1RPKI-CLIENT(1)            BSD General Commands Manual           RPKI-CLIENT(1)
2

NAME

4     rpki-client — produce valid route announcements
5

SYNOPSIS

7     rpki-client [-fnqrv] [-e rsync_prog] tal ...
8

DESCRIPTION

10     The rpki-client utility produces all route announcements starting with
11     trust anchor locators.  It uses openrsync(1) to fetch certificates, mani‐
12     fests, revocation lists, and route announcements themselves.  Its argu‐
13     ments are as follows:
14
15     -e rsync_prog
16             Use rsync_prog instead of openrsync(1) to fetch repositories.  It
17             must accept the -rlt and --delete flags and connect with rsync-
18             protocol locations.
19
20     -f      Accept out-of-date manifests.  This will still report if a mani‐
21             fest has expired.
22
23     -n      Assume that all requested repositories exist: don't update.
24
25     -q      Don't emit any route statements.
26
27     -r      Don't parse certificate revocation files.  This additional step
28             can take a long time.
29
30     -v      Specified once, prints information about status.  Twice, prints
31             each filename as it's processed.
32
33     tal     A trust anchor locator (TAL) file.
34
35     rpki-client produces a list of unique roa-set statements as specified by
36     bgpd.conf(5) on standard output.
37

EXIT STATUS

39     The rpki-client utility exits 0 on success, and >0 if an error occurs.
40

SEE ALSO

42     openrsync(1) bgpd.conf(5)
43

STANDARDS

45     The following standards are used or referenced in rpki-client:
46
47     RFC 3370
48          Cryptographic Message Syntax (CMS) Algorithms.
49
50     RFC 3779
51          X.509 Extensions for IP Addresses and AS Identifiers.
52
53     RFC 4291
54          IP Version 6 Addressing Architecture.
55
56     RFC 4631
57          Classless Inter-domain Routing (CIDR): The Internet Address Assign‐
58          ment and Aggregation Plan.
59
60     RFC 5280
61          Internet X.509 Public Key Infrastructure Certificate and Certificate
62          Revocation List (CRL) Profile.
63
64     RFC 5652
65          Cryptographic Message Syntax (CMS).
66
67     RFC 5781
68          The rsync URI Scheme.
69
70     RFC 5952
71          A Recommendation for IPv6 Address Text Representation.
72
73     RFC 6480
74          An Infrastructure to Support Secure Internet Routing.
75
76     RFC 6482
77          A Profile for Route Origin Authorizations (ROAs).
78
79     RFC 6485
80          The Profile for Algorithms and Key Sizes for Use in the Resource
81          Public Key Infrastructure (RPKI).
82
83     RFC 6486
84          Manifests for the Resource Public Key Infrastructure (RPKI).
85
86     RFC 6487
87          A Profile for X.509 PKIX Resource Certificates.
88
89     RFC 6488
90          Signed Object Template for the Resource Public Key Infrastructure
91          (RPKI).
92
93     RFC 7730
94          Resource Public Key Infrastructure (RPKI) Trust Anchor Locator.
95

AUTHORS

97     The rpki-client utility was written by Kristaps Dzonsons
98     <kristaps@bsd.lv>.
99
100BSD                            December 31, 2019                           BSD
Impressum