1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
|
# Automatically generated, do not edit.
[ ca ]
default_ca = ca_default
[ ca_default ]
certificate = RIR.cer
serial = RIR/serial
private_key = RIR.key
database = RIR/index
new_certs_dir = RIR
name_opt = ca_default
cert_opt = ca_default
default_days = 365
default_crl_days = 30
default_md = sha256
preserve = no
copy_extensions = copy
policy = ca_policy_anything
unique_subject = no
x509_extensions = ca_x509_ext
crl_extensions = crl_x509_ext
[ ca_policy_anything ]
countryName = optional
stateOrProvinceName = optional
localityName = optional
organizationName = optional
organizationalUnitName = optional
commonName = supplied
emailAddress = optional
givenName = optional
surname = optional
[ req ]
default_bits = 2048
encrypt_key = no
distinguished_name = req_dn
req_extensions = req_x509_ext
prompt = no
[ req_dn ]
CN = TEST ENTITY RIR
[ req_x509_ext ]
basicConstraints = critical,CA:true
subjectKeyIdentifier = hash
keyUsage = critical,keyCertSign,cRLSign
subjectInfoAccess = 1.3.6.1.5.5.7.48.5;URI:rsync://wombats-r-us.hactrn.net/RIR/
#authorityInfoAccess = caIssuers;URI:rsync://wombats-r-us.hactrn.net/???.cer
sbgp-autonomousSysNum = critical,AS:64533,AS:64534-64540,AS:64544
sbgp-ipAddrBlock = critical,IPv4:10.0.0.0/24,IPv4:10.3.0.0/24,IPv4:192.0.2.1-192.0.2.33,IPv4:192.0.2.44-192.0.2.100,IPv6:2001:db8::44-2001:db8::100,IPv6:2001:db8::a00:0/120,IPv6:2001:db8::a03:0/120,IPv6:2001:db8::10:0:44/128
[ ca_x509_ext ]
basicConstraints = critical,CA:true
#authorityKeyIdentifier = keyid:always
keyUsage = critical,keyCertSign,cRLSign
subjectInfoAccess = 1.3.6.1.5.5.7.48.5;URI:rsync://wombats-r-us.hactrn.net/RIR/
#authorityInfoAccess = caIssuers;URI:rsync://wombats-r-us.hactrn.net/???.cer
sbgp-autonomousSysNum = critical,AS:64533,AS:64534-64540,AS:64544
sbgp-ipAddrBlock = critical,IPv4:10.0.0.0/24,IPv4:10.3.0.0/24,IPv4:192.0.2.1-192.0.2.33,IPv4:192.0.2.44-192.0.2.100,IPv6:2001:db8::44-2001:db8::100,IPv6:2001:db8::a00:0/120,IPv6:2001:db8::a03:0/120,IPv6:2001:db8::10:0:44/128
[ crl_x509_ext ]
authorityKeyIdentifier = keyid:always
|
