Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2021-06-12 21:05:10 UTC, NTP stratum 4

Analyzing DNSSEC problems for fha.gov

.
Found 2 DNSKEY records for .
DS=20326/SHA-256 verifies DNSKEY=20326/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
gov
Found 1 DS records for gov in the . zone
DS=7698/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=14631 and DNSKEY=14631 verifies the DS RRset
Found 2 DNSKEY records for gov
DS=7698/SHA-256 verifies DNSKEY=7698/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
fha.gov
Found 2 DS records for fha.gov in the gov zone
DS=4989/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
DS=4989/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
Found 1 RRSIGs over DS RRset
RRSIG=48498 and DNSKEY=48498 verifies the DS RRset
Found 4 DNSKEY records for fha.gov
DS=4989/SHA-256 verifies DNSKEY=4989/SEP
Found 2 RRSIGs over DNSKEY RRset
RRSIG=4989 and DNSKEY=4989/SEP verifies the DNSKEY RRset
hudgate.hud.gov is authoritative for fha.gov
All Queries to ns4.hud.gov for fha.gov/SOA timed out or failed
All Queries to ns3.hud.gov for fha.gov/SOA timed out or failed
fha.gov A RR has value 170.97.67.235
Found 1 RRSIGs over A RRset
RRSIG=57585 and DNSKEY=57585 verifies the A RRset
fha.gov
ns2.hud.gov is authoritative for fha.gov
fha.gov A RR has value 170.97.67.235
Found 1 RRSIGs over A RRset
RRSIG=57585 and DNSKEY=57585 verifies the A RRset
fha.gov
All Queries to hudgater.hud.gov for fha.gov/A timed out or failed
ns1.hud.gov is authoritative for fha.gov
fha.gov A RR has value 170.97.67.235
Found 1 RRSIGs over A RRset
RRSIG=57585 and DNSKEY=57585 verifies the A RRset
fha.gov
No response from fha.gov nameservers

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test fha.gov at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options