DNSSEC Analyzer

Domain Name:

Time: 2022-11-28 18:43:32 UTC, NTP stratum 16

Analyzing DNSSEC problems for gpo.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to i.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.36.148.17
	;; Response received from 192.36.148.17 (865 octets) ;; HEADER SECTION ;; id = 15053 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeB54o2xvW6vY4qQZ0krDsEZCe6MsRWCqsXd4+cNJZMePnlV/xwDrIbbeH1SJzv742rOHzgA KM1/3SQHHSkoEIPx8XQdHAZBxfhaXl3e8c5WrE3aGXS5AeTWAkt85ccqWgKyitxjFmJEOol0BqS2 xueltaDwgWcC10nPUY+y5l/kTOYyptYQS4gg1uJNXIob/R1XIEJ10ZCurkYqZxgqyHc7tZv09N23 o9rnGdjnYiArH7FjlXD8Rvjde8YWkmfdbCEWnchrnxDK8KV2/ZvBpG/WYnRKXYPUceGCw59OJdJ5 M7utkm547RB3eEd8CVVhbXopZlsKq3GCrBwaIVe9ci0= ) ; Key ID = 18733 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20221211000000 20221120000000 20326 . Y8Or1olHbjYMKfZxcKA8mP9+GWhl66Cu6Mrjh9NzLuBZ+14JZodwSJ5JaXzJxRzgHxTd/TWvnI4b AM/DQ8NYyRX/QezQdGU4ZE5RcrZLanxuX/FQR/qIMlLttCsoPtlM677HA3CecqLljbrcayIDSKMg hh5iKV1iOoW1BP1KZwgH4Y87fiWbevk+AmN5xbJCPk1iCis+kMulacxTFC+g0jyLv1V0C2hneqZ5 8os/QvW7XNBWLd9OC1LbMVVkfgUsVYqfwLjcieQ5YVRshfy2Iazv2sLo87sGvBnLmSUx8F4hiotE K6UjTNNun1tKe0VTBVkXQyaIzfUOkPgoMoWojg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeB54o2xvW6vY4qQZ0krDsEZCe6MsRWCqsXd4+cNJZMePnlV/xwDrIbbeH1SJzv742rOHzgA KM1/3SQHHSkoEIPx8XQdHAZBxfhaXl3e8c5WrE3aGXS5AeTWAkt85ccqWgKyitxjFmJEOol0BqS2 xueltaDwgWcC10nPUY+y5l/kTOYyptYQS4gg1uJNXIob/R1XIEJ10ZCurkYqZxgqyHc7tZv09N23 o9rnGdjnYiArH7FjlXD8Rvjde8YWkmfdbCEWnchrnxDK8KV2/ZvBpG/WYnRKXYPUceGCw59OJdJ5 M7utkm547RB3eEd8CVVhbXopZlsKq3GCrBwaIVe9ci0= ) ; Key ID = 18733`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20221211000000 20221120000000 20326 . Y8Or1olHbjYMKfZxcKA8mP9+GWhl66Cu6Mrjh9NzLuBZ+14JZodwSJ5JaXzJxRzgHxTd/TWvnI4b AM/DQ8NYyRX/QezQdGU4ZE5RcrZLanxuX/FQR/qIMlLttCsoPtlM677HA3CecqLljbrcayIDSKMg hh5iKV1iOoW1BP1KZwgH4Y87fiWbevk+AmN5xbJCPk1iCis+kMulacxTFC+g0jyLv1V0C2hneqZ5 8os/QvW7XNBWLd9OC1LbMVVkfgUsVYqfwLjcieQ5YVRshfy2Iazv2sLo87sGvBnLmSUx8F4hiotE K6UjTNNun1tKe0VTBVkXQyaIzfUOkPgoMoWojg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=18733 is now in the chain-of-trust
	Query to g.root-servers.net for gpo.gov/A
	Received 626 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (626 octets) ;; HEADER SECTION ;; id = 39178 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; gpo.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20221211050000 20221128040000 18733 . mqnKA1ZEUeFKl2aS5eWgk9WXLhjg7TyKaWWDHFB3ZfYrj30JFPGdG2svfm5sbkFbmlVen2KYIrBv IBKPIXQetl9s4Id/RpTt8i1DOfjBS8GOf7qpTIIcqohZCLWN9X07jCoD5xpaJMqWFJVIx2Cn9cIV e2QoCN1e9XpH8UWEFEg7eTXtfvZPJNMc9/c4C3T2uTvLfcgrgviVkO+Uz8ojikQx/f4vhJaciGyp 2GXFKOc154tHm8UyL1Gs5N5viympAiPFJxfwOXCphT7ZCmbQisUbEbKeLUVuT7Pk22hLAL0nw/xe 0b7yq/K7ZVMcyzuwXFQfPnRPIqcF+EMHXwSOlg== ) ;; ADDITIONAL SECTION (9 records) d.gov-servers.net. 172800 IN A 81.19.194.30 c.gov-servers.net. 172800 IN A 69.36.153.30 b.gov-servers.net. 172800 IN A 209.112.123.30 a.gov-servers.net. 172800 IN A 69.36.157.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to l.root-servers.net for gov/DNSKEY
	Received 622 bytes from 199.7.83.42
	;; Response received from 199.7.83.42 (622 octets) ;; HEADER SECTION ;; id = 30939 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20221211050000 20221128040000 18733 . mqnKA1ZEUeFKl2aS5eWgk9WXLhjg7TyKaWWDHFB3ZfYrj30JFPGdG2svfm5sbkFbmlVen2KYIrBv IBKPIXQetl9s4Id/RpTt8i1DOfjBS8GOf7qpTIIcqohZCLWN9X07jCoD5xpaJMqWFJVIx2Cn9cIV e2QoCN1e9XpH8UWEFEg7eTXtfvZPJNMc9/c4C3T2uTvLfcgrgviVkO+Uz8ojikQx/f4vhJaciGyp 2GXFKOc154tHm8UyL1Gs5N5viympAiPFJxfwOXCphT7ZCmbQisUbEbKeLUVuT7Pk22hLAL0nw/xe 0b7yq/K7ZVMcyzuwXFQfPnRPIqcF+EMHXwSOlg== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone gov

gov

	Checking DS between . and gov
	Query to d.root-servers.net for gov/DS
	Received 367 bytes from 199.7.91.13
	;; Response received from 199.7.91.13 (367 octets) ;; HEADER SECTION ;; id = 11560 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20221211050000 20221128040000 18733 . mqnKA1ZEUeFKl2aS5eWgk9WXLhjg7TyKaWWDHFB3ZfYrj30JFPGdG2svfm5sbkFbmlVen2KYIrBv IBKPIXQetl9s4Id/RpTt8i1DOfjBS8GOf7qpTIIcqohZCLWN9X07jCoD5xpaJMqWFJVIx2Cn9cIV e2QoCN1e9XpH8UWEFEg7eTXtfvZPJNMc9/c4C3T2uTvLfcgrgviVkO+Uz8ojikQx/f4vhJaciGyp 2GXFKOc154tHm8UyL1Gs5N5viympAiPFJxfwOXCphT7ZCmbQisUbEbKeLUVuT7Pk22hLAL0nw/xe 0b7yq/K7ZVMcyzuwXFQfPnRPIqcF+EMHXwSOlg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found 1 DS records for gov in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20221211050000 20221128040000 18733 . mqnKA1ZEUeFKl2aS5eWgk9WXLhjg7TyKaWWDHFB3ZfYrj30JFPGdG2svfm5sbkFbmlVen2KYIrBv IBKPIXQetl9s4Id/RpTt8i1DOfjBS8GOf7qpTIIcqohZCLWN9X07jCoD5xpaJMqWFJVIx2Cn9cIV e2QoCN1e9XpH8UWEFEg7eTXtfvZPJNMc9/c4C3T2uTvLfcgrgviVkO+Uz8ojikQx/f4vhJaciGyp 2GXFKOc154tHm8UyL1Gs5N5viympAiPFJxfwOXCphT7ZCmbQisUbEbKeLUVuT7Pk22hLAL0nw/xe 0b7yq/K7ZVMcyzuwXFQfPnRPIqcF+EMHXwSOlg== )`
	RRSIG=18733 and DNSKEY=18733 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to c.gov-servers.net for gov/DNSKEY
	Received 777 bytes from 69.36.153.30
	;; Response received from 69.36.153.30 (777 octets) ;; HEADER SECTION ;; id = 21458 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 gov. 86400 IN DNSKEY ( 256 3 8 AwEAAdTUAXnPaU/j+tBXBKqj7wf6CTR5erm5HMRumZ8tyIXi4rmbOdvpGcGLEu3YjqwkGoht1S4B a555IpEt+oUsjN57HbQ6eAMxBCX50EC1ipBmnnznhgoflu+DE+4No9wXHHh9pa6Vn8N7QiG1zZ4e kc9rS0to56mkLfNzJ+gjzH3tOfB9W5qnEqkqRuqXHnXxQQLBQ1I6vh1VZ5uQKYIe2H0= ) ; Key ID = 56278 gov. 86400 IN RRSIG ( DNSKEY 8 1 86400 20221205200254 20221120195754 7698 gov. FZUGnVFsKhKrSxuAbI6JdAQxCbzoP6JvsFLwKXwCMHIoBB2la/7+jwQ3DWB1LuJVqt/6SlSzTZbz mcq4Irnwjmwg+EQECsqhA7KIybCpPSiq/XsXPxvHrXes7+sVKa0UJ2wNq3yiKKzkAAlBOJfkEu5o 6jVpHpQ1NQG28rY1X4Ati7PE6ny3m3LkkrYEflE2YfXXOge+bCFjUBCBCX3YFTkJvrBuWUdfdyan 0FuN+tjFDUOzwz0t3RsiYrSfy8/Ozv8lzSI1Mip6f271uHgjpi51in8shWZibER4MxShpHa0zEQo kMiGRx3cxnAble1onSgEDfnovYe7Z7hm3ReLUQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for gov
	`gov. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`gov. 86400 IN DNSKEY ( 256 3 8 AwEAAdTUAXnPaU/j+tBXBKqj7wf6CTR5erm5HMRumZ8tyIXi4rmbOdvpGcGLEu3YjqwkGoht1S4B a555IpEt+oUsjN57HbQ6eAMxBCX50EC1ipBmnnznhgoflu+DE+4No9wXHHh9pa6Vn8N7QiG1zZ4e kc9rS0to56mkLfNzJ+gjzH3tOfB9W5qnEqkqRuqXHnXxQQLBQ1I6vh1VZ5uQKYIe2H0= ) ; Key ID = 56278`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 86400 IN RRSIG ( DNSKEY 8 1 86400 20221205200254 20221120195754 7698 gov. FZUGnVFsKhKrSxuAbI6JdAQxCbzoP6JvsFLwKXwCMHIoBB2la/7+jwQ3DWB1LuJVqt/6SlSzTZbz mcq4Irnwjmwg+EQECsqhA7KIybCpPSiq/XsXPxvHrXes7+sVKa0UJ2wNq3yiKKzkAAlBOJfkEu5o 6jVpHpQ1NQG28rY1X4Ati7PE6ny3m3LkkrYEflE2YfXXOge+bCFjUBCBCX3YFTkJvrBuWUdfdyan 0FuN+tjFDUOzwz0t3RsiYrSfy8/Ozv8lzSI1Mip6f271uHgjpi51in8shWZibER4MxShpHa0zEQo kMiGRx3cxnAble1onSgEDfnovYe7Z7hm3ReLUQ== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=56278 is now in the chain-of-trust
	Query to b.gov-servers.net for gpo.gov/A
	Received 383 bytes from 209.112.123.30
	;; Response received from 209.112.123.30 (383 octets) ;; HEADER SECTION ;; id = 11589 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gpo.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) gpo.gov. 86400 IN NS ns4.gpo.gov. gpo.gov. 86400 IN NS ns3.gpo.gov. gpo.gov. 3600 IN DS 18496 8 1 20d05e8af9ed7706ac31146b9e3bef2d04c498ed gpo.gov. 3600 IN DS ( 18496 8 2 665a12f38b1e446269351305495d6e5746cdf92d0cbaa34baf77624c1cdddd07 ) gpo.gov. 3600 IN RRSIG ( DS 8 2 3600 20221202194202 20221125194202 56278 gov. GPzCI9zGjIROL9If8BtLofRn1XqVUdehcRHZZMxbU5+bSb+S1YlpjuBj+Jx3wgKgMrTWrqzvwJ/7 NOvZaHTmeE2zsWCv7rHR84mjgF2srMpjBQIkF9UpEONytR0fhkWt9g6v9cCqsKaVpoj1US0nDh2Y ElohBrw2PCXxFrbtsA9nbCDJlTQ3URwASWqzaikhGaspb+7eOI9DdCAnPPz6yA== ) ;; ADDITIONAL SECTION (3 records) ns3.gpo.gov. 86400 IN A 162.140.15.100 ns4.gpo.gov. 86400 IN A 162.140.254.200 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.gov-servers.net for gpo.gov/DNSKEY
	Received 383 bytes from 209.112.123.30
	;; Response received from 209.112.123.30 (383 octets) ;; HEADER SECTION ;; id = 63129 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gpo.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) gpo.gov. 86400 IN NS ns4.gpo.gov. gpo.gov. 86400 IN NS ns3.gpo.gov. gpo.gov. 3600 IN DS 18496 8 1 20d05e8af9ed7706ac31146b9e3bef2d04c498ed gpo.gov. 3600 IN DS ( 18496 8 2 665a12f38b1e446269351305495d6e5746cdf92d0cbaa34baf77624c1cdddd07 ) gpo.gov. 3600 IN RRSIG ( DS 8 2 3600 20221202194202 20221125194202 56278 gov. GPzCI9zGjIROL9If8BtLofRn1XqVUdehcRHZZMxbU5+bSb+S1YlpjuBj+Jx3wgKgMrTWrqzvwJ/7 NOvZaHTmeE2zsWCv7rHR84mjgF2srMpjBQIkF9UpEONytR0fhkWt9g6v9cCqsKaVpoj1US0nDh2Y ElohBrw2PCXxFrbtsA9nbCDJlTQ3URwASWqzaikhGaspb+7eOI9DdCAnPPz6yA== ) ;; ADDITIONAL SECTION (3 records) ns3.gpo.gov. 86400 IN A 162.140.15.100 ns4.gpo.gov. 86400 IN A 162.140.254.200 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone gpo.gov

gpo.gov

	Checking DS between gov and gpo.gov
	Query to a.gov-servers.net for gpo.gov/DS
	Received 315 bytes from 69.36.157.30
	;; Response received from 69.36.157.30 (315 octets) ;; HEADER SECTION ;; id = 8536 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gpo.gov. IN DS ;; ANSWER SECTION (3 records) gpo.gov. 3600 IN DS 18496 8 1 20d05e8af9ed7706ac31146b9e3bef2d04c498ed gpo.gov. 3600 IN DS ( 18496 8 2 665a12f38b1e446269351305495d6e5746cdf92d0cbaa34baf77624c1cdddd07 ) gpo.gov. 3600 IN RRSIG ( DS 8 2 3600 20221202194202 20221125194202 56278 gov. GPzCI9zGjIROL9If8BtLofRn1XqVUdehcRHZZMxbU5+bSb+S1YlpjuBj+Jx3wgKgMrTWrqzvwJ/7 NOvZaHTmeE2zsWCv7rHR84mjgF2srMpjBQIkF9UpEONytR0fhkWt9g6v9cCqsKaVpoj1US0nDh2Y ElohBrw2PCXxFrbtsA9nbCDJlTQ3URwASWqzaikhGaspb+7eOI9DdCAnPPz6yA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for gpo.gov in the gov zone
	DS=18496/SHA-1 has algorithm RSASHA256
	DS=18496/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gpo.gov. 3600 IN RRSIG ( DS 8 2 3600 20221202194202 20221125194202 56278 gov. GPzCI9zGjIROL9If8BtLofRn1XqVUdehcRHZZMxbU5+bSb+S1YlpjuBj+Jx3wgKgMrTWrqzvwJ/7 NOvZaHTmeE2zsWCv7rHR84mjgF2srMpjBQIkF9UpEONytR0fhkWt9g6v9cCqsKaVpoj1US0nDh2Y ElohBrw2PCXxFrbtsA9nbCDJlTQ3URwASWqzaikhGaspb+7eOI9DdCAnPPz6yA== )`
	RRSIG=56278 and DNSKEY=56278 verifies the DS RRset
	DS=18496/SHA-1 is now in the chain-of-trust
	`gpo.gov. 3600 IN DS 18496 8 1 20d05e8af9ed7706ac31146b9e3bef2d04c498ed`
	`gpo.gov. 3600 IN DS ( 18496 8 2 665a12f38b1e446269351305495d6e5746cdf92d0cbaa34baf77624c1cdddd07 )`
	Query to ns4.gpo.gov for gpo.gov/DNSKEY
	Received 1237 bytes from 162.140.254.200
	;; Response received from 162.140.254.200 (1237 octets) ;; HEADER SECTION ;; id = 11854 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gpo.gov. IN DNSKEY ;; ANSWER SECTION (6 records) gpo.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAcKgUQrJoKhL+SKbS1QD1tE35DBKw5sK56HWOX2AwNsV7cCjmafzG19SVoQHK8ofnCY2Qrpq yXxoaDq+4Xl0tpK1thcs+KzmVpCYRPhtLD8rAAPFjz5WWI8PbQI3OPIH2WIU0FyxcHoGMARCI8nl iBvezJ/v1PzC6+1yBOxUvCYD ) ; Key ID = 23043 gpo.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAZMN6V7G+KviG9nluysS7G6MJtlu1O16VpJya/1KSjjFxbAqrz+KGxmZejwt0ob6NsSMCYMu 2hOOCIXcIqKh6Bo8Q2hY2psGOBIC2V0yACWlC2YUHfkvNuOEWBph9VBt6ai+iKXnMamNmtQ1y7SN SDalGXbW81JHjOur46DWY7p7 ) ; Key ID = 5001 gpo.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAcuy7Davlhnj12z2e4K01v2og+7wHJWPvVDiHsDdt8t8GBEdPOSIB9Ho/lVefhIaXN9CB5qt WxY0AZ1iYkYaJBK1EjvaXeYWmzksUFzQwHrTJZakFNVVa28d4W0XrcM0azVS88bAEbmCQqeNghnU gekhs60We19j09PTO+sHkEIaL+9vy+g0imjZDB8u3ORZxRHTkqIQf65iOZccELjDjP5NtgxaUGRe sOj9BIPtfbWcq+/STPJFhGxZH5givVmIcrvBpHhCQ17WO48tjK8EB/8ZgMYhz8dI1xpVTfqgUCwX ZLGVn8S4jOpUJqslwm+dDVKi0t4k6xAOBbLrIQ8QqSs= ) ; Key ID = 18496 gpo.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20221201131459 20221124121459 23043 gpo.gov. lcfoZutN+/ljCUdWrdYEoD4aHG4rMRWlD29bTU5+EfDKopHCxrrB/04o7E0JHPrmPgnrQpBLN3E/ qrJqsX4HT01hL2V5igLk0kPsMrtNxwwQ+de2tZd4xn86GUS/UyDXzvRdOTg8DlyGhh4oUeNWB9mL 7I6ph+TN0Qwho4cnLlU= ) gpo.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20221201131459 20221124121459 5001 gpo.gov. Ao3dxiFdqS5FJqPdULuJgQnbuYg1Jfl+ahkqyETkRBL0FnZJYkSmFjKumuLnx6DJTEzDtOECUGi+ QVpfU9F/XSmfxwWPyFK9e3TTYcJapc/Sykweob5A9ZGyN5/L20zBtEDMzR9mt5O0YfcKXQsK2iy3 nvjyen5Tx0w7zQxMdog= ) gpo.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20221201131459 20221124121459 18496 gpo.gov. ZyorGoAyL/XKpfaFhmI4wlr4xExKGSzgxh9mnXA6OEhnA4dKXK7poQbcj0FpESyVmOEntfjQ9TCS Lmwzeo1P+lDyNhUUR0F6SSlLiAKFoyLlyCGdcNNXrPkM8KE32zu8QMNIEeDwwW8XBAu1kAtNHD+G ThaZx6Dt/KalsByVbWFtoZx4Lhdl3rY9tWVIwmTt2PwZovecJaIank0jAfH/AqbDA/9Lshioti4L SwawQXYr1cl5J7hX0r8BCkyQL+ea/ZhCTmG5QLxfRIfg/rEo4zYZORkiVXKBcAe89hKsLP5id87T 3bgp/wbK1ej7XsxMuyXJQ2q++DPXUzFyI38f7w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for gpo.gov
	`gpo.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAcKgUQrJoKhL+SKbS1QD1tE35DBKw5sK56HWOX2AwNsV7cCjmafzG19SVoQHK8ofnCY2Qrpq yXxoaDq+4Xl0tpK1thcs+KzmVpCYRPhtLD8rAAPFjz5WWI8PbQI3OPIH2WIU0FyxcHoGMARCI8nl iBvezJ/v1PzC6+1yBOxUvCYD ) ; Key ID = 23043`
	`gpo.gov. 86400 IN DNSKEY ( 256 3 8 AwEAAZMN6V7G+KviG9nluysS7G6MJtlu1O16VpJya/1KSjjFxbAqrz+KGxmZejwt0ob6NsSMCYMu 2hOOCIXcIqKh6Bo8Q2hY2psGOBIC2V0yACWlC2YUHfkvNuOEWBph9VBt6ai+iKXnMamNmtQ1y7SN SDalGXbW81JHjOur46DWY7p7 ) ; Key ID = 5001`
	`gpo.gov. 86400 IN DNSKEY ( 257 3 8 AwEAAcuy7Davlhnj12z2e4K01v2og+7wHJWPvVDiHsDdt8t8GBEdPOSIB9Ho/lVefhIaXN9CB5qt WxY0AZ1iYkYaJBK1EjvaXeYWmzksUFzQwHrTJZakFNVVa28d4W0XrcM0azVS88bAEbmCQqeNghnU gekhs60We19j09PTO+sHkEIaL+9vy+g0imjZDB8u3ORZxRHTkqIQf65iOZccELjDjP5NtgxaUGRe sOj9BIPtfbWcq+/STPJFhGxZH5givVmIcrvBpHhCQ17WO48tjK8EB/8ZgMYhz8dI1xpVTfqgUCwX ZLGVn8S4jOpUJqslwm+dDVKi0t4k6xAOBbLrIQ8QqSs= ) ; Key ID = 18496`
	DNSKEY=18496/SEP is now in the chain-of-trust
	DS=18496/SHA-1 verifies DNSKEY=18496/SEP
	DS=18496/SHA-256 verifies DNSKEY=18496/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`gpo.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20221201131459 20221124121459 23043 gpo.gov. lcfoZutN+/ljCUdWrdYEoD4aHG4rMRWlD29bTU5+EfDKopHCxrrB/04o7E0JHPrmPgnrQpBLN3E/ qrJqsX4HT01hL2V5igLk0kPsMrtNxwwQ+de2tZd4xn86GUS/UyDXzvRdOTg8DlyGhh4oUeNWB9mL 7I6ph+TN0Qwho4cnLlU= )`
	`gpo.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20221201131459 20221124121459 5001 gpo.gov. Ao3dxiFdqS5FJqPdULuJgQnbuYg1Jfl+ahkqyETkRBL0FnZJYkSmFjKumuLnx6DJTEzDtOECUGi+ QVpfU9F/XSmfxwWPyFK9e3TTYcJapc/Sykweob5A9ZGyN5/L20zBtEDMzR9mt5O0YfcKXQsK2iy3 nvjyen5Tx0w7zQxMdog= )`
	`gpo.gov. 86400 IN RRSIG ( DNSKEY 8 2 86400 20221201131459 20221124121459 18496 gpo.gov. ZyorGoAyL/XKpfaFhmI4wlr4xExKGSzgxh9mnXA6OEhnA4dKXK7poQbcj0FpESyVmOEntfjQ9TCS Lmwzeo1P+lDyNhUUR0F6SSlLiAKFoyLlyCGdcNNXrPkM8KE32zu8QMNIEeDwwW8XBAu1kAtNHD+G ThaZx6Dt/KalsByVbWFtoZx4Lhdl3rY9tWVIwmTt2PwZovecJaIank0jAfH/AqbDA/9Lshioti4L SwawQXYr1cl5J7hX0r8BCkyQL+ea/ZhCTmG5QLxfRIfg/rEo4zYZORkiVXKBcAe89hKsLP5id87T 3bgp/wbK1ej7XsxMuyXJQ2q++DPXUzFyI38f7w== )`
	RRSIG=23043 and DNSKEY=23043 verifies the DNSKEY RRset
	RRSIG=5001 and DNSKEY=5001 verifies the DNSKEY RRset
	RRSIG=18496 and DNSKEY=18496/SEP verifies the DNSKEY RRset
	DNSKEY=23043 is now in the chain-of-trust
	DNSKEY=5001 is now in the chain-of-trust
	Query to ns3.gpo.gov for gpo.gov/A
	Received 1456 bytes from 162.140.15.100
	;; Response received from 162.140.15.100 (1456 octets) ;; HEADER SECTION ;; id = 74 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gpo.gov. IN A ;; ANSWER SECTION (3 records) gpo.gov. 300 IN A 162.140.14.82 gpo.gov. 300 IN RRSIG ( A 8 2 300 20221203211514 20221126201514 23043 gpo.gov. A8bItI5vos52K/LJFqlf7TWOTv93G3g/7jFiWb7JoeSZHIvse03xOHMFoxhmRi101VLDjJKU2mg7 9gqymrKRYZ73N7/yK7kdOFOaAOzLBt1wzfXchQPVkn5ssFkHbelp5V7rx465vFTeBrQ+ibey+7NG CxgGd9Co6WZ/rFv+jLw= ) gpo.gov. 300 IN RRSIG ( A 8 2 300 20221201131500 20221124121500 5001 gpo.gov. BGm5TLHNRBFhbF3mi+6cOe+pX/PrcTsbB9XYZkrj13KS+C1SEuvHmcLlmrPfXW5W05FW4tKgx6/F 1ZeJo/7mFZmmInXm/zv9130fbJbelpbhQYHxG+V9Nmuzm7d9mMpBwboWy+ZfP8YUv7kHL6ddWHO4 mTs/1BRoDxm/0Zn3Jes= ) ;; AUTHORITY SECTION (4 records) gpo.gov. 28800 IN NS ns3.gpo.gov. gpo.gov. 28800 IN NS ns4.gpo.gov. gpo.gov. 28800 IN RRSIG ( NS 8 2 28800 20221203211506 20221126201506 23043 gpo.gov. OwZ8503mBOK1RRS49idVsRKxULsPb53LzJZO26t7difeoD4dzvY3ELkZ4kvA7ENW+khg9MOgYVSa xWoALBQQqigxzuTqq5/ndugUiZr1ffb2EL7d3BAnpHSuiOwX6e/KSLLpz8M+yoYqpHaBhMLWLSMy K7F0abj9QwZd9jXWGNk= ) gpo.gov. 28800 IN RRSIG ( NS 8 2 28800 20221201131500 20221124121500 5001 gpo.gov. DizzfAHYEu5s51VjkxPVleRYdfixlVUaxwZPhXHuWgbApNBzVr0LCFn2mRecSp68XbZ5Hh1tjOsJ e0QbKWBr7roV8+KpU2jEJ1Ypf5LPlVADYd64OSqO3uMgK76eA5uVftYPUE1/Kf+dempryHRNjMW5 1+93dpflCtn1U1jeT5g= ) ;; ADDITIONAL SECTION (7 records) ns3.gpo.gov. 28800 IN A 162.140.15.100 ns3.gpo.gov. 28800 IN RRSIG ( A 8 3 28800 20221203211506 20221126201506 23043 gpo.gov. JTeML7lnIDt4Pq0+0bNLjyTM8iUsxovT01h3tezLYN3DFszDD1Gxa5Nlx/N9Bi/FK+HggmiPXEF0 YlF1jghxt8jcSPYA2Fn0YJQOSVAwTijeXbF3KjxazwEVzSiR8Oza8qvotkwj7PSON+0rBgZhRu+r 4kuJLwqAryyOEClIn58= ) ns3.gpo.gov. 28800 IN RRSIG ( A 8 3 28800 20221201131500 20221124121500 5001 gpo.gov. LH1fq7wKLqmVL767JQ2sq3gikgffFx1M9RjqZ1pCKyzvIqjDAuOUnjdogTLphL0KNHI4nIn0zR0T lMgvRKW+6o5vUK2JgMCPLjouIv+KZsY2drUtOTujbu7IETRqCtvJ0ilrbLfLKXElHiugTObvynUL ZDi4+vXSkhUNqIBE/R0= ) ns4.gpo.gov. 28800 IN A 162.140.254.200 ns4.gpo.gov. 28800 IN RRSIG ( A 8 3 28800 20221203211506 20221126201506 23043 gpo.gov. GEbY3k0fnSw7HzCvJxoD+hgzLXl+VHiQdhXjuGjwCoRmcznN9KF93kg6/kLe2tmH1St464vD6IIL Q4SKNI1+uxkAINuflCumAlTghjEV1Co7odTFOVVbQJ81dU+beKZXlhkX6nUW2RMRqG7hqk97oKL9 r8piYNfZTzlF4uQEJ5M= ) ns4.gpo.gov. 28800 IN RRSIG ( A 8 3 28800 20221201131500 20221124121500 5001 gpo.gov. S1LjDxm3CLR09lenaATPFk3Fti5vzPZDsIm54LtE+fsdNpfJFLKer8WHSyFv0CvSgQ60nw0RI01i D7pudvn6IiBcTJ/EuPhJ2/ptADvCI78lCqOag2IXaZP78Uwe5iP4CNkq/X+/Pd3ydE2JLQO4I2Fm haccxYLCCgr4T+We0Xw= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns3.gpo.gov is authoritative for gpo.gov
	Found RRSIG signed by gpo.gov zone
	Query to ns4.gpo.gov for gpo.gov/SOA
	Received 1485 bytes from 162.140.254.200
	;; Response received from 162.140.254.200 (1485 octets) ;; HEADER SECTION ;; id = 38596 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gpo.gov. IN SOA ;; ANSWER SECTION (3 records) gpo.gov. 28800 IN SOA ( ins1.gpo.gov. noc.gpo.gov. 2010073207 ;serial 10800 ;refresh 3600 ;retry 2592000 ;expire 900 ;minimum ) gpo.gov. 28800 IN RRSIG ( SOA 8 2 28800 20221203222044 20221126212044 23043 gpo.gov. DRCuXZNfghRhBUfG6ReesTvtJ45hDaDYV7PcFmREMrbT4okwNXauJ7SmPFVLtWhk1UGm6dA9LmKc SeypTd48qrQ/uO2FpemntPlIHHFC4dPV3RbiI/ar3frawZe2PZJjygxvk9FKmDR2btzbEKY0N1QX Mgkw+U8z61uKRWRar1I= ) gpo.gov. 28800 IN RRSIG ( SOA 8 2 28800 20221201132544 20221124122544 5001 gpo.gov. eMq3LalPTnENUDonx5vI42UNyAKcVA9CSeam2skWBaztlsgpfqLklE9oyldxDpyOC7BN/cLlQvuX hzF6psZaahwoSobVOHTkNhtMEHp+m/L8pHfTQFbVTUUEvTK8cYrXaAdG5Vmf13+vRsUbBkrP95Jy w7rvECdhmofoX82vYX0= ) ;; AUTHORITY SECTION (4 records) gpo.gov. 28800 IN NS ns4.gpo.gov. gpo.gov. 28800 IN NS ns3.gpo.gov. gpo.gov. 28800 IN RRSIG ( NS 8 2 28800 20221203211504 20221126201504 23043 gpo.gov. lJYm2pUWdv/5RuLd5b+rgDeti8VGcqmTMVQJwc9JyjroHZj547vcGY7UWih+onlLP6nynYij1O+i ZzEL/2Gk81Z8yqyLt1b4INl+6S/jB61YhgX11CVYDVt7zP/Rkyck/8SyvdMRoDWA8ksxvEfqUjGP k8Id9tTjTlbS5pNImEk= ) gpo.gov. 28800 IN RRSIG ( NS 8 2 28800 20221201131459 20221124121459 5001 gpo.gov. UvR3fdsx2TRVRlzBwYGXyZeUfr5ZMPoP/cfBxrRYRkY/+A4X4lyS732SpDDGKYz366C0WnPVz1m5 jEBRktX8JLbgR8E4wmZRC1O3LSrWBmeWzL7+P3WPxAdS8z3Pva4QEHB4kceKXptXik48qzXsagnR QVms7EAYOnN2nhjrqzs= ) ;; ADDITIONAL SECTION (7 records) ns3.gpo.gov. 28800 IN A 162.140.15.100 ns3.gpo.gov. 28800 IN RRSIG ( A 8 3 28800 20221203223246 20221126213246 23043 gpo.gov. FaAtOMrPlXB2g3/dKWuD1DlKz7BmeR/e9dKbZRqQvqSa1exHUJxMNxSspi210Vo7zx4yVO3ZjQE3 emULm8DosQmbkckTxjK2gHxf9WCjndwgirIeS/ChNn6kkFwzStAPjHyeBLlobZPlqq2qrVk6F21M AFB5Suwd6yVf6SVHiyc= ) ns3.gpo.gov. 28800 IN RRSIG ( A 8 3 28800 20221201131459 20221124121459 5001 gpo.gov. deT8u1qp7L1GaSPXg6tsVeHX9mTGklcgvanenSZjQgkmEthkVjT+vGecA2HqyIF4P45jfWL3MgAl hnwH6n6BwbLOsN57HHXxN2viB8dM1re17GZUKtelFQi8zXFNL1Um1/a0XutDlZGVmvuSA1h+VfO3 q83jxK074HmqZlfz1Aw= ) ns4.gpo.gov. 28800 IN A 162.140.254.200 ns4.gpo.gov. 28800 IN RRSIG ( A 8 3 28800 20221203211504 20221126201504 23043 gpo.gov. PEPVJUek5JQa0Dwq7QlQGJplEiOHQ/EUjHv6JFOPKTmpGn0J/KD85Ac3xgBb0ZAyJWJUCXhJE1/1 /OYdlHbO84etOpdLDmhI6W/KolMVHZzDx1qDOuRasK/h/aFbvxU/OVYLJniWqT4Hc9ZiZQk7juKJ KbI1VhWvIZB0c2Mr3IE= ) ns4.gpo.gov. 28800 IN RRSIG ( A 8 3 28800 20221201131459 20221124121459 5001 gpo.gov. gionNwv6t/AjngGXws2U7V9AC3BZxaBxF5TP3l/EkhZxosfc2hrYOHms7F1jQMRUdlR9D4SQwQlr 02n0QlQvcptWrukR3UhCO8x+Dzn2IbLlZESmqol9QfC+R9ic9lfLfw82zQafJfS8u3mn3jK1yEvJ f295RqA3DW1RmVBGyfU= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns3.gpo.gov for gpo.gov/A
	Received 1456 bytes from 162.140.15.100
	;; Response received from 162.140.15.100 (1456 octets) ;; HEADER SECTION ;; id = 57467 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gpo.gov. IN A ;; ANSWER SECTION (3 records) gpo.gov. 300 IN A 162.140.14.82 gpo.gov. 300 IN RRSIG ( A 8 2 300 20221203211514 20221126201514 23043 gpo.gov. A8bItI5vos52K/LJFqlf7TWOTv93G3g/7jFiWb7JoeSZHIvse03xOHMFoxhmRi101VLDjJKU2mg7 9gqymrKRYZ73N7/yK7kdOFOaAOzLBt1wzfXchQPVkn5ssFkHbelp5V7rx465vFTeBrQ+ibey+7NG CxgGd9Co6WZ/rFv+jLw= ) gpo.gov. 300 IN RRSIG ( A 8 2 300 20221201131500 20221124121500 5001 gpo.gov. BGm5TLHNRBFhbF3mi+6cOe+pX/PrcTsbB9XYZkrj13KS+C1SEuvHmcLlmrPfXW5W05FW4tKgx6/F 1ZeJo/7mFZmmInXm/zv9130fbJbelpbhQYHxG+V9Nmuzm7d9mMpBwboWy+ZfP8YUv7kHL6ddWHO4 mTs/1BRoDxm/0Zn3Jes= ) ;; AUTHORITY SECTION (4 records) gpo.gov. 28800 IN NS ns3.gpo.gov. gpo.gov. 28800 IN NS ns4.gpo.gov. gpo.gov. 28800 IN RRSIG ( NS 8 2 28800 20221203211506 20221126201506 23043 gpo.gov. OwZ8503mBOK1RRS49idVsRKxULsPb53LzJZO26t7difeoD4dzvY3ELkZ4kvA7ENW+khg9MOgYVSa xWoALBQQqigxzuTqq5/ndugUiZr1ffb2EL7d3BAnpHSuiOwX6e/KSLLpz8M+yoYqpHaBhMLWLSMy K7F0abj9QwZd9jXWGNk= ) gpo.gov. 28800 IN RRSIG ( NS 8 2 28800 20221201131500 20221124121500 5001 gpo.gov. DizzfAHYEu5s51VjkxPVleRYdfixlVUaxwZPhXHuWgbApNBzVr0LCFn2mRecSp68XbZ5Hh1tjOsJ e0QbKWBr7roV8+KpU2jEJ1Ypf5LPlVADYd64OSqO3uMgK76eA5uVftYPUE1/Kf+dempryHRNjMW5 1+93dpflCtn1U1jeT5g= ) ;; ADDITIONAL SECTION (7 records) ns3.gpo.gov. 28800 IN A 162.140.15.100 ns3.gpo.gov. 28800 IN RRSIG ( A 8 3 28800 20221203211506 20221126201506 23043 gpo.gov. JTeML7lnIDt4Pq0+0bNLjyTM8iUsxovT01h3tezLYN3DFszDD1Gxa5Nlx/N9Bi/FK+HggmiPXEF0 YlF1jghxt8jcSPYA2Fn0YJQOSVAwTijeXbF3KjxazwEVzSiR8Oza8qvotkwj7PSON+0rBgZhRu+r 4kuJLwqAryyOEClIn58= ) ns3.gpo.gov. 28800 IN RRSIG ( A 8 3 28800 20221201131500 20221124121500 5001 gpo.gov. LH1fq7wKLqmVL767JQ2sq3gikgffFx1M9RjqZ1pCKyzvIqjDAuOUnjdogTLphL0KNHI4nIn0zR0T lMgvRKW+6o5vUK2JgMCPLjouIv+KZsY2drUtOTujbu7IETRqCtvJ0ilrbLfLKXElHiugTObvynUL ZDi4+vXSkhUNqIBE/R0= ) ns4.gpo.gov. 28800 IN A 162.140.254.200 ns4.gpo.gov. 28800 IN RRSIG ( A 8 3 28800 20221203211506 20221126201506 23043 gpo.gov. GEbY3k0fnSw7HzCvJxoD+hgzLXl+VHiQdhXjuGjwCoRmcznN9KF93kg6/kLe2tmH1St464vD6IIL Q4SKNI1+uxkAINuflCumAlTghjEV1Co7odTFOVVbQJ81dU+beKZXlhkX6nUW2RMRqG7hqk97oKL9 r8piYNfZTzlF4uQEJ5M= ) ns4.gpo.gov. 28800 IN RRSIG ( A 8 3 28800 20221201131500 20221124121500 5001 gpo.gov. S1LjDxm3CLR09lenaATPFk3Fti5vzPZDsIm54LtE+fsdNpfJFLKer8WHSyFv0CvSgQ60nw0RI01i D7pudvn6IiBcTJ/EuPhJ2/ptADvCI78lCqOag2IXaZP78Uwe5iP4CNkq/X+/Pd3ydE2JLQO4I2Fm haccxYLCCgr4T+We0Xw= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	gpo.gov A RR has value 162.140.14.82
	Found 2 RRSIGs over A RRset
	`gpo.gov. 300 IN RRSIG ( A 8 2 300 20221203211514 20221126201514 23043 gpo.gov. A8bItI5vos52K/LJFqlf7TWOTv93G3g/7jFiWb7JoeSZHIvse03xOHMFoxhmRi101VLDjJKU2mg7 9gqymrKRYZ73N7/yK7kdOFOaAOzLBt1wzfXchQPVkn5ssFkHbelp5V7rx465vFTeBrQ+ibey+7NG CxgGd9Co6WZ/rFv+jLw= )`
	`gpo.gov. 300 IN RRSIG ( A 8 2 300 20221201131500 20221124121500 5001 gpo.gov. BGm5TLHNRBFhbF3mi+6cOe+pX/PrcTsbB9XYZkrj13KS+C1SEuvHmcLlmrPfXW5W05FW4tKgx6/F 1ZeJo/7mFZmmInXm/zv9130fbJbelpbhQYHxG+V9Nmuzm7d9mMpBwboWy+ZfP8YUv7kHL6ddWHO4 mTs/1BRoDxm/0Zn3Jes= )`
	RRSIG=23043 and DNSKEY=23043 verifies the A RRset
	RRSIG=5001 and DNSKEY=5001 verifies the A RRset

gpo.gov

	Query to ns4.gpo.gov for gpo.gov/A
	Received 1456 bytes from 162.140.254.200
	;; Response received from 162.140.254.200 (1456 octets) ;; HEADER SECTION ;; id = 25648 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gpo.gov. IN A ;; ANSWER SECTION (3 records) gpo.gov. 300 IN A 162.140.14.82 gpo.gov. 300 IN RRSIG ( A 8 2 300 20221203224352 20221126214352 23043 gpo.gov. i+/HTRLDi5IQvM3CseYycveQCYl6uX31EqGAf2mtbnsSZtghUpG654rw2EyCtgzo74NGYVvj3Hcg U11w8b4vwmBynbuQs5/lx7+cFDGVJbBXDVPRk3nh/egoHz0budS7CeATlr0S7XcWv9LuQMMCv7NW CnN+TymGX0fEHTqZtFE= ) gpo.gov. 300 IN RRSIG ( A 8 2 300 20221201131459 20221124121459 5001 gpo.gov. juiCYXR/9x99teEvwIQsnOiLgeFEwSQmzcrmwLJjc/XgoWk+o9vlOoECcgyb0+xfHxheeTNDzmAT t6aLOCqg0EHIeP5fcwhIdXSxQjUyoFlpM5Yb/tlOuPVDbuapV8TTIrb2Zur94+Ba+MtmhaLy6dK1 DTAdOKbSgpVdogxD8DQ= ) ;; AUTHORITY SECTION (4 records) gpo.gov. 28800 IN NS ns4.gpo.gov. gpo.gov. 28800 IN NS ns3.gpo.gov. gpo.gov. 28800 IN RRSIG ( NS 8 2 28800 20221203211504 20221126201504 23043 gpo.gov. lJYm2pUWdv/5RuLd5b+rgDeti8VGcqmTMVQJwc9JyjroHZj547vcGY7UWih+onlLP6nynYij1O+i ZzEL/2Gk81Z8yqyLt1b4INl+6S/jB61YhgX11CVYDVt7zP/Rkyck/8SyvdMRoDWA8ksxvEfqUjGP k8Id9tTjTlbS5pNImEk= ) gpo.gov. 28800 IN RRSIG ( NS 8 2 28800 20221201131459 20221124121459 5001 gpo.gov. UvR3fdsx2TRVRlzBwYGXyZeUfr5ZMPoP/cfBxrRYRkY/+A4X4lyS732SpDDGKYz366C0WnPVz1m5 jEBRktX8JLbgR8E4wmZRC1O3LSrWBmeWzL7+P3WPxAdS8z3Pva4QEHB4kceKXptXik48qzXsagnR QVms7EAYOnN2nhjrqzs= ) ;; ADDITIONAL SECTION (7 records) ns3.gpo.gov. 28800 IN A 162.140.15.100 ns3.gpo.gov. 28800 IN RRSIG ( A 8 3 28800 20221203223246 20221126213246 23043 gpo.gov. FaAtOMrPlXB2g3/dKWuD1DlKz7BmeR/e9dKbZRqQvqSa1exHUJxMNxSspi210Vo7zx4yVO3ZjQE3 emULm8DosQmbkckTxjK2gHxf9WCjndwgirIeS/ChNn6kkFwzStAPjHyeBLlobZPlqq2qrVk6F21M AFB5Suwd6yVf6SVHiyc= ) ns3.gpo.gov. 28800 IN RRSIG ( A 8 3 28800 20221201131459 20221124121459 5001 gpo.gov. deT8u1qp7L1GaSPXg6tsVeHX9mTGklcgvanenSZjQgkmEthkVjT+vGecA2HqyIF4P45jfWL3MgAl hnwH6n6BwbLOsN57HHXxN2viB8dM1re17GZUKtelFQi8zXFNL1Um1/a0XutDlZGVmvuSA1h+VfO3 q83jxK074HmqZlfz1Aw= ) ns4.gpo.gov. 28800 IN A 162.140.254.200 ns4.gpo.gov. 28800 IN RRSIG ( A 8 3 28800 20221203211504 20221126201504 23043 gpo.gov. PEPVJUek5JQa0Dwq7QlQGJplEiOHQ/EUjHv6JFOPKTmpGn0J/KD85Ac3xgBb0ZAyJWJUCXhJE1/1 /OYdlHbO84etOpdLDmhI6W/KolMVHZzDx1qDOuRasK/h/aFbvxU/OVYLJniWqT4Hc9ZiZQk7juKJ KbI1VhWvIZB0c2Mr3IE= ) ns4.gpo.gov. 28800 IN RRSIG ( A 8 3 28800 20221201131459 20221124121459 5001 gpo.gov. gionNwv6t/AjngGXws2U7V9AC3BZxaBxF5TP3l/EkhZxosfc2hrYOHms7F1jQMRUdlR9D4SQwQlr 02n0QlQvcptWrukR3UhCO8x+Dzn2IbLlZESmqol9QfC+R9ic9lfLfw82zQafJfS8u3mn3jK1yEvJ f295RqA3DW1RmVBGyfU= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns4.gpo.gov is authoritative for gpo.gov
	Found RRSIG signed by gpo.gov zone
	Query to ns4.gpo.gov for gpo.gov/A
	Received 1456 bytes from 162.140.254.200
	;; Response received from 162.140.254.200 (1456 octets) ;; HEADER SECTION ;; id = 33593 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gpo.gov. IN A ;; ANSWER SECTION (3 records) gpo.gov. 300 IN A 162.140.14.82 gpo.gov. 300 IN RRSIG ( A 8 2 300 20221203224352 20221126214352 23043 gpo.gov. i+/HTRLDi5IQvM3CseYycveQCYl6uX31EqGAf2mtbnsSZtghUpG654rw2EyCtgzo74NGYVvj3Hcg U11w8b4vwmBynbuQs5/lx7+cFDGVJbBXDVPRk3nh/egoHz0budS7CeATlr0S7XcWv9LuQMMCv7NW CnN+TymGX0fEHTqZtFE= ) gpo.gov. 300 IN RRSIG ( A 8 2 300 20221201131459 20221124121459 5001 gpo.gov. juiCYXR/9x99teEvwIQsnOiLgeFEwSQmzcrmwLJjc/XgoWk+o9vlOoECcgyb0+xfHxheeTNDzmAT t6aLOCqg0EHIeP5fcwhIdXSxQjUyoFlpM5Yb/tlOuPVDbuapV8TTIrb2Zur94+Ba+MtmhaLy6dK1 DTAdOKbSgpVdogxD8DQ= ) ;; AUTHORITY SECTION (4 records) gpo.gov. 28800 IN NS ns3.gpo.gov. gpo.gov. 28800 IN NS ns4.gpo.gov. gpo.gov. 28800 IN RRSIG ( NS 8 2 28800 20221203211504 20221126201504 23043 gpo.gov. lJYm2pUWdv/5RuLd5b+rgDeti8VGcqmTMVQJwc9JyjroHZj547vcGY7UWih+onlLP6nynYij1O+i ZzEL/2Gk81Z8yqyLt1b4INl+6S/jB61YhgX11CVYDVt7zP/Rkyck/8SyvdMRoDWA8ksxvEfqUjGP k8Id9tTjTlbS5pNImEk= ) gpo.gov. 28800 IN RRSIG ( NS 8 2 28800 20221201131459 20221124121459 5001 gpo.gov. UvR3fdsx2TRVRlzBwYGXyZeUfr5ZMPoP/cfBxrRYRkY/+A4X4lyS732SpDDGKYz366C0WnPVz1m5 jEBRktX8JLbgR8E4wmZRC1O3LSrWBmeWzL7+P3WPxAdS8z3Pva4QEHB4kceKXptXik48qzXsagnR QVms7EAYOnN2nhjrqzs= ) ;; ADDITIONAL SECTION (7 records) ns3.gpo.gov. 28800 IN A 162.140.15.100 ns3.gpo.gov. 28800 IN RRSIG ( A 8 3 28800 20221203223246 20221126213246 23043 gpo.gov. FaAtOMrPlXB2g3/dKWuD1DlKz7BmeR/e9dKbZRqQvqSa1exHUJxMNxSspi210Vo7zx4yVO3ZjQE3 emULm8DosQmbkckTxjK2gHxf9WCjndwgirIeS/ChNn6kkFwzStAPjHyeBLlobZPlqq2qrVk6F21M AFB5Suwd6yVf6SVHiyc= ) ns3.gpo.gov. 28800 IN RRSIG ( A 8 3 28800 20221201131459 20221124121459 5001 gpo.gov. deT8u1qp7L1GaSPXg6tsVeHX9mTGklcgvanenSZjQgkmEthkVjT+vGecA2HqyIF4P45jfWL3MgAl hnwH6n6BwbLOsN57HHXxN2viB8dM1re17GZUKtelFQi8zXFNL1Um1/a0XutDlZGVmvuSA1h+VfO3 q83jxK074HmqZlfz1Aw= ) ns4.gpo.gov. 28800 IN A 162.140.254.200 ns4.gpo.gov. 28800 IN RRSIG ( A 8 3 28800 20221203211504 20221126201504 23043 gpo.gov. PEPVJUek5JQa0Dwq7QlQGJplEiOHQ/EUjHv6JFOPKTmpGn0J/KD85Ac3xgBb0ZAyJWJUCXhJE1/1 /OYdlHbO84etOpdLDmhI6W/KolMVHZzDx1qDOuRasK/h/aFbvxU/OVYLJniWqT4Hc9ZiZQk7juKJ KbI1VhWvIZB0c2Mr3IE= ) ns4.gpo.gov. 28800 IN RRSIG ( A 8 3 28800 20221201131459 20221124121459 5001 gpo.gov. gionNwv6t/AjngGXws2U7V9AC3BZxaBxF5TP3l/EkhZxosfc2hrYOHms7F1jQMRUdlR9D4SQwQlr 02n0QlQvcptWrukR3UhCO8x+Dzn2IbLlZESmqol9QfC+R9ic9lfLfw82zQafJfS8u3mn3jK1yEvJ f295RqA3DW1RmVBGyfU= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	gpo.gov A RR has value 162.140.14.82
	Found 2 RRSIGs over A RRset
	`gpo.gov. 300 IN RRSIG ( A 8 2 300 20221203224352 20221126214352 23043 gpo.gov. i+/HTRLDi5IQvM3CseYycveQCYl6uX31EqGAf2mtbnsSZtghUpG654rw2EyCtgzo74NGYVvj3Hcg U11w8b4vwmBynbuQs5/lx7+cFDGVJbBXDVPRk3nh/egoHz0budS7CeATlr0S7XcWv9LuQMMCv7NW CnN+TymGX0fEHTqZtFE= )`
	`gpo.gov. 300 IN RRSIG ( A 8 2 300 20221201131459 20221124121459 5001 gpo.gov. juiCYXR/9x99teEvwIQsnOiLgeFEwSQmzcrmwLJjc/XgoWk+o9vlOoECcgyb0+xfHxheeTNDzmAT t6aLOCqg0EHIeP5fcwhIdXSxQjUyoFlpM5Yb/tlOuPVDbuapV8TTIrb2Zur94+Ba+MtmhaLy6dK1 DTAdOKbSgpVdogxD8DQ= )`
	RRSIG=23043 and DNSKEY=23043 verifies the A RRset
	RRSIG=5001 and DNSKEY=5001 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test gpo.gov at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: