…ce certificates, and conform to the certificate profile for such certificates [ RFC6487 ]. Resource certificates attest to the allocation by the (certificate) issuer of IP addresses or AS numbers to the subject. They do this by binding the public key contained in the resource cer…

…, uses, and interpretations described in the following: RFC3779 RFC6480 RFC6481 RFC6487 , and RFC6488 A process to construct and sign RPKI Trust Anchor constraints is specified in I-D.nro-sidrops-ta-constraints Such signed distributed constraints can serve as an input to the meth…

…ile makes use of certificates adhering to the RPKI resource certificate profile RFC6487 ; thus, familiarity with that profile is also assumed. 3. The ROA Content Type The content-type for a ROA is defined as id-ct-routeOriginAuthz and has the numerical value 1.2.840.113549.1.9.16…

…of EE certificate is termed a "one-time-use" EE certificate (see Section 3 of [ RFC6487 ). 3. The RSC eContentType The eContentType for an RSC is defined as id-ct-signedChecklist, with Object Identifier (OID) 1.2.840.113549.1.9.16.1.48. This OID MUST appear within both the eConte…

…d in this fashion is termed a "one-time-use" EE certificate (see Section 3 of [ RFC6487 ). 6.2. Object Filenames A guideline for naming Signed Prefix List objects is that the file name chosen in the repository be a value derived from the public key of the EE certificate. One such…

…of EE certificate is termed a "one-time-use" EE certificate (see Section 3 of [ RFC6487 ). 5.3. ASPA Object Filenames CAs are RECOMMENDED to follow the guidelines for naming ASPA objects based on Section 2.2 of [ RFC6481 , i.e., convert the 160-bit hash of the EE's public key val…

… of id-ad-caRepository in the CURRENT CA certificate's SIA extension. Notes: An RFC6487-compliant CA certificate's SIA extension has AccessDescriptions for both its repository (id-ad-caRepository) and its manifest (id-ad-rpkiManifest). Section 2 of RFC6489 also states, "While the…

… of id-ad-caRepository in the CURRENT CA certificate's SIA extension. Notes: An RFC6487-compliant CA certificate's SIA extension has AccessDescriptions for both its repository (id-ad-caRepository) and its manifest (id-ad-rpkiManifest). Section 2 of RFC6489 also states, "While the…