1 -- RFC 3779 X.509 Extensions for IP Addr and AS ID June 2004
3 IPAddrAndASCertExtn { iso(1) identified-organization(3) dod(6)
4 internet(1) security(5) mechanisms(5) pkix(7) mod(0)
5 id-mod-ip-addr-and-as-ident(30) }
6 DEFINITIONS EXPLICIT TAGS ::=
8 -- Copyright (C) The Internet Society (2004). This --
9 -- version of this ASN.1 module is part of RFC 3779; --
10 -- see the RFC itself for full legal notices. --
16 -- PKIX specific OIDs and arcs --
17 id-pe FROM PKIX1Explicit88 { iso(1) identified-organization(3)
18 dod(6) internet(1) security(5) mechanisms(5) pkix(7)
19 id-mod(0) id-pkix1-explicit(18) };
21 -- IP Address Delegation Extension OID --
23 id-pe-ipAddrBlocks OBJECT IDENTIFIER ::= { id-pe 7 }
25 -- IP Address Delegation Extension Syntax --
27 IPAddrBlocks ::= SEQUENCE OF IPAddressFamily
29 IPAddressFamily ::= SEQUENCE { -- AFI & opt SAFI --
30 addressFamily OCTET STRING (SIZE (2..3)),
31 ipAddressChoice IPAddressChoice }
33 IPAddressChoice ::= CHOICE {
34 inherit NULL, -- inherit from issuer --
35 addressesOrRanges SEQUENCE OF IPAddressOrRange }
37 IPAddressOrRange ::= CHOICE {
38 addressPrefix IPAddress,
39 addressRange IPAddressRange }
41 IPAddressRange ::= SEQUENCE {
45 IPAddress ::= BIT STRING
47 -- Autonomous System Identifier Delegation Extension OID --
49 id-pe-autonomousSysIds OBJECT IDENTIFIER ::= { id-pe 8 }
51 -- Autonomous System Identifier Delegation Extension Syntax --
53 ASIdentifiers ::= SEQUENCE {
54 asnum [0] ASIdentifierChoice OPTIONAL,
55 rdi [1] ASIdentifierChoice OPTIONAL }
57 ASIdentifierChoice ::= CHOICE {
58 inherit NULL, -- inherit from issuer --
59 asIdsOrRanges SEQUENCE OF ASIdOrRange }
61 ASIdOrRange ::= CHOICE {
65 ASRange ::= SEQUENCE {