DNSSEC Analyzer - FHFAOIG.GOV

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2018-12-13 20:00:26 UTC, NTP stratum 4

Analyzing DNSSEC problems for FHFAOIG.GOV

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (1139 bytes) ;; HEADER SECTION ;; id = 62568 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19036 . 172800 IN DNSKEY ( 256 3 8 AwEAAdp440E6Mz7c+Vl4sPd0lTv2Qnc85dTW64j0RDD7sS/zwxWDJ3QRES2VKDO0OXLMqVJSs2YC CSDKuZXpDPuf++YfAu0j7lzYYdWTGwyNZhEaXtMQJIKYB96pW6cRkiG2Dn8S2vvo/PxW9PKQsyLb td8PcwWglHgReBVp7kEv/Dd+3b3YMukt4jnWgDUddAySg558Zld+c9eGWkgWoOiuhg4rQRkFstMX 1pRyOSHcZuH38o1WcsT4y3eT0U/SR6TOSLIB/8Ftirux/h297oS7tCcwSPt0wwry5OFNTlfMo8v7 WGurogfk8hPipf7TTKHIi20LWen5RCsvYsQBkYGpF78= ) ; Key ID = 2134 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20181231000000 20181210000000 20326 . oZ1v3JnBSPHWf2HXeAyoqW/lTUP0FAs1tcEQOM47KD3Rb1qHySTbGhh0rTclRlm86GKUlPSiPaF3 zkJ5h46Nazo3r5iAqorjQ1FQD69AgLXpdEIrnzkC3tTTZv+h+Qi2/UosrzoPQnWj3pIdvZvcP5W2 T6nlP7PN5EP2LSeQzLxT8sOUGsBt0iDiGtqm+bN0mKxKdV4599g0+83FtubMG5oYWUBpMJ/os956 uvW/Vg2cwv3/m9X/cX38svYEcAbniXnyqT88+wqPBMA782tUu1AU1tb9QyMt0LcmsDgjrBWl38SG r/LvaNxHMrfU7ymNuEj6NeLBhNfuDEaz0zBRtQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19036`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdp440E6Mz7c+Vl4sPd0lTv2Qnc85dTW64j0RDD7sS/zwxWDJ3QRES2VKDO0OXLMqVJSs2YC CSDKuZXpDPuf++YfAu0j7lzYYdWTGwyNZhEaXtMQJIKYB96pW6cRkiG2Dn8S2vvo/PxW9PKQsyLb td8PcwWglHgReBVp7kEv/Dd+3b3YMukt4jnWgDUddAySg558Zld+c9eGWkgWoOiuhg4rQRkFstMX 1pRyOSHcZuH38o1WcsT4y3eT0U/SR6TOSLIB/8Ftirux/h297oS7tCcwSPt0wwry5OFNTlfMo8v7 WGurogfk8hPipf7TTKHIi20LWen5RCsvYsQBkYGpF78= ) ; Key ID = 2134`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=19036/SEP is now in the chain-of-trust
	DS=19036/SHA-256 verifies DNSKEY=19036/SEP
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20181231000000 20181210000000 20326 . oZ1v3JnBSPHWf2HXeAyoqW/lTUP0FAs1tcEQOM47KD3Rb1qHySTbGhh0rTclRlm86GKUlPSiPaF3 zkJ5h46Nazo3r5iAqorjQ1FQD69AgLXpdEIrnzkC3tTTZv+h+Qi2/UosrzoPQnWj3pIdvZvcP5W2 T6nlP7PN5EP2LSeQzLxT8sOUGsBt0iDiGtqm+bN0mKxKdV4599g0+83FtubMG5oYWUBpMJ/os956 uvW/Vg2cwv3/m9X/cX38svYEcAbniXnyqT88+wqPBMA782tUu1AU1tb9QyMt0LcmsDgjrBWl38SG r/LvaNxHMrfU7ymNuEj6NeLBhNfuDEaz0zBRtQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=2134 is now in the chain-of-trust
	Query to a.root-servers.net for FHFAOIG.GOV/A
	Received 666 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (666 bytes) ;; HEADER SECTION ;; id = 33977 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; FHFAOIG.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20181226170000 20181213160000 2134 . AlZXS+cIdNYZ+wAfDsBfoS40RYu6VtRPenrMLUd+HGwdoS+IqPmH4NL/ReMyjQXsq9vyyL3y07GV drqj6pEGL7YDTzg98jtxBz5enWt6fJT2FFyltIh8vvtCJYfiuTrHzxapzizpzLocDfd6O5x7JyZe LpKud/GqZj4dL7aXMWadfx0KdoeFOqacZ/WZj8RDMUp666FUKtXr+3gO+PyCGlyJDGqN73XKwfVn ZHcOaektzwVRpB2jt9novicUq6cEWqr/g7ba8J90+nxxmsY+dljz2g665H4Ou4zyE84gKwDXJRe/ kbljOdh1epXFNmiW+JqdnQg0AC9UzBspy5Byzw== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to j.root-servers.net for GOV/DNSKEY
