# $Id$
#
# Generate test root resource certificate for use with testroot.py server.

[ req ]
default_bits		= 2048
encrypt_key		= no
distinguished_name	= req_dn
req_extensions		= req_x509_ext
prompt			= no

[ req_dn ]
CN			= testroot

[ req_x509_ext ]
basicConstraints	= critical,CA:true
subjectKeyIdentifier	= hash
keyUsage		= critical,keyCertSign,cRLSign
subjectInfoAccess	= 1.3.6.1.5.5.7.48.5;URI:rsync://wombat.invalid/
sbgp-autonomousSysNum	= critical,@req_asid_ext
sbgp-ipAddrBlock	= critical,@req_addr_ext

[ req_asid_ext ] 

AS.0			= 64533
AS.1			= 64534-64540
AS.2			= 64544

[ req_addr_ext ]

IPv4.0			= 10.0.0.0/24
IPv4.1			= 10.3.0.0/24
IPv4.2			= 192.0.2.1-192.0.2.33
IPv4.3			= 192.0.2.44-192.0.2.100

IPv6.0			= 2001:db8::44-2001:db8::100
IPv6.1			= 2001:db8::a00:0/120
IPv6.2			= 2001:db8::a03:0/120
IPv6.3			= 2001:db8::10:0:44/128