONAL SECTION (9 records) b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone gov

gov

	Checking DS between . and gov
	Query to k.root-servers.net for gov/DS
	Received 367 bytes from 193.0.14.129
	;; Response received from 193.0.14.129 (367 octets) ;; HEADER SECTION ;; id = 31083 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20221211170000 20221128160000 18733 . IKV+yYkguo8XVZD1TDliQX5qOkNDvzyDAUFQKYK1XjRM1HEEI/2SN4ab4ATDq+rmUso0vA6p5r7P O74Q1CyvTtajLoa3GGmq/uIW3e2yLlX875KUTlbTCFxHtWTOM03pF/alga8aiZM7V08WtD3c8b/j 9RtW40lYfRtbldaTdzrce9wY8GQumJmpO1knnmJLRZtHn1OvMwnWm6bQ4oyCgdRGwespvQx+6Lvq TPdSOd/TNjoDrw4lAxCFv7TUmXHSIoYMIvIWA+TRX3utgN6ZSgNm2UiJm1VtOSSVBWSzK23WakyL ucVs/ref0/OCCJf87jzelHE/QLjSgc7Y1ZrKfA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for gov in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20221211170000 20221128160000 18733 . IKV+yYkguo8XVZD1TDliQX5qOkNDvzyDAUFQKYK1XjRM1HEEI/2SN4ab4ATDq+rmUso0vA6p5r7P O74Q1CyvTtajLoa3GGmq/uIW3e2yLlX875KUTlbTCFxHtWTOM03pF/alga8aiZM7V08WtD3c8b/j 9RtW40lYfRtbldaTdzrce9wY8GQumJmpO1knnmJLRZtHn1OvMwnWm6bQ4oyCgdRGwespvQx+6Lvq TPdSOd/TNjoDrw4lAxCFv7TUmXHSIoYMIvIWA+TRX3utgN6ZSgNm2UiJm1VtOSSVBWSzK23WakyL ucVs/ref0/OCCJf87jzelHE/QLjSgc7Y1ZrKfA== )`
	RRSIG=18733 and DNSKEY=18733 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to d.gov-servers.net for gov/DNSKEY
	Received 777 bytes from 81.19.194.30
	;; Response received from 81.19.194.30 (777 octets) ;; HEADER SECTION ;; id = 4004 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 gov. 86400 IN DNSKEY ( 256 3 8 AwEAAdTUAXnPaU/j+tBXBKqj7wf6CTR5erm5HMRumZ8tyIXi4rmbOdvpGcGLEu3YjqwkGoht1S4B a555IpEt+oUsjN57HbQ6eAMxBCX50EC1ipBmnnznhgoflu+DE+4No9wXHHh9pa6Vn8N7QiG1zZ4e kc9rS0to56mkLfNzJ+gjzH3tOfB9W5qnEqkqRuqXHnXxQQLBQ1I6vh1VZ5uQKYIe2H0= ) ; Key ID = 56278 gov. 86400 IN RRSIG ( DNSKEY 8 1 86400 20221205200254 20221120195754 7698 gov. FZUGnVFsKhKrSxuAbI6JdAQxCbzoP6JvsFLwKXwCMHIoBB2la/7+jwQ3DWB1LuJVqt/6SlSzTZbz mcq4Irnwjmwg+EQECsqhA7KIybCpPSiq/XsXPxvHrXes7+sVKa0UJ2wNq3yiKKzkAAlBOJfkEu5o 6jVpHpQ1NQG28rY1X4Ati7PE6ny3m3LkkrYEflE2YfXXOge+bCFjUBCBCX3YFTkJvrBuWUdfdyan 0FuN+tjFDUOzwz0t3RsiYrSfy8/Ozv8lzSI1Mip6f271uHgjpi51in8shWZibER4MxShpHa0zEQo kMiGRx3cxnAble1onSgEDfnovYe7Z7hm3ReLUQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for gov
