DNSSEC Analyzer - fedoraproject.org

Domain Name:

Time: 2020-04-09 08:37:21 UTC, NTP stratum 4

Analyzing DNSSEC problems for fedoraproject.org

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to i.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (1139 bytes) ;; HEADER SECTION ;; id = 63734 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAc4qsciJ5MdMUIu4n/pSTsSiU9OCyAanPTe5TcMX4v1hxhpFwiTGQUv3BXT6IAO4litrZKTU aj4vitqHW1+RQsHn3k/gSvt7FwyQwpy0mEnShBgr6RQiGtlBODNY67sTl+W8M/b6SLTAaaDri3BO 5u6wrDs149rMELJAdoVBjmXW+zRH3kZzh3lwyTZsYtk7L+3DYbTiiHq+sRB4F9XoBPAz5Psv4q4E iPq07nW3acbW84zTz3CyQUmQkJT9VB1oUKHz6sNoyccqzcMX4q1GHAYpQ7FAXlKMxidoN1Ay5DWA NgTmgJXzKhcI2nIZoq1x3yq4814O1LQd9QP68gI37+0= ) ; Key ID = 48903 . 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20200422000000 20200401000000 20326 . MYL1CcghvT4i0z7u1GFvZtGlwjU4pNZxjY8pzsZbfaWJvjA6mwQCReH2PcVjvtr7syyUhLlPHj2B xFbbb/YDbU7Fth14eI2YTChuVkrO6xR/IGf5eIYEF4Aw6gJZGp7tIchnf+Ms+pUiaWnXEpMkIZc4 HvsuuJ+HfDcvWAzyB542TsNxW9VKUfprEgX4/oQ5SLIl/HnoRRdZWZRH+GnLJ6eL5kDLrkxg8mHl rqWjC8tXJm6fpQa8Z2KdH6vlSj85z6ALy6TuXOWosC0s2M2dslQCxBm57an45uJZvfLqjn+ZdDi/ v16sPWOI/56QvdbSRHgIXIMOzQ6GBCTneThIhQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAc4qsciJ5MdMUIu4n/pSTsSiU9OCyAanPTe5TcMX4v1hxhpFwiTGQUv3BXT6IAO4litrZKTU aj4vitqHW1+RQsHn3k/gSvt7FwyQwpy0mEnShBgr6RQiGtlBODNY67sTl+W8M/b6SLTAaaDri3BO 5u6wrDs149rMELJAdoVBjmXW+zRH3kZzh3lwyTZsYtk7L+3DYbTiiHq+sRB4F9XoBPAz5Psv4q4E iPq07nW3acbW84zTz3CyQUmQkJT9VB1oUKHz6sNoyccqzcMX4q1GHAYpQ7FAXlKMxidoN1Ay5DWA NgTmgJXzKhcI2nIZoq1x3yq4814O1LQd9QP68gI37+0= ) ; Key ID = 48903`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20200422000000 20200401000000 20326 . MYL1CcghvT4i0z7u1GFvZtGlwjU4pNZxjY8pzsZbfaWJvjA6mwQCReH2PcVjvtr7syyUhLlPHj2B xFbbb/YDbU7Fth14eI2YTChuVkrO6xR/IGf5eIYEF4Aw6gJZGp7tIchnf+Ms+pUiaWnXEpMkIZc4 HvsuuJ+HfDcvWAzyB542TsNxW9VKUfprEgX4/oQ5SLIl/HnoRRdZWZRH+GnLJ6eL5kDLrkxg8mHl rqWjC8tXJm6fpQa8Z2KdH6vlSj85z6ALy6TuXOWosC0s2M2dslQCxBm57an45uJZvfLqjn+ZdDi/ v16sPWOI/56QvdbSRHgIXIMOzQ6GBCTneThIhQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=48903 is now in the chain-of-trust
	DNSKEY=33853 is now in the chain-of-trust
	Query to i.root-servers.net for fedoraproject.org/A
	Received 819 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (819 bytes) ;; HEADER SECTION ;; id = 196 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fedoraproject.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) org. 172800 IN NS b0.org.afilias-nst.org. org. 172800 IN NS a0.org.afilias-nst.info. org. 172800 IN NS b2.org.afilias-nst.org. org. 172800 IN NS a2.org.afilias-nst.info. org. 172800 IN NS c0.org.afilias-nst.info. org. 172800 IN NS d0.org.afilias-nst.org. org. 86400 IN DS ( 9795 7 2 3922b31b6f3a4ea92b19eb7b52120f031fd8e05ff0b03bafcf9f891bfe7ff8e5 ) org. 86400 IN DS 9795 7 1 364dfab3daf254cab477b5675b10766ddaa24982 org. 86400 IN RRSIG ( DS 8 1 86400 20200422050000 20200409040000 48903 . Gafwmy4cNqgK5Eh2FxCIumGIXpL/P4c7JVfc7QFlyBNQU4yFKCrvsFf1UTKTqoihZR9hFaS+nDS0 +lCRepUWYT2Nz2jrVwaStm0T8YX8VXkXD08LJngfXkjyvLo0WGOyJv+jUWaqJn4NZrBqaMm3JMhF aOyAQLjoY3zGnCAiNNEDt7WPmu60zMfRveNUiAbhfVMhE6NY6WEsN8UcjaHwS/YcblLVOAXwjxfu DlswkQ4HwJG9elpQU9otl5XMVb9mDhzT0To8h4l2okNcC8+wbEiJjOQxDW5XuOLEj4CD+ibmp0Jv 2bxbZN5drDl3eUzKfebWKeoRZuy/alkTpTLC+A== ) ;; ADDITIONAL SECTION (13 records) a0.org.afilias-nst.info. 172800 IN A 199.19.56.1 a0.org.afilias-nst.info. 172800 IN AAAA 2001:500:e::1 a2.org.afilias-nst.info. 172800 IN A 199.249.112.1 a2.org.afilias-nst.info. 172800 IN AAAA 2001:500:40::1 b0.org.afilias-nst.org. 172800 IN A 199.19.54.1 b0.org.afilias-nst.org. 172800 IN AAAA 2001:500:c::1 b2.org.afilias-nst.org. 172800 IN A 199.249.120.1 b2.org.afilias-nst.org. 172800 IN AAAA 2001:500:48::1 c0.org.afilias-nst.info. 172800 IN A 199.19.53.1 c0.org.afilias-nst.info. 172800 IN AAAA 2001:500:b::1 d0.org.afilias-nst.org. 172800 IN A 199.19.57.1 d0.org.afilias-nst.org. 172800 IN AAAA 2001:500:f::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to f.root-servers.net for org/DNSKEY
	Received 805 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (805 bytes) ;; HEADER SECTION ;; id = 44673 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) org. 172800 IN NS a0.org.afilias-nst.info. org. 172800 IN NS a2.org.afilias-nst.info. org. 172800 IN NS b0.org.afilias-nst.org. org. 172800 IN NS b2.org.afilias-nst.org. org. 172800 IN NS c0.org.afilias-nst.info. org. 172800 IN NS d0.org.afilias-nst.org. org. 86400 IN DS 9795 7 1 364dfab3daf254cab477b5675b10766ddaa24982 org. 86400 IN DS ( 9795 7 2 3922b31b6f3a4ea92b19eb7b52120f031fd8e05ff0b03bafcf9f891bfe7ff8e5 ) org. 86400 IN RRSIG ( DS 8 1 86400 20200422050000 20200409040000 48903 . Gafwmy4cNqgK5Eh2FxCIumGIXpL/P4c7JVfc7QFlyBNQU4yFKCrvsFf1UTKTqoihZR9hFaS+nDS0 +lCRepUWYT2Nz2jrVwaStm0T8YX8VXkXD08LJngfXkjyvLo0WGOyJv+jUWaqJn4NZrBqaMm3JMhF aOyAQLjoY3zGnCAiNNEDt7WPmu60zMfRveNUiAbhfVMhE6NY6WEsN8UcjaHwS/YcblLVOAXwjxfu DlswkQ4HwJG9elpQU9otl5XMVb9mDhzT0To8h4l2okNcC8+wbEiJjOQxDW5XuOLEj4CD+ibmp0Jv 2bxbZN5drDl3eUzKfebWKeoRZuy/alkTpTLC+A== ) ;; ADDITIONAL SECTION (13 records) a0.org.afilias-nst.info. 172800 IN A 199.19.56.1 a0.org.afilias-nst.info. 172800 IN AAAA 2001:500:e::1 a2.org.afilias-nst.info. 172800 IN A 199.249.112.1 a2.org.afilias-nst.info. 172800 IN AAAA 2001:500:40::1 b0.org.afilias-nst.org. 172800 IN A 199.19.54.1 b0.org.afilias-nst.org. 172800 IN AAAA 2001:500:c::1 b2.org.afilias-nst.org. 172800 IN A 199.249.120.1 b2.org.afilias-nst.org. 172800 IN AAAA 2001:500:48::1 c0.org.afilias-nst.info. 172800 IN A 199.19.53.1 c0.org.afilias-nst.info. 172800 IN AAAA 2001:500:b::1 d0.org.afilias-nst.org. 172800 IN A 199.19.57.1 d0.org.afilias-nst.org. 172800 IN AAAA 2001:500:f::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone org

org

	Checking DS between . and org
	Query to g.root-servers.net for org/DS
	Received 403 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (403 bytes) ;; HEADER SECTION ;; id = 38255 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; org. IN DS ;; ANSWER SECTION (3 records) org. 86400 IN DS 9795 7 1 364dfab3daf254cab477b5675b10766ddaa24982 org. 86400 IN DS ( 9795 7 2 3922b31b6f3a4ea92b19eb7b52120f031fd8e05ff0b03bafcf9f891bfe7ff8e5 ) org. 86400 IN RRSIG ( DS 8 1 86400 20200422050000 20200409040000 48903 . Gafwmy4cNqgK5Eh2FxCIumGIXpL/P4c7JVfc7QFlyBNQU4yFKCrvsFf1UTKTqoihZR9hFaS+nDS0 +lCRepUWYT2Nz2jrVwaStm0T8YX8VXkXD08LJngfXkjyvLo0WGOyJv+jUWaqJn4NZrBqaMm3JMhF aOyAQLjoY3zGnCAiNNEDt7WPmu60zMfRveNUiAbhfVMhE6NY6WEsN8UcjaHwS/YcblLVOAXwjxfu DlswkQ4HwJG9elpQU9otl5XMVb9mDhzT0To8h4l2okNcC8+wbEiJjOQxDW5XuOLEj4CD+ibmp0Jv 2bxbZN5drDl3eUzKfebWKeoRZuy/alkTpTLC+A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for org in the . zone
	DS=9795/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=9795/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`org. 86400 IN RRSIG ( DS 8 1 86400 20200422050000 20200409040000 48903 . Gafwmy4cNqgK5Eh2FxCIumGIXpL/P4c7JVfc7QFlyBNQU4yFKCrvsFf1UTKTqoihZR9hFaS+nDS0 +lCRepUWYT2Nz2jrVwaStm0T8YX8VXkXD08LJngfXkjyvLo0WGOyJv+jUWaqJn4NZrBqaMm3JMhF aOyAQLjoY3zGnCAiNNEDt7WPmu60zMfRveNUiAbhfVMhE6NY6WEsN8UcjaHwS/YcblLVOAXwjxfu DlswkQ4HwJG9elpQU9otl5XMVb9mDhzT0To8h4l2okNcC8+wbEiJjOQxDW5XuOLEj4CD+ibmp0Jv 2bxbZN5drDl3eUzKfebWKeoRZuy/alkTpTLC+A== )`
	RRSIG=48903 and DNSKEY=48903 verifies the DS RRset
	DS=9795/SHA-1 is now in the chain-of-trust
	`org. 86400 IN DS 9795 7 1 364dfab3daf254cab477b5675b10766ddaa24982`
	`org. 86400 IN DS ( 9795 7 2 3922b31b6f3a4ea92b19eb7b52120f031fd8e05ff0b03bafcf9f891bfe7ff8e5 )`
	Query to a0.org.afilias-nst.info for org/DNSKEY
	Received 1625 bytes from 199.19.56.1
	;; Answer received from 199.19.56.1 (1625 bytes) ;; HEADER SECTION ;; id = 14657 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 7 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; org. IN DNSKEY ;; ANSWER SECTION (7 records) org. 900 IN DNSKEY ( 256 3 7 AwEAAcLPVEcg0hFBheXQfQOqqLiRgckk69o2KTAsq3lNRY0c9mnEjzZDGsGmXNy2EQ6yelkIYYus 7KLor2Fzx59hEqcM82zqkdHV6hXvZyjxxSHG3nl8xQS6gF8mdIYouDTWWhTInfjSKoIeDokHq3S6 7EjSngV7/wVCMTbIamS0NF4H ) ; Key ID = 37022 org. 900 IN DNSKEY ( 257 3 7 AwEAAcMnWBKLuvG/LwnPVykcmpvnntwxfshHlHRhlY0F3oz8AMcuF8gw9McCw+BoC2YxWaiTpNPu xjSNhUlBtcJmcdkz3/r7PIn0oDf14ept1Y9pdPh8SbIBIWx50ZPfVRlj8oQXv2Y6yKiQik7bi3MT 37zMRU2kw2oy3cgrsGAzGN4s/C6SFYon5N1Q2O4hGDbeOq538kATOy0GFELjuauV9guX/431msYu 4Rgb5lLuQ3Mx5FSIxXpI/RaAn2mhM4nEZ/5IeRPKZVGydcuLBS8GZlxW4qbb8MgRZ8bwMg0pqWRH mhirGmJIt3UuzvN1pSFBfX7ysI9PPhSnwXCNDXk0kk0= ) ; Key ID = 17883 org. 900 IN DNSKEY ( 257 3 7 AwEAAZTjbIO5kIpxWUtyXc8avsKyHIIZ+LjC2Dv8naO+Tz6X2fqzDC1bdq7HlZwtkaqTkMVVJ+8g E9FIreGJ4c8G1GdbjQgbP1OyYIG7OHTc4hv5T2NlyWr6k6QFz98Q4zwFIGTFVvwBhmrMDYsOTtXa kK6QwHovA1+83BsUACxlidpwB0hQacbD6x+I2RCDzYuTzj64Jv0/9XsX6AYV3ebcgn4hL1jIR2eJ YyXlrAoWxdzxcW//5yeL5RVWuhRxejmnSVnCuxkfS4AQ485KH2tpdbWcCopLJZs6tw8q3jWcpTGz dh/v3xdYfNpQNcPImFlxAun3BtORPA2r8ti6MNoJEHU= ) ; Key ID = 9795 org. 900 IN DNSKEY ( 256 3 7 AwEAAaeW4rQBjY9Z4xE575nPn6HpUdVu7FZijNNQlxavr2gUQMaAgDc5u6QiB3QzYrY1dSZALSEb HHGyA5z7ZN5XUaC+zwmu5xT58nox/1c/bxPBWZE17d6tqIYfdpKKlqgSIHnaQsTbIv9FFHvKxdDD ukCTInKZyPW4rLLJyipUJUYH ) ; Key ID = 33209 org. 900 IN RRSIG ( DNSKEY 7 1 900 20200429124018 20200408114018 9795 org. j9619Lmx+Q2TpPP2fwusP8r09S3fvJBTS897eY+WUbYUNHT7HuJEJSWADwdTdygDNISthxZw0nWC 6mNXu2OanXTUSJ3E51H8lLk3muREkXBDTELE4YNjyMLKe9k7fqInk5aYmkO2viMfhXHKj/ScmCC0 C8msYvHGBr3hqcQDhv6duY3zDIPy7FRHNgas+5lgzKRi/Z/+XXDpqT/KzZrk8cyW1X0bZ/6YC/MU QXN/xUtaB4bA/cMOi7t01SCa4l7j2rMlASJ+6fIWC8IpYugSvC+bN4ZWADukvLyOz2ttcJTHLWCq JmCaZowfLSrbpBZOAg3BpA8+NZfV/IJa+dlOJA== ) org. 900 IN RRSIG ( DNSKEY 7 1 900 20200429124018 20200408114018 17883 org. nezkJMD2R7j2teUthhXTRtYxQ7zeJdgPvbw2785fLtoMggd7n22gcLalOZbEK0eCmLXZU5GAeh2V c6/vghbOSWIG9aATBvpFykjLshkRNUTikoJS7B6b3CRufwjPPR/Is2FYFHlbP+A/tt2HMo74uuFv DRkbylV+aAUqmlXT3Ion+Hlva8KXTyREqL/f83I0by7DNaI7JZv3WZubHtmkN79iMx2rpnCSJd+a mbKsB4GhPE1MbWSaVjw7elbeGH5y+SIRyK2ccaqdvZzhNCWv9nzRE2/5WT/rs1U88k1xRUDgLYhZ bX33N36CpFWtVTCgGf0fqSu+JaBLSp1i8X1DcA== ) org. 900 IN RRSIG ( DNSKEY 7 1 900 20200429124018 20200408114018 37022 org. XjSFe6hR4mjo9YvsqK+VNdX1nvGoQVNvQGFidAf/xOaOid6deL8Q1/67AQQBMLxsX3xAWRCfbl9H XWDlDUr/wBmwsBOrSBf4HE74pTAhFqx4fVQKhXGDMg7swpyiBxoLwJnVs8JKFTq8331ptLPWSilF 4sCIW2XneyA4b2ONjGI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for org
	`org. 900 IN DNSKEY ( 256 3 7 AwEAAcLPVEcg0hFBheXQfQOqqLiRgckk69o2KTAsq3lNRY0c9mnEjzZDGsGmXNy2EQ6yelkIYYus 7KLor2Fzx59hEqcM82zqkdHV6hXvZyjxxSHG3nl8xQS6gF8mdIYouDTWWhTInfjSKoIeDokHq3S6 7EjSngV7/wVCMTbIamS0NF4H ) ; Key ID = 37022`
	`org. 900 IN DNSKEY ( 257 3 7 AwEAAcMnWBKLuvG/LwnPVykcmpvnntwxfshHlHRhlY0F3oz8AMcuF8gw9McCw+BoC2YxWaiTpNPu xjSNhUlBtcJmcdkz3/r7PIn0oDf14ept1Y9pdPh8SbIBIWx50ZPfVRlj8oQXv2Y6yKiQik7bi3MT 37zMRU2kw2oy3cgrsGAzGN4s/C6SFYon5N1Q2O4hGDbeOq538kATOy0GFELjuauV9guX/431msYu 4Rgb5lLuQ3Mx5FSIxXpI/RaAn2mhM4nEZ/5IeRPKZVGydcuLBS8GZlxW4qbb8MgRZ8bwMg0pqWRH mhirGmJIt3UuzvN1pSFBfX7ysI9PPhSnwXCNDXk0kk0= ) ; Key ID = 17883`
	`org. 900 IN DNSKEY ( 257 3 7 AwEAAZTjbIO5kIpxWUtyXc8avsKyHIIZ+LjC2Dv8naO+Tz6X2fqzDC1bdq7HlZwtkaqTkMVVJ+8g E9FIreGJ4c8G1GdbjQgbP1OyYIG7OHTc4hv5T2NlyWr6k6QFz98Q4zwFIGTFVvwBhmrMDYsOTtXa kK6QwHovA1+83BsUACxlidpwB0hQacbD6x+I2RCDzYuTzj64Jv0/9XsX6AYV3ebcgn4hL1jIR2eJ YyXlrAoWxdzxcW//5yeL5RVWuhRxejmnSVnCuxkfS4AQ485KH2tpdbWcCopLJZs6tw8q3jWcpTGz dh/v3xdYfNpQNcPImFlxAun3BtORPA2r8ti6MNoJEHU= ) ; Key ID = 9795`
	`org. 900 IN DNSKEY ( 256 3 7 AwEAAaeW4rQBjY9Z4xE575nPn6HpUdVu7FZijNNQlxavr2gUQMaAgDc5u6QiB3QzYrY1dSZALSEb HHGyA5z7ZN5XUaC+zwmu5xT58nox/1c/bxPBWZE17d6tqIYfdpKKlqgSIHnaQsTbIv9FFHvKxdDD ukCTInKZyPW4rLLJyipUJUYH ) ; Key ID = 33209`
	DNSKEY=9795/SEP is now in the chain-of-trust
	DS=9795/SHA-1 verifies DNSKEY=9795/SEP
	DS=9795/SHA-256 verifies DNSKEY=9795/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`org. 900 IN RRSIG ( DNSKEY 7 1 900 20200429124018 20200408114018 9795 org. j9619Lmx+Q2TpPP2fwusP8r09S3fvJBTS897eY+WUbYUNHT7HuJEJSWADwdTdygDNISthxZw0nWC 6mNXu2OanXTUSJ3E51H8lLk3muREkXBDTELE4YNjyMLKe9k7fqInk5aYmkO2viMfhXHKj/ScmCC0 C8msYvHGBr3hqcQDhv6duY3zDIPy7FRHNgas+5lgzKRi/Z/+XXDpqT/KzZrk8cyW1X0bZ/6YC/MU QXN/xUtaB4bA/cMOi7t01SCa4l7j2rMlASJ+6fIWC8IpYugSvC+bN4ZWADukvLyOz2ttcJTHLWCq JmCaZowfLSrbpBZOAg3BpA8+NZfV/IJa+dlOJA== )`
	`org. 900 IN RRSIG ( DNSKEY 7 1 900 20200429124018 20200408114018 17883 org. nezkJMD2R7j2teUthhXTRtYxQ7zeJdgPvbw2785fLtoMggd7n22gcLalOZbEK0eCmLXZU5GAeh2V c6/vghbOSWIG9aATBvpFykjLshkRNUTikoJS7B6b3CRufwjPPR/Is2FYFHlbP+A/tt2HMo74uuFv DRkbylV+aAUqmlXT3Ion+Hlva8KXTyREqL/f83I0by7DNaI7JZv3WZubHtmkN79iMx2rpnCSJd+a mbKsB4GhPE1MbWSaVjw7elbeGH5y+SIRyK2ccaqdvZzhNCWv9nzRE2/5WT/rs1U88k1xRUDgLYhZ bX33N36CpFWtVTCgGf0fqSu+JaBLSp1i8X1DcA== )`
	`org. 900 IN RRSIG ( DNSKEY 7 1 900 20200429124018 20200408114018 37022 org. XjSFe6hR4mjo9YvsqK+VNdX1nvGoQVNvQGFidAf/xOaOid6deL8Q1/67AQQBMLxsX3xAWRCfbl9H XWDlDUr/wBmwsBOrSBf4HE74pTAhFqx4fVQKhXGDMg7swpyiBxoLwJnVs8JKFTq8331ptLPWSilF 4sCIW2XneyA4b2ONjGI= )`
	RRSIG=9795 and DNSKEY=9795/SEP verifies the DNSKEY RRset
	RRSIG=17883 and DNSKEY=17883/SEP verifies the DNSKEY RRset
	RRSIG=37022 and DNSKEY=37022 verifies the DNSKEY RRset
	DNSKEY=37022 is now in the chain-of-trust
	DNSKEY=17883/SEP is now in the chain-of-trust
	DNSKEY=33209 is now in the chain-of-trust
	Query to c0.org.afilias-nst.info for fedoraproject.org/A
	Received 454 bytes from 199.19.53.1
	;; Answer received from 199.19.53.1 (454 bytes) ;; HEADER SECTION ;; id = 10333 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 6 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fedoraproject.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) fedoraproject.org. 86400 IN NS ns04.fedoraproject.org. fedoraproject.org. 86400 IN NS ns05.fedoraproject.org. fedoraproject.org. 86400 IN NS ns02.fedoraproject.org. fedoraproject.org. 86400 IN DS ( 16207 5 2 a7c9bf5afe374c9650ed678f3d36931a7de9256b86a7bc34d6deed7d4e492e5e ) fedoraproject.org. 86400 IN DS ( 16207 5 1 8dd099791a2a110851fde5d14f6c62adc3dd7c18 ) fedoraproject.org. 86400 IN RRSIG ( DS 7 2 86400 20200429124018 20200408114018 37022 org. FmxbOQNLwFFy/erAFY/B4gUKF8EuhbTwP6WSc3C9kYPyyy8Pr6M38JnBCJT1XVyQM8HNZ8T6S6g0 4/ZQ8a8zniVvVnnfSa+t7zKPWGtn0Crhvluzu7FkpbwDtlXMkomTloH0LRbt5idX2nOxD3ChLUua ziTrZvor/QoRgilYgAM= ) ;; ADDITIONAL SECTION (6 records) ns02.fedoraproject.org. 86400 IN A 152.19.134.139 ns04.fedoraproject.org. 86400 IN A 209.132.181.17 ns05.fedoraproject.org. 86400 IN A 85.236.55.10 ns02.fedoraproject.org. 86400 IN AAAA 2610:28:3090:3001:dead:beef:cafe:fed5 ns05.fedoraproject.org. 86400 IN AAAA 2001:4178:2:1269:dead:beef:cafe:fed5 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c0.org.afilias-nst.info for fedoraproject.org/DNSKEY
	Received 454 bytes from 199.19.53.1
	;; Answer received from 199.19.53.1 (454 bytes) ;; HEADER SECTION ;; id = 20107 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 6 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fedoraproject.org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) fedoraproject.org. 86400 IN NS ns02.fedoraproject.org. fedoraproject.org. 86400 IN NS ns05.fedoraproject.org. fedoraproject.org. 86400 IN NS ns04.fedoraproject.org. fedoraproject.org. 86400 IN DS ( 16207 5 1 8dd099791a2a110851fde5d14f6c62adc3dd7c18 ) fedoraproject.org. 86400 IN DS ( 16207 5 2 a7c9bf5afe374c9650ed678f3d36931a7de9256b86a7bc34d6deed7d4e492e5e ) fedoraproject.org. 86400 IN RRSIG ( DS 7 2 86400 20200429124018 20200408114018 37022 org. FmxbOQNLwFFy/erAFY/B4gUKF8EuhbTwP6WSc3C9kYPyyy8Pr6M38JnBCJT1XVyQM8HNZ8T6S6g0 4/ZQ8a8zniVvVnnfSa+t7zKPWGtn0Crhvluzu7FkpbwDtlXMkomTloH0LRbt5idX2nOxD3ChLUua ziTrZvor/QoRgilYgAM= ) ;; ADDITIONAL SECTION (6 records) ns02.fedoraproject.org. 86400 IN A 152.19.134.139 ns04.fedoraproject.org. 86400 IN A 209.132.181.17 ns05.fedoraproject.org. 86400 IN A 85.236.55.10 ns02.fedoraproject.org. 86400 IN AAAA 2610:28:3090:3001:dead:beef:cafe:fed5 ns05.fedoraproject.org. 86400 IN AAAA 2001:4178:2:1269:dead:beef:cafe:fed5 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone fedoraproject.org

fedoraproject.org

	Checking DS between org and fedoraproject.org
	Query to a0.org.afilias-nst.info for fedoraproject.org/DS
	Received 293 bytes from 199.19.56.1
	;; Answer received from 199.19.56.1 (293 bytes) ;; HEADER SECTION ;; id = 6658 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fedoraproject.org. IN DS ;; ANSWER SECTION (3 records) fedoraproject.org. 86400 IN DS ( 16207 5 1 8dd099791a2a110851fde5d14f6c62adc3dd7c18 ) fedoraproject.org. 86400 IN DS ( 16207 5 2 a7c9bf5afe374c9650ed678f3d36931a7de9256b86a7bc34d6deed7d4e492e5e ) fedoraproject.org. 86400 IN RRSIG ( DS 7 2 86400 20200429124018 20200408114018 37022 org. FmxbOQNLwFFy/erAFY/B4gUKF8EuhbTwP6WSc3C9kYPyyy8Pr6M38JnBCJT1XVyQM8HNZ8T6S6g0 4/ZQ8a8zniVvVnnfSa+t7zKPWGtn0Crhvluzu7FkpbwDtlXMkomTloH0LRbt5idX2nOxD3ChLUua ziTrZvor/QoRgilYgAM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for fedoraproject.org in the org zone
	DS=16207/SHA-1 has algorithm RSASHA1
	DS=16207/SHA-256 has algorithm RSASHA1
	Found 1 RRSIGs over DS RRset
	`fedoraproject.org. 86400 IN RRSIG ( DS 7 2 86400 20200429124018 20200408114018 37022 org. FmxbOQNLwFFy/erAFY/B4gUKF8EuhbTwP6WSc3C9kYPyyy8Pr6M38JnBCJT1XVyQM8HNZ8T6S6g0 4/ZQ8a8zniVvVnnfSa+t7zKPWGtn0Crhvluzu7FkpbwDtlXMkomTloH0LRbt5idX2nOxD3ChLUua ziTrZvor/QoRgilYgAM= )`
	RRSIG=37022 and DNSKEY=37022 verifies the DS RRset
	DS=16207/SHA-1 is now in the chain-of-trust
	`fedoraproject.org. 86400 IN DS ( 16207 5 1 8dd099791a2a110851fde5d14f6c62adc3dd7c18 )`
	`fedoraproject.org. 86400 IN DS ( 16207 5 2 a7c9bf5afe374c9650ed678f3d36931a7de9256b86a7bc34d6deed7d4e492e5e )`
	Query to ns04.fedoraproject.org for fedoraproject.org/DNSKEY
	Received 952 bytes from 209.132.181.17
	;; Answer received from 209.132.181.17 (952 bytes) ;; HEADER SECTION ;; id = 62171 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fedoraproject.org. IN DNSKEY ;; ANSWER SECTION (4 records) fedoraproject.org. 300 IN DNSKEY ( 256 3 5 AwEAAcCWNQWl5pCI3iOOP2r8nStL60Zjb/2JQLQytamVap0L44z0YWftu7pu0hx3cnIM1ejQOsEw bg2/10IyC+38cYqJDXbSdFg1zGztOS5xNz7r9hzSRK5N2jkycdJ/BoByJ4Y+XGpDqfG4I97++8sI zSrw60TmGAKTvM9viL3ByeCN ) ; Key ID = 7725 fedoraproject.org. 300 IN DNSKEY ( 257 3 5 AwEAAdTXJc0joiKGfTvLXi+LXxGpKvPvOoJEst9PR8TCCvXGVp7h3BY3uXLkjckuT0aopCp2KF8z HgNgpMK03p1fd94pn9JZSuxfqvKsiYH2KvNOa/655oPj06jRhqAP5grX01Iz4BH411ZhGxIQ1BzZ tOr1wAazojMJzLUgChRJs8GVt3LU0e6T8z1RQF33Dt9UMHIR5EAsFAqfZ/tsbfJDYktGoZi3nFlW 7A745+ObM1LNXOWq3FcYPVzhH08Q7/7WpxmzM6/ET8VeqWIsvh8EnZNDNMfJyPbY9B1BOIrFCpE0 3ALgFMejaBZwmeQaX+D4Duup5xGOmdtCO4GSpM1YH6c= ) ; Key ID = 16207 fedoraproject.org. 300 IN RRSIG ( DNSKEY 5 2 300 20200507182800 20200407182800 7725 fedoraproject.org. crArG7mhxIB1HWDKiJREfLDxItMMCv5KC+SxK72bI4fO7yGKWPuJ0bJ5YJ/0nXTtNLGyFApmuKh1 sc8Eve+PJ14YmWOccvCqMfkDcNCICIRZwsVoCA7wI3SnLyOmthvFX9ANNu1wmLTVs0XyxLMYx8dI omYbg2wclpM6+MR4Ccw= ) fedoraproject.org. 300 IN RRSIG ( DNSKEY 5 2 300 20200507182800 20200407182800 16207 fedoraproject.org. r41TEg7mkjfA1JEKMX2Bg4efn8F2Ky9ayT0RyDfh1aHcAXsHQx91aPzb/abg0LN/Nx5J0oGg6viW OB1SQGvtFb7t0pgkvMtlnndBY8n4L3ym+YQwffedltsFZC6L6XL2tQYhGuhxbCpWHKNRGh3P1BhW nCJ1HwV07Yn7PQB9V/aLxcmU5tTMjVd+HkAUnxgVr0MtqxW1XSCZqYZor0YTI0sUZBpyEmi+Hgmn fxKOnDdp5QdcykSoo7xs54cLt9uJTgda5eOp9JVtIXM2XTTI2ATUWOxB6L2n+QS75kv2P3zG87kh ucyCVFeSyXAi3SKMNd0BSecfkHD6GemyJwAA+w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for fedoraproject.org
	`fedoraproject.org. 300 IN DNSKEY ( 256 3 5 AwEAAcCWNQWl5pCI3iOOP2r8nStL60Zjb/2JQLQytamVap0L44z0YWftu7pu0hx3cnIM1ejQOsEw bg2/10IyC+38cYqJDXbSdFg1zGztOS5xNz7r9hzSRK5N2jkycdJ/BoByJ4Y+XGpDqfG4I97++8sI zSrw60TmGAKTvM9viL3ByeCN ) ; Key ID = 7725`
	`fedoraproject.org. 300 IN DNSKEY ( 257 3 5 AwEAAdTXJc0joiKGfTvLXi+LXxGpKvPvOoJEst9PR8TCCvXGVp7h3BY3uXLkjckuT0aopCp2KF8z HgNgpMK03p1fd94pn9JZSuxfqvKsiYH2KvNOa/655oPj06jRhqAP5grX01Iz4BH411ZhGxIQ1BzZ tOr1wAazojMJzLUgChRJs8GVt3LU0e6T8z1RQF33Dt9UMHIR5EAsFAqfZ/tsbfJDYktGoZi3nFlW 7A745+ObM1LNXOWq3FcYPVzhH08Q7/7WpxmzM6/ET8VeqWIsvh8EnZNDNMfJyPbY9B1BOIrFCpE0 3ALgFMejaBZwmeQaX+D4Duup5xGOmdtCO4GSpM1YH6c= ) ; Key ID = 16207`
	DNSKEY=16207/SEP is now in the chain-of-trust
	DS=16207/SHA-1 verifies DNSKEY=16207/SEP
	DS=16207/SHA-256 verifies DNSKEY=16207/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`fedoraproject.org. 300 IN RRSIG ( DNSKEY 5 2 300 20200507182800 20200407182800 7725 fedoraproject.org. crArG7mhxIB1HWDKiJREfLDxItMMCv5KC+SxK72bI4fO7yGKWPuJ0bJ5YJ/0nXTtNLGyFApmuKh1 sc8Eve+PJ14YmWOccvCqMfkDcNCICIRZwsVoCA7wI3SnLyOmthvFX9ANNu1wmLTVs0XyxLMYx8dI omYbg2wclpM6+MR4Ccw= )`
	`fedoraproject.org. 300 IN RRSIG ( DNSKEY 5 2 300 20200507182800 20200407182800 16207 fedoraproject.org. r41TEg7mkjfA1JEKMX2Bg4efn8F2Ky9ayT0RyDfh1aHcAXsHQx91aPzb/abg0LN/Nx5J0oGg6viW OB1SQGvtFb7t0pgkvMtlnndBY8n4L3ym+YQwffedltsFZC6L6XL2tQYhGuhxbCpWHKNRGh3P1BhW nCJ1HwV07Yn7PQB9V/aLxcmU5tTMjVd+HkAUnxgVr0MtqxW1XSCZqYZor0YTI0sUZBpyEmi+Hgmn fxKOnDdp5QdcykSoo7xs54cLt9uJTgda5eOp9JVtIXM2XTTI2ATUWOxB6L2n+QS75kv2P3zG87kh ucyCVFeSyXAi3SKMNd0BSecfkHD6GemyJwAA+w== )`
	RRSIG=7725 and DNSKEY=7725 verifies the DNSKEY RRset
	RRSIG=16207 and DNSKEY=16207/SEP verifies the DNSKEY RRset
	DNSKEY=7725 is now in the chain-of-trust
	Query to ns04.fedoraproject.org for fedoraproject.org/A
	Received 399 bytes from 209.132.181.17
	;; Answer received from 209.132.181.17 (399 bytes) ;; HEADER SECTION ;; id = 64292 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 12 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fedoraproject.org. IN A ;; ANSWER SECTION (12 records) fedoraproject.org. 60 IN A 140.211.169.196 fedoraproject.org. 60 IN A 67.219.144.68 fedoraproject.org. 60 IN A 209.132.190.2 fedoraproject.org. 60 IN A 8.43.85.67 fedoraproject.org. 60 IN A 209.132.181.15 fedoraproject.org. 60 IN A 152.19.134.198 fedoraproject.org. 60 IN A 8.43.85.73 fedoraproject.org. 60 IN A 140.211.169.206 fedoraproject.org. 60 IN A 152.19.134.142 fedoraproject.org. 60 IN A 13.250.126.156 fedoraproject.org. 60 IN A 209.132.181.16 fedoraproject.org. 60 IN RRSIG ( A 5 2 60 20200507182800 20200407182800 7725 fedoraproject.org. M7jDUv1Jc9BTXhjYTxj8bnEjY9mNWQ15BuEUUG/9EKhldYul53AueR7N8aBntogyYln4bQyIKWU+ Mi4L7asDwM7PYl53OslH5SeyyppL0rm45dqglC4Z+aa9zB5B8FggGkMuootrgU0NkHMkYN/JfEOW 26jvPT+jbqTLALqINSc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	fedoraproject.org is authoritative for fedoraproject.org
	Found RRSIG signed by fedoraproject.org zone
	Query to ns05.fedoraproject.org for fedoraproject.org/SOA
	Received 275 bytes from 85.236.55.10
	;; Answer received from 85.236.55.10 (275 bytes) ;; HEADER SECTION ;; id = 16267 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fedoraproject.org. IN SOA ;; ANSWER SECTION (2 records) fedoraproject.org. 300 IN SOA ( ns04.fedoraproject.org. hostmaster.fedoraproject.org. 2586287620 ;serial 3600 ;refresh 600 ;retry 2419200 ;expire 86400 ;minimum ) fedoraproject.org. 300 IN RRSIG ( SOA 5 2 300 20200507182800 20200407182800 7725 fedoraproject.org. J7jzaedskYb7JJuNG7e6YI7KeRxoQw5kFQ9Esv2dWdjxTM6OkSMqV8KJ2Usfw43zf/Sh4nXG5rK8 I0JFS98RFb6H4M6OkAQW1MacGDjl1ttAQJjcaWFok2wAm28M0VF2j/+UF8kkSdyOw1mx3Uzmgq3l VbS95pNcYNvvYd53mto= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns02.fedoraproject.org for fedoraproject.org/SOA
	Received 275 bytes from 152.19.134.139
	;; Answer received from 152.19.134.139 (275 bytes) ;; HEADER SECTION ;; id = 4919 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fedoraproject.org. IN SOA ;; ANSWER SECTION (2 records) fedoraproject.org. 300 IN SOA ( ns04.fedoraproject.org. hostmaster.fedoraproject.org. 2586287620 ;serial 3600 ;refresh 600 ;retry 2419200 ;expire 86400 ;minimum ) fedoraproject.org. 300 IN RRSIG ( SOA 5 2 300 20200507182800 20200407182800 7725 fedoraproject.org. J7jzaedskYb7JJuNG7e6YI7KeRxoQw5kFQ9Esv2dWdjxTM6OkSMqV8KJ2Usfw43zf/Sh4nXG5rK8 I0JFS98RFb6H4M6OkAQW1MacGDjl1ttAQJjcaWFok2wAm28M0VF2j/+UF8kkSdyOw1mx3Uzmgq3l VbS95pNcYNvvYd53mto= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns04.fedoraproject.org for fedoraproject.org/SOA
	Received 275 bytes from 209.132.181.17
	;; Answer received from 209.132.181.17 (275 bytes) ;; HEADER SECTION ;; id = 34071 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fedoraproject.org. IN SOA ;; ANSWER SECTION (2 records) fedoraproject.org. 300 IN SOA ( ns04.fedoraproject.org. hostmaster.fedoraproject.org. 2586287620 ;serial 3600 ;refresh 600 ;retry 2419200 ;expire 86400 ;minimum ) fedoraproject.org. 300 IN RRSIG ( SOA 5 2 300 20200507182800 20200407182800 7725 fedoraproject.org. J7jzaedskYb7JJuNG7e6YI7KeRxoQw5kFQ9Esv2dWdjxTM6OkSMqV8KJ2Usfw43zf/Sh4nXG5rK8 I0JFS98RFb6H4M6OkAQW1MacGDjl1ttAQJjcaWFok2wAm28M0VF2j/+UF8kkSdyOw1mx3Uzmgq3l VbS95pNcYNvvYd53mto= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns04.fedoraproject.org for fedoraproject.org/A
	Received 399 bytes from 209.132.181.17
	;; Answer received from 209.132.181.17 (399 bytes) ;; HEADER SECTION ;; id = 57756 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 12 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fedoraproject.org. IN A ;; ANSWER SECTION (12 records) fedoraproject.org. 60 IN A 152.19.134.198 fedoraproject.org. 60 IN A 13.250.126.156 fedoraproject.org. 60 IN A 67.219.144.68 fedoraproject.org. 60 IN A 209.132.181.15 fedoraproject.org. 60 IN A 209.132.181.16 fedoraproject.org. 60 IN A 8.43.85.67 fedoraproject.org. 60 IN A 8.43.85.73 fedoraproject.org. 60 IN A 140.211.169.206 fedoraproject.org. 60 IN A 152.19.134.142 fedoraproject.org. 60 IN A 140.211.169.196 fedoraproject.org. 60 IN A 209.132.190.2 fedoraproject.org. 60 IN RRSIG ( A 5 2 60 20200507182800 20200407182800 7725 fedoraproject.org. M7jDUv1Jc9BTXhjYTxj8bnEjY9mNWQ15BuEUUG/9EKhldYul53AueR7N8aBntogyYln4bQyIKWU+ Mi4L7asDwM7PYl53OslH5SeyyppL0rm45dqglC4Z+aa9zB5B8FggGkMuootrgU0NkHMkYN/JfEOW 26jvPT+jbqTLALqINSc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	fedoraproject.org A RR has value 152.19.134.198
	fedoraproject.org A RR has value 13.250.126.156
	fedoraproject.org A RR has value 67.219.144.68
	fedoraproject.org A RR has value 209.132.181.15
	fedoraproject.org A RR has value 209.132.181.16
	fedoraproject.org A RR has value 8.43.85.67
	fedoraproject.org A RR has value 8.43.85.73
	fedoraproject.org A RR has value 140.211.169.206
	fedoraproject.org A RR has value 152.19.134.142
	fedoraproject.org A RR has value 140.211.169.196
	fedoraproject.org A RR has value 209.132.190.2
	Found 1 RRSIGs over A RRset
	`fedoraproject.org. 60 IN RRSIG ( A 5 2 60 20200507182800 20200407182800 7725 fedoraproject.org. M7jDUv1Jc9BTXhjYTxj8bnEjY9mNWQ15BuEUUG/9EKhldYul53AueR7N8aBntogyYln4bQyIKWU+ Mi4L7asDwM7PYl53OslH5SeyyppL0rm45dqglC4Z+aa9zB5B8FggGkMuootrgU0NkHMkYN/JfEOW 26jvPT+jbqTLALqINSc= )`
	RRSIG=7725 and DNSKEY=7725 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test fedoraproject.org at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: