# $Id$
#
# Generate test root resource certificate for use with rootd.py server.

[ req ]
default_bits		= 2048
encrypt_key		= no
distinguished_name	= req_dn
req_extensions		= req_x509_ext
prompt			= no

[ req_dn ]
CN			= Completely Bogus Test Root (NOT FOR PRODUCTION USE)

[ req_x509_ext ]
basicConstraints	= critical,CA:true
subjectKeyIdentifier	= hash
keyUsage		= critical,keyCertSign,cRLSign
subjectInfoAccess	= 1.3.6.1.5.5.7.48.5;URI:rsync://wombat.invalid/
sbgp-autonomousSysNum	= critical,@req_asid_ext
sbgp-ipAddrBlock	= critical,@req_addr_ext

[ req_asid_ext ] 

AS.0			= 1-65535

[ req_addr_ext ]

IPv4.0			= 0.0.0.0/0
IPv6.0			= 0::/0