	`gov. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`gov. 86400 IN DNSKEY ( 256 3 8 AwEAAdTUAXnPaU/j+tBXBKqj7wf6CTR5erm5HMRumZ8tyIXi4rmbOdvpGcGLEu3YjqwkGoht1S4B a555IpEt+oUsjN57HbQ6eAMxBCX50EC1ipBmnnznhgoflu+DE+4No9wXHHh9pa6Vn8N7QiG1zZ4e kc9rS0to56mkLfNzJ+gjzH3tOfB9W5qnEqkqRuqXHnXxQQLBQ1I6vh1VZ5uQKYIe2H0= ) ; Key ID = 56278`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 86400 IN RRSIG ( DNSKEY 8 1 86400 20221205200254 20221120195754 7698 gov. FZUGnVFsKhKrSxuAbI6JdAQxCbzoP6JvsFLwKXwCMHIoBB2la/7+jwQ3DWB1LuJVqt/6SlSzTZbz mcq4Irnwjmwg+EQECsqhA7KIybCpPSiq/XsXPxvHrXes7+sVKa0UJ2wNq3yiKKzkAAlBOJfkEu5o 6jVpHpQ1NQG28rY1X4Ati7PE6ny3m3LkkrYEflE2YfXXOge+bCFjUBCBCX3YFTkJvrBuWUdfdyan 0FuN+tjFDUOzwz0t3RsiYrSfy8/Ozv8lzSI1Mip6f271uHgjpi51in8shWZibER4MxShpHa0zEQo kMiGRx3cxnAble1onSgEDfnovYe7Z7hm3ReLUQ== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=56278 is now in the chain-of-trust
	Query to b.gov-servers.net for pnnl.gov/A
	Received 468 bytes from 209.112.123.30
	;; Response received from 209.112.123.30 (468 octets) ;; HEADER SECTION ;; id = 44919 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; pnnl.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) pnnl.gov. 86400 IN NS nsy.pnl.gov. pnnl.gov. 86400 IN NS nsx.pnl.gov. pnnl.gov. 3600 IN DS 13866 7 1 f64b6673b7e5f20a8830e40345592af5fdd85d80 pnnl.gov. 3600 IN DS ( 16611 7 2 555f6146eb39d34623a9d9d174a027c710f2445b8fe699bc244d62f90a87071e ) pnnl.gov. 3600 IN DS ( 13866 7 2 d327276b25c11ee06764117cf092249ef00e80fd1a7152c0f58b9ccc58327d91 ) pnnl.gov. 3600 IN RRSIG ( DS 8 2 3600 20221202154012 20221125154012 56278 gov. CjuWQizz3+JRcpzzIvboXRkxDdjnaMgg21RhehnSOwhLM2fXqZdx8j7uCEKtTaT8svQP8+ElKn+f /KLesNxV9b7NLWSVmVagwGf86QFCy9VCUUtQSH+aUPqcOfvQ7OL6jGkGmqNE8fB2fvfl2sNs93oK FgqY8MGmMrtL7rF0C+MJaCihvcwHKiywpZAcglF7HFyUj4odoFLj00FcwF0fZg== ) ;; ADDITIONAL SECTION (5 records) nsx.pnl.gov. 86400 IN A 192.101.109.80 nsx.pnl.gov. 86400 IN A 192.101.109.47 nsy.pnl.gov. 86400 IN A 192.101.109.47 nsy.pnl.gov. 86400 IN A 192.101.109.80 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.gov-servers.net for pnnl.gov/DNSKEY
	Received 468 bytes from 69.36.157.30
	;; Response received from 69.36.157.30 (468 octets) ;; HEADER SECTION ;; id = 34680 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; pnnl.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) pnnl.gov. 86400 IN NS nsy.pnl.gov. pnnl.gov. 86400 IN NS nsx.pnl.gov. pnnl.gov. 3600 IN DS 13866 7 1 f64b6673b7e5f20a8830e40345592af5fdd85d80 pnnl.gov. 3600 IN DS ( 16611 7 2 555f6146eb39d34623a9d9d174a027c710f2445b8fe699bc244d62f90a87071e ) pnnl.gov. 3600 IN DS ( 13866 7 2 d327276b25c11ee06764117cf092249ef00e80fd1a7152c0f58b9ccc58327d91 ) pnnl.gov. 3600 IN RRSIG ( DS 8 2 3600 20221202154012 20221125154012 56278 gov. CjuWQizz3+JRcpzzIvboXRkxDdjnaMgg21RhehnSOwhLM2fXqZdx8j7uCEKtTaT8svQP8+ElKn+f /KLesNxV9b7NLWSVmVagwGf86QFCy9VCUUtQSH+aUPqcOfvQ7OL6jGkGmqNE8fB2fvfl2sNs93oK FgqY8MGmMrtL7rF0C+MJaCihvcwHKiywpZAcglF7HFyUj4odoFLj00FcwF0fZg== ) ;; ADDITIONAL SECTION (5 records) nsx.pnl.gov. 86400 IN A 192.101.109.80 nsx.pnl.gov. 86400 IN A 192.101.109.47 nsy.pnl.gov. 86400 IN A 192.101.109.47 nsy.pnl.gov. 86400 IN A 192.101.109.80 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone pnnl.gov

pnnl.gov

	Checking DS between gov and pnnl.gov
	Query to b.gov-servers.net for pnnl.gov/DS
	Received 364 bytes from 209.112.123.30
	;; Response received from 209.112.123.30 (364 octets) ;; HEADER SECTION ;; id = 14960 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; pnnl.gov. IN DS ;; ANSWER SECTION (4 records) pnnl.gov. 3600 IN DS ( 13866 7 2 d327276b25c11ee06764117cf092249ef00e80fd1a7152c0f58b9ccc58327d91 ) pnnl.gov. 3600 IN DS ( 16611 7 2 555f6146eb39d34623a9d9d174a027c710f2445b8fe699bc244d62f90a87071e ) pnnl.gov. 3600 IN DS 13866 7 1 f64b6673b7e5f20a8830e40345592af5fdd85d80 pnnl.gov. 3600 IN RRSIG ( DS 8 2 3600 20221202154012 20221125154012 56278 gov. CjuWQizz3+JRcpzzIvboXRkxDdjnaMgg21RhehnSOwhLM2fXqZdx8j7uCEKtTaT8svQP8+ElKn+f /KLesNxV9b7NLWSVmVagwGf86QFCy9VCUUtQSH+aUPqcOfvQ7OL6jGkGmqNE8fB2fvfl2sNs93oK FgqY8MGmMrtL7rF0C+MJaCihvcwHKiywpZAcglF7HFyUj4odoFLj00FcwF0fZg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DS records for pnnl.gov in the gov zone
	DS=13866/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=16611/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=13866/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`pnnl.gov. 3600 IN RRSIG ( DS 8 2 3600 20221202154012 20221125154012 56278 gov. CjuWQizz3+JRcpzzIvboXRkxDdjnaMgg21RhehnSOwhLM2fXqZdx8j7uCEKtTaT8svQP8+ElKn+f /KLesNxV9b7NLWSVmVagwGf86QFCy9VCUUtQSH+aUPqcOfvQ7OL6jGkGmqNE8fB2fvfl2sNs93oK FgqY8MGmMrtL7rF0C+MJaCihvcwHKiywpZAcglF7HFyUj4odoFLj00FcwF0fZg== )`
	RRSIG=56278 and DNSKEY=56278 verifies the DS RRset
	DS=13866/SHA-256 is now in the chain-of-trust
	DS=16611/SHA-256 is now in the chain-of-trust
	`pnnl.gov. 3600 IN DS ( 13866 7 2 d327276b25c11ee06764117cf092249ef00e80fd1a7152c0f58b9ccc58327d91 )`
	`pnnl.gov. 3600 IN DS ( 16611 7 2 555f6146eb39d34623a9d9d174a027c710f2445b8fe699bc244d62f90a87071e )`
	`pnnl.gov. 3600 IN DS 13866 7 1 f64b6673b7e5f20a8830e40345592af5fdd85d80`
	Query to nsy.pnl.gov for pnnl.gov/DNSKEY
	Received 1813 bytes from 192.101.109.47
	;; Response received from 192.101.109.47 (1813 octets) ;; HEADER SECTION ;; id = 4431 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; pnnl.gov. IN DNSKEY ;; ANSWER SECTION (8 records) pnnl.gov. 1296000 IN DNSKEY ( 256 3 7 AwEAAdp2wtTmFM57ZX2Su8Nlgy4kUJbcxiIP//jcj1KJTQwA9eBwEjVv44/ga4bIJrNXCBm8VqWi sJlsvhFSFCBqBvDVh+yaWNdu2TEMmspRGOScZYDK4smoCv2MLsRc4ikQb1J0nvG+7ejS1/GH9Prc luwhQebUmeengU0HSbggMUHf ) ; Key ID = 12050 pnnl.gov. 1296000 IN DNSKEY ( 257 3 7 AwEAAc8YOvqm0BpOEwhkgUW55Tql0MwkATEtOgITFbWZZb4AYYz5ENe7RkKt3Owm/tZuoGhtKZ2y oHNEBRKjrBuSjS36YyeHK5osajgux7E8cQxF1wvPST94tOHap3qMoW2Wx5hpaQG+3/7EuYUSzCS+ QZcwzy3EQbsE3p+hVazZ/29hw6aeTxg7d3pw5rc1+kb/dhp08FchWph4H6qzeJh2Lk2fry+zmqg/ 0ULkyy+DI4JQZO9P76VCmSVB/bf5PHYcgc2He8pV1iVlaRAsLM+IVx7Ybh6ooHELXqAcBDAoNEwX /H19WICVVpYQKw6qY7HH/d5MBBT0KX+rWzOGk5McT/U= ) ; Key ID = 13866 pnnl.gov. 1296000 IN DNSKEY ( 256 3 7 AwEAAcuBvC5PqhQfX628HlNdRWGAXe81ruQFaAC5EY3i8m6MP1eXQaNnl4FD2V5wJfhH6D14Aj6G zOSlFMRksDoN5WX13Sv5mt/ln5l9Qcw7r2KnT8U5Yt95mFlKnk+sJxlnZFxubK5QxIiWRufJAeAi JY5OiIxhDpptkAS/iaacQknN ) ; Key ID = 24005 pnnl.gov. 1296000 IN DNSKEY ( 257 3 7 AwEAAdzasFGSxy4ZugN6gz/Mp1DwfwClJa3lSxWV4NTfJdBPpZ2MLZXi9ms4sfcThctb4ozLtjyx ZjSpuYXZDT/PwPyEjjdN6Jv23QuroJKWMwd3V/XaN2TsbPCCckGvYNcindHLvDA5qv8zvThuD2nZ lA5uuLHwKgYT1ccgeIvWqDqeQoypEMeBRBYuPPsllN7MR9A22b+2dc+y/o0484fJftrZGbTBH67I WCBMCYFuYPq7EIGhhdwFdBbdufxNUwE5D9ffksR035bhPANKKxiiES0Sf+2cLVWJ5gb96I/upm3L sB1a53M0jtSnsMNaC2FJEtoRr2G0hXF/HzOg64Y/hJ0= ) ; Key ID = 16611 pnnl.gov. 1296000 IN RRSIG ( DNSKEY 7 2 1296000 20221227155627 20221127145627 12050 pnnl.gov. xSv0Tl04ECmZ1DzqHdfa1DrnO2H6iE4xOwmtjHJ1FQObxVOwppdOHz7iRZPL6/VJCvO2dc99sOGI poNgMlSUWjhDGpKrg73ArCNiX3V7gPdZrKNufek7TOrpuVStfYKTz6GccWE+mWNNnppdKfzKe7TF gOVpeSVCQcajr6BJT2s= ) pnnl.gov. 1296000 IN RRSIG ( DNSKEY 7 2 1296000 20221227155627 20221127145627 13866 pnnl.gov. GJEeAdm3x4WFbjNWB7tp0zkniU0Kp3exSJ9gLq7jcKl4ZxTsSWrIJGfjMjfBp51GxYgBfQmh4d2U wlC518ojTuyKwhMR5vqCuCMHfqo/Q05Bobe+u4Zs/vXKbYLN7/4MB/k9g0lDzJtPU7jyXtQ1sKQu /LQQVhaQ7beJzWzQONZvZxIk4cHT6iHjkYI9x4NxHGofcYTTRetW9vI6dtVCG2mmrzb2YodaVhRd Gn1CCyJG1VJVx0KU2U7G8n/xvtK2xebb6OlJRrz9+tyMDU7vRbToZ7dxNqj7GKcqx1u6e/0bfkq1 TmgsjM6zVqLaVRIQevy1N3FOCHk2uR0xvjJ+pA== ) pnnl.gov. 1296000 IN RRSIG ( DNSKEY 7 2 1296000 20221227155627 20221127145627 16611 pnnl.gov. OM0uGBmAa33Kb7jetajkQaKyI/mFPyRPCMtxXQ+7TbqSZaTTTLwiUByFnrs80ZP4qO9JRy7RzFZH vwH3Z9bcT3kBXEdDAHafOgclpYUGvKqOlcKanZfKQCNIUPYeDbB9IeY9NvK5zDLg454OZqd6ZdCw q9pmVClDgETgCOiQxDuWSk1qlU6sHpfjRw2DyLWbo3Ktvixx+ANDW4MIjHPt8JzFi2OGo5iDUkCB vsIpdUHzakHuEJOaJHos+Uuhh6BdYF+Us+NOxRRqNKlObR8JT9WwqokSMQJm6sosrvqd68qdPR3M JQ5s+gSATn+j2uhCTP7UZDMzqkVPd2ci5k2cVQ== ) pnnl.gov. 1296000 IN RRSIG ( DNSKEY 7 2 1296000 20221227155627 20221127145627 24005 pnnl.gov. D2Aag3KPtbtB08f+d6AkmWt9bTwDg6VQbaPa7fllVKITz+0oSvOaskiuhez21jTaF2F9JO6k4BpI l0XxNmkuaUzS00C9ufSCy+G0LReFVmxPk+3yL0S2KzPy4XjcxaI0DiUVBslQzy7h6QVJAcM2W9Zn Hp62Omo+FwE6fvmWB5w= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	Found 4 DNSKEY records for pnnl.gov
	`pnnl.gov. 1296000 IN DNSKEY ( 256 3 7 AwEAAdp2wtTmFM57ZX2Su8Nlgy4kUJbcxiIP//jcj1KJTQwA9eBwEjVv44/ga4bIJrNXCBm8VqWi sJlsvhFSFCBqBvDVh+yaWNdu2TEMmspRGOScZYDK4smoCv2MLsRc4ikQb1J0nvG+7ejS1/GH9Prc luwhQebUmeengU0HSbggMUHf ) ; Key ID = 12050`
	`pnnl.gov. 1296000 IN DNSKEY ( 257 3 7 AwEAAc8YOvqm0BpOEwhkgUW55Tql0MwkATEtOgITFbWZZb4AYYz5ENe7RkKt3Owm/tZuoGhtKZ2y oHNEBRKjrBuSjS36YyeHK5osajgux7E8cQxF1wvPST94tOHap3qMoW2Wx5hpaQG+3/7EuYUSzCS+ QZcwzy3EQbsE3p+hVazZ/29hw6aeTxg7d3pw5rc1+kb/dhp08FchWph4H6qzeJh2Lk2fry+zmqg/ 0ULkyy+DI4JQZO9P76VCmSVB/bf5PHYcgc2He8pV1iVlaRAsLM+IVx7Ybh6ooHELXqAcBDAoNEwX /H19WICVVpYQKw6qY7HH/d5MBBT0KX+rWzOGk5McT/U= ) ; Key ID = 13866`
	`pnnl.gov. 1296000 IN DNSKEY ( 256 3 7 AwEAAcuBvC5PqhQfX628HlNdRWGAXe81ruQFaAC5EY3i8m6MP1eXQaNnl4FD2V5wJfhH6D14Aj6G zOSlFMRksDoN5WX13Sv5mt/ln5l9Qcw7r2KnT8U5Yt95mFlKnk+sJxlnZFxubK5QxIiWRufJAeAi JY5OiIxhDpptkAS/iaacQknN ) ; Key ID = 24005`
	`pnnl.gov. 1296000 IN DNSKEY ( 257 3 7 AwEAAdzasFGSxy4ZugN6gz/Mp1DwfwClJa3lSxWV4NTfJdBPpZ2MLZXi9ms4sfcThctb4ozLtjyx ZjSpuYXZDT/PwPyEjjdN6Jv23QuroJKWMwd3V/XaN2TsbPCCckGvYNcindHLvDA5qv8zvThuD2nZ lA5uuLHwKgYT1ccgeIvWqDqeQoypEMeBRBYuPPsllN7MR9A22b+2dc+y/o0484fJftrZGbTBH67I WCBMCYFuYPq7EIGhhdwFdBbdufxNUwE5D9ffksR035bhPANKKxiiES0Sf+2cLVWJ5gb96I/upm3L sB1a53M0jtSnsMNaC2FJEtoRr2G0hXF/HzOg64Y/hJ0= ) ; Key ID = 16611`
	DNSKEY=13866/SEP is now in the chain-of-trust
	DS=13866/SHA-256 verifies DNSKEY=13866/SEP
	DS=13866/SHA-1 verifies DNSKEY=13866/SEP
	DNSKEY=16611/SEP is now in the chain-of-trust
	DS=16611/SHA-256 verifies DNSKEY=16611/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`pnnl.gov. 1296000 IN RRSIG ( DNSKEY 7 2 1296000 20221227155627 20221127145627 12050 pnnl.gov. xSv0Tl04ECmZ1DzqHdfa1DrnO2H6iE4xOwmtjHJ1FQObxVOwppdOHz7iRZPL6/VJCvO2dc99sOGI poNgMlSUWjhDGpKrg73ArCNiX3V7gPdZrKNufek7TOrpuVStfYKTz6GccWE+mWNNnppdKfzKe7TF gOVpeSVCQcajr6BJT2s= )`
