DNSSEC Analyzer - GPODEV.GOV

Domain Name:

Time: 2021-10-16 11:58:25 UTC, NTP stratum 16

Analyzing DNSSEC problems for GPODEV.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to i.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.36.148.17
	;; Response received from 192.36.148.17 (865 octets) ;; HEADER SECTION ;; id = 17421 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAY+oUaY0b7Z45vRD1ef/GykZqgHJtfdzRcnQNvGVQAqlH22QChtG+n1EMugw7T/6uDBAGlRI kXASdtHXhxStb9lPpyQe5/JIuMIlg+NhxKxEJ5e3J9SSPCavvDhH/BPrBCJwn8b68QAWRjVW6Rgd x63pUm7lfsimiWGMfplHNvcZWgVbKA9OI2o2lU8rT8n7zuwtlZPNpDLSI5GzrJgIiKR2Id16fmAg TJBOw14Xye/t4/BxTdxeMiiVFwA4KUV2VeqspHKSHFOz+lUIIqBRknEmYpSvnxnyi0n1n4tGnGP8 z6ZwRACi1Rw0nCu7BGOU9M6LpInRoW/W4KXLODr6xqU= ) ; Key ID = 14748 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20211101000000 20211011000000 20326 . Vgp/qDkJ+iPavrz3Y8x60J2QTkY2ohOdsNcbTYrzBeWPzrdEGMbIovAJ41Khp+0yRFfqYRc8LQqG 7NT+4Fnzsg3LAFhqpZ99NEWSHwvC/6veJRbmH9u9D4VbO90IpEoUTBd7xGU1I3Vr3RNaHGqsrVRo dgEMKlh85CJJUZAhoH+BiDQIPNPBSMGy6F+78qJb+JccBlIWD/rZulBqqc6QsSDlHNMWNmVF4Y3S 280Co5AIx+W3ATkIXyGzW78lpe/1xJyCuMsQZwAT7j5RMAwmlV2WVoe9rMaezCIzTiaiEMTOaJcc MpbdykfOLpxJDbgqzABEfK6Qg2NcOa5P1LOPTw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAY+oUaY0b7Z45vRD1ef/GykZqgHJtfdzRcnQNvGVQAqlH22QChtG+n1EMugw7T/6uDBAGlRI kXASdtHXhxStb9lPpyQe5/JIuMIlg+NhxKxEJ5e3J9SSPCavvDhH/BPrBCJwn8b68QAWRjVW6Rgd x63pUm7lfsimiWGMfplHNvcZWgVbKA9OI2o2lU8rT8n7zuwtlZPNpDLSI5GzrJgIiKR2Id16fmAg TJBOw14Xye/t4/BxTdxeMiiVFwA4KUV2VeqspHKSHFOz+lUIIqBRknEmYpSvnxnyi0n1n4tGnGP8 z6ZwRACi1Rw0nCu7BGOU9M6LpInRoW/W4KXLODr6xqU= ) ; Key ID = 14748`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20211101000000 20211011000000 20326 . Vgp/qDkJ+iPavrz3Y8x60J2QTkY2ohOdsNcbTYrzBeWPzrdEGMbIovAJ41Khp+0yRFfqYRc8LQqG 7NT+4Fnzsg3LAFhqpZ99NEWSHwvC/6veJRbmH9u9D4VbO90IpEoUTBd7xGU1I3Vr3RNaHGqsrVRo dgEMKlh85CJJUZAhoH+BiDQIPNPBSMGy6F+78qJb+JccBlIWD/rZulBqqc6QsSDlHNMWNmVF4Y3S 280Co5AIx+W3ATkIXyGzW78lpe/1xJyCuMsQZwAT7j5RMAwmlV2WVoe9rMaezCIzTiaiEMTOaJcc MpbdykfOLpxJDbgqzABEfK6Qg2NcOa5P1LOPTw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=14748 is now in the chain-of-trust
	Query to b.root-servers.net for GPODEV.GOV/A
	Received 629 bytes from 199.9.14.201
	;; Response received from 199.9.14.201 (629 octets) ;; HEADER SECTION ;; id = 42578 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; GPODEV.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20211029050000 20211016040000 14748 . HsJvcdYGrK2gYrexKsauiv5LuMkG2Ou4sPWh/bH2g0sRem2TWaOZis755LSMI3BlVNhyJ66tbcGh 73hdyyXEv9j+6Jz8Cq3oglTVuO0Mei3V9TP1zZzpAjmaAUkbIQUPH/icJ7S6NvInu3kHcH8rteaA URFMBsM10SoK8OHLpp+mr58m7Ii4N4aU+fQXC0JspMjhJwVgrw4JxeCQaKBPue19UcOHqR7evgej KZ2Zb3GUzrxoAKoHrYLUuqEhhMi7J0eYXJhdSy+AbvDBPGQuasRKZdCquSXDIgiFvnZrKLrThnp8 pBk0Q6Awz/piYbLGrzVIlGu9Mg+rJYTTFpdmew== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to a.root-servers.net for GOV/DNSKEY
	Received 622 bytes from 198.41.0.4
	;; Response received from 198.41.0.4 (622 octets) ;; HEADER SECTION ;; id = 30300 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20211029050000 20211016040000 14748 . HsJvcdYGrK2gYrexKsauiv5LuMkG2Ou4sPWh/bH2g0sRem2TWaOZis755LSMI3BlVNhyJ66tbcGh 73hdyyXEv9j+6Jz8Cq3oglTVuO0Mei3V9TP1zZzpAjmaAUkbIQUPH/icJ7S6NvInu3kHcH8rteaA URFMBsM10SoK8OHLpp+mr58m7Ii4N4aU+fQXC0JspMjhJwVgrw4JxeCQaKBPue19UcOHqR7evgej KZ2Zb3GUzrxoAKoHrYLUuqEhhMi7J0eYXJhdSy+AbvDBPGQuasRKZdCquSXDIgiFvnZrKLrThnp8 pBk0Q6Awz/piYbLGrzVIlGu9Mg+rJYTTFpdmew== ) ;; ADDITIONAL SECTION (9 records) b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to i.root-servers.net for GOV/DS
	Received 370 bytes from 192.36.148.17
	;; Response received from 192.36.148.17 (370 octets) ;; HEADER SECTION ;; id = 29522 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20211029050000 20211016040000 14748 . HsJvcdYGrK2gYrexKsauiv5LuMkG2Ou4sPWh/bH2g0sRem2TWaOZis755LSMI3BlVNhyJ66tbcGh 73hdyyXEv9j+6Jz8Cq3oglTVuO0Mei3V9TP1zZzpAjmaAUkbIQUPH/icJ7S6NvInu3kHcH8rteaA URFMBsM10SoK8OHLpp+mr58m7Ii4N4aU+fQXC0JspMjhJwVgrw4JxeCQaKBPue19UcOHqR7evgej KZ2Zb3GUzrxoAKoHrYLUuqEhhMi7J0eYXJhdSy+AbvDBPGQuasRKZdCquSXDIgiFvnZrKLrThnp8 pBk0Q6Awz/piYbLGrzVIlGu9Mg+rJYTTFpdmew== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20211029050000 20211016040000 14748 . HsJvcdYGrK2gYrexKsauiv5LuMkG2Ou4sPWh/bH2g0sRem2TWaOZis755LSMI3BlVNhyJ66tbcGh 73hdyyXEv9j+6Jz8Cq3oglTVuO0Mei3V9TP1zZzpAjmaAUkbIQUPH/icJ7S6NvInu3kHcH8rteaA URFMBsM10SoK8OHLpp+mr58m7Ii4N4aU+fQXC0JspMjhJwVgrw4JxeCQaKBPue19UcOHqR7evgej KZ2Zb3GUzrxoAKoHrYLUuqEhhMi7J0eYXJhdSy+AbvDBPGQuasRKZdCquSXDIgiFvnZrKLrThnp8 pBk0Q6Awz/piYbLGrzVIlGu9Mg+rJYTTFpdmew== )`
	RRSIG=14748 and DNSKEY=14748 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to c.gov-servers.net for GOV/DNSKEY
	Received 957 bytes from 69.36.153.30
	;; Response received from 69.36.153.30 (957 octets) ;; HEADER SECTION ;; id = 49453 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (4 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAa3P+8n+GirNhbYEPYFwmMnTA1mFaJrXBX/+HB6zAOiQNrj73Itfm0sdk1PX4wkHEgvP3Mis rlHqKS8o/gzkYetRB7GpfIiG9KMih3Oq0zi0hB0ItG2DlE9VfW83TRRBVfUI5wSydNofIVnvkYFQ jLPYzy1B9mIHGqYMtpxjY7KCkyYcKMWWhbmF0Uk4WrHJcYZlkiTMH7k1SHamjrGDed0= ) ; Key ID = 6229 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAdfjPT+uxmm9v6KKrQxtXTaa8msI9el/N3dzk2ReFJban378/fN3Pxc0DDq6zw6iBkTdzTsN NDtRvTbdK7uYfrSiPrZ8sPd2jeugzdNw7zpGzW8+cGmjA+0lETYgbE+0ivR+NDheYbcM+zOW9M8f +qTaer6tmgWxqLFNI32TP6RdFr/yfMCTDoEe+JuedI2yi0X3zVDMqV/wnedEeKrWsvc= ) ; Key ID = 57735 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20211021190254 20211006185754 7698 gov. QqvXIYkuB/aqOpBTzjLaFDWG/LeBqmala3EDo6eUenbRKd+jmMqdY5nT2auZyajQ08eAAQitd8Be 1WG7aGUOuBZ1G4bK1blM4izJvjJcni3tHo9BIAAPk0MF8o1CmqOBoHQYv4gfspjH4LNJE7q96nLa uobGpjiMSwZi2OXOSlu1ZA4qeax1UA4/dVSqPhtDVqACSx11UV+SYir5rxOd/3/4lzRZQf7SQ1kw JlQg+/vCLxVzgXTGdaoTzmoqG8aQxTc7+lSW4Gf06J7tIVO3QBH5lN7QWYqHtGs2zfxnK71bcILx p7zVagLI+ZpXPe4V335kmuKVaUgLq5ilu18HbQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAa3P+8n+GirNhbYEPYFwmMnTA1mFaJrXBX/+HB6zAOiQNrj73Itfm0sdk1PX4wkHEgvP3Mis rlHqKS8o/gzkYetRB7GpfIiG9KMih3Oq0zi0hB0ItG2DlE9VfW83TRRBVfUI5wSydNofIVnvkYFQ jLPYzy1B9mIHGqYMtpxjY7KCkyYcKMWWhbmF0Uk4WrHJcYZlkiTMH7k1SHamjrGDed0= ) ; Key ID = 6229`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAdfjPT+uxmm9v6KKrQxtXTaa8msI9el/N3dzk2ReFJban378/fN3Pxc0DDq6zw6iBkTdzTsN NDtRvTbdK7uYfrSiPrZ8sPd2jeugzdNw7zpGzW8+cGmjA+0lETYgbE+0ivR+NDheYbcM+zOW9M8f +qTaer6tmgWxqLFNI32TP6RdFr/yfMCTDoEe+JuedI2yi0X3zVDMqV/wnedEeKrWsvc= ) ; Key ID = 57735`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20211021190254 20211006185754 7698 gov. QqvXIYkuB/aqOpBTzjLaFDWG/LeBqmala3EDo6eUenbRKd+jmMqdY5nT2auZyajQ08eAAQitd8Be 1WG7aGUOuBZ1G4bK1blM4izJvjJcni3tHo9BIAAPk0MF8o1CmqOBoHQYv4gfspjH4LNJE7q96nLa uobGpjiMSwZi2OXOSlu1ZA4qeax1UA4/dVSqPhtDVqACSx11UV+SYir5rxOd/3/4lzRZQf7SQ1kw JlQg+/vCLxVzgXTGdaoTzmoqG8aQxTc7+lSW4Gf06J7tIVO3QBH5lN7QWYqHtGs2zfxnK71bcILx p7zVagLI+ZpXPe4V335kmuKVaUgLq5ilu18HbQ== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=6229 is now in the chain-of-trust
	DNSKEY=57735 is now in the chain-of-trust
	Query to c.gov-servers.net for GPODEV.GOV/A
	Received 350 bytes from 69.36.153.30
	;; Response received from 69.36.153.30 (350 octets) ;; HEADER SECTION ;; id = 2771 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GPODEV.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) GPODEV.GOV. 86400 IN NS ns4.GPODEV.GOV. GPODEV.GOV. 86400 IN NS ns3.GPODEV.GOV. GPODEV.GOV. 3600 IN DS ( 52006 8 2 40faffb5e5e0c623230b10ffb3bd1ab382885e64174f6caf9bfbd443610f8eef ) GPODEV.GOV. 3600 IN RRSIG ( DS 8 2 3600 20211022194210 20211015194210 6229 gov. Pu40UeciUEDyZZCEICe9IlzuLdowvHHldC9JdfBXD1gjaSnZBLBD76YV/F5PYN2jhWNxckeNuWhc ixvDixDUVCFchKVWz8LHOr+LXl3VffAjIMoXYGDZ4d7dU++NJ7HqGW6E+6MXbwCStgTy1y1WtTqN 9iZAGLdnd5ZY4/3r1QIJRQzmmXmbPSP9DRE56VG1R8/Izmd+bdBRw14bEB52Lg== ) ;; ADDITIONAL SECTION (3 records) ns4.GPODEV.GOV. 86400 IN A 162.140.254.200 ns3.GPODEV.GOV. 86400 IN A 162.140.15.100 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.gov-servers.net for GPODEV.GOV/DNSKEY
