DNSSEC Analyzer - usna.edu

Domain Name:

Time: 2023-12-08 02:51:20 UTC, NTP stratum 16

Analyzing DNSSEC problems for usna.edu

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to h.root-servers.net for ./DNSKEY
	Received 864 bytes from 198.97.190.53
	;; Response received from 198.97.190.53 (864 octets) ;; HEADER SECTION ;; id = 30511 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20231221000000 20231130000000 20326 . Vq+Z0sYiDdI6V+KCvfoTAYNxmsKiv703Lxyy4OREQPew0qYrrUySU54Jn+NiOlkHLm+o83YW7ZZ0 eyikQKrt42dD2Hdigy7YiOeML1W3wqkZYDg/DoHo5i8zP+B6461Z/yVrjkcTSgM6C8FZuOaDqj5X PMghMfDo0fQy0spEL6rtLzGNXDZ+j5D+hcoQPYtZu9svhm9AHqZoXLu5id7whpsVJhON4BM1pQRF 7JSlTIi0cn7SGhFpfypnj/2E5hUvJ1bRRkr+wItfi7B4+b19lDNgtLZiDs3opRMmStbaF3HEFgTh UZ+HcCRzQASdyuZ4Y8xr1SUX/MpSlct5EBFshg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20231221000000 20231130000000 20326 . Vq+Z0sYiDdI6V+KCvfoTAYNxmsKiv703Lxyy4OREQPew0qYrrUySU54Jn+NiOlkHLm+o83YW7ZZ0 eyikQKrt42dD2Hdigy7YiOeML1W3wqkZYDg/DoHo5i8zP+B6461Z/yVrjkcTSgM6C8FZuOaDqj5X PMghMfDo0fQy0spEL6rtLzGNXDZ+j5D+hcoQPYtZu9svhm9AHqZoXLu5id7whpsVJhON4BM1pQRF 7JSlTIi0cn7SGhFpfypnj/2E5hUvJ1bRRkr+wItfi7B4+b19lDNgtLZiDs3opRMmStbaF3HEFgTh UZ+HcCRzQASdyuZ4Y8xr1SUX/MpSlct5EBFshg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=46780 is now in the chain-of-trust
	Query to m.root-servers.net for usna.edu/A
	Received 1167 bytes from 202.12.27.33
	;; Response received from 202.12.27.33 (1167 octets) ;; HEADER SECTION ;; id = 28978 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; usna.edu. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) edu. 172800 IN NS g.edu-servers.net. edu. 172800 IN NS l.edu-servers.net. edu. 172800 IN NS d.edu-servers.net. edu. 172800 IN NS f.edu-servers.net. edu. 172800 IN NS b.edu-servers.net. edu. 172800 IN NS h.edu-servers.net. edu. 172800 IN NS k.edu-servers.net. edu. 172800 IN NS e.edu-servers.net. edu. 172800 IN NS a.edu-servers.net. edu. 172800 IN NS c.edu-servers.net. edu. 172800 IN NS j.edu-servers.net. edu. 172800 IN NS i.edu-servers.net. edu. 172800 IN NS m.edu-servers.net. edu. 86400 IN DS ( 35663 13 2 a2e1614291831a4746b5ac52b4b345357687271e85353082741f1cf3d06a4c1d ) edu. 86400 IN RRSIG ( DS 8 1 86400 20231220220000 20231207210000 46780 . yMkM5m8IUG4Cbs6mNqKAqeuHN6a4Uyz6h4c0q+0NDBR2EzNHQpVF7rs9YplK6BiLQzqwQXIbDv0p jU4vtfPCPpl3dCB2o9cObs4iwEM2BsjBwAmWsGYCsiAxSFTGntXmcRdpQMZJRu8pAaYiQs26lVoS SwTkNEvqjM//+Xwi0kJ6TBp1RDnUfo95oWpFd5LlnZd7u38JCkkCZpCx+yLxzyoGcfoo19kNKiuq 0AcQnRL+IUXeDep6zjxy5Ss0myjX9XKdZB+lqppDiUQRSZoJSbHiRYGdLp3/d7Av3xeR3J5KDP04 dbrl62fXWHREKuBjmSZkhz/uYVDnkQDrgCld2Q== ) ;; ADDITIONAL SECTION (27 records) m.edu-servers.net. 172800 IN A 192.55.83.30 l.edu-servers.net. 172800 IN A 192.41.162.30 k.edu-servers.net. 172800 IN A 192.52.178.30 j.edu-servers.net. 172800 IN A 192.48.79.30 