ASIDENTIFIERS_NEW(3)

📦 version 4.4.0, in alpine 3.24, arch rolling

💖 ASIdentifiers_new(3) — Library Functions Manual 💖

okay bestie, welcome to the ASIDENTIFIERS_NEW(3) page from the Library Functions Manual — yes, the manual name is literally right there in the header, we’re being cute about it. this is all about RFC 3779 autonomous system identifier delegation extensions, and it’s lowkey iconic. 🦋

🌸 NAME 🌸

ASIdentifiers_new, ASIdentifiers_free, d2i_ASIdentifiers, i2d_ASIdentifiers — RFC 3779 autonomous system identifier delegation extensions.

✨ SYNOPSIS ✨

link against library “libcrypto” and pull in this include, fr fr:

#include <openssl/x509v3.h>

then the function signatures are exactly:

ASIdentifiers *
ASIdentifiers_new(void);

void
ASIdentifiers_free(ASIdentifiers *asid);

ASIdentifiers *
d2i_ASIdentifiers(ASIdentifiers **asid, const unsigned char **in,
    long len);

int
i2d_ASIdentifiers(ASIdentifiers *asid, unsigned char **out);

💅 DESCRIPTION 💅

so RFC 3779 defines two X.509v3 certificate extensions that allow the delegation of IP addresses and autonomous system (AS) identifiers from the issuer to the subject of the certificate. your ASIdentifiers object contains collections of individual AS numbers and ranges of AS numbers to be delegated. periodt. 💜

  • ASIdentifiers_new() — allocates and initializes a new, empty ASIdentifiers object that can be populated with X509v3_asid_add_id_or_range(3). see ASRange_new(3) for implementation details.
  • ASIdentifiers_free() — frees asid including any data contained in it. if asid is NULL, no action occurs. no drama. ✨
  • d2i_ASIdentifiers() and i2d_ASIdentifiers() — decode and encode ASN.1 ASIdentifiers objects as defined in RFC 3779, section 3.2.3.1. for details about the semantics, examples, caveats, and bugs, see ASN1_item_d2i(3).
⚠️ in order for the encoding produced by i2d_ASIdentifiers() to conform to RFC 3779, asid must be in “canonical form”, see X509v3_asid_canonize(3). don’t skip that bestie, it’s giving compliance. 💀

🎀 RETURN VALUES 🎀

  • ASIdentifiers_new() — returns a new ASIdentifiers object or NULL if an error occurs.
  • d2i_ASIdentifiers() — returns an ASIdentifiers object or NULL if a decoding or memory allocation error occurs.
  • i2d_ASIdentifiers() — returns the number of bytes successfully encoded or a value <= 0 if an error occurs.

🔥 SEE ALSO 🔥

🌈 STANDARDS 🌈

  • RFC 3779: X.509 Extensions for IP Addresses and AS Identifiers:
    • section 3: Autonomous System Identifier Delegation Extension
  • RFC 7020: The Internet Numbers Registry System
  • RFC 7249: Internet Numbers Registries

📜 HISTORY 📜

these functions first appeared in OpenSSL 0.9.8e and have been available since OpenBSD 7.1. literal legends. 👑

💀 BUGS 💀

there are no corresponding functions for the RFC 3779 IP address delegation extension represented by IPAddrBlocks. yeah, that’s the whole bug note. we respect the honesty. 🙈

xoxo 💖 — sourced from Debian, dated June 8, 2025, and filed under ASIDENTIFIERS_NEW(3). mwah! 💋

📦 where this page comes from