	`pnnl.gov. 1296000 IN RRSIG ( DNSKEY 7 2 1296000 20221227155627 20221127145627 13866 pnnl.gov. GJEeAdm3x4WFbjNWB7tp0zkniU0Kp3exSJ9gLq7jcKl4ZxTsSWrIJGfjMjfBp51GxYgBfQmh4d2U wlC518ojTuyKwhMR5vqCuCMHfqo/Q05Bobe+u4Zs/vXKbYLN7/4MB/k9g0lDzJtPU7jyXtQ1sKQu /LQQVhaQ7beJzWzQONZvZxIk4cHT6iHjkYI9x4NxHGofcYTTRetW9vI6dtVCG2mmrzb2YodaVhRd Gn1CCyJG1VJVx0KU2U7G8n/xvtK2xebb6OlJRrz9+tyMDU7vRbToZ7dxNqj7GKcqx1u6e/0bfkq1 TmgsjM6zVqLaVRIQevy1N3FOCHk2uR0xvjJ+pA== )`
	`pnnl.gov. 1296000 IN RRSIG ( DNSKEY 7 2 1296000 20221227155627 20221127145627 16611 pnnl.gov. OM0uGBmAa33Kb7jetajkQaKyI/mFPyRPCMtxXQ+7TbqSZaTTTLwiUByFnrs80ZP4qO9JRy7RzFZH vwH3Z9bcT3kBXEdDAHafOgclpYUGvKqOlcKanZfKQCNIUPYeDbB9IeY9NvK5zDLg454OZqd6ZdCw q9pmVClDgETgCOiQxDuWSk1qlU6sHpfjRw2DyLWbo3Ktvixx+ANDW4MIjHPt8JzFi2OGo5iDUkCB vsIpdUHzakHuEJOaJHos+Uuhh6BdYF+Us+NOxRRqNKlObR8JT9WwqokSMQJm6sosrvqd68qdPR3M JQ5s+gSATn+j2uhCTP7UZDMzqkVPd2ci5k2cVQ== )`
	`pnnl.gov. 1296000 IN RRSIG ( DNSKEY 7 2 1296000 20221227155627 20221127145627 24005 pnnl.gov. D2Aag3KPtbtB08f+d6AkmWt9bTwDg6VQbaPa7fllVKITz+0oSvOaskiuhez21jTaF2F9JO6k4BpI l0XxNmkuaUzS00C9ufSCy+G0LReFVmxPk+3yL0S2KzPy4XjcxaI0DiUVBslQzy7h6QVJAcM2W9Zn Hp62Omo+FwE6fvmWB5w= )`
	RRSIG=12050 and DNSKEY=12050 verifies the DNSKEY RRset
	RRSIG=13866 and DNSKEY=13866/SEP verifies the DNSKEY RRset
	RRSIG=16611 and DNSKEY=16611/SEP verifies the DNSKEY RRset
	RRSIG=24005 and DNSKEY=24005 verifies the DNSKEY RRset
	DNSKEY=12050 is now in the chain-of-trust
	DNSKEY=24005 is now in the chain-of-trust
	Query to nsx.pnl.gov for pnnl.gov/A
	Received 389 bytes from 192.101.109.80
	;; Response received from 192.101.109.80 (389 octets) ;; HEADER SECTION ;; id = 24228 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; pnnl.gov. IN A ;; ANSWER SECTION (3 records) pnnl.gov. 28800 IN A 192.101.105.198 pnnl.gov. 28800 IN RRSIG ( A 7 2 28800 20221224202122 20221124201302 12050 pnnl.gov. c96wSKvTzDcZ1Z8kKYSiQp/psHXVTVHD4cFt0TdnOVMoy5Ah1fZCUw0NJzciECqTXR7nZm8YcxYL 9DMK1s+wVBm3R3pyvIiiDTB43xTUusrXHH/6M0H/vGzBL5n3KKZ6W9aKpHj3Ejjli6o+ZSrrtSny c+XA6Gbt07fc76hmMuM= ) pnnl.gov. 28800 IN RRSIG ( A 7 2 28800 20221227155602 20221127145602 24005 pnnl.gov. HH3U2sQBzwAtClANITPAXzVxImuMtncpsi6IsmZLK0SZMF3uI5Eq4soqk2dBSdV/lgt57hJbk/gm aTq77jqiNLCRBrBjIqMGcH5Hxx/bPEKjkAvcxGcnk1t1A2MyLkwo94AKSjCM8ERlLTXAk5q07xe0 rin1oJCCsLPTXm6sxZo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	nsx.pnl.gov is authoritative for pnnl.gov
	Found RRSIG signed by pnnl.gov zone
	Query to nsy.pnl.gov for pnnl.gov/SOA
	Received 428 bytes from 192.101.109.47
	;; Response received from 192.101.109.47 (428 octets) ;; HEADER SECTION ;; id = 63835 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; pnnl.gov. IN SOA ;; ANSWER SECTION (3 records) pnnl.gov. 28800 IN SOA ( nsz.pnl.gov. hostmaster.pnl.gov. 148337 ;serial 10800 ;refresh 1080 ;retry 2592000 ;expire 900 ;minimum ) pnnl.gov. 28800 IN RRSIG ( SOA 7 2 28800 20221228192951 20221128182951 12050 pnnl.gov. ZxiOAP5cqLC5kZZgNzlPyaucI753dc2gTPXGKJL9HCz3VSvNDDYWfYKiaEnx6OKT8q1yQD+SgFhh 8Fs/e4nmrgvSXKQWS8EQ2KJSeOnhVUK2qBaMtxCyiDwlBuDVoxWxoTO1AdPOfTr9hsddzOGNf1e4 SHfoQb8pD/GX5qWnA8I= ) pnnl.gov. 28800 IN RRSIG ( SOA 7 2 28800 20221228192951 20221128182951 24005 pnnl.gov. AM3qhNgiYJ4COjBdxGWCDdOJZtHDzk+nqjHOli37in5ebqhqge1MQyPFgmmJIBKemQdTK+maBpmj hvfXSfcQQX025w+Zwl6ouG59boDB323WsErIzhk5Wnsu1KrslXbWVAbMJUYPChJTr+J8GheSb/lu g3liIoHA19bNZiqdMg0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	Query to nsx.pnl.gov for pnnl.gov/A
	Received 389 bytes from 192.101.109.80
	;; Response received from 192.101.109.80 (389 octets) ;; HEADER SECTION ;; id = 44800 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; pnnl.gov. IN A ;; ANSWER SECTION (3 records) pnnl.gov. 28800 IN A 192.101.105.198 pnnl.gov. 28800 IN RRSIG ( A 7 2 28800 20221224202122 20221124201302 12050 pnnl.gov. c96wSKvTzDcZ1Z8kKYSiQp/psHXVTVHD4cFt0TdnOVMoy5Ah1fZCUw0NJzciECqTXR7nZm8YcxYL 9DMK1s+wVBm3R3pyvIiiDTB43xTUusrXHH/6M0H/vGzBL5n3KKZ6W9aKpHj3Ejjli6o+ZSrrtSny c+XA6Gbt07fc76hmMuM= ) pnnl.gov. 28800 IN RRSIG ( A 7 2 28800 20221227155602 20221127145602 24005 pnnl.gov. HH3U2sQBzwAtClANITPAXzVxImuMtncpsi6IsmZLK0SZMF3uI5Eq4soqk2dBSdV/lgt57hJbk/gm aTq77jqiNLCRBrBjIqMGcH5Hxx/bPEKjkAvcxGcnk1t1A2MyLkwo94AKSjCM8ERlLTXAk5q07xe0 rin1oJCCsLPTXm6sxZo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	pnnl.gov A RR has value 192.101.105.198
	Found 2 RRSIGs over A RRset
	`pnnl.gov. 28800 IN RRSIG ( A 7 2 28800 20221224202122 20221124201302 12050 pnnl.gov. c96wSKvTzDcZ1Z8kKYSiQp/psHXVTVHD4cFt0TdnOVMoy5Ah1fZCUw0NJzciECqTXR7nZm8YcxYL 9DMK1s+wVBm3R3pyvIiiDTB43xTUusrXHH/6M0H/vGzBL5n3KKZ6W9aKpHj3Ejjli6o+ZSrrtSny c+XA6Gbt07fc76hmMuM= )`
	`pnnl.gov. 28800 IN RRSIG ( A 7 2 28800 20221227155602 20221127145602 24005 pnnl.gov. HH3U2sQBzwAtClANITPAXzVxImuMtncpsi6IsmZLK0SZMF3uI5Eq4soqk2dBSdV/lgt57hJbk/gm aTq77jqiNLCRBrBjIqMGcH5Hxx/bPEKjkAvcxGcnk1t1A2MyLkwo94AKSjCM8ERlLTXAk5q07xe0 rin1oJCCsLPTXm6sxZo= )`
	RRSIG=12050 and DNSKEY=12050 verifies the A RRset
	RRSIG=24005 and DNSKEY=24005 verifies the A RRset

pnnl.gov

	Query to nsy.pnl.gov for pnnl.gov/A
	Received 389 bytes from 192.101.109.47
	;; Response received from 192.101.109.47 (389 octets) ;; HEADER SECTION ;; id = 19354 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; pnnl.gov. IN A ;; ANSWER SECTION (3 records) pnnl.gov. 28800 IN A 192.101.105.198 pnnl.gov. 28800 IN RRSIG ( A 7 2 28800 20221224202122 20221124201302 12050 pnnl.gov. c96wSKvTzDcZ1Z8kKYSiQp/psHXVTVHD4cFt0TdnOVMoy5Ah1fZCUw0NJzciECqTXR7nZm8YcxYL 9DMK1s+wVBm3R3pyvIiiDTB43xTUusrXHH/6M0H/vGzBL5n3KKZ6W9aKpHj3Ejjli6o+ZSrrtSny c+XA6Gbt07fc76hmMuM= ) pnnl.gov. 28800 IN RRSIG ( A 7 2 28800 20221227155602 20221127145602 24005 pnnl.gov. HH3U2sQBzwAtClANITPAXzVxImuMtncpsi6IsmZLK0SZMF3uI5Eq4soqk2dBSdV/lgt57hJbk/gm aTq77jqiNLCRBrBjIqMGcH5Hxx/bPEKjkAvcxGcnk1t1A2MyLkwo94AKSjCM8ERlLTXAk5q07xe0 rin1oJCCsLPTXm6sxZo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	nsy.pnl.gov is authoritative for pnnl.gov
	Found RRSIG signed by pnnl.gov zone
	Query to nsy.pnl.gov for pnnl.gov/A
	Received 389 bytes from 192.101.109.47
	;; Response received from 192.101.109.47 (389 octets) ;; HEADER SECTION ;; id = 21235 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; pnnl.gov. IN A ;; ANSWER SECTION (3 records) pnnl.gov. 28800 IN A 192.101.105.198 pnnl.gov. 28800 IN RRSIG ( A 7 2 28800 20221224202122 20221124201302 12050 pnnl.gov. c96wSKvTzDcZ1Z8kKYSiQp/psHXVTVHD4cFt0TdnOVMoy5Ah1fZCUw0NJzciECqTXR7nZm8YcxYL 9DMK1s+wVBm3R3pyvIiiDTB43xTUusrXHH/6M0H/vGzBL5n3KKZ6W9aKpHj3Ejjli6o+ZSrrtSny c+XA6Gbt07fc76hmMuM= ) pnnl.gov. 28800 IN RRSIG ( A 7 2 28800 20221227155602 20221127145602 24005 pnnl.gov. HH3U2sQBzwAtClANITPAXzVxImuMtncpsi6IsmZLK0SZMF3uI5Eq4soqk2dBSdV/lgt57hJbk/gm aTq77jqiNLCRBrBjIqMGcH5Hxx/bPEKjkAvcxGcnk1t1A2MyLkwo94AKSjCM8ERlLTXAk5q07xe0 rin1oJCCsLPTXm6sxZo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	pnnl.gov A RR has value 192.101.105.198
	Found 2 RRSIGs over A RRset
	`pnnl.gov. 28800 IN RRSIG ( A 7 2 28800 20221224202122 20221124201302 12050 pnnl.gov. c96wSKvTzDcZ1Z8kKYSiQp/psHXVTVHD4cFt0TdnOVMoy5Ah1fZCUw0NJzciECqTXR7nZm8YcxYL 9DMK1s+wVBm3R3pyvIiiDTB43xTUusrXHH/6M0H/vGzBL5n3KKZ6W9aKpHj3Ejjli6o+ZSrrtSny c+XA6Gbt07fc76hmMuM= )`
	`pnnl.gov. 28800 IN RRSIG ( A 7 2 28800 20221227155602 20221127145602 24005 pnnl.gov. HH3U2sQBzwAtClANITPAXzVxImuMtncpsi6IsmZLK0SZMF3uI5Eq4soqk2dBSdV/lgt57hJbk/gm aTq77jqiNLCRBrBjIqMGcH5Hxx/bPEKjkAvcxGcnk1t1A2MyLkwo94AKSjCM8ERlLTXAk5q07xe0 rin1oJCCsLPTXm6sxZo= )`
	RRSIG=12050 and DNSKEY=12050 verifies the A RRset
	RRSIG=24005 and DNSKEY=24005 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test pnnl.gov at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: