DNSSEC Analyzer

Domain Name:

Time: 2020-01-26 04:59:09 UTC, NTP stratum 4

Analyzing DNSSEC problems for OFR.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (864 bytes) ;; HEADER SECTION ;; id = 42805 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20200211000000 20200121000000 20326 . UaaPoqlBlRixcabCWMJ9jVvevx+Sp8W5rMt06Tozfg/gefIspEKxw4fx22mRaAQZzdHq9Lt+Who4 YpUX95CDrgDYtYJ9NOyICRNlWnY9FNqOW0AreCmEK0qqS52xYb72hJYpFrCILGLD6jl4Ar0LFi29 iXnVLQ99+SvD8PPHHkEiIu1WhlES7taEavtbKijyjLYXwagQxSQCzMgkbWN1+S78kJGZEMaBODTZ uiiGIw5Jy3OPAQxHQyLTElR5ZuEg59/sSnTCEfmoXcxG9/g6O1qWs6d9hDVadKfXhHr8OTXGoB25 Ttp3CyZGdSqRkCwwJpWJ9SlaL+khcJoLFqwm8w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20200211000000 20200121000000 20326 . UaaPoqlBlRixcabCWMJ9jVvevx+Sp8W5rMt06Tozfg/gefIspEKxw4fx22mRaAQZzdHq9Lt+Who4 YpUX95CDrgDYtYJ9NOyICRNlWnY9FNqOW0AreCmEK0qqS52xYb72hJYpFrCILGLD6jl4Ar0LFi29 iXnVLQ99+SvD8PPHHkEiIu1WhlES7taEavtbKijyjLYXwagQxSQCzMgkbWN1+S78kJGZEMaBODTZ uiiGIw5Jy3OPAQxHQyLTElR5ZuEg59/sSnTCEfmoXcxG9/g6O1qWs6d9hDVadKfXhHr8OTXGoB25 Ttp3CyZGdSqRkCwwJpWJ9SlaL+khcJoLFqwm8w== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=33853 is now in the chain-of-trust
	Query to e.root-servers.net for OFR.GOV/A
	Error querying e.root-servers.net/2001:500:a8:0:0:0:0:e for OFR.GOV/A: 'IPv6 transport disabled'
	Received 662 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (662 bytes) ;; HEADER SECTION ;; id = 6408 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; OFR.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20200207200000 20200125190000 33853 . XtWz0IP0PQZP4/jVj+8m5GuWflFNSMFkKYwMx8ECpXIoA++79cuxQlzgcn8XeDDxIG5CDD7oNBRu DJkauqyYSnZDNV5sxITqKvPxEHy+sGg/MsJfvxPNb0gj4VrqZfS71JZ8l2G5tXQr+QCvw0i5Bz/D FNr3DyJJbziIvb6aIBli0mVYBGOeA7DdLTM9HnzpB7WwuByW6ieEVjaJo0CP9fyArAErjwpZKrFM 2vyMaZ0G6VfcWiGafkWVZ/yelcdU97RtLkMw1ygrLn4ULl66BZAPVe1Wg6RDDYIVKatA9oB47YLJ zP6LcrgewsVYGc2deBBDeIGpycRWuAoQCixFDQ== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to g.root-servers.net for GOV/DNSKEY
	Received 661 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (661 bytes) ;; HEADER SECTION ;; id = 24991 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20200207200000 20200125190000 33853 . XtWz0IP0PQZP4/jVj+8m5GuWflFNSMFkKYwMx8ECpXIoA++79cuxQlzgcn8XeDDxIG5CDD7oNBRu DJkauqyYSnZDNV5sxITqKvPxEHy+sGg/MsJfvxPNb0gj4VrqZfS71JZ8l2G5tXQr+QCvw0i5Bz/D FNr3DyJJbziIvb6aIBli0mVYBGOeA7DdLTM9HnzpB7WwuByW6ieEVjaJo0CP9fyArAErjwpZKrFM 2vyMaZ0G6VfcWiGafkWVZ/yelcdU97RtLkMw1ygrLn4ULl66BZAPVe1Wg6RDDYIVKatA9oB47YLJ zP6LcrgewsVYGc2deBBDeIGpycRWuAoQCixFDQ== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to a.root-servers.net for GOV/DS
	Error querying a.root-servers.net/2001:503:ba3e:0:0:0:2:30 for GOV/DS: 'IPv6 transport disabled'
	Received 403 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (403 bytes) ;; HEADER SECTION ;; id = 54205 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20200207200000 20200125190000 33853 . XtWz0IP0PQZP4/jVj+8m5GuWflFNSMFkKYwMx8ECpXIoA++79cuxQlzgcn8XeDDxIG5CDD7oNBRu DJkauqyYSnZDNV5sxITqKvPxEHy+sGg/MsJfvxPNb0gj4VrqZfS71JZ8l2G5tXQr+QCvw0i5Bz/D FNr3DyJJbziIvb6aIBli0mVYBGOeA7DdLTM9HnzpB7WwuByW6ieEVjaJo0CP9fyArAErjwpZKrFM 2vyMaZ0G6VfcWiGafkWVZ/yelcdU97RtLkMw1ygrLn4ULl66BZAPVe1Wg6RDDYIVKatA9oB47YLJ zP6LcrgewsVYGc2deBBDeIGpycRWuAoQCixFDQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20200207200000 20200125190000 33853 . XtWz0IP0PQZP4/jVj+8m5GuWflFNSMFkKYwMx8ECpXIoA++79cuxQlzgcn8XeDDxIG5CDD7oNBRu DJkauqyYSnZDNV5sxITqKvPxEHy+sGg/MsJfvxPNb0gj4VrqZfS71JZ8l2G5tXQr+QCvw0i5Bz/D FNr3DyJJbziIvb6aIBli0mVYBGOeA7DdLTM9HnzpB7WwuByW6ieEVjaJo0CP9fyArAErjwpZKrFM 2vyMaZ0G6VfcWiGafkWVZ/yelcdU97RtLkMw1ygrLn4ULl66BZAPVe1Wg6RDDYIVKatA9oB47YLJ zP6LcrgewsVYGc2deBBDeIGpycRWuAoQCixFDQ== )`
	RRSIG=33853 and DNSKEY=33853 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to a.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (777 bytes) ;; HEADER SECTION ;; id = 4663 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAdccuiuxqTxvRcMVh4o9DCfREPNTe3hGEklbdV+L99lKySyIzskGLJ6XDBrWgBeY7ZRSOWGQ 2eHdQLN61fRyqWpVLpNzqaIz/UmMP74VPBCz4QXRDkG4hDO3uifCDVs8Jex4TrYT+hGNYmprbsrq dVQCgeeHc7UMKI/SjusQ4uTKgJ9CWt02/AgK+zKFi3LCBVDGnUwE2kUOL1b0MWfT0ks= ) ; Key ID = 36558 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200204200254 20200120195754 7698 gov. AW2ehlTHCkvsoKYTELKLWDsRb5hmUce7lXmZl5v8iXW1lcvUgYHjl4mKrTmw0o/ZQunLH8tjhL2a nbCy8GymuXffQUXpsWfCtMDd1j2lQBL2ECPw418yOOCqTnoRI6DJvvArASkqLeXHX2bAu4/351ug E/d63O3H30850u+Tgakg/vlTpsNCMxNeJExRDBbwCp4VD7PZN75TMmRM4Y4McQsoGiEdDCsFJXnV 9SP2S24Y/uKSLySFDQ0qZ41uZUoEZaMclbD3Uh6AFlzapQggME06B8zjfauOHVvpfak1QgzXqDKf kWoOradUBw+7eU1rITOiOmukHsMHNdvjdDoqSA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAdccuiuxqTxvRcMVh4o9DCfREPNTe3hGEklbdV+L99lKySyIzskGLJ6XDBrWgBeY7ZRSOWGQ 2eHdQLN61fRyqWpVLpNzqaIz/UmMP74VPBCz4QXRDkG4hDO3uifCDVs8Jex4TrYT+hGNYmprbsrq dVQCgeeHc7UMKI/SjusQ4uTKgJ9CWt02/AgK+zKFi3LCBVDGnUwE2kUOL1b0MWfT0ks= ) ; Key ID = 36558`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200204200254 20200120195754 7698 gov. AW2ehlTHCkvsoKYTELKLWDsRb5hmUce7lXmZl5v8iXW1lcvUgYHjl4mKrTmw0o/ZQunLH8tjhL2a nbCy8GymuXffQUXpsWfCtMDd1j2lQBL2ECPw418yOOCqTnoRI6DJvvArASkqLeXHX2bAu4/351ug E/d63O3H30850u+Tgakg/vlTpsNCMxNeJExRDBbwCp4VD7PZN75TMmRM4Y4McQsoGiEdDCsFJXnV 9SP2S24Y/uKSLySFDQ0qZ41uZUoEZaMclbD3Uh6AFlzapQggME06B8zjfauOHVvpfak1QgzXqDKf kWoOradUBw+7eU1rITOiOmukHsMHNdvjdDoqSA== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=36558 is now in the chain-of-trust
	Query to c.gov-servers.net for OFR.GOV/A
	Received 471 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (471 bytes) ;; HEADER SECTION ;; id = 63887 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; OFR.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) OFR.GOV. 86400 IN NS ns2.gpo.GOV. OFR.GOV. 86400 IN NS ns1.gpo.GOV. OFR.GOV. 3600 IN DS ( 31323 7 2 0edea5f86d60d49b9552cbc87f196f30dfab6bd9409eaa3f2c6c912747632bac ) OFR.GOV. 3600 IN DS 1740 7 1 60f84f23e90bd3354f730b3426a14483d38435be OFR.GOV. 3600 IN DS 31323 7 1 41c07d85c73d77778e2bc955e02431506516236f OFR.GOV. 3600 IN DS ( 1740 7 2 b302108d3176ec47387431a115773e607eacaa9d5add45a43ca85f7584badacb ) OFR.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200201221007 20200125221007 36558 gov. VPykn7LItk+DVVA6IkLtYyuzwHWqODbqYzKUS1tpNG7aIVn4YaE/kfCYbs3CYHrgzgtx1LjuuTk3 OQ867XKRbnia1CKkZ3PH3fni5oiYl5v20S8yJhWOv4thdcoUHM8x1wDL+wwoEsd+oGoRQCtkzpS6 DTwIOfoDHWpjugnyiPybawojElxq8ipYjAGi3fkbZxeyWP+J4rN2FTZdKJEvlQ== ) ;; ADDITIONAL SECTION (3 records) ns2.gpo.GOV. 86400 IN A 162.140.252.180 ns1.gpo.GOV. 86400 IN A 162.140.64.100 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.gov-servers.net for OFR.GOV/DNSKEY
	Received 471 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (471 bytes) ;; HEADER SECTION ;; id = 19520 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; OFR.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) OFR.GOV. 86400 IN NS ns2.gpo.GOV. OFR.GOV. 86400 IN NS ns1.gpo.GOV. OFR.GOV. 3600 IN DS ( 31323 7 2 0edea5f86d60d49b9552cbc87f196f30dfab6bd9409eaa3f2c6c912747632bac ) OFR.GOV. 3600 IN DS 1740 7 1 60f84f23e90bd3354f730b3426a14483d38435be OFR.GOV. 3600 IN DS 31323 7 1 41c07d85c73d77778e2bc955e02431506516236f OFR.GOV. 3600 IN DS ( 1740 7 2 b302108d3176ec47387431a115773e607eacaa9d5add45a43ca85f7584badacb ) OFR.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200201221007 20200125221007 36558 gov. VPykn7LItk+DVVA6IkLtYyuzwHWqODbqYzKUS1tpNG7aIVn4YaE/kfCYbs3CYHrgzgtx1LjuuTk3 OQ867XKRbnia1CKkZ3PH3fni5oiYl5v20S8yJhWOv4thdcoUHM8x1wDL+wwoEsd+oGoRQCtkzpS6 DTwIOfoDHWpjugnyiPybawojElxq8ipYjAGi3fkbZxeyWP+J4rN2FTZdKJEvlQ== ) ;; ADDITIONAL SECTION (3 records) ns2.gpo.GOV. 86400 IN A 162.140.252.180 ns1.gpo.GOV. 86400 IN A 162.140.64.100 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone OFR.GOV

OFR.GOV

	Checking DS between GOV and OFR.GOV
	Query to d.gov-servers.net for OFR.GOV/DS
	Received 399 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (399 bytes) ;; HEADER SECTION ;; id = 30904 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; OFR.GOV. IN DS ;; ANSWER SECTION (5 records) OFR.GOV. 3600 IN DS ( 31323 7 2 0edea5f86d60d49b9552cbc87f196f30dfab6bd9409eaa3f2c6c912747632bac ) OFR.GOV. 3600 IN DS 1740 7 1 60f84f23e90bd3354f730b3426a14483d38435be OFR.GOV. 3600 IN DS 31323 7 1 41c07d85c73d77778e2bc955e02431506516236f OFR.GOV. 3600 IN DS ( 1740 7 2 b302108d3176ec47387431a115773e607eacaa9d5add45a43ca85f7584badacb ) OFR.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200201221007 20200125221007 36558 gov. VPykn7LItk+DVVA6IkLtYyuzwHWqODbqYzKUS1tpNG7aIVn4YaE/kfCYbs3CYHrgzgtx1LjuuTk3 OQ867XKRbnia1CKkZ3PH3fni5oiYl5v20S8yJhWOv4thdcoUHM8x1wDL+wwoEsd+oGoRQCtkzpS6 DTwIOfoDHWpjugnyiPybawojElxq8ipYjAGi3fkbZxeyWP+J4rN2FTZdKJEvlQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for OFR.GOV in the GOV zone
	DS=31323/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=1740/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=31323/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=1740/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`OFR.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200201221007 20200125221007 36558 gov. VPykn7LItk+DVVA6IkLtYyuzwHWqODbqYzKUS1tpNG7aIVn4YaE/kfCYbs3CYHrgzgtx1LjuuTk3 OQ867XKRbnia1CKkZ3PH3fni5oiYl5v20S8yJhWOv4thdcoUHM8x1wDL+wwoEsd+oGoRQCtkzpS6 DTwIOfoDHWpjugnyiPybawojElxq8ipYjAGi3fkbZxeyWP+J4rN2FTZdKJEvlQ== )`
	RRSIG=36558 and DNSKEY=36558 verifies the DS RRset
	DS=31323/SHA-256 is now in the chain-of-trust
	DS=1740/SHA-1 is now in the chain-of-trust
	`OFR.GOV. 3600 IN DS ( 31323 7 2 0edea5f86d60d49b9552cbc87f196f30dfab6bd9409eaa3f2c6c912747632bac )`
	`OFR.GOV. 3600 IN DS 1740 7 1 60f84f23e90bd3354f730b3426a14483d38435be`
	`OFR.GOV. 3600 IN DS 31323 7 1 41c07d85c73d77778e2bc955e02431506516236f`
	`OFR.GOV. 3600 IN DS ( 1740 7 2 b302108d3176ec47387431a115773e607eacaa9d5add45a43ca85f7584badacb )`
	Query to ns2.gpo.GOV for OFR.GOV/DNSKEY
	Received 1808 bytes from 162.140.252.180
	;; Answer received from 162.140.252.180 (1808 bytes) ;; HEADER SECTION ;; id = 63622 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; OFR.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) OFR.GOV. 604800 IN DNSKEY ( 257 3 7 AwEAAbRxlT47/1MnvVi3FsoiFL5Osb2jMH3eVsfAntQ0lSDxIqIaZ6wnS5VAqueO1MfhnaK8L8pX JIlExmb5Me/u2YhjAc06jQU2CTlGS7wWbN+iVU2Z19i4rLGPf8Iuxn9NAp/D8+F8aaMNv8FwPZGH vjD1yuqCXK2MDSlNVZd/ZakLP01XQ+sLbtHgtF6fadzoD1cpAKueLqTyGtjYvwD1Z4NdP8xjrtUT SCN6+Qyz0Buavwp1Iwmy6LhtrUZSK5gDzKsXrci0kaUSzCNp36fZCbxuoHZ0moeTEpEiG66Kv8oU c01E2C3PUMYrw1TrwX0psCca0dEZmGzwLqMX5jTNG2k= ) ; Key ID = 1740 OFR.GOV. 604800 IN DNSKEY ( 256 3 7 AwEAAb+71g2zPqFmP8qAfZlNxBCNZCT4i0GNphelXuKRi7/zC0FXhpr3tNQ2z0hPfmKbsxCtx+L3 dMiculfdLSdA3ZPFNkFx2dCyoZWgmH4IVznBSMX2GKiXwQKguJgrpLB+zQgETwOhI2EhaRyQd6We 55Aea9GL0Dqgm+M5T7iopGyd ) ; Key ID = 46187 OFR.GOV. 604800 IN DNSKEY ( 256 3 7 AwEAAcoIyAzvOHQ1oXChYjmkTbQyiC9FDALMBXk+OQlWIO/JrdCzAQvIRf4dvjRa287IzfrjJlBq svQyVblDmVMZAMcShFGj9reywHgLabripQ3oVIVpBUdgYsuH7Le4JKqi20XVTQQGACB25kgYc8FF 4hic89o3siYZX54VPCmG32nj ) ; Key ID = 51020 OFR.GOV. 604800 IN DNSKEY ( 257 3 7 AwEAAbC9P55et9G3yArIZrxfmY/rC06SwlucFVYp1Hvj8eQC+5Bc4qRxI6l/JC3uAiiRyUFZAr19 NC7zT4jy0Gw+ILVkjxX/qtELPIJFMfo1rifhJtyrsdyTnc+InhIWnrXTsRHpDVQK0UwpWgH2aYgu WujvWYk9hFpVM8kn1dw+cVAmB/jIrAzBsfz/SsnzMRC+TMnFTq+HIZkP1vP3ObcyImv1n1xFJ5vF 4nGq4qDLiNj3S9f4+5SiH5lhDEeI0eGHth35aiz50eSaIctSRGkDcVJPPVx9wdnUs+6q3EUX5Oy+ f2JIlgxG4c0OLtfTsEupFdx5XwK0hr1F5evYWLnSvOs= ) ; Key ID = 31323 OFR.GOV. 604800 IN RRSIG ( DNSKEY 7 2 604800 20200209030913 20200126022828 1740 ofr.gov. ewC+1UXIFE7XbWhgrhITvPu2CXmTEnPju6S2i9jUSMgTV+OgNnSwJuX5E1n6GsBHKf9pHYbzJWna gGIL0fkPkHWlWV6MHtDXUkOSDzLD0sA/pgoUKW5VgsblvHhchaSEjtNlr7BRS/vSSVWm1GcTADU4 KXQEjzgsicyVXOyQJvXnOEJR3E6LzA2C6RkvZUm/KDpIMcu4dRmY3B3PSPqRP910lm18tv68BjSZ LZ1c1UfRDoWWZuRLSmfXMO16t+UOMtytZ0CDuM0nlSvubQoRQHxrcbuw8Kj/QWlvtwi5V3uUNmMa 8BzSABKzlmQYFx2kmRv7WVnaIj5x5QUDcyGPaA== ) ofr.gov. 604800 IN RRSIG ( DNSKEY 7 2 604800 20200209030913 20200126022828 31323 ofr.gov. jT4HkelTtNKciDBw5J8FqHs0Moz8hXqIy9Bw/ozyGS8TLHVeto2jNQ7/6yey99+6fLKHFV0KnZbt d4VwV0JJxSmqvbi3nQTXS49avjhsM83MX3JEqXW8PQAHbL4aUQ91h9ZhOpLJBYxgejUMbKhcrNGi AJM4obR2eirsALWY9UWPR6TvCxvA9mmZiH2u07rPXILbcjZPbGA8E5+TfiP7zhOa/V5c7kWWvYHi j7w/ev/etxIQ75M3L7xrOYVxVjj+AXRdfX/xiHGDJw5Af7aF6fYkR/uVGEVvj7szio4GsFaZWRpy s1+1RxJLxocfm1m4OS9wg+Q1jUZq+vZ8tQyRpg== ) ofr.gov. 604800 IN RRSIG ( DNSKEY 7 2 604800 20200209030913 20200126022828 46187 ofr.gov. uJSOLsefloJBatuffhoT2IYWzUnaQdz3Ub1yzJx5F21JRvnsrZPnQbNWWu8+i6DQqG/+WQcfuB7n MlHfSwu2oJvy91CmYCMpqiRnC0EQOpsLaQ9QwnO4TMvh4+tjbekyZrVqsEUKzVlma4AMOjh7nBcL t+jd1pEGYX2x9Fb56SM= ) ofr.gov. 604800 IN RRSIG ( DNSKEY 7 2 604800 20200209030913 20200126022828 51020 ofr.gov. T7BYNWI7GdQWWu9RcDhqoB7yXm1IeuAX1GUlia3D8LNDC9Ige//SNmFlQ54jJHye7HEy5Fua+Sbb GilnqUdVYBjqtPSq+SyhyBnhC6D5LAgUOVvXfClZIE6qZ7SFAYFbODO4VC06HxQan63iFMv3Ot5L 6EZy88gubbj/sLovADY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for OFR.GOV
	`OFR.GOV. 604800 IN DNSKEY ( 257 3 7 AwEAAbRxlT47/1MnvVi3FsoiFL5Osb2jMH3eVsfAntQ0lSDxIqIaZ6wnS5VAqueO1MfhnaK8L8pX JIlExmb5Me/u2YhjAc06jQU2CTlGS7wWbN+iVU2Z19i4rLGPf8Iuxn9NAp/D8+F8aaMNv8FwPZGH vjD1yuqCXK2MDSlNVZd/ZakLP01XQ+sLbtHgtF6fadzoD1cpAKueLqTyGtjYvwD1Z4NdP8xjrtUT SCN6+Qyz0Buavwp1Iwmy6LhtrUZSK5gDzKsXrci0kaUSzCNp36fZCbxuoHZ0moeTEpEiG66Kv8oU c01E2C3PUMYrw1TrwX0psCca0dEZmGzwLqMX5jTNG2k= ) ; Key ID = 1740`
	`OFR.GOV. 604800 IN DNSKEY ( 256 3 7 AwEAAb+71g2zPqFmP8qAfZlNxBCNZCT4i0GNphelXuKRi7/zC0FXhpr3tNQ2z0hPfmKbsxCtx+L3 dMiculfdLSdA3ZPFNkFx2dCyoZWgmH4IVznBSMX2GKiXwQKguJgrpLB+zQgETwOhI2EhaRyQd6We 55Aea9GL0Dqgm+M5T7iopGyd ) ; Key ID = 46187`
	`OFR.GOV. 604800 IN DNSKEY ( 256 3 7 AwEAAcoIyAzvOHQ1oXChYjmkTbQyiC9FDALMBXk+OQlWIO/JrdCzAQvIRf4dvjRa287IzfrjJlBq svQyVblDmVMZAMcShFGj9reywHgLabripQ3oVIVpBUdgYsuH7Le4JKqi20XVTQQGACB25kgYc8FF 4hic89o3siYZX54VPCmG32nj ) ; Key ID = 51020`
	`OFR.GOV. 604800 IN DNSKEY ( 257 3 7 AwEAAbC9P55et9G3yArIZrxfmY/rC06SwlucFVYp1Hvj8eQC+5Bc4qRxI6l/JC3uAiiRyUFZAr19 NC7zT4jy0Gw+ILVkjxX/qtELPIJFMfo1rifhJtyrsdyTnc+InhIWnrXTsRHpDVQK0UwpWgH2aYgu WujvWYk9hFpVM8kn1dw+cVAmB/jIrAzBsfz/SsnzMRC+TMnFTq+HIZkP1vP3ObcyImv1n1xFJ5vF 4nGq4qDLiNj3S9f4+5SiH5lhDEeI0eGHth35aiz50eSaIctSRGkDcVJPPVx9wdnUs+6q3EUX5Oy+ f2JIlgxG4c0OLtfTsEupFdx5XwK0hr1F5evYWLnSvOs= ) ; Key ID = 31323`
	DNSKEY=1740/SEP is now in the chain-of-trust
	DS=1740/SHA-1 verifies DNSKEY=1740/SEP
	DS=1740/SHA-256 verifies DNSKEY=1740/SEP
	DNSKEY=31323/SEP is now in the chain-of-trust
	DS=31323/SHA-256 verifies DNSKEY=31323/SEP
	DS=31323/SHA-1 verifies DNSKEY=31323/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`OFR.GOV. 604800 IN RRSIG ( DNSKEY 7 2 604800 20200209030913 20200126022828 1740 ofr.gov. ewC+1UXIFE7XbWhgrhITvPu2CXmTEnPju6S2i9jUSMgTV+OgNnSwJuX5E1n6GsBHKf9pHYbzJWna gGIL0fkPkHWlWV6MHtDXUkOSDzLD0sA/pgoUKW5VgsblvHhchaSEjtNlr7BRS/vSSVWm1GcTADU4 KXQEjzgsicyVXOyQJvXnOEJR3E6LzA2C6RkvZUm/KDpIMcu4dRmY3B3PSPqRP910lm18tv68BjSZ LZ1c1UfRDoWWZuRLSmfXMO16t+UOMtytZ0CDuM0nlSvubQoRQHxrcbuw8Kj/QWlvtwi5V3uUNmMa 8BzSABKzlmQYFx2kmRv7WVnaIj5x5QUDcyGPaA== )`
	`ofr.gov. 604800 IN RRSIG ( DNSKEY 7 2 604800 20200209030913 20200126022828 31323 ofr.gov. jT4HkelTtNKciDBw5J8FqHs0Moz8hXqIy9Bw/ozyGS8TLHVeto2jNQ7/6yey99+6fLKHFV0KnZbt d4VwV0JJxSmqvbi3nQTXS49avjhsM83MX3JEqXW8PQAHbL4aUQ91h9ZhOpLJBYxgejUMbKhcrNGi AJM4obR2eirsALWY9UWPR6TvCxvA9mmZiH2u07rPXILbcjZPbGA8E5+TfiP7zhOa/V5c7kWWvYHi j7w/ev/etxIQ75M3L7xrOYVxVjj+AXRdfX/xiHGDJw5Af7aF6fYkR/uVGEVvj7szio4GsFaZWRpy s1+1RxJLxocfm1m4OS9wg+Q1jUZq+vZ8tQyRpg== )`
	`ofr.gov. 604800 IN RRSIG ( DNSKEY 7 2 604800 20200209030913 20200126022828 46187 ofr.gov. uJSOLsefloJBatuffhoT2IYWzUnaQdz3Ub1yzJx5F21JRvnsrZPnQbNWWu8+i6DQqG/+WQcfuB7n MlHfSwu2oJvy91CmYCMpqiRnC0EQOpsLaQ9QwnO4TMvh4+tjbekyZrVqsEUKzVlma4AMOjh7nBcL t+jd1pEGYX2x9Fb56SM= )`
	`ofr.gov. 604800 IN RRSIG ( DNSKEY 7 2 604800 20200209030913 20200126022828 51020 ofr.gov. T7BYNWI7GdQWWu9RcDhqoB7yXm1IeuAX1GUlia3D8LNDC9Ige//SNmFlQ54jJHye7HEy5Fua+Sbb GilnqUdVYBjqtPSq+SyhyBnhC6D5LAgUOVvXfClZIE6qZ7SFAYFbODO4VC06HxQan63iFMv3Ot5L 6EZy88gubbj/sLovADY= )`
	RRSIG=1740 and DNSKEY=1740/SEP verifies the DNSKEY RRset
	RRSIG=31323 and DNSKEY=31323/SEP verifies the DNSKEY RRset
	RRSIG=46187 and DNSKEY=46187 verifies the DNSKEY RRset
	RRSIG=51020 and DNSKEY=51020 verifies the DNSKEY RRset
	DNSKEY=46187 is now in the chain-of-trust
	DNSKEY=51020 is now in the chain-of-trust
	Query to ns1.gpo.GOV for OFR.GOV/A
	Received 764 bytes from 162.140.64.100
	;; Answer received from 162.140.64.100 (764 bytes) ;; HEADER SECTION ;; id = 53391 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; OFR.GOV. IN A ;; ANSWER SECTION (3 records) OFR.GOV. 300 IN A 162.140.254.92 OFR.GOV. 300 IN RRSIG ( A 7 2 300 20200205102043 20200122095817 46187 OFR.GOV. JKQEUuxIb9IxOap1RULpJOqAY6ylno9voSRICM+8HH0hBeXXvUHcT1+7n/Gcf0gsYQg9onSaBePz oFt5Hc+L3pVGlXVFZTBjXkaIn+e6N0+GXXBMjCDprcpyO/axmMZGx/DInUiemjDHbfzqK3aVurNG HagHWxhaMtVWUksOis4= ) OFR.GOV. 300 IN RRSIG ( A 7 2 300 20200205102043 20200122095817 51020 OFR.GOV. cg5o2nd4Stv4t10M2d3+Ye+kXW3ZmSrfDWj49NJqvUZTp2TGea5uLW0nUGKyqCIOZvP51DsMr9T1 TCWzsdtNnSL9pwjwdIuW9qXjm739Nb0In1OkxJ6NhBxWjqDwcb2ZcM3ZTbU98i67RMIxDgHI36aY d5cOhHdIU9xAUL9AUpo= ) ;; AUTHORITY SECTION (4 records) OFR.GOV. 300 IN NS ns1.gpo.GOV. OFR.GOV. 300 IN NS ns2.gpo.GOV. OFR.GOV. 300 IN RRSIG ( NS 7 2 300 20200208161000 20200125152317 46187 OFR.GOV. FazeTd7GHMPSTRS5toDfPnlhU9eXNBwFDAczAee+7SU9V/0uVP+RRrJuj3EFgpw62vt9lgCJbHj7 fE9z/WZC7Z+ZB3nj4AwZ4pjeffx8NWkkYAydZTNlK4j6oea08Q1fBSjfUm1n4D1vT6MsoIPyuDqH CSG+JN10RgoAa5LGMZY= ) OFR.GOV. 300 IN RRSIG ( NS 7 2 300 20200208161000 20200125152317 51020 OFR.GOV. gLNV+tqftP7DjfFIFFHEgbZ9p+EkqIrSk0ag9Y8ZjmOhmYoQQtzsuAzGA1MZ9oPMqkLQ9QiQUue/ aV/VWLd4bi7xMHkEoXR+pVXp7q2RkuhQ6rmsacLkevrl9SD1sbljBSUulq4LnjP5GdocpQkjW0pE snBBcIOMTKv7AapHlWE= ) ;; ADDITIONAL SECTION (3 records) ns2.gpo.GOV. 28800 IN A 162.140.252.180 ns1.gpo.GOV. 28800 IN A 162.140.64.100 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	OFR.GOV is authoritative for OFR.GOV
	Found RRSIG signed by OFR.GOV zone
	Query to ns2.gpo.GOV for OFR.GOV/SOA
	Received 793 bytes from 162.140.252.180
	;; Answer received from 162.140.252.180 (793 bytes) ;; HEADER SECTION ;; id = 21018 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; OFR.GOV. IN SOA ;; ANSWER SECTION (3 records) OFR.GOV. 300 IN SOA ( ins1.gpo.GOV. noc.gpo.GOV. 2013174861 ;serial 10800 ;refresh 1080 ;retry 2592000 ;expire 900 ;minimum ) OFR.GOV. 300 IN RRSIG ( SOA 7 2 300 20200209032828 20200126022828 46187 OFR.GOV. vjqNoneAknaNarZdYoM9SoJhuqPWYcu8MNDOXj6+dNDBKFMKQ+ktgRWZYi5YOFm1uT+Gdv6McBYt e6XVBtihk0LaE0W5rNJsKgxZK7m1qzRigYNOZjSHS/I9WWyZGJ9tbS7cc2LFgiiG2EfJxFRehE0X NwftIwUS82RaNLDkWL4= ) OFR.GOV. 300 IN RRSIG ( SOA 7 2 300 20200209032828 20200126022828 51020 OFR.GOV. DVaZtrt3WQbJDjpECGydXE7fVomRs3YEsJCSS4egp6Dv6cyo7va/Sir7BJAR38uvjDiVT+w1oWJH 1S3u7QX23kliD/F8UokcjXKTyOSGO0PvW/v5P0yvOIT0zpzIePn01niou8lYHjvYjy6dMb3+A8IJ BsTv1DUAqJp3RHvCLsc= ) ;; AUTHORITY SECTION (4 records) OFR.GOV. 300 IN NS ns2.gpo.GOV. OFR.GOV. 300 IN NS ns1.gpo.GOV. OFR.GOV. 300 IN RRSIG ( NS 7 2 300 20200208161000 20200125152317 46187 OFR.GOV. FazeTd7GHMPSTRS5toDfPnlhU9eXNBwFDAczAee+7SU9V/0uVP+RRrJuj3EFgpw62vt9lgCJbHj7 fE9z/WZC7Z+ZB3nj4AwZ4pjeffx8NWkkYAydZTNlK4j6oea08Q1fBSjfUm1n4D1vT6MsoIPyuDqH CSG+JN10RgoAa5LGMZY= ) OFR.GOV. 300 IN RRSIG ( NS 7 2 300 20200208161000 20200125152317 51020 OFR.GOV. gLNV+tqftP7DjfFIFFHEgbZ9p+EkqIrSk0ag9Y8ZjmOhmYoQQtzsuAzGA1MZ9oPMqkLQ9QiQUue/ aV/VWLd4bi7xMHkEoXR+pVXp7q2RkuhQ6rmsacLkevrl9SD1sbljBSUulq4LnjP5GdocpQkjW0pE snBBcIOMTKv7AapHlWE= ) ;; ADDITIONAL SECTION (3 records) ns2.gpo.GOV. 28800 IN A 162.140.252.180 ns1.gpo.GOV. 28800 IN A 162.140.64.100 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.gpo.GOV for OFR.GOV/SOA
	Received 793 bytes from 162.140.64.100
	;; Answer received from 162.140.64.100 (793 bytes) ;; HEADER SECTION ;; id = 57022 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; OFR.GOV. IN SOA ;; ANSWER SECTION (3 records) OFR.GOV. 300 IN SOA ( ins1.gpo.GOV. noc.gpo.GOV. 2013174861 ;serial 10800 ;refresh 1080 ;retry 2592000 ;expire 900 ;minimum ) OFR.GOV. 300 IN RRSIG ( SOA 7 2 300 20200209032828 20200126022828 46187 OFR.GOV. vjqNoneAknaNarZdYoM9SoJhuqPWYcu8MNDOXj6+dNDBKFMKQ+ktgRWZYi5YOFm1uT+Gdv6McBYt e6XVBtihk0LaE0W5rNJsKgxZK7m1qzRigYNOZjSHS/I9WWyZGJ9tbS7cc2LFgiiG2EfJxFRehE0X NwftIwUS82RaNLDkWL4= ) OFR.GOV. 300 IN RRSIG ( SOA 7 2 300 20200209032828 20200126022828 51020 OFR.GOV. DVaZtrt3WQbJDjpECGydXE7fVomRs3YEsJCSS4egp6Dv6cyo7va/Sir7BJAR38uvjDiVT+w1oWJH 1S3u7QX23kliD/F8UokcjXKTyOSGO0PvW/v5P0yvOIT0zpzIePn01niou8lYHjvYjy6dMb3+A8IJ BsTv1DUAqJp3RHvCLsc= ) ;; AUTHORITY SECTION (4 records) OFR.GOV. 300 IN NS ns2.gpo.GOV. OFR.GOV. 300 IN NS ns1.gpo.GOV. OFR.GOV. 300 IN RRSIG ( NS 7 2 300 20200208161000 20200125152317 46187 OFR.GOV. FazeTd7GHMPSTRS5toDfPnlhU9eXNBwFDAczAee+7SU9V/0uVP+RRrJuj3EFgpw62vt9lgCJbHj7 fE9z/WZC7Z+ZB3nj4AwZ4pjeffx8NWkkYAydZTNlK4j6oea08Q1fBSjfUm1n4D1vT6MsoIPyuDqH CSG+JN10RgoAa5LGMZY= ) OFR.GOV. 300 IN RRSIG ( NS 7 2 300 20200208161000 20200125152317 51020 OFR.GOV. gLNV+tqftP7DjfFIFFHEgbZ9p+EkqIrSk0ag9Y8ZjmOhmYoQQtzsuAzGA1MZ9oPMqkLQ9QiQUue/ aV/VWLd4bi7xMHkEoXR+pVXp7q2RkuhQ6rmsacLkevrl9SD1sbljBSUulq4LnjP5GdocpQkjW0pE snBBcIOMTKv7AapHlWE= ) ;; ADDITIONAL SECTION (3 records) ns2.gpo.GOV. 28800 IN A 162.140.252.180 ns1.gpo.GOV. 28800 IN A 162.140.64.100 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.gpo.GOV for OFR.GOV/A
	Received 764 bytes from 162.140.64.100
	;; Answer received from 162.140.64.100 (764 bytes) ;; HEADER SECTION ;; id = 42083 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; OFR.GOV. IN A ;; ANSWER SECTION (3 records) OFR.GOV. 300 IN A 162.140.254.92 OFR.GOV. 300 IN RRSIG ( A 7 2 300 20200205102043 20200122095817 46187 OFR.GOV. JKQEUuxIb9IxOap1RULpJOqAY6ylno9voSRICM+8HH0hBeXXvUHcT1+7n/Gcf0gsYQg9onSaBePz oFt5Hc+L3pVGlXVFZTBjXkaIn+e6N0+GXXBMjCDprcpyO/axmMZGx/DInUiemjDHbfzqK3aVurNG HagHWxhaMtVWUksOis4= ) OFR.GOV. 300 IN RRSIG ( A 7 2 300 20200205102043 20200122095817 51020 OFR.GOV. cg5o2nd4Stv4t10M2d3+Ye+kXW3ZmSrfDWj49NJqvUZTp2TGea5uLW0nUGKyqCIOZvP51DsMr9T1 TCWzsdtNnSL9pwjwdIuW9qXjm739Nb0In1OkxJ6NhBxWjqDwcb2ZcM3ZTbU98i67RMIxDgHI36aY d5cOhHdIU9xAUL9AUpo= ) ;; AUTHORITY SECTION (4 records) OFR.GOV. 300 IN NS ns2.gpo.GOV. OFR.GOV. 300 IN NS ns1.gpo.GOV. OFR.GOV. 300 IN RRSIG ( NS 7 2 300 20200208161000 20200125152317 46187 OFR.GOV. FazeTd7GHMPSTRS5toDfPnlhU9eXNBwFDAczAee+7SU9V/0uVP+RRrJuj3EFgpw62vt9lgCJbHj7 fE9z/WZC7Z+ZB3nj4AwZ4pjeffx8NWkkYAydZTNlK4j6oea08Q1fBSjfUm1n4D1vT6MsoIPyuDqH CSG+JN10RgoAa5LGMZY= ) OFR.GOV. 300 IN RRSIG ( NS 7 2 300 20200208161000 20200125152317 51020 OFR.GOV. gLNV+tqftP7DjfFIFFHEgbZ9p+EkqIrSk0ag9Y8ZjmOhmYoQQtzsuAzGA1MZ9oPMqkLQ9QiQUue/ aV/VWLd4bi7xMHkEoXR+pVXp7q2RkuhQ6rmsacLkevrl9SD1sbljBSUulq4LnjP5GdocpQkjW0pE snBBcIOMTKv7AapHlWE= ) ;; ADDITIONAL SECTION (3 records) ns2.gpo.GOV. 28800 IN A 162.140.252.180 ns1.gpo.GOV. 28800 IN A 162.140.64.100 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	OFR.GOV A RR has value 162.140.254.92
	Found 2 RRSIGs over A RRset
	`OFR.GOV. 300 IN RRSIG ( A 7 2 300 20200205102043 20200122095817 46187 OFR.GOV. JKQEUuxIb9IxOap1RULpJOqAY6ylno9voSRICM+8HH0hBeXXvUHcT1+7n/Gcf0gsYQg9onSaBePz oFt5Hc+L3pVGlXVFZTBjXkaIn+e6N0+GXXBMjCDprcpyO/axmMZGx/DInUiemjDHbfzqK3aVurNG HagHWxhaMtVWUksOis4= )`
	`OFR.GOV. 300 IN RRSIG ( A 7 2 300 20200205102043 20200122095817 51020 OFR.GOV. cg5o2nd4Stv4t10M2d3+Ye+kXW3ZmSrfDWj49NJqvUZTp2TGea5uLW0nUGKyqCIOZvP51DsMr9T1 TCWzsdtNnSL9pwjwdIuW9qXjm739Nb0In1OkxJ6NhBxWjqDwcb2ZcM3ZTbU98i67RMIxDgHI36aY d5cOhHdIU9xAUL9AUpo= )`
	RRSIG=46187 and DNSKEY=46187 verifies the A RRset
	RRSIG=51020 and DNSKEY=51020 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test OFR.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: