View on GitHub

DNSViz: A DNS visualization tool

empowhr.gov

Updated: 2018-04-26 16:01:44 UTC (228 days ago) Update now
« Previous analysis | Next analysis »
DNSSEC options (hide)
  1. |?|
  2. |?|
  3. |?|
  4. |?|
  5. |?|
  6. |?|
  7. |?|
Notices
DNSSEC Authentication Chain

RRset statusRRset status

Secure (4)
  • empowhr.gov/A
  • empowhr.gov/NS
  • empowhr.gov/SOA
  • empowhr.gov/TXT

DNSKEY/DS/NSEC statusDNSKEY/DS/NSEC status

Bogus (4)
  • empowhr.gov/DNSKEY (alg 7, id 14226)
  • empowhr.gov/DNSKEY (alg 7, id 49763)
  • empowhr.gov/DNSKEY (alg 7, id 5550)
  • empowhr.gov/DNSKEY (alg 7, id 59477)
Secure (16)
  • ./DNSKEY (alg 8, id 19036)
  • ./DNSKEY (alg 8, id 20326)
  • ./DNSKEY (alg 8, id 39570)
  • empowhr.gov/DNSKEY (alg 7, id 12594)
  • empowhr.gov/DNSKEY (alg 7, id 24185)
  • empowhr.gov/DNSKEY (alg 7, id 25431)
  • empowhr.gov/DNSKEY (alg 7, id 33729)
  • empowhr.gov/DNSKEY (alg 7, id 45962)
  • empowhr.gov/DNSKEY (alg 7, id 54044)
  • empowhr.gov/DNSKEY (alg 7, id 56843)
  • empowhr.gov/DNSKEY (alg 7, id 62673)
  • empowhr.gov/DS (alg 7, id 12594)
  • empowhr.gov/DS (alg 7, id 25431)
  • gov/DNSKEY (alg 8, id 13838)
  • gov/DNSKEY (alg 8, id 7698)
  • gov/DS (alg 8, id 7698)

Delegation statusDelegation status

Secure (2)
  • . to gov
  • gov to empowhr.gov

NoticesNotices

Errors (11)
  • empowhr.gov zone: The server(s) were not responsive to queries over UDP. (199.139.193.199)
  • empowhr.gov/A: No response was received from the server over UDP (tried 8 times). (199.139.193.199, UDP_0_NOEDNS)
  • empowhr.gov/DNSKEY (alg 7, id 12594): The DNSKEY RR was not found in the DNSKEY RRset returned by one or more servers. (199.141.107.68, UDP_0_EDNS0_32768_4096)
  • empowhr.gov/DNSKEY (alg 7, id 24185): The DNSKEY RR was not found in the DNSKEY RRset returned by one or more servers. (199.141.107.68, UDP_0_EDNS0_32768_4096)
  • empowhr.gov/DNSKEY (alg 7, id 25431): The DNSKEY RR was not found in the DNSKEY RRset returned by one or more servers. (199.141.107.68, UDP_0_EDNS0_32768_4096)
  • empowhr.gov/DNSKEY (alg 7, id 49763): The DNSKEY RR was not found in the DNSKEY RRset returned by one or more servers. (199.134.107.68, UDP_0_EDNS0_32768_4096)
  • empowhr.gov/DNSKEY (alg 7, id 54044): The DNSKEY RR was not found in the DNSKEY RRset returned by one or more servers. (199.141.107.68, UDP_0_EDNS0_32768_4096)
  • empowhr.gov/DNSKEY: The response (512 bytes) was malformed. (199.134.107.68, 199.141.107.68, UDP_0_EDNS0_32768_512)
  • empowhr.gov/NS: No response was received from the server over UDP (tried 8 times). (199.139.193.199, UDP_0_NOEDNS)
  • gov to empowhr.gov: No valid RRSIGs made by a key corresponding to a DS RR were found covering the DNSKEY RRset, resulting in no secure entry point (SEP) into the zone. (199.141.107.68, UDP_0_EDNS0_32768_4096)
  • gov to empowhr.gov: The DS RRset for the zone included algorithm 7 (RSASHA1NSEC3SHA1), but no DS RR matched a DNSKEY with algorithm 7 that signs the zone's DNSKEY RRset. (199.141.107.68, UDP_0_EDNS0_32768_4096)
Warnings (9)
  • RRSIG empowhr.gov/NS alg 7, id 49763: The value of the Signature Inception field of the RRSIG RR (2018-04-26 16:01:13+00:00) is within possible clock skew range (31 seconds) of the current time (2018-04-26 16:01:44+00:00).
  • empowhr.gov/DNSKEY (alg 7, id 14226): The DNSKEY RR was not found in the DNSKEY RRset returned by one or more servers. (199.134.107.68, UDP_0_EDNS0_32768_4096)
  • empowhr.gov/DNSKEY (alg 7, id 33729): The DNSKEY RR was not found in the DNSKEY RRset returned by one or more servers. (199.141.107.68, UDP_0_EDNS0_32768_4096)
  • empowhr.gov/DNSKEY (alg 7, id 45962): The DNSKEY RR was not found in the DNSKEY RRset returned by one or more servers. (199.141.107.68, UDP_0_EDNS0_32768_4096)
  • empowhr.gov/DNSKEY (alg 7, id 5550): The DNSKEY RR was not found in the DNSKEY RRset returned by one or more servers. (199.134.107.68, UDP_0_EDNS0_32768_4096)
  • empowhr.gov/DNSKEY (alg 7, id 56843): The DNSKEY RR was not found in the DNSKEY RRset returned by one or more servers. (199.141.107.68, UDP_0_EDNS0_32768_4096)
  • empowhr.gov/DNSKEY (alg 7, id 59477): The DNSKEY RR was not found in the DNSKEY RRset returned by one or more servers. (199.134.107.68, UDP_0_EDNS0_32768_4096)
  • empowhr.gov/DNSKEY (alg 7, id 62673): The DNSKEY RR was not found in the DNSKEY RRset returned by one or more servers. (199.141.107.68, UDP_0_EDNS0_32768_4096)
  • gov to empowhr.gov: The following NS name(s) were found in the authoritative NS RRset, but not in the delegation NS RRset (i.e., in the gov zone): ns1.nfc.usda.gov

DNSKEY legend

Full legend
SEP bit setSEP bit set
Revoke bit setRevoke bit set
Trust anchorTrust anchor
Download: png | svg
Warning JavaScript is required to make the graph below interactive.
DNSSEC authentication graph