DNSSEC Analyzer

Domain Name:

Time: 2020-01-18 11:59:14 UTC, NTP stratum 4

Analyzing DNSSEC problems for GPO.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (864 bytes) ;; HEADER SECTION ;; id = 47014 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20200201000000 20200111000000 20326 . BWZ/zOwlTZ48dcDdYPH1DhWqARQLeQRQXlBdkjPYgV+A6EIpWvIGjXgaifneRkSg1zxN4hG6SkIO /yUu3aFMcKBlnflIQiXjO64E6sIwbvmFEkeffZGrzdsqTdZI6Fo6oA2wTJrAHoCYBtnuBEb0BmX7 1ZBF/c0d0NghM3mphiXpTBVRiUxQzv+WOa1rqaMXBZuAd1f1hurpnRGhbEB2PhyiyKrmhN1NCrTZ eeV7FVeQeGZq2F76ZusnyRNCm9AgOXa3T9uYQNnnzr5yOcqEE9D4kMWYQrPgV4jpis6imMI8W0jD gEIP8A5Ta3icEP+zsTmeLD5vCQgLNQjSrbhENA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20200201000000 20200111000000 20326 . BWZ/zOwlTZ48dcDdYPH1DhWqARQLeQRQXlBdkjPYgV+A6EIpWvIGjXgaifneRkSg1zxN4hG6SkIO /yUu3aFMcKBlnflIQiXjO64E6sIwbvmFEkeffZGrzdsqTdZI6Fo6oA2wTJrAHoCYBtnuBEb0BmX7 1ZBF/c0d0NghM3mphiXpTBVRiUxQzv+WOa1rqaMXBZuAd1f1hurpnRGhbEB2PhyiyKrmhN1NCrTZ eeV7FVeQeGZq2F76ZusnyRNCm9AgOXa3T9uYQNnnzr5yOcqEE9D4kMWYQrPgV4jpis6imMI8W0jD gEIP8A5Ta3icEP+zsTmeLD5vCQgLNQjSrbhENA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=33853 is now in the chain-of-trust
	Query to h.root-servers.net for GPO.GOV/A
	Received 662 bytes from 198.97.190.53
	;; Answer received from 198.97.190.53 (662 bytes) ;; HEADER SECTION ;; id = 48789 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GPO.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20200131050000 20200118040000 33853 . ozB4ON880cfR3rJHQHIsTb5N+RRuOXoDus0Eep+g2lgFoxFgW2NKdLUZEoJ0/VoibBZBntSx8Ub4 qtP/3G2UVh5ZJeaclqI+dqzK6sijMuSZOhJMGNfZ8tT0hwsaDThAKB4LZ7I11zVfPj1YwNv2I5pO epTIWcM3Er7Ouz5gYjlC1HRVUmcax/lf7Gk4SDYLivF12tL9K9OJPyTO+jOHU5G17bGvsM6nw5xC DB0ShFJOf0ICeHBVNhrh50Uz7YH/AowmLXqy/nmVb+VbdwJnIF+NXiIF4cwDB4ukCjOac/B4pEQ2 YR9a1iz6Q7KqRF5rHKvbwPQ1Ui9pDdwnTLAD+Q== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.root-servers.net for GOV/DNSKEY
	Error querying a.root-servers.net/2001:503:ba3e:0:0:0:2:30 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 658 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (658 bytes) ;; HEADER SECTION ;; id = 11464 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20200131050000 20200118040000 33853 . ozB4ON880cfR3rJHQHIsTb5N+RRuOXoDus0Eep+g2lgFoxFgW2NKdLUZEoJ0/VoibBZBntSx8Ub4 qtP/3G2UVh5ZJeaclqI+dqzK6sijMuSZOhJMGNfZ8tT0hwsaDThAKB4LZ7I11zVfPj1YwNv2I5pO epTIWcM3Er7Ouz5gYjlC1HRVUmcax/lf7Gk4SDYLivF12tL9K9OJPyTO+jOHU5G17bGvsM6nw5xC DB0ShFJOf0ICeHBVNhrh50Uz7YH/AowmLXqy/nmVb+VbdwJnIF+NXiIF4cwDB4ukCjOac/B4pEQ2 YR9a1iz6Q7KqRF5rHKvbwPQ1Ui9pDdwnTLAD+Q== ) ;; ADDITIONAL SECTION (9 records) b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to k.root-servers.net for GOV/DS
	Error querying k.root-servers.net/2001:7fd:0:0:0:0:0:1 for GOV/DS: 'IPv6 transport disabled'
	Received 403 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (403 bytes) ;; HEADER SECTION ;; id = 60413 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20200131050000 20200118040000 33853 . ozB4ON880cfR3rJHQHIsTb5N+RRuOXoDus0Eep+g2lgFoxFgW2NKdLUZEoJ0/VoibBZBntSx8Ub4 qtP/3G2UVh5ZJeaclqI+dqzK6sijMuSZOhJMGNfZ8tT0hwsaDThAKB4LZ7I11zVfPj1YwNv2I5pO epTIWcM3Er7Ouz5gYjlC1HRVUmcax/lf7Gk4SDYLivF12tL9K9OJPyTO+jOHU5G17bGvsM6nw5xC DB0ShFJOf0ICeHBVNhrh50Uz7YH/AowmLXqy/nmVb+VbdwJnIF+NXiIF4cwDB4ukCjOac/B4pEQ2 YR9a1iz6Q7KqRF5rHKvbwPQ1Ui9pDdwnTLAD+Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20200131050000 20200118040000 33853 . ozB4ON880cfR3rJHQHIsTb5N+RRuOXoDus0Eep+g2lgFoxFgW2NKdLUZEoJ0/VoibBZBntSx8Ub4 qtP/3G2UVh5ZJeaclqI+dqzK6sijMuSZOhJMGNfZ8tT0hwsaDThAKB4LZ7I11zVfPj1YwNv2I5pO epTIWcM3Er7Ouz5gYjlC1HRVUmcax/lf7Gk4SDYLivF12tL9K9OJPyTO+jOHU5G17bGvsM6nw5xC DB0ShFJOf0ICeHBVNhrh50Uz7YH/AowmLXqy/nmVb+VbdwJnIF+NXiIF4cwDB4ukCjOac/B4pEQ2 YR9a1iz6Q7KqRF5rHKvbwPQ1Ui9pDdwnTLAD+Q== )`
	RRSIG=33853 and DNSKEY=33853 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to a.gov-servers.net for GOV/DNSKEY
	Error querying a.gov-servers.net/2001:500:4431:0:0:0:2:30 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 957 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (957 bytes) ;; HEADER SECTION ;; id = 49320 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (4 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAdccuiuxqTxvRcMVh4o9DCfREPNTe3hGEklbdV+L99lKySyIzskGLJ6XDBrWgBeY7ZRSOWGQ 2eHdQLN61fRyqWpVLpNzqaIz/UmMP74VPBCz4QXRDkG4hDO3uifCDVs8Jex4TrYT+hGNYmprbsrq dVQCgeeHc7UMKI/SjusQ4uTKgJ9CWt02/AgK+zKFi3LCBVDGnUwE2kUOL1b0MWfT0ks= ) ; Key ID = 36558 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAcQAVXGAbq+khqvif1NNId5wvkmsmSZEb/UXjfazqpqEeA7IUc8b/9eEIBebIcFda4Ukv8lF lnfGIvMRADLa50RVwP2asra1Md0NC9tLjrHEYN0H68WN0tTLIQ6jUF/kzYTeTOVhlUqzM+5JyyT9 x01e1FT5ANG8RkbgXIyPte2Qs8wasqNkjFGaD5oFLerVScCa0FXumybu9cBEfBbAzPU= ) ; Key ID = 14320 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200125200254 20200110195754 7698 gov. ovUQVM7cUgmfbmtjJkpEuId1o75aUV6yUr09Jq2fXCgZ4pMxw+DLSbgE5lYQlvATCICIfs8dy8pq yEd2h6T0ak7TTX7kprlnXGhkt8ig91qJPyLfxvMYDDJ4rH2u3iGqAmoc4CZuZFrDyKYwGErW+aYo jh44nCnepZ6bCmLYThR6+Xx2Fn3teoDEdq4RXe1DFukj3+wpMwwsyy6dAuOOcLPBHt+7n1RtEsoC wPbxSq5h38aC0mAXATatsYzlILnslbT+hqhhMwngMHjA4ve4I3jkV02oHBd1gb+dihauB8kz2kHe 4958bVEOLu6jHVfO2io3gfpC8wWJdAquLMiCbw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAdccuiuxqTxvRcMVh4o9DCfREPNTe3hGEklbdV+L99lKySyIzskGLJ6XDBrWgBeY7ZRSOWGQ 2eHdQLN61fRyqWpVLpNzqaIz/UmMP74VPBCz4QXRDkG4hDO3uifCDVs8Jex4TrYT+hGNYmprbsrq dVQCgeeHc7UMKI/SjusQ4uTKgJ9CWt02/AgK+zKFi3LCBVDGnUwE2kUOL1b0MWfT0ks= ) ; Key ID = 36558`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAcQAVXGAbq+khqvif1NNId5wvkmsmSZEb/UXjfazqpqEeA7IUc8b/9eEIBebIcFda4Ukv8lF lnfGIvMRADLa50RVwP2asra1Md0NC9tLjrHEYN0H68WN0tTLIQ6jUF/kzYTeTOVhlUqzM+5JyyT9 x01e1FT5ANG8RkbgXIyPte2Qs8wasqNkjFGaD5oFLerVScCa0FXumybu9cBEfBbAzPU= ) ; Key ID = 14320`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200125200254 20200110195754 7698 gov. ovUQVM7cUgmfbmtjJkpEuId1o75aUV6yUr09Jq2fXCgZ4pMxw+DLSbgE5lYQlvATCICIfs8dy8pq yEd2h6T0ak7TTX7kprlnXGhkt8ig91qJPyLfxvMYDDJ4rH2u3iGqAmoc4CZuZFrDyKYwGErW+aYo jh44nCnepZ6bCmLYThR6+Xx2Fn3teoDEdq4RXe1DFukj3+wpMwwsyy6dAuOOcLPBHt+7n1RtEsoC wPbxSq5h38aC0mAXATatsYzlILnslbT+hqhhMwngMHjA4ve4I3jkV02oHBd1gb+dihauB8kz2kHe 4958bVEOLu6jHVfO2io3gfpC8wWJdAquLMiCbw== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=36558 is now in the chain-of-trust
	DNSKEY=14320 is now in the chain-of-trust
	Query to c.gov-servers.net for GPO.GOV/A
	Error querying c.gov-servers.net/2620:74:28:0:0:0:2:30 for GPO.GOV/A: 'IPv6 transport disabled'
	Received 383 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (383 bytes) ;; HEADER SECTION ;; id = 18632 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GPO.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) GPO.GOV. 86400 IN NS ns2.GPO.GOV. GPO.GOV. 86400 IN NS ns1.GPO.GOV. GPO.GOV. 3600 IN DS ( 10540 8 2 9f835cdd03c4791155694a39620777a8f22f386e2e65f86a9ee32260b546369b ) GPO.GOV. 3600 IN DS 10540 8 1 0d99eec9e68a3c95cbde0ca3c30b12282ddbe76a GPO.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200125101007 20200118101007 36558 gov. cBsmnovcVFggmNgMAWQbGg4K5cZKySPaxWb66+swhPndtIIVryYRxT+MUy+8xUeCWFmCro2J/A5w b5lgc/g70oHOTJrp7wy+eshEPahFmAgfq0BlrrKTpBFfRqxHO6uqFdXA/W6XDhUdPyCTIIgrShrm kGCIIUBeHKLN9l677NlDqam5TLTj+asQ71VWMxDj7FMNCpdcNIhoTOZVGB6fgg== ) ;; ADDITIONAL SECTION (3 records) ns2.GPO.GOV. 86400 IN A 162.140.252.180 ns1.GPO.GOV. 86400 IN A 162.140.64.100 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.gov-servers.net for GPO.GOV/DNSKEY
	Error querying a.gov-servers.net/2001:500:4431:0:0:0:2:30 for GPO.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 383 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (383 bytes) ;; HEADER SECTION ;; id = 25980 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GPO.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) GPO.GOV. 86400 IN NS ns2.GPO.GOV. GPO.GOV. 86400 IN NS ns1.GPO.GOV. GPO.GOV. 3600 IN DS ( 10540 8 2 9f835cdd03c4791155694a39620777a8f22f386e2e65f86a9ee32260b546369b ) GPO.GOV. 3600 IN DS 10540 8 1 0d99eec9e68a3c95cbde0ca3c30b12282ddbe76a GPO.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200125101007 20200118101007 36558 gov. cBsmnovcVFggmNgMAWQbGg4K5cZKySPaxWb66+swhPndtIIVryYRxT+MUy+8xUeCWFmCro2J/A5w b5lgc/g70oHOTJrp7wy+eshEPahFmAgfq0BlrrKTpBFfRqxHO6uqFdXA/W6XDhUdPyCTIIgrShrm kGCIIUBeHKLN9l677NlDqam5TLTj+asQ71VWMxDj7FMNCpdcNIhoTOZVGB6fgg== ) ;; ADDITIONAL SECTION (3 records) ns2.GPO.GOV. 86400 IN A 162.140.252.180 ns1.GPO.GOV. 86400 IN A 162.140.64.100 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GPO.GOV

GPO.GOV

	Checking DS between GOV and GPO.GOV
	Query to d.gov-servers.net for GPO.GOV/DS
	Error querying d.gov-servers.net/2620:74:29:0:0:0:2:30 for GPO.GOV/DS: 'IPv6 transport disabled'
	Received 315 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (315 bytes) ;; HEADER SECTION ;; id = 64435 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GPO.GOV. IN DS ;; ANSWER SECTION (3 records) GPO.GOV. 3600 IN DS ( 10540 8 2 9f835cdd03c4791155694a39620777a8f22f386e2e65f86a9ee32260b546369b ) GPO.GOV. 3600 IN DS 10540 8 1 0d99eec9e68a3c95cbde0ca3c30b12282ddbe76a GPO.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200125101007 20200118101007 36558 gov. cBsmnovcVFggmNgMAWQbGg4K5cZKySPaxWb66+swhPndtIIVryYRxT+MUy+8xUeCWFmCro2J/A5w b5lgc/g70oHOTJrp7wy+eshEPahFmAgfq0BlrrKTpBFfRqxHO6uqFdXA/W6XDhUdPyCTIIgrShrm kGCIIUBeHKLN9l677NlDqam5TLTj+asQ71VWMxDj7FMNCpdcNIhoTOZVGB6fgg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GPO.GOV in the GOV zone
	DS=10540/SHA-256 has algorithm RSASHA256
	DS=10540/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GPO.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200125101007 20200118101007 36558 gov. cBsmnovcVFggmNgMAWQbGg4K5cZKySPaxWb66+swhPndtIIVryYRxT+MUy+8xUeCWFmCro2J/A5w b5lgc/g70oHOTJrp7wy+eshEPahFmAgfq0BlrrKTpBFfRqxHO6uqFdXA/W6XDhUdPyCTIIgrShrm kGCIIUBeHKLN9l677NlDqam5TLTj+asQ71VWMxDj7FMNCpdcNIhoTOZVGB6fgg== )`
	RRSIG=36558 and DNSKEY=36558 verifies the DS RRset
	DS=10540/SHA-256 is now in the chain-of-trust
	`GPO.GOV. 3600 IN DS ( 10540 8 2 9f835cdd03c4791155694a39620777a8f22f386e2e65f86a9ee32260b546369b )`
	`GPO.GOV. 3600 IN DS 10540 8 1 0d99eec9e68a3c95cbde0ca3c30b12282ddbe76a`
	Query to ns2.GPO.GOV for GPO.GOV/DNSKEY
	Received 1216 bytes from 162.140.252.180
	;; Answer received from 162.140.252.180 (1216 bytes) ;; HEADER SECTION ;; id = 20629 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GPO.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) GPO.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAduRDaoK9HHC7wZdIkGUVgBV9qpl/CgOIqsWx2L/Uz5xGPgzpR94y49ljnn5frqCFqt/NGWD Do3CG2n4CCtd+9Ibe1NqzPuPHaECnb2lND5YmHjH2HfOmh9brZhXPuYTAdutBrErn0RC853CyTWP +uAY9KUon5qCw2v66fWCwpKr ) ; Key ID = 31071 GPO.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbge4aGNKztv8y+ehUiEMl1QM/TK6uG4EaHzLd3j+tXAkRWCmwEMol7EVrZG5EyQFvPnNrVN xWFk+k0I2qP4qRimHXCf88EZo7ls7OOmyn6+czDQFyNUizJcBMj7B1vCFd40PfKZ8oaxRwW15MXi DX/Nj4UJ03JnUo7gtRdXYXF/ ) ; Key ID = 12066 GPO.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAZ7uWzqjzRRef0Tj9X68H7dP04p+QvqvPOKoq4BCF1OU9k9wBjEWsCWp9xC6sznm1d0ER9TC r3ckt97TdDvH0eu/UsJvIzF6Rlw4QfkWQ/sQAOn0pvhT1Af9imC69Yh1ahrM+0yxziP5QdEt2BPC uZV/ML1memZiOQ/fSIVbjrc1HKZ2Ep6dd9Ry6SwsTKOxhjzXz058W+6OEbOCOLOGNWlC/OmY7fhP S6oobF2o6N1D6vBsSTkT8KaXS6iKs8SHMcVUP4EZbeCJUoTPCVopIFGqTZDIUfAFHjN4cmWjXfjD qoctg9KX6uNVqN7obXzA1pyn8oCGIhm7SS3Yzty/EMk= ) ; Key ID = 10540 GPO.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200125101056 20200118101056 31071 GPO.GOV. SV9YFV+3fkE5oUSZL/7oCCML+mPUAyvjPDPc7Rogft9E8EMFz+yA307nePrw0ERUm3jx8BE8RISD YYKjV+QbU62I9y9QIZB/qc8sz/yPzP6zb8GBPu8Q1NzZThYLfR/CMbOBy76gFl5mFwI38Gf8P/Ow VY9O5fnqN21JoBN30XA= ) GPO.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200125101056 20200118101056 12066 GPO.GOV. KBtfrpFx1zprg4PmSZEQAQIxlcHGhjDpHzMpMYKg3kGyfSbk958MD2zbf4xpxfLj8g2KtJ1sXjp1 DYsW7f2VNITRXGtAG6+i5I7FFRtEvieWCRpC9XQZeUHTOZH9dMYGyNYLgstiKCtLGKsgOBbTL4MB gaoCCUuDLD+/araBaMo= ) GPO.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200125101056 20200118101056 10540 GPO.GOV. b7ElAn1ZfyHDc7DD6DKhTf4WQXNHA8ArOhEpzrYELf0dL3dOOxLict5AdlUIH4ZyLCpufIQde4iy JqVDnXl7iZZ8kkZEHRlGItGQcVdzWH1+EA4BPKo8unZKP+LBnG8kFVvTU80/scZ14eTcV/wp8HyE yKgaT7xoDuuBOnIo0pD11IXTpRLi23J1IS0MJFnm/szZMd0oURyFpNLr1IS85dgaIJTWH5ZyZO6P 6QASl1uoYOy3U8Xdd0bwDXivbfnYQ0FSQ0xbVHLrKVxJAihHYbOTMH8XuVqp7WPxaDUTR48w/9Vw SeH6bmmSnKif7Jp0gysVv2IYXUMXrtVtNJW6KA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for GPO.GOV
	`GPO.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAduRDaoK9HHC7wZdIkGUVgBV9qpl/CgOIqsWx2L/Uz5xGPgzpR94y49ljnn5frqCFqt/NGWD Do3CG2n4CCtd+9Ibe1NqzPuPHaECnb2lND5YmHjH2HfOmh9brZhXPuYTAdutBrErn0RC853CyTWP +uAY9KUon5qCw2v66fWCwpKr ) ; Key ID = 31071`
	`GPO.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbge4aGNKztv8y+ehUiEMl1QM/TK6uG4EaHzLd3j+tXAkRWCmwEMol7EVrZG5EyQFvPnNrVN xWFk+k0I2qP4qRimHXCf88EZo7ls7OOmyn6+czDQFyNUizJcBMj7B1vCFd40PfKZ8oaxRwW15MXi DX/Nj4UJ03JnUo7gtRdXYXF/ ) ; Key ID = 12066`
	`GPO.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAZ7uWzqjzRRef0Tj9X68H7dP04p+QvqvPOKoq4BCF1OU9k9wBjEWsCWp9xC6sznm1d0ER9TC r3ckt97TdDvH0eu/UsJvIzF6Rlw4QfkWQ/sQAOn0pvhT1Af9imC69Yh1ahrM+0yxziP5QdEt2BPC uZV/ML1memZiOQ/fSIVbjrc1HKZ2Ep6dd9Ry6SwsTKOxhjzXz058W+6OEbOCOLOGNWlC/OmY7fhP S6oobF2o6N1D6vBsSTkT8KaXS6iKs8SHMcVUP4EZbeCJUoTPCVopIFGqTZDIUfAFHjN4cmWjXfjD qoctg9KX6uNVqN7obXzA1pyn8oCGIhm7SS3Yzty/EMk= ) ; Key ID = 10540`
	DNSKEY=10540/SEP is now in the chain-of-trust
	DS=10540/SHA-256 verifies DNSKEY=10540/SEP
	DS=10540/SHA-1 verifies DNSKEY=10540/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`GPO.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200125101056 20200118101056 31071 GPO.GOV. SV9YFV+3fkE5oUSZL/7oCCML+mPUAyvjPDPc7Rogft9E8EMFz+yA307nePrw0ERUm3jx8BE8RISD YYKjV+QbU62I9y9QIZB/qc8sz/yPzP6zb8GBPu8Q1NzZThYLfR/CMbOBy76gFl5mFwI38Gf8P/Ow VY9O5fnqN21JoBN30XA= )`
	`GPO.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200125101056 20200118101056 12066 GPO.GOV. KBtfrpFx1zprg4PmSZEQAQIxlcHGhjDpHzMpMYKg3kGyfSbk958MD2zbf4xpxfLj8g2KtJ1sXjp1 DYsW7f2VNITRXGtAG6+i5I7FFRtEvieWCRpC9XQZeUHTOZH9dMYGyNYLgstiKCtLGKsgOBbTL4MB gaoCCUuDLD+/araBaMo= )`
	`GPO.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200125101056 20200118101056 10540 GPO.GOV. b7ElAn1ZfyHDc7DD6DKhTf4WQXNHA8ArOhEpzrYELf0dL3dOOxLict5AdlUIH4ZyLCpufIQde4iy JqVDnXl7iZZ8kkZEHRlGItGQcVdzWH1+EA4BPKo8unZKP+LBnG8kFVvTU80/scZ14eTcV/wp8HyE yKgaT7xoDuuBOnIo0pD11IXTpRLi23J1IS0MJFnm/szZMd0oURyFpNLr1IS85dgaIJTWH5ZyZO6P 6QASl1uoYOy3U8Xdd0bwDXivbfnYQ0FSQ0xbVHLrKVxJAihHYbOTMH8XuVqp7WPxaDUTR48w/9Vw SeH6bmmSnKif7Jp0gysVv2IYXUMXrtVtNJW6KA== )`
	RRSIG=31071 and DNSKEY=31071 verifies the DNSKEY RRset
	RRSIG=12066 and DNSKEY=12066 verifies the DNSKEY RRset
	RRSIG=10540 and DNSKEY=10540/SEP verifies the DNSKEY RRset
	DNSKEY=31071 is now in the chain-of-trust
	DNSKEY=12066 is now in the chain-of-trust
	Query to ns1.GPO.GOV for GPO.GOV/A
	Received 1400 bytes from 162.140.64.100
	;; Answer received from 162.140.64.100 (1400 bytes) ;; HEADER SECTION ;; id = 19224 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GPO.GOV. IN A ;; ANSWER SECTION (3 records) GPO.GOV. 300 IN A 162.140.14.82 GPO.GOV. 300 IN RRSIG ( A 8 2 300 20200125033351 20200118033351 31071 GPO.GOV. ZGAfviqGGYCbcIBs/XbQvFEwPspZ8+E6AqNoHvXC/z3yRg83v52ROwPykIJZjFQX1kGydpGGmP5A AoqPwG7h7GPilT3vRKDvfDuObowZpL5600pmHWZaaXP4eF1rZP+OQjXVOcA8NoDpipkWKthQvscf Per9LFUzzuP8ZIHAXpY= ) GPO.GOV. 300 IN RRSIG ( A 8 2 300 20200125033351 20200118033351 12066 GPO.GOV. m+9BHaL1N+wjHnYh7jP8XGt1uI2u3N5F+6XOgZszfd4TRvypYuvV4U6hwWthbSlXuFavcimNKGNJ Ghh4yBgHFO3fPgF8pV25/MzQNUwFX71gtw5fzh/x0f4FszT2prJlcG/P5DuNg0L8hcl/nVsGxdCj AHmz8wdkVhvXLuqIjuc= ) ;; AUTHORITY SECTION (4 records) GPO.GOV. 28800 IN NS ns2.GPO.GOV. GPO.GOV. 28800 IN NS ns1.GPO.GOV. GPO.GOV. 28800 IN RRSIG ( NS 8 2 28800 20200124173123 20200117173123 31071 GPO.GOV. cM/MWAXSfTTOdH9/JRcGeUIOxXP2tJy8nKX7EOc/Rv+wHpFkBqM9vbrInVS9rF11G2TaUJpt3K7t m3TZ6z2Wg1n9qsB0BNq9IdQtRV5F7s8F4ZZA22FLpTblaAdnK/Op4+t/0DTsvGWBNXiYGmQs1sol jHmGPOt2w4witm6d/IA= ) GPO.GOV. 28800 IN RRSIG ( NS 8 2 28800 20200124203343 20200117203343 12066 GPO.GOV. J6FbLlA9bGOxCwsS3OA309mQxKXfMOCa5szKAAUWbMa2tU+BiPXvOUi7IeThJk8AdAMBjMyefFGw zQDzzzDXZwH9a4Yw43NDhp0PFUkavZZvHBsGBrhqu4VX9xDA3OxEnFRnCXvJRAzV/Ty3PVIvkZrV scNNWHpYoYFxXrM73+s= ) ;; ADDITIONAL SECTION (7 records) ns2.GPO.GOV. 28800 IN A 162.140.252.180 ns2.GPO.GOV. 28800 IN RRSIG ( A 8 3 28800 20200125033407 20200118033407 31071 GPO.GOV. pVrhhbA7fIK9dZKSI74SDD67pSglKjeMz5LLlPMrH4s97KBvQ14+RyjJTcrAOb7M+czGXM2QSijl zCGmd/Sz1S0p7jteu6QRZoJ/haF93xzJkY/OkF3qJjDEV5Sy8fodca7U0PyeYHqz9FSQw9xfroYd xz1z6ewc4m42Ps7/YkI= ) ns2.GPO.GOV. 28800 IN RRSIG ( A 8 3 28800 20200124175250 20200117175250 12066 GPO.GOV. WXsv0qD6+L1RbgzGTFXtmHUDtEEGL/pRYY9LO+jlzMiMn71SXohvQftqcjog7puGOd/nj5MuL849 yo3wqAXI3nmQ6qDtOa/LkIdcj9+iwuXXizw/b5rb9XJ/GIp2buvO238hPpb3ePsuFSN+T8EUzTJm HC7O79PfRYiRTL9H7Jk= ) ns1.GPO.GOV. 28800 IN A 162.140.64.100 ns1.GPO.GOV. 28800 IN RRSIG ( A 8 3 28800 20200125023442 20200118023442 31071 GPO.GOV. ooSRkgpJQbkmyjhUy3nxb4XLAQQLvYj3jOcAeI5cdDp+riX9tJCSBBPRrSCI5vCJca1xavo9FLN5 qYKDbvXZYdjPDqQI3h/TlwyZX4jXkz1cszrWYXoql2f2WfzvOiXPaam7xXPxMW8nKBLD6oqO3rHr M53YYIZfPOu0NZWJ4nI= ) ns1.GPO.GOV. 28800 IN RRSIG ( A 8 3 28800 20200124193844 20200117193844 12066 GPO.GOV. hoAhckOLBwd92WX7C6k7AB894oS521TUCvHYGbHOIL71w2FFczcX0I9dzg8Ox7jHvuaEv/FmVPMI 774ur+t8mDimiTAcV9CZyFAtwcpS9el4CX983HKq9XeWOO7pwQsBQqSiPxJBXubSuqYYqfAiXN47 LPpbsD96Iz8iQ6dIai0= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	GPO.GOV is authoritative for GPO.GOV
	Found RRSIG signed by GPO.GOV zone
	Query to ns2.GPO.GOV for GPO.GOV/SOA
	Received 1433 bytes from 162.140.252.180
	;; Answer received from 162.140.252.180 (1433 bytes) ;; HEADER SECTION ;; id = 5611 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GPO.GOV. IN SOA ;; ANSWER SECTION (3 records) GPO.GOV. 28800 IN SOA ( hq-hpns1.GPO.GOV. noc.GPO.GOV. 2010072731 ;serial 10800 ;refresh 3600 ;retry 2592000 ;expire 900 ;minimum ) GPO.GOV. 28800 IN RRSIG ( SOA 8 2 28800 20200124200906 20200117200906 31071 GPO.GOV. vvtsxU0xk7iMhaiFE+pVaa94MjZB0E4eOWvwG5XAU5R5shCRuEmoI4jmuhAAqtj5ufjzQmIxsBKg y+7PsLQJuVxRanlde2kDvHbgDzIYNlK03BINgNJ3C1n9yhYR5hK8mF6YhqR/1biYotTod+aG0kUf dasdGjQms7YZHvk+YEM= ) GPO.GOV. 28800 IN RRSIG ( SOA 8 2 28800 20200124200906 20200117200906 12066 GPO.GOV. i11tU3vn3iDaxerLI/whvRy0ZAfyl5FxfuqhNiFv7rPanxrZRfUDGeIwCvU8Vourg1rqMy8m/mgX nGkNCbtv+dS/8Ysx+rkU0ebpSmE/06WiZni5tM1msksGDR0wby0OpgunfqnjvG4mll/wel7ZTKTT fvgcQEyH4ZTB+ktc8Bs= ) ;; AUTHORITY SECTION (4 records) GPO.GOV. 28800 IN NS ns1.GPO.GOV. GPO.GOV. 28800 IN NS ns2.GPO.GOV. GPO.GOV. 28800 IN RRSIG ( NS 8 2 28800 20200125024411 20200118024411 31071 GPO.GOV. BDyf5g3ddPcEic5t8zZ9lNL0aPsO4ZRMdIQCwPRxCHixJ3ClUXsJleoYpQxJXvSzo3VTWyTW1fP7 qbRDPzuMXBt7KKPhugJLb0r8rkHPOVqJAVFIopVhGY1oWl27UuHFR5oUkEb9lyLqE2LMYf/G6WJq f4YyQUPAqC60Z/9aFgM= ) GPO.GOV. 28800 IN RRSIG ( NS 8 2 28800 20200125104509 20200118104509 12066 GPO.GOV. qY/v7LJzt1+cCZudQYPmlwgThVIGNLQCiCTM7EgiEPSn/wiU0LXyyO5/5KzPKdbgH9u8fphysMUJ 8RiAMnz3jgQzU9AruWkmvAL5wuZSUcARkEvuupw0eUvM77KNkp6is1xGarYsMix/wWwgnID1JnlG MA6evEAQtWgJxkEmP0g= ) ;; ADDITIONAL SECTION (7 records) ns2.GPO.GOV. 28800 IN A 162.140.252.180 ns2.GPO.GOV. 28800 IN RRSIG ( A 8 3 28800 20200125001529 20200118001529 31071 GPO.GOV. A2EpiDAp5wG3ftZCEaVKrS3SeHTAOxHR1t22hlYpAD3oej3QhgF7P+PncinmKGn4+DRO4zprjks8 ay2AcOdl4ZRJiQE/BG6cOtOaSdff0AWjVmqWwIWJsxyQICNRdDLk416sW5nnXkNFvysA8UDbLPse 6jy5liKJ/5b1TJDDLi4= ) ns2.GPO.GOV. 28800 IN RRSIG ( A 8 3 28800 20200125073039 20200118073039 12066 GPO.GOV. PaltGUWRXUKt3RNNmNaW7i5joNcrKxrqq1oFYjYlGtAQ2npOJZaJxDzGP9s3XSku7x8e26zJIxRa MlRL70KnnWpNgaMpN7kvQT/kBZH3/sAaTa0wdhYMQEj0EGcd9gL55hunDk1nfgrI53vE+P2Dk0Jo EMLBwRkKoAdboTXnBGM= ) ns1.GPO.GOV. 28800 IN A 162.140.64.100 ns1.GPO.GOV. 28800 IN RRSIG ( A 8 3 28800 20200124215219 20200117215219 31071 GPO.GOV. STlOmlDCbCHn9lx5BXX1q/baXVX3386iZolaufPIiU7B5y2M4dDiQfzs+qbKb240oAtr5IaeSUnE +mn2vLKaAbTcut5AsvIN0WvbjTstWLfDZ2AaQyjDMWDOXQt7FpSdZdnL2GYAR6m7mkwOAVJzmhWQ DFlqSoa3+UXMwkYpdWI= ) ns1.GPO.GOV. 28800 IN RRSIG ( A 8 3 28800 20200125065621 20200118065621 12066 GPO.GOV. LgBGeODLMmHBbPL/wE3666QeLCrqmFgG9SYomQOOpnsFvMchGPSaB61mza5Yh1W+rPBO/kQTzJYN EvHjHhhViX3COwAn7yr6qkL5EeEJ5+Hg/ZVCCjTBe7gaZrTDqZQTdOEElmEqv3AyqJoQNRkT+bgM m5vQG/8jaTfBUZphUrk= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.GPO.GOV for GPO.GOV/SOA
	Received 1433 bytes from 162.140.64.100
	;; Answer received from 162.140.64.100 (1433 bytes) ;; HEADER SECTION ;; id = 49422 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GPO.GOV. IN SOA ;; ANSWER SECTION (3 records) GPO.GOV. 28800 IN SOA ( hq-hpns1.GPO.GOV. noc.GPO.GOV. 2010072731 ;serial 10800 ;refresh 3600 ;retry 2592000 ;expire 900 ;minimum ) GPO.GOV. 28800 IN RRSIG ( SOA 8 2 28800 20200125113454 20200118113454 31071 GPO.GOV. nh+IFlMBIpDeQgVPuVOj4Vzi1/EqdPSz79Zjr1vWl0DCenEGoWNcghWi2BjCMBkIHRZf6spfs0vP 7jyCbjxt7eS1WmwhAc16mVRPao/qAwvD8C+rmodtZOSxH1q8uS+9hQtOhNXjOGSj3vGj+v9xfXOz 8pexRuoKnb6PiSIiL7A= ) GPO.GOV. 28800 IN RRSIG ( SOA 8 2 28800 20200125113454 20200118113454 12066 GPO.GOV. fyJn1k8hJ5WLJgXNjej26Z51T7854G6oLFsUWwW0Aq+59aYzWlrj8jzDmscVcv7cZswY83aL45PB On1B0wdlwn3f3zXdyu275BwKa5umfcUlU1lg6z8PGuBG4wZt0UD96w2qgqJJWm+Sq+ARlRO0V1V/ iAYvbMY69qURNggp55s= ) ;; AUTHORITY SECTION (4 records) GPO.GOV. 28800 IN NS ns1.GPO.GOV. GPO.GOV. 28800 IN NS ns2.GPO.GOV. GPO.GOV. 28800 IN RRSIG ( NS 8 2 28800 20200124173123 20200117173123 31071 GPO.GOV. cM/MWAXSfTTOdH9/JRcGeUIOxXP2tJy8nKX7EOc/Rv+wHpFkBqM9vbrInVS9rF11G2TaUJpt3K7t m3TZ6z2Wg1n9qsB0BNq9IdQtRV5F7s8F4ZZA22FLpTblaAdnK/Op4+t/0DTsvGWBNXiYGmQs1sol jHmGPOt2w4witm6d/IA= ) GPO.GOV. 28800 IN RRSIG ( NS 8 2 28800 20200124203343 20200117203343 12066 GPO.GOV. J6FbLlA9bGOxCwsS3OA309mQxKXfMOCa5szKAAUWbMa2tU+BiPXvOUi7IeThJk8AdAMBjMyefFGw zQDzzzDXZwH9a4Yw43NDhp0PFUkavZZvHBsGBrhqu4VX9xDA3OxEnFRnCXvJRAzV/Ty3PVIvkZrV scNNWHpYoYFxXrM73+s= ) ;; ADDITIONAL SECTION (7 records) ns2.GPO.GOV. 28800 IN A 162.140.252.180 ns2.GPO.GOV. 28800 IN RRSIG ( A 8 3 28800 20200125033407 20200118033407 31071 GPO.GOV. pVrhhbA7fIK9dZKSI74SDD67pSglKjeMz5LLlPMrH4s97KBvQ14+RyjJTcrAOb7M+czGXM2QSijl zCGmd/Sz1S0p7jteu6QRZoJ/haF93xzJkY/OkF3qJjDEV5Sy8fodca7U0PyeYHqz9FSQw9xfroYd xz1z6ewc4m42Ps7/YkI= ) ns2.GPO.GOV. 28800 IN RRSIG ( A 8 3 28800 20200124175250 20200117175250 12066 GPO.GOV. WXsv0qD6+L1RbgzGTFXtmHUDtEEGL/pRYY9LO+jlzMiMn71SXohvQftqcjog7puGOd/nj5MuL849 yo3wqAXI3nmQ6qDtOa/LkIdcj9+iwuXXizw/b5rb9XJ/GIp2buvO238hPpb3ePsuFSN+T8EUzTJm HC7O79PfRYiRTL9H7Jk= ) ns1.GPO.GOV. 28800 IN A 162.140.64.100 ns1.GPO.GOV. 28800 IN RRSIG ( A 8 3 28800 20200125023442 20200118023442 31071 GPO.GOV. ooSRkgpJQbkmyjhUy3nxb4XLAQQLvYj3jOcAeI5cdDp+riX9tJCSBBPRrSCI5vCJca1xavo9FLN5 qYKDbvXZYdjPDqQI3h/TlwyZX4jXkz1cszrWYXoql2f2WfzvOiXPaam7xXPxMW8nKBLD6oqO3rHr M53YYIZfPOu0NZWJ4nI= ) ns1.GPO.GOV. 28800 IN RRSIG ( A 8 3 28800 20200124193844 20200117193844 12066 GPO.GOV. hoAhckOLBwd92WX7C6k7AB894oS521TUCvHYGbHOIL71w2FFczcX0I9dzg8Ox7jHvuaEv/FmVPMI 774ur+t8mDimiTAcV9CZyFAtwcpS9el4CX983HKq9XeWOO7pwQsBQqSiPxJBXubSuqYYqfAiXN47 LPpbsD96Iz8iQ6dIai0= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.GPO.GOV for GPO.GOV/A
	Received 1400 bytes from 162.140.64.100
	;; Answer received from 162.140.64.100 (1400 bytes) ;; HEADER SECTION ;; id = 35592 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GPO.GOV. IN A ;; ANSWER SECTION (3 records) GPO.GOV. 300 IN A 162.140.14.82 GPO.GOV. 300 IN RRSIG ( A 8 2 300 20200125020803 20200118020803 31071 GPO.GOV. dgXWriiFxxnCpDXitP3l2mWvZUq+IXcDM2YCL25XdfpSqcid+qbNczAPXrtizs5CHH7qSYyRBcHR HGuWYfvkx0V6MrfhFUuz1ezq0+tL9rVgMFAI1VITfdgcggERTSGN33BnVu4ELYiLhMKh2ycBKL8W +JtIErDMhAvVDWcmpnA= ) GPO.GOV. 300 IN RRSIG ( A 8 2 300 20200125031826 20200118031826 12066 GPO.GOV. s+g8oERYADAtXUvQCaof4TCyZQH+QheMZ7RZH4Ut+kCRlbwReFbiA4/7YH24uOjeRWeJoFeOEeAR DbU7bBT/UC32l8uW+007ejjHwdSc8qjZQlhpV0pvfrXPH8jBD7TdObTgD7mcfM+/oz+Djz/GWZvW chSiDy4W7Bg3QzO6tns= ) ;; AUTHORITY SECTION (4 records) GPO.GOV. 28800 IN NS ns1.GPO.GOV. GPO.GOV. 28800 IN NS ns2.GPO.GOV. GPO.GOV. 28800 IN RRSIG ( NS 8 2 28800 20200125050023 20200118050023 31071 GPO.GOV. kegQTpXBmvdnTlPM/1NhKJobJ6E5aR27aLCXn+lIMBwgckQL+ZqbXLHzz1ehbMNzOfpM6SnU4jZI /Hs4crec2KcqF52KkdD4Er8DhP3nTbWQWKhFfMKJAwprzQQ2523D6MV9jt/B/m6MyCayT3wbRY+S CXItDTFl23GFuycd4Ho= ) GPO.GOV. 28800 IN RRSIG ( NS 8 2 28800 20200124220143 20200117220143 12066 GPO.GOV. X1GjWp75gyrHhOKRSynuRPplAuMy/zriOynfyOtb9W2P5uzSWGsBafpExBkavhE3WvZBWFr3Zwp3 ccZeI3Ty8ketJeKcjzGH6lZ3NUVTLgcCNhrVgph3RS2NqivpyPV8IN2W2DrT09GkSxtX3OSz7ctI rpiiqkQ37KOFJjVYCOQ= ) ;; ADDITIONAL SECTION (7 records) ns2.GPO.GOV. 28800 IN A 162.140.252.180 ns2.GPO.GOV. 28800 IN RRSIG ( A 8 3 28800 20200124221648 20200117221648 31071 GPO.GOV. K5fFvlfh/k7DBXIVmdJBqaM4kSdOmC01OsLh6vP0UAzywtT4Hm+Nlr7IeJQluIqj45XQfgAYe47V 6OwqEBG9NQpEWFc2E00+hzkKje7W1ncmaNBeN4FG38/XF0vTiDAhLG4SRpp4bo7SJUf0LyqdlANY Pw2eMeSlqGuurDsfvMw= ) ns2.GPO.GOV. 28800 IN RRSIG ( A 8 3 28800 20200124195248 20200117195248 12066 GPO.GOV. Od+4/Cv0EZlUHGtV3bRSzcBpvlR6UxpeV8/I2oOxhmDk7fskKzNjdFcols/3Q+rTO1WdIFcTO0kA SZkJxg07lVvL1E9/AgDVr0RuqEWWnbgBEyr23rd7CEFpNKnJ1nXO4J2TOXjHpptBTyAU1vuI9VoZ Z5l+hAnFDLXnmTE32go= ) ns1.GPO.GOV. 28800 IN A 162.140.64.100 ns1.GPO.GOV. 28800 IN RRSIG ( A 8 3 28800 20200125013011 20200118013011 31071 GPO.GOV. NLLGSzE9H9yOAgGCJmoqGdeyJTrVFoqiWqngL8PKblZxPb6pLSBwfn8J5I3/JhjW/IMy//RoTKbX hrNl35AZUZjFbiqra2zYYco4BiFKoYnyOg9nvOv4fyuyem7u6PoBT/A3MZTYjjNoxlPuTQYgMbay vJelg2bxjs3SZ2xgDgY= ) ns1.GPO.GOV. 28800 IN RRSIG ( A 8 3 28800 20200124175545 20200117175545 12066 GPO.GOV. e5uBPJhxa/+o3biKlN8w39aCJUkC1yjzQjIm0hZG7Rss5zcMew/3T1O+T4f92l3ynJGcblS0oBTE k7cdtv5UkOzNh2Fa54TQtNInUhKM7ocYBcqSf6LoeWe+/iah6QDYP2Ew0VeSguDlzccJPOxQizHW I7e0em/GmnTV9VpqRQs= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	GPO.GOV A RR has value 162.140.14.82
	Found 2 RRSIGs over A RRset
	`GPO.GOV. 300 IN RRSIG ( A 8 2 300 20200125020803 20200118020803 31071 GPO.GOV. dgXWriiFxxnCpDXitP3l2mWvZUq+IXcDM2YCL25XdfpSqcid+qbNczAPXrtizs5CHH7qSYyRBcHR HGuWYfvkx0V6MrfhFUuz1ezq0+tL9rVgMFAI1VITfdgcggERTSGN33BnVu4ELYiLhMKh2ycBKL8W +JtIErDMhAvVDWcmpnA= )`
	`GPO.GOV. 300 IN RRSIG ( A 8 2 300 20200125031826 20200118031826 12066 GPO.GOV. s+g8oERYADAtXUvQCaof4TCyZQH+QheMZ7RZH4Ut+kCRlbwReFbiA4/7YH24uOjeRWeJoFeOEeAR DbU7bBT/UC32l8uW+007ejjHwdSc8qjZQlhpV0pvfrXPH8jBD7TdObTgD7mcfM+/oz+Djz/GWZvW chSiDy4W7Bg3QzO6tns= )`
	RRSIG=31071 and DNSKEY=31071 verifies the A RRset
	RRSIG=12066 and DNSKEY=12066 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test GPO.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: