DNSSEC Analyzer

Domain Name:

Time: 2022-08-12 12:12:52 UTC, NTP stratum 16

Analyzing DNSSEC problems for gpo.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to e.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.203.230.10
	;; Response received from 192.203.230.10 (864 octets) ;; HEADER SECTION ;; id = 27225 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20220831000000 20220810000000 20326 . FJNYHZUipwrjUsDOPlE6hwUza6fRp2vwI294cL6vn5P9B5V2NT4Uf/wWoJvJlUdKPYhLSu2mfTM+ 2ufpNU9sHB+0Z1YXBj2zK8qQlT9S/BW5v4trLo1sZzK8uvl0hXKOwBsoOiNWdvqqtfqBTpz+mzWO bVSoCnNSUyIJkDyydvbJ9W2zqP+EY448BC87+BOGn+rY0yYy9dp5NYbrAOTQDF0pudHp43LHYedc AfDtjwVREPVEWYkisVpJoT3EZbF31h1Gb/+P7v84UHi6Mykq5hgQ1fV0PIMczp53moxgJxfzr1Y8 TIQnMy3xxmDxIiLXbaeUtkyBU2iMA1JJfWExyg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20220831000000 20220810000000 20326 . FJNYHZUipwrjUsDOPlE6hwUza6fRp2vwI294cL6vn5P9B5V2NT4Uf/wWoJvJlUdKPYhLSu2mfTM+ 2ufpNU9sHB+0Z1YXBj2zK8qQlT9S/BW5v4trLo1sZzK8uvl0hXKOwBsoOiNWdvqqtfqBTpz+mzWO bVSoCnNSUyIJkDyydvbJ9W2zqP+EY448BC87+BOGn+rY0yYy9dp5NYbrAOTQDF0pudHp43LHYedc AfDtjwVREPVEWYkisVpJoT3EZbF31h1Gb/+P7v84UHi6Mykq5hgQ1fV0PIMczp53moxgJxfzr1Y8 TIQnMy3xxmDxIiLXbaeUtkyBU2iMA1JJfWExyg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=20826 is now in the chain-of-trust
	Query to c.root-servers.net for gpo.gov/A
	Received 626 bytes from 192.33.4.12
	;; Response received from 192.33.4.12 (626 octets) ;; HEADER SECTION ;; id = 12685 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; gpo.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20220825050000 20220812040000 20826 . NwrsFbUdxwmXDFtbc4mKb7ce7ZJnuUfe5x9g2M2R6yFXImjKzkqJDfY0N1LUbKmXIRoG9ZVbglo8 Td4c8iVczUxzlKZY9Li0IwTDvvGijIccQ+eRvc97UElj0jXnj+ice0FEekH1+E4YBsF5+O7k/tZk M2ShyC8D3pb1TMlUP/VoK3VC2ImYBeivZ03iveJlr7Lrc6PU6X0wcWs3IRQriz5Lc1maWy5WgHSw CMtr6pGhdxLVV2SlgnzCyWB9nsFzHbFU7tHg4jtmkedTDjO2pQejoU4XGlwJ/hFeLlZtiGkXmARC FdjhdYrsTZAgQYQOX/A436gmNSVfAM8eCiVIqg== ) ;; ADDITIONAL SECTION (9 records) d.gov-servers.net. 172800 IN A 81.19.194.30 c.gov-servers.net. 172800 IN A 69.36.153.30 b.gov-servers.net. 172800 IN A 209.112.123.30 a.gov-servers.net. 172800 IN A 69.36.157.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to i.root-servers.net for gov/DNSKEY
	Received 622 bytes from 192.36.148.17
	;; Response received from 192.36.148.17 (622 octets) ;; HEADER SECTION ;; id = 27093 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20220825050000 20220812040000 20826 . NwrsFbUdxwmXDFtbc4mKb7ce7ZJnuUfe5x9g2M2R6yFXImjKzkqJDfY0N1LUbKmXIRoG9ZVbglo8 Td4c8iVczUxzlKZY9Li0IwTDvvGijIccQ+eRvc97UElj0jXnj+ice0FEekH1+E4YBsF5+O7k/tZk M2ShyC8D3pb1TMlUP/VoK3VC2ImYBeivZ03iveJlr7Lrc6PU6X0wcWs3IRQriz5Lc1maWy5WgHSw CMtr6pGhdxLVV2SlgnzCyWB9nsFzHbFU7tHg4jtmkedTDjO2pQejoU4XGlwJ/hFeLlZtiGkXmARC FdjhdYrsTZAgQYQOX/A436gmNSVfAM8eCiVIqg== ) ;; ADDITIONAL SECTION (9 records) d.gov-servers.net. 172800 IN A 81.19.194.30 c.gov-servers.net. 172800 IN A 69.36.153.30 b.gov-servers.net. 172800 IN A 209.112.123.30 a.gov-servers.net. 172800 IN A 69.36.157.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone gov

gov

	Checking DS between . and gov
	Query to i.root-servers.net for gov/DS
	Received 367 bytes from 192.36.148.17
	;; Response received from 192.36.148.17 (367 octets) ;; HEADER SECTION ;; id = 25315 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20220825050000 20220812040000 20826 . NwrsFbUdxwmXDFtbc4mKb7ce7ZJnuUfe5x9g2M2R6yFXImjKzkqJDfY0N1LUbKmXIRoG9ZVbglo8 Td4c8iVczUxzlKZY9Li0IwTDvvGijIccQ+eRvc97UElj0jXnj+ice0FEekH1+E4YBsF5+O7k/tZk M2ShyC8D3pb1TMlUP/VoK3VC2ImYBeivZ03iveJlr7Lrc6PU6X0wcWs3IRQriz5Lc1maWy5WgHSw CMtr6pGhdxLVV2SlgnzCyWB9nsFzHbFU7tHg4jtmkedTDjO2pQejoU4XGlwJ/hFeLlZtiGkXmARC FdjhdYrsTZAgQYQOX/A436gmNSVfAM8eCiVIqg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for gov in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20220825050000 20220812040000 20826 . NwrsFbUdxwmXDFtbc4mKb7ce7ZJnuUfe5x9g2M2R6yFXImjKzkqJDfY0N1LUbKmXIRoG9ZVbglo8 Td4c8iVczUxzlKZY9Li0IwTDvvGijIccQ+eRvc97UElj0jXnj+ice0FEekH1+E4YBsF5+O7k/tZk M2ShyC8D3pb1TMlUP/VoK3VC2ImYBeivZ03iveJlr7Lrc6PU6X0wcWs3IRQriz5Lc1maWy5WgHSw CMtr6pGhdxLVV2SlgnzCyWB9nsFzHbFU7tHg4jtmkedTDjO2pQejoU4XGlwJ/hFeLlZtiGkXmARC FdjhdYrsTZAgQYQOX/A436gmNSVfAM8eCiVIqg== )`
	RRSIG=20826 and DNSKEY=20826 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to c.gov-servers.net for gov/DNSKEY
	Received 777 bytes from 69.36.153.30
	;; Response received from 69.36.153.30 (777 octets) ;; HEADER SECTION ;; id = 53013 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 gov. 86400 IN DNSKEY ( 256 3 8 AwEAAbSW4ocEzPbMwUkqAURZNNLAAZ9XoKgSLoPQVtMdnKBkrDoIwWxYO0nk3n/seSHxNb4I+Shq HeLM0bydpkqpMPCesMKazwq2YfQD0t0NdN4kiApakMBOO6foEa9UKHg8YbF5ZeZ2oZzIyFVlDhZB qtVeCM7SIEfxp8VR4/TWRHaoqoOnScTAoVZA9+YknqERZeQoUecTd1xXBHV0dQawxlc= ) ; Key ID = 261 gov. 86400 IN RRSIG ( DNSKEY 8 1 86400 20220822190254 20220807185754 7698 gov. dBSpBgHX0L/G2I5MJ/wkADBF0OthUgrMtPrydX0kqzyxQ9q6NGouP9nsmeBDOGrwE8zw7tL4i8fT SOopdT5cwON+mCIXEufGG3NzJq3NRDUkFe5WV3gY5YKqK6LdBcHiiRp3pUuG7KweBRaz5OoWcu9c SyZ24XyNzRfw5i0QGzAvnHXd8YDn+1pFHGbtT596srFiwAizD9ulBk8n2onBC7ITfykoxu4fEO6H 6Onjeuh0wmJx+w0kfGvuShL7+P+o88iXilvEMAxeOxTq0zWgskqQLLRpd/k/fVJUk+CelsaWz2V6 0ySOAHlvSa9XwlINoCMtuBhR3dwglLxnixqudw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for gov
	`gov. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`gov. 86400 IN DNSKEY ( 256 3 8 AwEAAbSW4ocEzPbMwUkqAURZNNLAAZ9XoKgSLoPQVtMdnKBkrDoIwWxYO0nk3n/seSHxNb4I+Shq HeLM0bydpkqpMPCesMKazwq2YfQD0t0NdN4kiApakMBOO6foEa9UKHg8YbF5ZeZ2oZzIyFVlDhZB qtVeCM7SIEfxp8VR4/TWRHaoqoOnScTAoVZA9+YknqERZeQoUecTd1xXBHV0dQawxlc= ) ; Key ID = 261`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 86400 IN RRSIG ( DNSKEY 8 1 86400 20220822190254 20220807185754 7698 gov. dBSpBgHX0L/G2I5MJ/wkADBF0OthUgrMtPrydX0kqzyxQ9q6NGouP9nsmeBDOGrwE8zw7tL4i8fT SOopdT5cwON+mCIXEufGG3NzJq3NRDUkFe5WV3gY5YKqK6LdBcHiiRp3pUuG7KweBRaz5OoWcu9c SyZ24XyNzRfw5i0QGzAvnHXd8YDn+1pFHGbtT596srFiwAizD9ulBk8n2onBC7ITfykoxu4fEO6H 6Onjeuh0wmJx+w0kfGvuShL7+P+o88iXilvEMAxeOxTq0zWgskqQLLRpd/k/fVJUk+CelsaWz2V6 0ySOAHlvSa9XwlINoCMtuBhR3dwglLxnixqudw== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=261 is now in the chain-of-trust
	Query to b.gov-servers.net for gpo.gov/A
	Received 383 bytes from 209.112.123.30
	;; Response received from 209.112.123.30 (383 octets) ;; HEADER SECTION ;; id = 46973 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gpo.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) gpo.gov. 86400 IN NS ns4.gpo.gov. gpo.gov. 86400 IN NS ns3.gpo.gov. gpo.gov. 3600 IN DS 18496 8 1 20d05e8af9ed7706ac31146b9e3bef2d04c498ed gpo.gov. 3600 IN DS ( 18496 8 2 665a12f38b1e446269351305495d6e5746cdf92d0cbaa34baf77624c1cdddd07 ) gpo.gov. 3600 IN RRSIG ( DS 8 2 3600 20220819034249 20220812034249 261 gov. DHq4c2hqwwBB/PBrCzgfxHIK3HMvdGWZMJ19p5AQcMKinfBMPEIzP3OfMFntDyHlqIEtfOkPcdG6 dD4cGigVxFoX/AmGhxkYi/eLD9J/YnJeWQVii2Buh3m+yK4d/4wLXTyx5qfmpPMeGb4NKF1C1aN5 8c0c/bxnzLTkO8i2PagbLwiq9H9HUJT7sYXVzBhM70EiGt8zmbBCE9YkU5kBCA== ) ;; ADDITIONAL SECTION (3 records) ns3.gpo.gov. 86400 IN A 162.140.15.100 ns4.gpo.gov. 86400 IN A 162.140.254.200 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.gov-servers.net for gpo.gov/DNSKEY
	Received 383 bytes from 69.36.153.30
	;; Response received from 69.36.153.30 (383 octets) ;; HEADER SECTION ;; id = 46558 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gpo.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) gpo.gov. 86400 IN NS ns4.gpo.gov. gpo.gov. 86400 IN NS ns3.gpo.gov. gpo.gov. 3600 IN DS 18496 8 1 20d05e8af9ed7706ac31146b9e3bef2d04c498ed gpo.gov. 3600 IN DS ( 18496 8 2 665a12f38b1e446269351305495d6e5746cdf92d0cbaa34baf77624c1cdddd07 ) gpo.gov. 3600 IN RRSIG ( DS 8 2 3600 20220819034249 20220812034249 261 gov. DHq4c2hqwwBB/PBrCzgfxHIK3HMvdGWZMJ19p5AQcMKinfBMPEIzP3OfMFntDyHlqIEtfOkPcdG6 dD4cGigVxFoX/AmGhxkYi/eLD9J/YnJeWQVii2Buh3m+yK4d/4wLXTyx5qfmpPMeGb4NKF1C1aN5 8c0c/bxnzLTkO8i2PagbLwiq9H9HUJT7sYXVzBhM70EiGt8zmbBCE9YkU5kBCA== ) ;; ADDITIONAL SECTION (3 records) ns3.gpo.gov. 86400 IN A 162.140.15.100 ns4.gpo.gov. 86400 IN A 162.140.254.200 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone gpo.gov

gpo.gov

	Checking DS between gov and gpo.gov
	Query to a.gov-servers.net for gpo.gov/DS
	Received 315 bytes from 69.36.157.30
	;; Response received from 69.36.157.30 (315 octets) ;; HEADER SECTION ;; id = 36410 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gpo.gov. IN DS ;; ANSWER SECTION (3 records) gpo.gov. 3600 IN DS 18496 8 1 20d05e8af9ed7706ac31146b9e3bef2d04c498ed gpo.gov. 3600 IN DS ( 18496 8 2 665a12f38b1e446269351305495d6e5746cdf92d0cbaa34baf77624c1cdddd07 ) gpo.gov. 3600 IN RRSIG ( DS 8 2 3600 20220819034249 20220812034249 261 gov. DHq4c2hqwwBB/PBrCzgfxHIK3HMvdGWZMJ19p5AQcMKinfBMPEIzP3OfMFntDyHlqIEtfOkPcdG6 dD4cGigVxFoX/AmGhxkYi/eLD9J/YnJeWQVii2Buh3m+yK4d/4wLXTyx5qfmpPMeGb4NKF1C1aN5 8c0c/bxnzLTkO8i2PagbLwiq9H9HUJT7sYXVzBhM70EiGt8zmbBCE9YkU5kBCA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for gpo.gov in the gov zone
	DS=18496/SHA-1 has algorithm RSASHA256
	DS=18496/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gpo.gov. 3600 IN RRSIG ( DS 8 2 3600 20220819034249 20220812034249 261 gov. DHq4c2hqwwBB/PBrCzgfxHIK3HMvdGWZMJ19p5AQcMKinfBMPEIzP3OfMFntDyHlqIEtfOkPcdG6 dD4cGigVxFoX/AmGhxkYi/eLD9J/YnJeWQVii2Buh3m+yK4d/4wLXTyx5qfmpPMeGb4NKF1C1aN5 8c0c/bxnzLTkO8i2PagbLwiq9H9HUJT7sYXVzBhM70EiGt8zmbBCE9YkU5kBCA== )`
	RRSIG=261 and DNSKEY=261 verifies the DS RRset
	DS=18496/SHA-1 is now in the chain-of-trust
	`gpo.gov. 3600 IN DS 18496 8 1 20d05e8af9ed7706ac31146b9e3bef2d04c498ed`
	`gpo.gov. 3600 IN DS ( 18496 8 2 665a12f38b1e446269351305495d6e5746cdf92d0cbaa34baf77624c1cdddd07 )`
	Query to ns4.gpo.gov for gpo.gov/DNSKEY
	Received 1237 bytes from 162.140.254.200
	;; Response received from 162.140.254.200 (1237 octets) ;; HEADER SECTION ;; id = 64642 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gpo.gov. IN DNSKEY ;; ANSWER SECTION (6 records) gpo.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAYkQHP7aKtVL2xU+q8JMwnM3PrvgJtzB7Cu+aB8o4YpFy6xeUNauOfxnRrvEhquMy8O8VbOF mvqIOsD5xG+ECQNyA7myuTG4Teuz1OHliLj+aeR+T4NvH1JiHkxGGUAZweWhlmUWYoUv70XrrdBu k0McJvzsmVANEZBO7/r/T9Hb ) ; Key ID = 42399 gpo.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAdm+0319TmCH9IH9kFd5Ky6yf7toyY/FtWsZFmRTM5K4swfnSysXv3+e9pkPDbEahfLLiraT MEROamzZqPGdSoJWQlWX8P59My339F4rUoNal7dF0/yLnx5S5amekMPkoOYVeYCxmg6+/plxTRwG IelDBemLqEJYNWJB+01Wq4A1 ) ; Key ID = 11064 gpo.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAcuy7Davlhnj12z2e4K01v2og+7wHJWPvVDiHsDdt8t8GBEdPOSIB9Ho/lVefhIaXN9CB5qt WxY0AZ1iYkYaJBK1EjvaXeYWmzksUFzQwHrTJZakFNVVa28d4W0XrcM0azVS88bAEbmCQqeNghnU gekhs60We19j09PTO+sHkEIaL+9vy+g0imjZDB8u3ORZxRHTkqIQf65iOZccELjDjP5NtgxaUGRe sOj9BIPtfbWcq+/STPJFhGxZH5givVmIcrvBpHhCQ17WO48tjK8EB/8ZgMYhz8dI1xpVTfqgUCwX ZLGVn8S4jOpUJqslwm+dDVKi0t4k6xAOBbLrIQ8QqSs= ) ; Key ID = 18496 gpo.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20220818131510 20220811121510 42399 gpo.gov. eKtFkr0Kd17j+zxG6FmBOmvqzFdLBOuFUiI53KqeJJw3pglh8qtFKm9/ZtRsoIqypjNJeO+JePD6 NbobROB9vR6Yu918fg4k/vhiDqUh/36wGOKuswvJ+eaErc8+inFCoBCKcYmG2MbhYI3Kv2cAjI41 0Y6O+cSGH0uh6hwcJXY= ) gpo.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20220818131510 20220811121510 11064 gpo.gov. GkK3bjq8JAhhFcspsc13+bYMc3ii7kigChGnTP290OoREYMXEZ3311fEJyu201p6mG/3rXMwkMNX Te1Q/QaYjU6IKhGnWSqJ8W8t5Zgy3lvlIA7UJFhilPiN7uFo9TqgoCW7i0zgZ7Vw80SbOGQ5LSY1 ZUhb66FWyWU8ULHRldg= ) gpo.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20220818131510 20220811121510 18496 gpo.gov. MmpAPDa/ePI3tTXaMts6+sqxtirxJAKaUppd64jeMlES7kg/i/MOp9QZ/5kAuXLBmxrVCV4fXmf7 FcOz0sM9S38d1xbBS1taz/8e0qmE9qKP88pzm2JECxSa/ykW6ZDktfeEjLBCvHNpdhRvYVl6b7Yp tRrn5RKBDbErJrhckcgHJb6YusBB9SZLYeUy22UHED3mzuPg5q6DcTTI9rlb3shppzAJLIxPT7Lq HdfbhDNLceqibk8X2hHK67NXtWN0MHlc/MMVBrpGajeX41nKpoXNjBS1rCQhJPPKOITSXy4+HQ/z r0H3MpHsOW5mEsx3C6K0I0AxgVXmtYOOuuZDKQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for gpo.gov
	`gpo.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAYkQHP7aKtVL2xU+q8JMwnM3PrvgJtzB7Cu+aB8o4YpFy6xeUNauOfxnRrvEhquMy8O8VbOF mvqIOsD5xG+ECQNyA7myuTG4Teuz1OHliLj+aeR+T4NvH1JiHkxGGUAZweWhlmUWYoUv70XrrdBu k0McJvzsmVANEZBO7/r/T9Hb ) ; Key ID = 42399`
	`gpo.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAdm+0319TmCH9IH9kFd5Ky6yf7toyY/FtWsZFmRTM5K4swfnSysXv3+e9pkPDbEahfLLiraT MEROamzZqPGdSoJWQlWX8P59My339F4rUoNal7dF0/yLnx5S5amekMPkoOYVeYCxmg6+/plxTRwG IelDBemLqEJYNWJB+01Wq4A1 ) ; Key ID = 11064`
	`gpo.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAcuy7Davlhnj12z2e4K01v2og+7wHJWPvVDiHsDdt8t8GBEdPOSIB9Ho/lVefhIaXN9CB5qt WxY0AZ1iYkYaJBK1EjvaXeYWmzksUFzQwHrTJZakFNVVa28d4W0XrcM0azVS88bAEbmCQqeNghnU gekhs60We19j09PTO+sHkEIaL+9vy+g0imjZDB8u3ORZxRHTkqIQf65iOZccELjDjP5NtgxaUGRe sOj9BIPtfbWcq+/STPJFhGxZH5givVmIcrvBpHhCQ17WO48tjK8EB/8ZgMYhz8dI1xpVTfqgUCwX ZLGVn8S4jOpUJqslwm+dDVKi0t4k6xAOBbLrIQ8QqSs= ) ; Key ID = 18496`
	DNSKEY=18496/SEP is now in the chain-of-trust
	DS=18496/SHA-1 verifies DNSKEY=18496/SEP
	DS=18496/SHA-256 verifies DNSKEY=18496/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`gpo.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20220818131510 20220811121510 42399 gpo.gov. eKtFkr0Kd17j+zxG6FmBOmvqzFdLBOuFUiI53KqeJJw3pglh8qtFKm9/ZtRsoIqypjNJeO+JePD6 NbobROB9vR6Yu918fg4k/vhiDqUh/36wGOKuswvJ+eaErc8+inFCoBCKcYmG2MbhYI3Kv2cAjI41 0Y6O+cSGH0uh6hwcJXY= )`
	`gpo.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20220818131510 20220811121510 11064 gpo.gov. GkK3bjq8JAhhFcspsc13+bYMc3ii7kigChGnTP290OoREYMXEZ3311fEJyu201p6mG/3rXMwkMNX Te1Q/QaYjU6IKhGnWSqJ8W8t5Zgy3lvlIA7UJFhilPiN7uFo9TqgoCW7i0zgZ7Vw80SbOGQ5LSY1 ZUhb66FWyWU8ULHRldg= )`
	`gpo.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20220818131510 20220811121510 18496 gpo.gov. MmpAPDa/ePI3tTXaMts6+sqxtirxJAKaUppd64jeMlES7kg/i/MOp9QZ/5kAuXLBmxrVCV4fXmf7 FcOz0sM9S38d1xbBS1taz/8e0qmE9qKP88pzm2JECxSa/ykW6ZDktfeEjLBCvHNpdhRvYVl6b7Yp tRrn5RKBDbErJrhckcgHJb6YusBB9SZLYeUy22UHED3mzuPg5q6DcTTI9rlb3shppzAJLIxPT7Lq HdfbhDNLceqibk8X2hHK67NXtWN0MHlc/MMVBrpGajeX41nKpoXNjBS1rCQhJPPKOITSXy4+HQ/z r0H3MpHsOW5mEsx3C6K0I0AxgVXmtYOOuuZDKQ== )`
	RRSIG=42399 and DNSKEY=42399 verifies the DNSKEY RRset
	RRSIG=11064 and DNSKEY=11064 verifies the DNSKEY RRset
	RRSIG=18496 and DNSKEY=18496/SEP verifies the DNSKEY RRset
	DNSKEY=42399 is now in the chain-of-trust
	DNSKEY=11064 is now in the chain-of-trust
	Query to ns4.gpo.gov for gpo.gov/A
	Received 1456 bytes from 162.140.254.200
	;; Response received from 162.140.254.200 (1456 octets) ;; HEADER SECTION ;; id = 37329 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gpo.gov. IN A ;; ANSWER SECTION (3 records) gpo.gov. 300 IN A 162.140.14.82 gpo.gov. 300 IN RRSIG ( A 8 2 300 20220816051501 20220809041501 42399 gpo.gov. dpu8VUsI5c96Zasc/gFJ5XYkSl+WvSYC75mFCq7SpqtXpgjh2NepcrkFnHMk3XAefECzAkEanlnP M1An6qotpHTccDok9bD65vYZgzxeK4WN9Tmo0g4+Qp6M8MHzr/1KdLoJxIGX4nlH6XC8Y34T8V4s uP0SDymA8bDGlDfBklw= ) gpo.gov. 300 IN RRSIG ( A 8 2 300 20220818131457 20220811121457 11064 gpo.gov. oIhPiv2eXW5r5Wdg9r2RBNtjniRo4ly1JGEvApp79t7AGANy/0Men45nRk6ZpS2fGPkcYsgAMoYI rrKb2z1VjmLomFmczyXsA/H+SHLaIOp4KOeGq9b9maXr5jUbAB0v3c6pd00uoHiqmpGMH1BgXbLW 4CIjMneeDAcVaapwu+4= ) ;; AUTHORITY SECTION (4 records) gpo.gov. 28800 IN NS ns4.gpo.gov. gpo.gov. 28800 IN NS ns3.gpo.gov. gpo.gov. 28800 IN RRSIG ( NS 8 2 28800 20220816051500 20220809041500 42399 gpo.gov. dY4P/IC/Xd2Asmt8+O+ZP78q+TimB+aakRb8VMCnPZL1xC6VsQWcPHYrmRDtQ1D1Ul3UIWm6sIp3 etuRQ3Z7dBVJDA8EEaZb3GJYLxKzr+bzrAD8flpNQEBIs35mF6YVy5WKpJH4omup46kWnLwktyw1 9YF25BORCYEv8mfGZNo= ) gpo.gov. 28800 IN RRSIG ( NS 8 2 28800 20220818131455 20220811121455 11064 gpo.gov. hmjAEmzZwc9IU0h+t+3iawBIWAT7BCY7YgPDdUs/fo1oOcHq+TQgLDMnCYECWPmgjwfOv9lz9Rb0 c26qb3jvs4xLcxANOreq3MCWyB6WtFFdGENx5OxF2g3pLi5PqCbDU8rsjYDZqtQDFygsc/jwA18h 64nZ0C1b2Kj3Ag75b38= ) ;; ADDITIONAL SECTION (7 records) ns3.gpo.gov. 28800 IN A 162.140.15.100 ns3.gpo.gov. 28800 IN RRSIG ( A 8 3 28800 20220816051500 20220809041500 42399 gpo.gov. YlqfvBfWVjrk1r67sCuKl58LnRlybrFFGSjYSx4BvOEuwfkbjZdYkvMCyNaSVnrpU+mzTjCp5gEe AImoanBqraMtwD2dMMzhQ1v2syQi01sXhZA5mLCaAQSWA/yyP6z6d1aF+98Z5Et1rHuG+onchqwR snleKSuE9/q4thsLeU8= ) ns3.gpo.gov. 28800 IN RRSIG ( A 8 3 28800 20220818131455 20220811121455 11064 gpo.gov. BQgQqcqpF1VvPi3H4cfSn47f1p8Jv4MiOd+MFT5/7lfHBDc6gyJSKI71LsEBwWUSLz6ZhWVw9Hvw fFYOEvn8/gXBixQ8jy8qLPd0/64OhCTbYs3mECyGeJRZuZQ3kure0LrdBck8sp7F7ZpCezslmRoI J3V11d/kLOyG02LpLPk= ) ns4.gpo.gov. 28800 IN A 162.140.254.200 ns4.gpo.gov. 28800 IN RRSIG ( A 8 3 28800 20220816051500 20220809041500 42399 gpo.gov. JXls3mQ7dC6NyFDlg1FGHoML2nkNZWj0sJeBAj5FYjabeNdVUMTXaRhpOh3QOB3JKJKqr0qi8ow+ qZQHFpR2Bps+g3P+HPfby0qAzrKfVPeKDufxtkhxVSQx1gjeGxoFKdCEm9/NY3Ai0WExjBxk3imI NdfNZdhApraGmiMEhQ0= ) ns4.gpo.gov. 28800 IN RRSIG ( A 8 3 28800 20220818131455 20220811121455 11064 gpo.gov. GhPlXMxbuut2B5K/NYCoMlqlSvYR7jC+neqWyo48MUEh32r2RCBgPr4NoYt6Zdww0CCKsxtW7qcN sELj7occXY+xfv/iViuvSRkYkbqT24jYc4Y6A9uJsRAsN5mT5ndcm0s99dRMFp9Q0H5/8jTXe8eU GBLP8+qb8Qa4zOY6itM= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns4.gpo.gov is authoritative for gpo.gov
	Found RRSIG signed by gpo.gov zone
	Query to ns3.gpo.gov for gpo.gov/SOA
	Received 1485 bytes from 162.140.15.100
	;; Response received from 162.140.15.100 (1485 octets) ;; HEADER SECTION ;; id = 6469 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gpo.gov. IN SOA ;; ANSWER SECTION (3 records) gpo.gov. 28800 IN SOA ( ins1.gpo.gov. noc.gpo.gov. 2010073183 ;serial 10800 ;refresh 3600 ;retry 2592000 ;expire 900 ;minimum ) gpo.gov. 28800 IN RRSIG ( SOA 8 2 28800 20220818175632 20220811165632 42399 gpo.gov. KseAmzHv5mj8b+X8m8u4jHQWZScXc2MldRyFcNWN2SnkEJbOJsU6IfqihkbhDMA93igWpKbHipxm fP+fe+rN5/EM0lQtUp7q23aURFc1EQD+q5PQ9rfmdnwZ5MRTZciQWiTU51iHrflfcnMZ9krqo2cS dOsLRVMk+MNIlxRRZbM= ) gpo.gov. 28800 IN RRSIG ( SOA 8 2 28800 20220818175632 20220811165632 11064 gpo.gov. LTK6sc6UmTG619CIN3SjMCyYbOPVRn8JcgK+Xs3cvPZlNijIemXKP39H4f2FmE40WmIIIZwAp6Yg zjmOj4Wgc5vMRz9qu2v6H5+DDlrEDsYZVmylrOWutGzzY7BZeyQzhv8X182cdUX0me73uErZtgFa j8s6CqHFB85406TBXZ4= ) ;; AUTHORITY SECTION (4 records) gpo.gov. 28800 IN NS ns3.gpo.gov. gpo.gov. 28800 IN NS ns4.gpo.gov. gpo.gov. 28800 IN RRSIG ( NS 8 2 28800 20220816051459 20220809041459 42399 gpo.gov. AnBelqGAMxRIFovxRfZE3WHtzmTJMyAoUbOIEsl9o4/1KT6YO6ri6q1FxV4miZ2unrOjpwFj9pgy bi+AQZJyiVqrvqLHj2txyModnzV89iHbBR2X1UM9aC96z8HTJNvueGYsfwZKto6Q+4rSL1+9m6hH Cm51UP2fWOgozpfeuL4= ) gpo.gov. 28800 IN RRSIG ( NS 8 2 28800 20220818131457 20220811121457 11064 gpo.gov. JtJKG0cDhOJAv0SS8snPIl+cv1aD9ueHYcp2sG+rQ/8hEux7Xnht9fuVp7qNVlb4BWoB5fCHBw1p HgUE/kMUsmk21dX44/OvdfhR0BL+Wca45NU8tlKsiXqLx4/iBjJmutrtKa0iF/rOGwyFXxbuzq1Y KMh94wTcQkhczRUxRaQ= ) ;; ADDITIONAL SECTION (7 records) ns3.gpo.gov. 28800 IN A 162.140.15.100 ns3.gpo.gov. 28800 IN RRSIG ( A 8 3 28800 20220816051459 20220809041459 42399 gpo.gov. BeqMlqu8MOecrjvO0c097OQDtc0e3sRYMFfJv1RT1s+GjOPYv32wNYlsaJdIvmbIDeOw02ycMLHU TG980yo76DH4iQVIXIgeDcIX7TQgj18TYOrV8wZ0Tki3j3eg4EuPVJEv5nNqfKpauc6Xd4QrNmZL /WjuYMbGc/hgSaJBdg8= ) ns3.gpo.gov. 28800 IN RRSIG ( A 8 3 28800 20220818131457 20220811121457 11064 gpo.gov. otWnDLjQ/0TvYUEA7pgR27bAGKZEhWRfK8iXeN/SYQ9B91/Fok2JFtpiXg5vWIZ3Qt1lOt19IRtd fABu8+H4+SgVwWnzCN/tqUhCP41+zTRDdV12diG9U7U1e25NTTJHffWHUIfcROyDK3L+U7f7NICk Mdiu56w4dLH+66lOq00= ) ns4.gpo.gov. 28800 IN A 162.140.254.200 ns4.gpo.gov. 28800 IN RRSIG ( A 8 3 28800 20220816051459 20220809041459 42399 gpo.gov. cUF7BOJP9OrDN20UnSfGCzN0H18Qq1f2h0NtlBCdKTf36Qo8Xv4VburBXacDCeYLWkuqStU17cQl WEGgWxrwpxiy8nI1PGVLxG67Da2R++Q10luMssktzVzgL2kzRopEhCwomsOZjmtgWtho/0wzcmeZ mM9T6dNs2AU6yua8R1I= ) ns4.gpo.gov. 28800 IN RRSIG ( A 8 3 28800 20220818131457 20220811121457 11064 gpo.gov. m/zqMj8pA81HeCYFD8Ym/34ZcehQOnKFmPKsAreBlt0G6Mf9DXD9FUo8H33KsWg4XOPQ4cQqxE4E +rn292PvgHpG8ytZpfj2CqaEpoBn0uqIgekFFuHDcWjNjRhYmr+N6gx+qHNyaW0W32sEKXKmuPJa PEVTNuvYDqbPuWamoNM= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns4.gpo.gov for gpo.gov/A
	Received 1456 bytes from 162.140.254.200
	;; Response received from 162.140.254.200 (1456 octets) ;; HEADER SECTION ;; id = 60528 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gpo.gov. IN A ;; ANSWER SECTION (3 records) gpo.gov. 300 IN A 162.140.14.82 gpo.gov. 300 IN RRSIG ( A 8 2 300 20220816051501 20220809041501 42399 gpo.gov. dpu8VUsI5c96Zasc/gFJ5XYkSl+WvSYC75mFCq7SpqtXpgjh2NepcrkFnHMk3XAefECzAkEanlnP M1An6qotpHTccDok9bD65vYZgzxeK4WN9Tmo0g4+Qp6M8MHzr/1KdLoJxIGX4nlH6XC8Y34T8V4s uP0SDymA8bDGlDfBklw= ) gpo.gov. 300 IN RRSIG ( A 8 2 300 20220818131457 20220811121457 11064 gpo.gov. oIhPiv2eXW5r5Wdg9r2RBNtjniRo4ly1JGEvApp79t7AGANy/0Men45nRk6ZpS2fGPkcYsgAMoYI rrKb2z1VjmLomFmczyXsA/H+SHLaIOp4KOeGq9b9maXr5jUbAB0v3c6pd00uoHiqmpGMH1BgXbLW 4CIjMneeDAcVaapwu+4= ) ;; AUTHORITY SECTION (4 records) gpo.gov. 28800 IN NS ns3.gpo.gov. gpo.gov. 28800 IN NS ns4.gpo.gov. gpo.gov. 28800 IN RRSIG ( NS 8 2 28800 20220816051500 20220809041500 42399 gpo.gov. dY4P/IC/Xd2Asmt8+O+ZP78q+TimB+aakRb8VMCnPZL1xC6VsQWcPHYrmRDtQ1D1Ul3UIWm6sIp3 etuRQ3Z7dBVJDA8EEaZb3GJYLxKzr+bzrAD8flpNQEBIs35mF6YVy5WKpJH4omup46kWnLwktyw1 9YF25BORCYEv8mfGZNo= ) gpo.gov. 28800 IN RRSIG ( NS 8 2 28800 20220818131455 20220811121455 11064 gpo.gov. hmjAEmzZwc9IU0h+t+3iawBIWAT7BCY7YgPDdUs/fo1oOcHq+TQgLDMnCYECWPmgjwfOv9lz9Rb0 c26qb3jvs4xLcxANOreq3MCWyB6WtFFdGENx5OxF2g3pLi5PqCbDU8rsjYDZqtQDFygsc/jwA18h 64nZ0C1b2Kj3Ag75b38= ) ;; ADDITIONAL SECTION (7 records) ns3.gpo.gov. 28800 IN A 162.140.15.100 ns3.gpo.gov. 28800 IN RRSIG ( A 8 3 28800 20220816051500 20220809041500 42399 gpo.gov. YlqfvBfWVjrk1r67sCuKl58LnRlybrFFGSjYSx4BvOEuwfkbjZdYkvMCyNaSVnrpU+mzTjCp5gEe AImoanBqraMtwD2dMMzhQ1v2syQi01sXhZA5mLCaAQSWA/yyP6z6d1aF+98Z5Et1rHuG+onchqwR snleKSuE9/q4thsLeU8= ) ns3.gpo.gov. 28800 IN RRSIG ( A 8 3 28800 20220818131455 20220811121455 11064 gpo.gov. BQgQqcqpF1VvPi3H4cfSn47f1p8Jv4MiOd+MFT5/7lfHBDc6gyJSKI71LsEBwWUSLz6ZhWVw9Hvw fFYOEvn8/gXBixQ8jy8qLPd0/64OhCTbYs3mECyGeJRZuZQ3kure0LrdBck8sp7F7ZpCezslmRoI J3V11d/kLOyG02LpLPk= ) ns4.gpo.gov. 28800 IN A 162.140.254.200 ns4.gpo.gov. 28800 IN RRSIG ( A 8 3 28800 20220816051500 20220809041500 42399 gpo.gov. JXls3mQ7dC6NyFDlg1FGHoML2nkNZWj0sJeBAj5FYjabeNdVUMTXaRhpOh3QOB3JKJKqr0qi8ow+ qZQHFpR2Bps+g3P+HPfby0qAzrKfVPeKDufxtkhxVSQx1gjeGxoFKdCEm9/NY3Ai0WExjBxk3imI NdfNZdhApraGmiMEhQ0= ) ns4.gpo.gov. 28800 IN RRSIG ( A 8 3 28800 20220818131455 20220811121455 11064 gpo.gov. GhPlXMxbuut2B5K/NYCoMlqlSvYR7jC+neqWyo48MUEh32r2RCBgPr4NoYt6Zdww0CCKsxtW7qcN sELj7occXY+xfv/iViuvSRkYkbqT24jYc4Y6A9uJsRAsN5mT5ndcm0s99dRMFp9Q0H5/8jTXe8eU GBLP8+qb8Qa4zOY6itM= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	gpo.gov A RR has value 162.140.14.82
	Found 2 RRSIGs over A RRset
	`gpo.gov. 300 IN RRSIG ( A 8 2 300 20220816051501 20220809041501 42399 gpo.gov. dpu8VUsI5c96Zasc/gFJ5XYkSl+WvSYC75mFCq7SpqtXpgjh2NepcrkFnHMk3XAefECzAkEanlnP M1An6qotpHTccDok9bD65vYZgzxeK4WN9Tmo0g4+Qp6M8MHzr/1KdLoJxIGX4nlH6XC8Y34T8V4s uP0SDymA8bDGlDfBklw= )`
	`gpo.gov. 300 IN RRSIG ( A 8 2 300 20220818131457 20220811121457 11064 gpo.gov. oIhPiv2eXW5r5Wdg9r2RBNtjniRo4ly1JGEvApp79t7AGANy/0Men45nRk6ZpS2fGPkcYsgAMoYI rrKb2z1VjmLomFmczyXsA/H+SHLaIOp4KOeGq9b9maXr5jUbAB0v3c6pd00uoHiqmpGMH1BgXbLW 4CIjMneeDAcVaapwu+4= )`
	RRSIG=42399 and DNSKEY=42399 verifies the A RRset
	RRSIG=11064 and DNSKEY=11064 verifies the A RRset

gpo.gov

	Query to ns3.gpo.gov for gpo.gov/A
	Received 1456 bytes from 162.140.15.100
	;; Response received from 162.140.15.100 (1456 octets) ;; HEADER SECTION ;; id = 1232 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gpo.gov. IN A ;; ANSWER SECTION (3 records) gpo.gov. 300 IN A 162.140.14.82 gpo.gov. 300 IN RRSIG ( A 8 2 300 20220816051458 20220809041458 42399 gpo.gov. iOiQ5hX1W4AEWGLTW0QTKnTF6KQtagdksadFKYS+O7vIoWOnIoeoQQPKKWZHF2He9N+H/LgvbDEp FmKOBjiNav45czzkzdACUIHSWO5KQ2Affl+p+Zjn439ax36KyJR0/zVmcGP/U2M6Nv+pPkWuwYh6 9po5dXtRPPlQU3xMvYA= ) gpo.gov. 300 IN RRSIG ( A 8 2 300 20220818131455 20220811121455 11064 gpo.gov. a2PXbiurmWHjiOR+VcJXfTTTOQ0Eq53HlWQFrMRwMfYws+nGCKJIMxAkwq4pPOreeaG2q79pSXvK yuPvkUjS8fWbNtLQouu8KUHPszbPUbbsWNKiVL1Ot0CPtHEy8OcKHrxTo4YNIU1+IfxQi4ABCdWf HnEkLh1L4JcxxpKUdAY= ) ;; AUTHORITY SECTION (4 records) gpo.gov. 28800 IN NS ns4.gpo.gov. gpo.gov. 28800 IN NS ns3.gpo.gov. gpo.gov. 28800 IN RRSIG ( NS 8 2 28800 20220816051457 20220809041457 42399 gpo.gov. EtBj1r6K9Vz2aEqHz/K+B3Y55YCYAofJoyPf8wLtn0SvhnB3PBGeekGKogwV9rdumkwyCoBzf4j3 3Gl/0loj7LbAPftb/ln4dpRTT5Qko7E1s6OeDF/5Dp1/6YEeejNKsRcw9eBrmzrsgC6jhHf2a3Ic Rb2R+FN/wgD0k3yxbgc= ) gpo.gov. 28800 IN RRSIG ( NS 8 2 28800 20220818131455 20220811121455 11064 gpo.gov. hmjAEmzZwc9IU0h+t+3iawBIWAT7BCY7YgPDdUs/fo1oOcHq+TQgLDMnCYECWPmgjwfOv9lz9Rb0 c26qb3jvs4xLcxANOreq3MCWyB6WtFFdGENx5OxF2g3pLi5PqCbDU8rsjYDZqtQDFygsc/jwA18h 64nZ0C1b2Kj3Ag75b38= ) ;; ADDITIONAL SECTION (7 records) ns3.gpo.gov. 28800 IN A 162.140.15.100 ns3.gpo.gov. 28800 IN RRSIG ( A 8 3 28800 20220816051457 20220809041457 42399 gpo.gov. f1OGL/ksAq/IIhdVQNMrn1AAKZcrcjCOwxe+TymWX2bhCTuPRT/mAGFa3S/awQA3A2wKnqkO3Cae DXwWisKw8O1/k0oWJ59/htUbHfQGSvLYIs4PMjYp7cINcLT7rHdiyF09Bz1EOQcK69mhwdvCrnyx EwMtvS89KY61dFKDvkY= ) ns3.gpo.gov. 28800 IN RRSIG ( A 8 3 28800 20220818131455 20220811121455 11064 gpo.gov. BQgQqcqpF1VvPi3H4cfSn47f1p8Jv4MiOd+MFT5/7lfHBDc6gyJSKI71LsEBwWUSLz6ZhWVw9Hvw fFYOEvn8/gXBixQ8jy8qLPd0/64OhCTbYs3mECyGeJRZuZQ3kure0LrdBck8sp7F7ZpCezslmRoI J3V11d/kLOyG02LpLPk= ) ns4.gpo.gov. 28800 IN A 162.140.254.200 ns4.gpo.gov. 28800 IN RRSIG ( A 8 3 28800 20220816051457 20220809041457 42399 gpo.gov. OV874u1DspMkedUUmfXuteEAyBRTyhsoqn39hS9hi/Hyt8QlsmgpzBGQ6N3/8/orGZK4osNSuu+e H4k1zf5z85hO1r5xm0Wuyta1HZZu7H3M8pvGWJFY6+JNM2nz831+v0bSWuL8depWu1vgeK4l6qfY 1PKc6M1h0AMgiZd5X6c= ) ns4.gpo.gov. 28800 IN RRSIG ( A 8 3 28800 20220818131455 20220811121455 11064 gpo.gov. GhPlXMxbuut2B5K/NYCoMlqlSvYR7jC+neqWyo48MUEh32r2RCBgPr4NoYt6Zdww0CCKsxtW7qcN sELj7occXY+xfv/iViuvSRkYkbqT24jYc4Y6A9uJsRAsN5mT5ndcm0s99dRMFp9Q0H5/8jTXe8eU GBLP8+qb8Qa4zOY6itM= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns3.gpo.gov is authoritative for gpo.gov
	Found RRSIG signed by gpo.gov zone
	Query to ns3.gpo.gov for gpo.gov/A
	Received 1456 bytes from 162.140.15.100
	;; Response received from 162.140.15.100 (1456 octets) ;; HEADER SECTION ;; id = 60639 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gpo.gov. IN A ;; ANSWER SECTION (3 records) gpo.gov. 300 IN A 162.140.14.82 gpo.gov. 300 IN RRSIG ( A 8 2 300 20220816051458 20220809041458 42399 gpo.gov. iOiQ5hX1W4AEWGLTW0QTKnTF6KQtagdksadFKYS+O7vIoWOnIoeoQQPKKWZHF2He9N+H/LgvbDEp FmKOBjiNav45czzkzdACUIHSWO5KQ2Affl+p+Zjn439ax36KyJR0/zVmcGP/U2M6Nv+pPkWuwYh6 9po5dXtRPPlQU3xMvYA= ) gpo.gov. 300 IN RRSIG ( A 8 2 300 20220818131455 20220811121455 11064 gpo.gov. a2PXbiurmWHjiOR+VcJXfTTTOQ0Eq53HlWQFrMRwMfYws+nGCKJIMxAkwq4pPOreeaG2q79pSXvK yuPvkUjS8fWbNtLQouu8KUHPszbPUbbsWNKiVL1Ot0CPtHEy8OcKHrxTo4YNIU1+IfxQi4ABCdWf HnEkLh1L4JcxxpKUdAY= ) ;; AUTHORITY SECTION (4 records) gpo.gov. 28800 IN NS ns4.gpo.gov. gpo.gov. 28800 IN NS ns3.gpo.gov. gpo.gov. 28800 IN RRSIG ( NS 8 2 28800 20220816051457 20220809041457 42399 gpo.gov. EtBj1r6K9Vz2aEqHz/K+B3Y55YCYAofJoyPf8wLtn0SvhnB3PBGeekGKogwV9rdumkwyCoBzf4j3 3Gl/0loj7LbAPftb/ln4dpRTT5Qko7E1s6OeDF/5Dp1/6YEeejNKsRcw9eBrmzrsgC6jhHf2a3Ic Rb2R+FN/wgD0k3yxbgc= ) gpo.gov. 28800 IN RRSIG ( NS 8 2 28800 20220818131455 20220811121455 11064 gpo.gov. hmjAEmzZwc9IU0h+t+3iawBIWAT7BCY7YgPDdUs/fo1oOcHq+TQgLDMnCYECWPmgjwfOv9lz9Rb0 c26qb3jvs4xLcxANOreq3MCWyB6WtFFdGENx5OxF2g3pLi5PqCbDU8rsjYDZqtQDFygsc/jwA18h 64nZ0C1b2Kj3Ag75b38= ) ;; ADDITIONAL SECTION (7 records) ns3.gpo.gov. 28800 IN A 162.140.15.100 ns3.gpo.gov. 28800 IN RRSIG ( A 8 3 28800 20220816051457 20220809041457 42399 gpo.gov. f1OGL/ksAq/IIhdVQNMrn1AAKZcrcjCOwxe+TymWX2bhCTuPRT/mAGFa3S/awQA3A2wKnqkO3Cae DXwWisKw8O1/k0oWJ59/htUbHfQGSvLYIs4PMjYp7cINcLT7rHdiyF09Bz1EOQcK69mhwdvCrnyx EwMtvS89KY61dFKDvkY= ) ns3.gpo.gov. 28800 IN RRSIG ( A 8 3 28800 20220818131455 20220811121455 11064 gpo.gov. BQgQqcqpF1VvPi3H4cfSn47f1p8Jv4MiOd+MFT5/7lfHBDc6gyJSKI71LsEBwWUSLz6ZhWVw9Hvw fFYOEvn8/gXBixQ8jy8qLPd0/64OhCTbYs3mECyGeJRZuZQ3kure0LrdBck8sp7F7ZpCezslmRoI J3V11d/kLOyG02LpLPk= ) ns4.gpo.gov. 28800 IN A 162.140.254.200 ns4.gpo.gov. 28800 IN RRSIG ( A 8 3 28800 20220816051457 20220809041457 42399 gpo.gov. OV874u1DspMkedUUmfXuteEAyBRTyhsoqn39hS9hi/Hyt8QlsmgpzBGQ6N3/8/orGZK4osNSuu+e H4k1zf5z85hO1r5xm0Wuyta1HZZu7H3M8pvGWJFY6+JNM2nz831+v0bSWuL8depWu1vgeK4l6qfY 1PKc6M1h0AMgiZd5X6c= ) ns4.gpo.gov. 28800 IN RRSIG ( A 8 3 28800 20220818131455 20220811121455 11064 gpo.gov. GhPlXMxbuut2B5K/NYCoMlqlSvYR7jC+neqWyo48MUEh32r2RCBgPr4NoYt6Zdww0CCKsxtW7qcN sELj7occXY+xfv/iViuvSRkYkbqT24jYc4Y6A9uJsRAsN5mT5ndcm0s99dRMFp9Q0H5/8jTXe8eU GBLP8+qb8Qa4zOY6itM= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	gpo.gov A RR has value 162.140.14.82
	Found 2 RRSIGs over A RRset
	`gpo.gov. 300 IN RRSIG ( A 8 2 300 20220816051458 20220809041458 42399 gpo.gov. iOiQ5hX1W4AEWGLTW0QTKnTF6KQtagdksadFKYS+O7vIoWOnIoeoQQPKKWZHF2He9N+H/LgvbDEp FmKOBjiNav45czzkzdACUIHSWO5KQ2Affl+p+Zjn439ax36KyJR0/zVmcGP/U2M6Nv+pPkWuwYh6 9po5dXtRPPlQU3xMvYA= )`
	`gpo.gov. 300 IN RRSIG ( A 8 2 300 20220818131455 20220811121455 11064 gpo.gov. a2PXbiurmWHjiOR+VcJXfTTTOQ0Eq53HlWQFrMRwMfYws+nGCKJIMxAkwq4pPOreeaG2q79pSXvK yuPvkUjS8fWbNtLQouu8KUHPszbPUbbsWNKiVL1Ot0CPtHEy8OcKHrxTo4YNIU1+IfxQi4ABCdWf HnEkLh1L4JcxxpKUdAY= )`
	RRSIG=42399 and DNSKEY=42399 verifies the A RRset
	RRSIG=11064 and DNSKEY=11064 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test gpo.gov at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: