1. Second Annual Meeting of the Romanian Tier-2 Federation RomanianGRID CA STATUS 05.12.2008 Cosmin Nistor; Alexandru Bobe Romanian Space Agency (ROSA)

2. agentia spatiala romana - romanian space agency RomanianGRID CA RomanianGRID CA was established and is operated by the Romanian Space Agency (ROSA), a public institution supervised by the National Authority for Scientific Research – Ministry of Education and Research in Romania. Purpose: A top level Certification Authority to provide PKI services for the GRID activities of the Research and Academic communities in Romania

3. agentia spatiala romana - romanian space agency RomanianGRID CA The CP/CPS document describes the rules and procedures followed by the RomanianGRID CA for issuing certificates. It is structured in accordance with RFC 3647. Document name “RomanianGRID CA Certificate Policy and Certification Practice Statement” Version1.4 Document date23 September 2007 O.I.D.1.3.6.1.4.1.27103.9.1.2.1.1.4

4. agentia spatiala romana - romanian space agency RomanianGRID CA RomanianGRID CA Status RomanianGRID CA reached the “Production” status on the 9 th of October 2007, when the CA was included in the IGTF Distribution of Authority Root Certificates https://dist.eugridpma.info/distribution/igtf/

5. agentia spatiala romana - romanian space agency RomanianGRID CA EUGridPMA

6. agentia spatiala romana - romanian space agency RomanianGRID CA Facts and Figures after 1 Year

7. agentia spatiala romana - romanian space agency RomanianGRID CA IFIN-HH - Bucuresti ISS - Bucuresti UPB - Bucuresti ICI - Bucuresti UTC-N – Cluj-Napoca ROEDUNET-IASI - Iasi ITIM – Cluj-Napoca UVT - Timisoara UB - Bucuresti UCv - Craiova CSA-INCAS - Bucuresti INCDMF - Bucuresti Registration Authorities Nov 2007 – 6 Dec 2008 - 12 Registration Authorities Nov 2007 – 6 Dec 2008 - 12

8. agentia spatiala romana - romanian space agency RomanianGRID CA Certificates Root certificate (CA certificate) validity: Saturday, September 30, 2017 7:56:22 PM GMT+03:00 User / Server valid certificates Nov 2007: 24 / 32 (56) Dec 2008: 51 / 60 (111) Total certificates 111 valid / 15 revoked / 46 expired

9. agentia spatiala romana - romanian space agency RomanianGRID CA RAUser certsServer certs IFIN-HH138 ISS86 UPB59 ICI617 UTC-N116 ROEDUNET-IASI1 ITIM3 UVT5 UB33 UCv1 CSA-INCAS13 INCDMF ROSA2

10. agentia spatiala romana - romanian space agency RomanianGRID CA Incidents CVE-2008-0166 vulnerability (May 2008) “OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-base operating systems uses a random number generator that generates predictable numbers, which makes it easier for remote attackers to conduct brute force guessing attacks against cryptographic keys.” All IGTF accredited CA run tests on their certificates. Fortunately RomanianGRID CA issued only 1 affected certificate. Action taken: certificate revocation

11. agentia spatiala romana - romanian space agency RomanianGRID CA Thank you