I am using the following configuration file named root.conf:[req]default_bits            = 2048default_md              = sha256distinguished_name      = req_dnprompt                  = noencrypt_key             = no[req_dn]CN                      = 07dda2b49637f71b6cebe87a6954e159313b4372[x509v3_extensions]basicConstraints        = critical,CA:truesubjectKeyIdentifier    = hashkeyUsage                = critical,keyCertSign,cRLSignsubjectInfoAccess       = @siacertificatePolicies     = critical,1.3.6.1.5.5.7.14.2sbgp-autonomousSysNum   = critical,@rfc3779_asnssbgp-ipAddrBlock        = critical,@rfc3997_addrs[sia]1.3.6.1.5.5.7.48.5;URI  = rsync://example.org/rpki/root/1.3.6.1.5.5.7.48.10;URI = rsync://example.org/rpki/root/root.mft[rfc3779_asns]AS.0 = 64496-64511AS.1 = 65536-65551[rfc3997_addrs]IPv4.0 = 192.0.2.0/24IPv4.1 = 198.51.100.0/24IPv4.2 = 203.0.113.0/24IPv6.0 = 2001:0DB8::/32And I am using this command to create the certificate:#!/bin/sh -    # Generate the root key if it doesn't already exist.test -f root.key ||openssl genrsa -out root.key 2048# Generate the root certificate.openssl req                     \-new                    \-x509                   \-config root.conf       \-key    root.key        \-out    root.cer        \-outform    DER         \-days       1825        \-set_serial 1           \-extensions x509v3_extensionsBut I get the following error if I run it using the above config file:Error Loading extension section x509v3_extensions139978043373216:error:22097081:X509 V3 routines:DO_EXT_NCONF:unknown     extension:v3_conf.c:129:139978043373216:error:22098080:X509 V3 routines:X509V3_EXT_nconf:error in extension:v3_conf.c:93:name=sbgp-autonomousSysNum, value=@rfc3779_asnsThe above set of code is directly taken from http://rpki.net/wiki/doc/RPKI/CA/Configuration/CreatingRoot
Create X509 certificate with v3 extensions using command line tools
openssl;x509