Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2020-01-24 03:12:13 UTC, NTP stratum 4

Analyzing DNSSEC problems for IRSNET.GOV

.
Found 2 DNSKEY records for .
DS=20326/SHA-256 verifies DNSKEY=20326/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
GOV
Found 2 DS records for GOV in the . zone
DS=7698/SHA-256 has algorithm RSASHA256
DS=7698/SHA-1 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=33853 and DNSKEY=33853 verifies the DS RRset
Found 2 DNSKEY records for GOV
DS=7698/SHA-256 verifies DNSKEY=7698/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
IRSNET.GOV
Found 2 DS records for IRSNET.GOV in the GOV zone
DS=57982/SHA-256 has algorithm RSASHA256
DS=36691/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=36558 and DNSKEY=36558 verifies the DS RRset
Found 5 DNSKEY records for IRSNET.GOV
DS=36691/SHA-256 verifies DNSKEY=36691/SEP
DS=57982/SHA-256 verifies DNSKEY=57982/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=57982 and DNSKEY=57982/SEP verifies the DNSKEY RRset
ns4.irs.GOV serial (2010083663) differs from ns5.irs.GOV serial (2010083662)
ns3.irs.GOV serial (2010083663) differs from ns5.irs.GOV serial (2010083662)
ns1.irs.GOV serial (2010083663) differs from ns5.irs.GOV serial (2010083662)
ns2.irs.GOV serial (2010083663) differs from ns5.irs.GOV serial (2010083662)
Found 1 RRSIGs over SOA RRset
RRSIG=28923 and DNSKEY=28923 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test IRSNET.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options