i.edu-servers.net. 172800 IN A 192.43.172.30 h.edu-servers.net. 172800 IN A 192.54.112.30 g.edu-servers.net. 172800 IN A 192.42.93.30 f.edu-servers.net. 172800 IN A 192.35.51.30 e.edu-servers.net. 172800 IN A 192.12.94.30 d.edu-servers.net. 172800 IN A 192.31.80.30 c.edu-servers.net. 172800 IN A 192.26.92.30 b.edu-servers.net. 172800 IN A 192.33.14.30 a.edu-servers.net. 172800 IN A 192.5.6.30 m.edu-servers.net. 172800 IN AAAA 2001:501:b1f9::30 l.edu-servers.net. 172800 IN AAAA 2001:500:d937::30 k.edu-servers.net. 172800 IN AAAA 2001:503:d2d::30 j.edu-servers.net. 172800 IN AAAA 2001:502:7094::30 i.edu-servers.net. 172800 IN AAAA 2001:503:39c1::30 h.edu-servers.net. 172800 IN AAAA 2001:502:8cc::30 g.edu-servers.net. 172800 IN AAAA 2001:503:eea3::30 f.edu-servers.net. 172800 IN AAAA 2001:503:d414::30 e.edu-servers.net. 172800 IN AAAA 2001:502:1ca1::30 d.edu-servers.net. 172800 IN AAAA 2001:500:856e::30 c.edu-servers.net. 172800 IN AAAA 2001:503:83eb::30 b.edu-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.edu-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to e.root-servers.net for edu/DNSKEY
	Received 1162 bytes from 192.203.230.10
	;; Response received from 192.203.230.10 (1162 octets) ;; HEADER SECTION ;; id = 32231 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; edu. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) edu. 172800 IN NS a.edu-servers.net. edu. 172800 IN NS b.edu-servers.net. edu. 172800 IN NS c.edu-servers.net. edu. 172800 IN NS d.edu-servers.net. edu. 172800 IN NS e.edu-servers.net. edu. 172800 IN NS f.edu-servers.net. edu. 172800 IN NS g.edu-servers.net. edu. 172800 IN NS h.edu-servers.net. edu. 172800 IN NS i.edu-servers.net. edu. 172800 IN NS j.edu-servers.net. edu. 172800 IN NS k.edu-servers.net. edu. 172800 IN NS l.edu-servers.net. edu. 172800 IN NS m.edu-servers.net. edu. 86400 IN DS ( 35663 13 2 a2e1614291831a4746b5ac52b4b345357687271e85353082741f1cf3d06a4c1d ) edu. 86400 IN RRSIG ( DS 8 1 86400 20231220220000 20231207210000 46780 . yMkM5m8IUG4Cbs6mNqKAqeuHN6a4Uyz6h4c0q+0NDBR2EzNHQpVF7rs9YplK6BiLQzqwQXIbDv0p jU4vtfPCPpl3dCB2o9cObs4iwEM2BsjBwAmWsGYCsiAxSFTGntXmcRdpQMZJRu8pAaYiQs26lVoS SwTkNEvqjM//+Xwi0kJ6TBp1RDnUfo95oWpFd5LlnZd7u38JCkkCZpCx+yLxzyoGcfoo19kNKiuq 0AcQnRL+IUXeDep6zjxy5Ss0myjX9XKdZB+lqppDiUQRSZoJSbHiRYGdLp3/d7Av3xeR3J5KDP04 dbrl62fXWHREKuBjmSZkhz/uYVDnkQDrgCld2Q== ) ;; ADDITIONAL SECTION (27 records) a.edu-servers.net. 172800 IN A 192.5.6.30 b.edu-servers.net. 172800 IN A 192.33.14.30 c.edu-servers.net. 172800 IN A 192.26.92.30 d.edu-servers.net. 172800 IN A 192.31.80.30 e.edu-servers.net. 172800 IN A 192.12.94.30 f.edu-servers.net. 172800 IN A 192.35.51.30 g.edu-servers.net. 172800 IN A 192.42.93.30 h.edu-servers.net. 172800 IN A 192.54.112.30 i.edu-servers.net. 172800 IN A 192.43.172.30 j.edu-servers.net. 172800 IN A 192.48.79.30 k.edu-servers.net. 172800 IN A 192.52.178.30 l.edu-servers.net. 172800 IN A 192.41.162.30 m.edu-servers.net. 172800 IN A 192.55.83.30 a.edu-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.edu-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.edu-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.edu-servers.net. 172800 IN AAAA 2001:500:856e::30 e.edu-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.edu-servers.net. 172800 IN AAAA 2001:503:d414::30 g.edu-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.edu-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.edu-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.edu-servers.net. 172800 IN AAAA 2001:502:7094::30 k.edu-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.edu-servers.net. 172800 IN AAAA 2001:500:d937::30 m.edu-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone edu

edu

	Checking DS between . and edu
	Query to d.root-servers.net for edu/DS
	Received 367 bytes from 199.7.91.13
	;; Response received from 199.7.91.13 (367 octets) ;; HEADER SECTION ;; id = 57991 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; edu. IN DS ;; ANSWER SECTION (2 records) edu. 86400 IN DS ( 35663 13 2 a2e1614291831a4746b5ac52b4b345357687271e85353082741f1cf3d06a4c1d ) edu. 86400 IN RRSIG ( DS 8 1 86400 20231220220000 20231207210000 46780 . yMkM5m8IUG4Cbs6mNqKAqeuHN6a4Uyz6h4c0q+0NDBR2EzNHQpVF7rs9YplK6BiLQzqwQXIbDv0p jU4vtfPCPpl3dCB2o9cObs4iwEM2BsjBwAmWsGYCsiAxSFTGntXmcRdpQMZJRu8pAaYiQs26lVoS SwTkNEvqjM//+Xwi0kJ6TBp1RDnUfo95oWpFd5LlnZd7u38JCkkCZpCx+yLxzyoGcfoo19kNKiuq 0AcQnRL+IUXeDep6zjxy5Ss0myjX9XKdZB+lqppDiUQRSZoJSbHiRYGdLp3/d7Av3xeR3J5KDP04 dbrl62fXWHREKuBjmSZkhz/uYVDnkQDrgCld2Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found 1 DS records for edu in the . zone
	DS=35663/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`edu. 86400 IN RRSIG ( DS 8 1 86400 20231220220000 20231207210000 46780 . yMkM5m8IUG4Cbs6mNqKAqeuHN6a4Uyz6h4c0q+0NDBR2EzNHQpVF7rs9YplK6BiLQzqwQXIbDv0p jU4vtfPCPpl3dCB2o9cObs4iwEM2BsjBwAmWsGYCsiAxSFTGntXmcRdpQMZJRu8pAaYiQs26lVoS SwTkNEvqjM//+Xwi0kJ6TBp1RDnUfo95oWpFd5LlnZd7u38JCkkCZpCx+yLxzyoGcfoo19kNKiuq 0AcQnRL+IUXeDep6zjxy5Ss0myjX9XKdZB+lqppDiUQRSZoJSbHiRYGdLp3/d7Av3xeR3J5KDP04 dbrl62fXWHREKuBjmSZkhz/uYVDnkQDrgCld2Q== )`
	RRSIG=46780 and DNSKEY=46780 verifies the DS RRset
	DS=35663/SHA-256 is now in the chain-of-trust
	`edu. 86400 IN DS ( 35663 13 2 a2e1614291831a4746b5ac52b4b345357687271e85353082741f1cf3d06a4c1d )`
	Query to e.edu-servers.net for edu/DNSKEY
	Received 291 bytes from 192.12.94.30
	;; Response received from 192.12.94.30 (291 octets) ;; HEADER SECTION ;; id = 55699 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; edu. IN DNSKEY ;; ANSWER SECTION (3 records) edu. 86400 IN DNSKEY ( 257 3 13 vqk4cwmCpZkXat25PaOVt3RPYDOmCr8B4D1IynrqSqzs+BeCYI6pnBNRUD9BgfqbxZHyfyDz6vbv 8KQaT7maRw== ) ; Key ID = 35663 edu. 86400 IN DNSKEY ( 256 3 13 Uhh/JSmccUl0jFR5O1HUt4bZVdw4KPiJh+Hr7JEBwH9ElvcTUKV707wDGaGcbH0FmweM3RZgIwze li8gaiQu/Q== ) ; Key ID = 7003 edu. 86400 IN RRSIG ( DNSKEY 13 1 86400 20231222161114 20231207160614 35663 edu. jlouD23RemzsNj1DS4/0YF8tOh8/p4wuEi/R5QqcmzUSCHla+66iK2Jd9qgp8C2/NmLE/QdRs8Wp 8oHZXawoLQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for edu
	`edu. 86400 IN DNSKEY ( 257 3 13 vqk4cwmCpZkXat25PaOVt3RPYDOmCr8B4D1IynrqSqzs+BeCYI6pnBNRUD9BgfqbxZHyfyDz6vbv 8KQaT7maRw== ) ; Key ID = 35663`
	`edu. 86400 IN DNSKEY ( 256 3 13 Uhh/JSmccUl0jFR5O1HUt4bZVdw4KPiJh+Hr7JEBwH9ElvcTUKV707wDGaGcbH0FmweM3RZgIwze li8gaiQu/Q== ) ; Key ID = 7003`
	DNSKEY=35663/SEP is now in the chain-of-trust
	DS=35663/SHA-256 verifies DNSKEY=35663/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`edu. 86400 IN RRSIG ( DNSKEY 13 1 86400 20231222161114 20231207160614 35663 edu. jlouD23RemzsNj1DS4/0YF8tOh8/p4wuEi/R5QqcmzUSCHla+66iK2Jd9qgp8C2/NmLE/QdRs8Wp 8oHZXawoLQ== )`
	RRSIG=35663 and DNSKEY=35663/SEP verifies the DNSKEY RRset
	DNSKEY=7003 is now in the chain-of-trust
	Query to m.edu-servers.net for usna.edu/A
	Received 254 bytes from 192.55.83.30
	;; Response received from 192.55.83.30 (254 octets) ;; HEADER SECTION ;; id = 40182 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; usna.edu. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) usna.edu. 172800 IN NS ns-a.usna.edu. usna.edu. 172800 IN NS ns-b.usna.edu. usna.edu. 86400 IN DS ( 46816 8 2 3a93123c330f5723d6f4b28113a990a756ea2d20da83e854ab5ea41a86e923c3 ) usna.edu. 86400 IN RRSIG ( DS 13 2 86400 20231211092005 20231204081005 7003 edu. yRTvRXRE47hObIC45L41JZShpx1L8MseBzyQ/PqRHgH2P9XY46r2FAfbYpFPUzRtFSNBCDGqRH+5 3hpIF0h8PA== ) ;; ADDITIONAL SECTION (3 records) ns-a.usna.edu. 172800 IN A 136.160.88.151 ns-b.usna.edu. 172800 IN A 136.160.88.152 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.edu-servers.net for usna.edu/DNSKEY
	Received 254 bytes from 192.26.92.30
	;; Response received from 192.26.92.30 (254 octets) ;; HEADER SECTION ;; id = 61975 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; usna.edu. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) usna.edu. 172800 IN NS ns-a.usna.edu. usna.edu. 172800 IN NS ns-b.usna.edu. usna.edu. 86400 IN DS ( 46816 8 2 3a93123c330f5723d6f4b28113a990a756ea2d20da83e854ab5ea41a86e923c3 ) usna.edu. 86400 IN RRSIG ( DS 13 2 86400 20231211092005 20231204081005 7003 edu. yRTvRXRE47hObIC45L41JZShpx1L8MseBzyQ/PqRHgH2P9XY46r2FAfbYpFPUzRtFSNBCDGqRH+5 3hpIF0h8PA== ) ;; ADDITIONAL SECTION (3 records) ns-a.usna.edu. 172800 IN A 136.160.88.151 ns-b.usna.edu. 172800 IN A 136.160.88.152 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone usna.edu

usna.edu

	Checking DS between edu and usna.edu
	Query to d.edu-servers.net for usna.edu/DS
	Received 1078 bytes from 192.31.80.30
	;; Response received from 192.31.80.30 (1078 octets) ;; HEADER SECTION ;; id = 23998 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 14 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; usna.edu. IN DS ;; ANSWER SECTION (2 records) usna.edu. 86400 IN DS ( 46816 8 2 3a93123c330f5723d6f4b28113a990a756ea2d20da83e854ab5ea41a86e923c3 ) usna.edu. 86400 IN RRSIG ( DS 13 2 86400 20231211092005 20231204081005 7003 edu. yRTvRXRE47hObIC45L41JZShpx1L8MseBzyQ/PqRHgH2P9XY46r2FAfbYpFPUzRtFSNBCDGqRH+5 3hpIF0h8PA== ) ;; AUTHORITY SECTION (14 records) edu. 172800 IN NS k.edu-servers.net. edu. 172800 IN NS a.edu-servers.net. edu. 172800 IN NS h.edu-servers.net. edu. 172800 IN NS e.edu-servers.net. edu. 172800 IN NS j.edu-servers.net. edu. 172800 IN NS m.edu-servers.net. edu. 172800 IN NS f.edu-servers.net. edu. 172800 IN NS c.edu-servers.net. edu. 172800 IN NS d.edu-servers.net. edu. 172800 IN NS g.edu-servers.net. edu. 172800 IN NS b.edu-servers.net. edu. 172800 IN NS i.edu-servers.net. edu. 172800 IN NS l.edu-servers.net. edu. 172800 IN RRSIG ( NS 13 1 172800 20231212091821 20231205080821 7003 edu. dLX8VOSphyJGY5niEajRnG1x/KqLCacwZkuWvSbAFUosZcPn4uyEzeGwdR2YKwfEevuEGRKK7+5z ln5w9N1aVA== ) ;; ADDITIONAL SECTION (27 records) k.edu-servers.net. 172800 IN A 192.52.178.30 k.edu-servers.net. 172800 IN AAAA 2001:503:d2d::30 a.edu-servers.net. 172800 IN A 192.5.6.30 a.edu-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 h.edu-servers.net. 172800 IN A 192.54.112.30 h.edu-servers.net. 172800 IN AAAA 2001:502:8cc::30 e.edu-servers.net. 172800 IN A 192.12.94.30 e.edu-servers.net. 172800 IN AAAA 2001:502:1ca1::30 j.edu-servers.net. 172800 IN A 192.48.79.30 j.edu-servers.net. 172800 IN AAAA 2001:502:7094::30 m.edu-servers.net. 172800 IN A 192.55.83.30 m.edu-servers.net. 172800 IN AAAA 2001:501:b1f9::30 f.edu-servers.net. 172800 IN A 192.35.51.30 f.edu-servers.net. 172800 IN AAAA 2001:503:d414::30 c.edu-servers.net. 172800 IN A 192.26.92.30 c.edu-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.edu-servers.net. 172800 IN A 192.31.80.30 d.edu-servers.net. 172800 IN AAAA 2001:500:856e::30 g.edu-servers.net. 172800 IN A 192.42.93.30 g.edu-servers.net. 172800 IN AAAA 2001:503:eea3::30 b.edu-servers.net. 172800 IN A 192.33.14.30 b.edu-servers.net. 172800 IN AAAA 2001:503:231d::2:30 i.edu-servers.net. 172800 IN A 192.43.172.30 i.edu-servers.net. 172800 IN AAAA 2001:503:39c1::30 l.edu-servers.net. 172800 IN A 192.41.162.30 l.edu-servers.net. 172800 IN AAAA 2001:500:d937::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for usna.edu in the edu zone
	DS=46816/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`usna.edu. 86400 IN RRSIG ( DS 13 2 86400 20231211092005 20231204081005 7003 edu. yRTvRXRE47hObIC45L41JZShpx1L8MseBzyQ/PqRHgH2P9XY46r2FAfbYpFPUzRtFSNBCDGqRH+5 3hpIF0h8PA== )`
	RRSIG=7003 and DNSKEY=7003 verifies the DS RRset
	DS=46816/SHA-256 is now in the chain-of-trust
	`usna.edu. 86400 IN DS ( 46816 8 2 3a93123c330f5723d6f4b28113a990a756ea2d20da83e854ab5ea41a86e923c3 )`
	Query to ns-a.usna.edu for usna.edu/DNSKEY
	Received 1073 bytes from 136.160.88.151
	;; Response received from 136.160.88.151 (1073 octets) ;; HEADER SECTION ;; id = 5214 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; usna.edu. IN DNSKEY ;; ANSWER SECTION (5 records) usna.edu. 172800 IN DNSKEY ( 256 3 8 AwEAAb863MX+/4H/WHD7V2BL+5s3Uc4ABJ/0iVL5f2p87tdztFwelyDHoXNjW+0utrYMzn7zith+ VDHKboN3X6JsXZ+wuJ52TrwxrG30L5jp5kgDUhKP2ACbYe/Kh0yaFUdXDUSywL6j6yKyyJ9qDuoE Sq+Rzuj608/3N3Rg+/30aTtH ) ; Key ID = 49758 usna.edu. 172800 IN DNSKEY ( 256 3 8 AwEAAaWUrnUDXJn/1AwRL8ye5gI+6KXNEVRi2zu/huAVvUl0LGx2EvUL4/C8wyAWlbTnXzW1NrbA xdIYBXl6H8y99X/5SHllWCYCOQUwJ81ZLIhe1b3prEuKTmyc3u814LQDS5a++zTiD5aDwpK/4b0Y bt2F2WCjwXQ8WRq6WO9b0sMF ) ; Key ID = 63063 usna.edu. 172800 IN DNSKEY ( 257 3 8 AwEAAea+2bHlrBH766FfZDgXwMA9IM+uarmXAGEcNoIPe7pG9weN1RLYylJgcBO3stpb6QL+9eEM SBcOJ1oBCdnrjPzCg/M7Tr0/8/qPbKtTNvMEJypzrygXyE5wy1cW4mvMByMt1QObKM8SCZEIfHyQ 2pmCvoW/kSCzUuLXIZqfUExrn/rK6rl7alOL0PpFC3DVoxyt5ZG74ezK4qvppBwaip4HdiEcJKG2 xsoIVy14JXmiHzu5Id/yfwcWVLaDFKeaL9k1VTcbNa/R06x+ROKFz0pD1SlOo+DTqwh+gSk4WbLD fX8t4vU7cnXFuU7lcF62UPObJH7p7gt7XKv+0QAEy10= ) ; Key ID = 46816 usna.edu. 172800 IN RRSIG ( DNSKEY 8 2 172800 20231211184403 20231207174403 46816 usna.edu. yUij0NujMRQhBgC4gN1+UAtMy1YO3351qJEZn8qoDUWorMOlLn/9sbGxLDJoA4/oZGVM45V+17pG 38rp4H7XO12gQKIubDQJJJGRQxHfy6jiyMHxyu7XqmpVfrrAWZAn3TlMnK2Ue9UULzFDf022Fk6Q av1LXJQ8+x8Wb/xpgdJAGWGHDGrgzsw/NiQmoeGl3pb682ef9lqWi9/YQr1M1A3XK3C1S87ZVIMb /UGLYJY/yOPkKPI3GCHiP59HVMQFSoCabeewFi9+xuEk25YRTCi36wEw3uM2/7dnJ2zHVE8YRfJX q1B6VJAg+zw0tLHp/+NJZIkhbWRWbuoAzNzpaQ== ) usna.edu. 172800 IN RRSIG ( DNSKEY 8 2 172800 20231211184403 20231207174403 63063 usna.edu. SSgFmNJV+Pr59+N+KKf6fvUE2q+hRnp5okE8MUuVFJLPDBiHiB0HvfsoOFClhtIgpCgwVpGFLiDq iH/drEYXpYe0R8zVqpbMKbTmnOUiTQ2fmuvAT1yfINnYktEc5gYX36rcYyXirkh5hY6+4IipB3qG npuTGwv1ww9foqGqw5I= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	Found 3 DNSKEY records for usna.edu
	`usna.edu. 172800 IN DNSKEY ( 256 3 8 AwEAAb863MX+/4H/WHD7V2BL+5s3Uc4ABJ/0iVL5f2p87tdztFwelyDHoXNjW+0utrYMzn7zith+ VDHKboN3X6JsXZ+wuJ52TrwxrG30L5jp5kgDUhKP2ACbYe/Kh0yaFUdXDUSywL6j6yKyyJ9qDuoE Sq+Rzuj608/3N3Rg+/30aTtH ) ; Key ID = 49758`
	`usna.edu. 172800 IN DNSKEY ( 256 3 8 AwEAAaWUrnUDXJn/1AwRL8ye5gI+6KXNEVRi2zu/huAVvUl0LGx2EvUL4/C8wyAWlbTnXzW1NrbA xdIYBXl6H8y99X/5SHllWCYCOQUwJ81ZLIhe1b3prEuKTmyc3u814LQDS5a++zTiD5aDwpK/4b0Y bt2F2WCjwXQ8WRq6WO9b0sMF ) ; Key ID = 63063`
	`usna.edu. 172800 IN DNSKEY ( 257 3 8 AwEAAea+2bHlrBH766FfZDgXwMA9IM+uarmXAGEcNoIPe7pG9weN1RLYylJgcBO3stpb6QL+9eEM SBcOJ1oBCdnrjPzCg/M7Tr0/8/qPbKtTNvMEJypzrygXyE5wy1cW4mvMByMt1QObKM8SCZEIfHyQ 2pmCvoW/kSCzUuLXIZqfUExrn/rK6rl7alOL0PpFC3DVoxyt5ZG74ezK4qvppBwaip4HdiEcJKG2 xsoIVy14JXmiHzu5Id/yfwcWVLaDFKeaL9k1VTcbNa/R06x+ROKFz0pD1SlOo+DTqwh+gSk4WbLD fX8t4vU7cnXFuU7lcF62UPObJH7p7gt7XKv+0QAEy10= ) ; Key ID = 46816`
	DNSKEY=46816/SEP is now in the chain-of-trust
	DS=46816/SHA-256 verifies DNSKEY=46816/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`usna.edu. 172800 IN RRSIG ( DNSKEY 8 2 172800 20231211184403 20231207174403 46816 usna.edu. yUij0NujMRQhBgC4gN1+UAtMy1YO3351qJEZn8qoDUWorMOlLn/9sbGxLDJoA4/oZGVM45V+17pG 38rp4H7XO12gQKIubDQJJJGRQxHfy6jiyMHxyu7XqmpVfrrAWZAn3TlMnK2Ue9UULzFDf022Fk6Q av1LXJQ8+x8Wb/xpgdJAGWGHDGrgzsw/NiQmoeGl3pb682ef9lqWi9/YQr1M1A3XK3C1S87ZVIMb /UGLYJY/yOPkKPI3GCHiP59HVMQFSoCabeewFi9+xuEk25YRTCi36wEw3uM2/7dnJ2zHVE8YRfJX q1B6VJAg+zw0tLHp/+NJZIkhbWRWbuoAzNzpaQ== )`
	`usna.edu. 172800 IN RRSIG ( DNSKEY 8 2 172800 20231211184403 20231207174403 63063 usna.edu. SSgFmNJV+Pr59+N+KKf6fvUE2q+hRnp5okE8MUuVFJLPDBiHiB0HvfsoOFClhtIgpCgwVpGFLiDq iH/drEYXpYe0R8zVqpbMKbTmnOUiTQ2fmuvAT1yfINnYktEc5gYX36rcYyXirkh5hY6+4IipB3qG npuTGwv1ww9foqGqw5I= )`
	RRSIG=46816 and DNSKEY=46816/SEP verifies the DNSKEY RRset
	RRSIG=63063 and DNSKEY=63063 verifies the DNSKEY RRset
	DNSKEY=49758 is now in the chain-of-trust
	DNSKEY=63063 is now in the chain-of-trust
	Query to ns-b.usna.edu for usna.edu/A
	Received 221 bytes from 136.160.88.152
	;; Response received from 136.160.88.152 (221 octets) ;; HEADER SECTION ;; id = 8890 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; usna.edu. IN A ;; ANSWER SECTION (2 records) usna.edu. 86400 IN A 136.160.88.139 usna.edu. 86400 IN RRSIG ( A 8 2 86400 20231211085859 20231207084633 63063 usna.edu. IQNWD2QZiP1hikZ2+jHvHRRvGYhI/PbVunWZIstTg+jsTOxgAjnl0pyps+9moPvYPZmSHZIMy11X bmgRYBJU+PI6g1qqOabFlpwMJCWl0KnmraUD2fs47pqxCLj1HuMLvuRtP6sZb8dW1ipby9Y0im/i pecBoKXtrXwRdIEo7pg= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	ns-b.usna.edu is authoritative for usna.edu
	Found RRSIG signed by usna.edu zone
	Query to ns-a.usna.edu for usna.edu/SOA
	Received 250 bytes from 136.160.88.151
	;; Response received from 136.160.88.151 (250 octets) ;; HEADER SECTION ;; id = 34673 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; usna.edu. IN SOA ;; ANSWER SECTION (2 records) usna.edu. 86400 IN SOA ( ns-a.usna.edu. dns.usna.edu. 2015113782 ;serial 21600 ;refresh 2160 ;retry 1296000 ;expire 900 ;minimum ) usna.edu. 86400 IN RRSIG ( SOA 8 2 86400 20231211184403 20231207174403 63063 usna.edu. Pzdp5HIVu9HTyYixv4LCBun/W9/7WDonHEWPBbKvI379A7dG0S1T9ioesyJFGzZzByHuzOGppvoy x7NPmNyESixi46F7Yv3XEfGEQi4Ys3aOduerbupkZT586cX7bIBGpGsbtGhsW/NlhmyskPIkJuy0 CJ/fl1qsHSv9rZfIEdg= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	Query to ns-b.usna.edu for usna.edu/A
	Received 221 bytes from 136.160.88.152
	;; Response received from 136.160.88.152 (221 octets) ;; HEADER SECTION ;; id = 18596 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; usna.edu. IN A ;; ANSWER SECTION (2 records) usna.edu. 86400 IN A 136.160.88.139 usna.edu. 86400 IN RRSIG ( A 8 2 86400 20231211085859 20231207084633 63063 usna.edu. IQNWD2QZiP1hikZ2+jHvHRRvGYhI/PbVunWZIstTg+jsTOxgAjnl0pyps+9moPvYPZmSHZIMy11X bmgRYBJU+PI6g1qqOabFlpwMJCWl0KnmraUD2fs47pqxCLj1HuMLvuRtP6sZb8dW1ipby9Y0im/i pecBoKXtrXwRdIEo7pg= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	usna.edu A RR has value 136.160.88.139
	Found 1 RRSIGs over A RRset
	`usna.edu. 86400 IN RRSIG ( A 8 2 86400 20231211085859 20231207084633 63063 usna.edu. IQNWD2QZiP1hikZ2+jHvHRRvGYhI/PbVunWZIstTg+jsTOxgAjnl0pyps+9moPvYPZmSHZIMy11X bmgRYBJU+PI6g1qqOabFlpwMJCWl0KnmraUD2fs47pqxCLj1HuMLvuRtP6sZb8dW1ipby9Y0im/i pecBoKXtrXwRdIEo7pg= )`
	RRSIG=63063 and DNSKEY=63063 verifies the A RRset

usna.edu

	Query to ns-a.usna.edu for usna.edu/A
	Received 221 bytes from 136.160.88.151
	;; Response received from 136.160.88.151 (221 octets) ;; HEADER SECTION ;; id = 9172 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; usna.edu. IN A ;; ANSWER SECTION (2 records) usna.edu. 86400 IN A 136.160.88.139 usna.edu. 86400 IN RRSIG ( A 8 2 86400 20231211085859 20231207084633 63063 usna.edu. IQNWD2QZiP1hikZ2+jHvHRRvGYhI/PbVunWZIstTg+jsTOxgAjnl0pyps+9moPvYPZmSHZIMy11X bmgRYBJU+PI6g1qqOabFlpwMJCWl0KnmraUD2fs47pqxCLj1HuMLvuRtP6sZb8dW1ipby9Y0im/i pecBoKXtrXwRdIEo7pg= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	ns-a.usna.edu is authoritative for usna.edu
	Found RRSIG signed by usna.edu zone
	Query to ns-a.usna.edu for usna.edu/A
	Received 221 bytes from 136.160.88.151
	;; Response received from 136.160.88.151 (221 octets) ;; HEADER SECTION ;; id = 14615 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; usna.edu. IN A ;; ANSWER SECTION (2 records) usna.edu. 86400 IN A 136.160.88.139 usna.edu. 86400 IN RRSIG ( A 8 2 86400 20231211085859 20231207084633 63063 usna.edu. IQNWD2QZiP1hikZ2+jHvHRRvGYhI/PbVunWZIstTg+jsTOxgAjnl0pyps+9moPvYPZmSHZIMy11X bmgRYBJU+PI6g1qqOabFlpwMJCWl0KnmraUD2fs47pqxCLj1HuMLvuRtP6sZb8dW1ipby9Y0im/i pecBoKXtrXwRdIEo7pg= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	usna.edu A RR has value 136.160.88.139
	Found 1 RRSIGs over A RRset
	`usna.edu. 86400 IN RRSIG ( A 8 2 86400 20231211085859 20231207084633 63063 usna.edu. IQNWD2QZiP1hikZ2+jHvHRRvGYhI/PbVunWZIstTg+jsTOxgAjnl0pyps+9moPvYPZmSHZIMy11X bmgRYBJU+PI6g1qqOabFlpwMJCWl0KnmraUD2fs47pqxCLj1HuMLvuRtP6sZb8dW1ipby9Y0im/i pecBoKXtrXwRdIEo7pg= )`
	RRSIG=63063 and DNSKEY=63063 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test usna.edu at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: