# $Id$

[ req ]
default_md              = sha256
default_bits		= 2048
encrypt_key		= no
distinguished_name	= req_dn
x509_extensions		= req_x509_ext
prompt			= no

[ req_dn ]
C			= US
ST			= MA
L			= Reading
O			= Grunchweather Associates
OU			= Software Engineering
CN			= RFC3779 test cert
emailAddress		= sra@hactrn.net

[ req_x509_ext ]

sbgp-autonomousSysNum	= @asid_ext
sbgp-ipAddrBlock	= @addr_ext

basicConstraints        = critical,CA:true
subjectKeyIdentifier    = hash
keyUsage                = critical,keyCertSign,cRLSign

subjectInfoAccess       = 1.3.6.1.5.5.7.48.5;URI:rsync://example.org/foo/,1.3.6.1.5.5.7.48.10;URI:rsync://example.org/foo/bar.mnf

#crlDistributionPoints	= URI:rsync://example.org/foo/bar.crl
crlDistributionPoints	= crldp_ext

certificatePolicies     = critical, @certificate_policy_ext

[ crldp_ext ]

fullname		= @crldp_URIs

[ crldp_URIs ]

URI.0			= rsync://example.org/foo/bar.crl
URI.1			= rsync://example.org/foo/baz.crl

[ certificate_policy_ext ]

policyIdentifier	= 1.3.6.1.5.5.7.14.2

[ asid_ext ]

AS.0			= 1
AS.1			= 3-22
AS.2			= 2
RDI.0			= inherit

[ addr_ext ]

IPv4-SAFI.0		= 1 : 10.0.0.6 /24
IPv4.0			= 10.0.0.44
IPv4.1			= 10.3.0.44
IPv4.2			= 10.0.0.45
IPv4.3			= 10.2.0.5
IPv4.4			= 10.2.0.6- 10.3.0.0
IPv6.0			= 2002::
IPv6.1			= 2002::1 - 2002::14
IPv6.2			= 2003::/33