	Received 658 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (658 bytes) ;; HEADER SECTION ;; id = 36024 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20181226170000 20181213160000 2134 . AlZXS+cIdNYZ+wAfDsBfoS40RYu6VtRPenrMLUd+HGwdoS+IqPmH4NL/ReMyjQXsq9vyyL3y07GV drqj6pEGL7YDTzg98jtxBz5enWt6fJT2FFyltIh8vvtCJYfiuTrHzxapzizpzLocDfd6O5x7JyZe LpKud/GqZj4dL7aXMWadfx0KdoeFOqacZ/WZj8RDMUp666FUKtXr+3gO+PyCGlyJDGqN73XKwfVn ZHcOaektzwVRpB2jt9novicUq6cEWqr/g7ba8J90+nxxmsY+dljz2g665H4Ou4zyE84gKwDXJRe/ kbljOdh1epXFNmiW+JqdnQg0AC9UzBspy5Byzw== ) ;; ADDITIONAL SECTION (9 records) b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to d.root-servers.net for GOV/DS
	Error querying d.root-servers.net/2001:500:2d:0:0:0:0:d for GOV/DS: 'IPv6 transport disabled'
	Received 403 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (403 bytes) ;; HEADER SECTION ;; id = 60269 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20181226170000 20181213160000 2134 . AlZXS+cIdNYZ+wAfDsBfoS40RYu6VtRPenrMLUd+HGwdoS+IqPmH4NL/ReMyjQXsq9vyyL3y07GV drqj6pEGL7YDTzg98jtxBz5enWt6fJT2FFyltIh8vvtCJYfiuTrHzxapzizpzLocDfd6O5x7JyZe LpKud/GqZj4dL7aXMWadfx0KdoeFOqacZ/WZj8RDMUp666FUKtXr+3gO+PyCGlyJDGqN73XKwfVn ZHcOaektzwVRpB2jt9novicUq6cEWqr/g7ba8J90+nxxmsY+dljz2g665H4Ou4zyE84gKwDXJRe/ kbljOdh1epXFNmiW+JqdnQg0AC9UzBspy5Byzw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20181226170000 20181213160000 2134 . AlZXS+cIdNYZ+wAfDsBfoS40RYu6VtRPenrMLUd+HGwdoS+IqPmH4NL/ReMyjQXsq9vyyL3y07GV drqj6pEGL7YDTzg98jtxBz5enWt6fJT2FFyltIh8vvtCJYfiuTrHzxapzizpzLocDfd6O5x7JyZe LpKud/GqZj4dL7aXMWadfx0KdoeFOqacZ/WZj8RDMUp666FUKtXr+3gO+PyCGlyJDGqN73XKwfVn ZHcOaektzwVRpB2jt9novicUq6cEWqr/g7ba8J90+nxxmsY+dljz2g665H4Ou4zyE84gKwDXJRe/ kbljOdh1epXFNmiW+JqdnQg0AC9UzBspy5Byzw== )`
	RRSIG=2134 and DNSKEY=2134 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to d.gov-servers.net for GOV/DNSKEY
	Error querying d.gov-servers.net/2620:74:29:0:0:0:2:30 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 743 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (743 bytes) ;; HEADER SECTION ;; id = 21231 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 256 3 8 AQOzQCL1fIfPdHz2b/lMEAyj5l7JieIaa1GJ1/KDBE80I/FgASeN5ekMXj8XwPdLS38aXq4M67zu locw3A3YjP8qGvR8EZTClRKoFWfQSFyroyXq5w2GN2ir8gxXMwRcIcSg5AVK+3uGMLNRdwVXZB27 GlaqF75saOfj2hP7t2bs6Q== ) ; Key ID = 40499 GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20181223224731 20181208224231 7698 gov. Il/96qUKHNn0ZAOoV2App1UfZY1xcWWeHbsbv5fP6NDWPYyMAXR53AvffkiU6HPQtAciq1hHHgln aZ8jfWnDvffBADBaTioeblHVk9JboOUnoVITbsDBTCfZQG7EIn/nfhMy6h/1HJpdkuWshZ7eH+93 c2csPFAPAbF/8qfgixdkl4juvcDdugrXFmWC7A6ns3cjRZeCUd/RLt1SiNG7RjOndb/GGoQcAEDS X+2tJEurPUgMosqtvLk9HHvv3eLAJxy6i184vnN+jMsm1/WEkiK9nW4LCGSamux+LLBvTqfEhQE1 2zZ946dysmZh8czhq4myhgq6pZD08A4Nb7eGnw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQOzQCL1fIfPdHz2b/lMEAyj5l7JieIaa1GJ1/KDBE80I/FgASeN5ekMXj8XwPdLS38aXq4M67zu locw3A3YjP8qGvR8EZTClRKoFWfQSFyroyXq5w2GN2ir8gxXMwRcIcSg5AVK+3uGMLNRdwVXZB27 GlaqF75saOfj2hP7t2bs6Q== ) ; Key ID = 40499`
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20181223224731 20181208224231 7698 gov. Il/96qUKHNn0ZAOoV2App1UfZY1xcWWeHbsbv5fP6NDWPYyMAXR53AvffkiU6HPQtAciq1hHHgln aZ8jfWnDvffBADBaTioeblHVk9JboOUnoVITbsDBTCfZQG7EIn/nfhMy6h/1HJpdkuWshZ7eH+93 c2csPFAPAbF/8qfgixdkl4juvcDdugrXFmWC7A6ns3cjRZeCUd/RLt1SiNG7RjOndb/GGoQcAEDS X+2tJEurPUgMosqtvLk9HHvv3eLAJxy6i184vnN+jMsm1/WEkiK9nW4LCGSamux+LLBvTqfEhQE1 2zZ946dysmZh8czhq4myhgq6pZD08A4Nb7eGnw== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=40499 is now in the chain-of-trust
	Query to c.gov-servers.net for FHFAOIG.GOV/A
	Error querying c.gov-servers.net/2620:74:28:0:0:0:2:30 for FHFAOIG.GOV/A: 'IPv6 transport disabled'
	Received 432 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (432 bytes) ;; HEADER SECTION ;; id = 39706 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; FHFAOIG.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) FHFAOIG.GOV. 86400 IN NS ns01.fhfa.GOV. FHFAOIG.GOV. 86400 IN NS ns02.fhfa.GOV. FHFAOIG.GOV. 86400 IN NS ns03.fhfa.GOV. FHFAOIG.GOV. 86400 IN NS ns04.fhfa.GOV. FHFAOIG.GOV. 3600 IN DS 38692 8 1 89d5b6636d26c9b66287d7d7d68715f3116191d9 FHFAOIG.GOV. 3600 IN DS ( 38692 8 2 919c7933a520248a8b89d40bafdeecbe4e2395b50105116daa1c89f636b0ed9c ) FHFAOIG.GOV. 3600 IN RRSIG ( DS 8 2 3600 20181220161007 20181213161007 40499 gov. e4I2BT4mfghPRFzQUzbJmD+SRgWgSaX/QBx7FQp1syBxpfVI4+JWX+R8UuQWjqNJVvtI6ZMfWBzL wPUwbkLi1PPTe7l2bV+677HSjOzLtLT2btE/XA/5+6x4qdRuSSKQ73Gt1sDr9ygzNXSZRizaB/k6 k5yBPpHwTHOYZY3rxVY= ) ;; ADDITIONAL SECTION (5 records) ns01.fhfa.GOV. 86400 IN A 12.183.70.4 ns02.fhfa.GOV. 86400 IN A 12.183.70.5 ns03.fhfa.GOV. 86400 IN A 12.183.69.4 ns04.fhfa.GOV. 86400 IN A 35.171.11.110 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to b.gov-servers.net for FHFAOIG.GOV/DNSKEY
	Received 432 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (432 bytes) ;; HEADER SECTION ;; id = 5561 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; FHFAOIG.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) FHFAOIG.GOV. 86400 IN NS ns01.fhfa.GOV. FHFAOIG.GOV. 86400 IN NS ns02.fhfa.GOV. FHFAOIG.GOV. 86400 IN NS ns03.fhfa.GOV. FHFAOIG.GOV. 86400 IN NS ns04.fhfa.GOV. FHFAOIG.GOV. 3600 IN DS 38692 8 1 89d5b6636d26c9b66287d7d7d68715f3116191d9 FHFAOIG.GOV. 3600 IN DS ( 38692 8 2 919c7933a520248a8b89d40bafdeecbe4e2395b50105116daa1c89f636b0ed9c ) FHFAOIG.GOV. 3600 IN RRSIG ( DS 8 2 3600 20181220161007 20181213161007 40499 gov. e4I2BT4mfghPRFzQUzbJmD+SRgWgSaX/QBx7FQp1syBxpfVI4+JWX+R8UuQWjqNJVvtI6ZMfWBzL wPUwbkLi1PPTe7l2bV+677HSjOzLtLT2btE/XA/5+6x4qdRuSSKQ73Gt1sDr9ygzNXSZRizaB/k6 k5yBPpHwTHOYZY3rxVY= ) ;; ADDITIONAL SECTION (5 records) ns01.fhfa.GOV. 86400 IN A 12.183.70.4 ns02.fhfa.GOV. 86400 IN A 12.183.70.5 ns03.fhfa.GOV. 86400 IN A 12.183.69.4 ns04.fhfa.GOV. 86400 IN A 35.171.11.110 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone FHFAOIG.GOV

FHFAOIG.GOV

	Checking DS between GOV and FHFAOIG.GOV
	Query to d.gov-servers.net for FHFAOIG.GOV/DS
	Received 287 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (287 bytes) ;; HEADER SECTION ;; id = 64477 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; FHFAOIG.GOV. IN DS ;; ANSWER SECTION (3 records) FHFAOIG.GOV. 3600 IN DS 38692 8 1 89d5b6636d26c9b66287d7d7d68715f3116191d9 FHFAOIG.GOV. 3600 IN DS ( 38692 8 2 919c7933a520248a8b89d40bafdeecbe4e2395b50105116daa1c89f636b0ed9c ) FHFAOIG.GOV. 3600 IN RRSIG ( DS 8 2 3600 20181220161007 20181213161007 40499 gov. e4I2BT4mfghPRFzQUzbJmD+SRgWgSaX/QBx7FQp1syBxpfVI4+JWX+R8UuQWjqNJVvtI6ZMfWBzL wPUwbkLi1PPTe7l2bV+677HSjOzLtLT2btE/XA/5+6x4qdRuSSKQ73Gt1sDr9ygzNXSZRizaB/k6 k5yBPpHwTHOYZY3rxVY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DS records for FHFAOIG.GOV in the GOV zone
	DS=38692/SHA-1 has algorithm RSASHA256
	DS=38692/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`FHFAOIG.GOV. 3600 IN RRSIG ( DS 8 2 3600 20181220161007 20181213161007 40499 gov. e4I2BT4mfghPRFzQUzbJmD+SRgWgSaX/QBx7FQp1syBxpfVI4+JWX+R8UuQWjqNJVvtI6ZMfWBzL wPUwbkLi1PPTe7l2bV+677HSjOzLtLT2btE/XA/5+6x4qdRuSSKQ73Gt1sDr9ygzNXSZRizaB/k6 k5yBPpHwTHOYZY3rxVY= )`
	RRSIG=40499 and DNSKEY=40499 verifies the DS RRset
	DS=38692/SHA-1 is now in the chain-of-trust
	`FHFAOIG.GOV. 3600 IN DS 38692 8 1 89d5b6636d26c9b66287d7d7d68715f3116191d9`
	`FHFAOIG.GOV. 3600 IN DS ( 38692 8 2 919c7933a520248a8b89d40bafdeecbe4e2395b50105116daa1c89f636b0ed9c )`
	Query to ns01.fhfa.GOV for FHFAOIG.GOV/DNSKEY
	Received 1201 bytes from 12.183.70.4
	;; Answer received from 12.183.70.4 (1201 bytes) ;; HEADER SECTION ;; id = 6776 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FHFAOIG.GOV. IN DNSKEY ;; ANSWER SECTION (4 records) fhfaoig.gov. 300 IN DNSKEY ( 256 3 8 AwEAAcfDy0f6JPd3HJgb//CknY16seq7TEARrl9YudQHH8SXXRkNcjmmJ6Dv7V7vWJ7v7cPQEfzn G+lUovqtCEl8v5dSxWbZs9bdtXocIiTeNNKC2/M8Nh7MLhsBNz7SDPU6cWA1UUewFku66zB86jf1 7EQTPOxW2jXlEO12ZqGAupe1udHQ4vs9wHioYDTUVN6hhn7LeI+dLztPX5U/O+OpOhaVCTZVWjAE uuStXxHd2AJlbw9GFTc0uJYN2z8fWrUYo2ZZocqIz/+4XqiHa64rfguRdqbwz/GyB7HKoSD9zLhb bMLD7TF8iWMIxKnolDQBaFeG1Fp41eRFhGsSFMyp9l0= ) ; Key ID = 7608 fhfaoig.gov. 300 IN DNSKEY ( 257 3 8 AwEAAd9nRi9tRYZnYOFnYFDZ9ceh1pQnT87RrCH/Jt4EGjLKgmpzLXZhgh5Urj9ukv/VXg2HJ0Ge Za7JYe/ppRKjpLKxyY7+brDMnO9+b8jQGL/em9D7uzaCHcmKEaX7ZwfMKsOB6PC/xIfL8YSQjhYX YZsys+mu/8Fz6D5krAwHSyei7uKE4NBdBtq4C/3N7UuEZTdpLiu+xFl5hvcwoJDviFU1z3x1UIrm nNzxjVIKoImIemnlht2sKwYyXVP5DbKp/tMTF3atRWrMSvHmhNNFil9polh7oT8gbmdZxqiVMmZ4 DTqgga1MTEc1kEA5HWu9AtIJjbVsNEK/WBgapV1salU= ) ; Key ID = 38692 fhfaoig.gov. 300 IN RRSIG ( DNSKEY 8 2 300 20190109110311 20181210110311 7608 fhfaoig.gov. lYGxLjmnHC5VvaBhEbT4nABjNQaivRj3VhjCHwPFBumuKCLAj34rD2abcWeGPk/+kiLIhHLejqd/ 2onjwN+YHsY8qFXDdg7vvBODoYX1xuCW+E0wbQvQ2cSjGF9UFUdLiUYijvjdgYLlDiKM3NOCjm0X QBEolgSbyX9W6yE65G8m0w8iWRhS6Mt/ExxzFP2Sh8hKbWA/nGmfNRqYcuwgp/DiRVQVAjEwSUSu +k0LfoQDV2bFzY4UWZ8uql9DOW7dfkIzw8/Afp3Vzu8dERb5pM1DwxFQ7f82cPLwdJTx4UABmx4S jvhqmKg1wTbkt6nwEM5yPCV771zu1ju1Y6Y0pg== ) fhfaoig.gov. 300 IN RRSIG ( DNSKEY 8 2 300 20190109110311 20181210110311 38692 fhfaoig.gov. d2edd13iYn+zIQp4lOUeHE7xIBGD7Xs+ePL46F8Qj36izY+AMydIVP44QWB5GjPP3DHaELqUooXO bQa3/ZbiU3ytDcCt9W9+s7K9i8DqO/4++4iABpLJ74VcEfGjlVS8YiLdEx26tHnLP82Q6Ln6xEDl qQQdk7p4eeGvH+IIFXBB0NezB4MbGKzBR6hgLvMgIyZtd0N6LLk2gugTczbxRqIi+K5o7lCP/ps9 W3yJjx+/P0wJ6/21xu7cxFIMuS5yiy3MrzfV8uzwCS/fSATNGb5x/jxH0NumjtOF90Iwv7DYN01l 0jjFbacX9k4CkI43S67ITkFahru7xLCMZ32gUA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for FHFAOIG.GOV
	`fhfaoig.gov. 300 IN DNSKEY ( 256 3 8 AwEAAcfDy0f6JPd3HJgb//CknY16seq7TEARrl9YudQHH8SXXRkNcjmmJ6Dv7V7vWJ7v7cPQEfzn G+lUovqtCEl8v5dSxWbZs9bdtXocIiTeNNKC2/M8Nh7MLhsBNz7SDPU6cWA1UUewFku66zB86jf1 7EQTPOxW2jXlEO12ZqGAupe1udHQ4vs9wHioYDTUVN6hhn7LeI+dLztPX5U/O+OpOhaVCTZVWjAE uuStXxHd2AJlbw9GFTc0uJYN2z8fWrUYo2ZZocqIz/+4XqiHa64rfguRdqbwz/GyB7HKoSD9zLhb bMLD7TF8iWMIxKnolDQBaFeG1Fp41eRFhGsSFMyp9l0= ) ; Key ID = 7608`
	`fhfaoig.gov. 300 IN DNSKEY ( 257 3 8 AwEAAd9nRi9tRYZnYOFnYFDZ9ceh1pQnT87RrCH/Jt4EGjLKgmpzLXZhgh5Urj9ukv/VXg2HJ0Ge Za7JYe/ppRKjpLKxyY7+brDMnO9+b8jQGL/em9D7uzaCHcmKEaX7ZwfMKsOB6PC/xIfL8YSQjhYX YZsys+mu/8Fz6D5krAwHSyei7uKE4NBdBtq4C/3N7UuEZTdpLiu+xFl5hvcwoJDviFU1z3x1UIrm nNzxjVIKoImIemnlht2sKwYyXVP5DbKp/tMTF3atRWrMSvHmhNNFil9polh7oT8gbmdZxqiVMmZ4 DTqgga1MTEc1kEA5HWu9AtIJjbVsNEK/WBgapV1salU= ) ; Key ID = 38692`
	DNSKEY=38692/SEP is now in the chain-of-trust
	DS=38692/SHA-1 verifies DNSKEY=38692/SEP
	DS=38692/SHA-256 verifies DNSKEY=38692/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`fhfaoig.gov. 300 IN RRSIG ( DNSKEY 8 2 300 20190109110311 20181210110311 7608 fhfaoig.gov. lYGxLjmnHC5VvaBhEbT4nABjNQaivRj3VhjCHwPFBumuKCLAj34rD2abcWeGPk/+kiLIhHLejqd/ 2onjwN+YHsY8qFXDdg7vvBODoYX1xuCW+E0wbQvQ2cSjGF9UFUdLiUYijvjdgYLlDiKM3NOCjm0X QBEolgSbyX9W6yE65G8m0w8iWRhS6Mt/ExxzFP2Sh8hKbWA/nGmfNRqYcuwgp/DiRVQVAjEwSUSu +k0LfoQDV2bFzY4UWZ8uql9DOW7dfkIzw8/Afp3Vzu8dERb5pM1DwxFQ7f82cPLwdJTx4UABmx4S jvhqmKg1wTbkt6nwEM5yPCV771zu1ju1Y6Y0pg== )`
	`fhfaoig.gov. 300 IN RRSIG ( DNSKEY 8 2 300 20190109110311 20181210110311 38692 fhfaoig.gov. d2edd13iYn+zIQp4lOUeHE7xIBGD7Xs+ePL46F8Qj36izY+AMydIVP44QWB5GjPP3DHaELqUooXO bQa3/ZbiU3ytDcCt9W9+s7K9i8DqO/4++4iABpLJ74VcEfGjlVS8YiLdEx26tHnLP82Q6Ln6xEDl qQQdk7p4eeGvH+IIFXBB0NezB4MbGKzBR6hgLvMgIyZtd0N6LLk2gugTczbxRqIi+K5o7lCP/ps9 W3yJjx+/P0wJ6/21xu7cxFIMuS5yiy3MrzfV8uzwCS/fSATNGb5x/jxH0NumjtOF90Iwv7DYN01l 0jjFbacX9k4CkI43S67ITkFahru7xLCMZ32gUA== )`
	RRSIG=7608 and DNSKEY=7608 verifies the DNSKEY RRset
	RRSIG=38692 and DNSKEY=38692/SEP verifies the DNSKEY RRset
	DNSKEY=7608 is now in the chain-of-trust
	Query to ns03.fhfa.GOV for FHFAOIG.GOV/A
	Received 730 bytes from 12.183.69.4
	;; Answer received from 12.183.69.4 (730 bytes) ;; HEADER SECTION ;; id = 28121 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FHFAOIG.GOV. IN A ;; ANSWER SECTION (2 records) fhfaoig.gov. 300 IN A 52.227.179.104 fhfaoig.gov. 300 IN RRSIG ( A 8 2 300 20190109110311 20181210110311 7608 fhfaoig.gov. AQ2TrXCx9339nk+p+FIuYQ1ocN0VloZBqW6dOsBxBkmhw0aAbHxszeJ2+vb7uqdOhNgUh8GWl8cE aFWkFL+82kOEyN5RWtnRAXBe3dwN1o3JyBjeEHn5bMpYLeTwmpGbVOXtAZb+p/uZgrwuqtu7lx5U PWBvoo+9G4alW7Lq0Vz6tzu6Le+8b9TfquS9SNB5nX/RWnN8Bx3OmdDarR6QYbAoRTX4eTQ46p5q DaTEcXRK0inw1o1mWucJC3wy+OZQrrTzSgLW3MZ6VVp7K9jJbwHhPsv7b2fxgDbjR6t2T9y6qLil weGMp3XSZS/3ZsD+exzrd723Ta0ew/ZcnqIWwQ== ) ;; AUTHORITY SECTION (4 records) fhfaoig.gov. 300 IN NS ns01.fhfa.gov. fhfaoig.gov. 300 IN NS ns02.fhfa.gov. fhfaoig.gov. 300 IN NS ns03.fhfa.gov. fhfaoig.gov. 300 IN RRSIG ( NS 8 2 300 20190109110311 20181210110311 7608 fhfaoig.gov. c/rOcVa9ZWFjNigpGAOY/nCH/tnkjaSTEe5e44zWzgmiK5VRFvhpcialokVf9C8Dj8E2wk4f2+lU D4qUPxMXH2iECurs8je+IzK5HHaTBKJB+ge3CsL4RwVzabnL9Uta/QUg2Msi5Mw6eqrcbAPuaAZk IXDbsSjaBvTz2Q/0HlBji8J+/kvZyUyAjJVtfmvQS3qBGCQmC6fnSyAaJRSNpGrZTN0TC5/UsvEU aqcN/KlBf2fM+VLPMRDhCvNZ1EXdHDUr2Rbm+M07Gb6EfWU0CNNkyjHyKJjExDMMr5NRG8C5KHR3 AvDLSDo9G0iL4Sa8pxzabkLNWnOfmWIe4LF3Kw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	FHFAOIG.GOV is authoritative for FHFAOIG.GOV
	Found RRSIG signed by fhfaoig.gov zone
	Query to ns02.fhfa.gov for FHFAOIG.GOV/SOA
	Received 759 bytes from 12.183.70.5
	;; Answer received from 12.183.70.5 (759 bytes) ;; HEADER SECTION ;; id = 13411 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FHFAOIG.GOV. IN SOA ;; ANSWER SECTION (2 records) fhfaoig.gov. 300 IN SOA ( ns01.fhfa.gov. dnsadmin.fhfa.gov. 2018494343 ;serial 600 ;refresh 300 ;retry 604800 ;expire 60 ;minimum ) fhfaoig.gov. 300 IN RRSIG ( SOA 8 2 300 20190109110311 20181210110311 7608 fhfaoig.gov. trhGDQqNywlVF77Uw/MCysiUe4oSYuM0bJK3nkTXD+hFK+0jpF0njxUFxMjRs0U+YUhVkudfsmnk 98xjuOWg3+NhNhSeeW3y+xI7J/4raGhwoL2ZsnYzTsmlXJ1DkLPg1yY8Ddwph4LUyewNwwDvprrG yqiM5LjFWCWyIUfraMSaqj9W2/3Pt8rQ+POVwlbVHZHI2N0ut1Slo2zHpQlya8Pu3dL74ywddVd9 04Hmn08Pi5GZ9pyO4U4NSColB/sZEXO6FfUnEu9CLKGcWbCvDoACApJKcpPhKbZ5baVnxTuz9Va5 zhv7WhA61VkCbRMh/Ie9Sj4L3WgrAEc2ucmfsw== ) ;; AUTHORITY SECTION (4 records) fhfaoig.gov. 300 IN NS ns02.fhfa.gov. fhfaoig.gov. 300 IN NS ns03.fhfa.gov. fhfaoig.gov. 300 IN NS ns01.fhfa.gov. fhfaoig.gov. 300 IN RRSIG ( NS 8 2 300 20190109110311 20181210110311 7608 fhfaoig.gov. c/rOcVa9ZWFjNigpGAOY/nCH/tnkjaSTEe5e44zWzgmiK5VRFvhpcialokVf9C8Dj8E2wk4f2+lU D4qUPxMXH2iECurs8je+IzK5HHaTBKJB+ge3CsL4RwVzabnL9Uta/QUg2Msi5Mw6eqrcbAPuaAZk IXDbsSjaBvTz2Q/0HlBji8J+/kvZyUyAjJVtfmvQS3qBGCQmC6fnSyAaJRSNpGrZTN0TC5/UsvEU aqcN/KlBf2fM+VLPMRDhCvNZ1EXdHDUr2Rbm+M07Gb6EfWU0CNNkyjHyKJjExDMMr5NRG8C5KHR3 AvDLSDo9G0iL4Sa8pxzabkLNWnOfmWIe4LF3Kw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns04.fhfa.GOV for FHFAOIG.GOV/SOA
	Received 1681 bytes from 35.171.11.110
	;; Answer received from 35.171.11.110 (1681 bytes) ;; HEADER SECTION ;; id = 29891 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FHFAOIG.GOV. IN SOA ;; ANSWER SECTION (2 records) FHFAOIG.GOV. 300 IN SOA ( ns01.fhfa.GOV. dnsadmin.fhfa.GOV. 2018494343 ;serial 600 ;refresh 300 ;retry 604800 ;expire 60 ;minimum ) FHFAOIG.GOV. 300 IN RRSIG ( SOA 8 2 300 20190109110311 20181210110311 7608 fhfaoig.gov. trhGDQqNywlVF77Uw/MCysiUe4oSYuM0bJK3nkTXD+hFK+0jpF0njxUFxMjRs0U+YUhVkudfsmnk 98xjuOWg3+NhNhSeeW3y+xI7J/4raGhwoL2ZsnYzTsmlXJ1DkLPg1yY8Ddwph4LUyewNwwDvprrG yqiM5LjFWCWyIUfraMSaqj9W2/3Pt8rQ+POVwlbVHZHI2N0ut1Slo2zHpQlya8Pu3dL74ywddVd9 04Hmn08Pi5GZ9pyO4U4NSColB/sZEXO6FfUnEu9CLKGcWbCvDoACApJKcpPhKbZ5baVnxTuz9Va5 zhv7WhA61VkCbRMh/Ie9Sj4L3WgrAEc2ucmfsw== ) ;; AUTHORITY SECTION (4 records) fhfaoig.gov. 300 IN NS ns01.fhfa.GOV. fhfaoig.gov. 300 IN NS ns02.fhfa.GOV. fhfaoig.gov. 300 IN NS ns03.fhfa.GOV. fhfaoig.gov. 300 IN RRSIG ( NS 8 2 300 20190109110311 20181210110311 7608 fhfaoig.gov. c/rOcVa9ZWFjNigpGAOY/nCH/tnkjaSTEe5e44zWzgmiK5VRFvhpcialokVf9C8Dj8E2wk4f2+lU D4qUPxMXH2iECurs8je+IzK5HHaTBKJB+ge3CsL4RwVzabnL9Uta/QUg2Msi5Mw6eqrcbAPuaAZk IXDbsSjaBvTz2Q/0HlBji8J+/kvZyUyAjJVtfmvQS3qBGCQmC6fnSyAaJRSNpGrZTN0TC5/UsvEU aqcN/KlBf2fM+VLPMRDhCvNZ1EXdHDUr2Rbm+M07Gb6EfWU0CNNkyjHyKJjExDMMr5NRG8C5KHR3 AvDLSDo9G0iL4Sa8pxzabkLNWnOfmWIe4LF3Kw== ) ;; ADDITIONAL SECTION (7 records) ns01.fhfa.GOV. 3600 IN A 12.183.70.4 ns02.fhfa.GOV. 3600 IN A 12.183.70.5 ns03.fhfa.GOV. 3600 IN A 12.183.69.4 ns01.fhfa.GOV. 3600 IN RRSIG ( A 8 3 3600 20190110113123 20181211113123 34713 fhfa.gov. jcftgsjlO+2JKS+y/YAjR9aKDPSePFeZ4/GXut7P2XCiSQhiAl5AI+8zY6egiElXSR6sJkSPH/lb k1oSYV2DkSWVpJLbFxwhcJh3l1yH/JNe5J5ZuIMiRY6ogZZaPePkMJfUPGDSW0DLl+ljj1/veXOp HBBSMIJyHrPOgPU1VANZ7bTp6yChY0bvYuRGSqk/zK5hVzH6LBIecjfWghblzwtaf5QfT4j7bhVV pqNRrHVYcOncmMzu4dvg2DsXdCINPs4RSdaewNmhOEJ5L5osro2PaWBav5bFCqgXSQkg0sFAbagT wo5MvEdaHkxJ4M+8IslGEwMaycztcqsB1nADsA== ) ns02.fhfa.GOV. 3600 IN RRSIG ( A 8 3 3600 20190110113123 20181211113123 34713 fhfa.gov. CPkpyC2m4sbE6YM9qvw1qMD93wPdd4SE/s8/RCpQqtTxRYuZrXs+4OJL2QB4TVzpjYi4+tJj9MLK hT+WeY2Gf0Ou618H7zQ2/Ms2ObXresPkTt3J94x9dKBIr2DqEyu15Tn8d6KKTmeqAR5c3W/0aZZ3 YbLWUuv0M56zAHSe2QmPcYmKGKrhFlL7UnZ0zOCY47wX21auYPeTGQvSKGBF1gk1qXybYQ6Wvmfi AIwe9a3rgcZN7ene5WhzJU+5aXL/kp5l0x9BRGJgmN1Do4YJceKQjoUa03+ov24cJQKz96NyDgKY eWGXB2JU8tGMD0g/ml0uUP7bA33SWvGp2QRrFA== ) ns03.fhfa.GOV. 3600 IN RRSIG ( A 8 3 3600 20190110113123 20181211113123 34713 fhfa.gov. m3s34zd7FWrwBSM7Iy0q0GrIuTBGxyPYBrvNW7jxVl925L/0vemYrM1BuxAoyNkwYmzl4A4r/6HY F3Wx8uM4ZLK3M0+X73GZkGK1xaEBhD5zal9dZ30VEViVTgGC9jjYDGBat4eKEKtr5Fwiw0O9/Ov0 /sI/QrHUU9o7JUgs0QI50P3+ymPQ7++wPXZPwbJ8XRIepRpv1a8yLii8isr9LPFWPEbP5ED+V9Ny hO9DyvoQ/3rFjDl8Ppq2rbDScvQz+xhyqaf2w5tqC9zeakOVdwAYzF7Y1t+q9i7l5r2w6LpdQPMh bjdI5gDyxs0T1TQ9BYaaEFBQ+9tPk/dRSwKseg== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns03.fhfa.gov for FHFAOIG.GOV/SOA
	Received 759 bytes from 12.183.69.4
	;; Answer received from 12.183.69.4 (759 bytes) ;; HEADER SECTION ;; id = 14006 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FHFAOIG.GOV. IN SOA ;; ANSWER SECTION (2 records) fhfaoig.gov. 300 IN SOA ( ns01.fhfa.gov. dnsadmin.fhfa.gov. 2018494343 ;serial 600 ;refresh 300 ;retry 604800 ;expire 60 ;minimum ) fhfaoig.gov. 300 IN RRSIG ( SOA 8 2 300 20190109110311 20181210110311 7608 fhfaoig.gov. trhGDQqNywlVF77Uw/MCysiUe4oSYuM0bJK3nkTXD+hFK+0jpF0njxUFxMjRs0U+YUhVkudfsmnk 98xjuOWg3+NhNhSeeW3y+xI7J/4raGhwoL2ZsnYzTsmlXJ1DkLPg1yY8Ddwph4LUyewNwwDvprrG yqiM5LjFWCWyIUfraMSaqj9W2/3Pt8rQ+POVwlbVHZHI2N0ut1Slo2zHpQlya8Pu3dL74ywddVd9 04Hmn08Pi5GZ9pyO4U4NSColB/sZEXO6FfUnEu9CLKGcWbCvDoACApJKcpPhKbZ5baVnxTuz9Va5 zhv7WhA61VkCbRMh/Ie9Sj4L3WgrAEc2ucmfsw== ) ;; AUTHORITY SECTION (4 records) fhfaoig.gov. 300 IN NS ns02.fhfa.gov. fhfaoig.gov. 300 IN NS ns03.fhfa.gov. fhfaoig.gov. 300 IN NS ns01.fhfa.gov. fhfaoig.gov. 300 IN RRSIG ( NS 8 2 300 20190109110311 20181210110311 7608 fhfaoig.gov. c/rOcVa9ZWFjNigpGAOY/nCH/tnkjaSTEe5e44zWzgmiK5VRFvhpcialokVf9C8Dj8E2wk4f2+lU D4qUPxMXH2iECurs8je+IzK5HHaTBKJB+ge3CsL4RwVzabnL9Uta/QUg2Msi5Mw6eqrcbAPuaAZk IXDbsSjaBvTz2Q/0HlBji8J+/kvZyUyAjJVtfmvQS3qBGCQmC6fnSyAaJRSNpGrZTN0TC5/UsvEU aqcN/KlBf2fM+VLPMRDhCvNZ1EXdHDUr2Rbm+M07Gb6EfWU0CNNkyjHyKJjExDMMr5NRG8C5KHR3 AvDLSDo9G0iL4Sa8pxzabkLNWnOfmWIe4LF3Kw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns01.fhfa.gov for FHFAOIG.GOV/SOA
	Received 759 bytes from 12.183.70.4
	;; Answer received from 12.183.70.4 (759 bytes) ;; HEADER SECTION ;; id = 42717 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FHFAOIG.GOV. IN SOA ;; ANSWER SECTION (2 records) fhfaoig.gov. 300 IN SOA ( ns01.fhfa.gov. dnsadmin.fhfa.gov. 2018494343 ;serial 600 ;refresh 300 ;retry 604800 ;expire 60 ;minimum ) fhfaoig.gov. 300 IN RRSIG ( SOA 8 2 300 20190109110311 20181210110311 7608 fhfaoig.gov. trhGDQqNywlVF77Uw/MCysiUe4oSYuM0bJK3nkTXD+hFK+0jpF0njxUFxMjRs0U+YUhVkudfsmnk 98xjuOWg3+NhNhSeeW3y+xI7J/4raGhwoL2ZsnYzTsmlXJ1DkLPg1yY8Ddwph4LUyewNwwDvprrG yqiM5LjFWCWyIUfraMSaqj9W2/3Pt8rQ+POVwlbVHZHI2N0ut1Slo2zHpQlya8Pu3dL74ywddVd9 04Hmn08Pi5GZ9pyO4U4NSColB/sZEXO6FfUnEu9CLKGcWbCvDoACApJKcpPhKbZ5baVnxTuz9Va5 zhv7WhA61VkCbRMh/Ie9Sj4L3WgrAEc2ucmfsw== ) ;; AUTHORITY SECTION (4 records) fhfaoig.gov. 300 IN NS ns03.fhfa.gov. fhfaoig.gov. 300 IN NS ns01.fhfa.gov. fhfaoig.gov. 300 IN NS ns02.fhfa.gov. fhfaoig.gov. 300 IN RRSIG ( NS 8 2 300 20190109110311 20181210110311 7608 fhfaoig.gov. c/rOcVa9ZWFjNigpGAOY/nCH/tnkjaSTEe5e44zWzgmiK5VRFvhpcialokVf9C8Dj8E2wk4f2+lU D4qUPxMXH2iECurs8je+IzK5HHaTBKJB+ge3CsL4RwVzabnL9Uta/QUg2Msi5Mw6eqrcbAPuaAZk IXDbsSjaBvTz2Q/0HlBji8J+/kvZyUyAjJVtfmvQS3qBGCQmC6fnSyAaJRSNpGrZTN0TC5/UsvEU aqcN/KlBf2fM+VLPMRDhCvNZ1EXdHDUr2Rbm+M07Gb6EfWU0CNNkyjHyKJjExDMMr5NRG8C5KHR3 AvDLSDo9G0iL4Sa8pxzabkLNWnOfmWIe4LF3Kw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns03.fhfa.GOV for FHFAOIG.GOV/A
	Received 730 bytes from 12.183.69.4
	;; Answer received from 12.183.69.4 (730 bytes) ;; HEADER SECTION ;; id = 2764 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; FHFAOIG.GOV. IN A ;; ANSWER SECTION (2 records) fhfaoig.gov. 300 IN A 52.227.179.104 fhfaoig.gov. 300 IN RRSIG ( A 8 2 300 20190109110311 20181210110311 7608 fhfaoig.gov. AQ2TrXCx9339nk+p+FIuYQ1ocN0VloZBqW6dOsBxBkmhw0aAbHxszeJ2+vb7uqdOhNgUh8GWl8cE aFWkFL+82kOEyN5RWtnRAXBe3dwN1o3JyBjeEHn5bMpYLeTwmpGbVOXtAZb+p/uZgrwuqtu7lx5U PWBvoo+9G4alW7Lq0Vz6tzu6Le+8b9TfquS9SNB5nX/RWnN8Bx3OmdDarR6QYbAoRTX4eTQ46p5q DaTEcXRK0inw1o1mWucJC3wy+OZQrrTzSgLW3MZ6VVp7K9jJbwHhPsv7b2fxgDbjR6t2T9y6qLil weGMp3XSZS/3ZsD+exzrd723Ta0ew/ZcnqIWwQ== ) ;; AUTHORITY SECTION (4 records) fhfaoig.gov. 300 IN NS ns03.fhfa.gov. fhfaoig.gov. 300 IN NS ns01.fhfa.gov. fhfaoig.gov. 300 IN NS ns02.fhfa.gov. fhfaoig.gov. 300 IN RRSIG ( NS 8 2 300 20190109110311 20181210110311 7608 fhfaoig.gov. c/rOcVa9ZWFjNigpGAOY/nCH/tnkjaSTEe5e44zWzgmiK5VRFvhpcialokVf9C8Dj8E2wk4f2+lU D4qUPxMXH2iECurs8je+IzK5HHaTBKJB+ge3CsL4RwVzabnL9Uta/QUg2Msi5Mw6eqrcbAPuaAZk IXDbsSjaBvTz2Q/0HlBji8J+/kvZyUyAjJVtfmvQS3qBGCQmC6fnSyAaJRSNpGrZTN0TC5/UsvEU aqcN/KlBf2fM+VLPMRDhCvNZ1EXdHDUr2Rbm+M07Gb6EfWU0CNNkyjHyKJjExDMMr5NRG8C5KHR3 AvDLSDo9G0iL4Sa8pxzabkLNWnOfmWIe4LF3Kw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	FHFAOIG.GOV A RR has value 52.227.179.104
	Found 1 RRSIGs over A RRset
	`fhfaoig.gov. 300 IN RRSIG ( A 8 2 300 20190109110311 20181210110311 7608 fhfaoig.gov. AQ2TrXCx9339nk+p+FIuYQ1ocN0VloZBqW6dOsBxBkmhw0aAbHxszeJ2+vb7uqdOhNgUh8GWl8cE aFWkFL+82kOEyN5RWtnRAXBe3dwN1o3JyBjeEHn5bMpYLeTwmpGbVOXtAZb+p/uZgrwuqtu7lx5U PWBvoo+9G4alW7Lq0Vz6tzu6Le+8b9TfquS9SNB5nX/RWnN8Bx3OmdDarR6QYbAoRTX4eTQ46p5q DaTEcXRK0inw1o1mWucJC3wy+OZQrrTzSgLW3MZ6VVp7K9jJbwHhPsv7b2fxgDbjR6t2T9y6qLil weGMp3XSZS/3ZsD+exzrd723Ta0ew/ZcnqIWwQ== )`
	RRSIG=7608 and DNSKEY=7608 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test FHFAOIG.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: