DNSSEC Analyzer - scra.gov

Domain Name:

Time: 2020-11-30 01:21:32 UTC, NTP stratum 4

Analyzing DNSSEC problems for scra.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to i.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (865 bytes) ;; HEADER SECTION ;; id = 28391 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20201211000000 20201120000000 20326 . eD2ohirt98vCTbuBKIH8lmGum8g2zumyXA89A999extXqsWmomgVQhcbl6zvJHLdFvhBmA+ZqhOT iXvdXpOPeyqHLuMiRv8TTawNU305WPnsonSxuD5ThT9q7YXUZc9ty19Aur3AU0KtlNGULI+4Exrg hEkdTNrysqgDWBO6zslPuJlzSwu/qZcPWYVjsWRnCtJ9DyCpgLnjSYIUzA0Xz+FWtj1jM0BKZ9Ey O+W5EaGkL2/u+bWWG07ZKJN0NwvTuq7Ounc+lz0zZDh83r/H4KRNJ4VIoY3qPDkW4ZvGdAFM5o8s ZdTTWKbieqCqWccj8W6sHEdiZ91JCt/G3/FVsw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20201211000000 20201120000000 20326 . eD2ohirt98vCTbuBKIH8lmGum8g2zumyXA89A999extXqsWmomgVQhcbl6zvJHLdFvhBmA+ZqhOT iXvdXpOPeyqHLuMiRv8TTawNU305WPnsonSxuD5ThT9q7YXUZc9ty19Aur3AU0KtlNGULI+4Exrg hEkdTNrysqgDWBO6zslPuJlzSwu/qZcPWYVjsWRnCtJ9DyCpgLnjSYIUzA0Xz+FWtj1jM0BKZ9Ey O+W5EaGkL2/u+bWWG07ZKJN0NwvTuq7Ounc+lz0zZDh83r/H4KRNJ4VIoY3qPDkW4ZvGdAFM5o8s ZdTTWKbieqCqWccj8W6sHEdiZ91JCt/G3/FVsw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=26116 is now in the chain-of-trust
	Query to i.root-servers.net for scra.gov/A
	Received 663 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (663 bytes) ;; HEADER SECTION ;; id = 50090 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; scra.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20201212170000 20201129160000 26116 . E3JDUbh11wSrrHv1zdYX7f6+8pX+EwQUgyxx2lQPi0SViwwFw3EhtXWaXC1iJixZefQRg2kB6MXi bw99NgSC24Exvi0lVxtN2Bo8nK9Vea61ZIo+dNjGQh7YRvGO6dKoKlJUxbqtL6fJzUikBUK1WAmQ 2QFAc+mBIp+6TijdHQfMyWBoJDR/AVEfucYj27D8ti+W+wyoEfu4UlZ3LBGwQaDN0BYazDdWo3j1 +lI146UQKe94A7wEhTs2FMQt7d4vKsUePZ1HyQmFSFsvQrujSJP2CyUHXM8CdU8Ly7n8INRd7CAk 3OwaAJYbGBwxdeqOudoqyxZd6FRU/i0gt04r3g== ) ;; ADDITIONAL SECTION (9 records) d.gov-servers.net. 172800 IN A 81.19.194.30 c.gov-servers.net. 172800 IN A 69.36.153.30 b.gov-servers.net. 172800 IN A 209.112.123.30 a.gov-servers.net. 172800 IN A 69.36.157.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to j.root-servers.net for gov/DNSKEY
	Received 658 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (658 bytes) ;; HEADER SECTION ;; id = 41202 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20201212170000 20201129160000 26116 . E3JDUbh11wSrrHv1zdYX7f6+8pX+EwQUgyxx2lQPi0SViwwFw3EhtXWaXC1iJixZefQRg2kB6MXi bw99NgSC24Exvi0lVxtN2Bo8nK9Vea61ZIo+dNjGQh7YRvGO6dKoKlJUxbqtL6fJzUikBUK1WAmQ 2QFAc+mBIp+6TijdHQfMyWBoJDR/AVEfucYj27D8ti+W+wyoEfu4UlZ3LBGwQaDN0BYazDdWo3j1 +lI146UQKe94A7wEhTs2FMQt7d4vKsUePZ1HyQmFSFsvQrujSJP2CyUHXM8CdU8Ly7n8INRd7CAk 3OwaAJYbGBwxdeqOudoqyxZd6FRU/i0gt04r3g== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone gov

gov

	Checking DS between . and gov
	Query to e.root-servers.net for gov/DS
	Received 403 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (403 bytes) ;; HEADER SECTION ;; id = 29016 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20201212170000 20201129160000 26116 . E3JDUbh11wSrrHv1zdYX7f6+8pX+EwQUgyxx2lQPi0SViwwFw3EhtXWaXC1iJixZefQRg2kB6MXi bw99NgSC24Exvi0lVxtN2Bo8nK9Vea61ZIo+dNjGQh7YRvGO6dKoKlJUxbqtL6fJzUikBUK1WAmQ 2QFAc+mBIp+6TijdHQfMyWBoJDR/AVEfucYj27D8ti+W+wyoEfu4UlZ3LBGwQaDN0BYazDdWo3j1 +lI146UQKe94A7wEhTs2FMQt7d4vKsUePZ1HyQmFSFsvQrujSJP2CyUHXM8CdU8Ly7n8INRd7CAk 3OwaAJYbGBwxdeqOudoqyxZd6FRU/i0gt04r3g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DS records for gov in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20201212170000 20201129160000 26116 . E3JDUbh11wSrrHv1zdYX7f6+8pX+EwQUgyxx2lQPi0SViwwFw3EhtXWaXC1iJixZefQRg2kB6MXi bw99NgSC24Exvi0lVxtN2Bo8nK9Vea61ZIo+dNjGQh7YRvGO6dKoKlJUxbqtL6fJzUikBUK1WAmQ 2QFAc+mBIp+6TijdHQfMyWBoJDR/AVEfucYj27D8ti+W+wyoEfu4UlZ3LBGwQaDN0BYazDdWo3j1 +lI146UQKe94A7wEhTs2FMQt7d4vKsUePZ1HyQmFSFsvQrujSJP2CyUHXM8CdU8Ly7n8INRd7CAk 3OwaAJYbGBwxdeqOudoqyxZd6FRU/i0gt04r3g== )`
	RRSIG=26116 and DNSKEY=26116 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to a.gov-servers.net for gov/DNSKEY
	Received 777 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (777 bytes) ;; HEADER SECTION ;; id = 8449 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 gov. 86400 IN DNSKEY ( 256 3 8 AwEAAeFoiC01j4zIdBfR1vxBGp7WmV8q6IgTQ/pvbQJhCd9+sE16txuz6M81FPFkWhTk1nsXR4tI UZLQZpvgme+q3dqWuqtFA2amB99IM9B9iq6kwSrkZNVFv6zav3eP+5BlL/OA9FNFQHXCj5qj2noA j2le7j8umVcc+4zH677ytdtIImoAY45H8wWxVrGR4kxqM54O10fPHXEPu84irfaZGrM= ) ; Key ID = 15489 gov. 86400 IN RRSIG ( DNSKEY 8 1 86400 20201210200254 20201125195754 7698 gov. YzZLdDnPNaT8OC8q9D0LGfMCrC/KfF9S3lNnD+XIjJDJ+EfeWSN8J/86Bz12BuVdxZVItK6aArLg hxuhNOX/rFUhttiaDlSaZtosvN515jn7F0H2pTSfqCqhyr/ptDoIjxAiTIS5uZDX7PCKW4eeNw6k ztwFpw/s0gOwNGRNyy9uu21AzyWwNxtbCP0LKu4RfZG4CaomCA1sWHT79G9FFb6htY6qp5yS5L7T tca32lYWnZW+3M9E4a/vKRNzmz7eJX1ijO6uVUYtBA+0tdJjm44Z1vHL7dFjcyZWxI/RQfnHvdYy cFMX9B9YrZ3PaDd4HuYpdhpihTW9/scm8Noa/g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for gov
	`gov. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`gov. 86400 IN DNSKEY ( 256 3 8 AwEAAeFoiC01j4zIdBfR1vxBGp7WmV8q6IgTQ/pvbQJhCd9+sE16txuz6M81FPFkWhTk1nsXR4tI UZLQZpvgme+q3dqWuqtFA2amB99IM9B9iq6kwSrkZNVFv6zav3eP+5BlL/OA9FNFQHXCj5qj2noA j2le7j8umVcc+4zH677ytdtIImoAY45H8wWxVrGR4kxqM54O10fPHXEPu84irfaZGrM= ) ; Key ID = 15489`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 86400 IN RRSIG ( DNSKEY 8 1 86400 20201210200254 20201125195754 7698 gov. YzZLdDnPNaT8OC8q9D0LGfMCrC/KfF9S3lNnD+XIjJDJ+EfeWSN8J/86Bz12BuVdxZVItK6aArLg hxuhNOX/rFUhttiaDlSaZtosvN515jn7F0H2pTSfqCqhyr/ptDoIjxAiTIS5uZDX7PCKW4eeNw6k ztwFpw/s0gOwNGRNyy9uu21AzyWwNxtbCP0LKu4RfZG4CaomCA1sWHT79G9FFb6htY6qp5yS5L7T tca32lYWnZW+3M9E4a/vKRNzmz7eJX1ijO6uVUYtBA+0tdJjm44Z1vHL7dFjcyZWxI/RQfnHvdYy cFMX9B9YrZ3PaDd4HuYpdhpihTW9/scm8Noa/g== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=15489 is now in the chain-of-trust
	Query to b.gov-servers.net for scra.gov/A
	Received 544 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (544 bytes) ;; HEADER SECTION ;; id = 42998 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; scra.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) scra.gov. 86400 IN NS ns-jdcw-02.usdoj.gov. scra.gov. 86400 IN NS ns-jdcw-01.usdoj.gov. scra.gov. 3600 IN DS ( 64246 8 2 ed0d4099708f1cc42e75664de5411959512d08bafc179f29aa434abbc580c876 ) scra.gov. 3600 IN DS 50611 8 1 e1a6c8c4924e1cc8ec9e981887e059b447066593 scra.gov. 3600 IN DS 64246 8 1 c85545abdde4cc1b0042da27b8ea3257af8ae483 scra.gov. 3600 IN DS ( 50611 8 2 13c5fad3050cb8dd75ae5306fa9c5d8c38fb23f6217f9044ee724c34d89ad9ca ) scra.gov. 3600 IN RRSIG ( DS 8 2 3600 20201206231009 20201129231009 15489 gov. iWEBDHVeI2Po3adwZMr4lWP30daz+OUd/ngGNzKGXwITtqKzyjhcIscxZUMgpIFMSuRQ4tiVxUOR vlETo4kiV00nGA3I4M/BH9voHvxQSrIxMagiKFBDlFOlWJ1I/6CedSezawhtKrEurSo8vfX96Wnc ejP5TC4a2hlHrEZ9G4QtxTMwW+ZfGF3SuxN/Xvd6hodasYAcm+KJngL59LX4bQ== ) ;; ADDITIONAL SECTION (5 records) ns-jdcw-02.usdoj.gov. 86400 IN A 149.101.80.157 ns-jdcw-02.usdoj.gov. 86400 IN AAAA 2607:f330:5000:107f::86 ns-jdcw-01.usdoj.gov. 86400 IN A 149.101.180.157 ns-jdcw-01.usdoj.gov. 86400 IN AAAA 2607:f330:6000:107f::86 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.gov-servers.net for scra.gov/DNSKEY
	Received 544 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (544 bytes) ;; HEADER SECTION ;; id = 40068 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; scra.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) scra.gov. 86400 IN NS ns-jdcw-02.usdoj.gov. scra.gov. 86400 IN NS ns-jdcw-01.usdoj.gov. scra.gov. 3600 IN DS ( 64246 8 2 ed0d4099708f1cc42e75664de5411959512d08bafc179f29aa434abbc580c876 ) scra.gov. 3600 IN DS 50611 8 1 e1a6c8c4924e1cc8ec9e981887e059b447066593 scra.gov. 3600 IN DS 64246 8 1 c85545abdde4cc1b0042da27b8ea3257af8ae483 scra.gov. 3600 IN DS ( 50611 8 2 13c5fad3050cb8dd75ae5306fa9c5d8c38fb23f6217f9044ee724c34d89ad9ca ) scra.gov. 3600 IN RRSIG ( DS 8 2 3600 20201206231009 20201129231009 15489 gov. iWEBDHVeI2Po3adwZMr4lWP30daz+OUd/ngGNzKGXwITtqKzyjhcIscxZUMgpIFMSuRQ4tiVxUOR vlETo4kiV00nGA3I4M/BH9voHvxQSrIxMagiKFBDlFOlWJ1I/6CedSezawhtKrEurSo8vfX96Wnc ejP5TC4a2hlHrEZ9G4QtxTMwW+ZfGF3SuxN/Xvd6hodasYAcm+KJngL59LX4bQ== ) ;; ADDITIONAL SECTION (5 records) ns-jdcw-02.usdoj.gov. 86400 IN A 149.101.80.157 ns-jdcw-02.usdoj.gov. 86400 IN AAAA 2607:f330:5000:107f::86 ns-jdcw-01.usdoj.gov. 86400 IN A 149.101.180.157 ns-jdcw-01.usdoj.gov. 86400 IN AAAA 2607:f330:6000:107f::86 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone scra.gov

scra.gov

	Checking DS between gov and scra.gov
	Query to c.gov-servers.net for scra.gov/DS
	Received 400 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (400 bytes) ;; HEADER SECTION ;; id = 8899 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; scra.gov. IN DS ;; ANSWER SECTION (5 records) scra.gov. 3600 IN DS ( 64246 8 2 ed0d4099708f1cc42e75664de5411959512d08bafc179f29aa434abbc580c876 ) scra.gov. 3600 IN DS 50611 8 1 e1a6c8c4924e1cc8ec9e981887e059b447066593 scra.gov. 3600 IN DS 64246 8 1 c85545abdde4cc1b0042da27b8ea3257af8ae483 scra.gov. 3600 IN DS ( 50611 8 2 13c5fad3050cb8dd75ae5306fa9c5d8c38fb23f6217f9044ee724c34d89ad9ca ) scra.gov. 3600 IN RRSIG ( DS 8 2 3600 20201206231009 20201129231009 15489 gov. iWEBDHVeI2Po3adwZMr4lWP30daz+OUd/ngGNzKGXwITtqKzyjhcIscxZUMgpIFMSuRQ4tiVxUOR vlETo4kiV00nGA3I4M/BH9voHvxQSrIxMagiKFBDlFOlWJ1I/6CedSezawhtKrEurSo8vfX96Wnc ejP5TC4a2hlHrEZ9G4QtxTMwW+ZfGF3SuxN/Xvd6hodasYAcm+KJngL59LX4bQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for scra.gov in the gov zone
	DS=64246/SHA-256 has algorithm RSASHA256
	DS=50611/SHA-1 has algorithm RSASHA256
	DS=64246/SHA-1 has algorithm RSASHA256
	DS=50611/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`scra.gov. 3600 IN RRSIG ( DS 8 2 3600 20201206231009 20201129231009 15489 gov. iWEBDHVeI2Po3adwZMr4lWP30daz+OUd/ngGNzKGXwITtqKzyjhcIscxZUMgpIFMSuRQ4tiVxUOR vlETo4kiV00nGA3I4M/BH9voHvxQSrIxMagiKFBDlFOlWJ1I/6CedSezawhtKrEurSo8vfX96Wnc ejP5TC4a2hlHrEZ9G4QtxTMwW+ZfGF3SuxN/Xvd6hodasYAcm+KJngL59LX4bQ== )`
	RRSIG=15489 and DNSKEY=15489 verifies the DS RRset
	DS=64246/SHA-256 is now in the chain-of-trust
	DS=50611/SHA-1 is now in the chain-of-trust
	`scra.gov. 3600 IN DS ( 64246 8 2 ed0d4099708f1cc42e75664de5411959512d08bafc179f29aa434abbc580c876 )`
	`scra.gov. 3600 IN DS 50611 8 1 e1a6c8c4924e1cc8ec9e981887e059b447066593`
	`scra.gov. 3600 IN DS 64246 8 1 c85545abdde4cc1b0042da27b8ea3257af8ae483`
	`scra.gov. 3600 IN DS ( 50611 8 2 13c5fad3050cb8dd75ae5306fa9c5d8c38fb23f6217f9044ee724c34d89ad9ca )`
	Query to ns-jdcw-01.usdoj.gov for scra.gov/DNSKEY
	Received 1497 bytes from 149.101.180.157
	;; Answer received from 149.101.180.157 (1497 bytes) ;; HEADER SECTION ;; id = 24040 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; scra.gov. IN DNSKEY ;; ANSWER SECTION (6 records) scra.gov. 432000 IN DNSKEY ( 257 3 8 AwEAAbb2x9vYawijCwj8/m5ZCy81euc2LMF4rWWu0D0H/3YfKuXb4QogTXxLYTcjw51ROeu4jvLb YqgJpoN0A1PDBY7Ghj1Qitt/1COCkkN5ctTKshibU03aOz9xYbTr5pjrFLtKF8sreY0XH0isZc14 a7XVbadcolvdHMw2RPKD8g9WtZQdvtBbCe7ZHLsfMUvk7e0/AD/aV694xcctWqQN95LWakZR9daO NtYgXSe4SppqVXSoEaX2PGmzaIM+UFcomfEvGqH+OB4sxau+nRn2If4Asv1YTNn0k822QagD3H7n bOahKHOZZmr14Ca6x+hcSD0ZjdP/+Sh3t4B2LYhlTFM= ) ; Key ID = 50611 scra.gov. 432000 IN DNSKEY ( 257 3 8 AwEAAer4u/ISYYqgfDKal95ZuFpW+7XpXi8IwYKJSQJewLEFnB8HC2phyi7oAjiejlzwCB3djUJg /i2Yg4ga27pPEg1w79cO0490AdWbDY722SWvgErr7mPhdtS5RAJr/N/su+GgHPywl1tcRjgd8pNe UN/ecnoekKD+/XLeBs9E8RVvntysXCUKW/MUDLcWZeq8NGYdFEfPIQNaIsY8P7ogfCtuDzYR0t3V oQLFrrM8dJv6u7VyXcGl4qOX2KKWAVhPFvgFu+SE1sxugyvCjg1XNHSZzsaeTBOeAOr5FcQKBhs7 Z68oBBYdAihP+oO2BqgRFfrSG/SBsFxXY10/Ho28iFs= ) ; Key ID = 64246 scra.gov. 432000 IN DNSKEY ( 256 3 8 AwEAAbbYZWzlths7GtDqn/FFjc41m6yltvp9CL3iJw3vOaNPWjlbOeEj9xBAmdr6LTR0txSY1isw zkm3kky89ZQXuiYmPsJiUWTk0+j1zN1MR3lXuHH2Wc0yNm62Y/RD9BBVkej1ee0hFP2hSu4UyILt pPBsibh0QRZbS+dVfzuWzzDB ) ; Key ID = 48678 scra.gov. 432000 IN RRSIG ( DNSKEY 8 2 432000 20201209061357 20201129061247 48678 scra.gov. DiFwARWnOKVQaX9mQUQr2Oad28zRb/NSyGHnOHJ/WNaqtx3+A5HBIzBNlQo6+gUKHtWY1WJB13NU RbXn4bKpefFfYpIe6r9AHyznam4fXPlpRH6YuelJ1QPDT4V6bugSIIXCMHSM4cqunyRGBD2M6H+r TwmniwmcluKNoKcxaGY= ) scra.gov. 432000 IN RRSIG ( DNSKEY 8 2 432000 20201209061357 20201129061247 50611 scra.gov. I/RnPZC2ccc3LwOufIR8hqzSRjssqJA9lf5gVt1gRD/Ed/YLKwac64BTPGZNJE56pTGBPRqako4T +GekR/1hx7QQW+VcWTn/XI5VWgNrTD7D3ZFdWxC0DEqQIW6NXZOhSncHiCydlXP7NPUe/qmh2vCS 8I/qbXOGWMpVMc+dXCd8nrOLAFZs6NpZmJ0TcDCk1R/H1HWnQs5fpapb9rDAknow8kdarEAGkmgv SMWx/Ziu8F9nf9TcDz6kdLpfuylvHbY6TEjN35mQbb/0sEpC14Wdv4/ixuvMD6UkJ24zLrfgnoRC o1x2b6npId8LYP/6dC9wymkt6Mx9DbKR2s5CGg== ) scra.gov. 432000 IN RRSIG ( DNSKEY 8 2 432000 20201209061357 20201129061247 64246 scra.gov. qyD50lpMSizo2fiN8y2ntL+C3LWH8knczHB8rbQS4MFzxsKzmwLYqKKfrd4ydboNMflMtWo45QWQ zMIMiXqO0YI6JQlBS/5Fx9gJ1bglJXsZYQ6mw8c4/yBuHOmkGHhKfoKN0MziKOOVdw+jfCG3Edvn I4iRZ6bYAqIvegjfCSh0AMNoewYG+T/QMhz0F8diDDnZ3qRxkA+wmNcWnewXjSxdMz6MS4CBfg5D Tga1uo/8A6mSkj8sEb+TgLnYxrAFs0VxQVJNMEtuIbayK58B2miwtZ+8qYttF0MOPLdReB4iJ5c6 ui7RzaWd+wALtbTWnm7pHvaUZfTFQ5FuLcDzzA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for scra.gov
	`scra.gov. 432000 IN DNSKEY ( 257 3 8 AwEAAbb2x9vYawijCwj8/m5ZCy81euc2LMF4rWWu0D0H/3YfKuXb4QogTXxLYTcjw51ROeu4jvLb YqgJpoN0A1PDBY7Ghj1Qitt/1COCkkN5ctTKshibU03aOz9xYbTr5pjrFLtKF8sreY0XH0isZc14 a7XVbadcolvdHMw2RPKD8g9WtZQdvtBbCe7ZHLsfMUvk7e0/AD/aV694xcctWqQN95LWakZR9daO NtYgXSe4SppqVXSoEaX2PGmzaIM+UFcomfEvGqH+OB4sxau+nRn2If4Asv1YTNn0k822QagD3H7n bOahKHOZZmr14Ca6x+hcSD0ZjdP/+Sh3t4B2LYhlTFM= ) ; Key ID = 50611`
	`scra.gov. 432000 IN DNSKEY ( 257 3 8 AwEAAer4u/ISYYqgfDKal95ZuFpW+7XpXi8IwYKJSQJewLEFnB8HC2phyi7oAjiejlzwCB3djUJg /i2Yg4ga27pPEg1w79cO0490AdWbDY722SWvgErr7mPhdtS5RAJr/N/su+GgHPywl1tcRjgd8pNe UN/ecnoekKD+/XLeBs9E8RVvntysXCUKW/MUDLcWZeq8NGYdFEfPIQNaIsY8P7ogfCtuDzYR0t3V oQLFrrM8dJv6u7VyXcGl4qOX2KKWAVhPFvgFu+SE1sxugyvCjg1XNHSZzsaeTBOeAOr5FcQKBhs7 Z68oBBYdAihP+oO2BqgRFfrSG/SBsFxXY10/Ho28iFs= ) ; Key ID = 64246`
	`scra.gov. 432000 IN DNSKEY ( 256 3 8 AwEAAbbYZWzlths7GtDqn/FFjc41m6yltvp9CL3iJw3vOaNPWjlbOeEj9xBAmdr6LTR0txSY1isw zkm3kky89ZQXuiYmPsJiUWTk0+j1zN1MR3lXuHH2Wc0yNm62Y/RD9BBVkej1ee0hFP2hSu4UyILt pPBsibh0QRZbS+dVfzuWzzDB ) ; Key ID = 48678`
	DNSKEY=50611/SEP is now in the chain-of-trust
	DS=50611/SHA-1 verifies DNSKEY=50611/SEP
	DS=50611/SHA-256 verifies DNSKEY=50611/SEP
	DNSKEY=64246/SEP is now in the chain-of-trust
	DS=64246/SHA-256 verifies DNSKEY=64246/SEP
	DS=64246/SHA-1 verifies DNSKEY=64246/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`scra.gov. 432000 IN RRSIG ( DNSKEY 8 2 432000 20201209061357 20201129061247 48678 scra.gov. DiFwARWnOKVQaX9mQUQr2Oad28zRb/NSyGHnOHJ/WNaqtx3+A5HBIzBNlQo6+gUKHtWY1WJB13NU RbXn4bKpefFfYpIe6r9AHyznam4fXPlpRH6YuelJ1QPDT4V6bugSIIXCMHSM4cqunyRGBD2M6H+r TwmniwmcluKNoKcxaGY= )`
	`scra.gov. 432000 IN RRSIG ( DNSKEY 8 2 432000 20201209061357 20201129061247 50611 scra.gov. I/RnPZC2ccc3LwOufIR8hqzSRjssqJA9lf5gVt1gRD/Ed/YLKwac64BTPGZNJE56pTGBPRqako4T +GekR/1hx7QQW+VcWTn/XI5VWgNrTD7D3ZFdWxC0DEqQIW6NXZOhSncHiCydlXP7NPUe/qmh2vCS 8I/qbXOGWMpVMc+dXCd8nrOLAFZs6NpZmJ0TcDCk1R/H1HWnQs5fpapb9rDAknow8kdarEAGkmgv SMWx/Ziu8F9nf9TcDz6kdLpfuylvHbY6TEjN35mQbb/0sEpC14Wdv4/ixuvMD6UkJ24zLrfgnoRC o1x2b6npId8LYP/6dC9wymkt6Mx9DbKR2s5CGg== )`
	`scra.gov. 432000 IN RRSIG ( DNSKEY 8 2 432000 20201209061357 20201129061247 64246 scra.gov. qyD50lpMSizo2fiN8y2ntL+C3LWH8knczHB8rbQS4MFzxsKzmwLYqKKfrd4ydboNMflMtWo45QWQ zMIMiXqO0YI6JQlBS/5Fx9gJ1bglJXsZYQ6mw8c4/yBuHOmkGHhKfoKN0MziKOOVdw+jfCG3Edvn I4iRZ6bYAqIvegjfCSh0AMNoewYG+T/QMhz0F8diDDnZ3qRxkA+wmNcWnewXjSxdMz6MS4CBfg5D Tga1uo/8A6mSkj8sEb+TgLnYxrAFs0VxQVJNMEtuIbayK58B2miwtZ+8qYttF0MOPLdReB4iJ5c6 ui7RzaWd+wALtbTWnm7pHvaUZfTFQ5FuLcDzzA== )`
	RRSIG=48678 and DNSKEY=48678 verifies the DNSKEY RRset
	RRSIG=50611 and DNSKEY=50611/SEP verifies the DNSKEY RRset
	RRSIG=64246 and DNSKEY=64246/SEP verifies the DNSKEY RRset
	DNSKEY=48678 is now in the chain-of-trust
	Query to ns-jdcw-01.usdoj.gov for scra.gov/A
	Received 221 bytes from 149.101.180.157
	;; Answer received from 149.101.180.157 (221 bytes) ;; HEADER SECTION ;; id = 44228 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; scra.gov. IN A ;; ANSWER SECTION (2 records) scra.gov. 600 IN A 149.101.82.211 scra.gov. 600 IN RRSIG ( A 8 2 600 20201208141122 20201128135625 48678 scra.gov. oi6qALAngDlYVTfehHkP7xmIXEHjp+HogvZps+j59mOlpuq8T9+n09dL3mcwmkdisn9bskQSGlxf EPWq+A2IoKHs1AbGtAz/BVunaQGYM6n3fer7pkcb7Q9k0/l3KGXfZjhW82VH9o0OQvbcHM+AAV2T gO/kIZYHsulGnWaLbDw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	scra.gov is authoritative for scra.gov
	Found RRSIG signed by scra.gov zone
	Query to ns-jdcw-01.usdoj.gov for scra.gov/SOA
	Received 276 bytes from 149.101.180.157
	;; Answer received from 149.101.180.157 (276 bytes) ;; HEADER SECTION ;; id = 56177 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; scra.gov. IN SOA ;; ANSWER SECTION (2 records) scra.gov. 600 IN SOA ( dnsgm-dc2.admin.oss.doj.gov. root.usdoj.gov. 2002068372 ;serial 10800 ;refresh 1080 ;retry 2592000 ;expire 600 ;minimum ) scra.gov. 600 IN RRSIG ( SOA 8 2 600 20201209215520 20201129205520 48678 scra.gov. SZqyAkHonXGcKdb1nzbSn27YWxnYot28iu7nYUaojtmznjpryFbWJZbPIjwbKtFwkWsR8VSK4e1m zeLvGWgWXuXOtN/2YGM55LmmkOXZ11kxtz/NquAureYeedO955nEYfMChGhK4ezSTxOrq0T92lYI JmQ7tooQ4q0RzyoiaiQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-jdcw-02.usdoj.gov for scra.gov/SOA
	Received 276 bytes from 149.101.80.157
	;; Answer received from 149.101.80.157 (276 bytes) ;; HEADER SECTION ;; id = 17646 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; scra.gov. IN SOA ;; ANSWER SECTION (2 records) scra.gov. 600 IN SOA ( dnsgm-dc2.admin.oss.doj.gov. root.usdoj.gov. 2002068372 ;serial 10800 ;refresh 1080 ;retry 2592000 ;expire 600 ;minimum ) scra.gov. 600 IN RRSIG ( SOA 8 2 600 20201209215520 20201129205520 48678 scra.gov. SZqyAkHonXGcKdb1nzbSn27YWxnYot28iu7nYUaojtmznjpryFbWJZbPIjwbKtFwkWsR8VSK4e1m zeLvGWgWXuXOtN/2YGM55LmmkOXZ11kxtz/NquAureYeedO955nEYfMChGhK4ezSTxOrq0T92lYI JmQ7tooQ4q0RzyoiaiQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-jdcw-01.usdoj.gov for scra.gov/A
	Received 221 bytes from 149.101.180.157
	;; Answer received from 149.101.180.157 (221 bytes) ;; HEADER SECTION ;; id = 60749 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; scra.gov. IN A ;; ANSWER SECTION (2 records) scra.gov. 600 IN A 149.101.82.211 scra.gov. 600 IN RRSIG ( A 8 2 600 20201208141122 20201128135625 48678 scra.gov. oi6qALAngDlYVTfehHkP7xmIXEHjp+HogvZps+j59mOlpuq8T9+n09dL3mcwmkdisn9bskQSGlxf EPWq+A2IoKHs1AbGtAz/BVunaQGYM6n3fer7pkcb7Q9k0/l3KGXfZjhW82VH9o0OQvbcHM+AAV2T gO/kIZYHsulGnWaLbDw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	scra.gov A RR has value 149.101.82.211
	Found 1 RRSIGs over A RRset
	`scra.gov. 600 IN RRSIG ( A 8 2 600 20201208141122 20201128135625 48678 scra.gov. oi6qALAngDlYVTfehHkP7xmIXEHjp+HogvZps+j59mOlpuq8T9+n09dL3mcwmkdisn9bskQSGlxf EPWq+A2IoKHs1AbGtAz/BVunaQGYM6n3fer7pkcb7Q9k0/l3KGXfZjhW82VH9o0OQvbcHM+AAV2T gO/kIZYHsulGnWaLbDw= )`
	RRSIG=48678 and DNSKEY=48678 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test scra.gov at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: