1RPKI-CLIENT(1) BSD General Commands Manual RPKI-CLIENT(1)
2
4 rpki-client — produce valid route announcements
5
7 rpki-client [-fnqrv] [-e rsync_prog] tal ...
8
10 The rpki-client utility produces all route announcements starting with
11 trust anchor locators. It uses openrsync(1) to fetch certificates, mani‐
12 fests, revocation lists, and route announcements themselves. Its argu‐
13 ments are as follows:
14
15 -e rsync_prog
16 Use rsync_prog instead of openrsync(1) to fetch repositories. It
17 must accept the -rlt and --delete flags and connect with rsync-
18 protocol locations.
19
20 -f Accept out-of-date manifests. This will still report if a mani‐
21 fest has expired.
22
23 -n Assume that all requested repositories exist: don't update.
24
25 -q Don't emit any route statements.
26
27 -r Don't parse certificate revocation files. This additional step
28 can take a long time.
29
30 -v Specified once, prints information about status. Twice, prints
31 each filename as it's processed.
32
33 tal A trust anchor locator (TAL) file.
34
35 rpki-client produces a list of unique roa-set statements as specified by
36 bgpd.conf(5) on standard output.
37
39 The rpki-client utility exits 0 on success, and >0 if an error occurs.
40
42 openrsync(1) bgpd.conf(5)
43
45 The following standards are used or referenced in rpki-client:
46
47 RFC 3370
48 Cryptographic Message Syntax (CMS) Algorithms.
49
50 RFC 3779
51 X.509 Extensions for IP Addresses and AS Identifiers.
52
53 RFC 4291
54 IP Version 6 Addressing Architecture.
55
56 RFC 4631
57 Classless Inter-domain Routing (CIDR): The Internet Address Assign‐
58 ment and Aggregation Plan.
59
60 RFC 5280
61 Internet X.509 Public Key Infrastructure Certificate and Certificate
62 Revocation List (CRL) Profile.
63
64 RFC 5652
65 Cryptographic Message Syntax (CMS).
66
67 RFC 5781
68 The rsync URI Scheme.
69
70 RFC 5952
71 A Recommendation for IPv6 Address Text Representation.
72
73 RFC 6480
74 An Infrastructure to Support Secure Internet Routing.
75
76 RFC 6482
77 A Profile for Route Origin Authorizations (ROAs).
78
79 RFC 6485
80 The Profile for Algorithms and Key Sizes for Use in the Resource
81 Public Key Infrastructure (RPKI).
82
83 RFC 6486
84 Manifests for the Resource Public Key Infrastructure (RPKI).
85
86 RFC 6487
87 A Profile for X.509 PKIX Resource Certificates.
88
89 RFC 6488
90 Signed Object Template for the Resource Public Key Infrastructure
91 (RPKI).
92
93 RFC 7730
94 Resource Public Key Infrastructure (RPKI) Trust Anchor Locator.
95
97 The rpki-client utility was written by Kristaps Dzonsons
98 <kristaps@bsd.lv>.
99
100BSD December 31, 2019 BSD