Create a 2048 bit RSA private key
$ openssl genrsa -out ca.key 2048
Its' also possible to generate an encrypted RSA key with the following options -aes128|-aes192|-aes256|-aria128|-aria192|-aria256|-camellia128|-camellia192|-camellia256|-des|-des3|-idea