<div dir="ltr">Hello,<div><br></div><div>Can anyone help me in discerning which version of openssl supports <span style="color:rgb(0,0,0);font-size:13px">sbgp-autonomousSysNum and </span><span style="color:rgb(0,0,0);font-size:13px">sbgp-ipAddrBlock? If it has been deprecated then providing the alternative would be greatly appreciated.</span></div><div><br></div><div><br></div><div><br></div><div>A sample openssl.cnf is provided below. When I perform a request for req it fails because of the objects described above. The version of openssl I am using when attempting this req generation is version <span style="font-variant-ligatures:no-common-ligatures;background-color:rgb(1,25,147);color:rgb(255,255,255);font-family:menlo;font-size:11px">OpenSSL 1.0.2g</span><span style="font-variant-ligatures:no-common-ligatures;background-color:rgb(1,25,147);color:rgb(255,255,255);font-family:menlo;font-size:11px">  </span><span style="font-variant-ligatures:no-common-ligatures;background-color:rgb(1,25,147);color:rgb(255,255,255);font-family:menlo;font-size:11px">1 Mar 2016</span></div>







<div><br></div><div><br></div><div><pre style="margin-top:0px;margin-bottom:0px;overflow:auto;color:rgb(0,0,0);font-size:13px"><span class="gmail-k">[req]</span>
<span class="gmail-na">default_bits</span>            <span class="gmail-o">=</span> <span class="gmail-s">2048</span>
<span class="gmail-na">default_md</span>              <span class="gmail-o">=</span> <span class="gmail-s">sha256</span>
<span class="gmail-na">distinguished_name</span>      <span class="gmail-o">=</span> <span class="gmail-s">req_dn</span>
<span class="gmail-na">prompt</span>                  <span class="gmail-o">=</span> <span class="gmail-s">no</span>
<span class="gmail-na">encrypt_key</span>             <span class="gmail-o">=</span> <span class="gmail-s">no</span>

<span class="gmail-k">[req_dn]</span>
<span class="gmail-na">CN</span>                      <span class="gmail-o">=</span> <span class="gmail-s">Testbed RPKI root certificate</span>

<span class="gmail-k">[x509v3_extensions]</span>
<span class="gmail-na">basicConstraints</span>        <span class="gmail-o">=</span> <span class="gmail-s">critical,CA:true</span>
<span class="gmail-na">subjectKeyIdentifier</span>    <span class="gmail-o">=</span> <span class="gmail-s">hash</span>
<span class="gmail-na">keyUsage</span>                <span class="gmail-o">=</span> <span class="gmail-s">critical,keyCertSign,cRLSign</span>
<span class="gmail-na">subjectInfoAccess</span>       <span class="gmail-o">=</span> <span class="gmail-s">@sia</span>
<span class="gmail-na">certificatePolicies</span>     <span class="gmail-o">=</span> <span class="gmail-s">critical,1.3.6.1.5.5.7.14.2</span>
<span class="gmail-na">sbgp-autonomousSysNum</span>   <span class="gmail-o">=</span> <span class="gmail-s">critical,@rfc3779_asns</span>
<span class="gmail-na">sbgp-ipAddrBlock</span>        <span class="gmail-o">=</span> <span class="gmail-s">critical,@rfc3997_addrs</span>

<span class="gmail-k">[sia]</span>
<span class="gmail-na">1.3.6.1.5.5.7.48.5;URI</span>  <span class="gmail-o">=</span> <span class="gmail-s">rsync://<a href="http://example.org/rpki/root/">example.org/rpki/root/</a></span>
<span class="gmail-na">1.3.6.1.5.5.7.48.10;URI</span> <span class="gmail-o">=</span> <span class="gmail-s">rsync://<a href="http://example.org/rpki/root/root.mft">example.org/rpki/root/root.mft</a></span>

<span class="gmail-k">[rfc3779_asns]</span>
<span class="gmail-na">AS.0</span> <span class="gmail-o">=</span> <span class="gmail-s">64496-64511</span>
<span class="gmail-na">AS.1</span> <span class="gmail-o">=</span> <span class="gmail-s">65536-65551</span>

<span class="gmail-k">[rfc3997_addrs]</span>
<span class="gmail-na">IPv4.0</span> <span class="gmail-o">=</span> <span class="gmail-s"><a href="http://192.0.2.0/24">192.0.2.0/24</a></span>
<span class="gmail-na">IPv4.1</span> <span class="gmail-o">=</span> <span class="gmail-s"><a href="http://198.51.100.0/24">198.51.100.0/24</a></span>
<span class="gmail-na">IPv4.2</span> <span class="gmail-o">=</span> <span class="gmail-s"><a href="http://203.0.113.0/24">203.0.113.0/24</a> </span>
<span class="gmail-na">IPv6.0</span> <span class="gmail-o">=</span> <span class="gmail-s">2001:0DB8::/32</span></pre><pre style="margin-top:0px;margin-bottom:0px;overflow:auto;color:rgb(0,0,0);font-size:13px"><span class="gmail-s"><br></span></pre><pre style="margin-top:0px;margin-bottom:0px;overflow:auto;color:rgb(0,0,0);font-size:13px"><span class="gmail-s"><br></span></pre><pre style="margin-top:0px;margin-bottom:0px;overflow:auto;color:rgb(0,0,0);font-size:13px"><span class="gmail-s">Cheers,</span></pre><pre style="margin-top:0px;margin-bottom:0px;overflow:auto;color:rgb(0,0,0);font-size:13px"><span class="gmail-s">Freemon</span></pre></div></div>