	Received 350 bytes from 81.19.194.30
	;; Response received from 81.19.194.30 (350 octets) ;; HEADER SECTION ;; id = 8734 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GPODEV.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) GPODEV.GOV. 86400 IN NS ns4.GPODEV.GOV. GPODEV.GOV. 86400 IN NS ns3.GPODEV.GOV. GPODEV.GOV. 3600 IN DS ( 52006 8 2 40faffb5e5e0c623230b10ffb3bd1ab382885e64174f6caf9bfbd443610f8eef ) GPODEV.GOV. 3600 IN RRSIG ( DS 8 2 3600 20211022194210 20211015194210 6229 gov. Pu40UeciUEDyZZCEICe9IlzuLdowvHHldC9JdfBXD1gjaSnZBLBD76YV/F5PYN2jhWNxckeNuWhc ixvDixDUVCFchKVWz8LHOr+LXl3VffAjIMoXYGDZ4d7dU++NJ7HqGW6E+6MXbwCStgTy1y1WtTqN 9iZAGLdnd5ZY4/3r1QIJRQzmmXmbPSP9DRE56VG1R8/Izmd+bdBRw14bEB52Lg== ) ;; ADDITIONAL SECTION (3 records) ns4.GPODEV.GOV. 86400 IN A 162.140.254.200 ns3.GPODEV.GOV. 86400 IN A 162.140.15.100 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GPODEV.GOV

GPODEV.GOV

	Checking DS between GOV and GPODEV.GOV
	Query to b.gov-servers.net for GPODEV.GOV/DS
	Received 282 bytes from 209.112.123.30
	;; Response received from 209.112.123.30 (282 octets) ;; HEADER SECTION ;; id = 12055 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GPODEV.GOV. IN DS ;; ANSWER SECTION (2 records) GPODEV.GOV. 3600 IN DS ( 52006 8 2 40faffb5e5e0c623230b10ffb3bd1ab382885e64174f6caf9bfbd443610f8eef ) GPODEV.GOV. 3600 IN RRSIG ( DS 8 2 3600 20211022194210 20211015194210 6229 gov. Pu40UeciUEDyZZCEICe9IlzuLdowvHHldC9JdfBXD1gjaSnZBLBD76YV/F5PYN2jhWNxckeNuWhc ixvDixDUVCFchKVWz8LHOr+LXl3VffAjIMoXYGDZ4d7dU++NJ7HqGW6E+6MXbwCStgTy1y1WtTqN 9iZAGLdnd5ZY4/3r1QIJRQzmmXmbPSP9DRE56VG1R8/Izmd+bdBRw14bEB52Lg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for GPODEV.GOV in the GOV zone
	DS=52006/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GPODEV.GOV. 3600 IN RRSIG ( DS 8 2 3600 20211022194210 20211015194210 6229 gov. Pu40UeciUEDyZZCEICe9IlzuLdowvHHldC9JdfBXD1gjaSnZBLBD76YV/F5PYN2jhWNxckeNuWhc ixvDixDUVCFchKVWz8LHOr+LXl3VffAjIMoXYGDZ4d7dU++NJ7HqGW6E+6MXbwCStgTy1y1WtTqN 9iZAGLdnd5ZY4/3r1QIJRQzmmXmbPSP9DRE56VG1R8/Izmd+bdBRw14bEB52Lg== )`
	RRSIG=6229 and DNSKEY=6229 verifies the DS RRset
	DS=52006/SHA-256 is now in the chain-of-trust
	`GPODEV.GOV. 3600 IN DS ( 52006 8 2 40faffb5e5e0c623230b10ffb3bd1ab382885e64174f6caf9bfbd443610f8eef )`
	Query to ns4.GPODEV.GOV for GPODEV.GOV/DNSKEY
	Received 931 bytes from 162.140.254.200
	;; Response received from 162.140.254.200 (931 octets) ;; HEADER SECTION ;; id = 46173 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GPODEV.GOV. IN DNSKEY ;; ANSWER SECTION (4 records) GPODEV.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAY/KvlBQkUKeX6wMO+uOWBAIqzvcOo9Rr+xoyFSPSoE/uybQaNHBUym2GKyClp+wwtBugAsk 3XQNRFVdJvpocmfT+MmLfHLBn5bveZ2QrTpxw6bxDxIyY0Dhg1dk75NhSR2EiH/uo6tMMlkCHyHm 9C4ZCxDbVS1/oZyj4BFbpheD ) ; Key ID = 25689 GPODEV.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAfzTTODm3nOyMqueyf/IPDyVNEfu0Rp/D/sPof5UZZ15uVa8TIQDGgx+2aD5JvVwQjZJA7HF 01dWwsFtD1YGDJ6NL8/vjyfuNDFmgM2cK7/RTzSDuvewH1124Xbzgc4tQUs67L0jbpzGD8CfLy68 xPxh5pYXGN8KE6+HwekOWtJTNZ7HpWvhGG6B0h/xB5gctWKTDqjWxk/ahI6TwqaHuuQd3GAwjA+d 43pX5z8uGdLIvTe+17XwMBnUe7T3EFbmQHksVEDAxtPqLpLy7VN1X8B3Fd78pY6uOuBMDQlK+vJP KbBdSmcRJ0QPskhfMZ4IGvdJY4dT51IQowFjnBKjGAc= ) ; Key ID = 52006 GPODEV.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20211022223424 20211015213424 25689 gpodev.gov. AuGnwl3bEhDPCY4sJixOaGhX8UtlYHeTVB1KcMYEPMFd9zNoMNmtgzGA0YoBDZtphVB9Y2zH5WXT dbU51Rtp2AEq7DbLOx4ahbjd7RD76XyazE7WBTsxpnk0RXomtEgj904BejJHZQYfM2bRKBWHmBmD BEbPhTtn8r68YE8F+gg= ) GPODEV.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20211022223424 20211015213424 52006 gpodev.gov. ZOplx2KfqB1m28iHVMV/EwIr9lbF1ZT8jlI/EDazu6fwQrRED9ZWv11PzEro4AmEncOOafhq2sow EDIzeJVHHJ919yWegcezcUH2s7EB7oTpaCbHEFrmFC5l3aVnQtolhAoWyBgqaLFiK0UB0NqwrCjE xXEz27vIhORLq/FMp3r2eusDonF40DMGiRkWGco9YIRd6ysRipjKJrWo7RxZThvalLibzHociHg9 mop+wcOl2EOv/cnZn5AENEe75Q40sFZv9nZ/CZl+REXzIbRFEGXz5Y/HPy06HXWa+MMkyV/sh1Mb WX0HXaVq68C46DaOSUmd1f42+C4TRZDBe/PQzA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GPODEV.GOV
	`GPODEV.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAY/KvlBQkUKeX6wMO+uOWBAIqzvcOo9Rr+xoyFSPSoE/uybQaNHBUym2GKyClp+wwtBugAsk 3XQNRFVdJvpocmfT+MmLfHLBn5bveZ2QrTpxw6bxDxIyY0Dhg1dk75NhSR2EiH/uo6tMMlkCHyHm 9C4ZCxDbVS1/oZyj4BFbpheD ) ; Key ID = 25689`
	`GPODEV.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAfzTTODm3nOyMqueyf/IPDyVNEfu0Rp/D/sPof5UZZ15uVa8TIQDGgx+2aD5JvVwQjZJA7HF 01dWwsFtD1YGDJ6NL8/vjyfuNDFmgM2cK7/RTzSDuvewH1124Xbzgc4tQUs67L0jbpzGD8CfLy68 xPxh5pYXGN8KE6+HwekOWtJTNZ7HpWvhGG6B0h/xB5gctWKTDqjWxk/ahI6TwqaHuuQd3GAwjA+d 43pX5z8uGdLIvTe+17XwMBnUe7T3EFbmQHksVEDAxtPqLpLy7VN1X8B3Fd78pY6uOuBMDQlK+vJP KbBdSmcRJ0QPskhfMZ4IGvdJY4dT51IQowFjnBKjGAc= ) ; Key ID = 52006`
	DNSKEY=52006/SEP is now in the chain-of-trust
	DS=52006/SHA-256 verifies DNSKEY=52006/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`GPODEV.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20211022223424 20211015213424 25689 gpodev.gov. AuGnwl3bEhDPCY4sJixOaGhX8UtlYHeTVB1KcMYEPMFd9zNoMNmtgzGA0YoBDZtphVB9Y2zH5WXT dbU51Rtp2AEq7DbLOx4ahbjd7RD76XyazE7WBTsxpnk0RXomtEgj904BejJHZQYfM2bRKBWHmBmD BEbPhTtn8r68YE8F+gg= )`
	`GPODEV.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20211022223424 20211015213424 52006 gpodev.gov. ZOplx2KfqB1m28iHVMV/EwIr9lbF1ZT8jlI/EDazu6fwQrRED9ZWv11PzEro4AmEncOOafhq2sow EDIzeJVHHJ919yWegcezcUH2s7EB7oTpaCbHEFrmFC5l3aVnQtolhAoWyBgqaLFiK0UB0NqwrCjE xXEz27vIhORLq/FMp3r2eusDonF40DMGiRkWGco9YIRd6ysRipjKJrWo7RxZThvalLibzHociHg9 mop+wcOl2EOv/cnZn5AENEe75Q40sFZv9nZ/CZl+REXzIbRFEGXz5Y/HPy06HXWa+MMkyV/sh1Mb WX0HXaVq68C46DaOSUmd1f42+C4TRZDBe/PQzA== )`
	RRSIG=25689 and DNSKEY=25689 verifies the DNSKEY RRset
	RRSIG=52006 and DNSKEY=52006/SEP verifies the DNSKEY RRset
	DNSKEY=25689 is now in the chain-of-trust
	Query to ns3.GPODEV.GOV for GPODEV.GOV/A
	Received 520 bytes from 162.140.15.100
	;; Response received from 162.140.15.100 (520 octets) ;; HEADER SECTION ;; id = 18379 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GPODEV.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) GPODEV.GOV. 900 IN SOA ( hq-hpns1.gpo.GOV. noc.gpo.GOV. 8 ;serial 10800 ;refresh 3600 ;retry 2592000 ;expire 900 ;minimum ) GPODEV.GOV. 900 IN RRSIG ( SOA 8 2 900 20211022184543 20211015174543 25689 gpodev.gov. Ofk3yiXYA9ncSECeJM1MuPEhN5lxIjJcAxyaEonChlUqYF/akX/Ua1Hr5UTNXWpgKUpOhoT08PE6 sVoxsxJX9J3P4lbdK775zdsQffXjpZ9FzuDFvWcVpqTfQnA/Ac3xWbGEj/lnJbF/yTeZ0XgQCVks Gqj7Gxl8iauNa6508aY= ) 1ufctma0nc7nsf563j26efhl6s49b66n.GPODEV.GOV. 900 IN NSEC3 ( 1 0 1 d7a6d5b7fa78c5dd 1ufctma0nc7nsf563j26efhl6s49b66o NS SOA RRSIG DNSKEY NSEC3PARAM ) 1ufctma0nc7nsf563j26efhl6s49b66n.GPODEV.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20211022184543 20211015174543 25689 gpodev.gov. ghHfKlB0fuFQ9siSwNtqkc6HHCY2eULvaTnQC+aMgwJG5c/6tMYEqJC4CjK8qdO0UTuPpKIPYPpi jToOvmuK3woa8PqF5tgNmnqxu3xhhv5eadDJ/lO5p+mNDhU5kjinwcgo2iOFd1fhiIQDZIjdEnyP 3ZT1ByRX3ulFAUFMZe8= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns3.GPODEV.GOV is authoritative for GPODEV.GOV
	Found RRSIG signed by gpodev.gov zone
	Query to ns4.GPODEV.GOV for GPODEV.GOV/SOA
	Received 840 bytes from 162.140.254.200
	;; Response received from 162.140.254.200 (840 octets) ;; HEADER SECTION ;; id = 14832 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GPODEV.GOV. IN SOA ;; ANSWER SECTION (2 records) GPODEV.GOV. 28800 IN SOA ( hq-hpns1.gpo.GOV. noc.gpo.GOV. 8 ;serial 10800 ;refresh 3600 ;retry 2592000 ;expire 900 ;minimum ) GPODEV.GOV. 28800 IN RRSIG ( SOA 8 2 28800 20211020073403 20211013063403 25689 gpodev.gov. UbFS7pDVu/V6RRZ5LF8+Vr+Php7ehvfOi5qA6m4+1kKYeWpZFaU4TFHsv4GqJX9gAUmFeIBgDadk otsrBKMh4bii0nduqndcZmOIM0w90Uw4SwD8/YDk6sUG7tVs303PKp4/peDqRU1lGXWzi5qg6iH3 dCwXN7ICA9vvNDPSy88= ) ;; AUTHORITY SECTION (3 records) GPODEV.GOV. 28800 IN NS ns4.GPODEV.GOV. GPODEV.GOV. 28800 IN NS ns3.GPODEV.GOV. GPODEV.GOV. 28800 IN RRSIG ( NS 8 2 28800 20211022213714 20211015203714 25689 gpodev.gov. J5OMDb4uzb90tpjk2IaSSb35YCXKYU9yKbEjnBqDNKn89EdNMMjIcRnqR7g1aWtR7UtDpMxIWYwR KcjZH59bQbqj5c/YMIEvNIvNIyKOm4iB/GI4Vd4ScYBI44Vv9o/wo0MhTbfSiJhIWDT3UnPmKBf0 4uTCu22rWZn24996J30= ) ;; ADDITIONAL SECTION (5 records) ns3.GPODEV.GOV. 28800 IN A 162.140.15.100 ns3.GPODEV.GOV. 28800 IN RRSIG ( A 8 3 28800 20211022213714 20211015203714 25689 gpodev.gov. hn7ytHJltJzSQgvdZE9xAsOGrzYsPsAapLw5rTQzLqy2dBeXxHIkN/G0riWRVZUQguFj3gqoe0rR nXsBJKRuJ6nrANastzhc3uRKTxAiqyur9XQPPiS3KrT0+TmCfovc3W5KBUVFm4cdMPnXo2PS6L6O 0U9dEfbjRqSiq73g/wY= ) ns4.GPODEV.GOV. 28800 IN A 162.140.254.200 ns4.GPODEV.GOV. 28800 IN RRSIG ( A 8 3 28800 20211022213714 20211015203714 25689 gpodev.gov. bdSK8OPCSab4IbbhQShrS9kL6hRCmYn73ULrqQu+aoauv7dC8Jt8wcPHTG9WTdP9BE6ie8Yc6Jbz TY6pJrCv+ZtdGhyGI/toOE/s5DVBYuSjeY3fwTltxVsfkzU6DaVpRXeiEhP8FcnoK+xR2BMmte52 cnuyjpAJu+WJMJgNrUg= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns3.GPODEV.GOV for GPODEV.GOV/A
	Received 520 bytes from 162.140.15.100
	;; Response received from 162.140.15.100 (520 octets) ;; HEADER SECTION ;; id = 40845 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GPODEV.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) GPODEV.GOV. 900 IN SOA ( hq-hpns1.gpo.GOV. noc.gpo.GOV. 8 ;serial 10800 ;refresh 3600 ;retry 2592000 ;expire 900 ;minimum ) GPODEV.GOV. 900 IN RRSIG ( SOA 8 2 900 20211022205134 20211015195134 25689 gpodev.gov. HbFMAFiHM9RCEv3QSFTgyVSyEXAiQFjz6w8ba0MWbH/P1823DhRJmj9jzaY1A6Sa/ObJhrC2GyOW 0S7g8R/CqN0Kg03AsGPt3t7JMUTSkB61Q9obRV24+QMWLCWH7Qp9fJyL7dnBHitzemCMjTqVQBQA twUReLZPXEu3K6pyObc= ) 23ss4qn9h9t96278klgos6qrockc1n41.GPODEV.GOV. 900 IN NSEC3 ( 1 0 1 10d01a52830291da 23ss4qn9h9t96278klgos6qrockc1n42 NS SOA RRSIG DNSKEY NSEC3PARAM ) 23ss4qn9h9t96278klgos6qrockc1n41.GPODEV.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20211022205134 20211015195134 25689 gpodev.gov. T87SMCxyW0zV9TjjJXvWMiveaX6mNUxPgRRc5eFkXOB9+20I1bB5vMHrS8eTTAkyv5yhb6Ma3lG6 w2QEZneEUSUVrLw8L7lropY06FglvgjZ80at9HdJszLBob81E4D2kXGtvcFeUmAZhCoE4tf9XmEq 4ZoVQg+bQrP12U6YuxI= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`GPODEV.GOV. 900 IN RRSIG ( SOA 8 2 900 20211022184543 20211015174543 25689 gpodev.gov. Ofk3yiXYA9ncSECeJM1MuPEhN5lxIjJcAxyaEonChlUqYF/akX/Ua1Hr5UTNXWpgKUpOhoT08PE6 sVoxsxJX9J3P4lbdK775zdsQffXjpZ9FzuDFvWcVpqTfQnA/Ac3xWbGEj/lnJbF/yTeZ0XgQCVks Gqj7Gxl8iauNa6508aY= )`
	RRSIG=25689 and DNSKEY=25689 verifies the SOA RRset

GPODEV.GOV

	Query to ns4.GPODEV.GOV for GPODEV.GOV/A
	Received 520 bytes from 162.140.254.200
	;; Response received from 162.140.254.200 (520 octets) ;; HEADER SECTION ;; id = 22543 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GPODEV.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) GPODEV.GOV. 900 IN SOA ( hq-hpns1.gpo.GOV. noc.gpo.GOV. 8 ;serial 10800 ;refresh 3600 ;retry 2592000 ;expire 900 ;minimum ) GPODEV.GOV. 900 IN RRSIG ( SOA 8 2 900 20211022213713 20211015203713 25689 gpodev.gov. BIfRR4RltmCmr8Sh701Bghk8Y70w7ktwNsm9rm9JZfXZZQyj37+O7dyXnmuG6X7r54KygLTOgXFP lyGdxdeUBbkP2FOvbSJ1ehWq8zKmA2su9e/QjRehIwWwPM7MpajDMG5/0jobu1NEVplnbPTULXqB IKoVfA33kjhRW7Y33jU= ) pfd93aes94c0jmpgnbh3fp9b3u9g8jqa.GPODEV.GOV. 900 IN NSEC3 ( 1 0 1 500528b6912cd0cb pfd93aes94c0jmpgnbh3fp9b3u9g8jqb NS SOA RRSIG DNSKEY NSEC3PARAM ) pfd93aes94c0jmpgnbh3fp9b3u9g8jqa.GPODEV.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20211022223654 20211015213654 25689 gpodev.gov. YmrBtios9uHqdextiKFLp9fnrgQ51O/tHpaLX5GEHlh7CdLAY/k9OC4daCSV3RZoVUK7VqNK+vLb yt2zFKU4cxhVOQNn8WFKiaXFj+GUN1FXNifgDOHxWtegI9LBAlsdYQSrv3S31S9NsEIbpXFyLOdN sj0C3H/w9x0iInE7gEs= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns4.GPODEV.GOV is authoritative for GPODEV.GOV
	Found RRSIG signed by gpodev.gov zone
	Query to ns4.GPODEV.GOV for GPODEV.GOV/A
	Received 520 bytes from 162.140.254.200
	;; Response received from 162.140.254.200 (520 octets) ;; HEADER SECTION ;; id = 23427 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GPODEV.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) GPODEV.GOV. 900 IN SOA ( hq-hpns1.gpo.GOV. noc.gpo.GOV. 8 ;serial 10800 ;refresh 3600 ;retry 2592000 ;expire 900 ;minimum ) GPODEV.GOV. 900 IN RRSIG ( SOA 8 2 900 20211022213713 20211015203713 25689 gpodev.gov. BIfRR4RltmCmr8Sh701Bghk8Y70w7ktwNsm9rm9JZfXZZQyj37+O7dyXnmuG6X7r54KygLTOgXFP lyGdxdeUBbkP2FOvbSJ1ehWq8zKmA2su9e/QjRehIwWwPM7MpajDMG5/0jobu1NEVplnbPTULXqB IKoVfA33kjhRW7Y33jU= ) pfd93aes94c0jmpgnbh3fp9b3u9g8jqa.GPODEV.GOV. 900 IN NSEC3 ( 1 0 1 500528b6912cd0cb pfd93aes94c0jmpgnbh3fp9b3u9g8jqb NS SOA RRSIG DNSKEY NSEC3PARAM ) pfd93aes94c0jmpgnbh3fp9b3u9g8jqa.GPODEV.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20211022223654 20211015213654 25689 gpodev.gov. YmrBtios9uHqdextiKFLp9fnrgQ51O/tHpaLX5GEHlh7CdLAY/k9OC4daCSV3RZoVUK7VqNK+vLb yt2zFKU4cxhVOQNn8WFKiaXFj+GUN1FXNifgDOHxWtegI9LBAlsdYQSrv3S31S9NsEIbpXFyLOdN sj0C3H/w9x0iInE7gEs= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`GPODEV.GOV. 900 IN RRSIG ( SOA 8 2 900 20211022213713 20211015203713 25689 gpodev.gov. BIfRR4RltmCmr8Sh701Bghk8Y70w7ktwNsm9rm9JZfXZZQyj37+O7dyXnmuG6X7r54KygLTOgXFP lyGdxdeUBbkP2FOvbSJ1ehWq8zKmA2su9e/QjRehIwWwPM7MpajDMG5/0jobu1NEVplnbPTULXqB IKoVfA33kjhRW7Y33jU= )`
	RRSIG=25689 and DNSKEY=25689 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test GPODEV.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: