3. RIR 3.1. RIR Regional Internet Registry APNIC Asia Pacific Network Information Centre RIR RIPE NCC Réseaux IP Européens Network Coordination Centre

Size: px

Start display at page:

Download "3. RIR 3.1. RIR Regional Internet Registry APNIC Asia Pacific Network Information Centre RIR RIPE NCC Réseaux IP Européens Network Coordination Centre"

ありあすみい
5 years ago
Views:

1 3 RIR RIR APNIC MyAPNIC RIPE NCC LIR Portal ARIN

2 3. RIR 3.1. RIR Regional Internet Registry APNIC Asia Pacific Network Information Centre RIR RIPE NCC Réseaux IP Européens Network Coordination Centre APNIC RIPE NCC RIR JPNIC APNIC RIPE NCC RIR ARIN American Registry for Internet Numbers RIR MAIL-FROM CRYPT-PW MD5 PGPKEY APNIC mntner 1 NONE MAIL-FROM CRYPT-PW MD5 PGPKEY UNIX crypt 8 UNIX md5 65 CRYPT-PW CRYPT-PW MD5 DES Unix crypt md5 1 Authentication options for maintainer objects 53

3 RIR whois CRYPT-PW 8 MD5 PGPKEY PGPKEY NONE MAIL-FROM CRYPT-PW MD5 PGPKEY PGPKEY PGP whois RIR PGP PKI APNIC RIPE NCC ARIN 54

4 3.2. RIR PKI APNIC RIPE NCC PKI Public-Key Infrastructure ARIN PKI PKI PKI Certificate Authority CA EE CA EE EE CA EE EE EE CA CA RIR EE CA SSL/TLS CA EE CA CA CA EE EE CA 55

5 EE CA CA EE EE CRL Certification Revocation List OCSP Online Certificate Status Protocol

6 3.3. APNIC APNIC Asia Pacific Network Information Centre APNIC RIR APNIC 1999 PKI 1999 Scoping Project 2000 Pilot Project APNIC MyAPNIC MyAPNIC PKI MyAPNIC APNIC ( APNIC CA ) APNIC MyAPNIC MyAPNIC SSL/TLS

7 APNIC CA 1. CA 証明書組み込み 2. 証明書要求 3. サービス利用 APNIC ユーザ SSL/TLS によって保護される My APNIC 3-1 MyAPNIC MyAPNIC APNIC CA EE CA APNIC CA

Copyright APNIC Pty Ltd Reproduced with permission. For further information see http://www.apnic.

8 Copyright APNIC Pty Ltd Reproduced with permission. For further information see APNIC 2 APNIC 3-3 Mozilla CA 2 How to obtain a certificate from APNIC 59

9 3-3 APNIC CA 3-4 CA APNIC CA 60

10 3-4 APNIC CA Mozilla Firefox APNIC CA Mozilla Firefox 61

3.3.3. EE APNIC CA APNIC CA 3-6 Copyright APNIC Pty Ltd Reproduced with permission.

11 EE APNIC CA APNIC CA 3-6 Copyright APNIC Pty Ltd Reproduced with permission. For further information see FAX APNIC Certificate Request Form 62

12 3-3 Identification document Your full name Your address The name of organization APNIC account name Passwd ID APNIC EE APNIC CA RA IA APNIC CA MyAPNIC

13 MyAPNIC リソース管理 IPv4 IPv6 AS 番号リクエスト発行運用管理メンバ管理連絡先管理支払い履歴リクエスト発行トレーニング履歴確認申し込み 3-7 MyAPNIC MyAPNIC IPv4 IPv6 AS AS IPv4 IPv6 AS APNIC Web

14 Copyright APNIC Pty Ltd Reproduced with permission. For further information see MyAPNIC 65

15 MyAPNIC APNIC

16 Copyright APNIC Pty Ltd Reproduced with permission. For further information see MyAPNIC demo/member_edit.html 67

3 3-6 3-6 MyAPNIC APNIC 3-10 Copyright APNIC Pty Ltd Reproduced with permission. For further information see http://www.

17 MyAPNIC APNIC 3-10 Copyright APNIC Pty Ltd Reproduced with permission. For further information see MyAPNIC demo/training.html 68

3.3.6. MyAPNIC MyAPNIC MyAPNIC 3-11 MyAPNIC MyAPNIC Copyright APNIC Pty Ltd Reproduced with permission.

18 MyAPNIC MyAPNIC MyAPNIC 3-11 MyAPNIC MyAPNIC Copyright APNIC Pty Ltd Reproduced with permission. For further information see MyAPNIC ic-demo/security.html demo/security.html 69

19 APNIC CA APNIC MyAPNIC APNIC sobgp secure origin BGP 4 RIR NIR sobgp 4 Secure Origin BGP (sobgp) Certificates 70

3.4. RIPE NCC RIPE NCC Réseaux IP Européens Network Coordination Centre RIPE NCC SSL 5 LIR Portal 3-12 copyright RIPE

21 IP AS IPv4 IPv6 AS RIPE Whois LIR Portal / RIPE45 Improved Secure Communication System for RIPE NCC Members / Tiago Rodrigues Antao 6 RIPE NCC RIPE NCC / LIR X.509 PKI RIPE NCC PKI Improved Secure Communication System for RIPE NCC Members 72

22 LIR ID にリンクした鍵の証明書を要求認証局 LIR Portal 証明書証明書証明書の要求公開鍵の送信 LIR ユーザ RIPE NCC PKI LIR Portal EE CA LIR Portal EE LIR Portal RA LIR Portal PMS Privilege Management System 3-14 RIPE NCC LIR LIR RA LIR LIR 7 certificate management cycle 73

23 RIPE NCC CA 証明書発行 ( 管理者権限 ) LIR Admin 証明書発行 ( ユーザ毎に権限設定 ) LIR User LIR User LIR User LIR User 3-14 RIPE NCC PMS LIR RegID LIR FAX LIR Portal 8 LIR Fax Confirmation Number Confirmation URL Confirmation URL URL Fax Confirmation Number LIR Portal 8 Member Services 74

24 RA LIR LIR EE PMS RA 3-15 RIPE NCC RA LIR LIR RIPE NCC CA 証明書発行 ( 管理者権限 ) LIR Admin LIR Admin LIR Admin 証明書発行証明書発行証明書発行 LIR User LIR User LIR User LIR User LIR User LIR User 3-15 PMS RA LIR RIPE NCC CA LIR Portal RIPE NCC RIPE NCC LIR 75

25 PGP PGP X.509 X.509 LIR RIPE NCC X.509 PKI LIR RIPE NCC LIR Portal X.509 PKI RIPE RIPE RIPE X.509 PKI LIR Portal RIPE LIR X.509 auth: key-cert LIR webupdates RIPE Reverse Delegation LIR X.509PKI LIR LIR Portal LIR Portal 76

26 77

27 3.5. ARIN ARIN American Registry for Internet Numbers PKI RIR ARIN ARIN X Open Policy Meeting 2002 ARIN X Open Policy Meeting Cathy Murphy Next Steps for the ARIN Registration Database 9 PGP X.509 Login/SSL Web Routing Registry ARIN XI Open Policy Meeting 2003 ARIN XI Open Policy Meeting Tim Christensen Authentication 10 X.509 PGP MD5 Public Policy Meeting PGP RIR 9 ARIN X Public Policy Meeting Minutes 10 ARIN XI Public Policy Meeting Minutes 78

28 X.509 ARIN ARIN XII Open Policy Meeting 2003 ARIN XII Open Policy Meeting Tim Christensen Cryptographic Authentication 11 ARIN IETF RFC ARIN CA 11 ARIN XII Public Policy Meeting Minute, Day

29 POC Point Of Contact CSR POC ARIN CSR ARIN CSR ARIN POC POC ARIN POC POC CSR ARIN RIR 80

30 Mail-From ARIN ARIN XIII Using X.509 Authentication with ARIN s Database 81

31 3.6. APNIC RIPE NCC Web https S/MIME RIPE NCC BGP APNIC APNIC CA MyAPNIC Web MyAPNIC Executive Council APNIC CA Web CP/CPS RIPE NCC PGP PKI S/MIME X.509 ARIN ARIN IP RIR JPNIC RIR 3 RIR JPNIC 4 RIR RIR RIR RIR EPP/CRISP 82

32 RIR RIR JPNIC CP/CPS RIR RIR IETF 83

/07/ /10/12 I

/07/ /10/12 I Certificate Policy Version 1.10 2018 10 12 1.00 2018/07/24 1.10 2018/10/12 I 1.... 1 1.1... 1 1.2... 1 1.3 PKI... 2 1.3.1 CA... 2 1.3.2 RA... 2 1.3.3... 2 1.3.3.1... 2 1.3.3.2... 3 1.3.4... 3 1.3.5...