DNSSEC Debugger

Domain Name:

Time: 2024-05-17 12:00:22 UTC

Analyzing DNSSEC problems for opm.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 865 octets ;; HEADER SECTION ;; id = 36594 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to c.root-servers.net for opm.gov/A
	Received 617 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 617 octets ;; HEADER SECTION ;; id = 6435 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; opm.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240530050000 20240517040000 5613 . dpSvrVMv4ULjsedR/owZmJgcdv+r2bNx7ajQXYRo5BhQ13cO3F79QkNOjBEn277GzUBJz8yVJwfk wJI65o3V3DK3obYWPcGOYsSxg0LfWriaJCJ6RdyNjFs8hwiL/e5xBWpZDm9VtYupfe0L9ML5sTGK xuYdIrbMlIOWHcclskcB+7kx9Llk3RJcqG18b/tIoKCdmBO0evwSNxlSY4pcr0vn7nMmz+mFGp20 tSkZfysVu832mKYt2nuaQfXmc8ioOgaCgL6fSv3sSxvXg8R7W0QRqECJ5Aha47BW056eI8x8KBH5 S5uM2Nk7k0/UG/3W3sTeXsAR+RdmaXoNA1AiFQ== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Query to l.root-servers.net for gov/DNSKEY
	Received 610 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 610 octets ;; HEADER SECTION ;; id = 30548 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240530050000 20240517040000 5613 . dpSvrVMv4ULjsedR/owZmJgcdv+r2bNx7ajQXYRo5BhQ13cO3F79QkNOjBEn277GzUBJz8yVJwfk wJI65o3V3DK3obYWPcGOYsSxg0LfWriaJCJ6RdyNjFs8hwiL/e5xBWpZDm9VtYupfe0L9ML5sTGK xuYdIrbMlIOWHcclskcB+7kx9Llk3RJcqG18b/tIoKCdmBO0evwSNxlSY4pcr0vn7nMmz+mFGp20 tSkZfysVu832mKYt2nuaQfXmc8ioOgaCgL6fSv3sSxvXg8R7W0QRqECJ5Aha47BW056eI8x8KBH5 S5uM2Nk7k0/UG/3W3sTeXsAR+RdmaXoNA1AiFQ== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to i.root-servers.net for gov/DS
	Received 367 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 367 octets ;; HEADER SECTION ;; id = 33023 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240530050000 20240517040000 5613 . dpSvrVMv4ULjsedR/owZmJgcdv+r2bNx7ajQXYRo5BhQ13cO3F79QkNOjBEn277GzUBJz8yVJwfk wJI65o3V3DK3obYWPcGOYsSxg0LfWriaJCJ6RdyNjFs8hwiL/e5xBWpZDm9VtYupfe0L9ML5sTGK xuYdIrbMlIOWHcclskcB+7kx9Llk3RJcqG18b/tIoKCdmBO0evwSNxlSY4pcr0vn7nMmz+mFGp20 tSkZfysVu832mKYt2nuaQfXmc8ioOgaCgL6fSv3sSxvXg8R7W0QRqECJ5Aha47BW056eI8x8KBH5 S5uM2Nk7k0/UG/3W3sTeXsAR+RdmaXoNA1AiFQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=64280/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20240530050000 20240517040000 5613 . dpSvrVMv4ULjsedR/owZmJgcdv+r2bNx7ajQXYRo5BhQ13cO3F79QkNOjBEn277GzUBJz8yVJwfk wJI65o3V3DK3obYWPcGOYsSxg0LfWriaJCJ6RdyNjFs8hwiL/e5xBWpZDm9VtYupfe0L9ML5sTGK xuYdIrbMlIOWHcclskcB+7kx9Llk3RJcqG18b/tIoKCdmBO0evwSNxlSY4pcr0vn7nMmz+mFGp20 tSkZfysVu832mKYt2nuaQfXmc8ioOgaCgL6fSv3sSxvXg8R7W0QRqECJ5Aha47BW056eI8x8KBH5 S5uM2Nk7k0/UG/3W3sTeXsAR+RdmaXoNA1AiFQ== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=64280/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 )`
	Query to b.ns.gov for gov/DNSKEY
	Received 779 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 779 octets ;; HEADER SECTION ;; id = 60889 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 8 AwEAAZp0vliR0TOBCJXmdagY36BI5ZveSPE3OSrcXKDs8IZa86x1+gwbheJcfLB6Fw6cWYUXaNgA mFcbxqIqWc5VJSyPS9yCPdEOLEIiegwCmcWnNsEyc0snKTyypXnvJ5JNhoznpFILDqlksAqP/aiq 1/l0w8TMkRbRrViLrJ1ayaScZ0nn/ge5wNpX09T9RI+gF1OIMJDdgH1vi0a+t6smSy4pUrerFTsu y8JAL+PP85MZiOssT9yoERfWSjFKde6PrQX5vj090AxT+hztb+q2EFXnF1a2L73/3UarB19k5NR3 MT1uM7ddag64Q0lg3aTy3MglDCzP7/StUxdeyL5qIX8= ) ; Key ID = 64280 gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcbYvlY667qXEzHsDTkft9cgKy5F0S9CAP+aFK9+sJumGqvpMaOyOzsilJ+OSVFhopJ1aRFp CUpLVIcVJ3E3YATGpzB45M0D5c4oJ0RjEIUakBwcPghmSW8K1GPqj/eUs4fbVPytXwtwvUll9Lxf gUvi5DA6xD6d2ckwDyRxfcMhXYydr2hIsgfrBLmRDMi4BkxMvA23eShPd/tPvnR0gJk= ) ; Key ID = 10104 gov. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240623141047 20240423141047 64280 gov. GGsGHy8XGH2PGTeyVpY5iEmleVzWCH/eitEUBXIgG0ivqrcC6Pzhenn+3E9uz+C2ehYImK95B9PK juJuu0jPFw09gKBO8Xo9x+wpWM/Zdh3NxhzGmfQOxRyj/5e1g27XxQB1pqhRegDfa5/mg+8zAoFY YneUx2tnvdtycsZg49d2iq75YlRBRj9ZSl6PJJ/nzacwKPjQFCbFiuEfnn6Vn432vWr2T0AUuaDV bJCSg2c32qiMCHE18PaaUn82oWYF2/FjWhU9i/UpGd0PS8Wtvicuho7/CYbMv+UvithHF+NE7QFV VDQtgjise03ZFQWMfrZcrZE8W4/KKDeyfDAkFA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 8 AwEAAZp0vliR0TOBCJXmdagY36BI5ZveSPE3OSrcXKDs8IZa86x1+gwbheJcfLB6Fw6cWYUXaNgA mFcbxqIqWc5VJSyPS9yCPdEOLEIiegwCmcWnNsEyc0snKTyypXnvJ5JNhoznpFILDqlksAqP/aiq 1/l0w8TMkRbRrViLrJ1ayaScZ0nn/ge5wNpX09T9RI+gF1OIMJDdgH1vi0a+t6smSy4pUrerFTsu y8JAL+PP85MZiOssT9yoERfWSjFKde6PrQX5vj090AxT+hztb+q2EFXnF1a2L73/3UarB19k5NR3 MT1uM7ddag64Q0lg3aTy3MglDCzP7/StUxdeyL5qIX8= ) ; Key ID = 64280`
	`gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcbYvlY667qXEzHsDTkft9cgKy5F0S9CAP+aFK9+sJumGqvpMaOyOzsilJ+OSVFhopJ1aRFp CUpLVIcVJ3E3YATGpzB45M0D5c4oJ0RjEIUakBwcPghmSW8K1GPqj/eUs4fbVPytXwtwvUll9Lxf gUvi5DA6xD6d2ckwDyRxfcMhXYydr2hIsgfrBLmRDMi4BkxMvA23eShPd/tPvnR0gJk= ) ; Key ID = 10104`
	DNSKEY=64280/SEP is now in the chain-of-trust
	DS=64280/SHA-256 verifies DNSKEY=64280/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240623141047 20240423141047 64280 gov. GGsGHy8XGH2PGTeyVpY5iEmleVzWCH/eitEUBXIgG0ivqrcC6Pzhenn+3E9uz+C2ehYImK95B9PK juJuu0jPFw09gKBO8Xo9x+wpWM/Zdh3NxhzGmfQOxRyj/5e1g27XxQB1pqhRegDfa5/mg+8zAoFY YneUx2tnvdtycsZg49d2iq75YlRBRj9ZSl6PJJ/nzacwKPjQFCbFiuEfnn6Vn432vWr2T0AUuaDV bJCSg2c32qiMCHE18PaaUn82oWYF2/FjWhU9i/UpGd0PS8Wtvicuho7/CYbMv+UvithHF+NE7QFV VDQtgjise03ZFQWMfrZcrZE8W4/KKDeyfDAkFA== )`
	RRSIG=64280 and DNSKEY=64280/SEP verifies the DNSKEY RRset
	DNSKEY=10104 is now in the chain-of-trust
	Query to a.ns.gov for opm.gov/A
	Received 411 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 411 octets ;; HEADER SECTION ;; id = 25569 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; opm.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) opm.gov. 10800 IN NS a1-12.akam.net. opm.gov. 10800 IN NS a11-67.akam.net. opm.gov. 10800 IN NS a14-64.akam.net. opm.gov. 10800 IN NS a18-65.akam.net. opm.gov. 10800 IN NS a20-66.akam.net. opm.gov. 10800 IN NS a5-67.akam.net. opm.gov. 3600 IN DS ( 28355 8 2 be8b71e92644913214df8be9ca71e5fdba6dd51d58a670aceb29e36a157fb2c2 ) opm.gov. 3600 IN RRSIG ( DS 8 2 3600 20240518130022 20240516110022 10104 gov. iVoo20w32RusVDzXkr1qapyj7GJa1slvWR108eBuK7JSSuLtl0tqojRvZctannnV7Dp/dNaWbjX+ QOHlACXKYO0uz0G0bQs+RtFOFlNLddS9qa3/CrURX/35KGQGpzUhC9xPBbow9Klyh5SKbTeTl/Ea YoQuffTVgV/S/cSde6UUs3CmgjCUcxO4LC3UHLAOM9pI/teQlmzP1HK7Oir7UQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to d.ns.gov for opm.gov/DNSKEY
	Received 411 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 411 octets ;; HEADER SECTION ;; id = 53107 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; opm.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) opm.gov. 10800 IN NS a1-12.akam.net. opm.gov. 10800 IN NS a11-67.akam.net. opm.gov. 10800 IN NS a14-64.akam.net. opm.gov. 10800 IN NS a18-65.akam.net. opm.gov. 10800 IN NS a20-66.akam.net. opm.gov. 10800 IN NS a5-67.akam.net. opm.gov. 3600 IN DS ( 28355 8 2 be8b71e92644913214df8be9ca71e5fdba6dd51d58a670aceb29e36a157fb2c2 ) opm.gov. 3600 IN RRSIG ( DS 8 2 3600 20240518130022 20240516110022 10104 gov. iVoo20w32RusVDzXkr1qapyj7GJa1slvWR108eBuK7JSSuLtl0tqojRvZctannnV7Dp/dNaWbjX+ QOHlACXKYO0uz0G0bQs+RtFOFlNLddS9qa3/CrURX/35KGQGpzUhC9xPBbow9Klyh5SKbTeTl/Ea YoQuffTVgV/S/cSde6UUs3CmgjCUcxO4LC3UHLAOM9pI/teQlmzP1HK7Oir7UQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone opm.gov

opm.gov

	Checking DS between gov and opm.gov
	Query to d.ns.gov for opm.gov/DS
	Received 279 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 279 octets ;; HEADER SECTION ;; id = 42703 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; opm.gov. IN DS ;; ANSWER SECTION (2 records) opm.gov. 3600 IN DS ( 28355 8 2 be8b71e92644913214df8be9ca71e5fdba6dd51d58a670aceb29e36a157fb2c2 ) opm.gov. 3600 IN RRSIG ( DS 8 2 3600 20240518130022 20240516110022 10104 gov. iVoo20w32RusVDzXkr1qapyj7GJa1slvWR108eBuK7JSSuLtl0tqojRvZctannnV7Dp/dNaWbjX+ QOHlACXKYO0uz0G0bQs+RtFOFlNLddS9qa3/CrURX/35KGQGpzUhC9xPBbow9Klyh5SKbTeTl/Ea YoQuffTVgV/S/cSde6UUs3CmgjCUcxO4LC3UHLAOM9pI/teQlmzP1HK7Oir7UQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for opm.gov in the gov zone
	DS=28355/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`opm.gov. 3600 IN RRSIG ( DS 8 2 3600 20240518130022 20240516110022 10104 gov. iVoo20w32RusVDzXkr1qapyj7GJa1slvWR108eBuK7JSSuLtl0tqojRvZctannnV7Dp/dNaWbjX+ QOHlACXKYO0uz0G0bQs+RtFOFlNLddS9qa3/CrURX/35KGQGpzUhC9xPBbow9Klyh5SKbTeTl/Ea YoQuffTVgV/S/cSde6UUs3CmgjCUcxO4LC3UHLAOM9pI/teQlmzP1HK7Oir7UQ== )`
	RRSIG=10104 and DNSKEY=10104 verifies the DS RRset
	DS=28355/SHA-256 is now in the chain-of-trust
	`opm.gov. 3600 IN DS ( 28355 8 2 be8b71e92644913214df8be9ca71e5fdba6dd51d58a670aceb29e36a157fb2c2 )`
	Query to a1-12.akam.net for opm.gov/DNSKEY
	Received 903 bytes from 193.108.91.12
	;; Response received from [193.108.91.12] 903 octets ;; HEADER SECTION ;; id = 20195 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; opm.gov. IN DNSKEY ;; ANSWER SECTION (4 records) opm.gov. 7200 IN DNSKEY ( 256 3 8 AwEAAch714AmvIl5teHFbykcmE7wP/gnnAgDogK954JlGp4bWd0IEnm74DxfQvGOFuCfVmOSxodf u9u7zDqOOH3DWQ7ZnkEr7pp95coU/b3jQB/vdsIn73ZYQQEz8HjRkHUA3ubjl3uOynTCNkQ8/kMX nHj4AfCS1AWmp55AfYPVGDuv ) ; Key ID = 44610 opm.gov. 7200 IN DNSKEY ( 256 3 8 AwEAAa0/cjEPxprJt6QBaw7gnL1vnLANMWjafsIZs8Ux8xWr052whJ+wfYJYBwEBMeXgszczlF+u NRIdOwi+5t9IYpdcx+YcfjbDCFKETIWDBHypCIlj9BcR10ywQa25dOvSunEVDEBObwlHC4LoxJZ2 +N5uStlteHpWO6k9l7V8O7nL ) ; Key ID = 64731 opm.gov. 7200 IN DNSKEY ( 257 3 8 AwEAAaL3tTNZJoy4UwOOHv2H90bBXNb8b/YP73Lmj4OySqWOAAswH18C2R05nIVjRhyTz7bgy3Dz K+WVq5XccFfocy2kHv38KrQhi80D4wjfO8465p9WVBu0iGelyl4RNuvUK+EdKMxxH8fLhmeLwrIS fvyzhGjUky3naThlkVNi5+Pw09HDIrnxLjUgiSak3H8DfuZTtquf/OCHffrSWC/jGtmhif2Z3dZn 9U6ANiD6Jsx8HKrBWiaFlHQ+1P767h2Noqpccg3T0LXf14pPSMnwYpUCOiJfvkp/GTl3hYCcbFB6 xIoI7E1obvuxMcsgPxLb/ptnybNnM060JEUwUS9UH0s= ) ; Key ID = 28355 opm.gov. 7200 IN RRSIG ( DNSKEY 8 2 7200 20240520102808 20240517092808 28355 opm.gov. iwghLQMbsOp7W9yI54s6ydcC1JcA18g00jPFpmmIPmR1LebqvGIeKUh8mQhJTAwf3j/AiP13H5SM dN5ZR5sisfEf6SLzxPuZzjI+GAxstu5XmKpovrUNwXSXac3s87oYcJUxagivRvA5Ncl9cy7m81jo uqF12IrcCYVaIaQbhdbq2q8XoVx7BfBZ6lA8Fe5iNSRNo645lnryo0Bej2e8irHZc69TmTZFZtbO 44sUo2Eo4CAVJBm9EtE5POhkOEgyDSRzdWt+6uSf/7yPd+PHbO11Uaw67nCBxQ7cS7VU28UPUN1l koVCIT4XyJLjhtBJD+lAT1coNaaZOXK5st2nog== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for opm.gov
	`opm.gov. 7200 IN DNSKEY ( 256 3 8 AwEAAch714AmvIl5teHFbykcmE7wP/gnnAgDogK954JlGp4bWd0IEnm74DxfQvGOFuCfVmOSxodf u9u7zDqOOH3DWQ7ZnkEr7pp95coU/b3jQB/vdsIn73ZYQQEz8HjRkHUA3ubjl3uOynTCNkQ8/kMX nHj4AfCS1AWmp55AfYPVGDuv ) ; Key ID = 44610`
	`opm.gov. 7200 IN DNSKEY ( 256 3 8 AwEAAa0/cjEPxprJt6QBaw7gnL1vnLANMWjafsIZs8Ux8xWr052whJ+wfYJYBwEBMeXgszczlF+u NRIdOwi+5t9IYpdcx+YcfjbDCFKETIWDBHypCIlj9BcR10ywQa25dOvSunEVDEBObwlHC4LoxJZ2 +N5uStlteHpWO6k9l7V8O7nL ) ; Key ID = 64731`
	`opm.gov. 7200 IN DNSKEY ( 257 3 8 AwEAAaL3tTNZJoy4UwOOHv2H90bBXNb8b/YP73Lmj4OySqWOAAswH18C2R05nIVjRhyTz7bgy3Dz K+WVq5XccFfocy2kHv38KrQhi80D4wjfO8465p9WVBu0iGelyl4RNuvUK+EdKMxxH8fLhmeLwrIS fvyzhGjUky3naThlkVNi5+Pw09HDIrnxLjUgiSak3H8DfuZTtquf/OCHffrSWC/jGtmhif2Z3dZn 9U6ANiD6Jsx8HKrBWiaFlHQ+1P767h2Noqpccg3T0LXf14pPSMnwYpUCOiJfvkp/GTl3hYCcbFB6 xIoI7E1obvuxMcsgPxLb/ptnybNnM060JEUwUS9UH0s= ) ; Key ID = 28355`
	DNSKEY=28355/SEP is now in the chain-of-trust
	DS=28355/SHA-256 verifies DNSKEY=28355/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`opm.gov. 7200 IN RRSIG ( DNSKEY 8 2 7200 20240520102808 20240517092808 28355 opm.gov. iwghLQMbsOp7W9yI54s6ydcC1JcA18g00jPFpmmIPmR1LebqvGIeKUh8mQhJTAwf3j/AiP13H5SM dN5ZR5sisfEf6SLzxPuZzjI+GAxstu5XmKpovrUNwXSXac3s87oYcJUxagivRvA5Ncl9cy7m81jo uqF12IrcCYVaIaQbhdbq2q8XoVx7BfBZ6lA8Fe5iNSRNo645lnryo0Bej2e8irHZc69TmTZFZtbO 44sUo2Eo4CAVJBm9EtE5POhkOEgyDSRzdWt+6uSf/7yPd+PHbO11Uaw67nCBxQ7cS7VU28UPUN1l koVCIT4XyJLjhtBJD+lAT1coNaaZOXK5st2nog== )`
	RRSIG=28355 and DNSKEY=28355/SEP verifies the DNSKEY RRset
	DNSKEY=44610 is now in the chain-of-trust
	DNSKEY=64731 is now in the chain-of-trust
	Query to a5-67.akam.net for opm.gov/A
	Received 219 bytes from 95.100.168.67
	;; Response received from [95.100.168.67] 219 octets ;; HEADER SECTION ;; id = 20616 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; opm.gov. IN A ;; ANSWER SECTION (2 records) opm.gov. 20 IN A 104.69.48.58 opm.gov. 20 IN RRSIG ( A 8 2 20 20240520102808 20240517092808 64731 opm.gov. GoWs9hQLNJpxisiFctmk/BaSUdZ7weXyCAKHyjyRcTgGkXJfma9f6p5KRi6BD1oX3J5MnNYygNGe h6Cxg05ASv2RoK+Xavi5PQN9HlGuYRrrE9a0M4BbFyk7TQe9jc+A/8bama6y3AHsh09Za3eiFnI+ qlXMJHmkMuGmePFRYl4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a5-67.akam.net is authoritative for opm.gov
	Found RRSIG signed by opm.gov zone
	Query to a18-65.akam.net for opm.gov/SOA
	Received 559 bytes from 95.101.36.65
	;; Response received from [95.101.36.65] 559 octets ;; HEADER SECTION ;; id = 10125 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; opm.gov. IN SOA ;; ANSWER SECTION (2 records) opm.gov. 300 IN SOA ( a1-12.akam.net. hostmaster.akamai.com. 2014112295 ;serial 3600 ;refresh 3600 ;retry 7776000 ;expire 7200 ;minimum ) opm.gov. 300 IN RRSIG ( SOA 8 2 300 20240520102808 20240517092808 64731 opm.gov. Bcf70+696hsoUcl5qFE5A1R2+bBKgfzgRRfu4RL6fenSKOBpg9aTR40bON+5bzISyIwPTUzGptoX Mlf157r7ZDdv9LZh8CCOkzqoDupCn0ZN3M7JdlzgT9KF/YcxeEoBiSiQ8PLSTvBudns0GZPJefbV wrUlaFeQNo1w73Lqz+g= ) ;; AUTHORITY SECTION (7 records) opm.gov. 86400 IN NS a11-67.akam.net. opm.gov. 86400 IN NS a20-66.akam.net. opm.gov. 86400 IN NS a1-12.akam.net. opm.gov. 86400 IN NS a14-64.akam.net. opm.gov. 86400 IN NS a5-67.akam.net. opm.gov. 86400 IN NS a18-65.akam.net. opm.gov. 86400 IN RRSIG ( NS 8 2 86400 20240520102808 20240517092808 64731 opm.gov. X2C8Gwi2vet0/dTfdWohE7q4nwO3cJsIiWA//rgou55UWId9Wgk8V1DvGMsty3C3/cRWLEIKI6iT dvvPGK6NSeOnVsQBdWKJUPJqvJ8bmq+WseJZoCB06pLY3396tP9HaQuDpQq/NuuAykL+7ThEER1X 0QYbTTgcl2QzXuZcknM= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a11-67.akam.net for opm.gov/SOA
	Received 559 bytes from 84.53.139.67
	;; Response received from [84.53.139.67] 559 octets ;; HEADER SECTION ;; id = 63504 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; opm.gov. IN SOA ;; ANSWER SECTION (2 records) opm.gov. 300 IN SOA ( a1-12.akam.net. hostmaster.akamai.com. 2014112295 ;serial 3600 ;refresh 3600 ;retry 7776000 ;expire 7200 ;minimum ) opm.gov. 300 IN RRSIG ( SOA 8 2 300 20240520102808 20240517092808 64731 opm.gov. Bcf70+696hsoUcl5qFE5A1R2+bBKgfzgRRfu4RL6fenSKOBpg9aTR40bON+5bzISyIwPTUzGptoX Mlf157r7ZDdv9LZh8CCOkzqoDupCn0ZN3M7JdlzgT9KF/YcxeEoBiSiQ8PLSTvBudns0GZPJefbV wrUlaFeQNo1w73Lqz+g= ) ;; AUTHORITY SECTION (7 records) opm.gov. 86400 IN NS a20-66.akam.net. opm.gov. 86400 IN NS a14-64.akam.net. opm.gov. 86400 IN NS a18-65.akam.net. opm.gov. 86400 IN NS a1-12.akam.net. opm.gov. 86400 IN NS a11-67.akam.net. opm.gov. 86400 IN NS a5-67.akam.net. opm.gov. 86400 IN RRSIG ( NS 8 2 86400 20240520102808 20240517092808 64731 opm.gov. X2C8Gwi2vet0/dTfdWohE7q4nwO3cJsIiWA//rgou55UWId9Wgk8V1DvGMsty3C3/cRWLEIKI6iT dvvPGK6NSeOnVsQBdWKJUPJqvJ8bmq+WseJZoCB06pLY3396tP9HaQuDpQq/NuuAykL+7ThEER1X 0QYbTTgcl2QzXuZcknM= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a14-64.akam.net for opm.gov/SOA
	Received 559 bytes from 184.26.161.64
	;; Response received from [184.26.161.64] 559 octets ;; HEADER SECTION ;; id = 20146 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; opm.gov. IN SOA ;; ANSWER SECTION (2 records) opm.gov. 300 IN SOA ( a1-12.akam.net. hostmaster.akamai.com. 2014112295 ;serial 3600 ;refresh 3600 ;retry 7776000 ;expire 7200 ;minimum ) opm.gov. 300 IN RRSIG ( SOA 8 2 300 20240520102808 20240517092808 64731 opm.gov. Bcf70+696hsoUcl5qFE5A1R2+bBKgfzgRRfu4RL6fenSKOBpg9aTR40bON+5bzISyIwPTUzGptoX Mlf157r7ZDdv9LZh8CCOkzqoDupCn0ZN3M7JdlzgT9KF/YcxeEoBiSiQ8PLSTvBudns0GZPJefbV wrUlaFeQNo1w73Lqz+g= ) ;; AUTHORITY SECTION (7 records) opm.gov. 86400 IN NS a20-66.akam.net. opm.gov. 86400 IN NS a5-67.akam.net. opm.gov. 86400 IN NS a11-67.akam.net. opm.gov. 86400 IN NS a14-64.akam.net. opm.gov. 86400 IN NS a18-65.akam.net. opm.gov. 86400 IN NS a1-12.akam.net. opm.gov. 86400 IN RRSIG ( NS 8 2 86400 20240520102808 20240517092808 64731 opm.gov. X2C8Gwi2vet0/dTfdWohE7q4nwO3cJsIiWA//rgou55UWId9Wgk8V1DvGMsty3C3/cRWLEIKI6iT dvvPGK6NSeOnVsQBdWKJUPJqvJ8bmq+WseJZoCB06pLY3396tP9HaQuDpQq/NuuAykL+7ThEER1X 0QYbTTgcl2QzXuZcknM= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a20-66.akam.net for opm.gov/SOA
	Received 559 bytes from 95.100.175.66
	;; Response received from [95.100.175.66] 559 octets ;; HEADER SECTION ;; id = 48191 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; opm.gov. IN SOA ;; ANSWER SECTION (2 records) opm.gov. 300 IN SOA ( a1-12.akam.net. hostmaster.akamai.com. 2014112295 ;serial 3600 ;refresh 3600 ;retry 7776000 ;expire 7200 ;minimum ) opm.gov. 300 IN RRSIG ( SOA 8 2 300 20240520102808 20240517092808 64731 opm.gov. Bcf70+696hsoUcl5qFE5A1R2+bBKgfzgRRfu4RL6fenSKOBpg9aTR40bON+5bzISyIwPTUzGptoX Mlf157r7ZDdv9LZh8CCOkzqoDupCn0ZN3M7JdlzgT9KF/YcxeEoBiSiQ8PLSTvBudns0GZPJefbV wrUlaFeQNo1w73Lqz+g= ) ;; AUTHORITY SECTION (7 records) opm.gov. 86400 IN NS a5-67.akam.net. opm.gov. 86400 IN NS a14-64.akam.net. opm.gov. 86400 IN NS a18-65.akam.net. opm.gov. 86400 IN NS a11-67.akam.net. opm.gov. 86400 IN NS a1-12.akam.net. opm.gov. 86400 IN NS a20-66.akam.net. opm.gov. 86400 IN RRSIG ( NS 8 2 86400 20240520102808 20240517092808 64731 opm.gov. X2C8Gwi2vet0/dTfdWohE7q4nwO3cJsIiWA//rgou55UWId9Wgk8V1DvGMsty3C3/cRWLEIKI6iT dvvPGK6NSeOnVsQBdWKJUPJqvJ8bmq+WseJZoCB06pLY3396tP9HaQuDpQq/NuuAykL+7ThEER1X 0QYbTTgcl2QzXuZcknM= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a1-12.akam.net for opm.gov/SOA
	Received 559 bytes from 193.108.91.12
	;; Response received from [193.108.91.12] 559 octets ;; HEADER SECTION ;; id = 5409 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; opm.gov. IN SOA ;; ANSWER SECTION (2 records) opm.gov. 300 IN SOA ( a1-12.akam.net. hostmaster.akamai.com. 2014112295 ;serial 3600 ;refresh 3600 ;retry 7776000 ;expire 7200 ;minimum ) opm.gov. 300 IN RRSIG ( SOA 8 2 300 20240520102808 20240517092808 64731 opm.gov. Bcf70+696hsoUcl5qFE5A1R2+bBKgfzgRRfu4RL6fenSKOBpg9aTR40bON+5bzISyIwPTUzGptoX Mlf157r7ZDdv9LZh8CCOkzqoDupCn0ZN3M7JdlzgT9KF/YcxeEoBiSiQ8PLSTvBudns0GZPJefbV wrUlaFeQNo1w73Lqz+g= ) ;; AUTHORITY SECTION (7 records) opm.gov. 86400 IN NS a11-67.akam.net. opm.gov. 86400 IN NS a1-12.akam.net. opm.gov. 86400 IN NS a20-66.akam.net. opm.gov. 86400 IN NS a5-67.akam.net. opm.gov. 86400 IN NS a14-64.akam.net. opm.gov. 86400 IN NS a18-65.akam.net. opm.gov. 86400 IN RRSIG ( NS 8 2 86400 20240520102808 20240517092808 64731 opm.gov. X2C8Gwi2vet0/dTfdWohE7q4nwO3cJsIiWA//rgou55UWId9Wgk8V1DvGMsty3C3/cRWLEIKI6iT dvvPGK6NSeOnVsQBdWKJUPJqvJ8bmq+WseJZoCB06pLY3396tP9HaQuDpQq/NuuAykL+7ThEER1X 0QYbTTgcl2QzXuZcknM= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a5-67.akam.net for opm.gov/A
	Received 219 bytes from 95.100.168.67
	;; Response received from [95.100.168.67] 219 octets ;; HEADER SECTION ;; id = 29829 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; opm.gov. IN A ;; ANSWER SECTION (2 records) opm.gov. 20 IN A 104.69.48.58 opm.gov. 20 IN RRSIG ( A 8 2 20 20240520102808 20240517092808 64731 opm.gov. GoWs9hQLNJpxisiFctmk/BaSUdZ7weXyCAKHyjyRcTgGkXJfma9f6p5KRi6BD1oX3J5MnNYygNGe h6Cxg05ASv2RoK+Xavi5PQN9HlGuYRrrE9a0M4BbFyk7TQe9jc+A/8bama6y3AHsh09Za3eiFnI+ qlXMJHmkMuGmePFRYl4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	opm.gov A RR has value 104.69.48.58
	Found 1 RRSIGs over A RRset
	`opm.gov. 20 IN RRSIG ( A 8 2 20 20240520102808 20240517092808 64731 opm.gov. GoWs9hQLNJpxisiFctmk/BaSUdZ7weXyCAKHyjyRcTgGkXJfma9f6p5KRi6BD1oX3J5MnNYygNGe h6Cxg05ASv2RoK+Xavi5PQN9HlGuYRrrE9a0M4BbFyk7TQe9jc+A/8bama6y3AHsh09Za3eiFnI+ qlXMJHmkMuGmePFRYl4= )`
	RRSIG=64731 and DNSKEY=64731 verifies the A RRset

opm.gov

	Query to a18-65.akam.net for opm.gov/A
	Received 219 bytes from 95.101.36.65
	;; Response received from [95.101.36.65] 219 octets ;; HEADER SECTION ;; id = 13989 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; opm.gov. IN A ;; ANSWER SECTION (2 records) opm.gov. 20 IN A 104.69.48.58 opm.gov. 20 IN RRSIG ( A 8 2 20 20240520102808 20240517092808 64731 opm.gov. GoWs9hQLNJpxisiFctmk/BaSUdZ7weXyCAKHyjyRcTgGkXJfma9f6p5KRi6BD1oX3J5MnNYygNGe h6Cxg05ASv2RoK+Xavi5PQN9HlGuYRrrE9a0M4BbFyk7TQe9jc+A/8bama6y3AHsh09Za3eiFnI+ qlXMJHmkMuGmePFRYl4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a18-65.akam.net is authoritative for opm.gov
	Found RRSIG signed by opm.gov zone
	Query to a18-65.akam.net for opm.gov/A
	Received 219 bytes from 95.101.36.65
	;; Response received from [95.101.36.65] 219 octets ;; HEADER SECTION ;; id = 9271 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; opm.gov. IN A ;; ANSWER SECTION (2 records) opm.gov. 20 IN A 104.69.48.58 opm.gov. 20 IN RRSIG ( A 8 2 20 20240520102808 20240517092808 64731 opm.gov. GoWs9hQLNJpxisiFctmk/BaSUdZ7weXyCAKHyjyRcTgGkXJfma9f6p5KRi6BD1oX3J5MnNYygNGe h6Cxg05ASv2RoK+Xavi5PQN9HlGuYRrrE9a0M4BbFyk7TQe9jc+A/8bama6y3AHsh09Za3eiFnI+ qlXMJHmkMuGmePFRYl4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	opm.gov A RR has value 104.69.48.58
	Found 1 RRSIGs over A RRset
	`opm.gov. 20 IN RRSIG ( A 8 2 20 20240520102808 20240517092808 64731 opm.gov. GoWs9hQLNJpxisiFctmk/BaSUdZ7weXyCAKHyjyRcTgGkXJfma9f6p5KRi6BD1oX3J5MnNYygNGe h6Cxg05ASv2RoK+Xavi5PQN9HlGuYRrrE9a0M4BbFyk7TQe9jc+A/8bama6y3AHsh09Za3eiFnI+ qlXMJHmkMuGmePFRYl4= )`
	RRSIG=64731 and DNSKEY=64731 verifies the A RRset

opm.gov

	Query to a1-12.akam.net for opm.gov/A
	Received 219 bytes from 193.108.91.12
	;; Response received from [193.108.91.12] 219 octets ;; HEADER SECTION ;; id = 8768 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; opm.gov. IN A ;; ANSWER SECTION (2 records) opm.gov. 20 IN A 104.69.48.58 opm.gov. 20 IN RRSIG ( A 8 2 20 20240520102808 20240517092808 64731 opm.gov. GoWs9hQLNJpxisiFctmk/BaSUdZ7weXyCAKHyjyRcTgGkXJfma9f6p5KRi6BD1oX3J5MnNYygNGe h6Cxg05ASv2RoK+Xavi5PQN9HlGuYRrrE9a0M4BbFyk7TQe9jc+A/8bama6y3AHsh09Za3eiFnI+ qlXMJHmkMuGmePFRYl4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a1-12.akam.net is authoritative for opm.gov
	Found RRSIG signed by opm.gov zone
	Query to a1-12.akam.net for opm.gov/A
	Received 219 bytes from 193.108.91.12
	;; Response received from [193.108.91.12] 219 octets ;; HEADER SECTION ;; id = 31023 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; opm.gov. IN A ;; ANSWER SECTION (2 records) opm.gov. 20 IN A 104.69.48.58 opm.gov. 20 IN RRSIG ( A 8 2 20 20240520102808 20240517092808 64731 opm.gov. GoWs9hQLNJpxisiFctmk/BaSUdZ7weXyCAKHyjyRcTgGkXJfma9f6p5KRi6BD1oX3J5MnNYygNGe h6Cxg05ASv2RoK+Xavi5PQN9HlGuYRrrE9a0M4BbFyk7TQe9jc+A/8bama6y3AHsh09Za3eiFnI+ qlXMJHmkMuGmePFRYl4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	opm.gov A RR has value 104.69.48.58
	Found 1 RRSIGs over A RRset
	`opm.gov. 20 IN RRSIG ( A 8 2 20 20240520102808 20240517092808 64731 opm.gov. GoWs9hQLNJpxisiFctmk/BaSUdZ7weXyCAKHyjyRcTgGkXJfma9f6p5KRi6BD1oX3J5MnNYygNGe h6Cxg05ASv2RoK+Xavi5PQN9HlGuYRrrE9a0M4BbFyk7TQe9jc+A/8bama6y3AHsh09Za3eiFnI+ qlXMJHmkMuGmePFRYl4= )`
	RRSIG=64731 and DNSKEY=64731 verifies the A RRset

opm.gov

	Query to a14-64.akam.net for opm.gov/A
	Received 219 bytes from 184.26.161.64
	;; Response received from [184.26.161.64] 219 octets ;; HEADER SECTION ;; id = 56351 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; opm.gov. IN A ;; ANSWER SECTION (2 records) opm.gov. 20 IN A 104.69.48.58 opm.gov. 20 IN RRSIG ( A 8 2 20 20240520102808 20240517092808 64731 opm.gov. GoWs9hQLNJpxisiFctmk/BaSUdZ7weXyCAKHyjyRcTgGkXJfma9f6p5KRi6BD1oX3J5MnNYygNGe h6Cxg05ASv2RoK+Xavi5PQN9HlGuYRrrE9a0M4BbFyk7TQe9jc+A/8bama6y3AHsh09Za3eiFnI+ qlXMJHmkMuGmePFRYl4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a14-64.akam.net is authoritative for opm.gov
	Found RRSIG signed by opm.gov zone
	Query to a14-64.akam.net for opm.gov/A
	Received 219 bytes from 184.26.161.64
	;; Response received from [184.26.161.64] 219 octets ;; HEADER SECTION ;; id = 62227 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; opm.gov. IN A ;; ANSWER SECTION (2 records) opm.gov. 20 IN A 104.69.48.58 opm.gov. 20 IN RRSIG ( A 8 2 20 20240520102808 20240517092808 64731 opm.gov. GoWs9hQLNJpxisiFctmk/BaSUdZ7weXyCAKHyjyRcTgGkXJfma9f6p5KRi6BD1oX3J5MnNYygNGe h6Cxg05ASv2RoK+Xavi5PQN9HlGuYRrrE9a0M4BbFyk7TQe9jc+A/8bama6y3AHsh09Za3eiFnI+ qlXMJHmkMuGmePFRYl4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	opm.gov A RR has value 104.69.48.58
	Found 1 RRSIGs over A RRset
	`opm.gov. 20 IN RRSIG ( A 8 2 20 20240520102808 20240517092808 64731 opm.gov. GoWs9hQLNJpxisiFctmk/BaSUdZ7weXyCAKHyjyRcTgGkXJfma9f6p5KRi6BD1oX3J5MnNYygNGe h6Cxg05ASv2RoK+Xavi5PQN9HlGuYRrrE9a0M4BbFyk7TQe9jc+A/8bama6y3AHsh09Za3eiFnI+ qlXMJHmkMuGmePFRYl4= )`
	RRSIG=64731 and DNSKEY=64731 verifies the A RRset

opm.gov

	Query to a11-67.akam.net for opm.gov/A
	Received 219 bytes from 84.53.139.67
	;; Response received from [84.53.139.67] 219 octets ;; HEADER SECTION ;; id = 60998 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; opm.gov. IN A ;; ANSWER SECTION (2 records) opm.gov. 20 IN A 104.69.48.58 opm.gov. 20 IN RRSIG ( A 8 2 20 20240520102808 20240517092808 64731 opm.gov. GoWs9hQLNJpxisiFctmk/BaSUdZ7weXyCAKHyjyRcTgGkXJfma9f6p5KRi6BD1oX3J5MnNYygNGe h6Cxg05ASv2RoK+Xavi5PQN9HlGuYRrrE9a0M4BbFyk7TQe9jc+A/8bama6y3AHsh09Za3eiFnI+ qlXMJHmkMuGmePFRYl4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a11-67.akam.net is authoritative for opm.gov
	Found RRSIG signed by opm.gov zone
	Query to a11-67.akam.net for opm.gov/A
	Received 219 bytes from 84.53.139.67
	;; Response received from [84.53.139.67] 219 octets ;; HEADER SECTION ;; id = 1814 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; opm.gov. IN A ;; ANSWER SECTION (2 records) opm.gov. 20 IN A 104.69.48.58 opm.gov. 20 IN RRSIG ( A 8 2 20 20240520102808 20240517092808 64731 opm.gov. GoWs9hQLNJpxisiFctmk/BaSUdZ7weXyCAKHyjyRcTgGkXJfma9f6p5KRi6BD1oX3J5MnNYygNGe h6Cxg05ASv2RoK+Xavi5PQN9HlGuYRrrE9a0M4BbFyk7TQe9jc+A/8bama6y3AHsh09Za3eiFnI+ qlXMJHmkMuGmePFRYl4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	opm.gov A RR has value 104.69.48.58
	Found 1 RRSIGs over A RRset
	`opm.gov. 20 IN RRSIG ( A 8 2 20 20240520102808 20240517092808 64731 opm.gov. GoWs9hQLNJpxisiFctmk/BaSUdZ7weXyCAKHyjyRcTgGkXJfma9f6p5KRi6BD1oX3J5MnNYygNGe h6Cxg05ASv2RoK+Xavi5PQN9HlGuYRrrE9a0M4BbFyk7TQe9jc+A/8bama6y3AHsh09Za3eiFnI+ qlXMJHmkMuGmePFRYl4= )`
	RRSIG=64731 and DNSKEY=64731 verifies the A RRset

opm.gov

	Query to a20-66.akam.net for opm.gov/A
	Received 219 bytes from 95.100.175.66
	;; Response received from [95.100.175.66] 219 octets ;; HEADER SECTION ;; id = 52066 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; opm.gov. IN A ;; ANSWER SECTION (2 records) opm.gov. 20 IN A 104.69.48.58 opm.gov. 20 IN RRSIG ( A 8 2 20 20240520102808 20240517092808 64731 opm.gov. GoWs9hQLNJpxisiFctmk/BaSUdZ7weXyCAKHyjyRcTgGkXJfma9f6p5KRi6BD1oX3J5MnNYygNGe h6Cxg05ASv2RoK+Xavi5PQN9HlGuYRrrE9a0M4BbFyk7TQe9jc+A/8bama6y3AHsh09Za3eiFnI+ qlXMJHmkMuGmePFRYl4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a20-66.akam.net is authoritative for opm.gov
	Found RRSIG signed by opm.gov zone
	Query to a20-66.akam.net for opm.gov/A
	Received 219 bytes from 95.100.175.66
	;; Response received from [95.100.175.66] 219 octets ;; HEADER SECTION ;; id = 50 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; opm.gov. IN A ;; ANSWER SECTION (2 records) opm.gov. 20 IN A 104.69.48.58 opm.gov. 20 IN RRSIG ( A 8 2 20 20240520102808 20240517092808 64731 opm.gov. GoWs9hQLNJpxisiFctmk/BaSUdZ7weXyCAKHyjyRcTgGkXJfma9f6p5KRi6BD1oX3J5MnNYygNGe h6Cxg05ASv2RoK+Xavi5PQN9HlGuYRrrE9a0M4BbFyk7TQe9jc+A/8bama6y3AHsh09Za3eiFnI+ qlXMJHmkMuGmePFRYl4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	opm.gov A RR has value 104.69.48.58
	Found 1 RRSIGs over A RRset
	`opm.gov. 20 IN RRSIG ( A 8 2 20 20240520102808 20240517092808 64731 opm.gov. GoWs9hQLNJpxisiFctmk/BaSUdZ7weXyCAKHyjyRcTgGkXJfma9f6p5KRi6BD1oX3J5MnNYygNGe h6Cxg05ASv2RoK+Xavi5PQN9HlGuYRrrE9a0M4BbFyk7TQe9jc+A/8bama6y3AHsh09Za3eiFnI+ qlXMJHmkMuGmePFRYl4= )`
	RRSIG=64731 and DNSKEY=64731 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test opm.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: