Make sure router 1 is advertising connected routes to router 2.
Create a loopback interface on router 1 with an IP in that range. For example
interface loopback 0
ip address 10.64.95.66 255.255.255.255
Use the loopback as the source interface for ssh
ip ssh source-interface loopback 0
Here's the IOS-XE documentation for configuring BGP MD5 authentication, it's pretty straight forward. However, if there is something specific that isn't clear, please update your question.
Though do be aware that Juniper has a couple of options for authentication authentication-key and authentication-key-chain, they set different options in the TCP header ...