DNSSEC Analyzer - POSTOFFICE.GOV

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2019-04-24 10:22:52 UTC, NTP stratum 4

Analyzing DNSSEC problems for POSTOFFICE.GOV

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to b.root-servers.net for ./DNSKEY
	Received 864 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (864 bytes) ;; HEADER SECTION ;; id = 39969 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190512000000 20190421000000 20326 . ljHKB9UaikaYC1wHzZyFwwibNFjGuwnI3DtVLsnRUwqmq2Er3uaMUYA63Odz4yO1f46zPAOcciVt Xol5oOyci84eGFb/7x6iZpcpIqFP7kWoNTRlQWgJ2V3KHYLr6w3TYiV/eWY7Ziu9HFPV6SLAt6g9 RWgaNwlLUw+fHdmhiAteoXjEBfqNC1je5FtAdPaOB3/aYbUayL4miAo3tsBt8vDzFPOvYVkMHbo4 75Bg1roJfSqxlfKEamGWMwtfnSjmw8htrvi51TBgUOsBBsSGgYWY5/5THwyc8oQDZfi72DiOF2Gr UGjr9yvQIYMuukNAOG8tvAn9PjHlY6pg4XkGUA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DS=19036/SHA-256 is published, but a corresponding DNSKEY is not
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190512000000 20190421000000 20326 . ljHKB9UaikaYC1wHzZyFwwibNFjGuwnI3DtVLsnRUwqmq2Er3uaMUYA63Odz4yO1f46zPAOcciVt Xol5oOyci84eGFb/7x6iZpcpIqFP7kWoNTRlQWgJ2V3KHYLr6w3TYiV/eWY7Ziu9HFPV6SLAt6g9 RWgaNwlLUw+fHdmhiAteoXjEBfqNC1je5FtAdPaOB3/aYbUayL4miAo3tsBt8vDzFPOvYVkMHbo4 75Bg1roJfSqxlfKEamGWMwtfnSjmw8htrvi51TBgUOsBBsSGgYWY5/5THwyc8oQDZfi72DiOF2Gr UGjr9yvQIYMuukNAOG8tvAn9PjHlY6pg4XkGUA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=25266 is now in the chain-of-trust
	Query to k.root-servers.net for POSTOFFICE.GOV/A
	Received 672 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (672 bytes) ;; HEADER SECTION ;; id = 57164 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; POSTOFFICE.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20190507050000 20190424040000 25266 . P/lz8XVonAZDJE2RMLV6BaoZ+yTpN68Yiq7wRSDeWhu3zoahDUCcpqIgLX1iFGJe1ifOkPW4TqyS nLjBBO9+l/0U9JpnRqK+yIGRZC0J99mGL9cBEFnbcjA3wSHuceTTQJri1RXWPRJYGguNXHywLkvq OAP9yWyS48+kvNIHa0DOelZRtkHgy/WhAZRl92Vp61Ew0FgEiEitp9Z8PpsjpHOrQnW+PP/spzrC zdu5SdVZTfhZRBAMls3jNYdc1DAxTfLynFwx5qapAl4dQ4Mx1HO+499RmNILSkY666hsps55cc0f QXlcgUi6k2YPnps/j+UF1Nnz9qKJ8ofdjfTfmA== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to k.root-servers.net for GOV/DNSKEY
	Received 661 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (661 bytes) ;; HEADER SECTION ;; id = 44026 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20190507050000 20190424040000 25266 . P/lz8XVonAZDJE2RMLV6BaoZ+yTpN68Yiq7wRSDeWhu3zoahDUCcpqIgLX1iFGJe1ifOkPW4TqyS nLjBBO9+l/0U9JpnRqK+yIGRZC0J99mGL9cBEFnbcjA3wSHuceTTQJri1RXWPRJYGguNXHywLkvq OAP9yWyS48+kvNIHa0DOelZRtkHgy/WhAZRl92Vp61Ew0FgEiEitp9Z8PpsjpHOrQnW+PP/spzrC zdu5SdVZTfhZRBAMls3jNYdc1DAxTfLynFwx5qapAl4dQ4Mx1HO+499RmNILSkY666hsps55cc0f QXlcgUi6k2YPnps/j+UF1Nnz9qKJ8ofdjfTfmA== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to k.root-servers.net for GOV/DS
	Received 406 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (406 bytes) ;; HEADER SECTION ;; id = 14261 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20190507050000 20190424040000 25266 . P/lz8XVonAZDJE2RMLV6BaoZ+yTpN68Yiq7wRSDeWhu3zoahDUCcpqIgLX1iFGJe1ifOkPW4TqyS nLjBBO9+l/0U9JpnRqK+yIGRZC0J99mGL9cBEFnbcjA3wSHuceTTQJri1RXWPRJYGguNXHywLkvq OAP9yWyS48+kvNIHa0DOelZRtkHgy/WhAZRl92Vp61Ew0FgEiEitp9Z8PpsjpHOrQnW+PP/spzrC zdu5SdVZTfhZRBAMls3jNYdc1DAxTfLynFwx5qapAl4dQ4Mx1HO+499RmNILSkY666hsps55cc0f QXlcgUi6k2YPnps/j+UF1Nnz9qKJ8ofdjfTfmA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20190507050000 20190424040000 25266 . P/lz8XVonAZDJE2RMLV6BaoZ+yTpN68Yiq7wRSDeWhu3zoahDUCcpqIgLX1iFGJe1ifOkPW4TqyS nLjBBO9+l/0U9JpnRqK+yIGRZC0J99mGL9cBEFnbcjA3wSHuceTTQJri1RXWPRJYGguNXHywLkvq OAP9yWyS48+kvNIHa0DOelZRtkHgy/WhAZRl92Vp61Ew0FgEiEitp9Z8PpsjpHOrQnW+PP/spzrC zdu5SdVZTfhZRBAMls3jNYdc1DAxTfLynFwx5qapAl4dQ4Mx1HO+499RmNILSkY666hsps55cc0f QXlcgUi6k2YPnps/j+UF1Nnz9qKJ8ofdjfTfmA== )`
	RRSIG=25266 and DNSKEY=25266 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to b.gov-servers.net for GOV/DNSKEY
	Received 743 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (743 bytes) ;; HEADER SECTION ;; id = 13382 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AQPO0gfZTyKZiRSwF/XvW9ta+joX/SlCfvNcTsNT4t5edmGhhiRNf45246Z4L6Cx3n93FPHtW91n F+M1gCPyxewRyAM0/UVrqBwutdPQnR8vsQ/WzdsAk50loby/jGN7UAStU/FzllD2qIq4uJ8HcLZW Qth9JV8vKuqVYXgPfhx5lw== ) ; Key ID = 43583 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190502214731 20190417214231 7698 gov. GjRUnOLfnBAtIlt6hLcfcO1H6NuS90vNTDPZ+AQznOz3HueEqBORAmtN1Yr1z0Bnu7LHCEUVijJN SAfPRqPhwhnwBUWDHBahKuDspOKEJtNHzO5Wag4dk5n9szFVyIf6oWOPc5B0NLZc/9phCu4it24X FOynCwl+G5Fo1bFQaMfoh1CSDwZeq90LFwjLUOOKMMcwHdTVL7DIreDuGsqkFS4ZX5MoqztrUkmj TN9nF9soq7kSUiyPtbGy0c+FgMc8iEE5weI0bYXC2J8msnsFQijTQTPiwZGSIVZD5l74b2uK1SVq rHZULW5BRRnVaAGCEVLU8gTPZS0GRBNWNQcbWQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQPO0gfZTyKZiRSwF/XvW9ta+joX/SlCfvNcTsNT4t5edmGhhiRNf45246Z4L6Cx3n93FPHtW91n F+M1gCPyxewRyAM0/UVrqBwutdPQnR8vsQ/WzdsAk50loby/jGN7UAStU/FzllD2qIq4uJ8HcLZW Qth9JV8vKuqVYXgPfhx5lw== ) ; Key ID = 43583`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190502214731 20190417214231 7698 gov. GjRUnOLfnBAtIlt6hLcfcO1H6NuS90vNTDPZ+AQznOz3HueEqBORAmtN1Yr1z0Bnu7LHCEUVijJN SAfPRqPhwhnwBUWDHBahKuDspOKEJtNHzO5Wag4dk5n9szFVyIf6oWOPc5B0NLZc/9phCu4it24X FOynCwl+G5Fo1bFQaMfoh1CSDwZeq90LFwjLUOOKMMcwHdTVL7DIreDuGsqkFS4ZX5MoqztrUkmj TN9nF9soq7kSUiyPtbGy0c+FgMc8iEE5weI0bYXC2J8msnsFQijTQTPiwZGSIVZD5l74b2uK1SVq rHZULW5BRRnVaAGCEVLU8gTPZS0GRBNWNQcbWQ== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=43583 is now in the chain-of-trust
	Query to b.gov-servers.net for POSTOFFICE.GOV/A
	Error querying b.gov-servers.net/2620:74:27:0:0:0:2:30 for POSTOFFICE.GOV/A: 'IPv6 transport disabled'
	Received 340 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (340 bytes) ;; HEADER SECTION ;; id = 62366 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; POSTOFFICE.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) POSTOFFICE.GOV. 86400 IN NS dns082.usps.com. POSTOFFICE.GOV. 86400 IN NS dns141.usps.com. POSTOFFICE.GOV. 3600 IN DS ( 7189 7 1 3a0c0389c46917935f6ed955f8792694a4abcf61 ) POSTOFFICE.GOV. 3600 IN DS ( 7189 7 2 c370d06c3d1fcdabbbe1da102ceaad6ca5124a23d51d9acfa4bb3f93326697f0 ) POSTOFFICE.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190501041007 20190424041007 43583 gov. Meq3KC8BvsVesYaY4Ym3T0MCbSy/jEZjMSdgQ56hRjDj6Wg8p/bGpblCqWP9LkeNU3itMMxiUwg8 LKECMCTVVUkClJc0ZRMtBU6HrLTpAOvWN2v/vvMGhYrKCjeyuL7+LLtC5WAn5ijK0IEqeg1lBaiS yFl7TNQas6HlcEKnPzc= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.gov-servers.net for POSTOFFICE.GOV/DNSKEY
	Received 340 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (340 bytes) ;; HEADER SECTION ;; id = 31352 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; POSTOFFICE.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) POSTOFFICE.GOV. 86400 IN NS dns082.usps.com. POSTOFFICE.GOV. 86400 IN NS dns141.usps.com. POSTOFFICE.GOV. 3600 IN DS ( 7189 7 1 3a0c0389c46917935f6ed955f8792694a4abcf61 ) POSTOFFICE.GOV. 3600 IN DS ( 7189 7 2 c370d06c3d1fcdabbbe1da102ceaad6ca5124a23d51d9acfa4bb3f93326697f0 ) POSTOFFICE.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190501041007 20190424041007 43583 gov. Meq3KC8BvsVesYaY4Ym3T0MCbSy/jEZjMSdgQ56hRjDj6Wg8p/bGpblCqWP9LkeNU3itMMxiUwg8 LKECMCTVVUkClJc0ZRMtBU6HrLTpAOvWN2v/vvMGhYrKCjeyuL7+LLtC5WAn5ijK0IEqeg1lBaiS yFl7TNQas6HlcEKnPzc= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone POSTOFFICE.GOV

POSTOFFICE.GOV

	Checking DS between GOV and POSTOFFICE.GOV
	Query to c.gov-servers.net for POSTOFFICE.GOV/DS
	Received 290 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (290 bytes) ;; HEADER SECTION ;; id = 14367 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; POSTOFFICE.GOV. IN DS ;; ANSWER SECTION (3 records) POSTOFFICE.GOV. 3600 IN DS ( 7189 7 1 3a0c0389c46917935f6ed955f8792694a4abcf61 ) POSTOFFICE.GOV. 3600 IN DS ( 7189 7 2 c370d06c3d1fcdabbbe1da102ceaad6ca5124a23d51d9acfa4bb3f93326697f0 ) POSTOFFICE.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190501041007 20190424041007 43583 gov. Meq3KC8BvsVesYaY4Ym3T0MCbSy/jEZjMSdgQ56hRjDj6Wg8p/bGpblCqWP9LkeNU3itMMxiUwg8 LKECMCTVVUkClJc0ZRMtBU6HrLTpAOvWN2v/vvMGhYrKCjeyuL7+LLtC5WAn5ijK0IEqeg1lBaiS yFl7TNQas6HlcEKnPzc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for POSTOFFICE.GOV in the GOV zone
	DS=7189/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=7189/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`POSTOFFICE.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190501041007 20190424041007 43583 gov. Meq3KC8BvsVesYaY4Ym3T0MCbSy/jEZjMSdgQ56hRjDj6Wg8p/bGpblCqWP9LkeNU3itMMxiUwg8 LKECMCTVVUkClJc0ZRMtBU6HrLTpAOvWN2v/vvMGhYrKCjeyuL7+LLtC5WAn5ijK0IEqeg1lBaiS yFl7TNQas6HlcEKnPzc= )`
	RRSIG=43583 and DNSKEY=43583 verifies the DS RRset
	DS=7189/SHA-1 is now in the chain-of-trust
	`POSTOFFICE.GOV. 3600 IN DS ( 7189 7 1 3a0c0389c46917935f6ed955f8792694a4abcf61 )`
	`POSTOFFICE.GOV. 3600 IN DS ( 7189 7 2 c370d06c3d1fcdabbbe1da102ceaad6ca5124a23d51d9acfa4bb3f93326697f0 )`
	Query to dns141.usps.com for POSTOFFICE.GOV/DNSKEY
	Received 957 bytes from 56.0.141.25
	;; Answer received from 56.0.141.25 (957 bytes) ;; HEADER SECTION ;; id = 26513 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; POSTOFFICE.GOV. IN DNSKEY ;; ANSWER SECTION (4 records) postoffice.gov. 3600 IN DNSKEY ( 256 3 7 AwEAAbDa3xdrKOFdpOdOPvKLIsRycrGpyf29mb6r6n8C9u5SyBwlVu8wclHdJoKNqAstEbLe6xPd h9XkQv8ggmbFattfhLsTwJc756RYsEVg5G+nhIPFsCWgHJjzrZbJcw/XoEX6mFNrgEbw+Vjz4P8W /yxRAl3OUZ6Ds8VZWJzSWTiH ) ; Key ID = 884 postoffice.gov. 3600 IN DNSKEY ( 257 3 7 AwEAAaxPZPfjsnKgDoE8QuHkBXk9UpXPVjNoTYVXNC4UpswHcpl/4U/cUDw8H58Nrr+vHEkXyW7f eKaaNb7Of0033xqWZdUeCdrBIYvnJ38GT+7BFe1JpWnR5gV/R0mREjd80cQX9g2jLo5mwZ9GN5QM Iw7xnLGNYYCIaliOZjee3NR0gXcRBI72MALLkZFdWaSvYJSdJJFvfyzCxtRnjfnyagOgMlYtqGZj E5zCTMYaSgnp+qMqvAZaFXnxzd1PWeGxFUqP8cYi6z8NCoyugCCv/Sd3AJtRBdjU4yZcvMeM5Xg5 xwr0MCxJ7GERCWDOtBM126jTIk1R3K1vqAwc9OZesIk= ) ; Key ID = 7189 postoffice.gov. 3600 IN RRSIG ( DNSKEY 7 2 3600 20190501040033 20190421032104 884 postoffice.gov. Tp728jgJuZoxXmsAjWF1npIah7prn3T2GdmZZYf5Yiq5ev4nrbPVHWMXnI/l6J6iPejxR0tV+9U4 AjoUUmHyAW8SMnyGH4FcJPAfPD57x7jbOpzRMuIVC2MHbwZwKNcesULZV5WDF2iqPrjKNIyr1viL vpph7uvLNZMvyP1oPQA= ) postoffice.gov. 3600 IN RRSIG ( DNSKEY 7 2 3600 20190501040033 20190421032104 7189 postoffice.gov. FYmpTkcJ4Irke+JC6kGcoIsvyTV4OHRbNNKiCLDvPlCIa2NMMmXUELbsSm7/XTikP+iKr31bY44X EMOtUk7CFyJAbgTBljN5M22coFsThFLdmSSLi9cXWVkbZge8gn6Tto+GwCbluEReHMyn58/2/pCD m7LDgXVRGvvdAFksdkVAo6AGqS8uwdmYHgMSUhzl/0dE/dCQYIIA32kU+6xJkpkWbcx/XUSEGXDF pCtzFujeqN/gMrLKaIDJ7wb4uTY7LRwQ6YPZEOHpQkTDGRFWrbp0yehzhsr0gpl66vsP/v38Qhe0 ABVjdCB8odjXewqpAHg5USTx3pvuCuDghRhJUg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for POSTOFFICE.GOV
	`postoffice.gov. 3600 IN DNSKEY ( 256 3 7 AwEAAbDa3xdrKOFdpOdOPvKLIsRycrGpyf29mb6r6n8C9u5SyBwlVu8wclHdJoKNqAstEbLe6xPd h9XkQv8ggmbFattfhLsTwJc756RYsEVg5G+nhIPFsCWgHJjzrZbJcw/XoEX6mFNrgEbw+Vjz4P8W /yxRAl3OUZ6Ds8VZWJzSWTiH ) ; Key ID = 884`
	`postoffice.gov. 3600 IN DNSKEY ( 257 3 7 AwEAAaxPZPfjsnKgDoE8QuHkBXk9UpXPVjNoTYVXNC4UpswHcpl/4U/cUDw8H58Nrr+vHEkXyW7f eKaaNb7Of0033xqWZdUeCdrBIYvnJ38GT+7BFe1JpWnR5gV/R0mREjd80cQX9g2jLo5mwZ9GN5QM Iw7xnLGNYYCIaliOZjee3NR0gXcRBI72MALLkZFdWaSvYJSdJJFvfyzCxtRnjfnyagOgMlYtqGZj E5zCTMYaSgnp+qMqvAZaFXnxzd1PWeGxFUqP8cYi6z8NCoyugCCv/Sd3AJtRBdjU4yZcvMeM5Xg5 xwr0MCxJ7GERCWDOtBM126jTIk1R3K1vqAwc9OZesIk= ) ; Key ID = 7189`
	DNSKEY=7189/SEP is now in the chain-of-trust
	DS=7189/SHA-1 verifies DNSKEY=7189/SEP
	DS=7189/SHA-256 verifies DNSKEY=7189/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`postoffice.gov. 3600 IN RRSIG ( DNSKEY 7 2 3600 20190501040033 20190421032104 884 postoffice.gov. Tp728jgJuZoxXmsAjWF1npIah7prn3T2GdmZZYf5Yiq5ev4nrbPVHWMXnI/l6J6iPejxR0tV+9U4 AjoUUmHyAW8SMnyGH4FcJPAfPD57x7jbOpzRMuIVC2MHbwZwKNcesULZV5WDF2iqPrjKNIyr1viL vpph7uvLNZMvyP1oPQA= )`
	`postoffice.gov. 3600 IN RRSIG ( DNSKEY 7 2 3600 20190501040033 20190421032104 7189 postoffice.gov. FYmpTkcJ4Irke+JC6kGcoIsvyTV4OHRbNNKiCLDvPlCIa2NMMmXUELbsSm7/XTikP+iKr31bY44X EMOtUk7CFyJAbgTBljN5M22coFsThFLdmSSLi9cXWVkbZge8gn6Tto+GwCbluEReHMyn58/2/pCD m7LDgXVRGvvdAFksdkVAo6AGqS8uwdmYHgMSUhzl/0dE/dCQYIIA32kU+6xJkpkWbcx/XUSEGXDF pCtzFujeqN/gMrLKaIDJ7wb4uTY7LRwQ6YPZEOHpQkTDGRFWrbp0yehzhsr0gpl66vsP/v38Qhe0 ABVjdCB8odjXewqpAHg5USTx3pvuCuDghRhJUg== )`
	RRSIG=884 and DNSKEY=884 verifies the DNSKEY RRset
	RRSIG=7189 and DNSKEY=7189/SEP verifies the DNSKEY RRset
	DNSKEY=884 is now in the chain-of-trust
	Query to dns141.usps.com for POSTOFFICE.GOV/A
	Received 503 bytes from 56.0.141.25
	;; Answer received from 56.0.141.25 (503 bytes) ;; HEADER SECTION ;; id = 30552 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; POSTOFFICE.GOV. IN A ;; ANSWER SECTION (2 records) postoffice.gov. 3600 IN A 56.0.36.150 postoffice.gov. 3600 IN RRSIG ( A 7 2 3600 20190428032124 20190418032123 884 postoffice.gov. LreCzydURPVWgsmy27km2ztX+7zTWYQ1Sc2xIppRezfTumWQ8upFIzWfRi3H/d+c1md47gA9Y33X nh4ZLHky9MZzOAU/ilQ+1BAkdZwx4v7oIy4XoN2ftote4H0Nn2V2v8FTJz79CgJe+1PwXWxu8qMU K50KTqbZ6j1iqoXqQc0= ) ;; AUTHORITY SECTION (3 records) postoffice.gov. 3600 IN NS dns082.usps.com. postoffice.gov. 3600 IN NS dns141.usps.com. postoffice.gov. 3600 IN RRSIG ( NS 7 2 3600 20190428032124 20190418032123 884 postoffice.gov. gmrTIZi5Z9STRe+H1Ej7e0xWUZEIMPLTalStyrfRA1dypEW+lVHcs+cuhz6prqdaFwzYJpFcGOTC wT+JkB8X3clFqN4XClli1uAmnNSCtJPJ/WIYnTd5Jwo6CX1QaB/KKRwAM4dwrjWaGC0kPcewQ64m n/Woc4SEsfdizD287DU= ) ;; ADDITIONAL SECTION (3 records) dns141.usps.com. 3600 IN A 56.0.141.25 dns082.usps.com. 3600 IN A 56.0.82.25 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	POSTOFFICE.GOV is authoritative for POSTOFFICE.GOV
	Found RRSIG signed by postoffice.gov zone
	Query to dns141.usps.com for POSTOFFICE.GOV/SOA
	Received 546 bytes from 56.0.141.25
	;; Answer received from 56.0.141.25 (546 bytes) ;; HEADER SECTION ;; id = 49445 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; POSTOFFICE.GOV. IN SOA ;; ANSWER SECTION (2 records) postoffice.gov. 3600 IN SOA ( dns141.usps.com. domainadmin.imail.usps.gov. 573862890 ;serial 3600 ;refresh 1800 ;retry 1209600 ;expire 1800 ;minimum ) postoffice.gov. 3600 IN RRSIG ( SOA 7 2 3600 20190501042104 20190421032104 884 postoffice.gov. SP7PfWg8WyUNFLxg1h8fhSEe9Cx3FRsV0Qmpd80xukApUBkIzqJYSBgCDmHMMLNVq8tQIIBwlLB+ /VwfRwxwNeVeX/SEA/fjsleopq6RQXo0sxwIPr744ma/cfMHPeMqN1+Qi9nZMN/tah9E/oL4EIVJ ZjCYtfDrTXrURb6eWWs= ) ;; AUTHORITY SECTION (3 records) postoffice.gov. 3600 IN NS dns082.usps.com. postoffice.gov. 3600 IN NS dns141.usps.com. postoffice.gov. 3600 IN RRSIG ( NS 7 2 3600 20190428032124 20190418032123 884 postoffice.gov. gmrTIZi5Z9STRe+H1Ej7e0xWUZEIMPLTalStyrfRA1dypEW+lVHcs+cuhz6prqdaFwzYJpFcGOTC wT+JkB8X3clFqN4XClli1uAmnNSCtJPJ/WIYnTd5Jwo6CX1QaB/KKRwAM4dwrjWaGC0kPcewQ64m n/Woc4SEsfdizD287DU= ) ;; ADDITIONAL SECTION (3 records) dns141.usps.com. 3600 IN A 56.0.141.25 dns082.usps.com. 3600 IN A 56.0.82.25 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns082.usps.com for POSTOFFICE.GOV/SOA
	Received 546 bytes from 56.0.82.25
	;; Answer received from 56.0.82.25 (546 bytes) ;; HEADER SECTION ;; id = 21906 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; POSTOFFICE.GOV. IN SOA ;; ANSWER SECTION (2 records) postoffice.gov. 3600 IN SOA ( dns141.usps.com. domainadmin.imail.usps.gov. 573862890 ;serial 3600 ;refresh 1800 ;retry 1209600 ;expire 1800 ;minimum ) postoffice.gov. 3600 IN RRSIG ( SOA 7 2 3600 20190501042104 20190421032104 884 postoffice.gov. SP7PfWg8WyUNFLxg1h8fhSEe9Cx3FRsV0Qmpd80xukApUBkIzqJYSBgCDmHMMLNVq8tQIIBwlLB+ /VwfRwxwNeVeX/SEA/fjsleopq6RQXo0sxwIPr744ma/cfMHPeMqN1+Qi9nZMN/tah9E/oL4EIVJ ZjCYtfDrTXrURb6eWWs= ) ;; AUTHORITY SECTION (3 records) postoffice.gov. 3600 IN NS dns141.usps.com. postoffice.gov. 3600 IN NS dns082.usps.com. postoffice.gov. 3600 IN RRSIG ( NS 7 2 3600 20190428032124 20190418032123 884 postoffice.gov. gmrTIZi5Z9STRe+H1Ej7e0xWUZEIMPLTalStyrfRA1dypEW+lVHcs+cuhz6prqdaFwzYJpFcGOTC wT+JkB8X3clFqN4XClli1uAmnNSCtJPJ/WIYnTd5Jwo6CX1QaB/KKRwAM4dwrjWaGC0kPcewQ64m n/Woc4SEsfdizD287DU= ) ;; ADDITIONAL SECTION (3 records) dns141.usps.com. 3600 IN A 56.0.141.25 dns082.usps.com. 3600 IN A 56.0.82.25 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns141.usps.com for POSTOFFICE.GOV/A
	Received 503 bytes from 56.0.141.25
	;; Answer received from 56.0.141.25 (503 bytes) ;; HEADER SECTION ;; id = 16249 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; POSTOFFICE.GOV. IN A ;; ANSWER SECTION (2 records) postoffice.gov. 3600 IN A 56.0.36.150 postoffice.gov. 3600 IN RRSIG ( A 7 2 3600 20190428032124 20190418032123 884 postoffice.gov. LreCzydURPVWgsmy27km2ztX+7zTWYQ1Sc2xIppRezfTumWQ8upFIzWfRi3H/d+c1md47gA9Y33X nh4ZLHky9MZzOAU/ilQ+1BAkdZwx4v7oIy4XoN2ftote4H0Nn2V2v8FTJz79CgJe+1PwXWxu8qMU K50KTqbZ6j1iqoXqQc0= ) ;; AUTHORITY SECTION (3 records) postoffice.gov. 3600 IN NS dns141.usps.com. postoffice.gov. 3600 IN NS dns082.usps.com. postoffice.gov. 3600 IN RRSIG ( NS 7 2 3600 20190428032124 20190418032123 884 postoffice.gov. gmrTIZi5Z9STRe+H1Ej7e0xWUZEIMPLTalStyrfRA1dypEW+lVHcs+cuhz6prqdaFwzYJpFcGOTC wT+JkB8X3clFqN4XClli1uAmnNSCtJPJ/WIYnTd5Jwo6CX1QaB/KKRwAM4dwrjWaGC0kPcewQ64m n/Woc4SEsfdizD287DU= ) ;; ADDITIONAL SECTION (3 records) dns141.usps.com. 3600 IN A 56.0.141.25 dns082.usps.com. 3600 IN A 56.0.82.25 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	POSTOFFICE.GOV A RR has value 56.0.36.150
	Found 1 RRSIGs over A RRset
	`postoffice.gov. 3600 IN RRSIG ( A 7 2 3600 20190428032124 20190418032123 884 postoffice.gov. LreCzydURPVWgsmy27km2ztX+7zTWYQ1Sc2xIppRezfTumWQ8upFIzWfRi3H/d+c1md47gA9Y33X nh4ZLHky9MZzOAU/ilQ+1BAkdZwx4v7oIy4XoN2ftote4H0Nn2V2v8FTJz79CgJe+1PwXWxu8qMU K50KTqbZ6j1iqoXqQc0= )`
	RRSIG=884 and DNSKEY=884 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test POSTOFFICE.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: