Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2025-05-21 15:11:53 UTC

Analyzing DNSSEC problems for disa.mil

.
Found 3 DNSKEY records for .
DS=20326/SHA-256 verifies DNSKEY=20326/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
mil
Found 1 DS records for mil in the . zone
DS=63500/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=53148 and DNSKEY=53148 verifies the DS RRset
Found 3 DNSKEY records for mil
DS=63500/SHA-256 verifies DNSKEY=63500/SEP
Found 2 RRSIGs over DNSKEY RRset
RRSIG=55824 and DNSKEY=55824 verifies the DNSKEY RRset
All Queries to eur2.nipr.mil for disa.mil/A timed out or failed
disa.mil
Found 2 DS records for disa.mil in the mil zone
DS=33295/SHA-1 uses a deprecated digest algorithm
DS=33295/SHA-1 has algorithm RSASHA256
DS=33295/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=55824 and DNSKEY=55824 verifies the DS RRset
Found 3 DNSKEY records for disa.mil
DS=33295/SHA-1 verifies DNSKEY=33295/SEP
Found 2 RRSIGs over DNSKEY RRset
RRSIG=33295 and DNSKEY=33295/SEP verifies the DNSKEY RRset
DNS3.DISA.MIL is authoritative for disa.mil
DNS1.DISA.MIL serial (2025702145) differs from DNS5.DISA.MIL serial (2025702140)
DNS2.DISA.MIL serial (2025702145) differs from DNS5.DISA.MIL serial (2025702140)
DNS4.DISA.MIL serial (2025702145) differs from DNS5.DISA.MIL serial (2025702140)
disa.mil A RR has value 156.112.108.76
Found 1 RRSIGs over A RRset
RRSIG=39828 and DNSKEY=39828 verifies the A RRset
disa.mil
DNS4.DISA.MIL is authoritative for disa.mil
disa.mil A RR has value 156.112.108.76
Found 1 RRSIGs over A RRset
RRSIG=39828 and DNSKEY=39828 verifies the A RRset
disa.mil
DNS5.DISA.MIL is authoritative for disa.mil
disa.mil A RR has value 156.112.108.76
Found 1 RRSIGs over A RRset
RRSIG=39828 and DNSKEY=39828 verifies the A RRset
disa.mil
DNS2.DISA.MIL is authoritative for disa.mil
disa.mil A RR has value 156.112.108.76
Found 1 RRSIGs over A RRset
RRSIG=39828 and DNSKEY=39828 verifies the A RRset
disa.mil
DNS1.DISA.MIL is authoritative for disa.mil
disa.mil A RR has value 156.112.108.76
Found 1 RRSIGs over A RRset
RRSIG=39828 and DNSKEY=39828 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test disa.mil at dnsviz.net.

DNSSEC Debugger

↓ Advanced options