sth like: 
openssl req -new -config openssl-jt-admin.conf

and then: 
openssl rsa -in privkey.pem -out privkey.key

SIB phone - 2900

